last executing test programs: 5.364519504s ago: executing program 4 (id=1818): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xcd, &(0x7f0000000600)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x3, 0x5, 0xbf, 0x66, 0x0, 0x67, 0x1, 0x0, @private=0xa010102, @local, {[@generic={0x94, 0x4, "7dbb"}, @ra={0x94, 0x4, 0x1}]}}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x6, 0x0, {0x26, 0x4, 0x0, 0x3, 0x6, 0x65, 0x5, 0x4, 0xc, 0x400, @rand_addr=0x64010100, @loopback, {[@ssrr={0x89, 0x1f, 0xe5, [@loopback, @local, @empty, @loopback, @rand_addr=0x64010102, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0xc, 0x4d, 0x3, 0x9, [{@rand_addr=0x64010102, 0x6}]}, @ssrr={0x89, 0xb, 0x5, [@rand_addr=0x64010100, @empty]}, @cipso={0x86, 0x3b, 0x1, [{0x6, 0x2}, {0x0, 0x3, 'K'}, {0x5, 0x7, "2351daba6c"}, {0x6, 0xc, "32590a112f58e8179b91"}, {0x6, 0x3, 'V'}, {0x7, 0xb, "0da53affca23b032d2"}, {0x5, 0x8, "d56ec24d3b10"}, {0x1, 0x5, "8905e4"}, {0x7, 0x2}]}, @generic={0x7, 0x2}, @ssrr={0x89, 0xb, 0xfe, [@local, @multicast2]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}, 'L@f'}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010400000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000340000000390c000b400000000000000008140000001000010000000000000000000084000aebb5ed988699b25ea84984f73f15e917362c"], 0x80}}, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000001600)="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", 0xe81, 0x48010, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r3) (async) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt(r5, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002ab97000ffdbdf2504000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24004854) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20540, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="4400000013002f0a2bbd7000fddbcf2507006800", @ANYRES32=r6, @ANYBLOB="186301000000000024001a8009000100766c616e000000001400048010"], 0x44}}, 0x8004) 5.167015106s ago: executing program 4 (id=1820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x31, 0x4) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r4, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x10, 0x80}, 0x94) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x767}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000002000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000bc0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x74}, [@generic={0x1, 0x6, 0x4, 0x6, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x4, 0x8, 0x6, 0xffffffffffffffff, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000500)='GPL\x00', 0x4, 0x66, &(0x7f0000000ac0)=""/102, 0x41100, 0x22, '\x00', 0x0, 0x764853cf3a19568a, r0, 0x8, &(0x7f00000005c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x2, 0x7, 0xd}, 0x10, 0x244cb, r5, 0x4, 0x0, &(0x7f0000000b80)=[{0x4, 0x3, 0xb, 0x6}, {0x4, 0x1, 0xb, 0x4}, {0x3, 0x3, 0x6, 0x1}, {0x2, 0x3, 0x3, 0x5}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="1a000000000000000000f1ff0000000018110000", @ANYRES64=r7, @ANYBLOB="0000000000000000b70200000200"/28, @ANYRESDEC=r1, @ANYRES8=0x0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x0) splice(r10, 0x0, r12, 0x0, 0x2, 0xe) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x1000004, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0xfffffff6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xcdc3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0xa, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x40, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0xd, 0xfffffff7, 0x200}, 0x10, r4, 0x0, 0x2, &(0x7f00000003c0)=[r0, r0, r0, r0, r6, r7, r0, r13, r0], &(0x7f0000000400)=[{0x5, 0x4, 0xe, 0x3}, {0x5, 0x1, 0x7, 0xa}], 0x10, 0x3}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r14 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r14, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) 4.236432819s ago: executing program 3 (id=1831): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000180)=0x6) close(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x62a}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaacaf66222e6aa86dd604300931855c8b500103afffe800000000000000000000000000000ff020000000000000000000000000001860090780000410000000000bdbc85ed5d123632b4ba681954fc71dbd233f71291a6835c28e594756b5eaf042a1d7392ccc5d8ae4a366c518eea784413e83c166cf7f11f73355e8fc148cf102f07fa6008417b9a5aba334a7e07384fa893f38bb9e0836b2e44c152193e46f0a205b0c75e34202ccea771e1acbca0c4199dbbf5a672e3e94e0aa2cc871a1a7ece3e8d9fd4d90f07abaa03ad622d8e595d73bcf02bc0f85ccf91fef0f8173444f4d5448dd65f08bf88b800af07638bef"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10) socket$inet6(0x10, 0x2, 0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x89fc, &(0x7f0000000040)={'bond0\x00', 0x10000}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 4.14623657s ago: executing program 4 (id=1834): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000"], 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100010882848b960c1618"], 0x2e) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 3.101826932s ago: executing program 0 (id=1838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 3.047154718s ago: executing program 0 (id=1839): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd02000000000000000000000000000000000000000000008401050020010000000000000000000000000001000000002b00000000000000ac14140c000000000000000000000000000000000100ff00000000000000000000000000fc020000000000000000000000000004000000003200000000000000000000000000000000000000000000000000000009242f"], 0x23c}}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="08150000ff05110400000000000000000100000554020100000000ffffff7f00000000000000003ffa00f3a9cebc342a903bfbab79968fe9fa43a6919561b77def4622333ae97baf9c9507940fc09d5063"], 0x1508}}, 0x0) socket$kcm(0x29, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd02000000000000000000000000000000000000000000008401050020010000000000000000000000000001000000002b00000000000000ac14140c000000000000000000000000000000000100ff00000000000000000000000000fc020000000000000000000000000004000000003200000000000000000000000000000000000000000000000000000009242f"], 0x23c}}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="08150000ff05110400000000000000000100000554020100000000ffffff7f00000000000000003ffa00f3a9cebc342a903bfbab79968fe9fa43a6919561b77def4622333ae97baf9c9507940fc09d5063"], 0x1508}}, 0x0) (async) 2.958857604s ago: executing program 3 (id=1841): unshare(0x22020600) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000580)=@can, 0x80) socket$inet6(0xa, 0x3, 0x20) socketpair(0x1e, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)=0x31) 2.932872888s ago: executing program 0 (id=1842): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0xb, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x3}, {0x8, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240000c4}, 0xc000) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000180)=0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r5}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000047c0)=r4, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x18, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x48010) 2.720532603s ago: executing program 3 (id=1845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xc, 0x800000, 0x3, 0x12040, 0xffffffffffffffff, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x80000001, 0x2, 0x5, 0x5, @void, @value, @value=r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r2, 0x0, 0xa0028000}, 0x86) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) write$tun(r0, 0x0, 0x0) 2.576394144s ago: executing program 3 (id=1847): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) getsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, &(0x7f0000000280)) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000190081044e81f782db4cb90402200800fd007c05e8fe55a108001e000140cde8dfe90e4190000900ac00060211000000160012000a0002000d48035c3b61c1d67f01282e8d614230a68000a007a290457f01a705000000000000009100005ee4e11b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e603a6a8a9826835d3a71d95667e006dcdf63951f2155e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e971ad9d3ac052f6dfe4f36bcf903ece981e8df37df7f8af2f28f", 0xfcc0}], 0x1}, 0x40000) 2.328975745s ago: executing program 3 (id=1851): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000000c0)="0000596f9af79b65254b013ce120df0800b9e27ef800832b83fa12713c35b1cfcdfdf8f99cce6a1ad83ba6eb2b046eb41f2328b245bc8136e7d2c9e43bb93c89c37caadd3857b434a11bcbcdaa3aa01cf9686601b939cca674ffdfb69c4875d31334d600726a7aefa4e1964e2dfe6e810f48909550fdcaffc785375250b32142dafe87ec98ac82efa34baee6816cd3a52d8b048af17c836c8e8e94d78075554d065aba634bd6b87bdc0d1dee6149d81a3e89ecdf1dd982aca74ccce598aab287e85164b5b5623e75b12a836563d85187ae7b898da6a18ec235", 0xd9) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='v', 0x1}], 0x1f) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x80000004, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r9 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r10, @ANYBLOB="0800320000000000050033"], 0x2c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0x25}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x10}, @IFLA_GRE_FLAGS={0x8, 0xd, 0xff}]}}}]}, 0x50}}, 0x0) r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r12, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa321", 0x71}], 0x1}}], 0x2, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r13, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) sendmsg$TIPC_NL_MON_PEER_GET(r13, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x204, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3fe1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x85f}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x609a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x58be}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7a8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x80}, 0x4000955) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r14) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 2.240493428s ago: executing program 1 (id=1852): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0}, 0x20004014) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x52}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.180399667s ago: executing program 4 (id=1853): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2f0c5}]}, 0x3c}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$HCIINQUIRY(r1, 0x800448f0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r2) 2.179198055s ago: executing program 2 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x1c}], 0x1}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[], 0x1c}], 0x1}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) (async) 2.065652669s ago: executing program 3 (id=1855): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x5) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) write(r4, &(0x7f0000003300)="ac", 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x65, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000440), &(0x7f0000000800), 0x8, 0xec, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000009c0)=[@in6={0xa, 0x4e24, 0x5, @local, 0x7}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x5, @loopback, 0x6}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x800, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, @in6={0xa, 0x4e20, 0x600000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe7}], 0x90) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r8) sendmmsg$alg(r8, &(0x7f0000009000)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="9c2e044eb4", 0x5}], 0x1, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8010}], 0x1, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000440)=""/127, 0x7f, 0x0, &(0x7f00000000c0)=""/5, 0x5}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000ed1900000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b3a48d484c91af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f0000000000000085000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x0, &(0x7f0000000280), &(0x7f0000000100)='syzkaller\x00', 0xffffff69, 0x34, &(0x7f0000000300)=""/52, 0x40f00, 0x8, '\x00', r5, @fallback=0xc, r4, 0x8, &(0x7f0000000640)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x3, 0x5, 0x2, 0x18}, 0x10, r9, r4, 0x9, &(0x7f00000006c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000700)=[{0x4, 0x4, 0x4}, {0x0, 0x4, 0x3, 0x2}, {0x1, 0x1, 0x4}, {0x5, 0x3, 0x6, 0x4}, {0x2, 0x2, 0xe, 0x2}, {0x1, 0x1, 0xb, 0x7}, {0x2, 0x2, 0x5, 0x5}, {0x3, 0x5, 0x2, 0x6}, {0x4, 0x5, 0x5, 0xc}], 0x10, 0x3da}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x1c0d}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6d}}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x80000000, 0xb5, &(0x7f0000000a80)=""/181, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x6, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000540)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000580)=[{0x2, 0x4, 0x10, 0x1}, {0x3, 0x4, 0x9, 0x7}, {0x3, 0x1, 0xd}, {0x1, 0x1, 0x8, 0xb}, {0x5, 0x1, 0x0, 0x4}, {0x2, 0x5, 0x2}], 0x10, 0x4}, 0x94) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, r10, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000440)=ANY=[@ANYRESDEC=r11, @ANYRES64, @ANYBLOB="8dcdced89d11465dbf62a324b5dea3b724bf135fb281c34ac7ef13eb32ed5eeb9add556e1d"], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) 2.051679134s ago: executing program 1 (id=1856): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) socket$packet(0x11, 0x2, 0x300) socket$can_raw(0x1d, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/75, 0x4b}], 0x1, &(0x7f0000000600)=""/87, 0x57}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x88000f01}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x48}}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.036745938s ago: executing program 2 (id=1857): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x3}}}], 0x20}}], 0x1, 0x4040880) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x0, 0x2, @vifc_lcl_addr=@rand_addr=0x64010101, @private=0xa010100}, 0x10) 2.035207805s ago: executing program 4 (id=1858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7fe}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, r2, 0x813, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x4008000) pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r6 = socket$qrtr(0x2a, 0x2, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) connect$pppoe(r8, &(0x7f0000000140)={0x18, 0x0, {0x0, @broadcast, 'team_slave_0\x00'}}, 0x1e) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r6, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000480)) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32=r9, @ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'bond_slave_1\x00', 0x800}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000380)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.924343037s ago: executing program 0 (id=1859): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001000000000000f1ff000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000208000140000000050600030076657468315f6d6163767461700000000900010073797a31"], 0xe8}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c0000001000010800"/20, @ANYRES32=r4, @ANYBLOB="31200000000000005400198014000400ecf822bc3cbd24b6"], 0x7c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 1.864769274s ago: executing program 2 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001600)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0x450, 0x2, [@TCA_CGROUP_POLICE={0x44c, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0xe1, 0x2, 0x1, 0x4, 0x4, 0x5, 0x769, 0x1, 0x3, 0xa930, 0x3, 0x1, 0xffffffff, 0x7, 0x4, 0x1a9, 0xacd, 0xd51b, 0x80000001, 0xffff, 0x8, 0x4, 0x8, 0xb4, 0x0, 0x3, 0x3, 0x9, 0x1, 0x5, 0x8000, 0x6c, 0x8001, 0x9, 0xf5, 0xd5aa, 0xa, 0x9, 0x1fe0, 0x7, 0x8001, 0x80000000, 0x0, 0x7ff, 0x4, 0x7f, 0x2, 0xfffffffa, 0x2787, 0x9, 0x3, 0x4, 0x9, 0x2, 0xf, 0x7ff, 0x80000000, 0x6, 0x3ff, 0x0, 0x800, 0xfffffff8, 0x7ff, 0x8, 0xfcec, 0x8, 0x1000, 0x5, 0x6, 0x80000000, 0x7, 0x3, 0x300000, 0x93c6, 0x8, 0x8000, 0x3, 0x4, 0x7ff, 0x8, 0x3, 0x9, 0x4, 0x1, 0x3, 0x8, 0x3, 0x1, 0x401, 0xd9, 0x5, 0x5, 0x5, 0x9, 0xfffffffb, 0x8, 0x7, 0x23, 0xcf2c3adc, 0xa, 0x5, 0x40, 0xf94, 0x4, 0x7fff, 0x2, 0xb0, 0x2, 0x1, 0x12e, 0x6, 0x6, 0x3, 0x9, 0x8, 0x908, 0x0, 0x4, 0x17, 0x0, 0xf079, 0x7ff, 0x5, 0x1, 0x6, 0x7f, 0x7558, 0xfffffff0, 0x6, 0x5, 0x583, 0x2, 0x6, 0x80, 0xacd838f8, 0x7, 0x6, 0x44, 0xb3c6, 0xff, 0x5, 0x7, 0x9, 0xca, 0x5, 0x7, 0x6, 0x2, 0x4, 0x800, 0x8, 0x0, 0x9, 0x895, 0x81, 0xfffff515, 0x4, 0x9ae8, 0x4, 0x821, 0x8, 0x80000001, 0x800000, 0x8c1, 0x1fd8, 0x84, 0x8, 0x5, 0x7f, 0x8, 0x0, 0x2, 0x2, 0x5, 0x3, 0x8000, 0x8, 0x8, 0xff, 0x4, 0x5, 0x80, 0x620, 0x8b, 0x9, 0x5, 0x6, 0x8, 0x7, 0x268a, 0xffff, 0xfffffffc, 0x1, 0x8da3, 0x4, 0x0, 0x8, 0x10000, 0x3, 0x4, 0xfffffffb, 0x2, 0x2, 0x1ff, 0x0, 0x9, 0x0, 0x401, 0x80, 0x625d636f, 0x80, 0x32a6, 0x10000, 0x3, 0x10, 0xd8a1, 0x4e4, 0x7, 0x8, 0x4, 0x9, 0x7, 0xaf8, 0x220f, 0x41, 0xc, 0x7, 0x8001, 0x8d52, 0xbd3, 0x11ed, 0x2, 0xdf, 0x7f, 0xfffffffc, 0xff, 0xe, 0x5, 0x8, 0xfffff52d, 0x10, 0x4659, 0x200, 0x61f, 0xfffffffa, 0x7f, 0x1, 0x60a, 0xffff2d02, 0x7, 0xb8d, 0xb, 0x5, 0xa, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xaa1, 0x6, 0x0, 0x0, 0x7, {0x8, 0x0, 0x5, 0xc, 0x4, 0x8}, {0x1, 0x2, 0x7, 0x1, 0xb6}, 0x9, 0x0, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}]}]}}]}, 0x488}}, 0x20040000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r5, 0x25, 0x15, @void}, 0x10) 470.497985ms ago: executing program 2 (id=1861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020600) (async) r7 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r2, 0x1, 0x20, 0x0, 0x4, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@rand_addr=0x64010100, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x4, [0x9]}, @noop]}}}}}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x4d, 0x3, {0x0, 0x1, 0xffffffffffffffff}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) 454.954268ms ago: executing program 1 (id=1862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) 344.206689ms ago: executing program 0 (id=1863): setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6787bdc5, @mcast1, 0xe254}, {0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x81}, 0x80}, 0xffffffffffffffff, {[0x9, 0x10000, 0x3, 0x44c, 0x6, 0x9, 0x6, 0x10001]}}, 0x5c) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f", 0x7) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56149, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xfff3}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}]}}]}, 0x40}}, 0x48010) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e21, 0x6787bdc5, @mcast1, 0xe254}, {0xa, 0x4e23, 0x2, @private2={0xfc, 0x2, '\x00', 0x81}, 0x80}, 0xffffffffffffffff, {[0x9, 0x10000, 0x3, 0x44c, 0x6, 0x9, 0x6, 0x10001]}}, 0x5c) (async) syz_init_net_socket$ax25(0x3, 0x3, 0xc4) (async) socket(0x10, 0x80003, 0x0) (async) socket$inet6(0x10, 0x3, 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f", 0x7) (async) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56149, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xfff3}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x3}]}}]}, 0x40}}, 0x48010) (async) getsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 330.239196ms ago: executing program 1 (id=1864): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L'], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) 268.03231ms ago: executing program 2 (id=1865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x100, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, 0x4}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@empty, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x2b, 0x80801, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="97eb010018000000000000020c000006a2934900020000000000005362d2"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20080c40) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000000)=0x2, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00110000000000000c0002000100000015000000060003"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0xc6b, 0x5, 0x3}) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000000)={0x2f, @multicast1, 0x4e24, 0x1, 'lblc\x00', 0x1e, 0x3, 0x36}, 0x2c) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x64010102, 0x100, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0}, 0x4}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@empty, @in=@multicast2, @in6=@local, 0x3c, 0x4, 0x0, 0x2, 0x2, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket(0x2b, 0x80801, 0x1) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="97eb010018000000000000020c000006a2934900020000000000005362d2"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20080c40) (async) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) (async) setsockopt$inet6_mtu(r1, 0x29, 0x1e, &(0x7f0000000000)=0x2, 0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000006800010003001000fdffff7f00110000000000000c0002000100000015000000060003"], 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0xc6b, 0x5, 0x3}) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r6, 0x80089419, &(0x7f0000000100)) (async) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000000)={0x2f, @multicast1, 0x4e24, 0x1, 'lblc\x00', 0x1e, 0x3, 0x36}, 0x2c) (async) 201.118729ms ago: executing program 0 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x78, 0x4) sendmmsg$inet6(r1, &(0x7f0000009940)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x6, @loopback, 0x3b1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x311}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8044) socket$kcm(0x10, 0x400000002, 0x0) close(0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000240)) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0xfffffffffffffe87) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x25, &(0x7f0000001500)={r7, @in6={{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x28f9fed5}}}, 0x90) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) unshare(0x62040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$unix(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000680)='`', 0x1}], 0x1, 0x0, 0x0, 0x4000}, 0x1) recvmmsg$unix(r4, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/134, 0x86}], 0x1}}], 0x1, 0xa120, 0x0) ioctl$SIOCX25GSUBSCRIP(r4, 0x89e0, &(0x7f0000000140)={'wg1\x00', 0xfffffffffffeffff, 0x6}) 200.634741ms ago: executing program 1 (id=1867): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$inet6_int(r1, 0x29, 0xce, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002180)="f8d1c77d6dcbd92e9497d9ab1af5a50c00823b80a869df40c71b29ba", 0x1c}, {&(0x7f00000021c0)="28564cac5c4fd196b78495035d77cf067cfb87ad16e60bb969ff4930b0682e1f6b943c89e148f96543641d698430d4c66b705c5d6ffa8c041665f822468a31bd359abf8afad40bf978862619e145422848be54", 0x53}], 0x2}}, {{&(0x7f0000003580)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x3, 0x3, 0x2, {0xa, 0x4e23, 0x0, @remote, 0x8000}}}, 0x80, &(0x7f0000003780)=[{0x0}], 0x1}}], 0x2, 0x4000004) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c841}, 0x20000010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={0x0, 0x6f}, &(0x7f0000000340)=0x8) 139.341266ms ago: executing program 2 (id=1868): r0 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x73) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 112.312903ms ago: executing program 1 (id=1869): r0 = socket$kcm(0xa, 0x2, 0x73) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x300, 0x70bd2a, 0x25dddbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff3, 0xffff}, {0x1, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x8, 0x0, 0x0}}, 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r4, 0x6, 0x14, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000480)=ANY=[@ANYBLOB="01040000", @ANYBLOB="aa4712e47c1cbc9c9ed42fb420b5c125698a451be67b15f8a3", @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c0016804800088044000180"], 0x70}}, 0x0) close(r1) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) (async) r6 = accept(r0, &(0x7f0000000140)=@ll, &(0x7f00000001c0)=0x80) accept$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) (async) getsockopt$inet_mptcp_buf(r6, 0x11c, 0x1, &(0x7f0000000200)=""/157, &(0x7f00000002c0)=0x9d) listen(r1, 0x40000000) (async) sendto$inet6(r5, 0x0, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private0}, 0xfffffffffffffdd7, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x4}, 0x20008000) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) ioctl$AUTOFS_IOC_FAIL(r6, 0x9361, 0x94) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f0000000300)={0x0, 0xffffffffffffffff, [0x1000, 0x8001, 0x920, 0x6, 0x3, 0xffff]}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r9, 0x1, 0xe000, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x3, 0xa2}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x2]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x1}}}}}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000001300)={0x113c, r9, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10ec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "42091de9ddb01438a33a7ec46d69c36671ffb7e84b3a8714eac73d68d0a70697c9528664db419161fa37ed5ebac9ca7465371b472d7a1020b794e6b60ab5a39df9b5568c7fe48b74c95ed97270b90327e432581c6e3c4d2c7ab7a34aaf19b5fbd672e17984c0168d994a22441fbd0636dfaf94a323baa9db9e22647ab0046698aeb022c90352c6aa59018ff85fd4a5a8a3e921825014c12a27d47b3a31d1404401cb8a6698023d4d2f556f4f9113f9416da382431012a6cfe1901a1761fe6b17645a135ae48e4cdf3614b4d9fc667d8405c53d90f472324eb733a5cb7208d0cd7ec47c59c1bcda71eadb9652c592f76c92ac2f6a5d3d1d8a691534f8a6e2034c2aaf8433f229bc086bb1b7243f6bf39524d6d14fcb15cee27b5d14df800d91fe14e8b1aedc6ba54e846fcf54933490efd789bae16730a1f2abd1a5b1cde3013a9ba418d251f12706c2002f88a2db38b90b5f4f6f3ad71ce96f60053a724a03c1375da4b7c1c2a59eb263d842de8d068ce6b895f9a1d8cd8837eaadf4cbffe79cd5d184e1b9da23bf22918fddbc6793701c5d5a6a1ad3d234806c757fdccc6c5af0f8d4e1e4d00079d954d5cd4430ee956a4dbbf2800ce0ef6caee6fc9e74cb216d5a69fea5aaaa32271daaed83fdfbfbac55240d2c60cdca4f9bae46e69c44e3aaf87e17ab71b0e1a6f76b364d4c27acdaf79f6b3dd8734765a5172ac9a9a2cef607105b531c5ff3ac05d28ed1ddb9c39819ee5fd27697200a78019b50a0a803fcbcf9ef738619047510d8907739a3b6738c04054c29409369b94fb5f2567cc4d87daff48687a7a84dce0acddc4bd6ee3f9314d9d539f701d573ea4e7b21987bc229492c204f0fbf24ed2572a435b175c1ee46eff148d79066efcca8e9e425cfdf6c1d703b323ac8bf254968be95744cd3f018b25cc9fbdb5308489a935f058d2672eada4fa6479b925adee539e0f4518d4915421d31fc7b307c9f85e6fa2cc4074bc740b396997a3a8ff206baa4ababd001fd8cb94f8549558c975bf1e996aaaccf1f285ff20b26cbde930e1a8b45e8cccb7acf2c6d9cd8b522319c088e902877645e386e7b26a39cd4f5a83dc3ea1072784a216dfaec4084c61d348c3cf51d1eab74d2ed1f55cd34be51fe01cd24aec8394ded61a5d5d0381bdb4b994706217aefe6c5c2269a2b6eff0b1547e9c30e7107e80c32a41210bd81c7b0afe097009dc3c70603924163b38d982aba6eb6bd5194781441ee328a1d38cda5803534c55d729d235a97975cff36445fdd79d4fc59994e84a1dd25e59964d6164bbfcf0ff0ecc369a383d0bddc8291ea75cb1911ed75e224b16b8fb7fc979451303da22caf3100d605c3d0aedf09be7e13ed86127d9d456819801fd064e783bd05a141817c54e3b666dc0ea7dae46a54c2855ab208063939fb31278b93415e70db87e636e0a0ac5e9f2ce6752d8bef76cdf624fb763356de444e6a935183d1931d09e4576adb76efcb182c145d2eb4a0318838a17343b8a133baeaa569e304389a46b0cea64751f85f12877bc8a3522998c1f3e0191a5b249e356d00d08629d5beeab8b91582633b299198be16900f988d69a42f1a8c239a7d9ab24bdbb528e8ca6271b37a4b84ec9b5bf2a79bf6c844de24eca7526178e94c9b2a01154feb37b6593eac7a088dd40c488573b3a331b36221ad0ea305c699a29b85a531c6d00c0c0e47db3a36a10273c12bb3a5210a3887e2b2631af521f21fdd53379eabb2a86338bc657f9a0e819b5348def5ae4f42537aee157294073f8061b862b0227ffdb3c8138024f2e188e043cdbae572279750cfd87380f5e3ca909ca716f1cd10d570fabb2b473e730975ddc8a42243898b38c9b4b55968672f3e516181a0f589a58ac832e471926c18943ee1b684fcf11fc4e02e7c9a21167d66fbeb3c9df93f5ab728ea6b447753c99fc4d80ad4c52f6698a8fa2b315fa4d03516d11c8533c49cd58386c3db8f5f11b9d268e70a2cb32ab5ee113aedc738e591702c2ac37641628ce546679739273a10e7c79900206433207968b0b46215bf791f5943f47a53e194fa224ad26a0cc92ce4fe3832c9f08a7ac2cb9970b24be3f1a64c48eb73c78a6ebba80fd5b8197c89b639536de30b8f22373515fecd1faf5ec038e243ccc49a012289df0136feaac3501f94e4410df5c9cdd900f6071692f370fbca527ac358d4f2fb87a581cce88e614a8620b04b23c3f60c38c88ca78c8a94ae2d8ca6018f2d794a300a3c1ece0c4df83b660a494c2be57a3aebaacc674abbc974f8e26dcca6aa170f1d477fb6a94c7018c78d6f0d51db24619f9b5697180a57298da5594c707d006406a84f6fe9622a2f4a39d4f5240d25f907943092cba478d1ca0e654e7165bdb7823ec097f819ecf4ce15a0d92380c55f81f25dc5707de7971f2af5231dd9327d32189e3f5011dd6fd30413e14a392a3cd6f6048963df2fd9ed5bb1baedec7645e4f49fe73fe44ee73eb4b8a5ae5a63fa714ea26518b4b84ea2591ac1e960e4af1e8ca22cf8e433ec85758027bcae312de4c8cfa14648f6505ab54d190311a9133797098a531e23a1ec5cb34a3a8755167dc773ebc6e198e931d358ae5b7f5c8bd3d70e42e0d373a4dbdbe8540a1c8ebdc4117c9f30c4afa85ee608fd143e669f2ccc33acab1876afe61f7abd9c7e1e970500121052516362e5d863df070c076b9f12a4cb75e1ae796d1731911624325acc6ed88ec14ae4ca25d3df5fbe57f1968b73adc4d0ad5afccebc2e292e9fe257d899bb2693e3558aed0d7057020deb0ad7d4bcfd8a4887bc5d4e918dcc180464ddd6e8d455222e63a398a1e864d1fc05cc3607be5ccbc63906a08566a9fe27630c1dda30576b0e115d8016448bf4c1fa349889b24ddf4db86e078d3a3a51119912334b1b4b51282866d9561421def90498f191fc85458028194b40c8dcceaa19c6827bfa309f670f14b3e62105e2972bce9643fda2ff3505cc3c627ae591955b59f2866d0218b5b670a076e97793fb90f3c3bc3fef4f5994e96bdbd1caee3f5ca6435e271ca7e2c82aaa784fb09806c318d1e9a0719dd8831231fb26d61445d0f8469f2f60240e3a206fa75f0b60543d97eb3de5dbb9864ad56f200b443892dd4058dbf7809a2252de3b88d4d446af009f5850657203fc1d175d1ac133266e8aa52d6cd407e1721562b79b010bcc7c0a0d2c46d1367f52789d788ec5f689ca039afcc8d362d49c91486beff6cc66b6aaa1cdb5d3494460dc27fd5a3ac5505443ed925ef92f35776ce3642aab146dce44b1b0729c2d29c1fc2c79bba14d4b1bd0fa9d7af4dbb51e6e84cb052eb452148e0e656abbdf7e86a6c4cd59957c69dd087a70fb5bb15a4dd75ee6fe4cdbca40b3e7fb1f7f5136043a2bf1c73298a8c1e058c3640387e5a0b34a3784dee2730176f4b0cdb2464048ce25ddf4b3d606af838b8cbcaf8209860a566adf57a533a019a706887f02d3c8ea1608c4b17b991d194f138a6daa8b62e431dd6c3449aad7bea97404860ff74a097258f82553f2deb500b168a2b6d566e2f57a3d22ce3b920e9d4af9e2b5b65be02d9449b1263e274979e6bb071c1a4a774c7cd74c1de820567747c19980bdd16a4d76951e96afbe8e435df348b69fce4eea98555d48b15a2b18a98fe842b7f1d5bb75f2f6c318d2ac1a9a84c7bf5b8c6594cd6220724a51e706015bd7bfa2ef250f0931af2ddcb521ace996c226ed90e427db12e4893e6312a10323493bff13bcdeec21399dec6352e733176ad07a5e6b148206e91191ad59d1e9bfea48080ebafe8aff60ad8d8dc8f970abfe51ad505d820bfefa956d327d19ce8a5faeb70f5346b9e5c5e83b8ef90b2e738b98b789398b8cf13b45762a11dc0c537abd031f4c500caf372288077e02079b212ef2bf74b3eaa8a8bd59b6f787ea51da3f8e597813f1a01436130b8a543d795906c4f17b4fd5f354127a7bbe35b6cc97c1a2651fe76c871b84afc560ae523e4133a30fafa5d64b696446af5de793c2654cb3bde6ab05598984b73c0059857d97cab5cd548c5677fdc34023e0d9616bbb4711d429dd229359aa3d4eece4ced4beac5c333891fe00fe15e38657ee61bce00687cab7e28115d735dd8151a4fffd527eb26cf621099735a66c3014035ad0449392768be5cf2454352c61a7f64cde9a9f6776928504b9b4b3c11b9c2e632b8a7dd854142adba17b637376acee152a3cb9fc8e6e3a4505c08f29ef76f42badc5c19df2b52a53be89e4065683d4410fda605db76a84d4ea92ab24fffb2ed0b9e16276c1e451a79e7eaf6cdc41834399d3e4c699afe3f3494647d62db390ddbd7c2dceae078413866eee3093cbd2c0237622248796fc53a1d1c65c6e6ed4b3d94e387eac82089efb9e5b42fbb00f5036793bb296b360e92828c516c5da4a5267334d2595fbe8d6089d3bea8a9cc7946988d5918920a6b46eb141ca94c533a567557b7dc680ae261c97add472cab4e2a97380d5d5b54f38de5d888f099afa34e73f0a7087276c13ff5a4e79184bae87218fa020f70b5947ef969e871467a952239e3c8e8c859cb7b3e69168e3c785c52552780dbd7bef3cc02ab9c78517b0115e653bccb96d5a5b7ea3adf37cd6aa0b957e4020080638303ccf1b9160286c932b57e26e17b6f48435971f39edf86bd9ce0b8fb2d343f050a134ece1eaf5100ea2478af31adf69c9b83281d6d038e204685634b7073994754fcce4194170d7253be17a4271d7a2ab8bc35acdda707670d50741f8f2606db047b8f71139829a612a7608942ba9a401fd5e3cd1a01a17c4ac6df73ea1e4d0db2a1a18b7a9bf52932b2b2b3bb0708d2ed0f361072a431772e69bf88b2d6c57fa8f80dd5d32595e7748f6263dbb80bba9c26214c490621f78cbb1f4d7c5147ee311c29b715af2ad1a4269a1744ad42eeda199d3ec73f8367e10d0fa70c71d839db5c9c917c0d22941a62cd942c5a0fc0514f5083b182a16ad64dc17a7c3da76f191250fde087f307a502911b7abedd65c8472fc7c3956744b2ecabe58019cbbae38e8593bd51c5b96634ce4e4c7fe1f91cc05a7628dd90a3a4a5c44196154256e8a485b704cc46490ca29f3266d318c52ff33d23b9c15b1e6ff9b3e31acf5ac8d3d36e859c908413052377e02dd43070b2ff625d453bdc633350e3ca1440f9dee484435698430f7d541da3ba64625f85649194aac827c80760a4e4fb2d1adc42eff974fcf76fff6f1c01f19a50e360a5298eac3d90e41a994f183a8bcf11c69e3d18778da9edab586ab19d789d3adea86814dad250e218716a318fa2b95f0899d9ee26368b2a69d9ed38c4dc1f175439f34639d3be174b4d2b42601aef815d8db629c8511d5125ffeec6f4d9fcf2fee754cdf9e2829b707520af04908c20535c5f322f910e4e3a997e96b594bde9e536f94c9513d035ae181e8db59a15fb73adfbc85cc2d793eeb68a08528fd86bbb0a312373bd747f6d0f90f0a4afb2da562c9221bc5326309a9dc3ee20a56e8a179e2255d6fd65134e10f3be2ea5146cd94a93f1cd70fc963cb697bc0015781add85520c91a05a267355f2b759143e0da9b47222e328c1c5aa1bb578590c08a74584ff259652a40ec70ccf802180b057be7520a90fcfc5ba8a2d40af918d466961e67410e5819f4b69f62f4a357786ea38815a1990457e460b5b241ce53ab9c221e5990ffea8eabca188439cc177b2d4870d22012c0d0953fecfcc9db64bd2fb3be9a3e77611574f58a2ab0e14712b34d130038e751f81ad7"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "1b61b967e3db2068613b09385de1110f2c9b88adc11e1f415cbc4e"}}, @TIPC_NLA_NODE_ID={0x94, 0x3, "eb4f45b72debd8fdac41c8211643577771202220c1f6e90301e63b1f97ff89d754d8a7fd3b0bf3a34fb2cb7f9844f2adcb445c1fc6b250655f60aee77e65e8d49e15c5c0d963aba61c629d7c3a67ca06f7ff891e9cfe746d2d9b7bf56acfa2ce41a15696b73db537029686dab32e32811cc3037604f54f0d871748306450ba22dcd7e3479b5ce3038466ab7777dd49eb"}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}]}]}]}, 0x113c}, 0x1, 0x0, 0x0, 0x82}, 0x8800) 0s ago: executing program 4 (id=1870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00100000000000003400128009000100626f6e6400000000240002800500010004000000080018"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000100)=0x987, 0x4) recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002780)=""/4071, 0xfffe}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000002700), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001f00)={0x1c, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r8, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x8080) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x78, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9148621}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) (async) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x78, r4, 0x400, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9148621}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x40000c0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=0x4, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7c0200000101010100000000000000000a00000940000180060003400003000006000340000200002c0001801400030000000000000000000000ffff6401010214000400fc02000000000000000000000000000118000d8014000400ff01000000000000000000000000000108001a400000a4a80c001080080003400000000008001a400000b6cbb80002802c00018014000300fc02000000000000000000000000000314000400000000000000000000000000000000001400018008000100e000000208000200e00000011400018008000100ac1414aa080002000000000006000340000200000c00028005000100010000000c00028005000100010000002c0001801400030000000000000000000000ffff00000000140004000000000000000000000000000000000014000180080001000a01010208000200ac1414aa28000480240001800600050001040000050003000d000000050003000300000006000400290600007c0001800600034000be00002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000000010c000280050001003a000000060003978e400003000006000340000300001400018008000100ac1414aa08000200ac1414bb1400018008000100ffffffff08000200ac1e01019800028006000340000000000c0002800500010084000000060003400004000014000180080001000000000008000200e00000022c00018014000300fe88000000000000000000000000010114000400fc01000000000000000000000000000106000340000400000c00028005000100110000000c00028005000100880000000c00028005000100110000000c000280050001003100"], 0x27c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) (async) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x27c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) kernel console output (not intermixed with test programs): tes in process `syz.2.425'. [ 128.030522][ T4963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 128.079141][ T7634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.426'. [ 128.175516][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 128.399969][ T7645] netlink: 'syz.2.429': attribute type 15 has an invalid length. [ 128.408245][ T7645] netlink: 666 bytes leftover after parsing attributes in process `syz.2.429'. [ 128.506512][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 128.645221][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 128.674700][ T7657] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 128.797039][ T4963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 128.970633][ T7673] lo speed is unknown, defaulting to 1000 [ 129.298226][ T7681] __nla_validate_parse: 2 callbacks suppressed [ 129.298242][ T7681] netlink: 44 bytes leftover after parsing attributes in process `syz.3.443'. [ 129.428744][ T7684] netlink: 48 bytes leftover after parsing attributes in process `syz.0.442'. [ 129.616780][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 129.682958][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 129.704838][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 129.730271][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 129.798387][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.446'. [ 129.923497][ T7701] lo speed is unknown, defaulting to 1000 [ 129.952614][ T7711] batadv0: entered promiscuous mode [ 129.959669][ T7711] vlan2: entered promiscuous mode [ 130.176930][ T7714] lo speed is unknown, defaulting to 1000 [ 130.356699][ T7724] netlink: 104 bytes leftover after parsing attributes in process `syz.4.453'. [ 130.409435][ T7733] netlink: 20 bytes leftover after parsing attributes in process `syz.4.453'. [ 130.927357][ T7751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.005254][ T7751] bond0: (slave rose0): Enslaving as an active interface with an up link [ 131.465569][ T7776] bridge0: entered allmulticast mode [ 131.483281][ T7778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.468'. [ 131.910744][ T4963] net_ratelimit: 13 callbacks suppressed [ 131.910762][ T4963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 132.086317][ T7807] netlink: 'syz.2.475': attribute type 6 has an invalid length. [ 132.195572][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 132.219351][ T7813] netlink: 'syz.1.477': attribute type 1 has an invalid length. [ 132.423474][ T7823] bond1: entered promiscuous mode [ 132.434145][ T7823] bond1: entered allmulticast mode [ 132.486669][ T7823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.512099][ T7804] pim6reg1: entered promiscuous mode [ 132.517593][ T7804] pim6reg1: entered allmulticast mode [ 132.557435][ T7826] pimreg: entered allmulticast mode [ 132.580194][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 132.696064][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.775025][ T7816] pimreg: left allmulticast mode [ 132.990951][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 133.146708][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 133.295086][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 133.414941][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 133.549656][ T7873] dvmrp8: entered allmulticast mode [ 133.626109][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 133.756091][ T7882] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 133.774427][ T7873] lo speed is unknown, defaulting to 1000 [ 133.785892][ T3493] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 134.061383][ T6367] udevd[6367]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 134.502995][ T7901] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 134.840498][ T7908] lo speed is unknown, defaulting to 1000 [ 134.910834][ T7927] __nla_validate_parse: 3 callbacks suppressed [ 134.910850][ T7927] netlink: 72 bytes leftover after parsing attributes in process `syz.4.500'. [ 135.130379][ T7942] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 135.677235][ T7963] netlink: 'syz.0.505': attribute type 6 has an invalid length. [ 136.144143][ T7983] tipc: Enabled bearer , priority 0 [ 136.230454][ T7983] syzkaller0: entered promiscuous mode [ 136.242158][ T7983] syzkaller0: entered allmulticast mode [ 136.372991][ T7983] tipc: Resetting bearer [ 136.452067][ T7991] netlink: 'syz.1.512': attribute type 11 has an invalid length. [ 136.806158][ T8003] syzkaller1: entered allmulticast mode [ 136.989945][ T36] net_ratelimit: 17 callbacks suppressed [ 136.989965][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 137.145208][ T4963] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 137.246393][ T6243] tipc: Node number set to 145915519 [ 137.295695][ T78] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 137.527270][ T5990] lo speed is unknown, defaulting to 1000 [ 137.533536][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 137.685855][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 137.798130][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 137.948250][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 138.221121][ T8041] netlink: 'syz.1.523': attribute type 26 has an invalid length. [ 138.225685][ T8049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.525'. [ 138.349181][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 138.477703][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 138.550982][ T8061] netlink: 'syz.0.528': attribute type 2 has an invalid length. [ 138.564966][ T8063] syz_tun: entered allmulticast mode [ 138.569537][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.528'. [ 138.622109][ T8063] dvmrp8: entered allmulticast mode [ 138.634854][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 138.906112][ T8062] syz_tun: left allmulticast mode [ 138.925031][ T8062] dvmrp8: left allmulticast mode [ 138.941105][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b955400: rx timeout, send abort [ 138.951197][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b956400: rx timeout, send abort [ 138.959946][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b955400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 138.975284][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b956400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 139.117596][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.532'. [ 139.192842][ T8078] netlink: 'syz.4.535': attribute type 12 has an invalid length. [ 139.210856][ T8078] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.535'. [ 139.633507][ T8093] lo speed is unknown, defaulting to 1000 [ 139.688818][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.4.540'. [ 140.141196][ T8126] lo speed is unknown, defaulting to 1000 [ 140.206139][ T8132] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.545'. [ 140.742535][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 141.011793][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.4.551'. [ 141.224479][ T8167] netlink: 'syz.3.555': attribute type 10 has an invalid length. [ 141.270797][ T8167] team0: Cannot enslave team device to itself [ 141.434358][ T8171] syzkaller1: entered promiscuous mode [ 141.453385][ T8171] syzkaller1: entered allmulticast mode [ 141.809550][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 142.065021][ T7838] net_ratelimit: 23 callbacks suppressed [ 142.065042][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 142.206030][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 142.247947][ T8202] tc_dump_action: action bad kind [ 142.355190][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 142.396572][ T8206] Bluetooth: MGMT ver 1.23 [ 142.470019][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 142.599409][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 142.825730][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 143.011542][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 143.026459][ T8226] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 143.041293][ T8225] IPVS: stopping backup sync thread 8226 ... [ 143.050572][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 143.075850][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 143.096935][ T8225] netlink: 260 bytes leftover after parsing attributes in process `syz.2.574'. [ 143.121254][ T8225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.574'. [ 143.161703][ T8225] netlink: 32 bytes leftover after parsing attributes in process `syz.2.574'. [ 143.196035][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 143.305001][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 143.447951][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 143.613456][ T8241] netlink: 'syz.0.577': attribute type 1 has an invalid length. [ 143.967106][ T8247] IPVS: persistence engine module ip_vs_pe_ not found [ 143.976925][ T8253] netlink: 72 bytes leftover after parsing attributes in process `syz.4.580'. [ 144.012937][ T959] IPVS: starting estimator thread 0... [ 144.123406][ T8255] IPVS: using max 29 ests per chain, 69600 per kthread [ 144.270936][ T8261] netlink: 'syz.1.582': attribute type 1 has an invalid length. [ 144.421817][ T8267] ip6tnl0: entered promiscuous mode [ 144.428882][ T8267] ip6tnl0: entered allmulticast mode [ 144.523328][ T8276] tipc: Enabled bearer , priority 0 [ 144.637061][ T8276] tipc: Disabling bearer [ 144.667761][ T8251] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 144.721979][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.742375][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.784831][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.819176][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.949472][ T8291] lo speed is unknown, defaulting to 1000 [ 145.268856][ T8308] __nla_validate_parse: 4 callbacks suppressed [ 145.268882][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.598'. [ 145.453221][ T8315] netlink: 248 bytes leftover after parsing attributes in process `syz.2.601'. [ 145.952358][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 145.996895][ T8354] tipc: Enabling of bearer rejected, media not registered [ 146.194725][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 147.459634][ T36] net_ratelimit: 16 callbacks suppressed [ 147.459656][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 147.499442][ T8365] lo speed is unknown, defaulting to 1000 [ 147.674883][ T8116] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 147.785097][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 147.896111][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 148.004704][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 148.121852][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 148.245255][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 148.355163][ T8116] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 148.464742][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 148.575082][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 152.544963][ T1154] net_ratelimit: 35 callbacks suppressed [ 152.544983][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 152.664802][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 152.774981][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 152.884889][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 152.994763][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 153.105009][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 153.214883][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 153.324892][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 153.434780][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 153.544825][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 157.615108][ T1154] net_ratelimit: 36 callbacks suppressed [ 157.615131][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 157.735243][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 157.854920][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 157.964790][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.074945][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.184699][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.294875][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.404937][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.515021][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.624872][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 162.694734][ T1154] net_ratelimit: 36 callbacks suppressed [ 162.694755][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 162.814745][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 162.925153][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.034965][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.144839][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.255102][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.364822][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.474892][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.585002][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.694964][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.764715][ T1154] net_ratelimit: 36 callbacks suppressed [ 167.764737][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.884698][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 167.994970][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.104747][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.214828][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.324952][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.434817][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.544893][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.654927][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.764952][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 172.844743][ T8119] net_ratelimit: 36 callbacks suppressed [ 172.844765][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 172.964796][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.075052][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.184670][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.295132][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.404764][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.524861][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.635628][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.744726][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.854727][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 177.934926][ T1154] net_ratelimit: 36 callbacks suppressed [ 177.934947][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.054854][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.164947][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.274701][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.385111][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.494699][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.604834][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.715150][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.824967][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.934943][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.015125][ T7838] net_ratelimit: 36 callbacks suppressed [ 183.015146][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.135101][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.244725][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.354979][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.475148][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.595232][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.704737][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.824808][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.934693][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 184.045206][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.044994][ T8119] net_ratelimit: 35 callbacks suppressed [ 188.045015][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.164816][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.274826][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.384730][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.494830][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.604965][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.725055][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.835171][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 188.944795][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 189.056072][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 193.144758][ T59] net_ratelimit: 36 callbacks suppressed [ 193.144777][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 193.264873][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 193.374713][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 193.485113][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 193.594760][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 193.704712][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 193.825065][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 193.934910][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 194.044927][ T8119] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 194.119867][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.155116][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 198.244820][ T59] net_ratelimit: 36 callbacks suppressed [ 198.244841][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 198.364832][ T59] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 198.474684][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 198.585017][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 198.694848][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 198.804827][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 198.914884][ T1154] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.034813][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.144765][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.254856][ T7838] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 200.122089][ T8411] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.617'. [ 200.135676][ T8413] netlink: 'syz.4.618': attribute type 6 has an invalid length. [ 200.141879][ T8405] can: request_module (can-proto-0) failed. [ 200.169072][ T43] IPVS: starting estimator thread 0... [ 200.205457][ T8417] syzkaller1: entered promiscuous mode [ 200.221209][ T8417] syzkaller1: entered allmulticast mode [ 200.308296][ T8423] netlink: 'syz.0.620': attribute type 1 has an invalid length. [ 200.395550][ T8416] IPVS: using max 26 ests per chain, 62400 per kthread [ 200.601323][ T8423] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.693178][ T8428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 200.710742][ T8428] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 200.748212][ T8428] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 200.813193][ T8431] veth3: entered promiscuous mode [ 200.822989][ T8431] bond2: (slave veth3): Enslaving as an active interface with a down link [ 200.841015][ T8438] erspan0: entered allmulticast mode [ 200.857367][ T8438] bond2: (slave erspan0): making interface the new active one [ 200.865998][ T8438] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 200.890542][ T8429] lo speed is unknown, defaulting to 1000 [ 200.988940][ T8444] tipc: Enabling of bearer rejected, already enabled [ 200.994515][ T8448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 201.152067][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 201.204201][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.623'. [ 201.274068][ T8451] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.295838][ T8461] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 201.354729][ T8461] netlink: 'syz.2.624': attribute type 6 has an invalid length. [ 201.434736][ T8463] netlink: 'syz.0.625': attribute type 6 has an invalid length. [ 201.491122][ T8461] netlink: 52 bytes leftover after parsing attributes in process `syz.2.624'. [ 201.812823][ T8474] lo speed is unknown, defaulting to 1000 [ 201.923153][ T8481] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.054144][ T8491] netlink: 'syz.2.630': attribute type 16 has an invalid length. [ 202.092865][ T8491] netlink: 'syz.2.630': attribute type 17 has an invalid length. [ 202.095741][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.4.628'. [ 202.181284][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 202.480774][ T8501] netlink: 'syz.1.631': attribute type 6 has an invalid length. [ 203.044085][ T8116] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.104206][ T8116] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.180445][ T8523] netlink: 'syz.1.634': attribute type 6 has an invalid length. [ 203.241493][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 203.260979][ T8116] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.273056][ T8528] netlink: 'syz.2.635': attribute type 6 has an invalid length. [ 203.288254][ T8530] netlink: 32 bytes leftover after parsing attributes in process `syz.4.633'. [ 203.297721][ T8116] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.820879][ T8548] netlink: 72 bytes leftover after parsing attributes in process `syz.4.641'. [ 204.399206][ T8564] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.909304][ T8583] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.145487][ T8590] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 205.301501][ T8583] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.471301][ T8583] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.751785][ T8583] bond0: (slave netdevsim0): Releasing backup interface [ 205.776952][ T8583] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.922452][ T8631] net_ratelimit: 15 callbacks suppressed [ 205.922469][ T8631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.984186][ T8628] lo speed is unknown, defaulting to 1000 [ 206.153970][ T8646] __nla_validate_parse: 3 callbacks suppressed [ 206.153987][ T8646] netlink: 32 bytes leftover after parsing attributes in process `syz.2.662'. [ 206.228280][ T8116] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.292403][ T8116] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.332621][ T1154] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.379365][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.434877][ T5183] Bluetooth: hci3: command 0x0406 tx timeout [ 206.444628][ T5183] Bluetooth: hci2: command 0x0406 tx timeout [ 206.450691][ T5183] Bluetooth: hci1: command 0x0406 tx timeout [ 206.460271][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.3.665'. [ 206.788482][ T8662] veth0_virt_wifi: renamed from veth0_macvtap [ 206.972247][ T8664] lo speed is unknown, defaulting to 1000 [ 207.349651][ T8689] rdma_op ffff8880547021f0 conn xmit_rdma 0000000000000000 [ 207.486826][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'. [ 207.674277][ T8708] netlink: 220 bytes leftover after parsing attributes in process `syz.3.675'. [ 207.792164][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.675'. [ 208.019987][ T8723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 208.173692][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 208.504945][ T5528] veth0_virt_wifi: left promiscuous mode [ 208.637750][ T8740] tipc: New replicast peer: 208.253.78.183 [ 208.653023][ T8740] tipc: Enabled bearer , priority 10 [ 208.671659][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 208.738867][ T8742] sctp: [Deprecated]: syz.3.683 (pid 8742) Use of int in maxseg socket option. [ 208.738867][ T8742] Use struct sctp_assoc_value instead [ 208.762619][ T8746] validate_nla: 2 callbacks suppressed [ 208.762636][ T8746] netlink: 'syz.0.684': attribute type 5 has an invalid length. [ 208.790387][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.684'. [ 208.865979][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.684'. [ 208.977831][ T8759] netlink: 'syz.4.686': attribute type 10 has an invalid length. [ 208.996637][ T8759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.026464][ T8759] team0: Port device bond0 added [ 209.068486][ T8765] nbd: must specify at least one socket [ 209.179971][ T8434] udevd[8434]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 209.268163][ T8772] netlink: 'syz.3.689': attribute type 21 has an invalid length. [ 209.309713][ T8434] udevd[8434]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 209.462137][ T8774] netlink: 'syz.4.690': attribute type 12 has an invalid length. [ 209.472447][ T8778] openvswitch: netlink: Multiple metadata blocks provided [ 209.613299][ T8784] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 209.812005][ T8790] gretap0: entered promiscuous mode [ 209.868058][ T8784] bond0: (slave wlan1): Releasing backup interface [ 209.943215][ T8784] bond3: (slave ip6gretap1): Removing an active aggregator [ 209.991154][ T8784] bond3: (slave ip6gretap1): Releasing backup interface [ 210.008768][ T8784] bond3: (slave ip6gretap1): the permanent HWaddr of slave - 5e:98:80:b1:8b:8c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 210.065247][ T8784] bond3: (slave veth5): Releasing backup interface [ 210.364842][ T8812] netlink: 'syz.4.699': attribute type 6 has an invalid length. [ 210.495189][ T8818] netlink: 'syz.3.701': attribute type 1 has an invalid length. [ 210.719076][ T8822] bridge9: entered promiscuous mode [ 210.724340][ T8822] bridge9: entered allmulticast mode [ 211.355755][ T8840] __nla_validate_parse: 6 callbacks suppressed [ 211.355772][ T8840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.707'. [ 211.375371][ T8842] netlink: 'syz.4.708': attribute type 5 has an invalid length. [ 211.402167][ T8842] tipc: Enabling of bearer rejected, already enabled [ 211.843312][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.713'. [ 211.925276][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.713'. [ 211.958073][ T8862] netlink: 32 bytes leftover after parsing attributes in process `syz.4.713'. [ 212.146131][ T8873] netlink: 5740 bytes leftover after parsing attributes in process `syz.2.715'. [ 212.204860][ T8873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.206292][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'. [ 212.344451][ T8879] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 212.458927][ T8884] netlink: 'syz.1.717': attribute type 6 has an invalid length. [ 212.654334][ T8893] netlink: 'syz.0.719': attribute type 6 has an invalid length. [ 213.285878][ T8909] netlink: 68 bytes leftover after parsing attributes in process `syz.3.732'. [ 213.673228][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 213.703405][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 213.880729][ T8935] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 214.397209][ T8942] lo speed is unknown, defaulting to 1000 [ 214.475830][ T8946] team0: entered promiscuous mode [ 214.603063][ T8952] netlink: 32 bytes leftover after parsing attributes in process `syz.4.733'. [ 214.694180][ T8946] macsec2: entered promiscuous mode [ 215.146143][ T8965] xt_policy: too many policy elements [ 216.309349][ T9007] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 216.666806][ T9014] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 216.702589][ T9017] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 217.028303][ T9034] tipc: Enabling of bearer rejected, already enabled [ 217.054020][ T9032] lo speed is unknown, defaulting to 1000 [ 217.124924][ T9039] __nla_validate_parse: 1 callbacks suppressed [ 217.124941][ T9039] netlink: 224 bytes leftover after parsing attributes in process `syz.0.754'. [ 217.159157][ T9039] netlink: 16 bytes leftover after parsing attributes in process `syz.0.754'. [ 217.384251][ T9048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.759'. [ 217.397392][ T9049] netlink: 40 bytes leftover after parsing attributes in process `syz.0.757'. [ 217.664500][ T9061] netlink: 'syz.2.762': attribute type 6 has an invalid length. [ 217.983733][ T9071] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 218.075852][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 218.084930][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.766'. [ 218.096015][ T9080] netlink: 'syz.2.766': attribute type 19 has an invalid length. [ 218.301907][ T9085] netlink: 300 bytes leftover after parsing attributes in process `syz.0.769'. [ 218.394539][ T9089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.771'. [ 218.927324][ T9113] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 219.042482][ T9118] macsec0: entered promiscuous mode [ 219.068058][ T9118] macsec0: entered allmulticast mode [ 219.073461][ T9118] veth1_macvtap: entered allmulticast mode [ 219.123772][ T9118] bridge0: port 1(macsec0) entered blocking state [ 219.154511][ T9118] bridge0: port 1(macsec0) entered disabled state [ 219.732112][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 219.807188][ T9150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 219.817108][ T9146] geneve2: entered promiscuous mode [ 219.837829][ T9146] geneve2: entered allmulticast mode [ 219.906285][ T9150] vlan3: entered allmulticast mode [ 219.911658][ T9150] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 220.016983][ T9154] lo speed is unknown, defaulting to 1000 [ 220.338650][ T9172] .70·: renamed from hsr0 (while UP) [ 220.463214][ T9172] .70·: entered allmulticast mode [ 220.481366][ T9172] hsr_slave_0: entered allmulticast mode [ 220.497297][ T9172] hsr_slave_1: entered allmulticast mode [ 220.503739][ T9172] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 220.529200][ T9177] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 220.555592][ T9177] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 220.830284][ T9183] netlink: 'syz.1.804': attribute type 1 has an invalid length. [ 220.972745][ T9188] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 221.012793][ T9188] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.436521][ T9206] netlink: 'syz.0.811': attribute type 10 has an invalid length. [ 221.455886][ T9213] netlink: 'syz.4.813': attribute type 6 has an invalid length. [ 221.480102][ T9206] team0: Port device dummy0 added [ 221.492806][ T9213] netlink: 'syz.4.813': attribute type 6 has an invalid length. [ 221.512342][ T9209] lo speed is unknown, defaulting to 1000 [ 221.830763][ T9228] lo speed is unknown, defaulting to 1000 [ 222.280676][ T9254] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 222.418484][ T9241] lo speed is unknown, defaulting to 1000 [ 222.534405][ T9254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.572423][ T9269] __nla_validate_parse: 5 callbacks suppressed [ 222.572449][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 222.596877][ T9259] 8021q: adding VLAN 0 to HW filter on device bond5 [ 222.605565][ T9259] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.617668][ T9259] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 222.663172][ T9260] veth7: entered promiscuous mode [ 222.681025][ T9260] bond5: (slave veth7): Enslaving as an active interface with a down link [ 222.725131][ T9265] erspan0: entered allmulticast mode [ 222.765532][ T9265] bond5: (slave erspan0): making interface the new active one [ 222.782203][ T9265] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 222.808853][ T9269] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 223.644148][ T9283] bridge7: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 223.709087][ T8116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.908786][ T1154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.930014][ T1154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.942901][ T9304] Bluetooth: MGMT ver 1.23 [ 224.008692][ T1154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.502731][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.4.842'. [ 224.517244][ T9323] lo speed is unknown, defaulting to 1000 [ 224.921040][ T9342] netlink: 'syz.1.847': attribute type 1 has an invalid length. [ 224.949534][ T9342] netlink: 224 bytes leftover after parsing attributes in process `syz.1.847'. [ 225.078442][ T9350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.849'. [ 225.172176][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.4.849'. [ 225.402727][ T9368] netlink: 'syz.0.852': attribute type 1 has an invalid length. [ 225.410863][ T9368] netlink: 600 bytes leftover after parsing attributes in process `syz.0.852'. [ 225.504914][ T9368] lo speed is unknown, defaulting to 1000 [ 225.776654][ T9382] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 225.784497][ T9382] CPU: 1 UID: 0 PID: 9382 Comm: syz.4.857 Not tainted syzkaller #0 PREEMPT(full) [ 225.784525][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 225.784549][ T9382] Call Trace: [ 225.784559][ T9382] [ 225.784568][ T9382] dump_stack_lvl+0x189/0x250 [ 225.784604][ T9382] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.784630][ T9382] ? __pfx__printk+0x10/0x10 [ 225.784664][ T9382] ? kernfs_path_from_node+0x2f/0x290 [ 225.784687][ T9382] ? kernfs_path_from_node+0x250/0x290 [ 225.784708][ T9382] ? kernfs_path_from_node+0x2f/0x290 [ 225.784737][ T9382] sysfs_warn_dup+0x8e/0xa0 [ 225.784759][ T9382] sysfs_do_create_link_sd+0xc0/0x110 [ 225.784784][ T9382] device_add_class_symlinks+0x1cf/0x240 [ 225.784813][ T9382] device_add+0x475/0xb50 [ 225.784840][ T9382] wiphy_register+0x1ba6/0x28d0 [ 225.784882][ T9382] ? __pfx_wiphy_register+0x10/0x10 [ 225.784902][ T9382] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 225.784945][ T9382] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 225.784978][ T9382] ieee80211_register_hw+0x3425/0x4080 [ 225.785026][ T9382] ? ieee80211_register_hw+0x14e1/0x4080 [ 225.785063][ T9382] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 225.785096][ T9382] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 225.785137][ T9382] ? __hrtimer_setup+0x187/0x210 [ 225.785155][ T9382] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 225.785190][ T9382] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 225.785254][ T9382] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 225.785281][ T9382] ? trace_kmalloc+0x1f/0xd0 [ 225.785305][ T9382] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 225.785333][ T9382] ? kstrndup+0xbf/0x160 [ 225.785366][ T9382] hwsim_new_radio_nl+0xea4/0x1b10 [ 225.785398][ T9382] ? __pfx___nla_validate_parse+0x10/0x10 [ 225.785457][ T9382] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 225.785498][ T9382] ? __nla_parse+0x40/0x60 [ 225.785532][ T9382] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 225.785567][ T9382] genl_family_rcv_msg_doit+0x212/0x300 [ 225.785601][ T9382] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 225.785641][ T9382] ? bpf_lsm_capable+0x9/0x20 [ 225.785665][ T9382] ? security_capable+0x7e/0x2e0 [ 225.785702][ T9382] genl_rcv_msg+0x60e/0x790 [ 225.785734][ T9382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.785758][ T9382] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 225.785800][ T9382] netlink_rcv_skb+0x205/0x470 [ 225.785816][ T9382] ? __lock_acquire+0xab9/0xd20 [ 225.785844][ T9382] ? __pfx_genl_rcv_msg+0x10/0x10 [ 225.785870][ T9382] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 225.785911][ T9382] ? down_read+0x1ad/0x2e0 [ 225.785941][ T9382] genl_rcv+0x28/0x40 [ 225.785965][ T9382] netlink_unicast+0x82f/0x9e0 [ 225.786003][ T9382] ? __pfx_netlink_unicast+0x10/0x10 [ 225.786034][ T9382] ? netlink_sendmsg+0x642/0xb30 [ 225.786050][ T9382] ? skb_put+0x11b/0x210 [ 225.786073][ T9382] netlink_sendmsg+0x805/0xb30 [ 225.786101][ T9382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.786123][ T9382] ? aa_sock_msg_perm+0xf1/0x1d0 [ 225.786143][ T9382] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.786163][ T9382] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.786183][ T9382] __sock_sendmsg+0x219/0x270 [ 225.786214][ T9382] ____sys_sendmsg+0x505/0x830 [ 225.786243][ T9382] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.786276][ T9382] ? import_iovec+0x74/0xa0 [ 225.786303][ T9382] ___sys_sendmsg+0x21f/0x2a0 [ 225.786327][ T9382] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.786390][ T9382] ? __fget_files+0x2a/0x420 [ 225.786405][ T9382] ? __fget_files+0x3a0/0x420 [ 225.786434][ T9382] __x64_sys_sendmsg+0x19b/0x260 [ 225.786460][ T9382] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.786494][ T9382] ? rcu_is_watching+0x15/0xb0 [ 225.786519][ T9382] ? do_syscall_64+0xbe/0x3b0 [ 225.786544][ T9382] do_syscall_64+0xfa/0x3b0 [ 225.786563][ T9382] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.786580][ T9382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.786599][ T9382] ? clear_bhb_loop+0x60/0xb0 [ 225.786622][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.786640][ T9382] RIP: 0033:0x7f7bc5b8ebe9 [ 225.786657][ T9382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.786673][ T9382] RSP: 002b:00007f7bc6ade038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.786700][ T9382] RAX: ffffffffffffffda RBX: 00007f7bc5dc5fa0 RCX: 00007f7bc5b8ebe9 [ 225.786714][ T9382] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 225.786726][ T9382] RBP: 00007f7bc5c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 225.786737][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.786748][ T9382] R13: 00007f7bc5dc6038 R14: 00007f7bc5dc5fa0 R15: 00007ffd76f38c38 [ 225.786780][ T9382] [ 226.644060][ T9399] syz_tun: entered promiscuous mode [ 226.658408][ T9399] syz_tun: entered allmulticast mode [ 226.750058][ T9391] lo speed is unknown, defaulting to 1000 [ 226.868005][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.863'. [ 226.973913][ T9425] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 226.993990][ T9425] netlink: 'syz.1.866': attribute type 4 has an invalid length. [ 227.039156][ T9425] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.866'. [ 227.039986][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 227.096949][ T9431] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.235461][ T9427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 227.681673][ T9463] netlink: 248 bytes leftover after parsing attributes in process `syz.4.874'. [ 227.742641][ T9468] syzkaller0: entered promiscuous mode [ 227.750808][ T9468] syzkaller0: entered allmulticast mode [ 228.061186][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.878'. [ 229.028069][ T9492] lo speed is unknown, defaulting to 1000 [ 229.038254][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.884'. [ 229.691798][ T9517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.888'. [ 229.708539][ T9517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.888'. [ 229.725000][ T9515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.888'. [ 229.778253][ T9517] netlink: 'syz.4.888': attribute type 18 has an invalid length. [ 230.191541][ T9528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.892'. [ 230.203841][ T9531] netlink: 'syz.1.893': attribute type 10 has an invalid length. [ 230.235656][ T9531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.893'. [ 230.357845][ T9531] geneve0: entered promiscuous mode [ 230.394966][ T9531] team0: Port device geneve0 added [ 230.424730][ T8121] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.452202][ T8121] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.532729][ T9549] netlink: 'syz.2.898': attribute type 1 has an invalid length. [ 230.614946][ T8121] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.634654][ T8121] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.728938][ T9556] ip6gretap0: entered promiscuous mode [ 230.749084][ T9556] ü: entered allmulticast mode [ 230.754137][ T9556] ip6gretap0: entered allmulticast mode [ 230.772080][ T9549] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.823051][ T9561] netlink: 'syz.1.900': attribute type 39 has an invalid length. [ 230.846686][ T9565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.900'. [ 231.038967][ T9574] netlink: 172 bytes leftover after parsing attributes in process `syz.0.903'. [ 231.449887][ T9594] geneve0: left promiscuous mode [ 231.501032][ T9594] team0: Port device geneve0 removed [ 231.590719][ T9594] bond0: (slave wlan1): Releasing backup interface [ 231.611217][ T8121] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.653003][ T8121] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.682507][ T9607] syzkaller1: entered promiscuous mode [ 231.689008][ T9607] syzkaller1: entered allmulticast mode [ 231.716580][ T8121] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.736525][ T7838] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.842001][ T9618] veth0_to_bridge: entered promiscuous mode [ 231.851079][ T9618] veth0_to_bridge: entered allmulticast mode [ 232.807996][ T9667] tipc: Started in network mode [ 232.831056][ T9667] tipc: Node identity d2ca05422501, cluster identity 4711 [ 232.900291][ T9667] tipc: Enabled bearer , priority 0 [ 232.945807][ T9669] syzkaller0: entered promiscuous mode [ 232.961546][ T9669] syzkaller0: entered allmulticast mode [ 233.176273][ T9655] tipc: Resetting bearer [ 233.280896][ T9692] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.453239][ T9653] tipc: Resetting bearer [ 233.538380][ T9653] tipc: Disabling bearer [ 233.841262][ T9714] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.899211][ T9718] __nla_validate_parse: 6 callbacks suppressed [ 233.899229][ T9718] netlink: 64 bytes leftover after parsing attributes in process `syz.3.928'. [ 234.612973][ T9754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.933'. [ 235.493533][ T9788] vlan2: left promiscuous mode [ 235.520626][ T9788] vlan2: left allmulticast mode [ 235.574743][ T9788] hsr_slave_1: left allmulticast mode [ 235.652362][ T9788] bond2: left promiscuous mode [ 235.689159][ T9788] bond2: left allmulticast mode [ 235.733984][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 235.763580][ T9788] vlan3: left allmulticast mode [ 235.777056][ T9814] netlink: 1864 bytes leftover after parsing attributes in process `syz.2.945'. [ 235.787527][ T9788] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 235.806711][ T9788] ip6gretap0: left allmulticast mode [ 235.817816][ T9788] ü: left allmulticast mode [ 235.882033][ T9791] !: renamed from dummy0 (while UP) [ 235.970404][ T8120] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.031959][ T8120] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.052544][ T8120] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.081290][ T8120] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.131265][ T8120] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.160139][ T8120] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.191200][ T9826] tipc: Enabling of bearer rejected, already enabled [ 236.202384][ T8120] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.234899][ T8120] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.151899][ T9897] netlink: 3 bytes leftover after parsing attributes in process `syz.3.962'. [ 238.196834][ T9897] batadv1: entered promiscuous mode [ 238.202338][ T9897] batadv1: entered allmulticast mode [ 238.320469][ T9899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.963'. [ 238.356150][ T9899] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 238.441491][ T9907] tipc: Can't bind to reserved service type 0 [ 238.723775][ T9916] tipc: Enabled bearer , priority 0 [ 238.735623][ T9916] syzkaller0: entered promiscuous mode [ 238.754642][ T9916] syzkaller0: entered allmulticast mode [ 238.799059][ T9919] ip6tnl1: entered promiscuous mode [ 238.804330][ T9919] ip6tnl1: entered allmulticast mode [ 238.820573][ T9919] team0: Device ip6tnl1 is of different type [ 238.896282][ T9930] netlink: 68 bytes leftover after parsing attributes in process `syz.2.970'. [ 238.950929][ T9931] tipc: Resetting bearer [ 238.980291][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 239.019030][ T9909] tipc: Resetting bearer [ 239.043544][ T9939] netlink: 'syz.4.972': attribute type 13 has an invalid length. [ 239.052617][ T9909] tipc: Disabling bearer [ 239.059399][ T9939] netlink: 'syz.4.972': attribute type 17 has an invalid length. [ 239.090930][ T9939] gretap0: refused to change device tx_queue_len [ 239.098990][ T9939] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 239.234372][ T9943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 239.355847][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 239.482866][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.978'. [ 239.676134][ T9964] netlink: 44 bytes leftover after parsing attributes in process `syz.3.980'. [ 239.750165][ T9969] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 239.982595][ T9983] netlink: 'syz.3.985': attribute type 3 has an invalid length. [ 240.020286][ T9988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'. [ 240.029617][ T9988] openvswitch: netlink: Flow key attr not present in new flow. [ 240.161386][ T9997] ieee802154 phy0 wpan0: encryption failed: -90 [ 240.174249][ T9998] ieee802154 phy0 wpan0: encryption failed: -90 [ 240.431030][T10014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.996'. [ 240.580056][T10023] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.999'. [ 240.607095][T10024] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.999'. [ 241.087206][T10053] sch_tbf: burst 5 is lower than device lo mtu (18) ! [ 241.770139][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 241.794735][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 241.968984][T10091] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.178800][T10098] nbd: must specify at least one socket [ 242.207562][T10098] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 242.306370][T10098] bond6: entered promiscuous mode [ 242.312910][T10098] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.332419][T10098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.339815][T10098] IPv6: NLM_F_CREATE should be set when creating new route [ 242.347081][T10098] IPv6: NLM_F_CREATE should be set when creating new route [ 242.355644][T10098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.392880][T10110] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.420209][T10110] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 242.433711][T10110] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 242.479953][T10098] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 242.507141][T10098] bond6: (slave wireguard0): Error -95 calling set_mac_address [ 242.750815][T10125] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 242.754145][T10128] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 242.883506][T10136] team0: entered promiscuous mode [ 242.899022][T10136] team_slave_0: entered promiscuous mode [ 242.906296][T10136] team_slave_1: entered promiscuous mode [ 242.912340][T10136] !: entered promiscuous mode [ 242.975949][T10136] ip6gretap0: entered promiscuous mode [ 243.011933][T10142] tipc: Enabled bearer , priority 0 [ 243.021733][T10142] syzkaller0: entered promiscuous mode [ 243.049412][T10142] syzkaller0: entered allmulticast mode [ 243.216281][T10157] netlink: 'syz.0.1030': attribute type 39 has an invalid length. [ 243.283674][T10159] tipc: Resetting bearer [ 243.374450][T10139] tipc: Resetting bearer [ 243.405542][T10139] tipc: Disabling bearer [ 243.792640][T10178] netlink: 'syz.2.1034': attribute type 12 has an invalid length. [ 243.978717][T10191] nbd: must specify an index to disconnect [ 244.172465][T10203] netlink: 'syz.3.1041': attribute type 11 has an invalid length. [ 244.510461][T10223] wg2: entered promiscuous mode [ 244.566751][T10227] geneve2: entered promiscuous mode [ 244.577974][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.602802][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.628011][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.679681][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.101262][T10261] __nla_validate_parse: 6 callbacks suppressed [ 245.101276][T10261] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1055'. [ 245.584409][T10284] netlink: 'syz.0.1061': attribute type 13 has an invalid length. [ 245.613477][T10284] netlink: 'syz.0.1061': attribute type 17 has an invalid length. [ 245.677260][T10284] erspan0: left allmulticast mode [ 245.742907][T10284] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.060014][T10307] sctp: [Deprecated]: syz.1.1066 (pid 10307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 246.060014][T10307] Use struct sctp_sack_info instead [ 246.368885][T10317] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1069'. [ 246.394750][T10317] netem: invalid attributes len -16 [ 246.400112][T10317] netem: change failed [ 246.446876][T10318] tipc: Enabled bearer , priority 0 [ 246.469620][T10317] syzkaller0: entered promiscuous mode [ 246.476519][T10317] syzkaller0: entered allmulticast mode [ 246.568780][T10317] tipc: Resetting bearer [ 246.609605][T10316] tipc: Resetting bearer [ 246.642305][T10316] tipc: Disabling bearer [ 246.667294][T10326] netlink: 'syz.1.1073': attribute type 1 has an invalid length. [ 246.724738][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1074'. [ 246.757832][T10333] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1073'. [ 246.780756][T10324] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.788463][T10324] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.987282][T10324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.008925][T10324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.136421][T10324] vcan1: left allmulticast mode [ 247.142260][T10324] bridge6: left promiscuous mode [ 247.152792][T10324] bond1: left promiscuous mode [ 247.160279][T10324] veth3: left promiscuous mode [ 247.179310][T10324] bridge9: left promiscuous mode [ 247.184295][T10324] bridge9: left allmulticast mode [ 247.244158][ T8118] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.263340][ T8118] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.326733][ T8116] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.349399][ T8116] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.403868][T10349] wg1 speed is unknown, defaulting to 1000 [ 247.414715][T10349] wg1 speed is unknown, defaulting to 1000 [ 247.421524][T10349] wg1 speed is unknown, defaulting to 1000 [ 247.479969][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1078'. [ 247.491798][T10360] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1081'. [ 247.535556][T10357] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1078'. [ 247.545488][T10349] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 247.596446][ T5990] IPVS: starting estimator thread 0... [ 247.683505][T10349] wg1 speed is unknown, defaulting to 1000 [ 247.685168][T10364] IPVS: using max 26 ests per chain, 62400 per kthread [ 247.733238][T10349] wg1 speed is unknown, defaulting to 1000 [ 247.832595][T10349] wg1 speed is unknown, defaulting to 1000 [ 247.858331][T10349] wg1 speed is unknown, defaulting to 1000 [ 247.871704][T10349] wg1 speed is unknown, defaulting to 1000 [ 247.959956][ T30] audit: type=1107 audit(1756868059.345:2): pid=10380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='lÞæ;a»Ðؼ7u©¾]JÅûî’<©öÀÛV¦š/JoÁ!öZ*ùuu_¹ÄÛÅu ^Úr—™Ð0hÀlÁí*=|Ę@¨+‚—²2‹]Ÿƒ¥' [ 248.037187][T10381] wg1 speed is unknown, defaulting to 1000 [ 248.071229][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1087'. [ 248.161959][T10387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1089'. [ 248.385961][T10401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1092'. [ 248.462163][T10404] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 248.543338][T10398] wg1 speed is unknown, defaulting to 1000 [ 248.657302][T10401] tipc: Enabled bearer , priority 0 [ 248.664920][T10401] syzkaller0: entered promiscuous mode [ 248.670432][T10401] syzkaller0: entered allmulticast mode [ 248.712637][T10408] wg1 speed is unknown, defaulting to 1000 [ 248.841377][T10396] tipc: Resetting bearer [ 248.862751][T10396] tipc: Disabling bearer [ 248.929028][T10427] netlink: 'syz.4.1099': attribute type 11 has an invalid length. [ 249.086723][T10432] netlink: 'syz.2.1100': attribute type 7 has an invalid length. [ 249.097698][T10432] netlink: 'syz.2.1100': attribute type 8 has an invalid length. [ 249.119195][T10432] netlink: 'syz.2.1100': attribute type 15 has an invalid length. [ 249.220886][T10440] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.338715][T10449] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 249.625068][T10463] netlink: 'syz.1.1108': attribute type 3 has an invalid length. [ 250.039160][T10483] IPVS: Error joining to the multicast group [ 250.282343][T10498] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 250.323494][T10500] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 250.339851][T10500] __nla_validate_parse: 5 callbacks suppressed [ 250.339880][T10500] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1120'. [ 250.435137][T10509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1121'. [ 250.827290][T10540] wg1 speed is unknown, defaulting to 1000 [ 250.848229][T10546] wg1 speed is unknown, defaulting to 1000 [ 251.332239][T10570] macsec2: entered promiscuous mode [ 251.337701][T10570] bridge0: entered promiscuous mode [ 251.347517][T10570] bridge0: port 3(macsec2) entered blocking state [ 251.354346][T10570] bridge0: port 3(macsec2) entered disabled state [ 251.361385][T10570] macsec2: entered allmulticast mode [ 251.370608][T10570] bridge0: entered allmulticast mode [ 251.450034][T10570] macsec2: left allmulticast mode [ 251.455820][T10570] bridge0: left allmulticast mode [ 251.462002][T10570] bridge0: left promiscuous mode [ 251.554176][T10580] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1134'. [ 251.849995][T10595] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 252.522782][T10631] wg1 speed is unknown, defaulting to 1000 [ 254.594697][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 255.532265][T10660] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 255.564856][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.573830][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.630985][T10669] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1154'. [ 255.642433][T10672] openvswitch: netlink: IP tunnel dst address not specified [ 255.869073][T10681] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1156'. [ 255.881799][ T9] wg1 speed is unknown, defaulting to 1000 [ 255.884217][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1158'. [ 255.889482][T10685] lo speed is unknown, defaulting to 1000 [ 255.907238][ T9] syz0: Port: 1 Link DOWN [ 255.934227][T10686] geneve3: entered promiscuous mode [ 255.945847][T10686] geneve3: entered allmulticast mode [ 255.962859][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.981981][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 255.995985][T10685] lo speed is unknown, defaulting to 1000 [ 255.996467][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.018238][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 256.030793][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.047457][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 256.058880][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.058889][T10685] lo speed is unknown, defaulting to 1000 [ 256.074071][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 256.096572][T10691] netlink: 'syz.2.1159': attribute type 4 has an invalid length. [ 256.106994][T10685] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 256.152778][T10685] lo speed is unknown, defaulting to 1000 [ 256.191983][T10685] lo speed is unknown, defaulting to 1000 [ 256.210326][T10685] lo speed is unknown, defaulting to 1000 [ 256.220544][T10685] lo speed is unknown, defaulting to 1000 [ 256.229149][T10685] lo speed is unknown, defaulting to 1000 [ 256.469770][T10704] wg1 speed is unknown, defaulting to 1000 [ 256.481974][T10704] lo speed is unknown, defaulting to 1000 [ 256.529663][T10705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.580071][T10706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.898293][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 256.913477][T10715] netlink: 'syz.0.1165': attribute type 2 has an invalid length. [ 256.976906][T10717] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1166'. [ 257.095153][T10721] IPVS: set_ctl: invalid protocol: 44 10.1.1.1:20002 [ 257.192939][T10726] tipc: Enabling of bearer rejected, already enabled [ 257.422879][T10737] tipc: Enabled bearer , priority 0 [ 257.432490][T10737] syzkaller0: entered promiscuous mode [ 257.443404][T10737] syzkaller0: entered allmulticast mode [ 257.479557][T10741] tipc: Enabling of bearer rejected, already enabled [ 257.488950][T10742] tipc: Resetting bearer [ 257.501606][T10742] syzkaller0: left promiscuous mode [ 257.508190][T10744] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 257.516027][T10742] syzkaller0: left allmulticast mode [ 257.542984][T10738] tipc: Resetting bearer [ 257.549304][T10738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.557676][T10738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.584953][T10736] tipc: Resetting bearer [ 257.615331][T10736] tipc: Disabling bearer [ 258.157728][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1182'. [ 258.460513][T10788] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1188'. [ 258.471867][T10788] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1188'. [ 258.973996][T10810] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 258.981935][T10810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1194'. [ 259.118994][T10810] geneve0: entered promiscuous mode [ 259.128835][T10810] team0: Port device geneve0 added [ 259.214020][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.230886][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.240315][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.263547][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.537458][T10819] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.648277][T10834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1201'. [ 259.680702][T10819] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.740086][T10832] veth5: entered promiscuous mode [ 259.828577][T10819] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.951859][T10819] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.180083][T10532] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.231509][T10523] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.359088][T10523] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.384813][T10865] netlink: 'syz.0.1209': attribute type 6 has an invalid length. [ 260.402901][T10523] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.411648][T10865] netlink: 'syz.0.1209': attribute type 6 has an invalid length. [ 260.478169][T10860] block nbd0: server does not support multiple connections per device. [ 260.495388][T10860] block nbd0: shutting down sockets [ 260.731842][T10874] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 260.746230][T10875] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 260.753834][T10875] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 260.782115][T10870] wg1 speed is unknown, defaulting to 1000 [ 260.811932][T10868] wg1 speed is unknown, defaulting to 1000 [ 260.826458][T10870] lo speed is unknown, defaulting to 1000 [ 260.852208][T10868] lo speed is unknown, defaulting to 1000 [ 261.072254][T10879] wg1 speed is unknown, defaulting to 1000 [ 261.101982][T10879] lo speed is unknown, defaulting to 1000 [ 261.275438][T10901] __nla_validate_parse: 2 callbacks suppressed [ 261.275455][T10901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1217'. [ 261.354688][T10905] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1220'. [ 261.507334][T10915] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 261.540618][T10919] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1225'. [ 261.662281][T10928] "syz.2.1226" (10928) uses obsolete ecb(arc4) skcipher [ 261.924406][T10942] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1229'. [ 261.965332][T10532] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.984516][T10532] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 262.024339][T10532] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.059802][T10532] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 262.105215][T10532] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.114162][T10532] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 262.122089][T10949] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1230'. [ 262.148664][T10532] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.170131][T10954] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1232'. [ 262.174605][T10532] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 262.204110][T10947] wg1 speed is unknown, defaulting to 1000 [ 262.213127][T10947] lo speed is unknown, defaulting to 1000 [ 262.349729][T10958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1233'. [ 262.456858][T10961] wg1 speed is unknown, defaulting to 1000 [ 262.486999][T10961] lo speed is unknown, defaulting to 1000 [ 262.817285][ T5869] block nbd0: Receive control failed (result -32) [ 262.864035][T10975] netlink: 'syz.4.1240': attribute type 1 has an invalid length. [ 262.912804][T10975] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1240'. [ 262.944674][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1240'. [ 263.113968][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 263.127852][T10985] netlink: 'syz.1.1241': attribute type 7 has an invalid length. [ 263.160200][T10990] netlink: 'syz.2.1243': attribute type 13 has an invalid length. [ 263.592332][T11003] wg1 speed is unknown, defaulting to 1000 [ 263.616945][T11003] lo speed is unknown, defaulting to 1000 [ 263.678901][T11006] netlink: 'syz.3.1248': attribute type 13 has an invalid length. [ 263.690127][T11006] netlink: 'syz.3.1248': attribute type 17 has an invalid length. [ 263.819986][T11016] netlink: 'syz.4.1251': attribute type 21 has an invalid length. [ 263.831524][T11016] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.840504][T11016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.847798][T11016] IPv6: NLM_F_CREATE should be set when creating new route [ 263.855084][T11016] IPv6: NLM_F_CREATE should be set when creating new route [ 263.862301][T11016] IPv6: NLM_F_CREATE should be set when creating new route [ 263.897181][T11006] ip6gretap0: left promiscuous mode [ 263.923444][T11006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.950607][T11006] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.986872][T11006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.232430][T11043] netlink: 'syz.3.1257': attribute type 13 has an invalid length. [ 264.282594][T11043] netlink: 'syz.3.1257': attribute type 17 has an invalid length. [ 264.452500][T11043] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 264.661824][T11067] 8021q: VLANs not supported on ip6gre0 [ 264.907090][T11065] wg1 speed is unknown, defaulting to 1000 [ 264.932398][T11065] lo speed is unknown, defaulting to 1000 [ 265.018398][T11079] syzkaller1: entered promiscuous mode [ 265.023916][T11079] syzkaller1: entered allmulticast mode [ 265.139196][T11092] wg1 speed is unknown, defaulting to 1000 [ 265.223174][T11092] lo speed is unknown, defaulting to 1000 [ 265.796802][T11126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.971294][T11139] tipc: Started in network mode [ 265.981330][T11139] tipc: Node identity 2e91bd687a2a, cluster identity 4711 [ 265.990782][T11139] tipc: Enabled bearer , priority 0 [ 266.011807][T11139] syzkaller0: entered promiscuous mode [ 266.023654][T11139] syzkaller0: entered allmulticast mode [ 266.097641][T11139] tipc: Resetting bearer [ 266.188310][T11139] tipc: Resetting bearer [ 266.214171][T11139] tipc: Disabling bearer [ 266.238950][T11147] wg1 speed is unknown, defaulting to 1000 [ 266.253582][T11147] lo speed is unknown, defaulting to 1000 [ 266.382989][T11159] __nla_validate_parse: 8 callbacks suppressed [ 266.383005][T11159] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1286'. [ 266.436248][T11153] wg1 speed is unknown, defaulting to 1000 [ 266.445888][T11153] lo speed is unknown, defaulting to 1000 [ 266.836510][T11169] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1289'. [ 267.006181][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1291'. [ 267.030306][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 267.054704][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1291'. [ 267.096708][T11163] wg1 speed is unknown, defaulting to 1000 [ 267.102254][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1291'. [ 267.105742][T11163] lo speed is unknown, defaulting to 1000 [ 267.128792][T11178] netlink: 'syz.2.1293': attribute type 1 has an invalid length. [ 268.295648][T11236] veth0_to_hsr: entered allmulticast mode [ 268.666218][T11257] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1316'. [ 268.705468][T11264] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1317'. [ 268.939287][T11281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1314'. [ 268.973782][T11257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.000286][T11257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.014128][T11257] bond0 (unregistering): Released all slaves [ 269.065422][T11278] netlink: 328 bytes leftover after parsing attributes in process `syz.1.1314'. [ 269.416360][T11307] pim6reg: entered allmulticast mode [ 269.453037][T11307] pim6reg: left allmulticast mode [ 269.656307][T11314] tipc: Failed to remove unknown binding: 66,1,1/0:4027057288/4027057290 [ 269.669226][T11314] tipc: Failed to remove unknown binding: 66,1,1/0:4027057288/4027057290 [ 269.682530][T11314] tipc: Failed to remove unknown binding: 66,1,1/0:4027057288/4027057290 [ 269.800607][T11317] wg1 speed is unknown, defaulting to 1000 [ 269.820411][T11317] lo speed is unknown, defaulting to 1000 [ 269.893479][T11326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.010292][T11333] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 270.226163][T11342] netlink: 'syz.3.1334': attribute type 4 has an invalid length. [ 270.515009][T11358] netlink: 'syz.3.1339': attribute type 13 has an invalid length. [ 270.534685][T11358] netlink: 'syz.3.1339': attribute type 17 has an invalid length. [ 270.563578][T11362] netlink: 'syz.2.1341': attribute type 2 has an invalid length. [ 270.572041][T11362] netlink: 'syz.2.1341': attribute type 1 has an invalid length. [ 270.596983][T11358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.749229][T11366] openvswitch: netlink: Actions may not be safe on all matching packets [ 270.778392][T11366] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 270.822760][T11366] bond0: (slave gretap0): Error: Device type is different from other slaves [ 270.860319][T10543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.888708][T10543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.126668][T11387] sctp: [Deprecated]: syz.4.1347 (pid 11387) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.126668][T11387] Use struct sctp_sack_info instead [ 271.190251][T11390] netlink: 'syz.2.1350': attribute type 11 has an invalid length. [ 271.419332][T11400] ip6tnl0: Caught tx_queue_len zero misconfig [ 271.866474][T11410] __nla_validate_parse: 40 callbacks suppressed [ 271.866487][T11410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1355'. [ 271.959415][T11416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.039375][T11420] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1358'. [ 272.078820][T11422] netlink: 'syz.3.1359': attribute type 10 has an invalid length. [ 272.087523][T11422] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1359'. [ 272.346229][T11439] Bluetooth: MGMT ver 1.23 [ 272.391498][T11438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1363'. [ 272.570931][T11447] wg1 speed is unknown, defaulting to 1000 [ 272.579383][T11443] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1365'. [ 272.590475][T11447] lo speed is unknown, defaulting to 1000 [ 272.635135][T11443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 272.652204][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'. [ 272.705419][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 272.751155][T11456] syz.4.1370: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 272.773901][T11456] CPU: 0 UID: 0 PID: 11456 Comm: syz.4.1370 Not tainted syzkaller #0 PREEMPT(full) [ 272.773925][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.773944][T11456] Call Trace: [ 272.773950][T11456] [ 272.773958][T11456] dump_stack_lvl+0x189/0x250 [ 272.773987][T11456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.774009][T11456] ? __pfx__printk+0x10/0x10 [ 272.774035][T11456] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.774055][T11456] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 272.774078][T11456] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 272.774102][T11456] warn_alloc+0x214/0x310 [ 272.774134][T11456] ? __pfx_warn_alloc+0x10/0x10 [ 272.774169][T11456] ? __get_vm_area_node+0x28f/0x300 [ 272.774194][T11456] ? fq_pie_init+0x430/0x840 [ 272.774222][T11456] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 272.774282][T11456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 272.774313][T11456] ? rcu_is_watching+0x15/0xb0 [ 272.774332][T11456] ? fq_pie_init+0x430/0x840 [ 272.774354][T11456] ? fq_pie_init+0x430/0x840 [ 272.774376][T11456] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 272.774400][T11456] ? fq_pie_init+0x430/0x840 [ 272.774424][T11456] ? tcf_block_get+0x67/0xa0 [ 272.774438][T11456] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 272.774460][T11456] fq_pie_init+0x430/0x840 [ 272.774487][T11456] ? __pfx_fq_pie_init+0x10/0x10 [ 272.774511][T11456] qdisc_create+0x7ac/0xea0 [ 272.774543][T11456] tc_modify_qdisc+0x1538/0x20e0 [ 272.774583][T11456] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 272.774644][T11456] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 272.774667][T11456] rtnetlink_rcv_msg+0x77c/0xb70 [ 272.774688][T11456] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 272.774705][T11456] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.774720][T11456] ? ref_tracker_free+0x63a/0x7d0 [ 272.774746][T11456] ? __asan_memcpy+0x40/0x70 [ 272.774766][T11456] ? __pfx_ref_tracker_free+0x10/0x10 [ 272.774802][T11456] netlink_rcv_skb+0x205/0x470 [ 272.774821][T11456] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 272.774840][T11456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 272.774870][T11456] ? netlink_deliver_tap+0x2e/0x1b0 [ 272.774895][T11456] netlink_unicast+0x82f/0x9e0 [ 272.774947][T11456] ? __pfx_netlink_unicast+0x10/0x10 [ 272.774995][T11456] ? netlink_sendmsg+0x642/0xb30 [ 272.775011][T11456] ? skb_put+0x11b/0x210 [ 272.775033][T11456] netlink_sendmsg+0x805/0xb30 [ 272.775078][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.775102][T11456] ? aa_sock_msg_perm+0xf1/0x1d0 [ 272.775122][T11456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 272.775142][T11456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.775162][T11456] __sock_sendmsg+0x219/0x270 [ 272.775192][T11456] ____sys_sendmsg+0x505/0x830 [ 272.775220][T11456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.775252][T11456] ? import_iovec+0x74/0xa0 [ 272.775278][T11456] ___sys_sendmsg+0x21f/0x2a0 [ 272.775303][T11456] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.775365][T11456] ? __fget_files+0x2a/0x420 [ 272.775380][T11456] ? __fget_files+0x3a0/0x420 [ 272.775409][T11456] __x64_sys_sendmsg+0x19b/0x260 [ 272.775433][T11456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 272.775467][T11456] ? rcu_is_watching+0x15/0xb0 [ 272.775491][T11456] ? do_syscall_64+0xbe/0x3b0 [ 272.775516][T11456] do_syscall_64+0xfa/0x3b0 [ 272.775535][T11456] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.775553][T11456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.775571][T11456] ? clear_bhb_loop+0x60/0xb0 [ 272.775595][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.775612][T11456] RIP: 0033:0x7f7bc5b8ebe9 [ 272.775629][T11456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.775650][T11456] RSP: 002b:00007f7bc6ade038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.775670][T11456] RAX: ffffffffffffffda RBX: 00007f7bc5dc5fa0 RCX: 00007f7bc5b8ebe9 [ 272.775683][T11456] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000007 [ 272.775695][T11456] RBP: 00007f7bc5c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 272.775707][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.775717][T11456] R13: 00007f7bc5dc6038 R14: 00007f7bc5dc5fa0 R15: 00007ffd76f38c38 [ 272.775749][T11456] [ 273.194282][T11456] Mem-Info: [ 273.202124][T11456] active_anon:8039 inactive_anon:0 isolated_anon:0 [ 273.202124][T11456] active_file:3274 inactive_file:39923 isolated_file:0 [ 273.202124][T11456] unevictable:768 dirty:215 writeback:0 [ 273.202124][T11456] slab_reclaimable:12195 slab_unreclaimable:124161 [ 273.202124][T11456] mapped:29143 shmem:1367 pagetables:970 [ 273.202124][T11456] sec_pagetables:0 bounce:0 [ 273.202124][T11456] kernel_misc_reclaimable:0 [ 273.202124][T11456] free:1295277 free_pcp:17110 free_cma:0 [ 273.252165][T11459] netlink: 'syz.0.1367': attribute type 1 has an invalid length. [ 273.285215][ T30] audit: type=1107 audit(1756868084.665:3): pid=11465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 273.293267][T11456] Node 0 active_anon:32156kB inactive_anon:0kB active_file:13096kB inactive_file:159488kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116672kB dirty:856kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13348kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 273.342959][T11456] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 273.376167][T11456] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 273.413636][T11456] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 273.419784][T11456] Node 0 DMA32 free:1276992kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32112kB inactive_anon:0kB active_file:13096kB inactive_file:157908kB unevictable:1536kB writepending:856kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:52772kB local_pcp:27196kB free_cma:0kB [ 273.454103][T11456] lowmem_reserve[]: 0 0 1 1 1 [ 273.459445][T11456] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 273.489557][T11456] lowmem_reserve[]: 0 0 0 0 0 [ 273.494321][T11456] Node 1 Normal free:3888544kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16176kB local_pcp:9760kB free_cma:0kB [ 273.527496][T11456] lowmem_reserve[]: 0 0 0 0 0 [ 273.532240][T11456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 273.545899][T11456] Node 0 DMA32: 1360*4kB (UME) 1283*8kB (UME) 374*16kB (UME) 568*32kB (UM) 191*64kB (UME) 43*128kB (UM) 13*256kB (UME) 13*512kB (UM) 7*1024kB (UM) 11*2048kB (UME) 288*4096kB (UM) = 1276920kB [ 273.565673][T11456] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 273.578229][T11456] Node 1 Normal: 184*4kB (UME) 38*8kB (UME) 47*16kB (UME) 115*32kB (UME) 37*64kB (UME) 8*128kB (UME) 5*256kB (UM) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 945*4096kB (M) = 3888544kB [ 273.597218][T11456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.607030][T11456] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.616582][T11456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.626875][T11456] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.636592][T11456] 44561 total pagecache pages [ 273.641288][T11456] 0 pages in swap cache [ 273.645779][T11456] Free swap = 124996kB [ 273.650727][T11456] Total swap = 124996kB [ 273.655764][T11456] 2097051 pages RAM [ 273.659584][T11456] 0 pages HighMem/MovableOnly [ 273.664271][T11456] 425671 pages reserved [ 273.668984][T11456] 0 pages cma reserved [ 273.970831][T11489] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1381'. [ 274.332436][T11510] pimreg: entered allmulticast mode [ 274.843606][T11541] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1393'. [ 274.957837][T11545] wg1 speed is unknown, defaulting to 1000 [ 274.975812][T11545] lo speed is unknown, defaulting to 1000 [ 275.465616][T11576] ieee802154 phy0 wpan0: encryption failed: -90 [ 275.935849][T11598] nbd: device at index 1 is going down [ 276.681376][T11623] sctp: [Deprecated]: syz.3.1417 (pid 11623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.681376][T11623] Use struct sctp_sack_info instead [ 276.851580][T11632] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 277.078533][T11650] __nla_validate_parse: 4 callbacks suppressed [ 277.078553][T11650] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1420'. [ 277.211145][T11652] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 277.226635][T11659] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1423'. [ 277.269310][T11660] netlink: 'syz.0.1422': attribute type 1 has an invalid length. [ 277.331741][T11663] netlink: 'syz.1.1424': attribute type 2 has an invalid length. [ 277.393982][T11663] ave_0: entered promiscuous mode [ 277.420229][T11669] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 277.465863][T11671] netlink: 'syz.3.1425': attribute type 13 has an invalid length. [ 277.485580][T11671] netlink: 'syz.3.1425': attribute type 17 has an invalid length. [ 277.543161][T11671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.727643][T11672] wg1 speed is unknown, defaulting to 1000 [ 277.737495][T11672] lo speed is unknown, defaulting to 1000 [ 278.100267][T11680] tipc: Enabling of bearer rejected, failed to enable media [ 278.645686][T11713] netlink: 'syz.3.1435': attribute type 1 has an invalid length. [ 278.688145][T11716] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1436'. [ 278.768629][T11713] bond0: entered promiscuous mode [ 278.783648][T11713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.795349][T11721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.802607][T11721] IPv6: NLM_F_CREATE should be set when creating new route [ 278.809885][T11721] IPv6: NLM_F_CREATE should be set when creating new route [ 278.834150][T11711] tipc: Enabling of bearer rejected, failed to enable media [ 278.856850][T11713] netlink: 'syz.3.1435': attribute type 9 has an invalid length. [ 278.869955][T11727] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1439'. [ 278.881936][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 278.912632][T11717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.920773][T11717] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 278.939829][T11717] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 278.983065][T11735] lo: Caught tx_queue_len zero misconfig [ 279.021115][T11713] macvlan2: entered promiscuous mode [ 279.028486][T11713] hsr0: entered promiscuous mode [ 279.033704][T11713] macvlan2: entered allmulticast mode [ 279.039607][T11713] hsr0: entered allmulticast mode [ 279.044861][T11713] hsr_slave_0: entered allmulticast mode [ 279.050615][T11713] hsr_slave_1: entered allmulticast mode [ 279.058777][T11726] syzkaller1: entered promiscuous mode [ 279.064409][T11726] syzkaller1: entered allmulticast mode [ 279.080273][T11721] bridge_slave_0: left allmulticast mode [ 279.086306][T11721] bridge_slave_0: left promiscuous mode [ 279.092166][T11721] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.102080][T11721] bridge_slave_1: left allmulticast mode [ 279.108276][T11721] bridge_slave_1: left promiscuous mode [ 279.114020][T11721] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.124633][T11721] team0: Port device team_slave_0 removed [ 279.131976][T11721] team0: Port device team_slave_1 removed [ 279.140424][T11721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.149726][T11721] team0: Port device geneve0 removed [ 279.158365][T11721] bond1: (slave bridge3): Releasing active interface [ 279.282743][T11738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1441'. [ 279.464368][T11751] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1444'. [ 279.525200][T11762] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1448'. [ 279.658606][T11772] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1449'. [ 279.814596][T11781] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 279.833408][T11785] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1453'. [ 279.890273][T11782] wg1 speed is unknown, defaulting to 1000 [ 279.926559][T11782] lo speed is unknown, defaulting to 1000 [ 279.973709][T11792] netlink: 'syz.0.1451': attribute type 4 has an invalid length. [ 280.216353][T11802] wg1 speed is unknown, defaulting to 1000 [ 280.258327][T11802] lo speed is unknown, defaulting to 1000 [ 280.359024][T11811] sctp: [Deprecated]: syz.2.1460 (pid 11811) Use of int in maxseg socket option. [ 280.359024][T11811] Use struct sctp_assoc_value instead [ 280.562952][T11777] delete_channel: no stack [ 280.855219][T11822] bond2: (slave erspan0): Releasing active interface [ 280.873799][T11822] !: left promiscuous mode [ 280.901475][T11822] team0: Port device 0! removed [ 280.913928][T11822] bridge_slave_0: left allmulticast mode [ 280.921421][T11822] bridge_slave_0: left promiscuous mode [ 280.937372][T11822] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.957033][T11822] bridge_slave_1: left allmulticast mode [ 280.962701][T11822] bridge_slave_1: left promiscuous mode [ 280.977099][T11822] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.985134][T11849] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 281.003185][T11822] bond0: (slave bond_slave_0): Releasing backup interface [ 281.013288][T11822] bond0: (slave bond_slave_1): Releasing backup interface [ 281.022817][T11822] team_slave_0: left promiscuous mode [ 281.031438][T11822] team0: Port device team_slave_0 removed [ 281.041205][T11851] netlink: 'syz.0.1463': attribute type 10 has an invalid length. [ 281.050976][T11822] team_slave_1: left promiscuous mode [ 281.058986][T11822] team0: Port device team_slave_1 removed [ 281.065541][T11822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.074011][T11822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.083682][T11822] bond2: (slave veth3): Releasing active interface [ 281.154473][T11844] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.166844][T11851] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 281.499202][T11869] wg1 speed is unknown, defaulting to 1000 [ 281.512268][T11869] lo speed is unknown, defaulting to 1000 [ 281.853605][T11887] wg1 speed is unknown, defaulting to 1000 [ 281.901861][T11887] lo speed is unknown, defaulting to 1000 [ 282.061320][T11902] team_slave_1: Caught tx_queue_len zero misconfig [ 282.429076][T11909] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 282.534608][T11909] bridge0: entered promiscuous mode [ 282.841386][T11926] netlink: 'syz.1.1487': attribute type 4 has an invalid length. [ 282.919826][T11927] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072065443590) [ 282.950350][T11927] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 282.982159][T11925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.993096][T11919] __nla_validate_parse: 12 callbacks suppressed [ 282.993111][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1487'. [ 283.019587][T11919] sch_fq: defrate 0 ignored. [ 283.139418][T11933] veth0_to_bridge: entered promiscuous mode [ 283.148424][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1490'. [ 283.153194][T11934] tipc: Enabling of bearer rejected, failed to enable media [ 283.167096][T11935] veth0_to_bridge: left promiscuous mode [ 283.173852][T11933] netlink: 'syz.3.1491': attribute type 10 has an invalid length. [ 283.182820][T11933] team0: Device hsr_slave_0 failed to register rx_handler [ 283.370719][T11943] wg1 speed is unknown, defaulting to 1000 [ 283.412737][T11943] lo speed is unknown, defaulting to 1000 [ 283.453851][T11945] netlink: 'syz.4.1494': attribute type 39 has an invalid length. [ 283.685021][T11962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.703172][T11965] veth1_macvtap: left allmulticast mode [ 283.777997][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 283.791923][T11970] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1499'. [ 283.841634][T11966] geneve3: entered promiscuous mode [ 283.849844][T11966] geneve3: entered allmulticast mode [ 283.859856][T10527] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.871517][T10527] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 283.912545][T10527] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.924628][T10527] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 283.937294][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1499'. [ 283.946659][T10527] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.954128][T11974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1501'. [ 283.968374][T10527] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 283.993560][T10527] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.003322][T10527] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 284.039941][T11978] wg1 speed is unknown, defaulting to 1000 [ 284.109543][T11978] lo speed is unknown, defaulting to 1000 [ 284.315136][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1507'. [ 284.340209][T11996] vlan4: entered promiscuous mode [ 284.345585][T11996] ip6gretap0: entered promiscuous mode [ 284.873477][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1517'. [ 285.147590][T12044] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1518'. [ 285.180275][T12044] netlink: 4280 bytes leftover after parsing attributes in process `syz.1.1518'. [ 285.236718][T12048] sctp: [Deprecated]: syz.3.1522 (pid 12048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.236718][T12048] Use struct sctp_sack_info instead [ 285.388221][T12059] sctp: [Deprecated]: syz.3.1522 (pid 12059) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.388221][T12059] Use struct sctp_sack_info instead [ 286.159848][T12081] netlink: 'syz.3.1528': attribute type 21 has an invalid length. [ 286.308509][T12090] netlink: 'syz.2.1531': attribute type 20 has an invalid length. [ 286.396890][ T8121] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.421712][ T8121] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.526512][ T8121] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.535301][ T8121] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.544394][T12090] netlink: 'syz.2.1531': attribute type 1 has an invalid length. [ 286.553412][T12090] netlink: 'syz.2.1531': attribute type 2 has an invalid length. [ 286.669214][T12101] wg1 speed is unknown, defaulting to 1000 [ 286.706656][T12101] lo speed is unknown, defaulting to 1000 [ 286.729477][T12104] netlink: 'syz.0.1538': attribute type 101 has an invalid length. [ 286.744798][T12104] netlink: 'syz.0.1538': attribute type 7 has an invalid length. [ 287.908171][T12170] netlink: 'syz.1.1555': attribute type 10 has an invalid length. [ 287.909724][T12176] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 287.935047][T12174] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 287.939632][T12176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.942832][T12174] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 287.965339][T12170] team0: Device hsr_slave_0 failed to register rx_handler [ 288.083888][T12181] vlan4: entered allmulticast mode [ 288.162318][T12181] bridge_slave_0: entered allmulticast mode [ 288.424033][T12196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.475792][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.915401][T12201] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 288.922822][T12202] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 289.429536][T12218] __nla_validate_parse: 8 callbacks suppressed [ 289.429557][T12218] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1567'. [ 289.647327][T12235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1572'. [ 289.696036][T12232] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1573'. [ 289.916980][T12244] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'. [ 290.107811][T12253] "syz.1.1579" (12253) uses obsolete ecb(arc4) skcipher [ 290.361745][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 290.388801][T12269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1583'. [ 290.427607][T12267] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 290.436418][T12266] wg1 speed is unknown, defaulting to 1000 [ 290.464283][T12266] lo speed is unknown, defaulting to 1000 [ 290.492413][T12274] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1584'. [ 290.508259][T12267] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1581'. [ 290.510502][T12269] netlink: 'syz.1.1583': attribute type 18 has an invalid length. [ 290.797059][T12279] netlink: 'syz.1.1583': attribute type 1 has an invalid length. [ 290.939249][T12290] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1588'. [ 291.046415][T12295] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1590'. [ 291.079619][T12295] tipc: Enabling of bearer rejected, failed to enable media [ 291.339003][T12305] wg1 speed is unknown, defaulting to 1000 [ 291.369748][T12305] lo speed is unknown, defaulting to 1000 [ 292.019901][T12350] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20004 [ 292.184490][T12356] netlink: 'syz.1.1607': attribute type 4 has an invalid length. [ 292.198427][T12356] sch_fq: defrate 0 ignored. [ 292.540354][T12383] syz.1.1616 (12383) used obsolete PPPIOCDETACH ioctl [ 292.733124][T12394] dvmrp0: entered allmulticast mode [ 292.854815][T12398] netlink: 'syz.0.1620': attribute type 6 has an invalid length. [ 293.533179][T12432] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.540578][T12432] IPv6: NLM_F_CREATE should be set when creating new route [ 293.547873][T12432] IPv6: NLM_F_CREATE should be set when creating new route [ 293.555136][T12432] IPv6: NLM_F_CREATE should be set when creating new route [ 293.585892][T12436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 293.775614][T12442] tipc: Enabled bearer , priority 0 [ 293.807037][T12437] siw: device registration error -23 [ 293.873754][T12442] syzkaller0: entered promiscuous mode [ 293.881904][T12442] syzkaller0: entered allmulticast mode [ 293.892205][T12442] tipc: Resetting bearer [ 293.914904][T12441] tipc: Resetting bearer [ 294.366662][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 294.897808][ T6242] tipc: Node number set to 1942481787 [ 295.431839][T12441] tipc: Disabling bearer [ 295.463090][T12458] wg1 speed is unknown, defaulting to 1000 [ 295.488412][T12458] lo speed is unknown, defaulting to 1000 [ 295.575877][T12489] __nla_validate_parse: 10 callbacks suppressed [ 295.575894][T12489] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1641'. [ 295.633480][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 295.696639][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 295.710383][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1642'. [ 295.782267][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 295.799276][T12498] bridge12: entered promiscuous mode [ 295.806056][T12498] macsec1: entered promiscuous mode [ 295.811424][T12498] macsec1: entered allmulticast mode [ 295.817359][T12498] bridge12: entered allmulticast mode [ 295.825683][T12498] bridge12: port 1(macsec1) entered blocking state [ 295.836535][T12498] bridge12: port 1(macsec1) entered disabled state [ 295.853338][T12498] bridge12: left allmulticast mode [ 295.859283][T12498] bridge12: left promiscuous mode [ 295.896040][T12505] sit2: entered promiscuous mode [ 296.003640][T12515] : renamed from veth0_to_bond [ 296.137413][T12526] netlink: 'syz.2.1654': attribute type 1 has an invalid length. [ 296.150737][T12526] netlink: 5624 bytes leftover after parsing attributes in process `syz.2.1654'. [ 296.230328][T12522] wg1 speed is unknown, defaulting to 1000 [ 296.248454][T12522] lo speed is unknown, defaulting to 1000 [ 296.932069][T12569] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1664'. [ 296.945667][T12570] netlink: 'syz.1.1665': attribute type 3 has an invalid length. [ 297.059258][T12579] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1668'. [ 297.073515][T12579] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1668'. [ 297.139089][T12582] wg1 speed is unknown, defaulting to 1000 [ 297.163862][T12582] lo speed is unknown, defaulting to 1000 [ 297.361379][T12600] netlink: 146780 bytes leftover after parsing attributes in process `syz.3.1674'. [ 297.379790][T12600] sctp: [Deprecated]: syz.3.1674 (pid 12600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.379790][T12600] Use struct sctp_sack_info instead [ 297.401195][T12597] syz_tun: entered promiscuous mode [ 297.415212][T12597] netlink: 'syz.1.1673': attribute type 16 has an invalid length. [ 297.423303][T12597] netlink: 'syz.1.1673': attribute type 17 has an invalid length. [ 297.455295][T12596] syz_tun: left promiscuous mode [ 297.522643][T12606] wg1 speed is unknown, defaulting to 1000 [ 297.536205][T12606] lo speed is unknown, defaulting to 1000 [ 297.574189][T12611] netlink: 'syz.1.1676': attribute type 13 has an invalid length. [ 297.617702][T12611] netlink: 'syz.1.1676': attribute type 17 has an invalid length. [ 297.654096][T12611] gretap0: left promiscuous mode [ 297.665667][T12611] gretap0: refused to change device tx_queue_len [ 297.672226][T12611] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 297.846296][T12618] team0: Port device bond0 removed [ 297.867018][T12618] bridge_slave_0: left allmulticast mode [ 297.893240][T12618] bridge_slave_0: left promiscuous mode [ 297.904860][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.920232][T12618] bridge_slave_1: left allmulticast mode [ 297.934803][T12618] bridge_slave_1: left promiscuous mode [ 297.946207][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.971686][T12618] bond0: (slave bond_slave_0): Releasing backup interface [ 298.022484][T12618] team0: Port device team_slave_0 removed [ 298.053013][T12618] team0: Port device team_slave_1 removed [ 298.060364][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.072222][T12618] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.081645][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.089670][T12618] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.111179][T12618] bond1: (slave gretap1): Releasing backup interface [ 298.345465][T12643] sctp: [Deprecated]: syz.1.1686 (pid 12643) Use of int in max_burst socket option. [ 298.345465][T12643] Use struct sctp_assoc_value instead [ 298.412950][T12647] wg1 speed is unknown, defaulting to 1000 [ 298.494499][T12647] lo speed is unknown, defaulting to 1000 [ 298.522950][T12660] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 298.653843][T12665] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 299.235252][T12669] wg1 speed is unknown, defaulting to 1000 [ 299.242715][T12669] lo speed is unknown, defaulting to 1000 [ 299.435243][T12703] netlink: 'syz.4.1701': attribute type 13 has an invalid length. [ 299.465662][T12702] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 299.473161][T12702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.051205][T12730] batadv_slave_1: entered promiscuous mode [ 300.112407][T12730] rdma_rxe: rxe_newlink: failed to add lo [ 300.243955][T12733] erspan0: left allmulticast mode [ 300.287782][T12733] syz_tun: left promiscuous mode [ 300.292906][T12733] syz_tun: left allmulticast mode [ 300.315762][T12733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.351059][T12733] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.400723][T12733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 300.401306][T12745] netlink: 'syz.0.1716': attribute type 1 has an invalid length. [ 300.426635][ T5990] lo speed is unknown, defaulting to 1000 [ 300.442059][ T5990] syz2: Port: 1 Link ACTIVE [ 300.452111][T12747] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 300.461554][T12747] team0: Port device batadv2 added [ 300.499322][T12745] 8021q: adding VLAN 0 to HW filter on device bond7 [ 300.507947][T12729] batadv_slave_1: left promiscuous mode [ 300.602746][T12749] bond7: (slave veth5): Enslaving as an active interface with a down link [ 300.606755][T12758] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 300.642866][T12747] syzkaller0: Caught tx_queue_len zero misconfig [ 300.663747][T12745] gretap2: entered promiscuous mode [ 300.687741][T12745] bond7: (slave gretap2): making interface the new active one [ 300.727293][T12745] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 300.765611][T12760] netlink: 'syz.2.1720': attribute type 13 has an invalid length. [ 300.791148][T12760] __nla_validate_parse: 40 callbacks suppressed [ 300.791164][T12760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1720'. [ 300.855159][T12745] macvlan0: entered promiscuous mode [ 300.874606][T12745] macvlan0: entered allmulticast mode [ 300.892790][T12745] bond7: entered promiscuous mode [ 300.924424][T12745] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 300.936441][T12745] bond7: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 300.953997][T12745] bond7: left promiscuous mode [ 300.976533][T12775] netlink: 'syz.2.1722': attribute type 12 has an invalid length. [ 301.277958][T12780] wg2: left promiscuous mode [ 301.282855][T12780] veth0_to_hsr: left allmulticast mode [ 301.293819][T12780] hsr0: left allmulticast mode [ 301.300048][T12780] hsr_slave_0: left allmulticast mode [ 301.306894][T12780] hsr_slave_1: left allmulticast mode [ 301.312415][T12780] hsr0: left promiscuous mode [ 301.322780][T12780] macvlan2: left promiscuous mode [ 301.330381][T12780] macvlan2: left allmulticast mode [ 301.386790][T12796] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1728'. [ 301.494379][T12798] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1729'. [ 301.579094][T12796] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.659675][T12806] team0: Device ipip0 is of different type [ 302.470003][T12829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 302.479292][T12829] validate_nla: 1 callbacks suppressed [ 302.479308][T12829] netlink: 'syz.1.1736': attribute type 30 has an invalid length. [ 302.583859][T10523] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.603237][T10523] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.614190][T10523] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.630102][T10523] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.881992][T12845] unsupported nlmsg_type 40 [ 302.920972][T12845] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.970569][T12850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1742'. [ 302.984848][ T6247] lo speed is unknown, defaulting to 1000 [ 302.989195][T12851] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1741'. [ 302.990701][ T6247] syz2: Port: 1 Link DOWN [ 303.021817][T12852] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1742'. [ 303.102307][ T5869] Bluetooth: hci4: link tx timeout [ 303.108588][ T5869] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 303.117992][ T5869] Bluetooth: hci4: link tx timeout [ 303.123227][ T5869] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 303.216227][T12856] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'. [ 303.261669][T12862] team0: Caught tx_queue_len zero misconfig [ 303.272933][T12856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1744'. [ 303.536520][T12866] siw: device registration error -23 [ 303.577050][T12875] batadv_slave_0: entered promiscuous mode [ 303.602240][T12874] batadv_slave_0: left promiscuous mode [ 303.862988][T12887] wg1 speed is unknown, defaulting to 1000 [ 303.872752][T12889] bridge6: entered allmulticast mode [ 303.888169][T12892] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1757'. [ 303.900396][T12891] bridge7: entered allmulticast mode [ 303.909468][T12887] lo speed is unknown, defaulting to 1000 [ 304.030111][T12889] tipc: Enabled bearer , priority 0 [ 304.110268][T12889] syzkaller0: entered promiscuous mode [ 304.120769][T12889] syzkaller0: entered allmulticast mode [ 304.132298][T12889] tipc: Resetting bearer [ 304.289101][T10523] tipc: Resetting bearer [ 304.333622][T12888] tipc: Resetting bearer [ 305.039142][ T5937] tipc: Node number set to 1421589864 [ 305.164864][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 305.927323][T12888] tipc: Disabling bearer [ 305.947543][T12916] bond0: Master is either lo or non-ether device [ 306.179163][T12908] wg1 speed is unknown, defaulting to 1000 [ 306.219057][T12908] lo speed is unknown, defaulting to 1000 [ 306.348085][T12961] wg1 speed is unknown, defaulting to 1000 [ 306.353121][T12967] netlink: 'syz.2.1776': attribute type 2 has an invalid length. [ 306.357553][T12961] lo speed is unknown, defaulting to 1000 [ 306.370656][T12967] netlink: 119 bytes leftover after parsing attributes in process `syz.2.1776'. [ 306.496233][T12965] wg1 speed is unknown, defaulting to 1000 [ 306.503685][T12965] lo speed is unknown, defaulting to 1000 [ 306.609544][T12973] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1778'. [ 306.792020][T12975] xfrm0: Caught tx_queue_len zero misconfig [ 306.831960][T12986] pimreg: left allmulticast mode [ 306.870853][T12983] pimreg: entered allmulticast mode [ 306.912936][T12988] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 306.938105][T12988] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 307.073830][T12993] syzkaller0: entered promiscuous mode [ 307.080862][T12993] syzkaller0: entered allmulticast mode [ 307.234640][ T5869] Bluetooth: hci4: command 0x0405 tx timeout [ 307.343750][T13017] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1792'. [ 307.414160][T13012] wg1 speed is unknown, defaulting to 1000 [ 307.457705][T13012] lo speed is unknown, defaulting to 1000 [ 307.585285][T13022] netlink: 'syz.4.1794': attribute type 1 has an invalid length. [ 307.593822][T13024] netlink: 'syz.3.1795': attribute type 9 has an invalid length. [ 307.851858][T13036] dvmrp0: entered allmulticast mode [ 308.139637][T13061] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1805'. [ 308.361933][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 308.377600][T13077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 308.492446][T13080] wg1 speed is unknown, defaulting to 1000 [ 308.502819][T13080] lo speed is unknown, defaulting to 1000 [ 308.509693][T13082] wg1 speed is unknown, defaulting to 1000 [ 308.518471][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 308.526838][T13082] lo speed is unknown, defaulting to 1000 [ 308.602300][T13088] FAULT_INJECTION: forcing a failure. [ 308.602300][T13088] name failslab, interval 1, probability 0, space 0, times 1 [ 308.616663][T13088] CPU: 0 UID: 0 PID: 13088 Comm: syz.0.1813 Not tainted syzkaller #0 PREEMPT(full) [ 308.616688][T13088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.616701][T13088] Call Trace: [ 308.616708][T13088] [ 308.616715][T13088] dump_stack_lvl+0x189/0x250 [ 308.616744][T13088] ? __pfx____ratelimit+0x10/0x10 [ 308.616764][T13088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.616786][T13088] ? __pfx__printk+0x10/0x10 [ 308.616836][T13088] ? __pfx___might_resched+0x10/0x10 [ 308.616854][T13088] ? fs_reclaim_acquire+0x7d/0x100 [ 308.616890][T13088] should_fail_ex+0x414/0x560 [ 308.616922][T13088] should_failslab+0xa8/0x100 [ 308.616951][T13088] __kmalloc_noprof+0xcb/0x4f0 [ 308.616975][T13088] ? kfree+0x4d/0x440 [ 308.616996][T13088] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 308.617022][T13088] tomoyo_realpath_from_path+0xe3/0x5d0 [ 308.617044][T13088] ? tomoyo_domain+0xd9/0x130 [ 308.617075][T13088] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 308.617103][T13088] tomoyo_path_number_perm+0x1e8/0x5a0 [ 308.617133][T13088] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.617180][T13088] ? __lock_acquire+0xab9/0xd20 [ 308.617231][T13088] ? __fget_files+0x2a/0x420 [ 308.617251][T13088] ? __fget_files+0x2a/0x420 [ 308.617267][T13088] ? __fget_files+0x3a0/0x420 [ 308.617283][T13088] ? __fget_files+0x2a/0x420 [ 308.617305][T13088] security_file_ioctl+0xcb/0x2d0 [ 308.617334][T13088] __se_sys_ioctl+0x47/0x170 [ 308.617361][T13088] do_syscall_64+0xfa/0x3b0 [ 308.617381][T13088] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.617400][T13088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.617420][T13088] ? clear_bhb_loop+0x60/0xb0 [ 308.617444][T13088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.617463][T13088] RIP: 0033:0x7f977a18ebe9 [ 308.617481][T13088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.617496][T13088] RSP: 002b:00007f977b071038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.617516][T13088] RAX: ffffffffffffffda RBX: 00007f977a3c5fa0 RCX: 00007f977a18ebe9 [ 308.617530][T13088] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 308.617549][T13088] RBP: 00007f977b071090 R08: 0000000000000000 R09: 0000000000000000 [ 308.617562][T13088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.617573][T13088] R13: 00007f977a3c6038 R14: 00007f977a3c5fa0 R15: 00007ffdacf85ac8 [ 308.617605][T13088] [ 308.617737][T13088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.754315][T13090] wg1 speed is unknown, defaulting to 1000 [ 308.904925][T13090] lo speed is unknown, defaulting to 1000 [ 309.122847][T13101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1814'. [ 309.236433][T13112] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1817'. [ 309.396775][T13126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1821'. [ 309.562282][T13129] wg1 speed is unknown, defaulting to 1000 [ 309.730944][T13129] lo speed is unknown, defaulting to 1000 [ 309.741483][T13136] macsec1: entered promiscuous mode [ 309.752824][T13136] batadv0: entered promiscuous mode [ 309.930183][T13141] wg1 speed is unknown, defaulting to 1000 [ 309.980800][T13141] lo speed is unknown, defaulting to 1000 [ 310.093318][T13147] wg1 speed is unknown, defaulting to 1000 [ 310.103766][T13147] lo speed is unknown, defaulting to 1000 [ 310.336202][T13164] FAULT_INJECTION: forcing a failure. [ 310.336202][T13164] name failslab, interval 1, probability 0, space 0, times 0 [ 310.361614][T13164] CPU: 0 UID: 0 PID: 13164 Comm: syz.1.1832 Not tainted syzkaller #0 PREEMPT(full) [ 310.361648][T13164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 310.361660][T13164] Call Trace: [ 310.361667][T13164] [ 310.361675][T13164] dump_stack_lvl+0x189/0x250 [ 310.361703][T13164] ? __pfx____ratelimit+0x10/0x10 [ 310.361723][T13164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.361745][T13164] ? __pfx__printk+0x10/0x10 [ 310.361774][T13164] ? __pfx___might_resched+0x10/0x10 [ 310.361791][T13164] ? fs_reclaim_acquire+0x7d/0x100 [ 310.361825][T13164] should_fail_ex+0x414/0x560 [ 310.361855][T13164] should_failslab+0xa8/0x100 [ 310.361883][T13164] __kmalloc_noprof+0xcb/0x4f0 [ 310.361906][T13164] ? tomoyo_encode+0x28b/0x550 [ 310.361929][T13164] tomoyo_encode+0x28b/0x550 [ 310.361954][T13164] tomoyo_realpath_from_path+0x58d/0x5d0 [ 310.361975][T13164] ? tomoyo_domain+0xd9/0x130 [ 310.362000][T13164] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 310.362026][T13164] tomoyo_path_number_perm+0x1e8/0x5a0 [ 310.362055][T13164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 310.362099][T13164] ? __lock_acquire+0xab9/0xd20 [ 310.362147][T13164] ? __fget_files+0x2a/0x420 [ 310.362166][T13164] ? __fget_files+0x2a/0x420 [ 310.362181][T13164] ? __fget_files+0x3a0/0x420 [ 310.362196][T13164] ? __fget_files+0x2a/0x420 [ 310.362216][T13164] security_file_ioctl+0xcb/0x2d0 [ 310.362243][T13164] __se_sys_ioctl+0x47/0x170 [ 310.362288][T13164] do_syscall_64+0xfa/0x3b0 [ 310.362307][T13164] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.362326][T13164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.362345][T13164] ? clear_bhb_loop+0x60/0xb0 [ 310.362370][T13164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.362388][T13164] RIP: 0033:0x7f142698ebe9 [ 310.362407][T13164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.362424][T13164] RSP: 002b:00007f1427783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.362445][T13164] RAX: ffffffffffffffda RBX: 00007f1426bc5fa0 RCX: 00007f142698ebe9 [ 310.362459][T13164] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 310.362471][T13164] RBP: 00007f1427783090 R08: 0000000000000000 R09: 0000000000000000 [ 310.362484][T13164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.362495][T13164] R13: 00007f1426bc6038 R14: 00007f1426bc5fa0 R15: 00007ffd9af855b8 [ 310.362528][T13164] [ 310.362549][T13164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 310.621808][T13172] netlink: 'syz.4.1834': attribute type 13 has an invalid length. [ 310.641496][T13172] netlink: 'syz.4.1834': attribute type 17 has an invalid length. [ 310.938356][T13183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.003716][T13183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.208117][T13172] ip6tnl0: left promiscuous mode [ 311.213121][T13172] ip6tnl0: left allmulticast mode [ 311.235860][T13172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.350898][T13172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.374404][T13176] xfrm0: entered promiscuous mode [ 311.380976][T13176] xfrm0: entered allmulticast mode [ 311.556955][T13179] wg1 speed is unknown, defaulting to 1000 [ 311.572238][T13179] lo speed is unknown, defaulting to 1000 [ 311.632327][T13203] __nla_validate_parse: 5 callbacks suppressed [ 311.632345][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1842'. [ 311.751759][T13211] netlink: 'syz.1.1844': attribute type 1 has an invalid length. [ 311.765522][T13211] netlink: 'syz.1.1844': attribute type 4 has an invalid length. [ 311.817303][T13211] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1844'. [ 311.877965][T13221] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1846'. [ 311.915640][T13214] wg1 speed is unknown, defaulting to 1000 [ 311.923348][T13214] lo speed is unknown, defaulting to 1000 [ 312.011227][T13223] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1847'. [ 312.020231][T13227] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1848'. [ 312.366176][T13240] veth0_to_bond: entered allmulticast mode [ 312.498129][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1857'. [ 312.562569][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1859'. [ 312.590099][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 312.673703][T13255] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1859'. [ 312.739397][T13250] vlan0: entered promiscuous mode [ 312.744472][T13250] team0: entered promiscuous mode [ 312.749826][T13250] batadv2: entered promiscuous mode [ 312.761179][T13250] team0: Device vlan0 is already an upper device of the team interface [ 314.055187][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 314.127530][T13273] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 314.273217][T13292] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 314.288651][T13293] ip6tnl2: entered promiscuous mode [ 314.294019][T13293] ip6tnl2: entered allmulticast mode [ 314.301405][T13293] team0: Refused to change device type [ 314.458489][T13293] wg1 speed is unknown, defaulting to 1000 [ 314.478076][T13293] lo speed is unknown, defaulting to 1000 [ 314.495199][ C0] [ 314.497561][ C0] ================================ [ 314.502675][ C0] WARNING: inconsistent lock state [ 314.507803][ C0] syzkaller #0 Not tainted [ 314.512224][ C0] -------------------------------- [ 314.517331][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 314.524169][ C0] syz.0.1866/13306 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 314.530620][ C0] ffff88807d6858a8 (&p->tcfa_lock){+.?.}-{3:3}, at: est_timer+0xd4/0x9f0 [ 314.539077][ C0] {SOFTIRQ-ON-W} state was registered at: [ 314.544787][ C0] lock_acquire+0x120/0x360 [ 314.549387][ C0] _raw_spin_lock+0x2e/0x40 [ 314.553987][ C0] tcf_vlan_init+0x973/0xdc0 [ 314.558667][ C0] tcf_action_init_1+0x463/0x6d0 [ 314.563696][ C0] tcf_action_init+0x2cf/0xab0 [ 314.568549][ C0] tc_ctl_action+0x430/0xbd0 [ 314.573224][ C0] rtnetlink_rcv_msg+0x77c/0xb70 [ 314.578241][ C0] netlink_rcv_skb+0x205/0x470 [ 314.583091][ C0] netlink_unicast+0x82f/0x9e0 [ 314.587950][ C0] netlink_sendmsg+0x805/0xb30 [ 314.592821][ C0] __sock_sendmsg+0x219/0x270 [ 314.597583][ C0] ____sys_sendmsg+0x505/0x830 [ 314.602448][ C0] ___sys_sendmsg+0x21f/0x2a0 [ 314.607205][ C0] __x64_sys_sendmsg+0x19b/0x260 [ 314.612224][ C0] do_syscall_64+0xfa/0x3b0 [ 314.616820][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.622794][ C0] irq event stamp: 1550 [ 314.626936][ C0] hardirqs last enabled at (1550): [] _raw_spin_unlock_irq+0x23/0x50 [ 314.636654][ C0] hardirqs last disabled at (1549): [] _raw_spin_lock_irq+0x7d/0xf0 [ 314.646196][ C0] softirqs last enabled at (1064): [] __irq_exit_rcu+0xca/0x1f0 [ 314.655474][ C0] softirqs last disabled at (1515): [] __irq_exit_rcu+0xca/0x1f0 [ 314.664840][ C0] [ 314.664840][ C0] other info that might help us debug this: [ 314.672893][ C0] Possible unsafe locking scenario: [ 314.672893][ C0] [ 314.680331][ C0] CPU0 [ 314.683601][ C0] ---- [ 314.686875][ C0] lock(&p->tcfa_lock); [ 314.691121][ C0] [ 314.694563][ C0] lock(&p->tcfa_lock); [ 314.698974][ C0] [ 314.698974][ C0] *** DEADLOCK *** [ 314.698974][ C0] [ 314.707108][ C0] 3 locks held by syz.0.1866/13306: [ 314.712328][ C0] #0: ffff88807b358ca0 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x16f/0x380 [ 314.721723][ C0] #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x250 [ 314.731287][ C0] #2: ffffc90000007be0 ((&est->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x5f0 [ 314.740517][ C0] [ 314.740517][ C0] stack backtrace: [ 314.746401][ C0] CPU: 0 UID: 0 PID: 13306 Comm: syz.0.1866 Not tainted syzkaller #0 PREEMPT(full) [ 314.746420][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.746430][ C0] Call Trace: [ 314.746436][ C0] [ 314.746442][ C0] dump_stack_lvl+0x189/0x250 [ 314.746463][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.746480][ C0] ? __pfx__printk+0x10/0x10 [ 314.746501][ C0] ? print_lock_name+0xde/0x100 [ 314.746523][ C0] print_usage_bug+0x297/0x2e0 [ 314.746537][ C0] valid_state+0xc3/0xf0 [ 314.746551][ C0] mark_lock_irq+0x36/0x390 [ 314.746564][ C0] ? __kernel_text_address+0xd/0x40 [ 314.746584][ C0] ? unwind_get_return_address+0x4d/0x90 [ 314.746604][ C0] mark_lock+0x11b/0x190 [ 314.746617][ C0] __lock_acquire+0x680/0xd20 [ 314.746641][ C0] ? est_timer+0xd4/0x9f0 [ 314.746661][ C0] lock_acquire+0x120/0x360 [ 314.746681][ C0] ? est_timer+0xd4/0x9f0 [ 314.746704][ C0] ? lockdep_unlock+0x89/0x120 [ 314.746724][ C0] _raw_spin_lock+0x2e/0x40 [ 314.746746][ C0] ? est_timer+0xd4/0x9f0 [ 314.746765][ C0] est_timer+0xd4/0x9f0 [ 314.746787][ C0] ? call_timer_fn+0xbe/0x5f0 [ 314.746809][ C0] ? call_timer_fn+0xbe/0x5f0 [ 314.746829][ C0] ? __pfx_est_timer+0x10/0x10 [ 314.746853][ C0] call_timer_fn+0x17e/0x5f0 [ 314.746874][ C0] ? __pfx_est_timer+0x10/0x10 [ 314.746894][ C0] ? call_timer_fn+0xbe/0x5f0 [ 314.746914][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 314.746938][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.746959][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.746972][ C0] ? __pfx_est_timer+0x10/0x10 [ 314.746993][ C0] __run_timer_base+0x61a/0x860 [ 314.747025][ C0] ? ktime_get+0x3e/0x1f0 [ 314.747065][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 314.747084][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 314.747109][ C0] run_timer_softirq+0xb7/0x180 [ 314.747130][ C0] handle_softirqs+0x283/0x870 [ 314.747147][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 314.747164][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 314.747183][ C0] __irq_exit_rcu+0xca/0x1f0 [ 314.747198][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 314.747216][ C0] irq_exit_rcu+0x9/0x30 [ 314.747229][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 314.747254][ C0] [ 314.747259][ C0] [ 314.747265][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.747282][ C0] RIP: 0010:__pte_offset_map_lock+0x136/0x210 [ 314.747311][ C0] Code: 2c 2f 48 83 c5 28 48 89 e8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df 42 80 3c 30 00 74 08 48 89 ef e8 6e 22 13 00 48 8b 6d 00 <48> 89 ef e8 92 e0 6c 09 43 80 3c 34 00 74 08 48 89 df e8 53 22 13 [ 314.747325][ C0] RSP: 0018:ffffc9001af9f948 EFLAGS: 00000246 [ 314.747339][ C0] RAX: 1ffffd400028853d RBX: ffff8880312f8000 RCX: ffff8880773e3c00 [ 314.747351][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 314.747361][ C0] RBP: ffff888048428960 R08: 0000000000000000 R09: ffffffff820ff2c9 [ 314.747371][ C0] R10: dffffc0000000000 R11: ffffed100ee7c781 R12: 1ffff1100625f000 [ 314.747383][ C0] R13: 00000000014429c0 R14: dffffc0000000000 R15: ffffea0000000000 [ 314.747397][ C0] ? ___pte_offset_map+0x29/0x250 [ 314.747421][ C0] ? __pte_offset_map_lock+0x103/0x210 [ 314.747444][ C0] follow_page_pte+0xc4/0x13e0 [ 314.747469][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 314.747492][ C0] __get_user_pages+0xa8e/0x2ce0 [ 314.747524][ C0] populate_vma_page_range+0x29f/0x3a0 [ 314.747544][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 314.747562][ C0] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 314.747586][ C0] ? down_read+0x1ad/0x2e0 [ 314.747604][ C0] __mm_populate+0x24c/0x380 [ 314.747623][ C0] ? __pfx___mm_populate+0x10/0x10 [ 314.747642][ C0] ? up_write+0x1c4/0x420 [ 314.747660][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 314.747680][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 314.747696][ C0] ? exc_page_fault+0x76/0xf0 [ 314.747714][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 314.747734][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 314.747751][ C0] do_syscall_64+0xfa/0x3b0 [ 314.747767][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.747782][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.747797][ C0] ? clear_bhb_loop+0x60/0xb0 [ 314.747814][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.747829][ C0] RIP: 0033:0x7f977a18ebe9 [ 314.747842][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.747856][ C0] RSP: 002b:00007f977b02f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 314.747871][ C0] RAX: ffffffffffffffda RBX: 00007f977a3c6180 RCX: 00007f977a18ebe9 [ 314.747882][ C0] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 314.747892][ C0] RBP: 00007f977a211e19 R08: ffffffffffffffff R09: 0000000000000000 [ 314.747902][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 314.747912][ C0] R13: 00007f977a3c6218 R14: 00007f977a3c6180 R15: 00007ffdacf85ac8 [ 314.747929][ C0] [ 315.289046][T13309] netlink: 'syz.4.1870': attribute type 24 has an invalid length. [ 315.297335][T13309] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 315.306879][T13309] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 316.996816][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len