last executing test programs: 2.472745182s ago: executing program 3 (id=2137): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xff04, 0x0) 2.47146135s ago: executing program 4 (id=2138): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x100}, 0x1, 0x7}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480)) (async) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000480)) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd25, 0xfffffff8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x4000000) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd25, 0xfffffff8, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r5) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xfc691f4bb2ece6da}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xd8, r7, 0x803, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xe, 0x67}}}}, [@NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3852ead728a88a4d3e208afef41df565"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6e3d8388d1d71a02a52764c6d86143d37147e9b8491d0935"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1237ba5a1b61f676c77d02a77638941f8f3591066d36de6f981f6202a54032eb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="ce8eada15561464d05059965650f7972"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x101}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="14139984d2f01494aabdcc49b25c63fa732190fcb1b12722"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x49e}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) r9 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000000), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@random="e973abc7ac22", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xfffffffffffffffa}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045000800000000000000907800000000000000000000000700109078220600010000e9c6d579b8ad648adef3660c4f5adde27386cec1994c466d52e65eb76e70c1612801ef56b89098832f06293c616842eb2f7037acc1439536f080c54a3eb1ad99b57e058b6db1d769fd20b1b979df89795dd6c18cb39e8e583cb0a565a8f714e9811cc1fa2240d706db2aa0afdb3ed605bcfdd9e1ac304cb97a9c776a593c82bd0123e09d2019c5bdd6011e4b164bf9b389f694b2"], 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYRESOCT=r10, @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x0) 2.380246209s ago: executing program 0 (id=2139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$ipvs(0x0, r0) sendmsg$IPVS_CMD_DEL_DEST(r0, 0x0, 0x20) r3 = socket(0x1d, 0x2, 0x6) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r5, 0x3, {0x0, 0xf0, 0x2}, 0x1}, 0x18) setsockopt$llc_int(r3, 0x6a, 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_OCB(r6, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f00000024c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.279776009s ago: executing program 4 (id=2140): r0 = socket(0x1e, 0x805, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x12002, 0x3348a}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x426, 0x3ff, 0x9}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x80, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_FD0={0x8, 0x1, @udp6=r0}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @local}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x80}}, 0x0) 2.223547758s ago: executing program 1 (id=2141): sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04020714056406040c5c0009003f0006180a0200000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f5090", 0x52, 0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x49) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x49) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000005a80)=[{{&(0x7f0000000940)=@hci={0x1f, 0x4}, 0x80, &(0x7f0000001e00)=[{&(0x7f00000009c0)="08c70534087ab26885d776c313b95a4a78cc5fd69840e13c9889bb2cc9914e45f3e93647bfb1ae3ebcc99d147f1a0eb089ade5e510989e15b11746bd56612ef157c48a734d56f53ac322890ebfa412a8658495e5dc9fa572ea6b1fb818a6f75ea85ddd19b0c56c", 0x67}, {&(0x7f0000000ac0)="a9451a6110e6509d9bbc70ba4138157b437b538e8cdb87eb0a", 0x19}], 0x2}}], 0x1, 0x4818) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480), &(0x7f0000000500)=0x4) (async) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000480), &(0x7f0000000500)=0x4) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x7fffffff, @private2, 0x6}, 0x1c) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) socket$netlink(0x10, 0x3, 0x4) (async) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000180)="480000001400197f09004b0101048c59028800ffff0001000000000028213ee20600d4ff4affff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace35ee8b12c00", 0x48}], 0x1) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000340)={{r0}, "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"}) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000001b00)=[{r7, 0x5}, {r7, 0x400}, {r1, 0x3040}, {r1, 0x20}], 0x4, 0x0) (async) poll(&(0x7f0000001b00)=[{r7, 0x5}, {r7, 0x400}, {r1, 0x3040}, {r1, 0x20}], 0x4, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4040040) r8 = socket(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000200)="c9fe00001d008104e00f80ecdb4cb9f207c804a01000000088080efb0a000200250ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000008004"], 0x26}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000a40)={r10, "8d804cd5ca75c723da52eabc17eba6d4"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001340)={r10, 0xfa3b, 0x0, [0x9, 0x400, 0x121d, 0x4, 0x1], [0x2, 0x3, 0x81, 0x0, 0x4, 0x400, 0x8, 0x7, 0x9, 0x684e, 0xe, 0xe, 0x7ffd, 0xfffffffffffffff8, 0x3, 0x8, 0x1e78, 0xfffffffffffffffb, 0x1, 0x80, 0x7ff, 0x3dd, 0x9, 0xe, 0x80000001, 0x100, 0x3, 0x7, 0x4, 0xe, 0x200000000000, 0x79, 0x0, 0x6, 0x1000, 0x9, 0xb5ed, 0x56e, 0x6, 0x2, 0x2, 0xfd3, 0x100, 0x5, 0x8000000000000001, 0x9, 0x4, 0x7fffffffffffffff, 0x8, 0x2, 0x3ff, 0x9, 0x4, 0x173f, 0xa0, 0x100000000, 0x2, 0x7fffffff, 0xe0, 0x4275, 0x433d, 0x4, 0x5, 0x9, 0x2024, 0x0, 0xad7, 0x8, 0x6, 0x5a2, 0x8, 0xe84, 0x2, 0x7ff, 0x6, 0x8, 0x6, 0xaaf, 0x3, 0x3, 0x7, 0x402, 0x1, 0x9c, 0xdf00000000, 0x10000, 0x7fffffff, 0x5, 0x2, 0x9, 0x1141df2, 0xfffffffffffffff2, 0x8, 0x2, 0x0, 0x1, 0x0, 0x7, 0x2, 0x7, 0x0, 0x8, 0x1, 0x7fffffffffffffff, 0x400, 0xffffffff7fffffff, 0x2, 0x4, 0x5, 0x1, 0x9, 0xc08e, 0x8, 0x7, 0x1034, 0x7, 0x2, 0x5, 0x67, 0x63e91b69, 0x80]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001340)={r10, 0xfa3b, 0x0, [0x9, 0x400, 0x121d, 0x4, 0x1], [0x2, 0x3, 0x81, 0x0, 0x4, 0x400, 0x8, 0x7, 0x9, 0x684e, 0xe, 0xe, 0x7ffd, 0xfffffffffffffff8, 0x3, 0x8, 0x1e78, 0xfffffffffffffffb, 0x1, 0x80, 0x7ff, 0x3dd, 0x9, 0xe, 0x80000001, 0x100, 0x3, 0x7, 0x4, 0xe, 0x200000000000, 0x79, 0x0, 0x6, 0x1000, 0x9, 0xb5ed, 0x56e, 0x6, 0x2, 0x2, 0xfd3, 0x100, 0x5, 0x8000000000000001, 0x9, 0x4, 0x7fffffffffffffff, 0x8, 0x2, 0x3ff, 0x9, 0x4, 0x173f, 0xa0, 0x100000000, 0x2, 0x7fffffff, 0xe0, 0x4275, 0x433d, 0x4, 0x5, 0x9, 0x2024, 0x0, 0xad7, 0x8, 0x6, 0x5a2, 0x8, 0xe84, 0x2, 0x7ff, 0x6, 0x8, 0x6, 0xaaf, 0x3, 0x3, 0x7, 0x402, 0x1, 0x9c, 0xdf00000000, 0x10000, 0x7fffffff, 0x5, 0x2, 0x9, 0x1141df2, 0xfffffffffffffff2, 0x8, 0x2, 0x0, 0x1, 0x0, 0x7, 0x2, 0x7, 0x0, 0x8, 0x1, 0x7fffffffffffffff, 0x400, 0xffffffff7fffffff, 0x2, 0x4, 0x5, 0x1, 0x9, 0xc08e, 0x8, 0x7, 0x1034, 0x7, 0x2, 0x5, 0x67, 0x63e91b69, 0x80]}) sendmsg$nl_xfrm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a0001000000000000000000fc000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00fe8000"/188], 0x104}}, 0x0) 2.22288239s ago: executing program 3 (id=2142): socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x20}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x3, 0x18}, 0xc) write(r1, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) 2.198454534s ago: executing program 2 (id=2143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091ff0000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000000903000000000014000000070000000900010073797a3000005cb518000200070001"], 0x38}, 0x1, 0x0, 0x0, 0x4040884}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf2501"], 0x114}], 0x1}, 0x0) 2.186916906s ago: executing program 0 (id=2144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d5, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@remote, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in=@remote, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x6d}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x2}]}]}, 0x1bc}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x20040000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000001c0)={0x3, 'vcan0\x00', {0xdb}}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0xfffff691}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8090}, 0x0) 2.028906125s ago: executing program 4 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02001c00004a"}) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r4, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e28, 0x2, @mcast1, 0x5}, 0x1c) sendmmsg$inet(r2, &(0x7f0000000540)=[{{&(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000340)="c771", 0x2}], 0x1}}], 0x2, 0x4008000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f00000003c0)={'wlan1\x00', 0x7c}) sendmsg$kcm(r1, &(0x7f0000002a80)={&(0x7f0000000040)=@phonet={0x23, 0x5, 0x8, 0x9}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="84e36f00a3b5e9b92d40d47dbcb1b1688972d950e2cbcbd22397798cce2e0a9f36c245b1b359f3a0fe5e8a0fcc366e9deda8a4", 0x33}, {&(0x7f0000000200)="35bf74e7086668e0ad21f4d8476a785bf0e1", 0x12}, {&(0x7f0000000240)="60941794f82e590700522319a89b5ea58700e9472f7ed69c44e83a26a2c96271cf88e39f1c155b94f65556ddced2962a8cdff8afbac40981b3945e6346ac101eafbd29ec7e879578fc42d3650604514821e750236d318f20e59d547d5a38", 0x5e}], 0x3, &(0x7f0000002ac0)=[{0xf8, 0x109, 0x1, "50a2bbddb95c1db34f692c76e787cb517a419517fa9745d011bbda910f3692d409bad18b4e779f0f459acf6d35f708dcd95d1eef3e0319887754e1d2295a8e53a42d5fb35ad04e5300491a23b371a665c3f47ead5422ba25dbfe0385c0bfc60e132f2317e611e0f72f9e408824fd4abfc792f4c7e64ba2ed5b6b6df644d144f84f6e32e3199bbdcc190b992532ef796a96ea0e588a1907e4652fa9575c30fb6ef00ac93d011718c041fd350660a67f894f37fbef0f09cb1eb6b3032c5df3630037134fc656d557f6463be1ff50849eb1b36512657be1ce5bb4f0b8bbb0d321359bcd03"}, {0x1b0, 0x6, 0x2000003, "083d26c67b117f51b8ec4d1b95d3b5fb629af08e3dd7a9f4528bbfd23f9c9111ba34b1acd38a42b8f9be0ce97c64f24fdcc0056bf00e842095516cefba01d67c4c07cf700cc53ad7d8aa7bcb4a51891559f5000cafccb594ff7f5d41681e3a55034761610f5343eb5ad239b20dd1ef49699d3127f8e97aeb99ecbb3837e4b594bd6a6e4b7502b5050e1662eb9c1ceba7950d1973f1c9412de80665208b0132dcf6e5354cfa4bfb04d50aaa902808508e33b32b7a9bf6a625c9a18fe609efd13a5fcf8f5644e32b40c8f01e6903648efb4996562e787c643ef06f83488a210800000022244db6fb03d1cdff16fd3258cf52508fe3d17875a42459c961228c6b213ba212a487e00944d41fb2ff7a4314dc1744691ac6e378b8ec9f73720e5055b4639d6e8fd2653eb79e8ca1d2133d150bf391cf1635de7bed79df87e9158de0ccf76ee9fcfbedd8774eb46d2677631e9adee6b4ee75e2751dcfb3fca43a90a24db592f2a86ba1028e11ac4adc214864f55ac9bd284197e90591de0fbc4894bdc6758fe3fb37efb9aaed75f103361f1a47cdccd3ab03da2ddb4584298e6d"}, {0x38, 0x116, 0x5, "6bce87073af997c5b7b4c27205ecb30f7f5a552549e2ca475893cb42725e67598840668bcb15f7"}, {0x18, 0x111, 0x78, "3179760af65942dd"}, {0xf0, 0x109, 0x4, "9e4976095092631ff4221bf846fcb126b7468814a710dde719b499852537882767ed0cfb4fa6985e4311407dc96066a91e5d1e81e1f6799ea8f0248a42244854aa75e86b0be5dbbb284d37a803aea6c8a85f2c82965381e679c1f35863b67f2614033cf21f89d5c0648d0a3e5b498f58af3800942de082c7734ad92875e8ce1d35be4f1e9e5c4358b243c19ef7ed3afa96563496a53ae792abfbe4cedf24ed01d2e438d2ba0ac213e839cda70f19318562526c03bff4f1e5903383aeef3b7428bb3a2b737a97d28d4077bc0b846a45d4530431eaeaa33cdc9bd7c2"}, {0x1010, 0x10e, 0xfffffff9, "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"}], 0x13f8}, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x28}}, 0x4000000) 2.028609051s ago: executing program 3 (id=2146): socket$inet(0x2, 0x800, 0xfffffff8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x80000) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2}, 0xc) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x74c94d4b24a597d6, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4004015) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x40) 1.918304716s ago: executing program 2 (id=2147): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) (async) r2 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, 0x0, &(0x7f0000000100)=0x2be628de19587dbc) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x8, 0x5, 0x9, 0xc, 0x0, 0x1, 0x0, [@sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bbc, 0x180, {0x6, 0xff, 0x2, 0x5, 0x0, 0x7, 0x0, @in=@empty, @in=@broadcast}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x60}, 0x1, 0x7}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0001"], 0x48}}, 0x0) 1.905147293s ago: executing program 1 (id=2148): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)={0x0, 0x1, 0x1, 'U'}, 0x9) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', 0x100}) 1.778374936s ago: executing program 3 (id=2149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f00000000c0)=r1, 0x4) listen(r2, 0x0) close(r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r5 = socket(0x400000000010, 0x2, 0xfffffffd) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbf8, {0x0, 0x0, 0x0, r7, {0xfff0, 0x1}, {0xffff, 0x5}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x44040) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0x300, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {0x7}, {0x11, 0x10}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80040000}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48000}, 0x2008c004) 1.777131766s ago: executing program 4 (id=2150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xd0, &(0x7f0000002700)=0x3, 0x4) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050014000300000008000840000000000500050002000000050001"], 0x60}}, 0x0) 1.702744413s ago: executing program 0 (id=2151): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x5, 0x8) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000000000)=0x5, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) r2 = epoll_create(0xa66780a0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0xa000001c}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)={0xa000001c}) shutdown(r0, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x9, 0x8}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000000c0)={r0, 0x9, 0x9, 0x8}) 1.556504701s ago: executing program 0 (id=2152): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004000}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x40, 0x0, 0x6}, 0xc) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@ifindex, 0xffffffffffffffff, 0x2f}, 0x20) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) listen(0xffffffffffffffff, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="07000000000000000000b9602ed0f902001f001400018006f600000200dffeaed36595d72cb7d1dea49f530000080003"], 0x28}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x64, r6, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) accept$alg(r9, 0x0, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000a00000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xffffffffffffff2b, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd9}, 0x94) 1.495689485s ago: executing program 4 (id=2153): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = epoll_create(0x1) epoll_pwait(r4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x263, &(0x7f0000000040)={[0x6]}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="410401", @ANYRES64=r2], 0x4) 1.494744464s ago: executing program 1 (id=2154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x100}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000740)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f00000003c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000440)="9594716177bd703c6c44924675d102c4ebbaebb19dbafbed3ee795f822ca265d10ada7a3338e6dfaacda528cc64b5a5238f3a66be261dfe8961f3d2f4f5ca6c9dc637f7aceb8dc543d5302be181082aec74ab91ef01661343b46ae810422ab80c7e7bef41ddcbe0958c1335b1ca7a2b09d8156955c47288ec036997e50cdb1aa0f27b1ce3865ba5cbbc08409725ed5dd04f6c239ddb92ab362032a10d242abbc565d725f0b91c71338adfb4ddfef51bcc4e06f1da1b442df30a85f3304fbfd3d6b283bdf8f959111cc8ade67bbb5f264e04285573f4531864951b5c419080ea15e68617c091064", 0xe7}, {&(0x7f0000000540)="e8ff62f5d2fb3541d816234660b6c209fc04f2cd315c8e4e2aac98762e3c3b176cebc59374f2473c66efe5b4d5926c46a02afbf619ba84bb1203c3f6e3a28923facae645e51dcf28101da82916db41cdb7e6a2d102a72f45d9e1a86d2daffa5ec4558cb37ea916c001d5a29fbb123395bf9773f73af14e2dca54bd48f48b72eeb56f59c35fbe995d", 0x88}, {&(0x7f0000000600)="571632ce72ec0cd85ccd8fbd448485b6e43b9676ad2e27f117e78f793cb028c2df909bd5ce79d6c4a2df6579b998be894dfbf1fac31a741cb2dbe0e38f93c526757cd52be549275ec844825abaa1b2e12bb72e", 0x53}, {&(0x7f0000000680)="530f0835de029a34ae4140f33bdb0d9db3eead0a0b4cbd098aac305f1d9325bbcc0e004d15809bfeb57a0d915c7a6bda43b4ef8e2c9bf35559e46d90f29e8c14702ccf6c811cbb1f0e5ee7b1a3c7c3d2569d7c4600113f", 0x57}], 0x4, &(0x7f00000007c0)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xf2, [@dev={0xac, 0x14, 0x14, 0xf}, @multicast1, @remote, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @lsrr={0x83, 0x7, 0x9b, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0xb4, [@empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x4, 0xe2, 0x3, 0x9}, @lsrr={0x83, 0x7, 0x37, [@dev={0xac, 0x14, 0x14, 0xd}]}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x88, 0x9, "5e4165ce0079e2"}, @timestamp={0x44, 0x2c, 0x49, 0x0, 0x9, [0x0, 0xb, 0x5, 0x3, 0x6, 0xfffffff7, 0x377, 0x0, 0x5, 0x45c]}, @timestamp_addr={0x44, 0xc, 0xec, 0x1, 0x4, [{@rand_addr=0x64010100, 0x3}]}, @timestamp={0x44, 0x18, 0x17, 0x0, 0xc, [0xf, 0x1, 0x0, 0x5, 0x1000]}, @lsrr={0x83, 0x1b, 0xb, [@local, @local, @remote, @rand_addr=0x64010101, @broadcast, @private=0xa010102]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x180}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xac, r6, 0x300, 0x70bd25, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) getsockopt(r4, 0x1, 0x7, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) shutdown(r0, 0x0) 1.402198386s ago: executing program 2 (id=2155): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002d00010026adb000fcdbdf250400000008000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1.294298695s ago: executing program 3 (id=2156): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff4a}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x68, &(0x7f0000000200)}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x20000dd, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80000001}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @rand_addr=0x64010100}}, 0x0, 0x0, 0x0, 0x0, 0xce03d4}, 0x9c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000640)=""/82, 0x52}], 0x2}, 0x40}], 0x1, 0x102, 0x0) 1.152315551s ago: executing program 1 (id=2157): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffffc}}, @TCA_CHOKE_STAB={0x104, 0x2, "554b956aa3fcfbc4a187baf0437163b5d33108db016465f92a93480d2c246d90f03741da6ee916f7c9917dbd81da67d6150151679559af8402b932745d19fbfbd679c133c4714565f91cd05790d990818bac85598b6a844cb2c2d277aaca9a88ee0e6a834ba02b4e549f11fb13e9fe33730c55997f2d3b7e6469210db81587fc522295f49a78f4e08ddfb01172b12a19b303a0c47fa3500cdc3e6725a79dcd3731c37083c3bbe73c43e7e2ea82c72986a1499c677c565ea1cfc874e7e978e4ebe8d338f0b37807d40333ee570133982998623ec809826f1009856a9d9d8e839c65d3ead78c6b3cb8f7beee8e59f19de93d06628a2cdfa4333d96882b96c36cc3"}]}}]}, 0x3a8}}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={r3, @loopback, @remote}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r4, 0x11c, 0x4, 0x0, &(0x7f0000000380)) r5 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x9}, 0x1c, 0x0}, 0x4b12) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0xc0) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000000000)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x500, 0xfffffffe, 0x20}, 0x48) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r8) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000040)) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r11 = getpid() sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, 0x41, 0x100, 0x70bd25, 0x25dfdbfd, {0x1c}, [@typed={0x8, 0x5f, 0x0, 0x0, @pid=r11}, @typed={0xc, 0x27, 0x0, 0x0, @u64=0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000809}, 0xa080) socket$packet(0x11, 0x2, 0x300) 1.123708883s ago: executing program 2 (id=2158): sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x118, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xffff0000}, @NFC_ATTR_VENDOR_DATA={0x61, 0x1f, "27a6daa3d8425ab91f05c9d75a53804426cbffa6fce4a2c4e1432e9d148584268fed4538d243141d4ebca3f4de9feaee6aab6629563f92b469f0ab451501049ee1353253200c1408c4bc30b8637c528574fefc019714a2109bbf98c993"}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x40a8}, @NFC_ATTR_VENDOR_DATA={0x90, 0x1f, "93a428af6c504916b5a48002a3843bb639ec7db944bb09f7d0fb735b324f2abb7f438c6c0a71ee1e1ce10ec921ffa9fcfe2da69c29d03b1fa04e8557afa8e4b531b2ea0da1616209e2f11d1b3d07eccc7e55a46743a4c50c8963671c817cefd97ac4b978251e3a58e0e7bb6a58a4c058211b72de9f12cc176db0961ccb2462d5d0f5df7f4f7e9a6c477003c7"}]}, 0x118}, 0x1, 0x0, 0x0, 0x44}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8001, 0x62}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000480), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r3, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x800) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r1, 0x24, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x48004) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x1409, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000020}, 0x20000410) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x138, r1, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x23d6}, @NL80211_ATTR_VENDOR_DATA={0xf6, 0xc5, "c8dcc7bf7d70fa1035c364ff27f209a7cd92c4b81adaa6620fae2b92387de295462ec5a2155a6bb21a8c7075104d7ded663bcc118ce248a4f202fac27181aef9f52535ea80da91f7de2b9215ebf944d9c74820243b21d430d3883143bc148ca91aaa2390f328eacc02d2768df649a4dca94c5cf0b4f747473efa2f9bc4abef2825558d5da438004b7765adbe66b31636e6436bb6426ff0654ef659f442842177653f691192719fb1e1efd0fa4bf46c324900d1f2d718d68c9c3a832c37a2302316e5b3e20e8241156641b960e7c16acab5b376d83824b306f20a3ac035b65b2d1de9156f639487fbd743eb66fdaacc09b568"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffffa}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xf161}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7c}]}, 0x138}, 0x1, 0x0, 0x0, 0x10}, 0x4880) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000a80)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r5, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, r6, 0x302, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x7}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x1b}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4044014) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r5) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, r8, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004041}, 0x20008045) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x58, 0x1406, 0x400, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000e80), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4040) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004810}, 0x40) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000001080)) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000010c0)={0x0, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000002700)={&(0x7f0000001180)=@in6={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1ff}, 0x1c, &(0x7f0000002600)=[{&(0x7f00000011c0)="c6b6805d8274ad3402c6fd8966f78c5d3c836fce8ac9119b28715c740a217a5c6736d0ae6c5ece290d4ac970a89a4f287a0dcf2825", 0x35}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="2de9cc578f5c0f60d1c5749ca8b8780ebf2fc899e6b1f2b88b63add4f2ff99a80bd4175cce41039bb0a967a4eb4375198bde74032c16de8fcc67a4971fa5acc39982eded499463ef370fdd8cb56b3aa972349cfd7c59d263bbceae81", 0x5c}, {&(0x7f0000002280)="6ba8c96eec2c13bf4ac998e2852b30cf81533bda7e8dd28f36fabbe76f3f300f55923a877f8650da83f6db3b9a861e548eb349697bbdf7138f77b81fc9f407b1d50308435b1852621ef43e2090a0bea003e1d54f9e0be6db24f8357d985414e2391421ea287aa1661ce313aadca2d2a77a7683738e052650d528bf8b3c020f594422591e07ac1a63529a1f315689bb024aeb598e53c7532641611a9675b4da482f70c1fff4bca3ba38f192c1fe8389d5bb67174ea36d577649d86a9e90d95b3861830f75946e066772a2fad283add6844689be0bd6", 0xd5}, {&(0x7f0000002380)="ac208602e8d887da5f84671a326b0a719272ac1fb3807fb3c5cadfe8672431d443a727b3c2843af3f3fcea638a53d7640b26e908ec20e94e44464e1cc9aa18cb4a094c925827816ba59253486f590f2aeeb445f7e699916dd2f58811b6430108daed9629aae6a96aa5a792338f0501756eeba902dc2fe0d120642fc1419a18deef9c946cab3b77d64bd1efe2e4ad8a6b1268af4b650a", 0x96}, {&(0x7f0000002440)="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", 0xfb}, {&(0x7f0000002540)="f82986ac6e6fb73cc165ce", 0xb}, {0xfffffffffffffffe}, {&(0x7f0000002580)="e75f35c56669f40030943f1e8793033588dd8387d287707dbf", 0x19}, {&(0x7f00000025c0)="af3e73f6fb5ed6e525ba2e7f5aa10bbc1d8b46a15f975388d445d8ba532134c7ac5ba36cc19ebb547e18bc", 0x2b}], 0xa, &(0x7f00000026c0)=[@init={0x18, 0x84, 0x0, {0x1, 0x10, 0x8001, 0x80}}, @init={0x18, 0x84, 0x0, {0x9, 0x9, 0x901}}], 0x30, 0x4080}, 0x4) socket$kcm(0x29, 0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000002740)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0xfffffff8, 0xfffc, 0x8, 0x81, 0x8, 0x4, 0x2}, &(0x7f0000002800)=0x9c) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f0000002840)=r11, 0x4) 994.20241ms ago: executing program 0 (id=2159): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x20000004}) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x88}}, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xa0000004}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x2}) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x20000004}) (async) epoll_pwait(r2, &(0x7f0000000180)=[{}], 0x1, 0xc, 0x0, 0x0) (async) 747.905679ms ago: executing program 0 (id=2160): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r1}, 0x20) (async) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000900020073797a31000000000d000300686173683a6e6574000000000500040000000000050005000a00000005000100060000000c0007800800068000"], 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 460.973055ms ago: executing program 4 (id=2161): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) sendmmsg(r2, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)='r', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000010c0)="f3", 0x1}], 0x1}}], 0x2, 0x20004841) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000040), &(0x7f0000000080)=0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ipvlan1\x00', 0x0}) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000003c0)=""/47, 0x2f}, 0x3}], 0x1, 0x22, 0x0) r5 = gettid() r6 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 416.992921ms ago: executing program 1 (id=2162): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) accept(r1, &(0x7f0000000100)=@tipc=@name, &(0x7f0000000000)=0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x215, 0x30000}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}, 0x1, 0xba01, 0x0, 0x400c014}, 0x0) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0xfffffffc, @private2, 0x6}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0xff, 0x3c}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x60}, 0x1, 0x7}, 0x0) 368.470323ms ago: executing program 2 (id=2163): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x26) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r3) shutdown(r2, 0x0) (async) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x100, r4, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa87a089}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x15}, 0x0) (async, rerun: 32) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x0, 0x0, {0x54}, [@pci={{0x8}, {0x11}}]}, 0x30}}, 0x0) (async, rerun: 32) close(r0) 266.167561ms ago: executing program 3 (id=2164): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000011000500000054ff9da35a7b7269ed6600000000000007000000", @ANYRES32=r4, @ANYBLOB="000000002200010004001a80"], 0x24}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @remote}, 0x14) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'geneve0\x00', 0x1000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x18, 0x5, 0x0, &(0x7f0000000500)) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00001700000000001c0037800b0001206970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x80}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30c2f8f9d9abbd68}, 0x800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000010001fff000000008400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000103a0100240012800b000100677265746170000014b563cbd788a52d350b343600028006000e0003000000080007007f000001240018800c00018008000100040000001400018008000100780000040800010001000000"], 0x68}}, 0x0) 154.482913ms ago: executing program 2 (id=2165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_FIB_FLAGS={0x8}]}}}]}]}], {0x14}}, 0xc8}}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r2, &(0x7f0000000180)="0583cacc6c49e110a60908", 0xb, 0x2000c004, &(0x7f00000001c0)={0xa, 0x4e24, 0xa8, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r5, @ANYBLOB="14000100ff05000000000000dfce000000000001080008"], 0x34}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800a0001007265646972000000140002800800014000000012080002400000000b0900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 1 (id=2166): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143fdd, 0x80, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f00000000c0)={r1, &(0x7f0000000180), 0x0}, 0x20) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x312, 0x36, 0x9, 0x3, 0x5, @remote}, 0x10) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random="48bd00"}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) kernel console output (not intermixed with test programs): : 'syz.3.144': attribute type 3 has an invalid length. [ 109.402737][ T6433] netlink: 766 bytes leftover after parsing attributes in process `syz.3.144'. [ 109.433996][ T6439] netlink: 44 bytes leftover after parsing attributes in process `syz.4.145'. [ 109.461119][ T6439] netlink: 43 bytes leftover after parsing attributes in process `syz.4.145'. [ 109.470355][ T6439] netlink: 'syz.4.145': attribute type 6 has an invalid length. [ 109.478502][ T6439] netlink: 'syz.4.145': attribute type 5 has an invalid length. [ 109.487902][ T6439] netlink: 43 bytes leftover after parsing attributes in process `syz.4.145'. [ 109.542502][ T6444] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.714991][ T6451] netlink: 184 bytes leftover after parsing attributes in process `syz.3.147'. [ 109.773486][ T6451] xt_socket: unknown flags 0xd0 [ 109.967122][ T6465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.335319][ T5914] IPVS: starting estimator thread 0... [ 110.392527][ T6487] netlink: 'syz.0.158': attribute type 23 has an invalid length. [ 110.439199][ T6480] IPVS: using max 24 ests per chain, 57600 per kthread [ 110.646706][ T6498] netlink: 72 bytes leftover after parsing attributes in process `syz.1.160'. [ 110.749710][ T6504] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 110.794135][ T6504] bond1 (unregistering): Released all slaves [ 111.145695][ T6525] nbd: must specify an index to disconnect [ 111.780918][ T6568] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 111.816294][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.824735][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.290675][ T6586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 112.642810][ T6596] xt_l2tp: missing protocol rule (udp|l2tpip) [ 113.019563][ T6619] netlink: 'syz.0.193': attribute type 4 has an invalid length. [ 113.372000][ T6634] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 113.543614][ T6644] __nla_validate_parse: 3 callbacks suppressed [ 113.543637][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 113.595824][ T6642] netlink: 'syz.2.198': attribute type 2 has an invalid length. [ 113.606433][ T6642] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.198'. [ 113.649117][ T6642] nbd: must specify at least one socket [ 113.887544][ T6655] netlink: 48 bytes leftover after parsing attributes in process `syz.4.200'. [ 113.931228][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.200'. [ 113.950281][ T6659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.201'. [ 114.018764][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 114.134541][ T5929] IPVS: starting estimator thread 0... [ 114.153361][ T6669] IPVS: ip_vs_edit_dest(): server weight less than zero [ 114.200674][ T6662] IPVS: ip_vs_edit_dest(): server weight less than zero [ 114.228083][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'. [ 114.289072][ T6671] netlink: 24 bytes leftover after parsing attributes in process `syz.3.203'. [ 114.290905][ T6667] IPVS: using max 25 ests per chain, 60000 per kthread [ 114.382833][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.4.204'. [ 114.606213][ T30] audit: type=1800 audit(1759922663.196:2): pid=6683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.206" name="memory.events" dev="tmpfs" ino=182 res=0 errno=0 [ 114.714333][ T6682] netlink: 'syz.4.207': attribute type 16 has an invalid length. [ 114.735999][ T6682] netlink: 'syz.4.207': attribute type 3 has an invalid length. [ 114.747955][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 114.977693][ T6692] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 115.026248][ T6692] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 115.038863][ T6696] netlink: 'syz.4.210': attribute type 5 has an invalid length. [ 115.059132][ T6696] netlink: 'syz.4.210': attribute type 6 has an invalid length. [ 115.059332][ T6692] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 115.467640][ T6714] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 116.036997][ T6723] team0 (unregistering): Port device team_slave_0 removed [ 116.052111][ T6723] team0 (unregistering): Port device team_slave_1 removed [ 116.080259][ T6727] syzkaller0: entered promiscuous mode [ 116.086210][ T6727] syzkaller0: entered allmulticast mode [ 116.407648][ T6748] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 116.507934][ T6752] netlink: 'syz.2.227': attribute type 8 has an invalid length. [ 116.705553][ T6760] can: request_module (can-proto-3) failed. [ 116.913109][ T6770] netlink: 'syz.2.233': attribute type 1 has an invalid length. [ 116.971374][ T6777] netem: change failed [ 117.097498][ T6779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.121979][ T6779] bond1: (slave bond2): making interface the new active one [ 117.132162][ T6779] bond1: (slave bond2): Enslaving as an active interface with an up link [ 117.147969][ T6770] bond1: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.161342][ T6770] bond1: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 117.191702][ T6785] tipc: Enabled bearer , priority 0 [ 117.200419][ T6785] syzkaller0: entered promiscuous mode [ 117.206054][ T6785] syzkaller0: entered allmulticast mode [ 117.216138][ T6785] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 117.236755][ T6785] tipc: Resetting bearer [ 117.246307][ T6783] tipc: Resetting bearer [ 117.261191][ T6783] tipc: Disabling bearer [ 117.942803][ T6818] netlink: 'syz.0.249': attribute type 17 has an invalid length. [ 117.951276][ T6817] netlink: 'syz.0.249': attribute type 17 has an invalid length. [ 118.234787][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.243579][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.420096][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.462434][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.843631][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.878286][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.927932][ T6841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.961630][ T6841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.058000][ T6865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.071004][ T3455] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.081246][ T3455] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.132351][ T3455] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.176785][ T3455] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.376118][ T6888] __nla_validate_parse: 18 callbacks suppressed [ 119.376139][ T6888] netlink: 44 bytes leftover after parsing attributes in process `syz.4.264'. [ 119.691473][ T6905] netlink: 'syz.0.270': attribute type 23 has an invalid length. [ 119.763474][ T6909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'. [ 119.938170][ T6923] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.111271][ T6930] netlink: 32 bytes leftover after parsing attributes in process `syz.1.277'. [ 120.533147][ T6942] openvswitch: netlink: Unknown key attributes 2 [ 120.864944][ T6950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.907394][ T6958] netlink: 256 bytes leftover after parsing attributes in process `syz.4.284'. [ 121.056806][ T6966] sctp: [Deprecated]: syz.3.287 (pid 6966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.056806][ T6966] Use struct sctp_sack_info instead [ 121.292210][ T6977] netlink: 260 bytes leftover after parsing attributes in process `syz.1.290'. [ 121.697437][ T6995] netlink: 14 bytes leftover after parsing attributes in process `syz.1.296'. [ 121.798784][ T6997] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 121.893421][ T6995] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.917976][ T6995] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.936473][ T6995] bond0 (unregistering): Released all slaves [ 122.041172][ T7007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.299'. [ 122.164147][ T7009] tipc: Trying to set illegal importance in message [ 122.296832][ T7015] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 122.317924][ T7015] netlink: 224 bytes leftover after parsing attributes in process `syz.2.303'. [ 122.529986][ T7024] netlink: 64 bytes leftover after parsing attributes in process `syz.4.306'. [ 122.665552][ T7032] netlink: 'syz.1.309': attribute type 10 has an invalid length. [ 122.741243][ T7038] netem: incorrect ge model size [ 122.765693][ T7038] netem: change failed [ 122.851370][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 122.912976][ T7051] º: renamed from team_slave_0 (while UP) [ 123.577414][ T7077] macvtap1: entered promiscuous mode [ 123.583276][ T7077] macvtap1: entered allmulticast mode [ 123.697363][ T7078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.736024][ T7081] tipc: Started in network mode [ 123.741853][ T7081] tipc: Node identity fedbb9f84291, cluster identity 4711 [ 123.761951][ T7081] tipc: Enabled bearer , priority 0 [ 123.960020][ T7093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.978326][ T7076] syzkaller0: entered promiscuous mode [ 123.985994][ T7076] syzkaller0: entered allmulticast mode [ 123.993207][ T7076] tipc: Resetting bearer [ 124.016411][ T7092] netlink: 'syz.2.329': attribute type 1 has an invalid length. [ 124.058866][ T7092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.103210][ T7073] tipc: Resetting bearer [ 124.254622][ T7109] netlink: 'syz.1.334': attribute type 1 has an invalid length. [ 124.275122][ T7109] nbd: couldn't find device at index 1048576 [ 124.435218][ T7117] __nla_validate_parse: 7 callbacks suppressed [ 124.435238][ T7117] netlink: 36 bytes leftover after parsing attributes in process `syz.3.338'. [ 124.480523][ T7119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'. [ 124.837617][ T9] tipc: Node number set to 3159013880 [ 125.668482][ T7073] tipc: Disabling bearer [ 125.964252][ T7146] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'. [ 126.065504][ T7151] nftables ruleset with unbound chain [ 126.118561][ T7159] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜z [ 126.329647][ T7169] netlink: 348 bytes leftover after parsing attributes in process `syz.3.350'. [ 126.340747][ T7171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.351'. [ 126.390313][ T7173] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 126.418564][ T7172] netlink: 'syz.2.349': attribute type 1 has an invalid length. [ 126.605966][ T7186] trusted_key: syz.4.353 sent an empty control message without MSG_MORE. [ 126.650953][ T7174] bond4: (slave bridge3): making interface the new active one [ 126.660527][ T7174] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 126.931502][ T7201] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 126.991260][ T7201] netlink: 216 bytes leftover after parsing attributes in process `syz.3.359'. [ 127.281470][ T7218] netlink: 'syz.0.362': attribute type 1 has an invalid length. [ 127.331766][ T7218] netlink: 220 bytes leftover after parsing attributes in process `syz.0.362'. [ 127.400537][ T7211] bond0: entered promiscuous mode [ 127.413807][ T7211] bond0: entered allmulticast mode [ 127.427707][ T7228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.365'. [ 127.444040][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.790090][ T7247] netlink: 72 bytes leftover after parsing attributes in process `syz.0.370'. [ 127.961575][ T7254] veth3: entered promiscuous mode [ 128.099881][ T7259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.292124][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.379'. [ 129.774651][ T7295] __nla_validate_parse: 1 callbacks suppressed [ 129.774674][ T7295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.380'. [ 129.786910][ T7297] netlink: 'syz.2.382': attribute type 13 has an invalid length. [ 129.799066][ T7295] nbd: must specify at least one socket [ 129.812495][ T7297] veth0_macvtap: left promiscuous mode [ 129.823492][ T7297] macvtap0: entered allmulticast mode [ 129.840674][ T7297] macvtap0: refused to change device tx_queue_len [ 129.864480][ T7303] netlink: 'syz.2.382': attribute type 10 has an invalid length. [ 130.025644][ T7310] _ÐZ`Ô€@Y: entered promiscuous mode [ 130.089232][ T7294] netlink: 'syz.1.381': attribute type 83 has an invalid length. [ 130.566859][ T7338] xt_hashlimit: overflow, rate too high: 0 [ 130.794053][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'. [ 130.810950][ T7344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.394'. [ 130.992366][ T7352] ipt_ECN: cannot use operation on non-tcp rule [ 131.011929][ T7356] ipt_ECN: cannot use operation on non-tcp rule [ 131.056256][ T7358] Driver unsupported XDP return value 0 on prog (id 85) dev N/A, expect packet loss! [ 131.426963][ T7372] netlink: 104 bytes leftover after parsing attributes in process `syz.1.402'. [ 131.738582][ T7392] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 131.759281][ T7392] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 131.759349][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 131.841361][ T7392] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 131.898412][ T7392] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 131.915650][ T7397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.409'. [ 132.013889][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.413'. [ 132.027300][ T7392] netlink: 32 bytes leftover after parsing attributes in process `syz.3.409'. [ 132.046550][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 132.082330][ T7405] chnl_net:caif_netlink_parms(): no params data found [ 132.162177][ T7410] raw_sendmsg: syz.4.412 forgot to set AF_INET. Fix it! [ 132.171873][ T7407] syzkaller1: entered promiscuous mode [ 132.190088][ T7407] syzkaller1: entered allmulticast mode [ 132.266272][ T7411] netlink: 64 bytes leftover after parsing attributes in process `syz.3.415'. [ 132.365422][ T7420] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 133.133970][ T7461] netlink: 'syz.4.428': attribute type 29 has an invalid length. [ 133.491457][ T7475] tipc: Enabled bearer , priority 0 [ 133.501826][ T7475] syzkaller0: entered promiscuous mode [ 133.508126][ T7475] syzkaller0: entered allmulticast mode [ 133.563279][ T7475] tipc: Resetting bearer [ 133.628533][ T7474] tipc: Resetting bearer [ 133.716378][ T7474] tipc: Disabling bearer [ 133.884707][ T7480] bridge4: entered allmulticast mode [ 134.025636][ T7485] syzkaller1: entered promiscuous mode [ 134.037519][ T7485] syzkaller1: entered allmulticast mode [ 134.060779][ T7488] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 134.734807][ T7524] Cannot find add_set index 0 as target [ 134.764122][ T5828] block nbd0: Receive control failed (result -107) [ 134.811893][ T7522] __nla_validate_parse: 6 callbacks suppressed [ 134.811916][ T7522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 135.414169][ T7556] netlink: 32 bytes leftover after parsing attributes in process `syz.1.455'. [ 135.454353][ T7558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.545356][ T7561] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 135.923620][ T7575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 136.163262][ T7589] netlink: 76 bytes leftover after parsing attributes in process `syz.4.463'. [ 136.312290][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.466'. [ 136.322490][ T7597] sctp: [Deprecated]: syz.2.464 (pid 7597) Use of int in maxseg socket option. [ 136.322490][ T7597] Use struct sctp_assoc_value instead [ 136.472168][ T7598] Bluetooth: MGMT ver 1.23 [ 136.517028][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 136.635385][ T7611] xt_bpf: check failed: parse error [ 136.830495][ T7625] syz_tun: entered allmulticast mode [ 136.918202][ T7630] netlink: 'syz.4.475': attribute type 18 has an invalid length. [ 136.990481][ T3455] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.017616][ T7625] syz_tun: left allmulticast mode [ 137.043410][ T3455] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.074258][ T3455] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.128618][ T3455] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.347928][ T7650] netlink: 144 bytes leftover after parsing attributes in process `syz.4.482'. [ 137.382065][ T7656] erspan0: entered allmulticast mode [ 137.398840][ T7655] netlink: 'syz.1.483': attribute type 1 has an invalid length. [ 137.564100][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 137.749763][ T7676] netlink: 44 bytes leftover after parsing attributes in process `syz.0.492'. [ 137.986327][ T7687] netlink: 52 bytes leftover after parsing attributes in process `syz.1.494'. [ 138.024751][ T7687] netlink: 'syz.1.494': attribute type 3 has an invalid length. [ 138.189799][ T7701] netlink: 'syz.0.500': attribute type 30 has an invalid length. [ 138.213960][ T7704] unsupported nlmsg_type 40 [ 138.224244][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.232195][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.467244][ T7713] netlink: 'syz.2.503': attribute type 10 has an invalid length. [ 138.514495][ T7713] team0: Device veth1_macvtap failed to register rx_handler [ 138.626604][ T7730] netlink: 'syz.1.507': attribute type 27 has an invalid length. [ 138.662099][ T7730] netlink: 'syz.1.507': attribute type 4 has an invalid length. [ 138.752850][ T7737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.802192][ T7737] veth0: entered promiscuous mode [ 138.885603][ T7733] veth0: left promiscuous mode [ 139.734801][ T7789] netlink: 'syz.4.527': attribute type 2 has an invalid length. [ 140.017393][ T7801] tipc: Enabled bearer , priority 10 [ 140.209786][ T7812] netlink: 'syz.3.535': attribute type 1 has an invalid length. [ 140.273808][ T7816] __nla_validate_parse: 4 callbacks suppressed [ 140.273830][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.539'. [ 140.306925][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.539'. [ 140.337349][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 140.470063][ T7833] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.540'. [ 140.536399][ T7812] bond1: entered promiscuous mode [ 140.543781][ T7812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.560531][ T7835] netlink: 'syz.1.541': attribute type 4 has an invalid length. [ 140.601120][ T7826] syzkaller1: entered promiscuous mode [ 140.625734][ T7826] syzkaller1: entered allmulticast mode [ 140.684628][ T7840] netlink: 788 bytes leftover after parsing attributes in process `syz.0.544'. [ 140.693987][ T7839] sock: sock_set_timeout: `syz.0.544' (pid 7839) tries to set negative timeout [ 141.007134][ T7858] sock: sock_set_timeout: `syz.3.547' (pid 7858) tries to set negative timeout [ 141.057049][ T7859] netlink: 'syz.1.548': attribute type 2 has an invalid length. [ 141.105561][ T7863] FAULT_INJECTION: forcing a failure. [ 141.105561][ T7863] name failslab, interval 1, probability 0, space 0, times 1 [ 141.137010][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.0.549 Not tainted syzkaller #0 PREEMPT(full) [ 141.137041][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.137054][ T7863] Call Trace: [ 141.137062][ T7863] [ 141.137072][ T7863] dump_stack_lvl+0x189/0x250 [ 141.137105][ T7863] ? __pfx____ratelimit+0x10/0x10 [ 141.137138][ T7863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.137160][ T7863] ? __pfx__printk+0x10/0x10 [ 141.137188][ T7863] ? __pfx___might_resched+0x10/0x10 [ 141.137226][ T7863] should_fail_ex+0x414/0x560 [ 141.137254][ T7863] should_failslab+0xa8/0x100 [ 141.137282][ T7863] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 141.137306][ T7863] ? __alloc_skb+0x112/0x2d0 [ 141.137339][ T7863] __alloc_skb+0x112/0x2d0 [ 141.137371][ T7863] netlink_sendmsg+0x5c6/0xb30 [ 141.137411][ T7863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.137444][ T7863] ? aa_sock_msg_perm+0xf1/0x1d0 [ 141.137473][ T7863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.137502][ T7863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.137531][ T7863] __sock_sendmsg+0x21c/0x270 [ 141.137567][ T7863] ____sys_sendmsg+0x505/0x830 [ 141.137606][ T7863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.137647][ T7863] ? import_iovec+0x74/0xa0 [ 141.137682][ T7863] ___sys_sendmsg+0x21f/0x2a0 [ 141.137717][ T7863] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.137790][ T7863] ? __fget_files+0x2a/0x420 [ 141.137815][ T7863] ? __fget_files+0x3a0/0x420 [ 141.137853][ T7863] __x64_sys_sendmsg+0x19b/0x260 [ 141.137888][ T7863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.137930][ T7863] ? __pfx_ksys_write+0x10/0x10 [ 141.137957][ T7863] ? do_syscall_64+0xbe/0xfa0 [ 141.137992][ T7863] do_syscall_64+0xfa/0xfa0 [ 141.138022][ T7863] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.138054][ T7863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.138074][ T7863] ? clear_bhb_loop+0x60/0xb0 [ 141.138101][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.138121][ T7863] RIP: 0033:0x7f2e41d8eec9 [ 141.138141][ T7863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.138159][ T7863] RSP: 002b:00007f2e42ce4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.138192][ T7863] RAX: ffffffffffffffda RBX: 00007f2e41fe5fa0 RCX: 00007f2e41d8eec9 [ 141.138208][ T7863] RDX: 0000000000000840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 141.138221][ T7863] RBP: 00007f2e42ce4090 R08: 0000000000000000 R09: 0000000000000000 [ 141.138234][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.138245][ T7863] R13: 00007f2e41fe6038 R14: 00007f2e41fe5fa0 R15: 00007fffba24b318 [ 141.138281][ T7863] [ 141.152688][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.547'. [ 141.461590][ T7867] bond0: entered allmulticast mode [ 141.488255][ T7867] bond_slave_0: entered allmulticast mode [ 141.513149][ T7867] bond_slave_1: entered allmulticast mode [ 141.532028][ T7867] dummy0: entered allmulticast mode [ 141.560060][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.195934][ T7905] x_tables: duplicate underflow at hook 1 [ 142.279218][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 142.335980][ T7909] netlink: 'syz.1.561': attribute type 21 has an invalid length. [ 142.408719][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.562'. [ 142.442907][ T7909] netlink: 132 bytes leftover after parsing attributes in process `syz.1.561'. [ 142.691495][ T7926] tipc: Enabling of bearer rejected, failed to enable media [ 142.741532][ T7928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.567'. [ 142.801890][ T7931] tipc: Started in network mode [ 142.806817][ T7931] tipc: Node identity 080211, cluster identity 4711 [ 142.862634][ T7931] tipc: Enabled bearer , priority 0 [ 142.893099][ T7939] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 142.921519][ T7939] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 142.950346][ T7945] FAULT_INJECTION: forcing a failure. [ 142.950346][ T7945] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.969377][ T7945] CPU: 1 UID: 0 PID: 7945 Comm: syz.0.571 Not tainted syzkaller #0 PREEMPT(full) [ 142.969411][ T7945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.969424][ T7945] Call Trace: [ 142.969432][ T7945] [ 142.969441][ T7945] dump_stack_lvl+0x189/0x250 [ 142.969469][ T7945] ? __pfx____ratelimit+0x10/0x10 [ 142.969500][ T7945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.969522][ T7945] ? __pfx__printk+0x10/0x10 [ 142.969544][ T7945] ? __might_fault+0xb0/0x130 [ 142.969587][ T7945] should_fail_ex+0x414/0x560 [ 142.969615][ T7945] _copy_from_iter+0x1de/0x1790 [ 142.969656][ T7945] ? rcu_is_watching+0x15/0xb0 [ 142.969678][ T7945] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 142.969704][ T7945] ? __pfx__copy_from_iter+0x10/0x10 [ 142.969733][ T7945] ? __build_skb_around+0x257/0x3e0 [ 142.969766][ T7945] ? netlink_sendmsg+0x642/0xb30 [ 142.969792][ T7945] ? skb_put+0x11b/0x210 [ 142.969824][ T7945] netlink_sendmsg+0x6b2/0xb30 [ 142.969863][ T7945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.969901][ T7945] ? aa_sock_msg_perm+0xf1/0x1d0 [ 142.969931][ T7945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.969968][ T7945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.969998][ T7945] __sock_sendmsg+0x21c/0x270 [ 142.970024][ T7945] ____sys_sendmsg+0x505/0x830 [ 142.970061][ T7945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.970102][ T7945] ? import_iovec+0x74/0xa0 [ 142.970136][ T7945] ___sys_sendmsg+0x21f/0x2a0 [ 142.970169][ T7945] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.970241][ T7945] ? __fget_files+0x2a/0x420 [ 142.970266][ T7945] ? __fget_files+0x3a0/0x420 [ 142.970302][ T7945] __x64_sys_sendmsg+0x19b/0x260 [ 142.970337][ T7945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.970379][ T7945] ? __pfx_ksys_write+0x10/0x10 [ 142.970407][ T7945] ? do_syscall_64+0xbe/0xfa0 [ 142.970443][ T7945] do_syscall_64+0xfa/0xfa0 [ 142.970473][ T7945] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.970504][ T7945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.970525][ T7945] ? clear_bhb_loop+0x60/0xb0 [ 142.970551][ T7945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.970571][ T7945] RIP: 0033:0x7f2e41d8eec9 [ 142.970601][ T7945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.970619][ T7945] RSP: 002b:00007f2e42ce4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.970646][ T7945] RAX: ffffffffffffffda RBX: 00007f2e41fe5fa0 RCX: 00007f2e41d8eec9 [ 142.970661][ T7945] RDX: 0000000000000840 RSI: 00002000000001c0 RDI: 0000000000000003 [ 142.970674][ T7945] RBP: 00007f2e42ce4090 R08: 0000000000000000 R09: 0000000000000000 [ 142.970687][ T7945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.970699][ T7945] R13: 00007f2e41fe6038 R14: 00007f2e41fe5fa0 R15: 00007fffba24b318 [ 142.970734][ T7945] [ 143.365474][ T7950] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 143.613991][ T7958] pimreg3: entered allmulticast mode [ 143.922517][ T7969] bridge_slave_0: left allmulticast mode [ 143.928244][ T7969] bridge_slave_0: left promiscuous mode [ 143.952663][ T5933] tipc: Node number set to 134353152 [ 143.970287][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.996008][ T7969] bridge_slave_1: left allmulticast mode [ 144.002095][ T7969] bridge_slave_1: left promiscuous mode [ 144.008052][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.118543][ T7983] netlink: 'syz.3.586': attribute type 21 has an invalid length. [ 144.200952][ T7969] bond0: (slave bond_slave_0): Releasing backup interface [ 144.224716][ T7969] bond0: (slave bond_slave_1): Releasing backup interface [ 144.250127][ T7969] team0: Port device team_slave_0 removed [ 144.267231][ T7969] team0: Port device team_slave_1 removed [ 144.277231][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.286221][ T7969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.302411][ T7969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.311610][ T7969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.326905][ T7969] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.643128][ T7993] bond2 (unregistering): Released all slaves [ 145.038509][ T8025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.212014][ T8032] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 145.244496][ T8033] bond2: entered promiscuous mode [ 145.249890][ T8033] bond2: entered allmulticast mode [ 145.255514][ T8033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.310602][ T8039] __nla_validate_parse: 9 callbacks suppressed [ 145.310619][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 145.328585][ T8040] erspan0: entered allmulticast mode [ 145.334847][ T8039] syz_tun: entered allmulticast mode [ 145.454953][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.606'. [ 145.501803][ T5828] block nbd1: Receive control failed (result -107) [ 146.958107][ T8106] netlink: 256 bytes leftover after parsing attributes in process `syz.2.622'. [ 147.022359][ T8107] netlink: 24 bytes leftover after parsing attributes in process `syz.3.621'. [ 147.058049][ T8109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.099520][ T5828] Bluetooth: hci4: command 0x0405 tx timeout [ 147.237729][ T8117] netlink: ct family unspecified [ 147.243868][ T8117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.760893][ T8125] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20004 [ 147.765655][ T8127] netlink: 'syz.1.627': attribute type 12 has an invalid length. [ 147.839591][ T8127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.627'. [ 147.940137][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.630'. [ 148.146587][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.631'. [ 148.490026][ T8160] nbd2: detected capacity change from 0 to 127 [ 148.501557][ T5828] block nbd2: Receive control failed (result -32) [ 148.512437][ T5958] block nbd2: Dead connection, failed to find a fallback [ 148.532439][ T5958] block nbd2: shutting down sockets [ 148.538392][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.563734][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 148.575132][ T5958] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.584467][ T5958] Buffer I/O error on dev nbd2, logical block 1, async page read [ 148.595899][ T5958] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.638060][ T5958] Buffer I/O error on dev nbd2, logical block 2, async page read [ 148.650203][ T5958] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.679631][ T5958] Buffer I/O error on dev nbd2, logical block 3, async page read [ 148.698020][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.723839][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 148.753628][ T5958] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.769035][ T5958] Buffer I/O error on dev nbd2, logical block 1, async page read [ 148.786966][ T5958] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.817516][ T5958] Buffer I/O error on dev nbd2, logical block 2, async page read [ 148.838330][ T5958] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.857674][ T5958] Buffer I/O error on dev nbd2, logical block 3, async page read [ 148.877078][ T5958] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.902290][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 148.913475][ T5958] Buffer I/O error on dev nbd2, logical block 0, async page read [ 148.940559][ T5958] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 148.961281][ T5958] Buffer I/O error on dev nbd2, logical block 1, async page read [ 148.985405][ T5958] ldm_validate_partition_table(): Disk read failed. [ 148.997294][ T8207] netlink: 'syz.1.644': attribute type 30 has an invalid length. [ 149.008603][ T5958] Dev nbd2: unable to read RDB block 0 [ 149.033827][ T5958] nbd2: unable to read partition table [ 149.065916][ T5958] ldm_validate_partition_table(): Disk read failed. [ 149.076196][ T5958] Dev nbd2: unable to read RDB block 0 [ 149.084576][ T5958] nbd2: unable to read partition table [ 149.830115][ T8245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.657'. [ 149.867985][ T8245] netlink: 68 bytes leftover after parsing attributes in process `syz.1.657'. [ 149.907297][ T8253] Cannot find del_set index 2 as target [ 149.965256][ T8248] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 150.059934][ T8260] netlink: 'syz.3.661': attribute type 39 has an invalid length. [ 150.145690][ T8261] veth0_virt_wifi: renamed from ipvlan1 [ 150.212893][ T8266] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 150.516879][ T8280] geneve2: entered promiscuous mode [ 150.547030][ T8280] geneve2: entered allmulticast mode [ 150.580308][ T8287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.909897][ T8307] netlink: 'syz.1.672': attribute type 58 has an invalid length. [ 150.941120][ T8307] __nla_validate_parse: 2 callbacks suppressed [ 150.941140][ T8307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.672'. [ 150.977476][ T8311] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.672'. [ 151.214498][ T8322] netlink: 68 bytes leftover after parsing attributes in process `syz.1.677'. [ 151.240868][ T8320] team_slave_0: mtu greater than device maximum [ 151.501704][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.681'. [ 151.553533][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.684'. [ 151.569855][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 151.580904][ T8343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.683'. [ 151.595234][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.682'. [ 151.637341][ T8352] netlink: 'syz.2.685': attribute type 8 has an invalid length. [ 151.655716][ T8341] veth0_macvtap: left promiscuous mode [ 151.780075][ T8358] ªªªªªª: renamed from lo (while UP) [ 151.808237][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.685'. [ 151.862085][ T8363] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 151.920355][ T8363] netlink: 'syz.1.686': attribute type 4 has an invalid length. [ 152.158181][ T8377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.691'. [ 152.479964][ T8398] netlink: 'syz.4.697': attribute type 10 has an invalid length. [ 153.057426][ T8422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.074209][ T8420] xt_hashlimit: invalid rate [ 153.109420][ T8422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.427665][ T8432] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 153.463882][ T8432] bond2 (unregistering): Released all slaves [ 153.511704][ T8446] macvlan0: entered promiscuous mode [ 153.520126][ T8446] batadv0: entered promiscuous mode [ 153.527433][ T8446] hsr1: entered allmulticast mode [ 153.560651][ T8446] macvlan0: entered allmulticast mode [ 153.577912][ T8446] veth1_vlan: entered allmulticast mode [ 153.589071][ T8446] batadv0: entered allmulticast mode [ 153.636720][ T8446] macvlan0: left promiscuous mode [ 153.660100][ T8446] batadv0: left promiscuous mode [ 153.767462][ T8457] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 153.783898][ T8456] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 153.820932][ T8456] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 153.829158][ T8456] gretap1: entered promiscuous mode [ 153.852054][ T8456] gretap1: entered allmulticast mode [ 153.957569][ T8457] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.099809][ T8464] 8021q: adding VLAN 0 to HW filter on device bond3 [ 154.107819][ T8464] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.130753][ T8464] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 154.516436][ T8483] syzkaller0: entered promiscuous mode [ 154.525448][ T8483] syzkaller0: entered allmulticast mode [ 154.558620][ T8457] veth3: entered promiscuous mode [ 154.592314][ T8484] syzkaller0: entered promiscuous mode [ 154.598153][ T8484] syzkaller0: entered allmulticast mode [ 155.151894][ T8519] netlink: 'syz.3.720': attribute type 1 has an invalid length. [ 156.421376][ T8520] bond2 (unregistering): Released all slaves [ 156.547894][ T8523] ip6tnl1: entered promiscuous mode [ 156.554570][ T8523] ip6tnl1: entered allmulticast mode [ 156.672638][ T8551] vlan2: entered allmulticast mode [ 156.681886][ T8551] bridge0: entered allmulticast mode [ 157.239442][ T8577] netlink: 'syz.1.737': attribute type 5 has an invalid length. [ 157.618766][ T8594] pim6reg1: entered promiscuous mode [ 157.635319][ T8594] pim6reg1: entered allmulticast mode [ 157.645517][ T8598] __nla_validate_parse: 5 callbacks suppressed [ 157.645536][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.744'. [ 157.660989][ T8596] syzkaller1: entered allmulticast mode [ 157.704588][ T8594] syzkaller1: entered promiscuous mode [ 157.721859][ T8594] syzkaller1: entered allmulticast mode [ 157.822513][ T8594] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 157.877500][ T8607] mac80211_hwsim hwsim8 ÿ: renamed from wlan1 [ 157.970100][ T8610] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 158.364158][ T8630] netlink: 'syz.3.756': attribute type 10 has an invalid length. [ 158.372615][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'. [ 158.398123][ T8630] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 158.639755][ T8643] xt_TPROXY: Can be used only with -p tcp or -p udp [ 158.805155][ T8658] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 159.099707][ T8674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.767'. [ 159.542332][ T8699] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 159.612678][ T8705] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 159.810777][ T8716] netlink: 96 bytes leftover after parsing attributes in process `syz.3.780'. [ 159.833216][ T8718] netlink: 'syz.0.781': attribute type 10 has an invalid length. [ 159.849250][ T8718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.781'. [ 159.872617][ T8716] vlan2: entered allmulticast mode [ 159.884546][ T8716] gretap0: entered allmulticast mode [ 159.911682][ T8718] dummy0: entered promiscuous mode [ 159.927680][ T8718] bridge0: port 3(dummy0) entered blocking state [ 159.938703][ T8718] bridge0: port 3(dummy0) entered disabled state [ 159.967644][ T8718] dummy0: entered allmulticast mode [ 160.246040][ T8738] team0: No ports can be present during mode change [ 160.270391][ T8738] netlink: 248 bytes leftover after parsing attributes in process `syz.0.785'. [ 160.287883][ T8740] netlink: 'syz.3.786': attribute type 1 has an invalid length. [ 160.439133][ T8740] bond2: entered promiscuous mode [ 160.444917][ T8740] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.495326][ T8742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.515351][ T8742] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 160.528333][ T8742] bond2: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 160.557439][ T8742] bond2: (slave wireguard1): making interface the new active one [ 160.567634][ T8742] wireguard1: entered promiscuous mode [ 160.575170][ T8742] bond2: (slave wireguard1): Enslaving as an active interface with an up link [ 160.591362][ T8749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.665600][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.791'. [ 160.737468][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.792'. [ 160.805971][ T8770] netlink: 16 bytes leftover after parsing attributes in process `syz.2.791'. [ 160.820181][ T8771] tipc: Failed to remove unknown binding: 66,1,1/0:3856834973/3856834975 [ 161.225496][ T8787] netlink: 'syz.3.797': attribute type 32 has an invalid length. [ 161.252586][ T8787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 161.386533][ T8787] bond3: option coupled_control: invalid value (52) [ 161.407062][ T8787] bond3 (unregistering): Released all slaves [ 161.573747][ T8797] pimreg: entered allmulticast mode [ 162.035457][ T8829] Unknown options in mask b7f2 [ 162.895422][ T8857] syzkaller0: entered promiscuous mode [ 162.901354][ T8857] syzkaller0: entered allmulticast mode [ 163.074859][ T8885] __nla_validate_parse: 5 callbacks suppressed [ 163.074879][ T8885] netlink: 28 bytes leftover after parsing attributes in process `syz.3.822'. [ 163.566705][ T8907] IPVS: ip_vs_edit_dest(): server weight less than zero [ 163.844833][ T8921] team0: No ports can be present during mode change [ 164.243105][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 164.557559][ T8957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.663286][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 164.967155][ T8984] netlink: 'syz.0.847': attribute type 1 has an invalid length. [ 164.976105][ T8984] netlink: 244 bytes leftover after parsing attributes in process `syz.0.847'. [ 164.988481][ T8976] policy can only be matched on NF_INET_PRE_ROUTING [ 164.988507][ T8976] unable to load match [ 165.232780][ T8995] netlink: 56 bytes leftover after parsing attributes in process `syz.1.853'. [ 165.375772][ T8999] netlink: 'syz.2.855': attribute type 4 has an invalid length. [ 165.646577][ T9016] tipc: Enabling of bearer rejected, failed to enable media [ 165.803233][ T9027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.864'. [ 165.820427][ T9023] tipc: Enabled bearer , priority 0 [ 165.835134][ T9028] tipc: Enabling of bearer rejected, already enabled [ 165.884089][ T9032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 165.908399][ T9023] syzkaller0: entered promiscuous mode [ 165.916726][ T9023] syzkaller0: entered allmulticast mode [ 166.039517][ T9041] netlink: 'syz.2.868': attribute type 11 has an invalid length. [ 166.174986][ T9023] tipc: Resetting bearer [ 166.889189][ T5914] tipc: Node number set to 3143084102 [ 167.722498][ T9023] tipc: Disabling bearer [ 167.977940][ T9072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.877'. [ 167.987059][ T9074] netlink: 'syz.1.879': attribute type 1 has an invalid length. [ 168.224148][ T9074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.254218][ T9089] openvswitch: netlink: IP tunnel dst address not specified [ 168.986246][ T9115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'. [ 169.043330][ T9115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.886'. [ 169.054856][ T9124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.888'. [ 169.287054][ T9138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.892'. [ 169.612863][ T9155] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 169.649562][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 169.783791][ T9161] openvswitch: netlink: Missing key (keys=440, expected=10000000) [ 170.121014][ T9185] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20002 [ 170.136798][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 170.153625][ T9185] IPVS: set_ctl: invalid protocol: 137 172.20.20.62:20000 [ 170.163444][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 170.323888][ T9190] tipc: Enabled bearer , priority 0 [ 170.358782][ T9190] syzkaller0: entered promiscuous mode [ 170.381788][ T9190] syzkaller0: entered allmulticast mode [ 170.422127][ T9190] tipc: Resetting bearer [ 170.464264][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 170.508304][ T9190] tipc: Resetting bearer [ 170.601217][ T9190] tipc: Disabling bearer [ 170.793963][ T9215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.909'. [ 170.853617][ T9219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.911'. [ 171.371634][ T9241] veth3: entered promiscuous mode [ 171.398073][ T9241] veth3: entered allmulticast mode [ 171.749709][ T9264] netlink: 'syz.0.927': attribute type 3 has an invalid length. [ 172.184420][ T9290] bond3 (unregistering): Released all slaves [ 172.245372][ T9294] openvswitch: netlink: Tunnel attr 132 out of range max 16 [ 172.253370][ T9295] openvswitch: netlink: Tunnel attr 132 out of range max 16 [ 172.293244][ T9297] syzkaller0: entered promiscuous mode [ 172.305347][ T9297] syzkaller0: entered allmulticast mode [ 172.498295][ T9309] netlink: 'syz.1.942': attribute type 1 has an invalid length. [ 172.572292][ T9309] bond2: entered promiscuous mode [ 172.578061][ T9309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.649939][ T9317] netlink: 'syz.0.943': attribute type 15 has an invalid length. [ 172.723305][ T9320] netlink: 'syz.1.944': attribute type 1 has an invalid length. [ 173.051218][ T9332] tipc: Enabling of bearer rejected, failed to enable media [ 173.430258][ T9361] netlink: 'syz.0.959': attribute type 1 has an invalid length. [ 173.456126][ T9361] netlink: 'syz.0.959': attribute type 1 has an invalid length. [ 173.537578][ T9374] IPVS: length: 44 != 8 [ 174.287823][ T9412] Bluetooth: MGMT ver 1.23 [ 174.313419][ T9412] netem: change failed [ 174.458727][ T9419] __nla_validate_parse: 49 callbacks suppressed [ 174.458748][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 174.534965][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.973'. [ 174.631292][ T9427] netlink: 156 bytes leftover after parsing attributes in process `syz.0.975'. [ 175.460927][ T9472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 175.490978][ T9475] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 175.586378][ T9481] netlink: 'syz.4.991': attribute type 1 has an invalid length. [ 175.629986][ T9481] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 175.777650][ T9496] netlink: 'syz.0.993': attribute type 16 has an invalid length. [ 175.875993][ T9496] netlink: 'syz.0.993': attribute type 17 has an invalid length. [ 176.140844][ T9496] bridge0: port 3(dummy0) entered blocking state [ 176.147779][ T9496] bridge0: port 3(dummy0) entered forwarding state [ 176.181137][ T9496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 176.238780][ T8201] bridge1: port 1(vlan4) entered blocking state [ 176.245306][ T8201] bridge1: port 1(vlan4) entered forwarding state [ 176.408281][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'. [ 176.439062][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 176.448096][ T9520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'. [ 176.477976][ T9534] netlink: 'syz.0.1002': attribute type 39 has an invalid length. [ 176.990264][ T9558] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.532611][ T9587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1018'. [ 177.556440][ T9590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.568023][ T9590] x_tables: duplicate underflow at hook 1 [ 177.741317][ T9594] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1020'. [ 177.762534][ T9599] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 177.815575][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1022'. [ 177.844123][ T9599] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.043603][ T9610] sctp: [Deprecated]: syz.3.1026 (pid 9610) Use of int in max_burst socket option. [ 178.043603][ T9610] Use struct sctp_assoc_value instead [ 178.287924][ T9618] tipc: Enabled bearer , priority 0 [ 178.342102][ T9623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.366897][ T9618] syzkaller0: entered promiscuous mode [ 178.373445][ T9618] syzkaller0: entered allmulticast mode [ 178.390476][ T9618] tipc: Resetting bearer [ 178.409221][ T9617] tipc: Resetting bearer [ 178.446727][ T9626] netlink: 'syz.0.1032': attribute type 2 has an invalid length. [ 178.707756][ T9640] netlink: 'syz.0.1035': attribute type 3 has an invalid length. [ 179.998978][ T9617] tipc: Disabling bearer [ 180.497950][ T9681] __nla_validate_parse: 4 callbacks suppressed [ 180.497971][ T9681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 180.525702][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1046'. [ 180.558406][ T9682] erspan0: entered promiscuous mode [ 180.668396][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 180.678877][ T9682] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 180.695196][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 180.697918][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1049'. [ 180.759209][ T9693] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'. [ 181.145359][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1056'. [ 181.294139][ T9722] syz.0.1059: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 181.313686][ T9722] CPU: 0 UID: 0 PID: 9722 Comm: syz.0.1059 Not tainted syzkaller #0 PREEMPT(full) [ 181.313726][ T9722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.313740][ T9722] Call Trace: [ 181.313749][ T9722] [ 181.313759][ T9722] dump_stack_lvl+0x189/0x250 [ 181.313793][ T9722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.313816][ T9722] ? __pfx__printk+0x10/0x10 [ 181.313848][ T9722] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 181.313875][ T9722] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 181.313903][ T9722] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 181.313932][ T9722] warn_alloc+0x214/0x310 [ 181.313961][ T9722] ? stack_depot_save_flags+0x40/0x860 [ 181.313987][ T9722] ? __pfx_warn_alloc+0x10/0x10 [ 181.314016][ T9722] ? kasan_save_track+0x4f/0x80 [ 181.314038][ T9722] ? xskq_create+0x56/0x170 [ 181.314077][ T9722] ? xsk_init_queue+0xb0/0x110 [ 181.314103][ T9722] ? xsk_setsockopt+0x4dc/0x8d0 [ 181.314128][ T9722] ? do_sock_setsockopt+0x179/0x1b0 [ 181.314155][ T9722] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 181.314183][ T9722] ? do_syscall_64+0xfa/0xfa0 [ 181.314213][ T9722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.314244][ T9722] __vmalloc_node_range_noprof+0x125/0x12f0 [ 181.314305][ T9722] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.314339][ T9722] ? __kasan_kmalloc+0x93/0xb0 [ 181.314365][ T9722] vmalloc_user_noprof+0xad/0xf0 [ 181.314391][ T9722] ? xskq_create+0xbf/0x170 [ 181.314421][ T9722] xskq_create+0xbf/0x170 [ 181.314456][ T9722] xsk_init_queue+0xb0/0x110 [ 181.314488][ T9722] xsk_setsockopt+0x4dc/0x8d0 [ 181.314520][ T9722] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.314551][ T9722] ? __pfx_aa_sk_perm+0x10/0x10 [ 181.314579][ T9722] ? aa_sock_opt_perm+0xff/0x1b0 [ 181.314612][ T9722] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 181.314641][ T9722] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.314677][ T9722] do_sock_setsockopt+0x179/0x1b0 [ 181.314713][ T9722] __x64_sys_setsockopt+0x13f/0x1b0 [ 181.314750][ T9722] do_syscall_64+0xfa/0xfa0 [ 181.314781][ T9722] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.314829][ T9722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.314857][ T9722] ? clear_bhb_loop+0x60/0xb0 [ 181.314884][ T9722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.314904][ T9722] RIP: 0033:0x7f2e41d8eec9 [ 181.314923][ T9722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.314941][ T9722] RSP: 002b:00007f2e42ce4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.314964][ T9722] RAX: ffffffffffffffda RBX: 00007f2e41fe5fa0 RCX: 00007f2e41d8eec9 [ 181.314980][ T9722] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 181.314992][ T9722] RBP: 00007f2e41e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 181.315005][ T9722] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.315018][ T9722] R13: 00007f2e41fe6038 R14: 00007f2e41fe5fa0 R15: 00007fffba24b318 [ 181.315055][ T9722] [ 181.315157][ T9722] Mem-Info: [ 181.632561][ T9722] active_anon:5800 inactive_anon:0 isolated_anon:0 [ 181.632561][ T9722] active_file:2565 inactive_file:39910 isolated_file:0 [ 181.632561][ T9722] unevictable:768 dirty:68 writeback:0 [ 181.632561][ T9722] slab_reclaimable:11027 slab_unreclaimable:100620 [ 181.632561][ T9722] mapped:29191 shmem:1366 pagetables:1261 [ 181.632561][ T9722] sec_pagetables:0 bounce:0 [ 181.632561][ T9722] kernel_misc_reclaimable:0 [ 181.632561][ T9722] free:1320913 free_pcp:16256 free_cma:0 [ 181.680678][ T9722] Node 0 active_anon:23200kB inactive_anon:0kB active_file:10260kB inactive_file:159440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116764kB dirty:272kB writeback:0kB shmem:3928kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12880kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.765324][ T9722] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.841576][ T9722] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.900848][ T9722] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 181.907103][ T9722] Node 0 DMA32 free:1379696kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23056kB inactive_anon:0kB active_file:10260kB inactive_file:157608kB unevictable:1536kB writepending:272kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:44188kB local_pcp:20524kB free_cma:0kB [ 181.980909][ T9722] lowmem_reserve[]: 0 0 1 1 1 [ 181.990877][ T9722] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 182.032679][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1066'. [ 182.073166][ T9749] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1067'. [ 182.077407][ T9722] lowmem_reserve[]: 0 0 0 0 0 [ 182.095414][ T9722] Node 1 Normal free:3888452kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21568kB local_pcp:8576kB free_cma:0kB [ 182.136275][ T9753] bond4: option min_links: invalid value (18446744073709551614) [ 182.145122][ T9722] lowmem_reserve[]: 0 0 0 0 0 [ 182.158846][ T9722] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.202629][ T9722] Node 0 DMA32: 724*4kB (UME) 394*8kB (UME) 189*16kB (UME) 200*32kB (UM) 118*64kB (UME) 111*128kB (UM) 55*256kB (UE) 17*512kB (UM) 2*1024kB (M) 4*2048kB (M) 320*4096kB (UM) = 1380976kB [ 182.240366][ T9753] bond4: option min_links: allowed values 0 - 2147483647 [ 182.310187][ T9753] bond4 (unregistering): Released all slaves [ 182.320722][ T9722] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 182.355284][ T9722] Node 1 Normal: 211*4kB (UE) 49*8kB (UME) 49*16kB (UME) 63*32kB (UME) 16*64kB (UME) 9*128kB (UME) 3*256kB (ME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3888452kB [ 182.397497][ T9722] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.419796][ T9722] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.462385][ T9722] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.508987][ T9722] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.562250][ T9767] netlink: 'syz.2.1071': attribute type 21 has an invalid length. [ 182.574239][ T9722] 43837 total pagecache pages [ 182.601886][ T9767] bond6: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 182.615884][ T9722] 0 pages in swap cache [ 182.641553][ T9767] bond6 (unregistering): Released all slaves [ 182.649184][ T9722] Free swap = 124996kB [ 182.653662][ T9722] Total swap = 124996kB [ 182.657941][ T9722] 2097051 pages RAM [ 182.663566][ T9722] 0 pages HighMem/MovableOnly [ 182.668379][ T9722] 424452 pages reserved [ 182.678082][ T9722] 0 pages cma reserved [ 182.941459][ T9790] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.965209][ T9790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1076'. [ 183.004114][ T9795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 183.154359][ T9805] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.492504][ T9870] netlink: 'syz.0.1101': attribute type 1 has an invalid length. [ 184.593145][ T9870] 8021q: adding VLAN 0 to HW filter on device bond4 [ 184.727211][ T9877] bond4: (slave gretap2): making interface the new active one [ 184.742438][ T9877] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 184.962457][ T9897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.020195][ T9897] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.030663][ T9897] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 185.068686][ T9897] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 185.193189][ T9925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.209403][ T9925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.433539][ T9933] xt_socket: unknown flags 0xd0 [ 185.792959][ T9954] tipc: Enabled bearer , priority 0 [ 185.812919][ T9954] syzkaller0: entered promiscuous mode [ 185.821402][ T9954] syzkaller0: entered allmulticast mode [ 185.919701][ T9954] tipc: Resetting bearer [ 185.933412][ T9953] tipc: Resetting bearer [ 186.090985][ T9953] tipc: Disabling bearer [ 186.299912][ T9968] __nla_validate_parse: 10 callbacks suppressed [ 186.299932][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 186.429585][ T9973] netlink: 'syz.4.1131': attribute type 83 has an invalid length. [ 186.480258][ T9973] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 186.598234][ T9980] netlink: 'syz.2.1133': attribute type 4 has an invalid length. [ 186.741179][ T9986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1136'. [ 186.796331][ T9991] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1136'. [ 186.850841][ T9996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 187.020230][ T9996] hsr_slave_1 (unregistering): left promiscuous mode [ 187.065546][T10005] : entered promiscuous mode [ 187.223934][T10010] netlink: 'syz.3.1141': attribute type 1 has an invalid length. [ 187.252235][T10010] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1141'. [ 187.271152][T10014] xt_l2tp: v2 tid > 0xffff: 1114244 [ 187.414767][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 187.801460][T10040] syzkaller1: entered promiscuous mode [ 187.806996][T10040] syzkaller1: entered allmulticast mode [ 188.337826][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1157'. [ 188.455916][T10069] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1157'. [ 188.469491][T10063] netlink: 'syz.4.1159': attribute type 1 has an invalid length. [ 188.486354][T10063] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1159'. [ 188.630809][T10073] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸Ú‡v°ýÙ[£DŒw˜zR' [ 188.660378][T10073] CPU: 0 UID: 0 PID: 10073 Comm: syz.2.1160 Not tainted syzkaller #0 PREEMPT(full) [ 188.660408][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.660422][T10073] Call Trace: [ 188.660431][T10073] [ 188.660441][T10073] dump_stack_lvl+0x189/0x250 [ 188.660484][T10073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.660508][T10073] ? __pfx__printk+0x10/0x10 [ 188.660538][T10073] ? kernfs_path_from_node+0x2f/0x290 [ 188.660572][T10073] ? kernfs_path_from_node+0x250/0x290 [ 188.660604][T10073] ? kernfs_path_from_node+0x2f/0x290 [ 188.660642][T10073] sysfs_warn_dup+0x8e/0xa0 [ 188.660674][T10073] sysfs_do_create_link_sd+0xc0/0x110 [ 188.660710][T10073] device_add_class_symlinks+0x1cf/0x240 [ 188.660743][T10073] device_add+0x475/0xb50 [ 188.660775][T10073] wiphy_register+0x1c81/0x2aa0 [ 188.660817][T10073] ? __pfx_wiphy_register+0x10/0x10 [ 188.660852][T10073] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 188.660889][T10073] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 188.660922][T10073] ieee80211_register_hw+0x3473/0x40d0 [ 188.660967][T10073] ? ieee80211_register_hw+0x14a1/0x40d0 [ 188.661008][T10073] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 188.661034][T10073] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 188.661072][T10073] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 188.661103][T10073] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.661144][T10073] ? __hrtimer_setup+0x187/0x210 [ 188.661176][T10073] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 188.661205][T10073] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 188.661273][T10073] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 188.661309][T10073] ? trace_kmalloc+0x1f/0xd0 [ 188.661329][T10073] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 188.661353][T10073] ? kstrndup+0xbf/0x160 [ 188.661396][T10073] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 188.661439][T10073] ? __pfx___nla_validate_parse+0x10/0x10 [ 188.661493][T10073] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 188.661546][T10073] ? __nla_parse+0x40/0x60 [ 188.661578][T10073] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 188.661613][T10073] genl_family_rcv_msg_doit+0x215/0x300 [ 188.661644][T10073] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 188.661682][T10073] ? bpf_lsm_capable+0x9/0x20 [ 188.661704][T10073] ? security_capable+0x7e/0x2e0 [ 188.661738][T10073] genl_rcv_msg+0x60e/0x790 [ 188.661769][T10073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.661789][T10073] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 188.661853][T10073] netlink_rcv_skb+0x205/0x470 [ 188.661880][T10073] ? __lock_acquire+0xab9/0xd20 [ 188.661912][T10073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 188.661935][T10073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.661987][T10073] ? down_read+0x1ad/0x2e0 [ 188.662012][T10073] genl_rcv+0x28/0x40 [ 188.662031][T10073] netlink_unicast+0x82f/0x9e0 [ 188.662068][T10073] ? __pfx_netlink_unicast+0x10/0x10 [ 188.662098][T10073] ? netlink_sendmsg+0x642/0xb30 [ 188.662125][T10073] ? skb_put+0x11b/0x210 [ 188.662160][T10073] netlink_sendmsg+0x805/0xb30 [ 188.662201][T10073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.662232][T10073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 188.662263][T10073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.662294][T10073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.662325][T10073] __sock_sendmsg+0x21c/0x270 [ 188.662353][T10073] ____sys_sendmsg+0x505/0x830 [ 188.662394][T10073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.662437][T10073] ? import_iovec+0x74/0xa0 [ 188.662482][T10073] ___sys_sendmsg+0x21f/0x2a0 [ 188.662518][T10073] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.662595][T10073] ? __fget_files+0x2a/0x420 [ 188.662620][T10073] ? __fget_files+0x3a0/0x420 [ 188.662660][T10073] __x64_sys_sendmsg+0x19b/0x260 [ 188.662696][T10073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.662749][T10073] ? do_syscall_64+0xbe/0xfa0 [ 188.662786][T10073] do_syscall_64+0xfa/0xfa0 [ 188.662816][T10073] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.662848][T10073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.662869][T10073] ? clear_bhb_loop+0x60/0xb0 [ 188.662896][T10073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.662918][T10073] RIP: 0033:0x7fbb1058eec9 [ 188.662939][T10073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.662957][T10073] RSP: 002b:00007fbb0e7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.662979][T10073] RAX: ffffffffffffffda RBX: 00007fbb107e6090 RCX: 00007fbb1058eec9 [ 188.662995][T10073] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 188.663009][T10073] RBP: 00007fbb10611f91 R08: 0000000000000000 R09: 0000000000000000 [ 188.663022][T10073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.663034][T10073] R13: 00007fbb107e6128 R14: 00007fbb107e6090 R15: 00007ffe703ca888 [ 188.663073][T10073] [ 189.510446][T10106] netlink: 'syz.4.1169': attribute type 6 has an invalid length. [ 189.555955][T10106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1169'. [ 189.732480][T10119] netlink: 'syz.1.1171': attribute type 11 has an invalid length. [ 189.800335][T10122] gretap0: entered promiscuous mode [ 189.961339][T10133] tipc: Enabled bearer , priority 0 [ 190.035726][T10130] tipc: Disabling bearer [ 190.323643][T10152] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 190.335728][T10160] netlink: 'syz.4.1183': attribute type 4 has an invalid length. [ 190.336463][T10152] bond5 (unregistering): Released all slaves [ 190.758778][T10178] netlink: 'syz.4.1187': attribute type 21 has an invalid length. [ 190.883225][T10192] netlink: 'syz.2.1189': attribute type 2 has an invalid length. [ 191.013382][T10198] netlink: 'syz.1.1191': attribute type 3 has an invalid length. [ 191.109218][T10207] netlink: 'syz.1.1191': attribute type 3 has an invalid length. [ 191.182765][T10197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.430021][T10226] bridge0: port 1(batadv1) entered blocking state [ 191.448880][T10226] bridge0: port 1(batadv1) entered disabled state [ 191.462762][T10226] batadv1: entered allmulticast mode [ 191.524649][T10226] batadv1: entered promiscuous mode [ 191.717883][T10241] __nla_validate_parse: 8 callbacks suppressed [ 191.717904][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1203'. [ 191.771701][T10241] netlink: 'syz.3.1203': attribute type 4 has an invalid length. [ 191.820397][T10245] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.867548][T10241] vlan0: entered allmulticast mode [ 191.904930][T10241] bridge0: entered allmulticast mode [ 191.912343][ T8199] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 191.922311][ T8199] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 191.944666][T10241] bridge3: port 1(vlan0) entered blocking state [ 191.967109][T10241] bridge3: port 1(vlan0) entered disabled state [ 191.976740][T10241] vlan0: entered promiscuous mode [ 191.983221][T10241] bridge0: entered promiscuous mode [ 192.004750][T10256] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 192.015580][T10257] netlink: 'syz.4.1207': attribute type 1 has an invalid length. [ 192.374484][T10279] ip6gre1: entered allmulticast mode [ 192.594647][T10287] gretap2: entered promiscuous mode [ 192.634538][T10292] netlink: 63 bytes leftover after parsing attributes in process `syz.4.1216'. [ 192.642833][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1217'. [ 192.654592][T10295] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1217'. [ 192.773359][T10297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1219'. [ 192.798446][T10297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1219'. [ 192.846409][T10302] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:21 [ 193.077114][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 193.104188][T10313] netlink: 62 bytes leftover after parsing attributes in process `syz.4.1223'. [ 193.248609][T10325] netlink: 'syz.0.1226': attribute type 1 has an invalid length. [ 193.317997][T10325] bond5: (slave bridge3): making interface the new active one [ 193.326825][T10325] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 193.395967][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'. [ 193.412576][T10330] tipc: Resetting bearer [ 193.418714][T10330] tipc: Resetting bearer [ 193.490023][T10332] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'. [ 193.956584][T10355] IPv6: sit1: Disabled Multicast RS [ 193.986048][T10355] sit1: entered allmulticast mode [ 194.756830][T10391] validate_nla: 3 callbacks suppressed [ 194.756852][T10391] netlink: 'syz.3.1244': attribute type 5 has an invalid length. [ 194.854254][T10396] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.953532][T10400] netlink: 'syz.1.1246': attribute type 2 has an invalid length. [ 194.977189][T10400] nbd: must specify a device to reconfigure [ 195.044661][T10404] Cannot find add_set index 4 as target [ 195.064723][T10400] netlink: 'syz.1.1246': attribute type 11 has an invalid length. [ 195.346462][T10418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.664425][T10436] nbd: nbd1 already in use [ 195.679731][T10437] nbd: must specify an index to disconnect [ 195.694233][T10434] tipc: Enabled bearer , priority 0 [ 195.724884][T10434] syzkaller0: entered promiscuous mode [ 195.745877][T10434] syzkaller0: entered allmulticast mode [ 195.811080][T10440] sctp: [Deprecated]: syz.4.1260 (pid 10440) Use of int in max_burst socket option. [ 195.811080][T10440] Use struct sctp_assoc_value instead [ 195.853274][T10443] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 195.893908][T10434] tipc: Resetting bearer [ 196.034932][T10429] tipc: Resetting bearer [ 196.079986][T10429] tipc: Disabling bearer [ 196.903202][T10498] netlink: 'syz.2.1276': attribute type 8 has an invalid length. [ 197.123554][T10508] __nla_validate_parse: 12 callbacks suppressed [ 197.123574][T10508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1277'. [ 197.160651][T10508] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1277'. [ 197.196557][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 197.482324][T10524] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1282'. [ 197.529947][T10524] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1282'. [ 197.703514][T10535] xt_hashlimit: overflow, try lower: 3/0 [ 197.818591][T10540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1284'. [ 197.960712][T10550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1288'. [ 198.014385][T10550] netlink: 'syz.0.1288': attribute type 1 has an invalid length. [ 198.024734][T10554] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 198.269534][T10550] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.327406][T10572] sctp: [Deprecated]: syz.1.1293 (pid 10572) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.327406][T10572] Use struct sctp_sack_info instead [ 198.453465][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1294'. [ 198.677134][T10590] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1297'. [ 198.820998][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 199.020329][T10603] vlan1: entered promiscuous mode [ 199.037845][T10603] vlan1: entered allmulticast mode [ 199.045970][T10603] hsr_slave_1: entered allmulticast mode [ 199.592400][T10623] vcan0: entered allmulticast mode [ 199.663750][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.671008][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.682342][ T1300] aoe: packet could not be sent on veth0_virt_wifi. consider increasing tx_queue_len [ 199.683110][T10623] netdevsim netdevsim2: Direct firmware load for . [ 199.683110][T10623] failed with error -2 [ 199.725681][T10623] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 199.725681][T10623] [ 199.944525][T10634] 8021q: VLANs not supported on sit0 [ 200.607045][T10672] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 200.642825][T10672] bond6 (unregistering): Released all slaves [ 201.384401][T10714] netlink: 'syz.4.1328': attribute type 13 has an invalid length. [ 202.381803][T10752] __nla_validate_parse: 10 callbacks suppressed [ 202.381825][T10752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1342'. [ 202.796037][T10773] netlink: 'syz.2.1352': attribute type 10 has an invalid length. [ 202.824511][T10773] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1352'. [ 202.852857][T10773] dummy0: entered promiscuous mode [ 202.870548][T10773] bridge0: port 3(dummy0) entered blocking state [ 202.908659][T10773] bridge0: port 3(dummy0) entered disabled state [ 202.919250][T10773] dummy0: entered allmulticast mode [ 202.928268][T10773] bridge0: port 3(dummy0) entered blocking state [ 202.934978][T10773] bridge0: port 3(dummy0) entered forwarding state [ 203.501291][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 203.576288][T10807] tipc: Started in network mode [ 203.592269][T10807] tipc: Node identity ca4a358cf675, cluster identity 4711 [ 203.619269][T10807] tipc: Enabled bearer , priority 0 [ 203.661254][T10806] tipc: Disabling bearer [ 203.956219][T10829] pim6reg: entered allmulticast mode [ 203.963834][T10831] netlink: 'syz.4.1368': attribute type 33 has an invalid length. [ 203.988988][T10831] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1368'. [ 204.009145][T10835] pim6reg: left allmulticast mode [ 204.057397][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 204.102737][T10829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1367'. [ 204.104795][T10841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.202129][T10829] gretap1: entered promiscuous mode [ 204.237952][T10829] gretap1: entered allmulticast mode [ 204.377689][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1374'. [ 204.539764][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1376'. [ 204.568016][T10857] bond4: entered promiscuous mode [ 204.585020][T10857] bond4: entered allmulticast mode [ 204.598177][T10857] 8021q: adding VLAN 0 to HW filter on device bond4 [ 205.434302][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1386'. [ 205.731878][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 205.732721][T10922] team0: Device wireguard0 is of different type [ 206.164685][T10949] bridge3: entered promiscuous mode [ 206.175117][T10949] bridge3: entered allmulticast mode [ 206.183405][ T8202] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.194582][ T8202] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.218022][T10949] bridge4: entered promiscuous mode [ 206.224836][T10949] bridge4: entered allmulticast mode [ 206.232858][ T8202] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.268384][T10949] bridge5: entered promiscuous mode [ 206.284122][T10949] bridge5: entered allmulticast mode [ 206.295233][ T8202] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.308706][T10955] netlink: 'syz.3.1404': attribute type 11 has an invalid length. [ 206.318386][T10949] bridge6: entered promiscuous mode [ 206.325087][T10949] bridge6: entered allmulticast mode [ 206.343047][T10949] bridge7: entered promiscuous mode [ 206.348412][T10949] bridge7: entered allmulticast mode [ 206.366502][T10949] bridge8: entered promiscuous mode [ 206.372977][T10949] bridge8: entered allmulticast mode [ 206.394066][T10949] bridge9: entered promiscuous mode [ 206.399982][T10949] bridge9: entered allmulticast mode [ 206.421494][T10949] bridge10: entered promiscuous mode [ 206.427325][T10949] bridge10: entered allmulticast mode [ 206.455154][T10949] bridge11: entered promiscuous mode [ 206.460979][T10949] bridge11: entered allmulticast mode [ 206.486739][T10949] bridge12: entered promiscuous mode [ 206.492479][T10949] bridge12: entered allmulticast mode [ 206.516681][T10949] bridge13: entered promiscuous mode [ 206.523196][T10949] bridge13: entered allmulticast mode [ 206.587800][T10949] bridge14: entered promiscuous mode [ 206.595311][T10949] bridge14: entered allmulticast mode [ 206.608282][T10962] netlink: 'syz.3.1406': attribute type 1 has an invalid length. [ 206.617743][T10962] netlink: 'syz.3.1406': attribute type 4 has an invalid length. [ 206.628127][T10962] netlink: 'syz.3.1406': attribute type 1 has an invalid length. [ 206.649307][T10962] netlink: 'syz.3.1406': attribute type 4 has an invalid length. [ 206.658650][T10949] bridge15: entered promiscuous mode [ 206.665181][T10949] bridge15: entered allmulticast mode [ 206.685894][T10949] bridge16: entered promiscuous mode [ 206.691409][T10949] bridge16: entered allmulticast mode [ 206.711563][T10949] bridge17: entered promiscuous mode [ 206.716991][T10949] bridge17: entered allmulticast mode [ 206.828249][T10949] bridge18: entered promiscuous mode [ 206.836363][T10949] bridge18: entered allmulticast mode [ 206.854594][T10949] bridge19: entered promiscuous mode [ 206.861011][T10949] bridge19: entered allmulticast mode [ 206.886137][T10949] bridge20: entered promiscuous mode [ 206.892077][T10949] bridge20: entered allmulticast mode [ 206.909159][T10969] !: entered promiscuous mode [ 206.978153][T10949] bridge21: entered promiscuous mode [ 207.010382][T10949] bridge21: entered allmulticast mode [ 207.133376][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 207.186362][ T9] hid-generic 0005:16C0:5505.0001: unknown main item tag 0x0 [ 207.243768][ T9] hid-generic 0005:16C0:5505.0001: hidraw0: BLUETOOTH HID v0.8b Device [syz0] on aa:aa:aa:aa:aa:aa [ 207.310281][T10987] netlink: 'syz.3.1414': attribute type 1 has an invalid length. [ 207.447271][T10992] __nla_validate_parse: 7 callbacks suppressed [ 207.447292][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1416'. [ 207.563403][T10992] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 207.600809][T10992] netlink: 'syz.1.1416': attribute type 2 has an invalid length. [ 207.664650][T11010] netlink: 'syz.2.1418': attribute type 1 has an invalid length. [ 207.794643][T11010] 8021q: adding VLAN 0 to HW filter on device bond6 [ 208.029751][T11027] netlink: 'syz.4.1426': attribute type 3 has an invalid length. [ 208.089176][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 208.107193][T11027] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1426'. [ 208.122211][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 208.179947][T11033] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 208.273403][T11040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'. [ 208.311849][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 208.389732][T11040] xfrm1: entered promiscuous mode [ 208.411581][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1428'. [ 208.440752][T11040] xfrm1: entered allmulticast mode [ 208.481449][T11046] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 208.520849][T11046] netlink: zone id is out of range [ 208.558469][T11046] netlink: zone id is out of range [ 208.581186][T11046] netlink: zone id is out of range [ 208.622430][T11052] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 208.639212][T11046] netlink: zone id is out of range [ 208.666808][T11046] netlink: zone id is out of range [ 208.679203][T11046] netlink: zone id is out of range [ 208.706096][T11046] netlink: zone id is out of range [ 208.732107][T11046] netlink: zone id is out of range [ 208.757482][T11046] netlink: zone id is out of range [ 208.785909][T11046] netlink: zone id is out of range [ 208.887877][T11063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 208.946135][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1434'. [ 209.012011][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 211.480197][T11106] delete_channel: no stack [ 211.583070][T11109] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 212.030543][T11133] tipc: Enabled bearer , priority 0 [ 212.119780][T11136] syzkaller0: entered promiscuous mode [ 212.152476][T11136] syzkaller0: entered allmulticast mode [ 212.317395][T11158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.366634][T11158] bond0: (slave rose0): Enslaving as an active interface with an up link [ 212.485362][T11147] __nla_validate_parse: 2 callbacks suppressed [ 212.485383][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1461'. [ 212.603013][T11132] tipc: Resetting bearer [ 212.688699][T11132] tipc: Disabling bearer [ 213.507656][T11178] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 213.765893][T11226] batadv_slave_1: entered promiscuous mode [ 213.799942][T11226] batadv_slave_1: entered allmulticast mode [ 213.816837][T11229] net_ratelimit: 1 callbacks suppressed [ 213.816858][T11229] netlink: zone id is out of range [ 213.848851][T11228] netlink: zone id is out of range [ 213.860165][T11228] netlink: zone id is out of range [ 213.866491][T11228] netlink: zone id is out of range [ 213.878340][T11229] netlink: zone id is out of range [ 213.904345][T11228] netlink: zone id is out of range [ 213.925252][T11229] netlink: zone id is out of range [ 213.939223][T11228] netlink: zone id is out of range [ 213.949586][T11228] netlink: zone id is out of range [ 213.964909][T11229] netlink: zone id is out of range [ 214.063297][T11241] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 214.080511][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 214.142377][T11241] bond7: option packets_per_slave: allowed values 0 - 65535 [ 214.178692][T11241] bond7 (unregistering): Released all slaves [ 214.579925][ T5933] IPVS: starting estimator thread 0... [ 214.587411][T11260] syzkaller1: entered promiscuous mode [ 214.601484][T11260] syzkaller1: entered allmulticast mode [ 214.602610][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 214.632341][T11277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1482'. [ 214.689239][T11276] IPVS: using max 24 ests per chain, 57600 per kthread [ 215.368714][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1493'. [ 215.376054][T11319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1491'. [ 215.596648][T11332] validate_nla: 1 callbacks suppressed [ 215.596670][T11332] netlink: 'syz.0.1495': attribute type 2 has an invalid length. [ 215.626438][T11332] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1495'. [ 215.902526][T11349] sctp: [Deprecated]: syz.1.1499 (pid 11349) Use of int in maxseg socket option. [ 215.902526][T11349] Use struct sctp_assoc_value instead [ 215.920896][T11349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1499'. [ 216.356996][T11370] netlink: 'syz.3.1506': attribute type 13 has an invalid length. [ 216.421622][T11372] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1505'. [ 216.483476][T11373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1506'. [ 217.101895][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 217.108196][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 217.110031][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 217.114731][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 217.965152][T11443] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 217.984709][T11443] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 217.994235][T11448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1527'. [ 218.013863][T11443] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1525'. [ 218.039410][T11450] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 218.109068][T11450] netlink: 'syz.3.1525': attribute type 4 has an invalid length. [ 218.129203][T11457] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 218.141324][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 218.153706][T11450] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1525'. [ 218.161456][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1526'. [ 218.253058][T11461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1525'. [ 218.324626][T11463] netlink: 'syz.2.1529': attribute type 13 has an invalid length. [ 218.379837][T11463] macvtap0: refused to change device tx_queue_len [ 218.821268][T11482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1533'. [ 219.078623][T11494] bridge5: entered promiscuous mode [ 219.106037][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 219.111639][T11494] bridge5: entered allmulticast mode [ 219.115957][T11499] net_ratelimit: 14 callbacks suppressed [ 219.115978][T11499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.153606][T11499] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1536'. [ 219.207101][T11501] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1538'. [ 219.252343][T11503] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 219.290913][T11503] bridge0: port 3(dummy0) entered disabled state [ 219.357707][T11503] bridge1: port 1(vlan4) entered disabled state [ 219.367498][T11503] bridge0: port 3(dummy0) entered blocking state [ 219.374079][T11503] bridge0: port 3(dummy0) entered forwarding state [ 219.395774][T11516] netlink: 'syz.1.1541': attribute type 2 has an invalid length. [ 219.412783][T11503] bridge1: port 1(vlan4) entered blocking state [ 219.419419][T11503] bridge1: port 1(vlan4) entered forwarding state [ 219.431399][T11503] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 219.433093][T11516] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.445332][T11503] syz.0.1539 (11503) used greatest stack depth: 18392 bytes left [ 219.830931][T11532] IPVS: length: 131 != 8 [ 220.037961][ T8199] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.049932][ T8199] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.082192][ T8199] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.093143][ T8199] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.673480][T11570] openvswitch: netlink: Message has -2 unknown bytes. [ 220.693989][T11575] geneve2: entered promiscuous mode [ 220.721013][T11575] geneve2: entered allmulticast mode [ 220.865870][T11580] erspan0: left allmulticast mode [ 220.885390][T11580] syz_tun: left allmulticast mode [ 221.652812][T11619] tipc: Started in network mode [ 221.658532][T11619] tipc: Node identity 080211, cluster identity 4711 [ 221.684459][T11619] tipc: Enabled bearer , priority 0 [ 221.692878][T11619] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 221.705478][T11619] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 221.733172][T11623] tipc: Resetting bearer [ 221.842445][T11629] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 222.051407][T11639] netlink: 'syz.0.1582': attribute type 4 has an invalid length. [ 222.131340][T11639] `: renamed from bond0 (while UP) [ 222.739509][ T24] tipc: Node number set to 134353152 [ 223.143252][T11708] __nla_validate_parse: 47 callbacks suppressed [ 223.143275][T11708] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1602'. [ 223.203803][T11708] netlink: 'syz.2.1602': attribute type 16 has an invalid length. [ 223.228359][T11710] netlink: 'syz.2.1602': attribute type 16 has an invalid length. [ 223.240240][T11708] netlink: 'syz.2.1602': attribute type 17 has an invalid length. [ 223.250795][T11710] netlink: 'syz.2.1602': attribute type 17 has an invalid length. [ 223.300440][T11708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.333244][T11710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.454118][T11715] geneve2: entered promiscuous mode [ 223.464253][T11715] geneve2: entered allmulticast mode [ 223.488639][ T8203] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 223.533863][ T8203] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 223.581839][ T8203] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 223.609580][ T8203] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 223.917275][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1614'. [ 223.933054][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 223.955362][T11742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1614'. [ 224.091749][T11751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1616'. [ 224.094864][T11752] netlink: 'syz.0.1617': attribute type 1 has an invalid length. [ 224.112262][T11752] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1617'. [ 225.284752][T11811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1633'. [ 225.602417][T11825] netlink: 'syz.2.1638': attribute type 12 has an invalid length. [ 225.641202][T11831] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1639'. [ 225.655255][T11825] x_tables: duplicate underflow at hook 4 [ 225.672395][T11833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 225.755290][T11838] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1641'. [ 226.047105][T11841] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.207821][T11857] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 226.779154][T11887] bond5: option xmit_hash_policy: invalid value (64) [ 226.788328][T11887] bond5 (unregistering): Released all slaves [ 226.901731][T11893] bridge6: entered promiscuous mode [ 226.907235][T11893] bridge6: entered allmulticast mode [ 226.932068][T11893] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 227.017996][T11900] bridge7: entered promiscuous mode [ 227.033159][T11900] bridge7: entered allmulticast mode [ 227.040642][T11900] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 227.088813][T11899] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 227.153363][T11912] syzkaller1: entered promiscuous mode [ 227.186309][T11912] syzkaller1: entered allmulticast mode [ 227.760079][T11946] : renamed from bridge_slave_0 [ 227.793640][T11948] nbd: must specify at least one socket [ 227.800875][T11948] block nbd1: NBD_DISCONNECT [ 227.806964][T11948] block nbd1: Send disconnect failed -32 [ 227.839274][T11948] block nbd1: shutting down sockets [ 227.951055][T11957] IPv6: NLM_F_REPLACE set, but no existing node found! [ 228.373566][T11978] netlink: 'syz.0.1679': attribute type 16 has an invalid length. [ 228.392202][T11977] __nla_validate_parse: 10 callbacks suppressed [ 228.392226][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1681'. [ 228.407573][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1679'. [ 228.411897][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1681'. [ 228.577755][T11983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1683'. [ 228.881863][T11993] netlink: 'syz.2.1685': attribute type 10 has an invalid length. [ 228.912778][T11993] bridge_slave_1: left allmulticast mode [ 228.927642][T11993] bridge_slave_1: left promiscuous mode [ 228.943388][T11993] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.967159][T11993] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 229.239893][T12018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 229.355203][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1690'. [ 229.616881][T12041] netlink: 'syz.3.1696': attribute type 12 has an invalid length. [ 229.656175][T12042] netlink: 'syz.3.1696': attribute type 12 has an invalid length. [ 229.790439][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1697'. [ 229.801989][T12051] netlink: 'syz.0.1699': attribute type 1 has an invalid length. [ 229.945603][T12051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.543632][T12100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 230.570116][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1710'. [ 230.608247][T12108] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1712'. [ 230.676472][T12108] pim6reg1: entered promiscuous mode [ 230.692127][T12108] pim6reg1: entered allmulticast mode [ 231.193968][T12139] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 232.289641][T12176] wg2: entered promiscuous mode [ 232.295098][T12176] wg2: entered allmulticast mode [ 232.333733][T12178] bond7: entered allmulticast mode [ 232.345094][T12178] netlink: 'syz.2.1732': attribute type 1 has an invalid length. [ 232.353411][T12178] netlink: 'syz.2.1732': attribute type 1 has an invalid length. [ 232.792582][T12209] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 233.163485][T12222] syz.1.1744: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.223202][T12222] CPU: 0 UID: 0 PID: 12222 Comm: syz.1.1744 Not tainted syzkaller #0 PREEMPT(full) [ 233.223236][T12222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.223250][T12222] Call Trace: [ 233.223259][T12222] [ 233.223270][T12222] dump_stack_lvl+0x189/0x250 [ 233.223304][T12222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.223328][T12222] ? __pfx__printk+0x10/0x10 [ 233.223353][T12222] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.223390][T12222] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.223417][T12222] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 233.223445][T12222] warn_alloc+0x214/0x310 [ 233.223473][T12222] ? stack_depot_save_flags+0x40/0x860 [ 233.223498][T12222] ? __pfx_warn_alloc+0x10/0x10 [ 233.223527][T12222] ? kasan_save_track+0x4f/0x80 [ 233.223549][T12222] ? xskq_create+0x56/0x170 [ 233.223580][T12222] ? xsk_init_queue+0xb0/0x110 [ 233.223605][T12222] ? xsk_setsockopt+0x4dc/0x8d0 [ 233.223630][T12222] ? do_sock_setsockopt+0x179/0x1b0 [ 233.223657][T12222] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 233.223685][T12222] ? do_syscall_64+0xfa/0xfa0 [ 233.223715][T12222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.223747][T12222] __vmalloc_node_range_noprof+0x125/0x12f0 [ 233.223810][T12222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.223843][T12222] ? __kasan_kmalloc+0x93/0xb0 [ 233.223869][T12222] vmalloc_user_noprof+0xad/0xf0 [ 233.223895][T12222] ? xskq_create+0xbf/0x170 [ 233.223926][T12222] xskq_create+0xbf/0x170 [ 233.223960][T12222] xsk_init_queue+0xb0/0x110 [ 233.223994][T12222] xsk_setsockopt+0x4dc/0x8d0 [ 233.224026][T12222] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.224059][T12222] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.224086][T12222] ? aa_sock_opt_perm+0xff/0x1b0 [ 233.224116][T12222] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 233.224146][T12222] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.224176][T12222] do_sock_setsockopt+0x179/0x1b0 [ 233.224213][T12222] __x64_sys_setsockopt+0x13f/0x1b0 [ 233.224251][T12222] do_syscall_64+0xfa/0xfa0 [ 233.224295][T12222] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.224327][T12222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.224349][T12222] ? clear_bhb_loop+0x60/0xb0 [ 233.224386][T12222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.224406][T12222] RIP: 0033:0x7f0d3558eec9 [ 233.224427][T12222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.224446][T12222] RSP: 002b:00007f0d363d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.224470][T12222] RAX: ffffffffffffffda RBX: 00007f0d357e5fa0 RCX: 00007f0d3558eec9 [ 233.224486][T12222] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 233.224500][T12222] RBP: 00007f0d35611f91 R08: 0000000000000004 R09: 0000000000000000 [ 233.224514][T12222] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.224527][T12222] R13: 00007f0d357e6038 R14: 00007f0d357e5fa0 R15: 00007ffda9081288 [ 233.224564][T12222] [ 233.224573][T12222] Mem-Info: [ 233.443707][T12236] __nla_validate_parse: 9 callbacks suppressed [ 233.443731][T12236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1748'. [ 233.477750][T12222] active_anon:8588 inactive_anon:0 isolated_anon:0 [ 233.477750][T12222] active_file:2758 inactive_file:39957 isolated_file:0 [ 233.477750][T12222] unevictable:768 dirty:106 writeback:0 [ 233.477750][T12222] slab_reclaimable:11509 slab_unreclaimable:102902 [ 233.477750][T12222] mapped:31918 shmem:4019 pagetables:1290 [ 233.477750][T12222] sec_pagetables:0 bounce:0 [ 233.477750][T12222] kernel_misc_reclaimable:0 [ 233.477750][T12222] free:1316190 free_pcp:13394 free_cma:0 [ 233.624717][T12222] Node 0 active_anon:35452kB inactive_anon:0kB active_file:11032kB inactive_file:159628kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128672kB dirty:424kB writeback:0kB shmem:15340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13452kB pagetables:4992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.691300][T12222] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.728424][T12222] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.759110][T12222] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 233.765073][T12222] Node 0 DMA32 free:1360232kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35308kB inactive_anon:0kB active_file:11032kB inactive_file:157796kB unevictable:1536kB writepending:424kB present:3129332kB managed:2562036kB mlocked:0kB bounce:0kB free_pcp:31108kB local_pcp:20060kB free_cma:0kB [ 233.818271][T12242] pim6reg1: entered promiscuous mode [ 233.824315][T12242] pim6reg1: entered allmulticast mode [ 233.841794][T12222] lowmem_reserve[]: 0 0 1 1 1 [ 233.869127][T12222] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 233.909352][T12222] lowmem_reserve[]: 0 0 0 0 0 [ 233.914553][T12222] Node 1 Normal free:3888452kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21568kB local_pcp:12992kB free_cma:0kB [ 233.947982][T12222] lowmem_reserve[]: 0 0 0 0 0 [ 233.954203][T12222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 233.967632][T12222] Node 0 DMA32: 1009*4kB (U) 226*8kB (UE) 74*16kB (UM) 373*32kB (UME) 68*64kB (UM) 82*128kB (UME) 45*256kB (UM) 12*512kB (UME) 4*1024kB (UM) 5*2048kB (UME) 316*4096kB (M) = 1360148kB [ 233.987203][T12222] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 234.000049][T12222] Node 1 Normal: 211*4kB (UE) 49*8kB (UME) 49*16kB (UME) 63*32kB (UME) 16*64kB (UME) 9*128kB (UME) 3*256kB (ME) 3*512kB (UM) 1*1024kB (M) 2*2048kB (UE) 946*4096kB (M) = 3888452kB [ 234.051472][T12222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.076302][T12222] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.137537][T12222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.189269][T12222] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.210682][T12222] 44080 total pagecache pages [ 234.222561][T12222] 0 pages in swap cache [ 234.246209][T12222] Free swap = 124996kB [ 234.267782][T12222] Total swap = 124996kB [ 234.303023][T12258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1752'. [ 234.312137][T12222] 2097051 pages RAM [ 234.312157][T12222] 0 pages HighMem/MovableOnly [ 234.312167][T12222] 424452 pages reserved [ 234.312176][T12222] 0 pages cma reserved [ 234.445189][T12262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1754'. [ 234.682692][T12275] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1758'. [ 234.712427][T12275] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1758'. [ 234.736927][T12275] netlink: 'syz.1.1758': attribute type 5 has an invalid length. [ 234.745534][T12280] tipc: Enabling of bearer rejected, failed to enable media [ 234.749094][T12275] netlink: 'syz.1.1758': attribute type 6 has an invalid length. [ 234.776125][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1760'. [ 234.786622][T12275] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1758'. [ 234.798084][T12280] netlink: zone id is out of range [ 234.836280][T12280] netlink: zone id is out of range [ 234.864300][T12280] netlink: zone id is out of range [ 234.875644][T12280] netlink: zone id is out of range [ 234.885658][T12280] netlink: zone id is out of range [ 234.903058][T12280] netlink: zone id is out of range [ 234.913171][T12280] netlink: zone id is out of range [ 234.931431][T12280] netlink: zone id is out of range [ 234.944235][T12280] netlink: zone id is out of range [ 235.032091][T12298] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 235.120733][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1765'. [ 235.355025][T12314] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 235.569707][T12325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1773'. [ 235.901685][T12333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1776'. [ 235.988172][T12344] syzkaller1: entered promiscuous mode [ 235.997506][T12344] syzkaller1: entered allmulticast mode [ 236.014071][T12357] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 236.015064][T12352] syzkaller1: entered promiscuous mode [ 236.032556][T12352] syzkaller1: entered allmulticast mode [ 236.351855][ T8201] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 236.432291][T12371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.326908][T12431] netlink: 'syz.3.1803': attribute type 10 has an invalid length. [ 237.356076][T12431] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 237.428730][T12437] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 237.446468][T12437] team0: Device veth1_macvtap failed to register rx_handler [ 238.142204][ T8203] wlan1: Trigger new scan to find an IBSS to join [ 238.277284][T12474] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 238.412002][T12487] net_ratelimit: 9 callbacks suppressed [ 238.412027][T12487] openvswitch: netlink: IPv4 frag type 56 is out of range max 2 [ 238.570106][T12496] __nla_validate_parse: 12 callbacks suppressed [ 238.570127][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 238.821199][T12506] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1823'. [ 239.085705][T12521] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1828'. [ 239.180830][ T8202] wlan1: Trigger new scan to find an IBSS to join [ 239.345621][T12538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1833'. [ 239.492771][T12541] vlan1: entered promiscuous mode [ 239.498295][T12541] bond0: entered promiscuous mode [ 239.577210][T12541] bond_slave_0: entered promiscuous mode [ 239.595624][T12541] bond_slave_1: entered promiscuous mode [ 239.639481][T12541] dummy0: entered promiscuous mode [ 240.550961][T12593] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1848'. [ 240.579090][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1848'. [ 240.887585][T12616] sit0: entered promiscuous mode [ 240.915686][T12608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 240.993625][T12616] netlink: 'syz.2.1855': attribute type 1 has an invalid length. [ 241.039551][T12616] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1855'. [ 241.064769][T12617] lo: entered allmulticast mode [ 241.070906][T12608] netlink: 'syz.1.1853': attribute type 1 has an invalid length. [ 241.088394][T12608] netlink: 'syz.1.1853': attribute type 2 has an invalid length. [ 241.593240][T12599] lo: left allmulticast mode [ 241.936529][T12659] tc_dump_action: action bad kind [ 241.944636][T12661] tc_dump_action: action bad kind [ 242.050853][T12665] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 242.289395][T12665] 8021q: adding VLAN 0 to HW filter on device bond8 [ 242.368096][T12673] bond8: (slave geneve3): making interface the new active one [ 242.400883][T12673] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 243.101670][ T8203] wlan1: Trigger new scan to find an IBSS to join [ 243.335538][ T8191] tipc: Subscription rejected, illegal request [ 244.062765][ T8201] wlan1: Creating new IBSS network, BSSID 8e:b7:74:35:e4:ff [ 244.143425][ T8202] wlan1: Trigger new scan to find an IBSS to join [ 244.616577][T12781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1892'. [ 244.921328][T12803] netlink: 'syz.2.1897': attribute type 32 has an invalid length. [ 245.006321][T12802] netlink: 'syz.4.1898': attribute type 4 has an invalid length. [ 245.112378][ T8191] wlan1: Creating new IBSS network, BSSID ce:2e:fa:a2:6b:21 [ 245.354888][T12824] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 245.374313][T12824] bond5 (unregistering): Released all slaves [ 245.894053][T12841] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1908'. [ 245.915358][T12838] syzkaller1: entered promiscuous mode [ 245.925145][T12838] syzkaller1: entered allmulticast mode [ 245.934982][T12849] syz_tun: entered allmulticast mode [ 245.967430][T12839] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1907'. [ 246.059112][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1907'. [ 246.230466][T12863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1913'. [ 246.398196][T12872] gretap0: left promiscuous mode [ 246.407021][T12872] erspan0: left allmulticast mode [ 246.421514][T12872] bridge3: port 1(vlan0) entered disabled state [ 246.431156][T12872] bond0: left allmulticast mode [ 246.436115][T12872] bond_slave_0: left allmulticast mode [ 246.443274][T12872] bond_slave_1: left allmulticast mode [ 246.448816][T12872] dummy0: left allmulticast mode [ 246.472535][T12872] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 247.225455][T12901] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1925'. [ 247.251563][T12901] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1925'. [ 247.270741][T12901] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1925'. [ 247.330447][T12908] netlink: zone id is out of range [ 247.337934][T12908] netlink: zone id is out of range [ 247.370228][T12908] netlink: del zone limit has 4 unknown bytes [ 247.436574][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1928'. [ 247.472055][T12911] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1928'. [ 247.542238][T12925] netlink: 'syz.3.1929': attribute type 10 has an invalid length. [ 247.607578][T12925] mac80211_hwsim hwsim8 ÿ: entered promiscuous mode [ 247.635531][T12925] bond0: (slave ÿ): Enslaving as an active interface with an up link [ 248.132814][T12942] team0 (unregistering): Port device º removed [ 248.151906][T12942] team0 (unregistering): Port device team_slave_1 removed [ 248.170979][T12958] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 248.179970][T12958] netlink: 'syz.1.1942': attribute type 3 has an invalid length. [ 248.196270][T12955] tipc: Enabling of bearer rejected, already enabled [ 248.861048][T12992] netlink: 'syz.0.1953': attribute type 12 has an invalid length. [ 248.898545][T12992] netlink: 'syz.0.1953': attribute type 29 has an invalid length. [ 248.933374][T12989] IPv6: sit2: Disabled Multicast RS [ 249.083976][T13006] netlink: 'syz.3.1956': attribute type 16 has an invalid length. [ 249.119524][T13006] netlink: 'syz.3.1956': attribute type 17 has an invalid length. [ 249.240375][T13006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.261835][T13006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 249.353824][T13015] netlink: 'syz.0.1959': attribute type 4 has an invalid length. [ 249.609700][T13026] netlink: 'syz.1.1964': attribute type 29 has an invalid length. [ 249.632442][T13026] netlink: 'syz.1.1964': attribute type 29 has an invalid length. [ 249.650378][T13033] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 249.650534][T13026] __nla_validate_parse: 13 callbacks suppressed [ 249.650551][T13026] netlink: 500 bytes leftover after parsing attributes in process `syz.1.1964'. [ 250.032223][T13049] tipc: Enabled bearer , priority 0 [ 250.040973][T13049] syzkaller0: entered promiscuous mode [ 250.047067][T13049] syzkaller0: entered allmulticast mode [ 250.055679][T13049] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 250.098705][T13049] tipc: Resetting bearer [ 250.189328][T13049] tipc: Resetting bearer [ 250.224915][T13049] tipc: Disabling bearer [ 250.283943][T13061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1976'. [ 250.349322][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'. [ 250.398277][T13069] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1979'. [ 250.414625][T13065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'. [ 250.459538][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1981'. [ 250.493569][T13069] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 250.512636][T13069] bond5 (unregistering): Released all slaves [ 250.560017][T13065] Unsupported ieee802154 address type: 0 [ 250.583857][T13066] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 250.615058][T13081] IPv6: sit2: Disabled Multicast RS [ 250.665138][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 250.667056][ T8200] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.683869][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 250.698542][ T8200] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.731038][ T8200] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.745779][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1978'. [ 250.791238][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 250.799153][ T8200] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 250.867428][ T8200] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.901899][ T8200] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.929962][ T8200] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.962679][ T8200] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.397185][T13111] xt_nat: multiple ranges no longer supported [ 252.023993][T13149] vlan5: entered allmulticast mode [ 252.042095][T13149] hsr0: entered allmulticast mode [ 252.047300][T13149] hsr_slave_0: entered allmulticast mode [ 252.053556][T13149] hsr_slave_1: entered allmulticast mode [ 252.080858][T13153] geneve3: entered promiscuous mode [ 252.090301][T13153] geneve3: entered allmulticast mode [ 252.490083][T13179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 252.520938][T13168] vlan3: entered allmulticast mode [ 252.526143][T13168] bridge0: entered allmulticast mode [ 252.754980][T13203] validate_nla: 2 callbacks suppressed [ 252.755003][T13203] netlink: 'syz.4.2016': attribute type 1 has an invalid length. [ 252.850977][T13203] gretap1: entered promiscuous mode [ 252.913687][T13208] netlink: 'syz.2.2018': attribute type 2 has an invalid length. [ 253.053272][T13214] tipc: Enabling of bearer rejected, already enabled [ 253.079492][T13215] tipc: Enabling of bearer rejected, already enabled [ 253.114084][T13215] tipc: New replicast peer: 255.255.255.255 [ 253.122571][T13215] tipc: Enabled bearer , priority 10 [ 253.140748][T13214] tipc: Enabling of bearer rejected, already enabled [ 253.392943][T13235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.348119][T13273] : renamed from bridge_slave_0 (while UP) [ 254.643201][T13285] netlink: 'syz.1.2038': attribute type 12 has an invalid length. [ 254.858348][T13285] bond8: option primary_reselect: invalid value (255) [ 254.874163][T13285] bond8 (unregistering): Released all slaves [ 254.958825][T13298] tipc: Enabling of bearer rejected, already enabled [ 255.000135][T13304] __nla_validate_parse: 14 callbacks suppressed [ 255.000157][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2041'. [ 255.189687][T13310] netlink: 'syz.4.2043': attribute type 1 has an invalid length. [ 255.693046][T13330] nftables ruleset with unbound set [ 256.351882][T13346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2054'. [ 257.270982][T13383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2063'. [ 257.348410][T13381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.417859][T13390] netlink: 'syz.0.2067': attribute type 10 has an invalid length. [ 257.445201][T13394] netlink: 'syz.3.2068': attribute type 4 has an invalid length. [ 257.474470][T13390] wlan1: mtu less than device minimum [ 257.491885][T13390] `: (slave wlan1): Error -22 calling dev_set_mtu [ 257.496417][T13395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2067'. [ 257.674514][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2071'. [ 257.704805][T13409] !: renamed from dummy0 (while UP) [ 257.731191][T13414] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2073'. [ 257.743828][T13404] sctp: [Deprecated]: syz.3.2071 (pid 13404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.743828][T13404] Use struct sctp_sack_info instead [ 258.015926][T13424] netlink: 'syz.3.2075': attribute type 5 has an invalid length. [ 258.034170][T13424] netlink: 'syz.3.2075': attribute type 1 has an invalid length. [ 258.308737][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2082'. [ 258.323116][T13440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2082'. [ 258.852783][T13469] nbd: must specify at least one socket [ 259.137357][T13484] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 259.201001][T13488] netlink: 'syz.1.2096': attribute type 2 has an invalid length. [ 259.262395][T13488] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2096'. [ 259.467725][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2100'. [ 259.527832][T13499] tipc: Enabled bearer , priority 0 [ 259.544368][T13499] syzkaller0: entered promiscuous mode [ 259.552060][T13507] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.556831][T13508] netlink: 'syz.3.2104': attribute type 29 has an invalid length. [ 259.576539][T13499] syzkaller0: entered allmulticast mode [ 259.697421][T13516] syzkaller0: mtu less than device minimum [ 259.752315][T13497] tipc: Resetting bearer [ 259.799648][T13497] tipc: Disabling bearer [ 259.847847][T13517] tipc: Enabled bearer , priority 0 [ 259.869959][T13517] syzkaller0: entered promiscuous mode [ 259.882909][T13517] syzkaller0: entered allmulticast mode [ 259.923306][T13517] tipc: Resetting bearer [ 259.963982][T13514] tipc: Resetting bearer [ 259.975829][T13533] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 259.999423][T13514] tipc: Disabling bearer [ 260.482136][T13561] __nla_validate_parse: 3 callbacks suppressed [ 260.482162][T13561] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2118'. [ 260.546437][T13564] SET target dimension over the limit! [ 260.561807][T13560] bond5: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 260.576642][T13560] bond5 (unregistering): Released all slaves [ 260.607188][T13569] tipc: Enabling of bearer rejected, already enabled [ 260.665790][T13559] netlink: 'syz.1.2120': attribute type 1 has an invalid length. [ 260.823786][T13569] bond8: (slave bridge9): making interface the new active one [ 260.835497][T13569] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 261.080331][T13592] netlink: 'syz.1.2128': attribute type 1 has an invalid length. [ 261.095525][T13587] netlink: 'syz.2.2127': attribute type 2 has an invalid length. [ 261.120427][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.127025][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.137478][ T1300] aoe: packet could not be sent on veth0_virt_wifi. consider increasing tx_queue_len [ 261.642634][T13624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2136'. [ 261.666522][T13625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2138'. [ 261.941713][T13638] sctp: [Deprecated]: syz.1.2141 (pid 13638) Use of int in maxseg socket option. [ 261.941713][T13638] Use struct sctp_assoc_value instead [ 261.971554][T13641] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 262.001113][T13641] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2143'. [ 262.011908][T13640] sctp: [Deprecated]: syz.1.2141 (pid 13640) Use of int in maxseg socket option. [ 262.011908][T13640] Use struct sctp_assoc_value instead [ 262.031678][T13641] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 262.280112][T13654] veth1_macvtap: left promiscuous mode [ 262.309085][T13654] macsec0: entered promiscuous mode [ 262.315006][T13654] macsec0: entered allmulticast mode [ 262.412513][T13668] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2150'. [ 262.613459][T13673] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2152'. [ 262.630377][T13673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2152'. [ 262.642326][T13673] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2152'. [ 262.670765][T13673] netlink: 'syz.0.2152': attribute type 3 has an invalid length. [ 262.683713][T13673] netlink: 31 bytes leftover after parsing attributes in process `syz.0.2152'. [ 262.772852][T13675] veth11: entered allmulticast mode [ 263.152549][T13708] validate_nla: 1 callbacks suppressed [ 263.152571][T13708] netlink: 'syz.1.2157': attribute type 10 has an invalid length. [ 263.362424][T13708] bridge_slave_1: left allmulticast mode [ 263.397029][T13708] bridge_slave_1: left promiscuous mode [ 263.406802][T13708] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.968523][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2164'. [ 264.123863][T13745] netlink: 'syz.3.2164': attribute type 1 has an invalid length. [ 264.158100][T13750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.167070][T13750] IPv6: NLM_F_CREATE should be set when creating new route [ 264.178240][T13750] IPv6: NLM_F_CREATE should be set when creating new route [ 264.258160][T13750] ------------[ cut here ]------------ [ 264.264836][T13750] WARNING: CPU: 1 PID: 13750 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xed8/0x1080 [ 264.277729][T13750] Modules linked in: [ 264.282279][T13750] CPU: 1 UID: 0 PID: 13750 Comm: syz.2.2165 Not tainted syzkaller #0 PREEMPT(full) [ 264.297769][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.311117][T13750] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 264.318726][T13750] Code: fa be 02 00 00 00 eb 0a e8 05 23 de fa be 01 00 00 00 4c 89 f7 e8 e8 d0 ab fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 e9 22 de fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 264.342811][T13750] RSP: 0018:ffffc9001bbdeee8 EFLAGS: 00010287 [ 264.350850][T13750] RAX: ffffffff86e0f887 RBX: 0000000000000002 RCX: 0000000000080000 [ 264.361040][T13750] RDX: ffffc9000c0a4000 RSI: 000000000000596e RDI: 000000000000596f [ 264.370440][T13750] RBP: dffffc0000000000 R08: ffff888059dd282f R09: 1ffff1100b3ba505 [ 264.380033][T13750] R10: dffffc0000000000 R11: ffffed100b3ba506 R12: ffff888030e04000 [ 264.390994][T13750] R13: ffffc9001bbdf060 R14: 0000000000000001 R15: ffffc9001bbdf078 [ 264.400147][T13750] FS: 00007fbb113406c0(0000) GS:ffff888125e3b000(0000) knlGS:0000000000000000 [ 264.412179][T13750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 264.421516][T13750] CR2: 00007f8ed8812e9c CR3: 000000001bebc000 CR4: 00000000003526f0 [ 264.433906][T13750] Call Trace: [ 264.438837][T13750] [ 264.443605][T13750] notifier_call_chain+0x1b6/0x3e0 [ 264.450072][T13750] ? atomic_notifier_call_chain+0x26/0x180 [ 264.460721][T13750] atomic_notifier_call_chain+0xda/0x180 [ 264.470488][T13750] call_fib_notifiers+0x31/0x60 [ 264.477718][T13750] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 264.485830][T13750] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 264.493959][T13750] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 264.500751][T13750] inet6_rtm_newroute+0x12f5/0x18c0 [ 264.506688][T13750] ? nlmon_xmit+0xb0/0x100 [ 264.512647][T13750] ? kmem_cache_free+0x18f/0x400 [ 264.518734][T13750] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 264.525869][T13750] ? __local_bh_enable_ip+0x12d/0x1c0 [ 264.532679][T13750] ? __dev_queue_xmit+0x27b/0x3b50 [ 264.539526][T13750] ? __dev_queue_xmit+0x1d79/0x3b50 [ 264.545733][T13750] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 264.553658][T13750] rtnetlink_rcv_msg+0x7cc/0xb70 [ 264.561601][T13750] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 264.568104][T13750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.575964][T13750] ? ref_tracker_free+0x63a/0x7d0 [ 264.581544][T13750] ? __asan_memcpy+0x40/0x70 [ 264.588257][T13750] ? __pfx_ref_tracker_free+0x10/0x10 [ 264.597968][T13750] netlink_rcv_skb+0x205/0x470 [ 264.604910][T13750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.611025][T13750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.617458][T13750] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.625476][T13750] netlink_unicast+0x82f/0x9e0 [ 264.631490][T13750] ? __pfx_netlink_unicast+0x10/0x10 [ 264.638217][T13750] ? netlink_sendmsg+0x642/0xb30 [ 264.645067][T13750] ? skb_put+0x11b/0x210 [ 264.653160][T13750] netlink_sendmsg+0x805/0xb30 [ 264.659430][T13750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.668647][T13750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 264.675144][T13750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 264.682367][T13750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.689935][T13750] __sock_sendmsg+0x21c/0x270 [ 264.699922][T13750] ____sys_sendmsg+0x52d/0x830 [ 264.707612][T13750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.715788][T13750] ? import_iovec+0x74/0xa0 [ 264.722456][T13750] ___sys_sendmsg+0x21f/0x2a0 [ 264.729069][T13750] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.736490][T13750] ? __fget_files+0x2a/0x420 [ 264.745703][T13750] ? __fget_files+0x3a0/0x420 [ 264.751268][T13750] __sys_sendmmsg+0x227/0x430 [ 264.756413][T13750] ? __pfx___sys_sendmmsg+0x10/0x10 [ 264.763173][T13750] ? __pfx_do_futex+0x10/0x10 [ 264.768242][T13750] __x64_sys_sendmmsg+0xa0/0xc0 [ 264.773493][T13750] do_syscall_64+0xfa/0xfa0 [ 264.779371][T13750] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.785018][T13750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.791783][T13750] ? clear_bhb_loop+0x60/0xb0 [ 264.797076][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.803472][T13750] RIP: 0033:0x7fbb1058eec9 [ 264.808630][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.833472][T13750] RSP: 002b:00007fbb11340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.847575][T13750] RAX: ffffffffffffffda RBX: 00007fbb107e5fa0 RCX: 00007fbb1058eec9 [ 264.858750][T13750] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 264.868415][T13750] RBP: 00007fbb10611f91 R08: 0000000000000000 R09: 0000000000000000 [ 264.877857][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.889028][T13750] R13: 00007fbb107e6038 R14: 00007fbb107e5fa0 R15: 00007ffe703ca888 [ 264.898724][T13750] [ 264.902831][T13750] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 264.911619][T13750] CPU: 1 UID: 0 PID: 13750 Comm: syz.2.2165 Not tainted syzkaller #0 PREEMPT(full) [ 264.923572][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 264.936064][T13750] Call Trace: [ 264.940613][T13750] [ 264.943714][T13750] dump_stack_lvl+0x99/0x250 [ 264.950998][T13750] ? __asan_memcpy+0x40/0x70 [ 264.957766][T13750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.966493][T13750] ? __pfx__printk+0x10/0x10 [ 264.971614][T13750] vpanic+0x281/0x750 [ 264.977156][T13750] ? __pfx__printk+0x10/0x10 [ 264.982873][T13750] ? __pfx_vpanic+0x10/0x10 [ 264.988329][T13750] ? is_bpf_text_address+0x26/0x2b0 [ 264.994404][T13750] panic+0xb9/0xc0 [ 264.999063][T13750] ? __pfx_panic+0x10/0x10 [ 265.003662][T13750] __warn+0x31b/0x4b0 [ 265.007981][T13750] ? nsim_fib_event_nb+0xed8/0x1080 [ 265.013506][T13750] ? nsim_fib_event_nb+0xed8/0x1080 [ 265.019311][T13750] report_bug+0x2be/0x4f0 [ 265.024408][T13750] ? nsim_fib_event_nb+0xed8/0x1080 [ 265.030277][T13750] ? nsim_fib_event_nb+0xed8/0x1080 [ 265.035709][T13750] ? nsim_fib_event_nb+0xeda/0x1080 [ 265.041811][T13750] handle_bug+0x84/0x160 [ 265.046367][T13750] exc_invalid_op+0x1a/0x50 [ 265.051133][T13750] asm_exc_invalid_op+0x1a/0x20 [ 265.056043][T13750] RIP: 0010:nsim_fib_event_nb+0xed8/0x1080 [ 265.062074][T13750] Code: fa be 02 00 00 00 eb 0a e8 05 23 de fa be 01 00 00 00 4c 89 f7 e8 e8 d0 ab fd 4c 8b 64 24 08 e9 91 f4 ff ff e8 e9 22 de fa 90 <0f> 0b 90 e9 70 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 35 [ 265.082528][T13750] RSP: 0018:ffffc9001bbdeee8 EFLAGS: 00010287 [ 265.089035][T13750] RAX: ffffffff86e0f887 RBX: 0000000000000002 RCX: 0000000000080000 [ 265.100015][T13750] RDX: ffffc9000c0a4000 RSI: 000000000000596e RDI: 000000000000596f [ 265.108651][T13750] RBP: dffffc0000000000 R08: ffff888059dd282f R09: 1ffff1100b3ba505 [ 265.116947][T13750] R10: dffffc0000000000 R11: ffffed100b3ba506 R12: ffff888030e04000 [ 265.126710][T13750] R13: ffffc9001bbdf060 R14: 0000000000000001 R15: ffffc9001bbdf078 [ 265.135695][T13750] ? nsim_fib_event_nb+0xed7/0x1080 [ 265.141718][T13750] ? nsim_fib_event_nb+0xed7/0x1080 [ 265.147178][T13750] notifier_call_chain+0x1b6/0x3e0 [ 265.152808][T13750] ? atomic_notifier_call_chain+0x26/0x180 [ 265.158949][T13750] atomic_notifier_call_chain+0xda/0x180 [ 265.164820][T13750] call_fib_notifiers+0x31/0x60 [ 265.169822][T13750] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 265.176431][T13750] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 265.184747][T13750] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 265.190308][T13750] inet6_rtm_newroute+0x12f5/0x18c0 [ 265.195739][T13750] ? nlmon_xmit+0xb0/0x100 [ 265.200311][T13750] ? kmem_cache_free+0x18f/0x400 [ 265.205708][T13750] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 265.213046][T13750] ? __local_bh_enable_ip+0x12d/0x1c0 [ 265.218873][T13750] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.224029][T13750] ? __dev_queue_xmit+0x1d79/0x3b50 [ 265.229472][T13750] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 265.235247][T13750] rtnetlink_rcv_msg+0x7cc/0xb70 [ 265.240420][T13750] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 265.245668][T13750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.251366][T13750] ? ref_tracker_free+0x63a/0x7d0 [ 265.256817][T13750] ? __asan_memcpy+0x40/0x70 [ 265.261544][T13750] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.267617][T13750] netlink_rcv_skb+0x205/0x470 [ 265.272526][T13750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.278196][T13750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.283700][T13750] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.289051][T13750] netlink_unicast+0x82f/0x9e0 [ 265.294057][T13750] ? __pfx_netlink_unicast+0x10/0x10 [ 265.299476][T13750] ? netlink_sendmsg+0x642/0xb30 [ 265.304898][T13750] ? skb_put+0x11b/0x210 [ 265.309311][T13750] netlink_sendmsg+0x805/0xb30 [ 265.314402][T13750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.320646][T13750] ? aa_sock_msg_perm+0xf1/0x1d0 [ 265.326246][T13750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 265.331589][T13750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.336929][T13750] __sock_sendmsg+0x21c/0x270 [ 265.341734][T13750] ____sys_sendmsg+0x52d/0x830 [ 265.346619][T13750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.351969][T13750] ? import_iovec+0x74/0xa0 [ 265.356625][T13750] ___sys_sendmsg+0x21f/0x2a0 [ 265.361357][T13750] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.366659][T13750] ? __fget_files+0x2a/0x420 [ 265.371397][T13750] ? __fget_files+0x3a0/0x420 [ 265.376201][T13750] __sys_sendmmsg+0x227/0x430 [ 265.380930][T13750] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.386834][T13750] ? __pfx_do_futex+0x10/0x10 [ 265.391741][T13750] __x64_sys_sendmmsg+0xa0/0xc0 [ 265.396856][T13750] do_syscall_64+0xfa/0xfa0 [ 265.402565][T13750] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.408858][T13750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.415172][T13750] ? clear_bhb_loop+0x60/0xb0 [ 265.420421][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.426365][T13750] RIP: 0033:0x7fbb1058eec9 [ 265.430913][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.455380][T13750] RSP: 002b:00007fbb11340038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.464111][T13750] RAX: ffffffffffffffda RBX: 00007fbb107e5fa0 RCX: 00007fbb1058eec9 [ 265.472237][T13750] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 265.480704][T13750] RBP: 00007fbb10611f91 R08: 0000000000000000 R09: 0000000000000000 [ 265.488908][T13750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.497109][T13750] R13: 00007fbb107e6038 R14: 00007fbb107e5fa0 R15: 00007ffe703ca888 [ 265.506398][T13750] [ 265.510116][T13750] Kernel Offset: disabled [ 265.515007][T13750] Rebooting in 86400 seconds..