last executing test programs: 6.535976252s ago: executing program 4 (id=1511): socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x20000000) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r7}, 0x0, &(0x7f0000000940)}, 0x20) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) setsockopt$IP_VS_SO_SET_DEL(r9, 0x0, 0x484, &(0x7f0000000380)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00', 0x23, 0x5}, 0x2c) splice(r6, 0x0, r8, 0x0, 0xf3a, 0x0) write(r4, &(0x7f0000000240)="94", 0x1) tee(0xffffffffffffffff, r8, 0x8fb, 0x100000000000000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800) write$cgroup_type(r8, &(0x7f0000000180), 0x9) write(r5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff1800450000380064000000019078ac1e0001ac14142c053490250000000000fffd0d010000ac14149a00"/70], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000006110a0000000001c630138000000ecff9500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 6.124141214s ago: executing program 4 (id=1514): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r4, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c40001000000", @ANYRESOCT=r2], 0x30}}, 0x40000) 5.851405203s ago: executing program 1 (id=1517): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r8, 0x0, 0xcb, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x0, 0xfffef19c, @vifc_lcl_addr=@empty, @broadcast}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xd, 0xfffffffffffffff8, 0x2, 0x8001, 0x8000059, 0x3ff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x8, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x9}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x70, 0xe, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040}, 0x8011) 5.75011598s ago: executing program 4 (id=1518): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x9, 0x4, 0x6, 0xff}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x40, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x1, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x80) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x40, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x1, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x80) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x300, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.43441357s ago: executing program 4 (id=1522): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000000000000a004e207fffffff00000000000000000000000000000001008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000a004e22000000002001000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e22000000062001000000d0000000000000000000000200010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000b29fe88000000000000000000000000010105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000001ff01000000000000000000000000000198e30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000000c00000000000000000000ffffac1414aa0200"/770], 0x310) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000e757c7808be92c04271271", @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r10, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r10}, 0x20) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x22, &(0x7f0000000180)=0x800001, 0x4) listen(r11, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000300), &(0x7f0000000100)=@tcp6=r11, 0x2}, 0x20) 5.309693201s ago: executing program 1 (id=1523): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='rpcgss_bad_seqno\x00', r0, 0x0, 0x4}, 0x18) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000040)=ANY=[@ANYBLOB="e4e1fef7c8f90a0800f7b4fd303a6e1011400200735762c904960ccb3923762b45", @ANYRES16=r4, @ANYBLOB="110725bd7000ffdbdf250e"], 0x14}, 0x1, 0x0, 0x0, 0x8048045}, 0x40c0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x4, 0x2, 0x9, 0xefeb, 0x8, 0x6, 0x1, 0x9}}}}]}, 0x58}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 5.149948178s ago: executing program 4 (id=1526): r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f6, 0x2, 0x70bd2c, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) syz_emit_ethernet(0x166, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0000fa", 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, '\x00'/12}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3"}]}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4040850}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {0x0}], 0x2) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000440), 0x4) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e1010000000039f101bc1dbc51cf231100"], 0x50) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r7, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, 0x140c, 0x2, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2400000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r9}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), r4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000a40)={0x1, 'nr0\x00', {}, 0xf}) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x14, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x6, 0x9, 0x108, 0x0, "274b58773a9a7fdf777df6bbb5180020ddd9091cde4d3153b37f884bcac0b81455"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0xa0}, 0x1, 0x7}, 0x0) 4.321817399s ago: executing program 0 (id=1531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, 0x0, &(0x7f0000002f00)) 4.111134442s ago: executing program 3 (id=1532): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_emit_ethernet(0x4e, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x0, 0x0, @private0}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xcc, "af296961381c4a5caf6d9da6cad32f876def16b1cc634e9dbbd2dff258cf039dd56b5e20821123f170e5daf4a193e7ff28b52ccc73dc6d2c23aaf709730038d2dd8bdb9f06e60e235199e0324cc96a5a706a4661149561a5955a226b8796d9559b3b2972e954db6bda063fa7b538e8d74c59001a97b2cdcf8b03c20e6bce98c9e9671fa21f972346e3864b878b08108993701853834c7bd683567570b5876b2f4c9441b96e58ce619b0579bacc22f9924c0b1072e762395e9dd25e17f6a9f38da3d17feef558b93d2d001f9f"}, &(0x7f0000000040)=0xd4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 4.109136368s ago: executing program 4 (id=1533): openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x0, 0x7, 0x0, 0x6}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0xc080}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x100000, 0x0, {0x0, 0x0, 0x74, 0x0, {0xfff2}, {}, {0xa, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x10, 0x5, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x8, 0x9}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xbc, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x840}, 0x20040802) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r8, 0x0, 0x0, 0x80000) r9 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, 0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x810, 0xffffffffffffffff, 0x0) 3.995458472s ago: executing program 0 (id=1535): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="00000000daf6a4bd866226b7cdb7c26858c4e4fd703be2f51e120dc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7e675e7266ea91f8012efd26d876c52f3b960e6b118f29885651208a0791d981513cbf540d43a4d1b", 0x6b}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x4) 3.981499107s ago: executing program 3 (id=1536): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000106000000000000000000000000b44b763663f0223efc100769d903be210294603f3c6ffde5a3849146c473c045b0822538884f2f863adb446cc2cbf030f7f38af3c0053856f923c7866e59941a113533b6cfaae028843aeed3d0af4cc06738665ef20e00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r4, 0x0, 0x0}, 0x20) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4}, 0x8) sendto$inet6(r3, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) r5 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x74, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x0, 0x1ffe, 0x0, 0x0, 0x8, 0x5}}, {0xe, 0x2, [0x2c, 0x2, 0x6, 0x0, 0x1000]}}, {{0x1c, 0x1, {0xd, 0x4, 0xc, 0x800, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x74}}, 0x8000) (async) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x7) (async) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000340), &(0x7f00000003c0)=0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x220040, 0x0) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000240)={0x4, &(0x7f00000001c0)=[{0xc23, 0x0, 0xfd, 0x9}, {0x10, 0x4, 0x7, 0x4}, {0x7, 0xf7, 0x1}, {0x3ff, 0x0, 0x7, 0x80000001}]}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0xa}, {0x0, 0x15}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x40001) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002c00)=ANY=[@ANYBLOB="140000001000010000000000000000003300000a40000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003140000001100010000000000000000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(0x3) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x2, @local, 0x4}, 0x1c) 3.741090776s ago: executing program 0 (id=1537): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge0\x00', 0x10) sendto$inet(r0, &(0x7f0000000040)="255f5a03204f8e0b", 0xdd86, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000000d}, 0x10) (async) r1 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 3.351875057s ago: executing program 0 (id=1539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000780)=0xe8) sendmsg$nl_generic(r2, &(0x7f0000000740)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x274, 0x3b, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1b}, [@nested={0x1a5, 0x51, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3c}}, @typed={0x8, 0xe1, 0x0, 0x0, @uid=r3}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x80000}, @generic="f600c66ef305935340f0dcb491d24ff873ea4e5b030afb7d1db9dd537f0ce436bf029b2ce961a491836f37b11db29ca88393f915c2888edbd74ad980e15783220f6c8c66c9276c338c3d21c677f36aa826728d92eabe8d6df869185263c7b8d2881f48b6e4559f946a3ba46ee526fd944a8a00a94fa797970a6e2098643c36d4be822cdda1403515c870c32ed960ea35418d9ef667ca9153363be94f5c5d10cd912f8a8987f94c2fd29152937d4758ea79d2b1dd2545b8f8e2b9c1add81a07372a", @generic="ef55e143643999614e271821910d5806bccf265aa1f826a50951015be7a81343ecee58cc2204c8c45c0d36d0ac088211c26aa7f654d2bfb1d7e44556087c38789f27880a0d6c7b6ac950de038d052d7d7e628e71204fb9d16557c3a68ece709e7a3dc74f5b0cc46a6c6036ec0286c462ded9574f172455b799494605717056c01284053d0afc2c97a9864963f078e176535e79e182c8f919bdb3ed2185bdd470683b68e48da99348dd0c389b6302a25cab616133215fa43c69ff10b9640d339b", @nested={0x4, 0x1}]}, @generic, @generic="46dbdec4a03a252ec95ea8ed2bf0188e68d3911ed6a7266e11429fac07bf5ccf9337bdbaefb4433cb2027e8828a6984662aaba211a875d7beeae392691e2245137b519736fa2ae4b7eca58d8f15e0c042fbf2ea7e97dd6cba1f7b61109a4549fe272404c0c20f9aacf98fc491767b0886ebedd38c0e226d5fa9ebdcdf13c97bbcf315a36a46ddcbc337127526585c4e2232243adf6abd9f71296e1fe4489fd2ce2dfcdda0a2f7c37d64c4a4c8708ffe13fd86d1502e256fc"]}, 0x274}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) ppoll(&(0x7f0000000500)=[{r7, 0x8}], 0x1, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(r9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r10}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xfffffffffffffffc}, 0x0, 0x0) listen(r5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004) close(r4) getuid() 2.974426854s ago: executing program 3 (id=1541): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_eeprom={0xb, 0x0, 0xffff0000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r1, 0xcfad5000) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000089500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x45}, 0x78) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8440, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x15, 0x3, 'sed\x00', 0x2e, 0x4, 0x72}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.409926036s ago: executing program 3 (id=1545): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.current\x00', 0x0, 0x0) bind$llc(r0, &(0x7f0000000180)={0x1a, 0x338, 0x7, 0x5d, 0xf, 0x81, @link_local}, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f00000023c0)) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) (async) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f00000000c0)={{0x33, @empty, 0x4e24, 0x10002, 'lblcr\x00', 0x30, 0x0, 0x5f}, {@rand_addr=0x64010102, 0x4e21, 0x10000, 0x0, 0xe1, 0xf0be}}, 0xffffffffffffffb9) (async) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) shutdown(r1, 0x1) 2.058288076s ago: executing program 0 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007001500000000000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x2, 0xb, 0xf4, 0x0, 0x1d, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x1b, 0x8, 0x668, 0x0, "0a80eedf0800add1f213c15358da19f2da887b8b4911db3598dba589536d5fa753d178967de73be0000e8be264a3363757a2d819eeac510de546ebdaad524d120e649dd13b693ce89b390bda290124ad7299a21ab5db1794476387145288ba75206696f95b8f1763026eecc07949eb208c649c01b34205f97a9a85386631f2fcb509fdb72c2c5cb1a771fe775b41369699a364e1d417743662607928c9da4fd241b1c30f015e897e69649e2beecf226d5816394adba5a38bfe9ede1fe5372e1bd9763458e4db3469772568a308"}]}, 0xe8}}, 0x4044000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x3, 0x1001, 0x2, 0x1127, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x9}, 0x48) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001200375f3fbd70000000000007"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000180), 0x2ae, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="30010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000d40008800800050001000000140002007767310000000000000000000000000008000700ff000000240003e0af8073e8d44e91e3da06000000000000005c69e269c8e9d835b114293a4ddc6e78d8083feccd3e18f535981ce128b86dfb513d7e14a20c0c078094f6ba41810c50204e36f858a36a1c8766766049d843241546895998c0219c3b4046037a37c5aa4d22d41a5b756f233e573c20647d4fd272e3fd85fce6cd4d5828bd3237f6389e672a99906ee5115b07afdbfe9bc3aa7a808ae81b14bf89a9a01fbc5d7f4b4bdfe02c5e49b99e2c1c15df766ddb8feb813ce50ce5d50eb4a8abd0cde8c9376fd41643de22371998d2d1507b15233cec5f09401a60f217a2fd"], 0x130}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 1.985544666s ago: executing program 1 (id=1548): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x47, &(0x7f0000000340)='cgroup\x00'}, 0x30) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) (async) close(r2) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x81}, 0x2000) (async, rerun: 64) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0xf9, 0x0, 0x0) (rerun: 64) 1.84631319s ago: executing program 2 (id=1549): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0x8, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x9, 0x5, {{0x24, 0x4, 0x2, 0x3e, 0x90, 0x66, 0x0, 0x10, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0xa7, [@rand_addr=0x64010100]}, @ra={0x94, 0x4}, @generic={0x82, 0x4, "b308"}, @timestamp_addr={0x44, 0x4c, 0x45, 0x1, 0x8, [{@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x101}, {@multicast2, 0x6}, {@broadcast, 0x10}, {@private=0xa010102, 0xb25f}, {@local, 0x3}, {@rand_addr=0x64010100, 0xe85}, {@multicast2, 0x6}]}, @end, @generic={0x83, 0xa, "5c11f0ec7eb3fcbe"}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0xf, "ae0aee9b2bb500925745ea6aac"}]}}}}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', r7, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x98, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'lo\x00'}, @IPSET_ATTR_ETHER={0xa, 0x11, @multicast}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x40060) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 1.833413651s ago: executing program 0 (id=1550): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000880) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x20004055) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010d00000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800014000000010080002400000000f0900010073797a30000000000900020073797a001100010000000000000000000000000a0000000000000000"], 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001580)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001680)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f000000b8c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 1.771579897s ago: executing program 1 (id=1551): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e1d, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r5 = socket$tipc(0x1e, 0x5, 0x0) listen(r5, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000180)=0x7) accept4(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="660a88000100000061116e05000000000000000000000000ef4320697348a975d24a15a5884934c575282350c60a98d06a5911d62a7a08a5be52204d0d47dc01dbbd449fdded2013778aba571645070b4e8194b623588c7baaf0813d9d6f813ae41934061bf0602de62fb04b4bfb58057da0c30bcf80870fd74399c491981d304b598326558900df73ab4490b6f6acd173fd18a3fd1aa30e64425232fd72a508d91b1ff65bb2303273762d29d8e5f21acc09d0e0515df60368a21bf330a360bb30d221a0cd667a7bcbabecc0d00aac83b75348f84c087e2d786a0d645c57d3bb9fb18bc209"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880) 1.558447488s ago: executing program 2 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000a200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010725bd7000020000000b0000000e0e01006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x2004c840}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x6, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000040000000000000000000002180000000100008000000000060000003c2200f10000000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x1f00, 0x3}, 0x94) 1.32888375s ago: executing program 1 (id=1553): r0 = socket$tipc(0x1e, 0x5, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x2, 0xfe, 0x9, 0x0, 0x82, 0x60, 0xa, 0x9, 0x3d, [0x4, 0x1, 0xd, 0xfff, 0x2, 0x9, 0x8001, 0x7]}}) socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4000000010", @ANYBLOB="cb3ef30acc5ec533a1a6d385624f58538fa38924b388286cfb3c38a0c12a69867cc5254ec918f9620cb661c6d1f91c87a90888505f303c3fa12436b097db4e7840d08d9f30fd975fbcc6a78fd114dfa660578d27d5f8d8bba883f37a589907915275a3d740f3b778cdfcb1047b56941676d1b1a3001d11999df97c711dcdd90b5ff372d3371bf68a0b8e6e46ccededb8de16180348ba53dbe9fd2d17842553117729d123921cff255c98849d71ca3ae458e39513925a889d7ca0ceb0cfe8350995d941dbdbcdfac92f77b17caba9d4fe770b6f17f976b17527111bdec5cfe2", @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r1], 0x40}}, 0x0) r4 = socket(0x10, 0x1, 0x0) bind$802154_raw(r4, &(0x7f00000001c0)={0x24, @none={0x0, 0x3}}, 0x14) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'sit0\x00'}) r5 = socket(0x21, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x8, {{0xa, 0x0, 0x4, @mcast2, 0x2}}}, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000240)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r4) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f0000000100)=0x4) read(r2, 0x0, 0x0) 1.252691806s ago: executing program 2 (id=1554): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0xf, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/99, 0x27, 0x63, 0x1, 0x1, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0xf, 0x6, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0xc000, 0xc, 0x8, 0xc000, r3, 0x0, '\x00', r4, r5, 0x3, 0x3, 0x5, 0x0, @value=r0}, 0x50) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r6, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/4096, 0x1000}, 0x6}], 0x1, 0x10162, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51e120dc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7e675e7266ea91f8012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0x4) 1.110475106s ago: executing program 2 (id=1555): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000, 0xfffffff9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x4d, 0x0, &(0x7f0000000140)=0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='inet_sock_set_state\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006118bc000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x38, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000100)="fea00e708f0b1be5f3a27d0dd240b1385056ea9718994c7ead4021c30dbd2112a17ba550f7030cf4342711e22bbd1a45", 0x30}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x201, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4c001) 1.036452594s ago: executing program 1 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000020002000000240002800c000280040001003a00020014000180080001353de4a81e18b40d"], 0x44}, 0x1, 0x0, 0x0, 0x401c800}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160\x00'}, 0x4c) r4 = accept4(r3, 0x0, 0x0, 0x800) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000001c0)=[{&(0x7f0000000600)="a7", 0x1}], 0x1, 0x8) splice(r5, 0x0, r4, 0x0, 0x8000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x188, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0x4, 0xfff1}, {0xffff, 0xf}, {0x8, 0x2}}, [@TCA_STAB={0x164, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x64, 0x0, 0x1000, 0x2, 0x6, 0xa312, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x5, 0x2, 0x1, 0x5, 0x1, 0x1ff, 0x1, 0xe}}, {0x20, 0x2, [0x5, 0x3, 0x0, 0x0, 0x2000, 0x88, 0x7, 0x9, 0x3, 0xab, 0x7dc6, 0x200, 0x101, 0x3]}}, {{0x1c, 0x1, {0x4, 0xa5, 0x7, 0x4800000, 0x0, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x1, 0x6, 0x2, 0x2, 0x2, 0x80000000}}, {0x4}}, {{0x1c, 0x1, {0xfc, 0x7f, 0xf7, 0xfffffff7, 0x0, 0x6, 0x8, 0x2}}, {0x8, 0x2, [0x8, 0x5]}}, {{0x1c, 0x1, {0x6, 0x2, 0xf95f, 0x0, 0x0, 0x3ff, 0x76474ef0}}, {0x4}}, {{0x1c, 0x1, {0x7, 0xc, 0x5, 0x7fff, 0x0, 0x100, 0x4, 0x3}}, {0xa, 0x2, [0x200, 0x0, 0x6e2d]}}, {{0x1c, 0x1, {0x1, 0x95, 0x48, 0x81, 0x1, 0x3, 0xe9, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x1, 0x9, 0xffffffff, 0x1, 0x6ebf, 0xffffffff, 0x8}}, {0x14, 0x2, [0x2, 0x6, 0x4c56, 0xc1e, 0x1, 0x1, 0x1, 0x6]}}]}]}, 0x188}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x2b, 0x80000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r12, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r13 = socket$inet6(0xa, 0x1, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) r16 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r16, 0x6, 0x23, &(0x7f0000000300)={&(0x7f0000ffd000/0x3000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/226, 0xe2, 0x0, &(0x7f0000000480)=""/243, 0xf3}, &(0x7f0000000340)=0x14) ioctl$PPPIOCNEWUNIT(r14, 0xc004743e, &(0x7f0000000100)) 898.424074ms ago: executing program 2 (id=1557): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000080), 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0xff58}, 0x2}, 0x0) sendto$inet6(r0, &(0x7f0000000340)="1a", 0x1, 0x4008015, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xd8f}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)='i', 0x1}], 0x1}}], 0x2, 0x48800) shutdown(r0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB="0000db0000000400000000000000000000000057", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) close(0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r5}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r6], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) 578.379818ms ago: executing program 2 (id=1558): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r2, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00') r3 = socket(0x26, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x1000) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$nl_route(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x44800}, 0x40004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, 0x0, &(0x7f0000000500)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r6, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 169.820307ms ago: executing program 3 (id=1559): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) 0s ago: executing program 3 (id=1560): socket(0x10, 0x803, 0x2) r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a1c42000780000000800000c004f17d09350627", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r2, 0x3) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r3, &(0x7f0000000000)={0x0, 0x2, 0xff, 0x0, 0x1}, 0x8) syz_emit_ethernet(0x68, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x4}]}}, {"83c28bcb1ad8b8d36292345e51d7592f06063c3723788e3752d56c88a684d46b5445f44c1e54"}}}}}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000000380)={{0xa, 0x4e20, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, {0xa, 0x4e21, 0xb11c, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x0, {[0x2, 0x8, 0x0, 0x0, 0x100, 0x4, 0x80, 0xffffffff]}}, 0x5c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000e80)={0x1d, r5}, 0x10, &(0x7f00000005c0)={&(0x7f0000000ec0)=@can={{}, 0x80, 0x2, 0x4, 0x2}, 0x210}}, 0x4080811) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.1.47'. [ 102.345121][ T6198] netlink: 43 bytes leftover after parsing attributes in process `syz.1.47'. [ 102.362685][ T6198] netlink: 'syz.1.47': attribute type 5 has an invalid length. [ 102.404508][ T6198] netlink: 43 bytes leftover after parsing attributes in process `syz.1.47'. [ 102.437322][ T6186] veth1_to_bond: entered allmulticast mode [ 102.531389][ T6207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 102.571216][ T6192] bond0: (slave bond_slave_1): Releasing backup interface [ 102.639479][ T6208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.791259][ T6192] veth1_to_bond (unregistering): left allmulticast mode [ 102.834118][ T6191] gretap0: refused to change device tx_queue_len [ 102.855073][ T6191] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.197640][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.55'. [ 103.283318][ T6220] @ÿ: renamed from veth0_vlan (while UP) [ 103.409277][ T5882] Bluetooth: hci4: command tx timeout [ 103.905694][ T6231] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.095330][ T6231] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.161446][ T6249] tipc: Started in network mode [ 104.174579][ T6249] tipc: Node identity ac14140f, cluster identity 4711 [ 104.191184][ T6249] tipc: New replicast peer: 255.255.255.255 [ 104.199404][ T6249] tipc: Enabled bearer , priority 10 [ 104.350327][ T6231] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.429392][ T6253] macvlan1: entered promiscuous mode [ 104.459187][ T6253] ipvlan0: entered promiscuous mode [ 104.493907][ T6253] ipvlan0: left promiscuous mode [ 104.532908][ T6253] macvlan1: left promiscuous mode [ 104.649604][ T6231] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.685305][ T6271] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 104.749222][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.72'. [ 104.839096][ T6273] bond1: entered promiscuous mode [ 104.845263][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.192185][ T6273] bond1 (unregistering): Released all slaves [ 105.318197][ T43] tipc: Node number set to 2886997007 [ 105.397722][ T33] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.542450][ T33] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.544336][ T6289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'. [ 105.570681][ T33] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.625167][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.647327][ T6292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.714421][ T6293] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 106.273332][ T6306] __nla_validate_parse: 3 callbacks suppressed [ 106.273352][ T6306] netlink: 64 bytes leftover after parsing attributes in process `syz.2.81'. [ 107.154360][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.90'. [ 107.177381][ T6334] tipc: Started in network mode [ 107.195661][ T6334] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 107.216373][ T6334] tipc: Enabled bearer , priority 18 [ 107.926947][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 107.949047][ T6352] tipc: Started in network mode [ 107.953978][ T6352] tipc: Node identity b25e018a1934, cluster identity 4711 [ 107.987658][ T6352] tipc: Enabled bearer , priority 0 [ 108.055005][ T6353] syzkaller0: entered promiscuous mode [ 108.068459][ T6353] syzkaller0: entered allmulticast mode [ 108.327124][ T5970] tipc: Node number set to 10005162 [ 108.336171][ T6364] tipc: Resetting bearer [ 108.373241][ T6366] netlink: 'syz.0.99': attribute type 21 has an invalid length. [ 108.392601][ T6366] netlink: 'syz.0.99': attribute type 22 has an invalid length. [ 108.402865][ T6366] netlink: 'syz.0.99': attribute type 23 has an invalid length. [ 108.421076][ T6366] netlink: 'syz.0.99': attribute type 25 has an invalid length. [ 108.429255][ T6350] tipc: Resetting bearer [ 108.439781][ T6366] netlink: 96 bytes leftover after parsing attributes in process `syz.0.99'. [ 108.556690][ T6350] tipc: Disabling bearer [ 108.663702][ T6362] tipc: Started in network mode [ 108.677567][ T6362] tipc: Node identity 9ee75ff9d9ff, cluster identity 4711 [ 108.707323][ T6362] tipc: Enabled bearer , priority 0 [ 108.772839][ T6368] syzkaller0: entered promiscuous mode [ 108.787253][ T6368] syzkaller0: entered allmulticast mode [ 108.840177][ T6375] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 108.868411][ T6380] netlink: 52 bytes leftover after parsing attributes in process `syz.0.101'. [ 108.908849][ T6368] tipc: Resetting bearer [ 108.994033][ T6355] tipc: Resetting bearer [ 109.075932][ T6355] tipc: Disabling bearer [ 109.376568][ T6408] netlink: 52 bytes leftover after parsing attributes in process `syz.2.105'. [ 109.475075][ T6405] tipc: Enabled bearer , priority 0 [ 109.482713][ T6405] veth0_to_hsr: entered promiscuous mode [ 109.492765][ T6405] veth0_to_hsr: entered allmulticast mode [ 109.643499][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.108'. [ 109.677775][ T6415] tipc: Disabling bearer [ 109.984504][ T6425] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.114'. [ 110.437806][ T6438] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 110.445512][ T6438] netlink: 208 bytes leftover after parsing attributes in process `syz.0.115'. [ 110.509563][ T6428] syzkaller0: entered promiscuous mode [ 110.515507][ T6428] syzkaller0: entered allmulticast mode [ 110.924913][ T6455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.042641][ T6460] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 111.096557][ T6464] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 111.196224][ T6460] nbd: socks must be embedded in a SOCK_ITEM attr [ 111.252835][ T5920] block nbd64: NBD_DISCONNECT [ 111.330667][ T6472] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.574360][ T5920] udevd[5920]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 112.513497][ T6464] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 112.535524][ T6469] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 112.562456][ T6477] netlink: 60 bytes leftover after parsing attributes in process `syz.3.126'. [ 113.786831][ T6540] bridge1: entered allmulticast mode [ 113.911064][ T6552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.018637][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 114.069984][ T6554] netlink: 80 bytes leftover after parsing attributes in process `syz.4.145'. [ 114.268901][ T6568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.561527][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 114.588393][ T6576] tipc: Enabled bearer , priority 0 [ 114.625200][ T6576] syzkaller0: entered promiscuous mode [ 114.643158][ T6576] syzkaller0: entered allmulticast mode [ 114.721601][ T6576] tipc: Resetting bearer [ 114.743990][ T6575] tipc: Resetting bearer [ 114.833373][ T6575] tipc: Disabling bearer [ 114.896947][ T6599] netlink: 128 bytes leftover after parsing attributes in process `syz.0.155'. [ 114.995554][ T6601] openvswitch: netlink: IP tunnel dst address not specified [ 116.825530][ T6631] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71) [ 116.900771][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 116.937372][ T6631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.164'. [ 117.822172][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.830110][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.015541][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.035914][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.128217][ T6662] tipc: Resetting bearer [ 118.233633][ T6679] bridge_slave_0: left allmulticast mode [ 118.245049][ T6679] bridge_slave_0: left promiscuous mode [ 118.255831][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.275364][ T6679] bridge_slave_1: left allmulticast mode [ 118.282526][ T6679] bridge_slave_1: left promiscuous mode [ 118.294587][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.316194][ T6679] bond0: (slave bond_slave_0): Releasing backup interface [ 118.329395][ T6679] bond0: (slave bond_slave_1): Releasing backup interface [ 118.348128][ T6679] team0: Port device team_slave_0 removed [ 118.359549][ T6679] team0: Port device team_slave_1 removed [ 118.366253][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.376768][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.386733][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.395083][ T6679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.420802][ T3524] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.431566][ T3524] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.491896][ T3524] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.560689][ T3524] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.649660][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.180'. [ 118.962872][ T6705] netlink: 20 bytes leftover after parsing attributes in process `syz.0.184'. [ 118.985887][ T6706] netlink: 36 bytes leftover after parsing attributes in process `syz.4.185'. [ 119.108224][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 119.120233][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 119.137842][ T6706] warning: `syz.4.185' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.165556][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 119.180639][ T6713] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 119.203100][ T6713] CPU: 0 UID: 0 PID: 6713 Comm: syz.4.185 Not tainted syzkaller #0 PREEMPT(full) [ 119.203131][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.203154][ T6713] Call Trace: [ 119.203163][ T6713] [ 119.203173][ T6713] dump_stack_lvl+0x189/0x250 [ 119.203214][ T6713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.203241][ T6713] ? __pfx__printk+0x10/0x10 [ 119.203291][ T6713] ? kernfs_path_from_node+0x2f/0x290 [ 119.203316][ T6713] ? kernfs_path_from_node+0x250/0x290 [ 119.203337][ T6713] ? kernfs_path_from_node+0x2f/0x290 [ 119.203366][ T6713] sysfs_warn_dup+0x8e/0xa0 [ 119.203391][ T6713] sysfs_do_create_link_sd+0xc0/0x110 [ 119.203417][ T6713] device_add_class_symlinks+0x1cf/0x240 [ 119.203446][ T6713] device_add+0x475/0xb50 [ 119.203474][ T6713] wiphy_register+0x1ba6/0x28d0 [ 119.203516][ T6713] ? __pfx_wiphy_register+0x10/0x10 [ 119.203538][ T6713] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 119.203575][ T6713] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 119.203609][ T6713] ieee80211_register_hw+0x3484/0x4100 [ 119.203656][ T6713] ? ieee80211_register_hw+0x14d1/0x4100 [ 119.203698][ T6713] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 119.203732][ T6713] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 119.203775][ T6713] ? __hrtimer_setup+0x187/0x210 [ 119.203794][ T6713] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 119.203830][ T6713] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 119.203895][ T6713] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 119.203923][ T6713] ? trace_kmalloc+0x1f/0xd0 [ 119.203950][ T6713] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 119.203980][ T6713] ? kstrndup+0xbf/0x160 [ 119.204014][ T6713] hwsim_new_radio_nl+0xea4/0x1b10 [ 119.204047][ T6713] ? __pfx___nla_validate_parse+0x10/0x10 [ 119.204097][ T6713] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.204142][ T6713] ? __nla_parse+0x40/0x60 [ 119.204166][ T6713] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 119.204207][ T6713] genl_family_rcv_msg_doit+0x212/0x300 [ 119.204245][ T6713] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 119.204299][ T6713] ? bpf_lsm_capable+0x9/0x20 [ 119.204328][ T6713] ? security_capable+0x7e/0x2e0 [ 119.204368][ T6713] genl_rcv_msg+0x60e/0x790 [ 119.204404][ T6713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.204432][ T6713] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.204487][ T6713] netlink_rcv_skb+0x208/0x470 [ 119.204506][ T6713] ? __lock_acquire+0xab9/0xd20 [ 119.204538][ T6713] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.204568][ T6713] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.204614][ T6713] ? down_read+0x1ad/0x2e0 [ 119.204643][ T6713] genl_rcv+0x28/0x40 [ 119.204668][ T6713] netlink_unicast+0x82f/0x9e0 [ 119.204712][ T6713] ? __pfx_netlink_unicast+0x10/0x10 [ 119.204747][ T6713] ? netlink_sendmsg+0x642/0xb30 [ 119.204766][ T6713] ? skb_put+0x11b/0x210 [ 119.204794][ T6713] netlink_sendmsg+0x805/0xb30 [ 119.204829][ T6713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.204855][ T6713] ? aa_sock_msg_perm+0xf1/0x1d0 [ 119.204878][ T6713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 119.204900][ T6713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.204923][ T6713] __sock_sendmsg+0x21c/0x270 [ 119.204958][ T6713] ____sys_sendmsg+0x505/0x830 [ 119.204990][ T6713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.205027][ T6713] ? import_iovec+0x74/0xa0 [ 119.205057][ T6713] ___sys_sendmsg+0x21f/0x2a0 [ 119.205086][ T6713] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.205155][ T6713] ? __fget_files+0x2a/0x420 [ 119.205174][ T6713] ? __fget_files+0x3a0/0x420 [ 119.205206][ T6713] __x64_sys_sendmsg+0x19b/0x260 [ 119.205235][ T6713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.205348][ T6713] ? rcu_is_watching+0x15/0xb0 [ 119.205378][ T6713] ? do_syscall_64+0xbe/0x3b0 [ 119.205408][ T6713] do_syscall_64+0xfa/0x3b0 [ 119.205430][ T6713] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.205452][ T6713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.205473][ T6713] ? clear_bhb_loop+0x60/0xb0 [ 119.205499][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.205519][ T6713] RIP: 0033:0x7fc974b8ebe9 [ 119.205546][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.205563][ T6713] RSP: 002b:00007fc975946038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.205590][ T6713] RAX: ffffffffffffffda RBX: 00007fc974dc6090 RCX: 00007fc974b8ebe9 [ 119.205605][ T6713] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000d [ 119.205618][ T6713] RBP: 00007fc974c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 119.205631][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.205643][ T6713] R13: 00007fc974dc6128 R14: 00007fc974dc6090 R15: 00007ffc4c06c3d8 [ 119.205679][ T6713] [ 119.703340][ T6706] netlink: 'syz.4.185': attribute type 1 has an invalid length. [ 119.711122][ T6706] netlink: 224 bytes leftover after parsing attributes in process `syz.4.185'. [ 120.168558][ T6738] netlink: 132 bytes leftover after parsing attributes in process `syz.4.192'. [ 120.185729][ T6738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.201190][ T30] audit: type=1107 audit(1757212448.039:2): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 120.240422][ T6739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.438074][ T6747] netlink: 44 bytes leftover after parsing attributes in process `syz.0.194'. [ 120.475654][ T6748] netlink: 44 bytes leftover after parsing attributes in process `syz.0.194'. [ 120.615842][ T6758] netlink: 'syz.4.197': attribute type 2 has an invalid length. [ 120.640656][ T6744] netlink: 'syz.2.195': attribute type 4 has an invalid length. [ 120.716431][ T6758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.724057][ T6758] IPv6: NLM_F_CREATE should be set when creating new route [ 120.731489][ T6758] IPv6: NLM_F_CREATE should be set when creating new route [ 121.034833][ T6767] macvlan2: entered allmulticast mode [ 121.041315][ T6767] veth1_vlan: entered allmulticast mode [ 121.053336][ T6767] veth1_vlan: left allmulticast mode [ 121.270601][ T6772] netlink: 'syz.4.201': attribute type 12 has an invalid length. [ 121.538283][ T6789] netlink: 'syz.2.202': attribute type 2 has an invalid length. [ 121.795601][ T6796] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 122.765485][ T6825] 8021q: VLANs not supported on ip6_vti0 [ 122.855419][ T6824] 8021q: VLANs not supported on ip6_vti0 [ 124.035717][ T6875] __nla_validate_parse: 10 callbacks suppressed [ 124.035740][ T6875] netlink: 44 bytes leftover after parsing attributes in process `syz.4.224'. [ 124.450327][ T6880] netlink: 'syz.2.227': attribute type 12 has an invalid length. [ 124.465800][ T6890] netlink: 'syz.0.226': attribute type 16 has an invalid length. [ 124.526409][ T6890] netlink: 'syz.0.226': attribute type 17 has an invalid length. [ 124.590710][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 124.669890][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 124.808274][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.226'. [ 124.875777][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 124.972395][ T6886] netlink: 5 bytes leftover after parsing attributes in process `syz.0.226'. [ 126.404056][ T6911] tipc: Enabled bearer , priority 26 [ 126.437776][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.497916][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.555480][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.603895][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.025166][ T6969] netlink: 'syz.2.243': attribute type 21 has an invalid length. [ 127.052122][ T6969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.243'. [ 127.527929][ T5970] tipc: Node number set to 2875851146 [ 127.654151][ T6991] netlink: 14 bytes leftover after parsing attributes in process `syz.2.247'. [ 127.884325][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.910815][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.920978][ T7007] netlink: 84 bytes leftover after parsing attributes in process `syz.3.254'. [ 128.085928][ T7001] netlink: 36 bytes leftover after parsing attributes in process `syz.0.252'. [ 128.232645][ T7005] syz.1.253 (7005) used greatest stack depth: 17864 bytes left [ 128.343956][ T7010] syzkaller1: entered promiscuous mode [ 128.365701][ T7010] syzkaller1: entered allmulticast mode [ 129.020841][ T7043] delete_channel: no stack [ 129.100212][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'. [ 129.551431][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 129.570080][ T7056] syzkaller0: entered promiscuous mode [ 129.582246][ T7056] syzkaller0: entered allmulticast mode [ 129.595319][ T7060] netlink: 'syz.4.272': attribute type 1 has an invalid length. [ 129.750537][ T7069] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 129.772325][ T7069] netlink: 204 bytes leftover after parsing attributes in process `syz.2.274'. [ 129.804378][ T7069] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 130.141572][ T7080] tipc: Enabling of bearer rejected, failed to enable media [ 130.611739][ T7093] netlink: 68 bytes leftover after parsing attributes in process `syz.2.280'. [ 133.293846][ T7095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.281'. [ 133.357593][ T7099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.283'. [ 133.366514][ T7099] openvswitch: netlink: Flow key attr not present in new flow. [ 134.335820][ T7149] netlink: 'syz.0.296': attribute type 1 has an invalid length. [ 134.577240][ T7149] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.696226][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.297'. [ 135.451327][ T7184] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 135.601165][ T7184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.679211][ T7186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.702723][ T7186] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.720649][ T7186] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 135.876095][ T7191] veth3: entered promiscuous mode [ 135.900357][ T7191] bond2: (slave veth3): Enslaving as an active interface with a down link [ 136.012345][ T7206] netlink: 256 bytes leftover after parsing attributes in process `syz.1.311'. [ 136.125878][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'. [ 136.141245][ T7213] netlink: 20 bytes leftover after parsing attributes in process `syz.3.312'. [ 136.232163][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.311'. [ 136.295701][ T7208] bridge_slave_1: left allmulticast mode [ 136.304105][ T7208] bridge_slave_1: left promiscuous mode [ 136.314594][ T7208] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.359455][ T7208] bridge_slave_0: left allmulticast mode [ 136.405684][ T7208] bridge_slave_0: left promiscuous mode [ 136.416359][ T7208] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.751159][ T7224] netlink: 56 bytes leftover after parsing attributes in process `syz.3.316'. [ 137.027319][ T7241] netlink: 'syz.4.323': attribute type 7 has an invalid length. [ 137.117551][ T7246] netlink: 'syz.0.324': attribute type 2 has an invalid length. [ 137.226565][ T7253] netlink: 64 bytes leftover after parsing attributes in process `syz.3.326'. [ 137.579932][ T7269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 137.985935][ T7296] trusted_key: syz.4.340 sent an empty control message without MSG_MORE. [ 138.117474][ T33] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.184920][ T33] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.211701][ T33] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.269870][ T33] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.293552][ T7305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 138.405047][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 139.049945][ T7323] netlink: 'syz.0.347': attribute type 17 has an invalid length. [ 139.073695][ T7323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.261643][ T7336] netlink: zone id is out of range [ 139.322707][ T7336] netlink: zone id is out of range [ 139.360154][ T7336] netlink: zone id is out of range [ 139.369811][ T7336] netlink: zone id is out of range [ 139.379716][ T7336] netlink: zone id is out of range [ 139.426652][ T7336] netlink: zone id is out of range [ 139.461612][ T7336] netlink: zone id is out of range [ 139.494665][ T7336] netlink: zone id is out of range [ 139.533167][ T7336] netlink: del zone limit has 4 unknown bytes [ 139.763765][ T7363] tipc: Enabled bearer , priority 0 [ 139.795081][ T7364] tipc: Enabling of bearer rejected, already enabled [ 139.865926][ T7363] syzkaller0: entered promiscuous mode [ 139.905452][ T7363] syzkaller0: entered allmulticast mode [ 139.990587][ T7377] __nla_validate_parse: 2 callbacks suppressed [ 139.990610][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 140.110146][ T7378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.361'. [ 140.383247][ T7362] tipc: Resetting bearer [ 140.498677][ T7362] tipc: Disabling bearer [ 140.875612][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 141.268886][ T7427] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 141.456317][ T7427] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 141.653660][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 141.695804][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 141.919827][ T7445] xfrm1: entered promiscuous mode [ 141.928288][ T7445] xfrm1: entered allmulticast mode [ 142.314141][ T7465] netlink: 'syz.0.387': attribute type 21 has an invalid length. [ 142.318774][ T7471] netlink: 'syz.1.389': attribute type 3 has an invalid length. [ 142.339586][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.389'. [ 142.391429][ T7465] netlink: 128 bytes leftover after parsing attributes in process `syz.0.387'. [ 142.502008][ T7476] netlink: 'syz.2.390': attribute type 12 has an invalid length. [ 142.514057][ T7476] netlink: 'syz.2.390': attribute type 29 has an invalid length. [ 142.522695][ T7476] netlink: 148 bytes leftover after parsing attributes in process `syz.2.390'. [ 142.534633][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 142.582944][ T7465] netlink: 'syz.0.387': attribute type 5 has an invalid length. [ 142.592862][ T7465] netlink: 'syz.0.387': attribute type 6 has an invalid length. [ 142.608713][ T7465] netlink: 3 bytes leftover after parsing attributes in process `syz.0.387'. [ 143.357831][ T7521] tipc: Enabled bearer , priority 0 [ 143.400081][ T7515] syzkaller0: entered promiscuous mode [ 143.432520][ T7515] syzkaller0: entered allmulticast mode [ 143.506922][ T7511] tipc: Resetting bearer [ 143.517052][ T7506] tipc: Resetting bearer [ 143.539228][ T7506] tipc: Disabling bearer [ 143.729114][ T7531] vlan2: entered promiscuous mode [ 143.744003][ T7531] erspan0: entered promiscuous mode [ 143.813428][ T7533] vlan2: entered promiscuous mode [ 144.445515][ T7572] netlink: 'syz.1.416': attribute type 1 has an invalid length. [ 144.538598][ T7566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.822804][ T7566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.986403][ T7566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.004087][ T7590] ipvlan0: entered promiscuous mode [ 145.112246][ T7566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.287309][ T7602] __nla_validate_parse: 44 callbacks suppressed [ 145.287329][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 145.310688][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 145.325927][ T7602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 145.390927][ T7601] netlink: 'syz.1.423': attribute type 11 has an invalid length. [ 145.436030][ T78] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.437852][ T7601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.423'. [ 145.478498][ T78] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.551330][ T78] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.561838][ T7608] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 145.599791][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.644768][ T7608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.688434][ T7608] team0: Port device bond0 added [ 145.986193][ T7621] IPVS: persistence engine module ip_vs_pe_ not found [ 146.013054][ T7621] netlink: 40 bytes leftover after parsing attributes in process `syz.0.429'. [ 146.022846][ T6915] IPVS: starting estimator thread 0... [ 146.117205][ T7628] IPVS: using max 25 ests per chain, 60000 per kthread [ 146.164418][ T7629] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.227721][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 146.269846][ T7633] netlink: 48 bytes leftover after parsing attributes in process `syz.3.431'. [ 146.287624][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 146.287706][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 146.297742][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 146.317597][ T7636] validate_nla: 1 callbacks suppressed [ 146.317613][ T7636] netlink: 'syz.1.434': attribute type 1 has an invalid length. [ 146.349070][ T7633] geneve2: entered promiscuous mode [ 146.367270][ T7633] geneve2: entered allmulticast mode [ 146.374184][ T7612] infiniband syz0: set active [ 146.400502][ T7612] infiniband syz0: added veth0_vlan [ 146.416181][ T78] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 146.427933][ T7636] nbd: socks must be embedded in a SOCK_ITEM attr [ 146.436124][ T7636] block nbd0: shutting down sockets [ 146.443158][ T7612] syz0: rxe_create_cq: returned err = -12 [ 146.444683][ T78] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 146.489752][ T7612] infiniband syz0: Couldn't create ib_mad CQ [ 146.522614][ T7612] infiniband syz0: Couldn't open port 1 [ 146.529681][ T7629] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.594566][ T7612] RDS/IB: syz0: added [ 146.613902][ T7612] smc: adding ib device syz0 with port count 1 [ 146.631843][ T7612] smc: ib device syz0 port 1 has no pnetid [ 146.855779][ T7657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 146.863133][ T7657] IPv6: NLM_F_CREATE should be set when creating new route [ 146.870465][ T7657] IPv6: NLM_F_CREATE should be set when creating new route [ 147.494860][ T7684] netlink: 'syz.0.448': attribute type 33 has an invalid length. [ 148.158591][ T7629] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.193881][ T7629] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 148.394355][ T7629] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.448422][ T7629] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 148.761628][ T7717] netlink: 'syz.1.457': attribute type 2 has an invalid length. [ 148.782449][ T78] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 148.809139][ T78] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.883074][ T78] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 148.915637][ T78] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.955630][ T7723] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 149.125938][ T3149] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 149.156628][ T3149] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 149.224369][ T3149] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 149.257328][ T3149] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 150.251769][ T7759] netlink: 'syz.1.471': attribute type 10 has an invalid length. [ 150.315507][ T7752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.448395][ T7764] __nla_validate_parse: 17 callbacks suppressed [ 150.448415][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.473'. [ 150.574088][ T7776] netlink: 36 bytes leftover after parsing attributes in process `syz.2.475'. [ 150.668905][ T7782] xt_l2tp: unknown flags: 51 [ 150.923471][ T7795] pim6reg99999999: entered allmulticast mode [ 150.956058][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'. [ 150.993011][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 151.002778][ T7802] netlink: 24 bytes leftover after parsing attributes in process `syz.3.483'. [ 151.019619][ T5882] Bluetooth: hci0: command tx timeout [ 151.085448][ T7802] netlink: 68 bytes leftover after parsing attributes in process `syz.3.483'. [ 151.113582][ T7802] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 151.135532][ T7802] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 151.173024][ T7808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 151.236581][ T7811] netlink: 'syz.0.484': attribute type 14 has an invalid length. [ 151.488720][ T7820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.488'. [ 151.975817][ T7842] netlink: 256 bytes leftover after parsing attributes in process `syz.1.495'. [ 152.256773][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 152.268544][ T7851] net_ratelimit: 2 callbacks suppressed [ 152.268563][ T7851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.158316][ T7874] Bluetooth: MGMT ver 1.23 [ 153.388290][ T7876] siw: device registration error -23 [ 154.862257][ T7878] veth0_to_hsr: left promiscuous mode [ 154.887231][ T7878] veth0_to_hsr: left allmulticast mode [ 155.427523][ T7878] geneve2: left promiscuous mode [ 155.432557][ T7878] geneve2: left allmulticast mode [ 155.986648][ T3506] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 156.001961][ T3506] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 156.031164][ T3506] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 156.058096][ T3506] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 156.120555][ T3506] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 156.130802][ T3506] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 156.155833][ T3506] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 156.196164][ T3506] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 156.763776][ T6926] IPVS: starting estimator thread 0... [ 156.852189][ T7923] dvmrp8: entered allmulticast mode [ 156.890627][ T7919] dvmrp8: left allmulticast mode [ 156.918311][ T7924] IPVS: using max 28 ests per chain, 67200 per kthread [ 157.016603][ T7933] __nla_validate_parse: 9 callbacks suppressed [ 157.016623][ T7933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.519'. [ 157.074891][ T7933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.082356][ T7933] IPv6: NLM_F_CREATE should be set when creating new route [ 157.089762][ T7933] IPv6: NLM_F_CREATE should be set when creating new route [ 157.141165][ T7927] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 157.320541][ T7942] tipc: Enabling of bearer rejected, failed to enable media [ 157.770505][ T7973] lo speed is unknown, defaulting to 1000 [ 157.792086][ T7973] lo speed is unknown, defaulting to 1000 [ 157.817513][ T7973] lo speed is unknown, defaulting to 1000 [ 157.843670][ T7973] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.888607][ T7973] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.959322][ T7973] lo speed is unknown, defaulting to 1000 [ 157.986260][ T7973] lo speed is unknown, defaulting to 1000 [ 157.997892][ T7973] lo speed is unknown, defaulting to 1000 [ 158.011270][ T7973] lo speed is unknown, defaulting to 1000 [ 158.029311][ T7973] lo speed is unknown, defaulting to 1000 [ 158.054983][ T7984] netlink: 'syz.2.527': attribute type 1 has an invalid length. [ 158.074319][ T7984] netlink: 'syz.2.527': attribute type 4 has an invalid length. [ 158.099738][ T7984] netlink: 15538 bytes leftover after parsing attributes in process `syz.2.527'. [ 158.356373][ T8001] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 158.375011][ T8001] netlink: 224 bytes leftover after parsing attributes in process `syz.1.532'. [ 158.667882][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.535'. [ 158.767400][ T8016] netlink: 'syz.0.537': attribute type 5 has an invalid length. [ 158.784882][ T8016] netlink: 'syz.0.537': attribute type 7 has an invalid length. [ 158.901131][ T8016] : entered promiscuous mode [ 159.046542][ T8027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.122517][ T8030] netlink: 64 bytes leftover after parsing attributes in process `syz.0.539'. [ 159.384647][ T8000] lo speed is unknown, defaulting to 1000 [ 159.803932][ T8045] Bluetooth: MGMT ver 1.23 [ 159.833681][ T8046] netlink: 'syz.1.543': attribute type 2 has an invalid length. [ 159.876228][ T8046] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 160.053139][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.545'. [ 160.131861][ T8054] netlink: 152 bytes leftover after parsing attributes in process `syz.1.546'. [ 160.179799][ T8054] netlink: 152 bytes leftover after parsing attributes in process `syz.1.546'. [ 160.190765][ T8051] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 160.211689][ T8051] team0: Device ipvlan2 is already an upper device of the team interface [ 160.304796][ T8060] netlink: 56 bytes leftover after parsing attributes in process `syz.1.549'. [ 160.330040][ T8061] netlink: 'syz.4.547': attribute type 10 has an invalid length. [ 160.375904][ T8053] vlan2: entered promiscuous mode [ 160.384205][ T8053] dummy0: entered promiscuous mode [ 160.479683][ T8061] macvlan1: entered allmulticast mode [ 160.487176][ T8061] veth1_vlan: entered allmulticast mode [ 160.503589][ T8061] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 161.026843][ T8088] netlink: 'syz.4.556': attribute type 5 has an invalid length. [ 161.059281][ T8088] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.556'. [ 161.173206][ T8096] netlink: 'syz.3.560': attribute type 11 has an invalid length. [ 161.798804][ T8118] vlan2: entered promiscuous mode [ 161.814170][ T8118] macvtap0: entered promiscuous mode [ 162.201500][ T8102] lo speed is unknown, defaulting to 1000 [ 162.256768][ T7948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.289480][ T7948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.484907][ T8152] __nla_validate_parse: 5 callbacks suppressed [ 162.484923][ T8152] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.578'. [ 192.585163][ T8167] openvswitch: netlink: IP tunnel dst address not specified [ 192.647475][ T8159] can: request_module (can-proto-0) failed. [ 193.000713][ T8182] Bluetooth: MGMT ver 1.23 [ 193.373808][ T8194] tipc: Enabled bearer , priority 0 [ 193.403430][ T8194] syzkaller0: entered promiscuous mode [ 193.422930][ T8194] syzkaller0: entered allmulticast mode [ 193.572642][ T8200] netlink: 200 bytes leftover after parsing attributes in process `syz.4.591'. [ 193.599772][ T8194] syzkaller0: mtu greater than device maximum [ 193.646602][ T8194] tipc: Resetting bearer [ 193.769625][ T8202] netlink: 36 bytes leftover after parsing attributes in process `syz.4.592'. [ 193.792538][ T8194] tipc: Disabling bearer [ 194.013408][ T8207] netlink: 'syz.2.594': attribute type 13 has an invalid length. [ 194.045880][ T8207] netlink: 'syz.2.594': attribute type 17 has an invalid length. [ 194.087581][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.595'. [ 194.138059][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.596'. [ 194.221456][ T8207] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.251819][ T8207] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.302436][ T8208] syz_tun: entered promiscuous mode [ 194.344206][ T8192] lo speed is unknown, defaulting to 1000 [ 194.503409][ T8213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.732292][ T8215] tipc: Enabled bearer , priority 0 [ 194.764962][ T8218] syzkaller0: entered promiscuous mode [ 194.794910][ T8218] syzkaller0: entered allmulticast mode [ 194.847790][ T8214] tipc: Resetting bearer [ 194.937717][ T8214] tipc: Disabling bearer [ 195.524321][ T8209] lo speed is unknown, defaulting to 1000 [ 196.530305][ T8250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 196.530306][ T8249] netlink: 80 bytes leftover after parsing attributes in process `syz.1.606'. [ 196.623827][ T8254] netlink: 'syz.4.607': attribute type 1 has an invalid length. [ 196.717774][ T8254] 8021q: adding VLAN 0 to HW filter on device bond1 [ 196.743280][ T8257] bond1: (slave dummy0): making interface the new active one [ 196.812332][ T8257] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 196.854645][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 196.887764][ T8264] openvswitch: netlink: nsh attr 0 has unexpected len 33788 expected 0 [ 196.916787][ T8264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.955383][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.608'. [ 198.477276][ T8350] netlink: 'syz.2.630': attribute type 6 has an invalid length. [ 198.534444][ T8355] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 198.674239][ T8366] IPVS: set_ctl: invalid protocol: 29 172.30.1.4:20003 [ 198.713488][ T8368] ip6erspan0: entered promiscuous mode [ 198.735578][ T8366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 198.977163][ T8381] netlink: 34 bytes leftover after parsing attributes in process `syz.0.637'. [ 199.384441][ T8363] lo speed is unknown, defaulting to 1000 [ 200.015623][ T8412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.645'. [ 200.168681][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.646'. [ 200.241451][ T8413] netlink: 17292 bytes leftover after parsing attributes in process `syz.3.646'. [ 200.283503][ T8424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.648'. [ 200.312647][ T8424] Bluetooth: MGMT ver 1.23 [ 200.407272][ T8426] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 200.430892][ T8430] netlink: 788 bytes leftover after parsing attributes in process `syz.3.651'. [ 200.447145][ T8426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.516191][ T8426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.613251][ T8426] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 200.686147][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 200.706285][ T8444] netlink: 16 bytes leftover after parsing attributes in process `syz.4.653'. [ 200.725972][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 200.740419][ T8391] lo speed is unknown, defaulting to 1000 [ 200.745607][ T8444] netlink: 'syz.4.653': attribute type 16 has an invalid length. [ 200.761637][ T8444] netlink: 'syz.4.653': attribute type 17 has an invalid length. [ 200.801753][ T8445] IPv6: NLM_F_REPLACE set, but no existing node found! [ 200.933610][ T8437] syzkaller0: entered promiscuous mode [ 200.946710][ T8437] syzkaller0: entered allmulticast mode [ 201.650628][ T8444] veth1_vlan: left allmulticast mode [ 204.138205][ T33] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.150214][ T33] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.160859][ T33] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.173292][ T33] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.174453][ T5917] syz0: Port: 1 Link DOWN [ 204.205438][ T8428] lo speed is unknown, defaulting to 1000 [ 204.206338][ T8467] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 204.228664][ T8467] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 204.563625][ T8481] __nla_validate_parse: 2 callbacks suppressed [ 204.563764][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.661'. [ 204.583635][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.661'. [ 204.781412][ T8485] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.663'. [ 204.871131][ T8489] netlink: 324 bytes leftover after parsing attributes in process `syz.3.665'. [ 204.967981][ T8494] netlink: 'syz.3.667': attribute type 1 has an invalid length. [ 204.979311][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 205.138816][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.668'. [ 205.187253][ T8501] netlink: 112 bytes leftover after parsing attributes in process `syz.2.666'. [ 205.605740][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 206.024477][ T8539] netlink: 'syz.1.680': attribute type 8 has an invalid length. [ 206.036702][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.680'. [ 206.102941][ T8539] bond0: entered promiscuous mode [ 206.140854][ T8539] bond_slave_0: entered promiscuous mode [ 206.166353][ T8539] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 206.237032][ T8539] bond0: left promiscuous mode [ 206.256031][ T8539] bond_slave_0: left promiscuous mode [ 206.287363][ T8539] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 206.349186][ T8552] netlink: 'syz.2.683': attribute type 10 has an invalid length. [ 206.421494][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.571317][ T8563] netlink: 84 bytes leftover after parsing attributes in process `syz.4.689'. [ 206.598269][ T8565] batadv_slave_1: entered promiscuous mode [ 206.789011][ T8562] batadv_slave_1: left promiscuous mode [ 207.071602][ T8585] tipc: Enabled bearer , priority 0 [ 207.170165][ T8585] syzkaller0: entered promiscuous mode [ 207.175863][ T8585] syzkaller0: entered allmulticast mode [ 207.182961][ T8585] tipc: Resetting bearer [ 207.207518][ T8583] tipc: Resetting bearer [ 207.694958][ T8615] netlink: 'syz.2.700': attribute type 1 has an invalid length. [ 208.198627][ T7890] tipc: Node number set to 1192779769 [ 208.714511][ T8583] tipc: Disabling bearer [ 208.724785][ T8601] ..0·: renamed from hsr0 [ 208.732657][ T8601] ..0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.743192][ T8601] ..0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.754237][ T8601] ..0·: entered allmulticast mode [ 208.759354][ T8601] hsr_slave_0: entered allmulticast mode [ 208.765058][ T8601] hsr_slave_1: entered allmulticast mode [ 208.772194][ T8601] A link change request failed with some changes committed already. Interface ..0· may have been left with an inconsistent configuration, please check. [ 208.793311][ T8606] ..0·: entered promiscuous mode [ 208.868318][ T8615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.906550][ T8616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.936595][ T8616] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.964004][ T8616] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 209.571463][ T8654] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 209.667812][ T8639] lo speed is unknown, defaulting to 1000 [ 209.741148][ T30] audit: type=1800 audit(1757212537.599:3): pid=8660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.712" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=671 res=0 errno=0 [ 209.745875][ T8660] netlink: 'syz.1.712': attribute type 10 has an invalid length. [ 209.837376][ T8660] veth0_vlan: left promiscuous mode [ 209.865732][ T8660] veth0_vlan: entered promiscuous mode [ 209.909387][ T8660] team0: Device veth0_vlan failed to register rx_handler [ 209.935050][ T8660] tipc: Resetting bearer [ 210.644863][ T8694] __nla_validate_parse: 5 callbacks suppressed [ 210.644884][ T8694] netlink: 60 bytes leftover after parsing attributes in process `syz.0.720'. [ 210.702845][ T8694] netlink: 56 bytes leftover after parsing attributes in process `syz.0.720'. [ 210.765361][ T8665] delete_channel: no stack [ 210.866431][ T8694] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 210.883894][ T8694] gretap2: entered promiscuous mode [ 210.894598][ T8694] gretap2: entered allmulticast mode [ 211.075902][ T8706] netlink: 360 bytes leftover after parsing attributes in process `syz.0.725'. [ 211.093667][ T8712] netlink: 256 bytes leftover after parsing attributes in process `syz.1.724'. [ 211.126800][ T8715] netlink: 360 bytes leftover after parsing attributes in process `syz.0.725'. [ 211.142465][ T8710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.152044][ T8710] bond0: (slave bond1): Enslaving as an active interface with an up link [ 211.889019][ T5881] Bluetooth: hci1: command 0x0406 tx timeout [ 211.895425][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 211.895444][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 211.936510][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 211.968027][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.735'. [ 212.004518][ T8717] lo speed is unknown, defaulting to 1000 [ 212.314003][ T8754] tipc: Enabled bearer , priority 0 [ 212.508521][ T8759] syzkaller0: entered promiscuous mode [ 212.516657][ T8759] syzkaller0: entered allmulticast mode [ 212.525892][ T8759] tipc: Resetting bearer [ 212.648440][ T7948] tipc: Resetting bearer [ 212.677724][ T8772] netlink: 104 bytes leftover after parsing attributes in process `syz.3.744'. [ 212.736921][ T8753] tipc: Resetting bearer [ 214.330767][ T8753] tipc: Disabling bearer [ 214.928715][ T8811] nbd0: detected capacity change from 0 to 127 [ 215.033415][ T5871] block nbd0: Receive control failed (result -104) [ 215.250909][ T8829] netlink: 'syz.0.762': attribute type 9 has an invalid length. [ 215.255074][ T8833] netlink: 'syz.4.763': attribute type 5 has an invalid length. [ 215.261804][ T8829] netlink: 'syz.0.762': attribute type 6 has an invalid length. [ 215.310057][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 215.317236][ T8829] netlink: 'syz.0.762': attribute type 7 has an invalid length. [ 215.326559][ T8829] netlink: 'syz.0.762': attribute type 8 has an invalid length. [ 215.661330][ T8853] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 215.711523][ T8859] netlink: 'syz.0.768': attribute type 21 has an invalid length. [ 215.719916][ T8858] netlink: 'syz.0.768': attribute type 21 has an invalid length. [ 215.761416][ T8855] bond3: (slave gretap1): making interface the new active one [ 215.770052][ T8855] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 215.785630][ T8859] netlink: 156 bytes leftover after parsing attributes in process `syz.0.768'. [ 215.796691][ T8858] netlink: 156 bytes leftover after parsing attributes in process `syz.0.768'. [ 215.819970][ T8854] vlan2: entered allmulticast mode [ 215.825395][ T8854] bond3: entered allmulticast mode [ 215.847417][ T8854] gretap1: entered allmulticast mode [ 215.854455][ T8854] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 216.396779][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 217.800587][ T8884] bond0: (slave bond_slave_0): Releasing backup interface [ 217.810475][ T8884] team0: Port device team_slave_0 removed [ 217.821411][ T8884] team0: Port device team_slave_1 removed [ 217.827817][ T8884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.836254][ T8884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.133821][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.781'. [ 218.174680][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 218.208917][ T8908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.781'. [ 218.240784][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.781'. [ 218.253609][ T8908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.781'. [ 218.270272][ T8908] netlink: 36 bytes leftover after parsing attributes in process `syz.2.781'. [ 218.448232][ T8926] ip6tnl1: entered promiscuous mode [ 218.453519][ T8926] ip6tnl1: entered allmulticast mode [ 218.485742][ T8930] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.504402][ T8926] team0: Refused to change device type [ 218.521350][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.3.791'. [ 218.555680][ T8935] gretap2: entered promiscuous mode [ 218.563754][ T8932] syzkaller1: entered promiscuous mode [ 218.569676][ T8932] syzkaller1: entered allmulticast mode [ 218.874866][ T8953] (unnamed net_device) (uninitialized): up delay (1024) is not a multiple of miimon (100), value rounded to 1000 ms [ 218.887525][ T8953] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 218.999827][ T8946] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.250516][ T8968] syzkaller0: entered promiscuous mode [ 219.256060][ T8968] syzkaller0: entered allmulticast mode [ 219.614093][ T8991] tipc: Enabled bearer , priority 0 [ 219.660084][ T8991] syzkaller0: entered promiscuous mode [ 219.697653][ T8991] syzkaller0: entered allmulticast mode [ 219.751712][ T8991] tipc: Resetting bearer [ 219.791898][ T8990] tipc: Resetting bearer [ 219.877720][ T8990] tipc: Disabling bearer [ 220.003412][ T9006] nbd: socks must be embedded in a SOCK_ITEM attr [ 220.495701][ T8173] udevd[8173]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 220.574998][ T9019] udevd[9019]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 220.812812][ T9052] __nla_validate_parse: 5 callbacks suppressed [ 220.812832][ T9052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 220.871829][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 220.886130][ T9052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.822'. [ 220.909279][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 220.943802][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 220.963306][ T9060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.825'. [ 220.979322][ T9054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'. [ 220.998245][ T9060] netlink: 'syz.0.825': attribute type 3 has an invalid length. [ 221.005947][ T9060] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.825'. [ 221.431185][ T9055] lo speed is unknown, defaulting to 1000 [ 222.267799][ T9119] block nbd2: not configured, cannot reconfigure [ 222.312817][ T7947] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.325074][ T7947] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.343872][ T7947] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.360479][ T7947] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.608768][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 222.697627][ T9131] netlink: 52 bytes leftover after parsing attributes in process `syz.0.848'. [ 222.724033][ T9136] netlink: 248 bytes leftover after parsing attributes in process `syz.2.845'. [ 222.997477][ T9154] tc_dump_action: action bad kind [ 223.101299][ T9160] netlink: 'syz.4.852': attribute type 1 has an invalid length. [ 223.154867][ T9166] netlink: 'syz.1.856': attribute type 6 has an invalid length. [ 223.168402][ T9155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.180537][ T9170] netlink: 'syz.3.857': attribute type 1 has an invalid length. [ 223.389004][ T9180] netlink: 'syz.3.861': attribute type 1 has an invalid length. [ 223.502394][ T9186] veth1: entered promiscuous mode [ 223.508157][ T9186] netlink: 'syz.1.863': attribute type 8 has an invalid length. [ 223.515836][ T9186] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 223.549928][ T9186] ..0·: left promiscuous mode [ 223.556766][ T9187] tipc: Started in network mode [ 223.561929][ T9187] tipc: Node identity ea685001f616, cluster identity 4711 [ 223.572843][ T9187] tipc: Enabled bearer , priority 0 [ 223.588818][ T9187] syzkaller0: entered promiscuous mode [ 223.597135][ T9187] syzkaller0: entered allmulticast mode [ 223.633718][ T9187] tipc: Resetting bearer [ 223.651722][ T9185] tipc: Resetting bearer [ 223.694520][ T9185] tipc: Disabling bearer [ 224.005799][ T9200] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 224.021208][ T9200] netlink: 'syz.4.870': attribute type 6 has an invalid length. [ 224.859121][ T9241] pimreg: tun_chr_ioctl cmd 1074025677 [ 224.869768][ T9241] pimreg: linktype set to 780 [ 224.883031][ T9241] pimreg: tun_chr_ioctl cmd 35111 [ 224.914655][ T9222] lo speed is unknown, defaulting to 1000 [ 225.354701][ T30] audit: type=1800 audit(1757212553.199:4): pid=9242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.881" name="memory.events" dev="tmpfs" ino=967 res=0 errno=0 [ 225.940453][ T9273] __nla_validate_parse: 13 callbacks suppressed [ 225.940474][ T9273] netlink: 56 bytes leftover after parsing attributes in process `syz.1.890'. [ 226.257353][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 226.367893][ T9234] lo speed is unknown, defaulting to 1000 [ 226.560604][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 226.570324][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 226.592431][ T9295] IPv6: Can't replace route, no match found [ 226.788777][ T9287] vlan2: entered allmulticast mode [ 226.844800][ T9287] veth1: entered allmulticast mode [ 227.002942][ T9315] netlink: 'syz.0.900': attribute type 7 has an invalid length. [ 227.042195][ T9317] netlink: 'syz.2.901': attribute type 4 has an invalid length. [ 227.120391][ T9317] netlink: 160 bytes leftover after parsing attributes in process `syz.2.901'. [ 227.143603][ T9317] nbd: must specify a device to reconfigure [ 227.463230][ T9261] lo speed is unknown, defaulting to 1000 [ 227.638173][ T9345] openvswitch: netlink: Multiple metadata blocks provided [ 227.735714][ T9347] netlink: 96 bytes leftover after parsing attributes in process `syz.2.907'. [ 227.758816][ T9349] netlink: 332 bytes leftover after parsing attributes in process `syz.1.908'. [ 227.768379][ T9349] netlink: 104 bytes leftover after parsing attributes in process `syz.1.908'. [ 227.781674][ T9349] netlink: 32 bytes leftover after parsing attributes in process `syz.1.908'. [ 227.824448][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 228.026278][ T9353] tipc: Enabled bearer , priority 0 [ 228.041419][ T9353] syzkaller0: entered promiscuous mode [ 228.054135][ T9353] syzkaller0: entered allmulticast mode [ 228.071864][ T9353] tipc: Resetting bearer [ 228.116633][ T9352] tipc: Resetting bearer [ 228.162214][ T9352] tipc: Disabling bearer [ 229.412335][ T9399] netlink: 'syz.4.919': attribute type 1 has an invalid length. [ 229.468544][ T9399] bond4: entered promiscuous mode [ 229.474368][ T9399] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.572624][ T9399] 8021q: adding VLAN 0 to HW filter on device bond5 [ 229.582251][ T9399] bond4: (slave bond5): making interface the new active one [ 229.589713][ T9399] bond5: entered promiscuous mode [ 229.595952][ T9399] bond4: (slave bond5): Enslaving as an active interface with an up link [ 229.605181][ T9369] lo speed is unknown, defaulting to 1000 [ 229.959571][ T9366] lo speed is unknown, defaulting to 1000 [ 230.061308][ T9416] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 231.169724][ T9451] __nla_validate_parse: 1 callbacks suppressed [ 231.169744][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.932'. [ 231.194409][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'. [ 231.291547][ T9457] netlink: 14 bytes leftover after parsing attributes in process `syz.3.934'. [ 231.524581][ T9457] bond0 (unregistering): (slave bond1): Releasing backup interface [ 231.534780][ T9457] bond0 (unregistering): Released all slaves [ 231.587532][ T9469] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.610879][ T9469] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.682972][ T9471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.937'. [ 231.742439][ T9469] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.767252][ T9469] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.820638][ T9477] sit1: entered promiscuous mode [ 231.858239][ T9469] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.881880][ T9469] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.031435][ T9469] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 232.043122][ T9469] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.088173][ T9490] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.120659][ T9487] gretap1: entered promiscuous mode [ 232.179533][ T59] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.190488][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.216583][ T59] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.238757][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.364622][ T9503] tipc: Enabled bearer , priority 0 [ 232.374009][ T9503] syzkaller0: entered promiscuous mode [ 232.379617][ T9503] syzkaller0: entered allmulticast mode [ 232.387019][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.395238][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.410787][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 232.419924][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.566760][ T9503] tipc: Resetting bearer [ 232.617454][ T9503] tipc: Disabling bearer [ 232.993901][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.957'. [ 233.150060][ T9533] bond1: (slave dummy0): Releasing active interface [ 233.167327][ T9533] bond3: (slave gretap1): Releasing active interface [ 233.174426][ T9533] gretap1: left allmulticast mode [ 233.178581][ T9551] netlink: 'syz.2.960': attribute type 30 has an invalid length. [ 233.192276][ T9533] bond4: (slave bond5): Releasing backup interface [ 233.198995][ T9533] bond5: left promiscuous mode [ 233.449433][ T9568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.963'. [ 233.486774][ T9568] netlink: 48 bytes leftover after parsing attributes in process `syz.0.963'. [ 233.764879][ T9586] netlink: 24 bytes leftover after parsing attributes in process `syz.0.968'. [ 233.884818][ T9583] af_packet: tpacket_rcv: packet too big, clamped from 212 to 4294967272. macoff=96 [ 234.376666][ T5917] IPVS: starting estimator thread 0... [ 234.387458][ T9603] netlink: 'syz.3.971': attribute type 3 has an invalid length. [ 234.407112][ T9603] netlink: 666 bytes leftover after parsing attributes in process `syz.3.971'. [ 234.477887][ T9604] IPVS: using max 25 ests per chain, 60000 per kthread [ 234.718909][ T9612] sctp: [Deprecated]: syz.0.975 (pid 9612) Use of int in max_burst socket option deprecated. [ 234.718909][ T9612] Use struct sctp_assoc_value instead [ 234.810097][ T9614] macsec1: entered promiscuous mode [ 234.815389][ T9614] team0: entered promiscuous mode [ 234.866576][ T9614] team_slave_0: entered promiscuous mode [ 234.876902][ T9614] team_slave_1: entered promiscuous mode [ 234.894792][ T9614] bond0: entered promiscuous mode [ 234.907299][ T9614] bond_slave_0: entered promiscuous mode [ 234.913438][ T9614] bond_slave_1: entered promiscuous mode [ 234.951361][ T9614] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 234.977679][ T9614] batadv_slave_0: entered promiscuous mode [ 235.047576][ T9582] lo speed is unknown, defaulting to 1000 [ 235.861801][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.987'. [ 235.985015][ T9660] pim6reg: entered allmulticast mode [ 236.044072][ T9664] pim6reg: left allmulticast mode [ 236.371700][ T9640] lo speed is unknown, defaulting to 1000 [ 237.184559][ T9676] lo speed is unknown, defaulting to 1000 [ 237.768344][ T6928] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 237.776015][ T6928] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 237.811582][ T6928] hid-generic 0005:16BF:5505.0001: reserved main item tag 0xe [ 237.843765][ T9711] syz.3.999: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.887788][ T9711] CPU: 0 UID: 0 PID: 9711 Comm: syz.3.999 Not tainted syzkaller #0 PREEMPT(full) [ 237.887821][ T9711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.887835][ T9711] Call Trace: [ 237.887844][ T9711] [ 237.887854][ T9711] dump_stack_lvl+0x189/0x250 [ 237.887890][ T9711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.887916][ T9711] ? __pfx__printk+0x10/0x10 [ 237.887945][ T9711] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.887971][ T9711] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.888009][ T9711] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 237.888037][ T9711] warn_alloc+0x214/0x310 [ 237.888071][ T9711] ? stack_depot_save_flags+0x40/0x860 [ 237.888103][ T9711] ? __pfx_warn_alloc+0x10/0x10 [ 237.888138][ T9711] ? kasan_save_track+0x4f/0x80 [ 237.888164][ T9711] ? xskq_create+0x56/0x170 [ 237.888182][ T9711] ? xsk_init_queue+0xb0/0x110 [ 237.888198][ T9711] ? xsk_setsockopt+0x4dc/0x8d0 [ 237.888226][ T9711] ? do_sock_setsockopt+0x17c/0x1b0 [ 237.888247][ T9711] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 237.888269][ T9711] ? do_syscall_64+0xfa/0x3b0 [ 237.888289][ T9711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.888318][ T9711] __vmalloc_node_range_noprof+0x125/0x12f0 [ 237.888381][ T9711] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.888418][ T9711] ? __kasan_kmalloc+0x93/0xb0 [ 237.888448][ T9711] vmalloc_user_noprof+0xad/0xf0 [ 237.888473][ T9711] ? xskq_create+0xbf/0x170 [ 237.888490][ T9711] xskq_create+0xbf/0x170 [ 237.888513][ T9711] xsk_init_queue+0xb0/0x110 [ 237.888538][ T9711] xsk_setsockopt+0x4dc/0x8d0 [ 237.888569][ T9711] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.888600][ T9711] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.888634][ T9711] ? aa_sock_opt_perm+0xff/0x1b0 [ 237.888658][ T9711] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.888677][ T9711] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.888705][ T9711] do_sock_setsockopt+0x17c/0x1b0 [ 237.888730][ T9711] __x64_sys_setsockopt+0x13f/0x1b0 [ 237.888755][ T9711] do_syscall_64+0xfa/0x3b0 [ 237.888774][ T9711] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.888793][ T9711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.888813][ T9711] ? clear_bhb_loop+0x60/0xb0 [ 237.888835][ T9711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.888853][ T9711] RIP: 0033:0x7fbfc318ebe9 [ 237.888870][ T9711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.888885][ T9711] RSP: 002b:00007fbfc13f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.888905][ T9711] RAX: ffffffffffffffda RBX: 00007fbfc33c6090 RCX: 00007fbfc318ebe9 [ 237.888920][ T9711] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 237.888932][ T9711] RBP: 00007fbfc3211e19 R08: 0000000000000004 R09: 0000000000000000 [ 237.888944][ T9711] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.888956][ T9711] R13: 00007fbfc33c6128 R14: 00007fbfc33c6090 R15: 00007ffc89f15fe8 [ 237.888998][ T9711] [ 237.889041][ T9711] Mem-Info: [ 238.203126][ T9711] active_anon:5019 inactive_anon:0 isolated_anon:0 [ 238.203126][ T9711] active_file:3403 inactive_file:39904 isolated_file:0 [ 238.203126][ T9711] unevictable:768 dirty:111 writeback:0 [ 238.203126][ T9711] slab_reclaimable:11945 slab_unreclaimable:111964 [ 238.203126][ T9711] mapped:31428 shmem:1357 pagetables:1090 [ 238.203126][ T9711] sec_pagetables:0 bounce:0 [ 238.203126][ T9711] kernel_misc_reclaimable:0 [ 238.203126][ T9711] free:1302008 free_pcp:18667 free_cma:0 [ 238.228461][ T6928] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 238.334580][ T9711] Node 0 active_anon:20076kB inactive_anon:0kB active_file:13612kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125712kB dirty:440kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13100kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 238.417678][ T9711] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 238.496980][ T9711] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.531255][ T9714] fido_id[9714]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci4/hci4:200/report_descriptor': No such file or directory [ 238.563860][ T9711] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 238.633842][ T9718] __nla_validate_parse: 1 callbacks suppressed [ 238.633862][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 238.651703][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 238.651729][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 238.738580][ T9711] Node 0 DMA32 free:1307016kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20124kB inactive_anon:0kB active_file:13612kB inactive_file:157948kB unevictable:1536kB writepending:440kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:55376kB local_pcp:27692kB free_cma:0kB [ 238.786419][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 238.811274][ T9693] lo speed is unknown, defaulting to 1000 [ 238.817993][ T9711] lowmem_reserve[]: 0 0 1 1 1 [ 238.824019][ T9711] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 238.878029][ T9711] lowmem_reserve[]: 0 0 0 0 0 [ 238.882845][ T9711] Node 1 Normal free:3894884kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:9056kB free_cma:0kB [ 238.937088][ T9711] lowmem_reserve[]: 0 0 0 0 0 [ 238.941931][ T9711] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 238.955423][ T9711] Node 0 DMA32: 1209*4kB (UME) 313*8kB (UME) 358*16kB (UME) 460*32kB (UM) 211*64kB (UME) 71*128kB (UME) 4*256kB (ME) 17*512kB (UM) 16*1024kB (UME) 5*2048kB (ME) 298*4096kB (UM) = 1307340kB [ 238.986039][ T9711] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 239.013928][ T9711] Node 1 Normal: 193*4kB (UME) 54*8kB (UME) 43*16kB (UME) 112*32kB (UME) 38*64kB (UME) 7*128kB (UME) 2*256kB (M) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3894884kB [ 239.061082][ T9711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.075802][ T9711] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.103847][ T9711] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 239.145805][ T9711] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 239.164109][ T9711] 44910 total pagecache pages [ 239.169424][ T9711] 0 pages in swap cache [ 239.174218][ T9711] Free swap = 124996kB [ 239.192530][ T9711] Total swap = 124996kB [ 239.196845][ T9711] 2097051 pages RAM [ 239.212573][ T9711] 0 pages HighMem/MovableOnly [ 239.218757][ T9711] 425673 pages reserved [ 239.223064][ T9711] 0 pages cma reserved [ 239.831477][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1007'. [ 239.993326][ T9753] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 240.164211][ T9756] tipc: Enabled bearer , priority 0 [ 240.176180][ T9756] syzkaller0: entered promiscuous mode [ 240.196091][ T9756] syzkaller0: entered allmulticast mode [ 240.336027][ T9756] sch_fq: defrate 257 ignored. [ 240.362797][ T9756] tipc: Resetting bearer [ 240.396738][ T9755] tipc: Resetting bearer [ 240.450283][ T9755] tipc: Disabling bearer [ 240.484053][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1013'. [ 240.544571][ T9767] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 240.573194][ T9768] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1014'. [ 240.593276][ T9747] lo speed is unknown, defaulting to 1000 [ 240.814505][ T9774] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1016'. [ 240.912698][ T9781] tipc: Enabling of bearer rejected, failed to enable media [ 241.102776][ T9788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.471855][ T9801] gretap1: entered promiscuous mode [ 241.480121][ T9810] netlink: 'syz.3.1026': attribute type 6 has an invalid length. [ 241.760888][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 241.785418][ T9824] netlink: 'syz.4.1032': attribute type 15 has an invalid length. [ 241.851381][ T9824] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 241.861982][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.890221][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.906021][ T9824] netlink: 'syz.4.1032': attribute type 15 has an invalid length. [ 241.928980][ T49] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.952406][ T49] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.080194][ T9847] netlink: 'syz.3.1038': attribute type 4 has an invalid length. [ 242.120526][ T9848] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 242.366552][ T9861] netlink: 'syz.4.1040': attribute type 1 has an invalid length. [ 242.453225][ T9861] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.074515][ T9854] lo speed is unknown, defaulting to 1000 [ 243.663632][ T9911] syz_tun: entered allmulticast mode [ 243.678251][ T9916] netlink: 'syz.1.1051': attribute type 1 has an invalid length. [ 243.797947][ T9911] syz_tun: left allmulticast mode [ 243.905608][ T9923] __nla_validate_parse: 3 callbacks suppressed [ 243.905627][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 244.125641][ T9933] tipc: Can't bind to reserved service type 2 [ 244.398952][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1059'. [ 244.414853][ T9941] netlink: 'syz.4.1059': attribute type 1 has an invalid length. [ 244.729674][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1060'. [ 244.948914][ T9960] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1062'. [ 245.024043][ T55] block nbd0: Possible stuck request ffff888024e75080: control (read@0,1024B). Runtime 30 seconds [ 245.036613][ T55] block nbd0: Possible stuck request ffff888024e75240: control (read@1024,1024B). Runtime 30 seconds [ 245.048649][ T55] block nbd0: Possible stuck request ffff888024e75400: control (read@2048,1024B). Runtime 30 seconds [ 245.061171][ T55] block nbd0: Possible stuck request ffff888024e755c0: control (read@3072,1024B). Runtime 30 seconds [ 245.091645][ T9955] ip6tnl1: entered promiscuous mode [ 245.097765][ T9955] ip6tnl1: entered allmulticast mode [ 245.105325][ T9955] team0: Device ip6tnl1 is up. Set it down before adding it as a team port [ 245.129868][ T9903] lo speed is unknown, defaulting to 1000 [ 245.165785][ T9910] lo speed is unknown, defaulting to 1000 [ 245.174029][ T9963] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1064'. [ 245.920868][ T9928] lo speed is unknown, defaulting to 1000 [ 246.341084][ T9988] netlink: 'syz.2.1070': attribute type 6 has an invalid length. [ 247.588436][T10014] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1075'. [ 249.033338][ T9978] lo speed is unknown, defaulting to 1000 [ 249.219072][T10027] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 249.230538][T10027] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 249.272055][T10027] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 249.324473][T10025] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 249.344749][T10033] netlink: 'syz.3.1080': attribute type 1 has an invalid length. [ 249.368365][T10033] netlink: 'syz.3.1080': attribute type 3 has an invalid length. [ 249.376159][T10033] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1080'. [ 249.398397][T10025] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 249.428337][T10025] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 249.469292][T10033] tipc: Enabled bearer , priority 0 [ 249.605227][T10033] syzkaller0: entered promiscuous mode [ 249.627096][T10033] syzkaller0: entered allmulticast mode [ 249.693030][T10033] tipc: Resetting bearer [ 249.735894][T10032] tipc: Resetting bearer [ 249.801660][T10032] tipc: Disabling bearer [ 249.807670][T10056] netlink: 'syz.0.1084': attribute type 64 has an invalid length. [ 250.197669][T10037] lo speed is unknown, defaulting to 1000 [ 250.592065][T10083] netlink: 'syz.0.1093': attribute type 2 has an invalid length. [ 250.910246][T10090] IPVS: set_ctl: invalid protocol: 115 10.1.1.1:20000 [ 250.925650][T10090] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20003 [ 251.104691][T10100] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 251.222979][T10104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1098'. [ 251.232841][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 251.260516][T10105] bond0: (slave gretap0): Opening slave failed [ 251.282210][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.297541][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.711334][T10104] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.767104][T10104] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.915203][T10104] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.937802][T10104] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.074845][T10104] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.107089][T10104] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.145316][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1101'. [ 252.205757][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 252.370410][T10104] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.403523][T10104] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.514568][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 252.613034][ T7945] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.628082][ T7945] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.702360][ T7945] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.712317][ T7945] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.757294][ T7945] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.814233][ T7945] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.847819][T10155] netlink: 'syz.1.1110': attribute type 4 has an invalid length. [ 252.851315][ T7945] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.865960][T10154] netlink: 'syz.1.1110': attribute type 4 has an invalid length. [ 252.906048][ T7945] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.983752][T10160] netlink: 'syz.0.1112': attribute type 1 has an invalid length. [ 253.044549][T10160] bond3: entered promiscuous mode [ 253.052210][T10160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.123052][T10169] netlink: 'syz.3.1113': attribute type 2 has an invalid length. [ 253.126815][T10166] bond3: (slave bridge3): making interface the new active one [ 253.139749][T10166] bridge3: entered promiscuous mode [ 253.146314][T10166] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 253.155203][T10162] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1113'. [ 253.180372][T10162] netem: invalid attributes len -16 [ 253.185638][T10162] netem: change failed [ 253.244458][T10169] : entered promiscuous mode [ 253.654852][T10197] team0: entered promiscuous mode [ 253.857668][ T6930] IPVS: starting estimator thread 0... [ 253.957107][T10212] IPVS: using max 25 ests per chain, 60000 per kthread [ 254.014237][T10219] syz_tun: entered allmulticast mode [ 254.036631][T10219] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1127'. [ 254.054705][T10219] unsupported nlmsg_type 40 [ 254.214977][T10230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 254.240796][T10230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1129'. [ 254.572849][T10211] lo speed is unknown, defaulting to 1000 [ 254.964889][T10243] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1134'. [ 255.045941][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1134'. [ 255.087736][T10243] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 255.299003][T10218] lo speed is unknown, defaulting to 1000 [ 255.993179][T10227] lo speed is unknown, defaulting to 1000 [ 256.062391][T10269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1140'. [ 256.116832][T10273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1140'. [ 256.517909][T10280] tipc: Enabled bearer , priority 0 [ 256.711116][T10289] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1147'. [ 256.758945][T10286] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1147'. [ 256.771393][T10286] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1147'. [ 256.827782][T10294] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1147'. [ 256.848527][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1147'. [ 256.876046][T10287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.377406][T10299] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 257.425497][T10301] netlink: 'syz.0.1151': attribute type 4 has an invalid length. [ 257.484253][T10304] netlink: 'syz.0.1151': attribute type 4 has an invalid length. [ 257.571764][ T6927] lo speed is unknown, defaulting to 1000 [ 257.591090][ T5917] lo speed is unknown, defaulting to 1000 [ 257.644392][T10309] tipc: Enabled bearer , priority 0 [ 257.674574][T10309] syzkaller0: entered promiscuous mode [ 257.706161][T10309] syzkaller0: entered allmulticast mode [ 257.799354][T10309] tipc: Resetting bearer [ 257.824002][T10308] tipc: Resetting bearer [ 257.849901][T10308] tipc: Disabling bearer [ 258.025732][T10326] netlink: 'syz.2.1158': attribute type 13 has an invalid length. [ 258.034529][T10326] netlink: 'syz.2.1158': attribute type 17 has an invalid length. [ 258.125902][T10326] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.162528][T10326] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.243771][T10325] xfrm0: entered promiscuous mode [ 258.252720][T10325] xfrm0: entered allmulticast mode [ 258.414305][T10327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.519591][T10327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.783283][T10351] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 258.843982][T10351] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 259.135347][T10360] netlink: 'syz.3.1165': attribute type 2 has an invalid length. [ 259.406350][T10326] lo speed is unknown, defaulting to 1000 [ 260.013342][T10386] __nla_validate_parse: 3 callbacks suppressed [ 260.013362][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 260.045810][T10394] openvswitch: netlink: Key type 14086 is out of range max 32 [ 260.087157][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 260.123085][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 260.257986][T10397] dummy0: entered promiscuous mode [ 260.274280][T10397] batadv_slave_0: entered promiscuous mode [ 260.282784][T10397] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network [ 260.315909][T10397] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.344313][T10397] hsr1: entered allmulticast mode [ 260.394219][T10397] dummy0: entered allmulticast mode [ 260.403642][T10397] batadv_slave_0: entered allmulticast mode [ 260.737120][ T5871] Bluetooth: hci4: link tx timeout [ 260.742756][ T5871] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 260.753284][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1181'. [ 260.758438][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 260.787019][ T51] Bluetooth: hci4: link tx timeout [ 260.793615][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 260.804279][ T51] Bluetooth: hci4: link tx timeout [ 260.810669][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 261.476795][T10446] netlink: 'syz.1.1188': attribute type 10 has an invalid length. [ 261.488236][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1188'. [ 261.567295][T10446] dummy0: entered promiscuous mode [ 261.589416][T10446] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 261.634929][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1189'. [ 261.711885][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1189'. [ 261.722032][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1189'. [ 261.755284][T10411] lo speed is unknown, defaulting to 1000 [ 261.937352][T10456] nbd1: detected capacity change from 0 to 127 [ 261.958671][ T51] block nbd1: Receive control failed (result -32) [ 261.978803][ T9019] block nbd1: Dead connection, failed to find a fallback [ 261.986229][ T9019] block nbd1: shutting down sockets [ 262.012845][ T9019] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.023930][ T9019] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.057650][ T9019] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.066819][ T9019] Buffer I/O error on dev nbd1, logical block 1, async page read [ 262.080624][ T9019] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.090079][ T9019] Buffer I/O error on dev nbd1, logical block 2, async page read [ 262.098644][ T9019] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.107992][ T9019] Buffer I/O error on dev nbd1, logical block 3, async page read [ 262.115984][ T9019] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.154753][ T9019] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.163157][ T9019] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.179461][ T9019] Buffer I/O error on dev nbd1, logical block 1, async page read [ 262.188355][ T9019] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.198784][ T9019] Buffer I/O error on dev nbd1, logical block 2, async page read [ 262.220023][ T9019] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.230222][ T9019] Buffer I/O error on dev nbd1, logical block 3, async page read [ 262.266050][ T9019] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.275731][ T9019] Buffer I/O error on dev nbd1, logical block 0, async page read [ 262.305354][ T9019] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 262.326858][ T9019] Buffer I/O error on dev nbd1, logical block 1, async page read [ 262.354647][ T9019] ldm_validate_partition_table(): Disk read failed. [ 262.366709][ T9019] Dev nbd1: unable to read RDB block 0 [ 262.381985][ T9019] nbd1: unable to read partition table [ 262.411350][ T9019] ldm_validate_partition_table(): Disk read failed. [ 262.421224][ T9019] Dev nbd1: unable to read RDB block 0 [ 262.430345][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.442564][T10476] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.458733][ T9019] nbd1: unable to read partition table [ 262.466657][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.499132][T10474] tipc: Enabled bearer , priority 0 [ 262.562696][T10476] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.676796][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 262.722019][T10476] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.772105][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 262.802467][T10474] tipc: Disabling bearer [ 262.953174][T10476] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.153852][ T49] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.174316][ T49] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.224048][ T3149] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.265873][ T3149] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.368698][T10508] netlink: 'syz.2.1207': attribute type 9 has an invalid length. [ 264.492167][T10509] lo speed is unknown, defaulting to 1000 [ 265.014494][T10589] netlink: 'syz.0.1231': attribute type 18 has an invalid length. [ 265.040534][T10589] __nla_validate_parse: 3 callbacks suppressed [ 265.040555][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1231'. [ 265.141993][T10574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 265.169726][T10574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1229'. [ 265.204198][T10574] netlink: 'syz.3.1229': attribute type 4 has an invalid length. [ 265.501570][T10601] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 265.583521][T10605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1235'. [ 265.903951][T10617] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 265.942098][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 265.957842][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1238'. [ 265.974391][T10623] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 265.974454][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 265.994441][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1240'. [ 266.161998][T10630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'. [ 266.216119][ T7947] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.257382][ T7947] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.271281][ T7947] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.293918][ T7947] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.559873][T10645] FAULT_INJECTION: forcing a failure. [ 266.559873][T10645] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 266.621150][T10645] CPU: 1 UID: 0 PID: 10645 Comm: syz.4.1247 Not tainted syzkaller #0 PREEMPT(full) [ 266.621182][T10645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.621211][T10645] Call Trace: [ 266.621221][T10645] [ 266.621230][T10645] dump_stack_lvl+0x189/0x250 [ 266.621261][T10645] ? __pfx____ratelimit+0x10/0x10 [ 266.621283][T10645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.621310][T10645] ? __pfx__printk+0x10/0x10 [ 266.621352][T10645] should_fail_ex+0x414/0x560 [ 266.621387][T10645] _copy_to_user+0x31/0xb0 [ 266.621415][T10645] simple_read_from_buffer+0xe1/0x170 [ 266.621452][T10645] proc_fail_nth_read+0x1b3/0x220 [ 266.621480][T10645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.621508][T10645] ? rw_verify_area+0x2a6/0x4d0 [ 266.621534][T10645] ? __lock_acquire+0xab9/0xd20 [ 266.621562][T10645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.621588][T10645] vfs_read+0x200/0xa30 [ 266.621613][T10645] ? fdget_pos+0x247/0x320 [ 266.621637][T10645] ? __pfx___mutex_lock+0x10/0x10 [ 266.621662][T10645] ? __pfx_vfs_read+0x10/0x10 [ 266.621691][T10645] ? __fget_files+0x2a/0x420 [ 266.621715][T10645] ? __fget_files+0x3a0/0x420 [ 266.621731][T10645] ? __fget_files+0x2a/0x420 [ 266.621760][T10645] ksys_read+0x145/0x250 [ 266.621789][T10645] ? __pfx_ksys_read+0x10/0x10 [ 266.621813][T10645] ? rcu_is_watching+0x15/0xb0 [ 266.621840][T10645] ? do_syscall_64+0xbe/0x3b0 [ 266.621868][T10645] do_syscall_64+0xfa/0x3b0 [ 266.621890][T10645] ? lockdep_hardirqs_on+0x9c/0x150 [ 266.621912][T10645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.621932][T10645] ? clear_bhb_loop+0x60/0xb0 [ 266.621957][T10645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.621978][T10645] RIP: 0033:0x7fc974b8d5fc [ 266.621997][T10645] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 266.622015][T10645] RSP: 002b:00007fc975967030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.622044][T10645] RAX: ffffffffffffffda RBX: 00007fc974dc5fa0 RCX: 00007fc974b8d5fc [ 266.622059][T10645] RDX: 000000000000000f RSI: 00007fc9759670a0 RDI: 0000000000000005 [ 266.622072][T10645] RBP: 00007fc975967090 R08: 0000000000000000 R09: 0000000000000000 [ 266.622084][T10645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.622096][T10645] R13: 00007fc974dc6038 R14: 00007fc974dc5fa0 R15: 00007ffc4c06c3d8 [ 266.622132][T10645] [ 267.520061][T10671] tipc: Enabling of bearer rejected, failed to enable media [ 267.727131][T10683] netlink: 'syz.2.1258': attribute type 2 has an invalid length. [ 267.735468][T10683] netlink: 'syz.2.1258': attribute type 8 has an invalid length. [ 267.804027][T10685] IPVS: Unknown mcast interface: vcan0 [ 267.810891][T10684] IPVS: Unknown mcast interface: vcan0 [ 267.872339][T10687] macvtap1: entered promiscuous mode [ 267.880152][T10687] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 267.891610][T10687] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 268.482251][T10718] netlink: 'syz.4.1268': attribute type 13 has an invalid length. [ 268.494016][T10718] netlink: 'syz.4.1268': attribute type 17 has an invalid length. [ 268.591603][T10718] syz_tun: left promiscuous mode [ 268.652349][T10718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.673350][T10718] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.691946][T10718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.739584][T10724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.995125][T10721] lo speed is unknown, defaulting to 1000 [ 269.558683][T10737] netlink: 'syz.2.1273': attribute type 1 has an invalid length. [ 271.095289][T10766] netlink: 'syz.4.1279': attribute type 13 has an invalid length. [ 271.201889][T10761] syzkaller1: entered promiscuous mode [ 271.217831][T10761] syzkaller1: entered allmulticast mode [ 271.228121][T10766] netlink: 'syz.4.1279': attribute type 25 has an invalid length. [ 271.954449][T10792] __nla_validate_parse: 12 callbacks suppressed [ 271.954480][T10792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1283'. [ 271.979447][T10792] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1283'. [ 271.990708][T10797] syzkaller0: entered promiscuous mode [ 271.996231][T10797] syzkaller0: entered allmulticast mode [ 273.420595][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1296'. [ 273.435249][T10842] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1295'. [ 273.660425][T10853] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 273.782363][T10855] macsec1: entered promiscuous mode [ 273.791334][T10855] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 273.801931][T10855] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 273.823848][T10858] team0: No ports can be present during mode change [ 273.985118][T10864] netlink: 'syz.4.1303': attribute type 4 has an invalid length. [ 274.156124][T10876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1306'. [ 274.393423][T10892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'. [ 274.439570][T10891] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1312'. [ 274.473630][T10892] vlan3: entered allmulticast mode [ 274.480147][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'. [ 274.484778][T10892] bridge0: entered allmulticast mode [ 274.496415][T10892] bridge3: port 1(vlan3) entered blocking state [ 274.513625][T10892] bridge3: port 1(vlan3) entered disabled state [ 274.524969][T10892] vlan3: entered promiscuous mode [ 274.534842][T10892] bridge0: entered promiscuous mode [ 274.560907][T10892] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 275.037232][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1318'. [ 275.088491][ T55] block nbd0: Possible stuck request ffff888024e75080: control (read@0,1024B). Runtime 60 seconds [ 275.100008][ T55] block nbd0: Possible stuck request ffff888024e75240: control (read@1024,1024B). Runtime 60 seconds [ 275.111919][ T55] block nbd0: Possible stuck request ffff888024e75400: control (read@2048,1024B). Runtime 60 seconds [ 275.123884][ T55] block nbd0: Possible stuck request ffff888024e755c0: control (read@3072,1024B). Runtime 60 seconds [ 275.150584][T10924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1318'. [ 277.030620][T10902] __nla_validate_parse: 3 callbacks suppressed [ 277.030638][T10902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1315'. [ 277.180108][T10959] can: request_module (can-proto-4) failed. [ 277.199208][T10963] ip6gre2: entered allmulticast mode [ 277.446705][T10966] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1327'. [ 277.709233][T10934] lo speed is unknown, defaulting to 1000 [ 278.463255][T10983] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1332'. [ 278.532351][T10979] 8021q: adding VLAN 0 to HW filter on device bond7 [ 278.648538][T10982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 278.653646][T10979] netlink: 'syz.4.1331': attribute type 1 has an invalid length. [ 278.674099][T10982] bond7: (slave macvlan2): Enslaving as a backup interface with a down link [ 278.755312][T10984] vlan3: left promiscuous mode [ 278.783652][T10984] bridge0: left promiscuous mode [ 278.812183][T10984] bridge3: port 1(vlan3) entered disabled state [ 278.872688][T10984] bond7: (slave macvlan2): Releasing backup interface [ 279.156456][T11007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1337'. [ 279.296314][T11011] ip6gre1: entered allmulticast mode [ 279.420250][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 279.435864][T11017] netlink: 'syz.2.1341': attribute type 11 has an invalid length. [ 279.466221][T11017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1341'. [ 279.504236][T11020] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1342'. [ 279.507154][T11017] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1341'. [ 279.587500][T11024] netlink: 'syz.1.1344': attribute type 1 has an invalid length. [ 279.637645][T11026] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1341'. [ 279.764542][T11024] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.780085][T11023] bond7: option mode: unable to set because the bond device is up [ 279.805426][T11024] erspan0: entered allmulticast mode [ 279.819605][T11024] bond2: (slave erspan0): making interface the new active one [ 279.836321][T11024] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 279.897549][T11027] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 279.925694][T11029] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 279.972082][T11031] veth11: entered promiscuous mode [ 279.980622][ T49] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 280.005374][T11031] bond2: (slave veth11): Enslaving as an active interface with a down link [ 280.041080][T11023] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 280.143143][T11029] ip6tnl2: entered promiscuous mode [ 280.197011][T11029] ip6tnl2: entered allmulticast mode [ 280.223992][T11029] team0: Device ip6tnl2 is up. Set it down before adding it as a team port [ 280.258314][T11045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1349'. [ 280.334088][T11053] netlink: 'syz.1.1351': attribute type 10 has an invalid length. [ 280.750695][T11064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.845698][T11070] openvswitch: netlink: Key 6 has unexpected len 45 expected 2 [ 281.477988][T11091] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 281.841068][T11068] lo speed is unknown, defaulting to 1000 [ 282.279809][T11130] netlink: 'syz.0.1370': attribute type 1 has an invalid length. [ 282.423408][T11130] 8021q: adding VLAN 0 to HW filter on device bond4 [ 282.471290][T11124] bond4: (slave bridge0): making interface the new active one [ 282.482571][T11124] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 282.621457][T11124] bond4: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 282.876363][T11146] __nla_validate_parse: 2 callbacks suppressed [ 282.876385][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 282.912483][T11146] netlink: 'syz.2.1378': attribute type 12 has an invalid length. [ 283.013264][ T59] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.023853][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1378'. [ 283.035583][ T59] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.044838][T11146] netlink: 'syz.2.1378': attribute type 12 has an invalid length. [ 283.134760][ T59] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.178801][ T59] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.406479][T11179] team0: Mode "" not found [ 283.565787][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1388'. [ 283.599592][T11191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1388'. [ 283.609806][T11191] netlink: 'syz.2.1388': attribute type 14 has an invalid length. [ 283.618383][T11191] netlink: 'syz.2.1388': attribute type 13 has an invalid length. [ 283.630252][T11193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.648381][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1390'. [ 283.846976][T11202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1391'. [ 283.996618][T11217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1393'. [ 284.054066][T11222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1397'. [ 284.335651][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 284.359257][T11239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 286.102757][T11334] veth0: entered promiscuous mode [ 286.144798][T11333] veth0: left promiscuous mode [ 286.273413][T11336] nbd: must specify at least one socket [ 286.286882][T11316] lo speed is unknown, defaulting to 1000 [ 286.525557][T11343] netlink: 'syz.4.1425': attribute type 21 has an invalid length. [ 286.550513][T11343] netlink: 'syz.4.1425': attribute type 22 has an invalid length. [ 286.583642][T11343] netlink: 'syz.4.1425': attribute type 23 has an invalid length. [ 286.597452][T11343] netlink: 'syz.4.1425': attribute type 25 has an invalid length. [ 286.599284][T11344] netlink: 'syz.4.1425': attribute type 18 has an invalid length. [ 286.626127][T11343] netlink: 'syz.4.1425': attribute type 26 has an invalid length. [ 286.813510][T11321] lo speed is unknown, defaulting to 1000 [ 287.878396][T11361] tipc: Failed to remove unknown binding: 66,1,1/0:1685717603/1685717605 [ 287.972593][T11368] __nla_validate_parse: 13 callbacks suppressed [ 287.972617][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1431'. [ 288.058553][T11374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1433'. [ 288.721199][T11379] netlink: 'syz.0.1434': attribute type 12 has an invalid length. [ 288.733752][T11379] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1434'. [ 288.882734][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 288.985707][T11387] netlink: 'syz.2.1436': attribute type 2 has an invalid length. [ 289.585895][T11410] netlink: 'syz.3.1442': attribute type 31 has an invalid length. [ 289.699201][T11419] netlink: 'syz.1.1445': attribute type 1 has an invalid length. [ 289.707302][T11419] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1445'. [ 289.707895][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1446'. [ 290.150847][T11444] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 290.196364][T11445] tipc: Enabling of bearer rejected, failed to enable media [ 290.506379][T11459] netlink: 212160 bytes leftover after parsing attributes in process `syz.0.1453'. [ 290.940679][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1458'. [ 290.965608][T11473] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 290.976084][T11473] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 291.071324][T11482] can: request_module (can-proto-0) failed. [ 291.110790][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 291.184825][T11493] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1462'. [ 291.213155][T11493] batadv1: entered promiscuous mode [ 291.224435][T11493] batadv1: entered allmulticast mode [ 291.411155][T11500] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 291.744933][T11519] tipc: Enabled bearer , priority 0 [ 291.753959][T11519] syzkaller0: entered promiscuous mode [ 291.774851][T11519] syzkaller0: entered allmulticast mode [ 291.852797][T11519] tipc: Resetting bearer [ 291.893654][T11518] tipc: Resetting bearer [ 291.904921][T11526] siw: device registration error -23 [ 291.948196][T11518] tipc: Disabling bearer [ 292.399911][T11551] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 292.418010][T11553] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 292.504400][T11552] validate_nla: 3 callbacks suppressed [ 292.504419][T11552] netlink: 'syz.2.1480': attribute type 1 has an invalid length. [ 293.194874][T11586] __nla_validate_parse: 6 callbacks suppressed [ 293.194895][T11586] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1486'. [ 293.284625][T11589] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1487'. [ 293.306498][T11589] netlink: 'syz.2.1487': attribute type 1 has an invalid length. [ 293.444272][T11600] netlink: zone id is out of range [ 293.453392][T11600] netlink: zone id is out of range [ 293.460220][T11600] netlink: zone id is out of range [ 293.465846][T11600] netlink: zone id is out of range [ 293.473533][T11600] netlink: zone id is out of range [ 293.480347][T11600] netlink: zone id is out of range [ 293.485624][T11600] netlink: zone id is out of range [ 293.504919][T11600] netlink: zone id is out of range [ 293.520557][T11600] netlink: zone id is out of range [ 293.525646][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1491'. [ 293.641475][T11600] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003 [ 293.708538][T11605] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 293.714642][T11605] dvmrp1: linktype set to 768 [ 294.352966][T11614] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.361591][T11614] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.366573][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1500'. [ 294.409130][T11614] tipc: Resetting bearer [ 294.544842][T11614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.585795][T11614] tipc: Resetting bearer [ 294.636693][T11614] ipvlan0: left promiscuous mode [ 294.728406][T11614] xfrm1: left promiscuous mode [ 294.733277][T11614] xfrm1: left allmulticast mode [ 294.743152][T11614] gretap1: left promiscuous mode [ 294.756033][T11617] veth1_macvtap: entered allmulticast mode [ 294.779040][T11633] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 294.807086][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1500'. [ 294.887233][ T3149] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.912313][ T3149] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.931332][T11636] netlink: 'syz.1.1501': attribute type 21 has an invalid length. [ 294.957610][ T3149] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.981416][T11636] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1501'. [ 294.995474][ T3149] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.023749][ T3149] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.032915][ T3149] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.067391][T11640] syz.2.1502: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 295.087650][T11641] : renamed from veth0_to_bond [ 295.089832][T11640] CPU: 0 UID: 0 PID: 11640 Comm: syz.2.1502 Not tainted syzkaller #0 PREEMPT(full) [ 295.089867][T11640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.089883][T11640] Call Trace: [ 295.089893][T11640] [ 295.089904][T11640] dump_stack_lvl+0x189/0x250 [ 295.089943][T11640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.089973][T11640] ? __pfx__printk+0x10/0x10 [ 295.090008][T11640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.090037][T11640] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.090069][T11640] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 295.090100][T11640] warn_alloc+0x214/0x310 [ 295.090139][T11640] ? stack_depot_save_flags+0x40/0x860 [ 295.090187][T11640] ? __pfx_warn_alloc+0x10/0x10 [ 295.090227][T11640] ? kasan_save_track+0x4f/0x80 [ 295.090258][T11640] ? xskq_create+0x56/0x170 [ 295.090278][T11640] ? xsk_init_queue+0xb0/0x110 [ 295.090296][T11640] ? xsk_setsockopt+0x4dc/0x8d0 [ 295.090330][T11640] ? do_sock_setsockopt+0x17c/0x1b0 [ 295.090356][T11640] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 295.090379][T11640] ? do_syscall_64+0xfa/0x3b0 [ 295.090403][T11640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.090438][T11640] __vmalloc_node_range_noprof+0x125/0x12f0 [ 295.090511][T11640] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.090548][T11640] ? xskq_create+0x56/0x170 [ 295.090575][T11640] ? __kasan_kmalloc+0x93/0xb0 [ 295.090612][T11640] vmalloc_user_noprof+0xad/0xf0 [ 295.090649][T11640] ? xskq_create+0xbf/0x170 [ 295.090675][T11640] xskq_create+0xbf/0x170 [ 295.090702][T11640] xsk_init_queue+0xb0/0x110 [ 295.090727][T11640] xsk_setsockopt+0x4dc/0x8d0 [ 295.090768][T11640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.090803][T11640] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.090845][T11640] ? aa_sock_opt_perm+0xff/0x1b0 [ 295.090873][T11640] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 295.090899][T11640] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.090936][T11640] do_sock_setsockopt+0x17c/0x1b0 [ 295.090968][T11640] __x64_sys_setsockopt+0x13f/0x1b0 [ 295.091004][T11640] do_syscall_64+0xfa/0x3b0 [ 295.091030][T11640] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.091053][T11640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.091077][T11640] ? clear_bhb_loop+0x60/0xb0 [ 295.091106][T11640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.091130][T11640] RIP: 0033:0x7f2ceaf8ebe9 [ 295.091160][T11640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.091181][T11640] RSP: 002b:00007f2cebeb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.091206][T11640] RAX: ffffffffffffffda RBX: 00007f2ceb1c5fa0 RCX: 00007f2ceaf8ebe9 [ 295.091224][T11640] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 295.091238][T11640] RBP: 00007f2ceb011e19 R08: 0000000000000004 R09: 0000000000000000 [ 295.091254][T11640] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.091268][T11640] R13: 00007f2ceb1c6038 R14: 00007f2ceb1c5fa0 R15: 00007ffc3b45e9f8 [ 295.091310][T11640] [ 295.091320][T11640] Mem-Info: [ 295.413177][T11640] active_anon:5038 inactive_anon:0 isolated_anon:0 [ 295.413177][T11640] active_file:3403 inactive_file:39953 isolated_file:0 [ 295.413177][T11640] unevictable:768 dirty:241 writeback:0 [ 295.413177][T11640] slab_reclaimable:11982 slab_unreclaimable:113013 [ 295.413177][T11640] mapped:29358 shmem:1360 pagetables:1134 [ 295.413177][T11640] sec_pagetables:0 bounce:0 [ 295.413177][T11640] kernel_misc_reclaimable:0 [ 295.413177][T11640] free:1305628 free_pcp:15127 free_cma:0 [ 295.474198][T11636] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1501'. [ 295.510709][ T3149] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.530114][T11640] Node 0 active_anon:20052kB inactive_anon:0kB active_file:13612kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124332kB dirty:960kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13180kB pagetables:4196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.585378][ T3149] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.621695][T11648] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1506'. [ 295.630877][T11640] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 295.630940][T11640] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 295.631004][T11640] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 295.631052][T11640] Node 0 DMA32 free:1311700kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20100kB inactive_anon:0kB active_file:13612kB inactive_file:158044kB unevictable:1536kB writepending:960kB present:3129332kB managed:2557408kB mlocked:0kB bounce:0kB free_pcp:42428kB local_pcp:21816kB free_cma:0kB [ 295.631116][T11640] lowmem_reserve[]: 0 0 1 1 1 [ 295.631187][T11640] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 295.631248][T11640] lowmem_reserve[]: 0 0 0 0 0 [ 295.631296][T11640] Node 1 Normal free:3895140kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18656kB local_pcp:9856kB free_cma:0kB [ 295.631366][T11640] lowmem_reserve[]: 0 0 0 0 0 [ 295.812547][T11640] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.877448][T11640] Node 0 DMA32: 966*4kB (UME) 629*8kB (UME) 323*16kB (UME) 741*32kB (UME) 302*64kB (UME) 77*128kB (UME) 12*256kB (UME) 17*512kB (UME) 12*1024kB (UM) 2*2048kB (UE) 296*4096kB (UM) = 1307536kB [ 295.987297][T11640] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 296.029237][T11640] Node 1 Normal: 193*4kB (UME) 54*8kB (UME) 43*16kB (UME) 116*32kB (UME) 40*64kB (UME) 7*128kB (UME) 2*256kB (M) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895140kB [ 296.048882][T11640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.173273][T11640] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.207257][T11677] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 296.223824][T11640] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.263627][T11640] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.300320][T11640] 44714 total pagecache pages [ 296.305066][T11640] 0 pages in swap cache [ 296.362287][T11640] Free swap = 124996kB [ 296.383768][T11640] Total swap = 124996kB [ 296.391781][T11640] 2097051 pages RAM [ 296.395646][T11640] 0 pages HighMem/MovableOnly [ 296.459588][T11640] 425673 pages reserved [ 296.487721][T11640] 0 pages cma reserved [ 296.501968][T11692] netlink: 'syz.3.1513': attribute type 11 has an invalid length. [ 296.574788][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1514'. [ 296.794740][T11700] tipc: Enabled bearer , priority 0 [ 296.823663][T11700] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 296.861632][T11702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.862276][T11700] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 296.869037][T11702] IPv6: NLM_F_CREATE should be set when creating new route [ 296.898388][T11703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 296.906785][T11702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.054339][T11700] tipc: Resetting bearer [ 297.413725][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1523'. [ 297.413769][T11719] net_ratelimit: 2 callbacks suppressed [ 297.413784][T11719] IPv6: addrconf: prefix option has invalid lifetime [ 297.656819][T11671] lo speed is unknown, defaulting to 1000 [ 298.233334][T11744] bond3: entered promiscuous mode [ 298.238592][T11744] bond3: entered allmulticast mode [ 298.244376][T11744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 298.425379][T11755] netlink: 'syz.2.1534': attribute type 1 has an invalid length. [ 298.456415][T11753] __nla_validate_parse: 2 callbacks suppressed [ 298.456436][T11753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 298.554532][T11755] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 298.848821][T11712] lo speed is unknown, defaulting to 1000 [ 299.356822][T11781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.347611][T11804] tipc: Enabled bearer , priority 0 [ 300.381933][T11805] syzkaller0: entered promiscuous mode [ 300.400846][T11805] syzkaller0: entered allmulticast mode [ 300.491404][T11809] openvswitch: netlink: Missing key (keys=40, expected=80) [ 300.542711][T11809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1547'. [ 300.553808][T11809] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1547'. [ 300.681428][T11816] sit0: entered promiscuous mode [ 300.686598][T11816] netlink: 'syz.2.1549': attribute type 1 has an invalid length. [ 300.715943][T11816] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1549'. [ 300.844068][T11822] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 300.895649][T11822] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 300.917930][T11797] lo speed is unknown, defaulting to 1000 [ 301.114061][T11824] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1552'. [ 301.348345][T11819] lo speed is unknown, defaulting to 1000 [ 301.504081][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1556'. [ 301.522141][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1556'. [ 302.629387][T11858] ------------[ cut here ]------------ [ 302.635295][T11858] WARNING: CPU: 0 PID: 11858 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 302.647678][T11858] Modules linked in: [ 302.652020][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.3.1560 Not tainted syzkaller #0 PREEMPT(full) [ 302.662025][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 302.672810][T11858] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 302.680703][T11858] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1b b8 24 f7 4d 8b 36 4d 39 fe 74 22 e8 2e 44 c1 f6 e9 ef f8 ff ff e8 24 44 c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 16 44 c1 f6 e9 39 07 00 00 48 83 7c 24 [ 302.701488][T11858] RSP: 0018:ffffc900033c7220 EFLAGS: 00010287 [ 302.708177][T11858] RAX: ffffffff8afe7272 RBX: 0000000000000000 RCX: 0000000000080000 [ 302.716231][T11858] RDX: ffffc9000c434000 RSI: 00000000000033b7 RDI: 00000000000033b8 [ 302.724811][T11858] RBP: ffffc900033c73e0 R08: ffff8880285e5737 R09: 1ffff110050bcae6 [ 302.733459][T11858] R10: dffffc0000000000 R11: ffffed10050bcae7 R12: dffffc0000000000 [ 302.742293][T11858] R13: 0000000000000070 R14: ffff8880568528c0 R15: ffff8880568528c0 [ 302.750877][T11858] FS: 00007fbfc3f336c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 302.760419][T11858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.767951][T11858] CR2: 000020000048b000 CR3: 00000000772a8000 CR4: 00000000003526f0 [ 302.776078][T11858] Call Trace: [ 302.780154][T11858] [ 302.783168][T11858] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 302.790710][T11858] ? __pfx___might_resched+0x10/0x10 [ 302.796070][T11858] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 302.802700][T11858] __ieee80211_link_release_channel+0x33b/0x4a0 [ 302.809580][T11858] ieee80211_leave_mesh+0xc5/0x130 [ 302.814747][T11858] cfg80211_leave_mesh+0x293/0x800 [ 302.820077][T11858] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 302.826206][T11858] ? __lock_acquire+0xab9/0xd20 [ 302.831188][T11858] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 302.837847][T11858] ? __lock_acquire+0xab9/0xd20 [ 302.842856][T11858] ? do_raw_spin_lock+0x121/0x290 [ 302.848476][T11858] ? inetdev_event+0x464/0x15b0 [ 302.853513][T11858] ? igmp_netdev_event+0x7c/0x770 [ 302.859191][T11858] notifier_call_chain+0x1b3/0x3e0 [ 302.864360][T11858] __dev_close_many+0x106/0x6f0 [ 302.869759][T11858] ? __lock_acquire+0xab9/0xd20 [ 302.874684][T11858] ? __pfx___dev_close_many+0x10/0x10 [ 302.880658][T11858] ? __mutex_trylock_common+0x153/0x260 [ 302.886268][T11858] netif_close_many+0x225/0x410 [ 302.891829][T11858] ? __pfx_netif_close_many+0x10/0x10 [ 302.897886][T11858] ? __mutex_lock+0x335/0x1350 [ 302.902742][T11858] ? __lock_acquire+0xab9/0xd20 [ 302.908197][T11858] netif_close+0x158/0x210 [ 302.912663][T11858] ? __pfx_netif_close+0x10/0x10 [ 302.918367][T11858] ? __pfx___mutex_lock+0x10/0x10 [ 302.923454][T11858] dev_close+0x10a/0x220 [ 302.928402][T11858] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 302.934611][T11858] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 302.941393][T11858] cfg80211_rfkill_set_block+0x2d/0x50 [ 302.947435][T11858] rfkill_set_block+0x1d2/0x440 [ 302.952356][T11858] rfkill_fop_write+0x44b/0x570 [ 302.958100][T11858] ? __pfx_rfkill_fop_write+0x10/0x10 [ 302.963700][T11858] ? security_kernfs_init_security+0x240/0x290 [ 302.970517][T11858] ? rw_verify_area+0x255/0x4d0 [ 302.975546][T11858] ? __lock_acquire+0xab9/0xd20 [ 302.980989][T11858] ? __pfx_rfkill_fop_write+0x10/0x10 [ 302.986442][T11858] vfs_write+0x27b/0xb30 [ 302.991309][T11858] ? __pfx_vfs_write+0x10/0x10 [ 302.996135][T11858] ? __fget_files+0x2a/0x420 [ 303.001318][T11858] ? __fget_files+0x2a/0x420 [ 303.005952][T11858] ? __fget_files+0x3a0/0x420 [ 303.011220][T11858] ? __fget_files+0x2a/0x420 [ 303.015884][T11858] ksys_write+0x145/0x250 [ 303.020825][T11858] ? __pfx_ksys_write+0x10/0x10 [ 303.025734][T11858] ? rcu_is_watching+0x15/0xb0 [ 303.031106][T11858] ? do_syscall_64+0xbe/0x3b0 [ 303.035835][T11858] do_syscall_64+0xfa/0x3b0 [ 303.040938][T11858] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.046198][T11858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.052870][T11858] ? clear_bhb_loop+0x60/0xb0 [ 303.058166][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.064108][T11858] RIP: 0033:0x7fbfc318ebe9 [ 303.069251][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.089610][T11858] RSP: 002b:00007fbfc3f33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.098750][T11858] RAX: ffffffffffffffda RBX: 00007fbfc33c5fa0 RCX: 00007fbfc318ebe9 [ 303.106780][T11858] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 303.115364][T11858] RBP: 00007fbfc3211e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.123559][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.131892][T11858] R13: 00007fbfc33c6038 R14: 00007fbfc33c5fa0 R15: 00007ffc89f15fe8 [ 303.140003][T11858] [ 303.143180][T11858] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 303.150499][T11858] CPU: 0 UID: 0 PID: 11858 Comm: syz.3.1560 Not tainted syzkaller #0 PREEMPT(full) [ 303.159955][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.170052][T11858] Call Trace: [ 303.173387][T11858] [ 303.176355][T11858] dump_stack_lvl+0x99/0x250 [ 303.181054][T11858] ? __asan_memcpy+0x40/0x70 [ 303.185695][T11858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.191028][T11858] ? __pfx__printk+0x10/0x10 [ 303.195681][T11858] vpanic+0x281/0x750 [ 303.199706][T11858] ? __pfx__printk+0x10/0x10 [ 303.204348][T11858] ? __pfx_vpanic+0x10/0x10 [ 303.208981][T11858] ? is_bpf_text_address+0x26/0x2b0 [ 303.214242][T11858] panic+0xb9/0xc0 [ 303.218031][T11858] ? __pfx_panic+0x10/0x10 [ 303.222487][T11858] __warn+0x31b/0x4b0 [ 303.226497][T11858] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 303.233108][T11858] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 303.239740][T11858] report_bug+0x2be/0x4f0 [ 303.244345][T11858] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 303.251126][T11858] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 303.257854][T11858] ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0 [ 303.264457][T11858] handle_bug+0x84/0x160 [ 303.268742][T11858] exc_invalid_op+0x1a/0x50 [ 303.273260][T11858] asm_exc_invalid_op+0x1a/0x20 [ 303.278124][T11858] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 303.285334][T11858] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1b b8 24 f7 4d 8b 36 4d 39 fe 74 22 e8 2e 44 c1 f6 e9 ef f8 ff ff e8 24 44 c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 16 44 c1 f6 e9 39 07 00 00 48 83 7c 24 [ 303.304992][T11858] RSP: 0018:ffffc900033c7220 EFLAGS: 00010287 [ 303.311077][T11858] RAX: ffffffff8afe7272 RBX: 0000000000000000 RCX: 0000000000080000 [ 303.319145][T11858] RDX: ffffc9000c434000 RSI: 00000000000033b7 RDI: 00000000000033b8 [ 303.327221][T11858] RBP: ffffc900033c73e0 R08: ffff8880285e5737 R09: 1ffff110050bcae6 [ 303.335309][T11858] R10: dffffc0000000000 R11: ffffed10050bcae7 R12: dffffc0000000000 [ 303.343477][T11858] R13: 0000000000000070 R14: ffff8880568528c0 R15: ffff8880568528c0 [ 303.351568][T11858] ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0 [ 303.358857][T11858] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 303.365916][T11858] ? __pfx___might_resched+0x10/0x10 [ 303.371674][T11858] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 303.377681][T11858] __ieee80211_link_release_channel+0x33b/0x4a0 [ 303.383951][T11858] ieee80211_leave_mesh+0xc5/0x130 [ 303.389105][T11858] cfg80211_leave_mesh+0x293/0x800 [ 303.394359][T11858] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 303.400450][T11858] ? __lock_acquire+0xab9/0xd20 [ 303.405410][T11858] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 303.411929][T11858] ? __lock_acquire+0xab9/0xd20 [ 303.416808][T11858] ? do_raw_spin_lock+0x121/0x290 [ 303.421871][T11858] ? inetdev_event+0x464/0x15b0 [ 303.426832][T11858] ? igmp_netdev_event+0x7c/0x770 [ 303.431883][T11858] notifier_call_chain+0x1b3/0x3e0 [ 303.437014][T11858] __dev_close_many+0x106/0x6f0 [ 303.441890][T11858] ? __lock_acquire+0xab9/0xd20 [ 303.446792][T11858] ? __pfx___dev_close_many+0x10/0x10 [ 303.452199][T11858] ? __mutex_trylock_common+0x153/0x260 [ 303.457774][T11858] netif_close_many+0x225/0x410 [ 303.462731][T11858] ? __pfx_netif_close_many+0x10/0x10 [ 303.468126][T11858] ? __mutex_lock+0x335/0x1350 [ 303.472905][T11858] ? __lock_acquire+0xab9/0xd20 [ 303.477784][T11858] netif_close+0x158/0x210 [ 303.482210][T11858] ? __pfx_netif_close+0x10/0x10 [ 303.487158][T11858] ? __pfx___mutex_lock+0x10/0x10 [ 303.492198][T11858] dev_close+0x10a/0x220 [ 303.496459][T11858] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 303.502631][T11858] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 303.508802][T11858] cfg80211_rfkill_set_block+0x2d/0x50 [ 303.514273][T11858] rfkill_set_block+0x1d2/0x440 [ 303.519161][T11858] rfkill_fop_write+0x44b/0x570 [ 303.524052][T11858] ? __pfx_rfkill_fop_write+0x10/0x10 [ 303.529532][T11858] ? security_kernfs_init_security+0x240/0x290 [ 303.535709][T11858] ? rw_verify_area+0x255/0x4d0 [ 303.540580][T11858] ? __lock_acquire+0xab9/0xd20 [ 303.545538][T11858] ? __pfx_rfkill_fop_write+0x10/0x10 [ 303.551020][T11858] vfs_write+0x27b/0xb30 [ 303.555293][T11858] ? __pfx_vfs_write+0x10/0x10 [ 303.560089][T11858] ? __fget_files+0x2a/0x420 [ 303.564700][T11858] ? __fget_files+0x2a/0x420 [ 303.569304][T11858] ? __fget_files+0x3a0/0x420 [ 303.574004][T11858] ? __fget_files+0x2a/0x420 [ 303.578622][T11858] ksys_write+0x145/0x250 [ 303.582973][T11858] ? __pfx_ksys_write+0x10/0x10 [ 303.587835][T11858] ? rcu_is_watching+0x15/0xb0 [ 303.592613][T11858] ? do_syscall_64+0xbe/0x3b0 [ 303.597308][T11858] do_syscall_64+0xfa/0x3b0 [ 303.601824][T11858] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.607241][T11858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.613581][T11858] ? clear_bhb_loop+0x60/0xb0 [ 303.618282][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.624317][T11858] RIP: 0033:0x7fbfc318ebe9 [ 303.628827][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.648443][T11858] RSP: 002b:00007fbfc3f33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 303.656898][T11858] RAX: ffffffffffffffda RBX: 00007fbfc33c5fa0 RCX: 00007fbfc318ebe9 [ 303.664886][T11858] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000009 [ 303.672864][T11858] RBP: 00007fbfc3211e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.680843][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.688819][T11858] R13: 00007fbfc33c6038 R14: 00007fbfc33c5fa0 R15: 00007ffc89f15fe8 [ 303.696819][T11858] [ 303.700188][T11858] Kernel Offset: disabled [ 303.704523][T11858] Rebooting in 86400 seconds..