last executing test programs: 9.200569747s ago: executing program 4 (id=1497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000003c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003", 0x2d) 9.123871535s ago: executing program 4 (id=1499): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @private=0xa010101}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1, 0x9}], 0x2c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_int(r0, &(0x7f0000000240)=0x2, 0x12) 6.77828546s ago: executing program 4 (id=1505): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb70200f204000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222fdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db45aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681b6ecfd000000000000000000000000b1329c2a271c7a358af3f2342255498dc0c1eed55ff22d6a453dfdc692ec83b7a5cc66b8e72751f718b946505e75d1d67c243c2298ab70a353b0648172a74d98dc248d11d0c0c2c1dcfe372e41c7eca6fb0e7f7e9e29f1cf180c4502d4a9a5bf52e3a262f978cfdde456b0ee3cead2406e031e435a00398fa38b29eebc47ddce6efd12c91b0bb9e49971bdc76df9bbc70d982295b66377c8d27bd0aeaeae1cb8ac0d88f092987f40fa87737fb89876707ad221557a1e3505e3abe9e38ad6e4898294248a044151c84fb6e31c1f5d2bc552c5996c4741c50e945d35c7cc4fa6f51cde6f1233d2116ade97c9f1dfcfa20c000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) r2 = socket(0x840000000002, 0x3, 0x3) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000200)="82f57c000200000000000000000000000004acf3", 0x14}], 0x1}}], 0x1, 0x24004044) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000003200)={'ip6_vti0\x00', &(0x7f0000003180)={'ip6_vti0\x00', 0x0, 0x0, 0x4, 0x0, 0x0, 0x21, @empty, @empty, 0x0, 0x8000, 0x3, 0xfffffbff}}) 6.560240153s ago: executing program 4 (id=1506): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket(0x18, 0x5, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[], 0x8c}, 0x1, 0xba01}, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f00000000c0)="c80e63b54ce94a9d1e527a0220a3bd50233489c27731fc5984632b42885c3fcf8e4f78aa34140f21fd5b7b8647fc1f1c05f326da3dd663bcecf2308d0f1300033532d60df76b7f41f04b2a9fe451a84c408f5020de5027b51bae8c8bb5d6c263a95d34bf820ec65bf5c4ec59f1dbd6b5094d8e31910562a40140fecc277180fa38dc4fed2b12981b4e210d4518901169ff540d681d1e88cb", &(0x7f0000000180)=""/240}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0) 6.11428638s ago: executing program 0 (id=1511): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="c000000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800b000100677265746170000054000280050008005a000000080007000a01010008000100", @ANYBLOB="080014"], 0xc0}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1e, 0x9, 0x157, 0x3, 0x12422, 0x1, 0x4b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000001c0)={&(0x7f0000000000)="809ed482b59404b8f4d0fd9e2fd13044ec9ec5", &(0x7f0000000040)=""/127, &(0x7f00000000c0)="82b36000225790c6e0dc620ed185b6e25f0feecf5ea6b3780bc459ea8c27c558f0e0b8c8de40409e196130a9adf4cd55916e9889abe91ff2c6e51395ef69abee07d874c151087b3559d5d343cc8a5496fe19b79da706a22f91c60f5ccb960c68ae668c172219f32dc7a0cd120a767548c188338f6f008503e46c0949038746af068985914a1192071c676c03562e9a6d76237ea99fd436e0a974f76df56778094d945e02bfe7a4a3f5fbce4a9bdba545466cbdcd6b8b94f3715f929331531d75c2c8e68fc7739cad3360745df5381e", &(0x7f0000000240)="cd0f10790a233bca0aa2f9adde15bdcf9c1ef7f265fe878e19a0a1bdbd8e86b39ba1c2dd0f7921c39b2622ed88658b6101dd02f92a85993f1001b5df60fbb2f7e540bf2510f99cfa42c1f98426e66f07e4823772d90fe4cce2314e1801be311f6cce17d4aaced75da8f33bfe8949b663c785c603de73ae5428b7d395444fba87ef8751c5545f9a4e51653407eb4e741a55a2db20f5dfb2b67f045b67fb406986051454fcb6585d900695d7fb7c065a5a910fc7bca8411ac4021b", 0x7, r1}, 0x38) 5.956088574s ago: executing program 0 (id=1512): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0x47}, {0xc}}}]}]}, 0x48}}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034001"], 0xc0}}, 0x8040) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010001000000fedbdf250200000014000200620300643010000000000000000000000900010073797a32000008000000000000007a3100000000"], 0x40}}, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000440)=0x8, &(0x7f0000000480)=0x1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000010) recvmmsg$unix(r1, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000800)}}], 0x1, 0x20, 0x0) 4.932180931s ago: executing program 0 (id=1514): unshare(0x6a040000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}}], {0x14}}, 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x600) write(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x255, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1409, 0x1, 0x10}, 0x10}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={0x0, @phonet={0x23, 0x81, 0x9e, 0x3}, @isdn={0x22, 0xc, 0x0, 0x1, 0x9}, @nfc={0x27, 0x0, 0x0, 0x2}, 0x68e7, 0x0, 0x0, 0x0, 0x400, &(0x7f00000002c0)='veth0_to_hsr\x00', 0x4, 0x0, 0x7ff}) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3.375535903s ago: executing program 4 (id=1531): ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @loopback}, {0x1}, 0x4, {0x2, 0x4e21, @multicast2}, 'veth0\x00'}) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x200, 0x3, 0x4, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000180)=0x8) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x2, 0x80f5, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0xa}, @multicast1}, 0x10) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r4, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) (async) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000340)={0x0, "5e3b3e727586d126c14d2e6a93fc4c70"}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001340)={0x0, 0x1, 0x100}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000001740)={0x0, 0x0, 0x1, [0x8, 0x4, 0x2da, 0x4, 0xffffffff00000001], [0x7, 0x2, 0x9, 0xffffffffffffff80, 0x5ab, 0x10001, 0xdd, 0x958, 0x0, 0x2, 0x410, 0xc148, 0x1, 0xb, 0x1ff, 0x1, 0xa, 0x8000000000000000, 0x2, 0x9, 0x1, 0x100, 0x5, 0x5, 0x4d, 0x76e2, 0x3, 0x21, 0x0, 0xe4, 0x1, 0x0, 0x0, 0x8, 0x1cf7116c, 0x7398, 0x1, 0x7, 0x8, 0x6, 0x5, 0x3, 0x77, 0x101, 0x80000001, 0x5, 0xf, 0x8, 0x8, 0x6, 0x0, 0x2, 0x0, 0x9, 0x7f, 0x5, 0x48, 0xf6, 0x414, 0x845, 0x10000, 0xca, 0x10b, 0x9, 0xfff, 0x100010000000000, 0x8, 0x0, 0x8, 0x400, 0x7, 0xffffffffffffffff, 0xa9a8, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0x100, 0x7, 0x100000000, 0xd, 0x9ebb, 0x1, 0x800, 0x100, 0x0, 0x5, 0x2, 0x1, 0x67374746, 0x10000, 0x0, 0x1ff, 0x400, 0x5, 0x53f8, 0x3, 0x8000000000000001, 0x4, 0x10, 0x54e218cd, 0x354, 0x8, 0x3, 0xd79a, 0x3, 0x5, 0xb, 0x10000, 0x3, 0x200000, 0xa, 0x1, 0xe, 0x6, 0x2, 0x5, 0x4, 0x1, 0xfffffffffffffffb, 0x8001]}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001b80)={0x10, 0x3, {0x6, @struct={0x4, 0x6}, r5, 0x8, 0xfffffffffffeffff, 0x2, 0x32, 0xb, 0xc5, @usage=0x4, 0x6, 0x69, [0x7, 0x2, 0x3, 0x1, 0x1, 0x9]}, {0x3, @usage=0x1, r6, 0xd6f, 0x3, 0x8, 0xff, 0x8, 0x44, @struct={0x1000, 0xfffffffc}, 0xfff, 0xc20000, [0x9, 0xfc, 0x200, 0x8, 0xffffffff, 0x8]}, {0x9, @usage, r7, 0x8, 0x4, 0xcfca, 0x1, 0x792, 0x404, @struct={0x7, 0x7f}, 0x6, 0x0, [0x80000000, 0x3, 0xffff, 0x10000, 0x1, 0x5]}, {0x1, 0xd, 0x2867}}) (async) setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000001f80)={0x2, @remote, 0x4e24, 0x2, 'ovf\x00', 0x26, 0x9, 0x74}, 0x2c) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001fc0)={r1, 0x2, 0x2, 0x5}) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000002000), &(0x7f0000002040)=0xe) (async, rerun: 64) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000002100)={&(0x7f0000002080)=""/69, 0x45, 0x70, 0xfe}) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000002140)={0x9, {{0xa, 0x4e23, 0xfe, @dev={0xfe, 0x80, '\x00', 0x41}, 0xffffff4f}}, {{0xa, 0x4e24, 0xa, @mcast2, 0x4f}}}, 0x108) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r10, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x30, r0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x30}}, 0x1) (async, rerun: 32) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00000023c0), &(0x7f0000002400)=0x4) (async, rerun: 32) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002480), r10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r10, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x1c, r12, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r13, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x20, r12, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1598fa962e71d98e}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x40081) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f00000026c0)=0x0) (async) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004ec0)={0x0}, &(0x7f0000004f00)=0xc) sendmsg$netlink(r9, &(0x7f00000051c0)={&(0x7f0000002680)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc, &(0x7f0000004e40)=[{&(0x7f0000002700)={0x10ec, 0x29, 0x800, 0x70bd26, 0x25dfdbfe, "", [@typed={0x14, 0x72, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @generic="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", @nested={0x2e, 0x14, 0x0, 0x1, [@typed={0x8, 0xe2, 0x0, 0x0, @pid=r14}, @generic="024b7104770c79befd747e1745aa07c3be3ef6af10a621fd4797211ec4f9ef7345e6"]}, @generic="68ce203c1159f7cbb2aa7f50d211034d84a4814febd62d246ae61d541fcec92d0d4c662aa07af12e9010f1a94d5adaa29f7bedb87751bc25a980945de7e59b0355443d0db1594a59d44a4ccc68942b5f0c1336b626d194670291d7d5e5", @generic="f98dec26a3cbcb8b5684b04f80bf742a54634df34e35e709bfa6df69baedc5645ee97bb5f42ee61cfffe89e403a4e5d011cd0067da2030ed04"]}, 0x10ec}, {&(0x7f0000003800)={0x1c4, 0x14, 0x200, 0x70bd25, 0x25dfdbfb, "", [@typed={0x11, 0x14e, 0x0, 0x0, @str='802.15.4 MAC\x00'}, @generic="691c5dfa801319c4ba0763d244d5307425da949d2a37eb350bd0ed12c8803f6dd9c91a86bb302183b2f5450766718ccc9d0f7470ee9c3078cf7af0bcf706703e848e2c0b2e0a49772ac54b232be709e95b43b53bceda1768f6de811237ced60e81059e3d7dc231ff3fab8202edd848ecc7c3c48c285ab81161478d037d2158e162aea87b43f8bcb6a017f59e18a5", @generic="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", @nested={0x14, 0xb7, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x4c}, @nested={0x4, 0x71}]}]}, 0x1c4}, {&(0x7f0000003a00)={0xf0, 0x1f, 0x100, 0x70bd25, 0x25dfdbfd, "", [@nested={0x78, 0x11e, 0x0, 0x1, [@generic="1c0a0642f1f4fab20bd68734ad67e9007794fc0b113afb43266feb7b8d880d9a74cdd26301b853bb18bd2c4526089fcbc64b91c699d4b032fa37244e39ab4eafe9360891d7a77bdf1e4cf1e3b6387481022a914bd0286eefd6a53d3063aad2a3d24fdc02e1c3f4c30617f66e", @nested={0x4, 0x31}, @nested={0x4, 0x103}]}, @generic="86338393eedd6d615f469e74a8f3112d7fcd481dffeaa55c8dbdfb5277b44f10485882b9e8c25320e13783e7018c1009a2343f2223f2a33fd49bd473b4ace462090b6e28cf60a6f076ffa8793227ab0eb6c92b2a00bfe1f644a4898d04210922880f353c24b7"]}, 0xf0}, {&(0x7f0000003b00)={0x118, 0x3d, 0x800, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x100, 0x0, 0x0, @u32=0x3}, @nested={0xf4, 0x13, 0x0, 0x1, [@typed={0xe8, 0xbe, 0x0, 0x0, @binary="55d09b7bf8e1d57a960f7007d6bc129d6290eceaf992b550c76e1231e496bff9fab1dd6c6d2bc05f3fc98965b342b075c164fe5c1bdd0971daaf2b51404e47d5aebe72f70187d9a025e7d9689bf2da464393df059ab2aea8fc5447c2828d5d626b64dd6fd22c08a81b784254d3f328b1e5bc09f7a593909a72b106abe3048fb45a52f980be689dd92d4ad3b222fd26417a3414e99f0c9c4ed61f4633de7037abe008e88795edaeb1c441c542ad240eab39c1c14520bd26b24563da174538800a4fa0cca0f97308127f271554dc5a19900776ec7a6c181c641025b54de7ad57224737e3e8"}, @nested={0x4, 0x109}, @nested={0x4, 0x11b}]}, @typed={0xa, 0x88, 0x0, 0x0, @str='wpan3\x00'}]}, 0x118}, {&(0x7f0000003c40)={0x1018, 0x22, 0x100, 0x70bd28, 0x25dfdbfc, "", [@typed={0x8, 0xe7, 0x0, 0x0, @u32=0x4}, @generic="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"]}, 0x1018}, {&(0x7f0000004c80)={0x50, 0x3e, 0x400, 0x516, 0x25dfdbfc, "", [@nested={0x3f, 0xdb, 0x0, 0x1, [@typed={0x4, 0x56, 0x0, 0x0, @binary}, @nested={0x4, 0xfe}, @generic="18f2d0a8acbafa4e3c91e3a049e996edb5101f1b00d4cf81f8c77e05cad7cb13cefe8f871af1cd", @typed={0x8, 0x34, 0x0, 0x0, @u32=0x200}, @nested={0x4, 0xff}]}]}, 0x50}, {&(0x7f0000004d00)={0x118, 0x3c, 0x10, 0x70bd2d, 0x25dfdbfd, "", [@nested={0xbc, 0x45, 0x0, 0x1, [@nested={0x4, 0xa9}, @nested={0x4, 0xed}, @typed={0xb0, 0x26, 0x0, 0x0, @binary="d7ef16eaa3ca866772ac6d4f510fd37f2963d231d6db479ab4407fdbab60f79217f54731e72143123616f132dd89453f90bab66c44a3bb4428e630c3048ed6095b1f14679a410d528af8482323c0e1db798d3e43879a537eead26aeca232f06e4b80a3ece03775aaec01f462c61462c07a637258bfab575c96369c5dfe60e1fe52bbd6a2b048450ee7b20c8483557880080a430e0e4d40d0bc272907b12a3a58cebbf66444b1dc60aff46fc8"}]}, @generic="8781075a28615c1bcaafe2ce474197681d0a3c0503f5104f6ace792f8d38d79a756d99452ed8cccb46976f7799b7ef457255644c1ada07b8226ea2aa3f963a6c6d425c911fccdc412053af"]}, 0x118}], 0x7, &(0x7f0000005140)=[@cred={{0x1c, 0x1, 0x2, {r15, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}], 0x78, 0x1}, 0x80) 3.201139657s ago: executing program 4 (id=1533): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) unshare(0x6a040000) unshare(0x40000200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0}, 0x18) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x0, 0xea60}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) sendmsg(r1, 0x0, 0x40080) socket(0x10, 0x803, 0x0) 2.707581159s ago: executing program 0 (id=1537): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000080)=0xc, 0x4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) socket$inet(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x6, 0x0}, 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0x4, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], &(0x7f0000000300)='syzkaller\x00', 0x7, 0xf5, &(0x7f0000000640)=""/245, 0x41000, 0x9, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0x0, 0x4, 0x5}, 0x10, r5, 0x0, 0x0, &(0x7f0000000880)=[r3, r3, r3, r6], 0x0, 0x10, 0x80}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ae00000095000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x3, 0x7, 0x40000000000009}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xe, 0xd}, {0xa, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0x6c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) 2.53617345s ago: executing program 1 (id=1538): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="15abdf9ce90d70f5c9da80cc813ca02004a40c2a02d3d60d7e18377b8372b3c57f", 0x21) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x4000000) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0x1d8, r3, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x1a}}}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x28, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4a5920b9b604a315f65f63d88a1166fece939cd3fdbbabe9"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5c9f3742ee8a6ad4d63ed2f369d9a3e9e81ef5871088eafd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ba808baba74dc5f5def77f2f81d27c62948b7c1bf2c6194b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ea478da876730ba9936ff5b0901b40d53dea2c26721e11fa"}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "81b3d4a803074632d5b7291e91294eb9b76292467d738689"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d73214edb6ed65683f93ba5bc0696b8ac290fef255c75251"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "101dc76fc95a172b077c6dcd8ba0b8c2091047a6db6d84d2"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r1) (async) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r10}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.226866091s ago: executing program 3 (id=1540): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x37}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x4) socket$nl_route(0x10, 0x3, 0x0) 2.060356914s ago: executing program 3 (id=1541): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x25, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000a200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800020d8}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x1, 0xc97}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000240)="98c6a53744", 0x5}], 0x1) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000002000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000007fffffff, 0xfffffffffffffffc}, 0x0, 0x0) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10, 0x1000) listen(r4, 0xf5b) 2.060036029s ago: executing program 1 (id=1542): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0xffffffff, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0xa, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20004000) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 1.971804711s ago: executing program 1 (id=1543): socket$nl_generic(0x10, 0x3, 0x10) unshare(0x6020400) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', r1, 0x40, 0x1, 0x2, 0x9, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @local, @multicast2}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) 1.649662138s ago: executing program 0 (id=1545): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52", 0xa}], 0x1}], 0x1, 0x40800) splice(r6, 0x0, r4, 0x0, 0x9, 0x1200000000000000) recvmmsg(r3, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}, 0x18}, {{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f0000002700)=""/176, 0xb0}, {&(0x7f00000003c0)=""/23, 0x17}], 0x3}, 0x6}, {{&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000800)=""/114, 0x72}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000000880)=""/216, 0xd8}, {&(0x7f0000000980)=""/72, 0x48}], 0x4, &(0x7f0000000a40)=""/24, 0x18}, 0x18}, {{&(0x7f0000000a80)=@x25, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000c00)=""/118, 0x76}, {&(0x7f0000000c80)=""/46, 0x2e}, {&(0x7f0000000cc0)=""/198, 0xc6}], 0x4, &(0x7f0000000e00)=""/94, 0x5e}, 0x6}, {{&(0x7f0000000e80)=@sco={0x1f, @none}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000f00)=""/223, 0xdf}, {&(0x7f0000001000)=""/125, 0x7d}, {&(0x7f00000010c0)=""/223, 0xdf}], 0x3, &(0x7f0000001200)=""/176, 0xb0}, 0x401}, {{&(0x7f0000001340)=@llc, 0x80, &(0x7f0000002500)=[{&(0x7f0000002400)=""/140, 0x8c}, {&(0x7f00000024c0)=""/63, 0x3f}], 0x2, &(0x7f0000002540)=""/27, 0x1b}, 0xb6d}], 0x6, 0x10000, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008", @ANYRES8=0x0], 0x50) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1.213640128s ago: executing program 3 (id=1547): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xff05, 0x70bd29, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xffc1, 0x233c0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}}, 0x80) (fail_nth: 5) 899.520081ms ago: executing program 2 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000001f18020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 780.3013ms ago: executing program 1 (id=1549): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x8000000, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x60, 0x3, 0x1, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private0}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x8002}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80c0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010101}}) (async) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000080)={'pimreg\x00', {0x2, 0x4000, @private=0xa010101}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c02", @ANYRES16, @ANYRES16=r4], 0x21c}}, 0x800) (async, rerun: 32) r6 = getpid() (async, rerun: 32) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r7) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x14, r8, 0x72b}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd700000000000250000000e93ae006e657464657673696d8000000f0002006e6565406ef673696d30000008008b00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r11, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="93", 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000008400000007000000060001012a00050018000000000000008400000007000000ac1414bb00000000"], 0x30, 0xc4}, 0x6008045) (async) write$cgroup_pid(r4, &(0x7f00000006c0)=r6, 0x12) (async) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000016000000b30000007f00000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000003099427c574673000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18030000050000000000000000000000851000000600000018100000", @ANYRES32=r12, @ANYBLOB="0000000000000000e90000000000000018000000000000000000000000000000950000000000000064e30000000000009500000000000000526f166ccdc039319b22dfb23b910b490de5edb9fbd06479284ad1c5da05374518d800a620a0e070c7caa118fefe01278a19f35f8622b0bb798b6514875adc6069a0b714802ccad23734b52230043d72beb2c02efd23b8eb8d1c3310484674a22ac3b05adac5d383e366dbd32f6ade6315e4610532fc"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES8], 0x74}, 0x1, 0x0, 0x0, 0x11}, 0x4000000) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f00000002c0)={@empty}, 0x14) (rerun: 64) 701.272377ms ago: executing program 2 (id=1550): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000003c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d4120000000000000029000000030000000ac6", 0x32) (fail_nth: 1) 696.558801ms ago: executing program 3 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) pipe(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000017c0)={r3, r1, 0x8, 0x0, 0x0, 0x2, 0x80, 0x7fff, 0x2, 0x5, 0x1, 0x7, 'syz1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711037000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x4}, 0x94) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000340)={0x0, @aes128, 0x0, @desc3}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="04000000005602001c00128009000100626f6ee4000000000c00028005000e00080000000800040003000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000811}, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000003c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d4120000000000000029000000030000000ac6", 0x32) 403.82808ms ago: executing program 1 (id=1552): r0 = socket(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f4ffffff850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x22, 0xa, "206f2f8162beb4b5"}, @sack={0x5, 0x2}]}}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="000000000000000002004e20ffffffff000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8b628ac00000000"], 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x214, 0xd, 0x100, 0x1000}, 0x4, 0x0, 0x6, 0x0, 0x1, 0x26, 0x0, 0x1d, 0x5, 0x400, {0xfffffffc, 0x5, 0x0, 0x1, 0x5, 0x4}}}}]}, 0x78}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r7, 0x20, &(0x7f0000000380)={&(0x7f0000000440)=""/176, 0xb0, 0x0, &(0x7f0000000500)=""/67, 0x43}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0xa6, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) gettid() r8 = accept$unix(r0, &(0x7f0000000140), &(0x7f0000000280)=0x6e) sendmmsg$unix(r8, &(0x7f0000000940), 0x0, 0x8000) 376.55217ms ago: executing program 2 (id=1553): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000008c0)={{r0}, "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"}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bind$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0xc}}], 0x1, 0x24040890) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000008c0)={{r0}, "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"}) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) (async) bind$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) socket$unix(0x1, 0x1, 0x0) (async) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0xc}}], 0x1, 0x24040890) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03234e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) (async) 309.357125ms ago: executing program 2 (id=1554): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)={0x18, 0x2d, 0x9, 0x70bd26, 0x0, {0x4}, [@nested={0x4, 0x111}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) 242.357493ms ago: executing program 0 (id=1555): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = epoll_create1(0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x22) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x90000005}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000910435000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) epoll_pwait(r1, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) r6 = socket(0x200000000000011, 0x2, 0x0) r7 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r7, &(0x7f0000001b80)=[{{&(0x7f00000003c0)=@l2, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/46, 0x2e}], 0x1, &(0x7f0000000480)=""/171, 0xab}, 0x5}, {{&(0x7f0000000580)=@ax25={{0x3, @default}, [@rose, @remote, @netrom, @null, @default, @default, @rose]}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/131, 0x83}], 0x2, &(0x7f0000000900)=""/169, 0xa9}, 0x6}, {{&(0x7f0000001a00)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001a80)=""/57, 0x39}], 0x1, &(0x7f0000001b00)=""/117, 0x75}, 0xc}], 0x3, 0x40, &(0x7f0000001c40)) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) bind$packet(r6, &(0x7f0000000080)={0x11, 0x17, r8, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000180)={'veth0_to_batadv\x00', {0x2, 0x0, @broadcast}}) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002b00)=ANY=[@ANYBLOB="44000000100001000000000000", @ANYRESHEX, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000a0000de777185cb26eae46baf801c726d", @ANYRESHEX, @ANYRES16, @ANYBLOB="2ea3400713c15b942c21743e8dbe0513210bda6a597b3078d60b14400f4aa43821d4db4cf2cb63d08fdf29191fa58eac700e3d4394f759858dc40d8e212a47e631bf5e61c9bf7739be4be688540cd177346bab1d2c0096f55d2ca738a071c6ed635e9297e7507c419a2ff08146dc71497f83b0e8008da53d382b2feeae88d4e40d9dcb7f67deff52a68c9ff38e21003877a52fcc6ec34c45091714b1ebe7876653052d8a8df83d7be71c6c2dad107e0739c61cdb1c578cdd6d825fed58fce4112ac4537feb23db4ee3f5d22022089996c53f164bc6cd35725311e7a1a40000ad5462c6d91eb4d07c9d05e06b80f169fc96b48546bd3838ca8a9682cc59517dca587670e5e0ccc88afd773c98f648300a2e631aec16e42b8fa0919e08f0277a8437e7b37ea00cacdc9cdc479dd3eea063d6dd91192edbb3cee2955a555a5e98748adb6742a67e896379b6c3b3f8d79c68bbe53ac822fed01477f941dc3240ab47a850eba70dbdd60b296b3bc69e61efae023a36a26c1358a107db9b176555630ad0961c624e37a4d910df90c52a5d744f3a38e5f736563da89123550e86e1ef1f7c69e5b723ae8f3b67da0a50b1bf49a147febfd83ff74f1b89361a54767f8bddfe91571eb2cfe017ab15bb8bd46e18608fab9f967a3c949c3b5906d6cb500bd28795bfb419d4bc7dce8cd7d4dd7d1b37d0f46d43d4f68d7a360f6c398ee4dbca11ca584aae410136bb57145fd267e9cc51eca282daee1a84e2062ec02efe3d9ff885dfbf1e5f2b45378cb32d58ca28d66ebbb02f28251138460fd1c4dce7d29376101c220966c349c56f214def18000257b943a0bb2eb298caa9164fc4fd48cb0bfbed4e897d92fd35eb37ce9a3753cd5383ba45223e36ad163eab4a11429a1183dd87286dd0e4e78031f5bbbcf401d4190ed9b05aa8bd319d1e6eb1f07144a50f999aaeb6ae90fcf377acaa1a5759238b278611b8baa4ec680f13aac177adadffda96a729bb39e94a79b76031e7c80b61af7957ac580d1942da046913a95226fd5a2a07747a8e3a29db4c94f7cb898278b6612d786619c595e33dc2bc65e46e3dfd7efa3b11727596a23c1a4a0dec15902ea674a23b1f6fb91a446c5bb7791490a56b8ea6b63dfd7ab42651c8c79503de0fd0a58c53d17e561f2e582e58777c393495cfe4f8a1af3d267b51b545e46947fb57da5b41304edf483c7b9f6de25978c79f236c83b9af1007420d98f408762e25e80332b50d328ed4f427f615bc8bb406015a52cf1bd3895edb7f39b2a571ee14f6b504209fc67cdb864f1954698cb08150802fe40c37e761d166898cd9008b4961bcac87c207f53454deebc69e027476cf94cf8fc5cd57a3d6b10cb025afe7357c02bb815d41c4e6901db594f299a27d11c88f50311df8d2a02ec787f98d5ee351615db222205e7fe9d276e7eb06ec5d6e85dc07a1819f9f33ef8206062b6dfdd6bef28b2dfbabb1f6b299d5eaeaa6e84c58438252cb8574a619da731708bf303be6ca3b537857808af1a2d49a1c999dc4ea7948d1a00a2ef30cd649904871a67769c57172d8beaa6009369110f634a046061b5c78eba6f3a70fe2893934451b4a791187079bb63fc7710cd59401fc0de406625efa44be42014df21eeb2b4765352980640761e35b22b7660b451c810a36001bc76a64369d2976681a56c045f3210baee17cd7e1feb09564d157e5fc7897eb3a3e84f8f32c03ef163f93f1852ebbf1d2063cdb0b02ede8f4a7c1a88d6e5eead39f68de72b9a14d11b7690ba77c2e6c714d82ce3b668490a00b2d0826f891080fedae15980b29042ad00a762d726f263f80f30a90b34af4672fb3060603a5ff7a2b7477756212289a62e14b991f3ff9b0519b95a689ddb9c32d991562ea37b06058767d54a31582bd2b5712d3fbcb3c51920d668348f0b071bab8cd45efa1b37b38e6097afbc4aa1622a6a024da14e9413bcc3106eb5f02c65b9dc9d9b1a9f0304f848150dc909038a1d87210cdb2715934dc5163ed9b2fa5699a245fdc341a22211345885eadd7fd4a758d18d9e491424b164aac7319c8e34b73cf87e4168d8e67918dde230b498a6c48860ae47ccaa0477113cce754f904d3ca48f886890ec1edd9c63ae682269a9a18b0bd8323620a7266e5b9f909baa27a43198cf7fc5d507d8469300dcd0e1d790cb85288b53e8fd2f4a34aecea15cbc9d27eedfc073eb6044e4bad666457a58ddf9b3b82066081d76c395d0580c8bc8cfc83c9abe8cf49e16e946846b7a441bcbaf8f8b44c95628279d4fc3e768c69a931436f4180a844f313ad06b73873b778e625ca1cae933ea83492bb71ad5e80010c4d887132586b940651a6ac043a75de645df91597742b84c7db02dbce3265d3be7110d4b72cb92bd4e77f57f9717935b10bcad646fa8c94f9d2efe868e3690d40a92d5fe000eeba37bc3d5483fb511c7fb9ebd15e2815960347cca595181e1e6e4494efebde289b8c3056cd344617effe11ad2eb00972c84fbc225c9ee932e0b79abbf3843f2a75d79d83e36f72d5f83a890cad03aa3fcd546667e1a332df755f0831ea74f07d13cae7cf4edb01545fbb58ada9eed944f2e0594e9b4f59ff67366c0a9a6cdaffeab5dff3ff53917f2698a3fff717591dcbb0aafbedd757b06ec5e0f18abc5c82109811e02642a05c74205fb6df68c02838fda46151ab9fa26a7eec29701c28bfb320a9f5cd9947c1614da66dc86ae3a90729acdb8366c7670ff4c74831c5f8cda2011c7f185d8c5ebce5916cdc1108bfc792582f70076b2c3103f7fb6c8ac132739e74cdb4927f0510ae65834248213cbaec3ea89d564957efe6596a94c18f779a1753245d35cebaf7917e114661451305edef1df1fddab0b2145eeee248d22b860dd71acf349c34a76dcf73a085c68a40bf84109cac53bd48c8"], 0x44}}, 0x880) epoll_wait(r1, &(0x7f00000001c0)=[{}], 0x1, 0x80000001) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x1000, 0x0, 0x1d}}]}}]}, 0x14c}}, 0x0) connect$unix(r0, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e) 152.270389ms ago: executing program 3 (id=1556): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a30000000001400000002"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000600000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 144.062088ms ago: executing program 2 (id=1557): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800004, 0x12, r2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) 61.5263ms ago: executing program 2 (id=1558): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0xa, 0x9, 0xa6, @mcast2, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1, 0x40, 0x9, 0x2679eea6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000000000000000000000008540000022000000850000008b00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 323.051µs ago: executing program 3 (id=1559): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x3000c81c) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff1, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x10001}}]}, 0x38}}, 0x4008000) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00e9009d56c4268401a16532ce73a6873a00000000aafad0dc55adb363b0000005000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r8, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/21, 0x15}, 0x4b73}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r7, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 0s ago: executing program 1 (id=1560): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000001118020000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): backup interface [ 120.885542][ T7280] netlink: 'syz.3.323': attribute type 10 has an invalid length. [ 120.887117][ T7272] team0: Port device C removed [ 120.982603][ T7272] team0: Port device team_slave_1 removed [ 120.993885][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.002351][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.011851][ T7272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.025414][ T7272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.044283][ T7272] bond0: (slave wlan0): Releasing backup interface [ 121.068618][ T7272] bond0: (slave wlan1): Releasing backup interface [ 121.079894][ T7272] bond1: (slave ip6gretap1): Releasing backup interface [ 121.099947][ T7274] geneve2: entered promiscuous mode [ 121.115213][ T7274] geneve2: entered allmulticast mode [ 121.136975][ T7280] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 121.155453][ T7280] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 121.170935][ T7273] erspan0: entered promiscuous mode [ 121.190414][ T7273] erspan0: left promiscuous mode [ 121.246539][ T6020] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 121.256292][ T6020] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 121.269126][ T6020] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 121.362031][ T6020] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 121.473156][ T7305] netlink: 'syz.3.331': attribute type 4 has an invalid length. [ 121.529571][ T7307] block nbd0: not configured, cannot reconfigure [ 121.752382][ T7305] __nla_validate_parse: 11 callbacks suppressed [ 121.752402][ T7305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.331'. [ 121.967495][ T7325] sctp: [Deprecated]: syz.1.337 (pid 7325) Use of int in maxseg socket option. [ 121.967495][ T7325] Use struct sctp_assoc_value instead [ 122.038651][ T7327] sctp: [Deprecated]: syz.1.338 (pid 7327) Use of int in max_burst socket option deprecated. [ 122.038651][ T7327] Use struct sctp_assoc_value instead [ 122.067647][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.336'. [ 122.635673][ T7350] netlink: 'syz.0.342': attribute type 21 has an invalid length. [ 122.644742][ T7350] netlink: 128 bytes leftover after parsing attributes in process `syz.0.342'. [ 122.673368][ T7350] netlink: 'syz.0.342': attribute type 4 has an invalid length. [ 122.681197][ T7350] netlink: 'syz.0.342': attribute type 3 has an invalid length. [ 122.736261][ T7350] netlink: 3 bytes leftover after parsing attributes in process `syz.0.342'. [ 122.864009][ T7362] netlink: 84 bytes leftover after parsing attributes in process `syz.1.347'. [ 123.021278][ T5184] Bluetooth: hci4: command 0x0405 tx timeout [ 123.290169][ T7379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 123.376177][ T7381] netlink: 40 bytes leftover after parsing attributes in process `syz.0.353'. [ 123.388160][ T30] audit: type=1800 audit(1756913865.906:3): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.353" name="blkio.bfq.time_recursive" dev="tmpfs" ino=452 res=0 errno=0 [ 123.458155][ T7382] netlink: 64 bytes leftover after parsing attributes in process `syz.0.353'. [ 123.598852][ T7390] netlink: 410 bytes leftover after parsing attributes in process `syz.0.355'. [ 123.699511][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.356'. [ 123.775861][ T6023] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.788257][ T6023] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.810195][ T6023] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.827090][ T6023] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.022279][ T7415] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 124.934683][ T7446] netlink: 'syz.2.369': attribute type 2 has an invalid length. [ 125.021144][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 125.029265][ C0] lec:lec_tx_timeout: lec0 [ 125.041104][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 125.758416][ T7465] pimreg: entered allmulticast mode [ 125.772311][ T7466] geneve3: entered promiscuous mode [ 125.941030][ T30] audit: type=1107 audit(1756913868.446:4): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 125.964259][ T30] audit: type=1107 audit(1756913868.446:5): pid=7472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 126.209447][ T7482] veth3: entered promiscuous mode [ 126.221327][ T7484] nbd: must specify at least one socket [ 126.345127][ T7489] sctp: [Deprecated]: syz.4.382 (pid 7489) Use of int in maxseg socket option. [ 126.345127][ T7489] Use struct sctp_assoc_value instead [ 126.360429][ T7459] netlink: 'syz.2.374': attribute type 13 has an invalid length. [ 126.389834][ T7459] netlink: 'syz.2.374': attribute type 17 has an invalid length. [ 126.407921][ T7459] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 126.723903][ T7499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.836533][ T7501] dvmrp8: entered allmulticast mode [ 127.121669][ T7507] Bluetooth: MGMT ver 1.23 [ 127.732166][ T7552] __nla_validate_parse: 7 callbacks suppressed [ 127.732185][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.398'. [ 127.827199][ T7551] syzkaller0: entered promiscuous mode [ 127.833022][ T7551] syzkaller0: entered allmulticast mode [ 128.199957][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 128.244685][ T7560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.402'. [ 128.326502][ T7564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.401'. [ 128.335672][ T7564] netlink: 100 bytes leftover after parsing attributes in process `syz.1.401'. [ 128.345115][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 128.423034][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.1.401'. [ 129.567754][ T7577] nbd: must specify a size in bytes for the device [ 129.637901][ T7580] tipc: Enabled bearer , priority 0 [ 129.656001][ T7580] tipc: Resetting bearer [ 129.663416][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'. [ 129.702218][ T7582] syzkaller0: entered promiscuous mode [ 129.707742][ T7582] syzkaller0: entered allmulticast mode [ 129.717198][ T7579] tipc: Disabling bearer [ 129.731566][ T7585] syzkaller1: entered promiscuous mode [ 129.737120][ T7585] syzkaller1: entered allmulticast mode [ 129.991721][ C1] af_packet: tpacket_rcv: packet too big, clamped from 38 to 4294967286. macoff=82 [ 130.054852][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 130.060131][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.412'. [ 130.062954][ C0] lec:lec_tx_timeout: lec0 [ 131.764285][ T7602] veth0: entered promiscuous mode [ 131.769612][ T7602] veth0: left promiscuous mode [ 131.859321][ T7612] netlink: 'syz.4.416': attribute type 10 has an invalid length. [ 131.929991][ T7615] netlink: 'syz.4.416': attribute type 10 has an invalid length. [ 131.953079][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.965700][ T7612] bond0: (slave team0): Enslaving as an active interface with an up link [ 132.048846][ T7615] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 132.189677][ T7616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.204688][ T7619] batadv1: entered promiscuous mode [ 132.948224][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.954843][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.964101][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 133.183661][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 133.244413][ T7620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 133.378641][ T2946] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.415038][ T2946] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.455285][ T2946] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.480664][ T2946] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.543797][ T7643] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 133.700147][ T7651] syz_tun: entered promiscuous mode [ 133.720497][ T7651] batadv_slave_0: entered promiscuous mode [ 133.735617][ T7651] hsr1: entered allmulticast mode [ 133.750728][ T7651] syz_tun: entered allmulticast mode [ 133.760615][ T7651] batadv_slave_0: entered allmulticast mode [ 133.845670][ T7661] netlink: 'syz.2.429': attribute type 21 has an invalid length. [ 133.860537][ T7661] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 133.869043][ T7661] netlink: 144 bytes leftover after parsing attributes in process `syz.2.429'. [ 134.008359][ T7667] netlink: 212280 bytes leftover after parsing attributes in process `syz.2.431'. [ 134.112173][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 134.189628][ T7672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.433'. [ 134.663460][ T6017] syzkaller0: tun_net_xmit 76 [ 134.670865][ T6017] syzkaller0: tun_net_xmit 48 [ 134.691369][ T5924] syzkaller0: tun_net_xmit 76 [ 134.714124][ T7704] bond0: (slave wlan1): Releasing backup interface [ 134.746673][ T7700] rdma_op ffff88802886c9f0 conn xmit_rdma 0000000000000000 [ 136.993330][ T7743] netlink: 2 bytes leftover after parsing attributes in process `syz.3.453'. [ 137.156454][ T7751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'. [ 137.350027][ T7760] netlink: 24 bytes leftover after parsing attributes in process `syz.4.457'. [ 137.567610][ T7770] netlink: 'syz.0.458': attribute type 13 has an invalid length. [ 137.576907][ T7770] netlink: 'syz.0.458': attribute type 17 has an invalid length. [ 137.619401][ T7770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.640641][ T7772] openvswitch: netlink: Flow actions attr not present in new flow. [ 137.695843][ T7766] xfrm0: entered promiscuous mode [ 137.701343][ T7766] xfrm0: entered allmulticast mode [ 137.927131][ T7784] netlink: 44 bytes leftover after parsing attributes in process `syz.2.463'. [ 137.981089][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 137.989195][ C0] lec:lec_tx_timeout: lec0 [ 138.135681][ T7784] team0: Port device team_slave_0 removed [ 138.403744][ T7804] raw_sendmsg: syz.4.469 forgot to set AF_INET. Fix it! [ 138.430847][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 138.451802][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 138.464425][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 138.489636][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 138.529699][ T7819] netlink: 3 bytes leftover after parsing attributes in process `syz.2.472'. [ 138.557651][ T7819] batadv1: entered promiscuous mode [ 138.579874][ T7819] batadv1: entered allmulticast mode [ 138.637140][ T7822] netlink: 'syz.4.473': attribute type 30 has an invalid length. [ 138.671551][ T7826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.475'. [ 138.791715][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 138.861170][ T5862] Bluetooth: hci4: command 0x0405 tx timeout [ 139.135621][ T7850] netlink: 'syz.2.479': attribute type 4 has an invalid length. [ 139.150847][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 139.186361][ T7850] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 139.197609][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.2.479 Not tainted syzkaller #0 PREEMPT(full) [ 139.197635][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.197645][ T7850] Call Trace: [ 139.197653][ T7850] [ 139.197660][ T7850] dump_stack_lvl+0x189/0x250 [ 139.197689][ T7850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.197710][ T7850] ? __pfx__printk+0x10/0x10 [ 139.197740][ T7850] ? kernfs_path_from_node+0x2f/0x290 [ 139.197760][ T7850] ? kernfs_path_from_node+0x250/0x290 [ 139.197778][ T7850] ? kernfs_path_from_node+0x2f/0x290 [ 139.197800][ T7850] sysfs_warn_dup+0x8e/0xa0 [ 139.197819][ T7850] sysfs_do_create_link_sd+0xc0/0x110 [ 139.197842][ T7850] device_add_class_symlinks+0x1cf/0x240 [ 139.197865][ T7850] device_add+0x475/0xb50 [ 139.197890][ T7850] wiphy_register+0x1ba6/0x28d0 [ 139.197936][ T7850] ? __pfx_wiphy_register+0x10/0x10 [ 139.197954][ T7850] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 139.197984][ T7850] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 139.198011][ T7850] ieee80211_register_hw+0x3425/0x4080 [ 139.198051][ T7850] ? ieee80211_register_hw+0x13f1/0x4080 [ 139.198081][ T7850] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 139.198107][ T7850] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 139.198140][ T7850] ? __hrtimer_setup+0x187/0x210 [ 139.198155][ T7850] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 139.198184][ T7850] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 139.198242][ T7850] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 139.198264][ T7850] ? trace_kmalloc+0x1f/0xd0 [ 139.198283][ T7850] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 139.198305][ T7850] ? kstrndup+0xbf/0x160 [ 139.198334][ T7850] hwsim_new_radio_nl+0xea4/0x1b10 [ 139.198360][ T7850] ? __pfx___nla_validate_parse+0x10/0x10 [ 139.198401][ T7850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 139.198435][ T7850] ? __nla_parse+0x40/0x60 [ 139.198460][ T7850] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 139.198491][ T7850] genl_family_rcv_msg_doit+0x215/0x300 [ 139.198520][ T7850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 139.198561][ T7850] ? bpf_lsm_capable+0x9/0x20 [ 139.198581][ T7850] ? security_capable+0x7e/0x2e0 [ 139.198614][ T7850] genl_rcv_msg+0x60e/0x790 [ 139.198643][ T7850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.198663][ T7850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 139.198702][ T7850] netlink_rcv_skb+0x205/0x470 [ 139.198718][ T7850] ? __lock_acquire+0xab9/0xd20 [ 139.198742][ T7850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.198764][ T7850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.198803][ T7850] ? down_read+0x1ad/0x2e0 [ 139.198824][ T7850] genl_rcv+0x28/0x40 [ 139.198840][ T7850] netlink_unicast+0x82c/0x9e0 [ 139.198872][ T7850] ? __pfx_netlink_unicast+0x10/0x10 [ 139.198903][ T7850] ? netlink_sendmsg+0x642/0xb30 [ 139.198920][ T7850] ? skb_put+0x11b/0x210 [ 139.198943][ T7850] netlink_sendmsg+0x805/0xb30 [ 139.198971][ T7850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.198992][ T7850] ? aa_sock_msg_perm+0xf1/0x1d0 [ 139.199008][ T7850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.199027][ T7850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.199046][ T7850] __sock_sendmsg+0x219/0x270 [ 139.199074][ T7850] ____sys_sendmsg+0x505/0x830 [ 139.199101][ T7850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.199128][ T7850] ? import_iovec+0x74/0xa0 [ 139.199152][ T7850] ___sys_sendmsg+0x21f/0x2a0 [ 139.199175][ T7850] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.199237][ T7850] ? __fget_files+0x2a/0x420 [ 139.199252][ T7850] ? __fget_files+0x3a0/0x420 [ 139.199279][ T7850] __x64_sys_sendmsg+0x19b/0x260 [ 139.199300][ T7850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 139.199331][ T7850] ? rcu_is_watching+0x15/0xb0 [ 139.199355][ T7850] ? do_syscall_64+0xbe/0x3b0 [ 139.199379][ T7850] do_syscall_64+0xfa/0x3b0 [ 139.199397][ T7850] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.199415][ T7850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.199433][ T7850] ? clear_bhb_loop+0x60/0xb0 [ 139.199455][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.199472][ T7850] RIP: 0033:0x7fafd8d8ebe9 [ 139.199489][ T7850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.199503][ T7850] RSP: 002b:00007fafd9bc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.199521][ T7850] RAX: ffffffffffffffda RBX: 00007fafd8fc5fa0 RCX: 00007fafd8d8ebe9 [ 139.199534][ T7850] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f [ 139.199545][ T7850] RBP: 00007fafd8e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 139.199554][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.199564][ T7850] R13: 00007fafd8fc6038 R14: 00007fafd8fc5fa0 R15: 00007fffc1ad2888 [ 139.199596][ T7850] [ 139.674826][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 139.886979][ T7856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.482'. [ 140.051460][ T7867] tun0: tun_chr_ioctl cmd 1074025673 [ 140.103410][ T7872] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 140.299682][ T7865] bond3 (unregistering): Released all slaves [ 142.256611][ T7940] bridge_slave_0: left allmulticast mode [ 142.271047][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.321943][ T7940] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 143.531080][ T7997] __nla_validate_parse: 7 callbacks suppressed [ 143.531097][ T7997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.522'. [ 143.768109][ T8008] netlink: 516 bytes leftover after parsing attributes in process `syz.1.524'. [ 143.852162][ T8011] netlink: 516 bytes leftover after parsing attributes in process `syz.1.524'. [ 143.853749][ T8012] netlink: 'syz.2.525': attribute type 21 has an invalid length. [ 143.880275][ T8012] IPv6: NLM_F_CREATE should be specified when creating new route [ 143.931553][ T8012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.939119][ T8012] IPv6: NLM_F_CREATE should be set when creating new route [ 143.946470][ T8012] IPv6: NLM_F_CREATE should be set when creating new route [ 143.953749][ T8012] IPv6: NLM_F_CREATE should be set when creating new route [ 146.205339][ T8116] netlink: 16 bytes leftover after parsing attributes in process `syz.1.547'. [ 146.210728][ T8114] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 146.289095][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.548'. [ 146.328073][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 146.507482][ T8137] tipc: Started in network mode [ 146.513517][ T8137] tipc: Node identity cacbcbeeb6ef, cluster identity 4711 [ 146.521416][ T8137] tipc: Enabled bearer , priority 0 [ 146.529452][ T8137] syzkaller0: entered promiscuous mode [ 146.539542][ T8137] syzkaller0: entered allmulticast mode [ 146.560345][ T8137] tipc: Resetting bearer [ 146.583192][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.555'. [ 146.949566][ T8136] tipc: Resetting bearer [ 147.010700][ T8136] tipc: Disabling bearer [ 147.144980][ T8152] netlink: 156 bytes leftover after parsing attributes in process `syz.4.558'. [ 147.290624][ T8164] netlink: 64 bytes leftover after parsing attributes in process `syz.3.563'. [ 147.452015][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.565'. [ 147.587749][ T8179] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 147.653235][ T8179] netlink: 'syz.3.567': attribute type 10 has an invalid length. [ 148.186565][ T8200] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 148.879523][ T8230] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 148.886328][ T8230] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 149.028036][ T8235] __nla_validate_parse: 5 callbacks suppressed [ 149.028075][ T8235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.583'. [ 149.046067][ T8236] netlink: 'syz.3.583': attribute type 27 has an invalid length. [ 149.057220][ T8236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.583'. [ 149.396568][ T8258] netlink: 3 bytes leftover after parsing attributes in process `syz.2.587'. [ 149.421353][ T8258] 0ªX¹¦À: renamed from caif0 [ 149.461180][ T8258] 0ªX¹¦À: entered allmulticast mode [ 149.481092][ T8258] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 149.560268][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 150.146538][ T8277] netlink: 'syz.3.598': attribute type 12 has an invalid length. [ 150.155836][ T8279] batadv_slave_1: entered promiscuous mode [ 150.166135][ T8278] batadv_slave_1: left promiscuous mode [ 150.244737][ T8283] netlink: 68 bytes leftover after parsing attributes in process `syz.3.600'. [ 150.278747][ T8285] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 150.325231][ T8285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.343091][ T8285] ip6erspan0: entered promiscuous mode [ 150.352583][ T8285] bond2: (slave ip6erspan0): making interface the new active one [ 150.363712][ T8285] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 150.385723][ T8285] tipc: Enabled bearer , priority 0 [ 150.395856][ T8285] syzkaller0: entered promiscuous mode [ 150.401483][ T8285] syzkaller0: entered allmulticast mode [ 150.435855][ T8284] tipc: Resetting bearer [ 150.468127][ T8284] tipc: Disabling bearer [ 150.753836][ T8302] netlink: 256 bytes leftover after parsing attributes in process `syz.3.606'. [ 150.763033][ T8302] netlink: 48 bytes leftover after parsing attributes in process `syz.3.606'. [ 150.791962][ T8302] lo speed is unknown, defaulting to 1000 [ 150.805514][ T8302] lo speed is unknown, defaulting to 1000 [ 150.823468][ T8302] lo speed is unknown, defaulting to 1000 [ 150.898681][ T8313] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.609'. [ 150.965943][ T8309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.015514][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 151.328611][ T8302] infiniband syz0: set active [ 151.333933][ T8302] infiniband syz0: added lo [ 151.349769][ T24] lo speed is unknown, defaulting to 1000 [ 151.357151][ T24] syz0: Port: 1 Link ACTIVE [ 151.411502][ T8302] RDS/IB: syz0: added [ 151.430268][ T8302] smc: adding ib device syz0 with port count 1 [ 151.441640][ T8302] smc: ib device syz0 port 1 has pnetid [ 151.463522][ T24] lo speed is unknown, defaulting to 1000 [ 151.474133][ T8302] lo speed is unknown, defaulting to 1000 [ 151.895444][ T8350] netlink: 'syz.1.620': attribute type 1 has an invalid length. [ 151.997454][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.1.621'. [ 152.019780][ T8302] lo speed is unknown, defaulting to 1000 [ 152.398958][ T8344] lo speed is unknown, defaulting to 1000 [ 152.672349][ T8302] lo speed is unknown, defaulting to 1000 [ 152.827498][ T8380] netlink: 'syz.4.629': attribute type 5 has an invalid length. [ 152.848819][ T8380] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.951696][ T8302] lo speed is unknown, defaulting to 1000 [ 153.095634][ T8378] lo speed is unknown, defaulting to 1000 [ 153.244313][ T8302] lo speed is unknown, defaulting to 1000 [ 153.789965][ T8395] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 154.115247][ T8410] __nla_validate_parse: 2 callbacks suppressed [ 154.115264][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 154.456300][ T8437] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 154.644726][ T8452] netlink: 'syz.3.651': attribute type 2 has an invalid length. [ 154.850202][ T8461] netlink: 'syz.4.655': attribute type 2 has an invalid length. [ 154.917111][ T8468] netlink: 36 bytes leftover after parsing attributes in process `syz.1.656'. [ 155.135228][ T8455] tipc: Can't bind to reserved service type 1 [ 155.235805][ T8483] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 155.238403][ T8480] IPVS: stopping backup sync thread 8483 ... [ 155.277225][ T8482] lo speed is unknown, defaulting to 1000 [ 155.514854][ T8490] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 156.143937][ T8505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.665'. [ 156.309103][ T8508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.665'. [ 156.318194][ T8508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.665'. [ 156.328271][ T8508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.665'. [ 156.345520][ T8508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.665'. [ 156.426902][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'. [ 156.864985][ T8533] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 156.998329][ T8531] IPVS: Scheduler module ip_vs_sip not found [ 157.058254][ T8526] IPVS: length: 141 != 8 [ 157.241347][ T8550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.679'. [ 157.324836][ T8550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.397376][ T5945] lo speed is unknown, defaulting to 1000 [ 157.406912][ T8548] lo speed is unknown, defaulting to 1000 [ 158.139960][ T8570] netlink: 'syz.4.684': attribute type 4 has an invalid length. [ 158.161876][ T8572] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 158.177779][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 158.205379][ T8572] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 158.225313][ T8570] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 158.233473][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz.4.684 Not tainted syzkaller #0 PREEMPT(full) [ 158.233499][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.233509][ T8570] Call Trace: [ 158.233515][ T8570] [ 158.233523][ T8570] dump_stack_lvl+0x189/0x250 [ 158.233553][ T8570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.233574][ T8570] ? __pfx__printk+0x10/0x10 [ 158.233603][ T8570] ? kernfs_path_from_node+0x2f/0x290 [ 158.233621][ T8570] ? kernfs_path_from_node+0x250/0x290 [ 158.233638][ T8570] ? kernfs_path_from_node+0x2f/0x290 [ 158.233661][ T8570] sysfs_warn_dup+0x8e/0xa0 [ 158.233680][ T8570] sysfs_do_create_link_sd+0xc0/0x110 [ 158.233702][ T8570] device_add_class_symlinks+0x1cf/0x240 [ 158.233724][ T8570] device_add+0x475/0xb50 [ 158.233747][ T8570] wiphy_register+0x1ba6/0x28d0 [ 158.233784][ T8570] ? __pfx_wiphy_register+0x10/0x10 [ 158.233802][ T8570] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 158.233833][ T8570] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 158.233859][ T8570] ieee80211_register_hw+0x3425/0x4080 [ 158.233898][ T8570] ? ieee80211_register_hw+0x13f1/0x4080 [ 158.233929][ T8570] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 158.233955][ T8570] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.233985][ T8570] ? __hrtimer_setup+0x187/0x210 [ 158.234000][ T8570] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 158.234028][ T8570] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 158.234080][ T8570] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 158.234101][ T8570] ? trace_kmalloc+0x1f/0xd0 [ 158.234121][ T8570] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 158.234142][ T8570] ? kstrndup+0xbf/0x160 [ 158.234170][ T8570] hwsim_new_radio_nl+0xea4/0x1b10 [ 158.234194][ T8570] ? __pfx___nla_validate_parse+0x10/0x10 [ 158.234230][ T8570] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 158.234265][ T8570] ? __nla_parse+0x40/0x60 [ 158.234289][ T8570] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 158.234317][ T8570] genl_family_rcv_msg_doit+0x215/0x300 [ 158.234348][ T8570] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 158.234383][ T8570] ? bpf_lsm_capable+0x9/0x20 [ 158.234415][ T8570] ? security_capable+0x7e/0x2e0 [ 158.234449][ T8570] genl_rcv_msg+0x60e/0x790 [ 158.234478][ T8570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.234498][ T8570] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 158.234539][ T8570] netlink_rcv_skb+0x205/0x470 [ 158.234555][ T8570] ? __lock_acquire+0xab9/0xd20 [ 158.234579][ T8570] ? __pfx_genl_rcv_msg+0x10/0x10 [ 158.234601][ T8570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.234645][ T8570] ? down_read+0x1ad/0x2e0 [ 158.234668][ T8570] genl_rcv+0x28/0x40 [ 158.234687][ T8570] netlink_unicast+0x82c/0x9e0 [ 158.234721][ T8570] ? __pfx_netlink_unicast+0x10/0x10 [ 158.234746][ T8570] ? netlink_sendmsg+0x642/0xb30 [ 158.234762][ T8570] ? skb_put+0x11b/0x210 [ 158.234785][ T8570] netlink_sendmsg+0x805/0xb30 [ 158.234813][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.234835][ T8570] ? aa_sock_msg_perm+0xf1/0x1d0 [ 158.234854][ T8570] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.234871][ T8570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.234886][ T8570] __sock_sendmsg+0x219/0x270 [ 158.234911][ T8570] ____sys_sendmsg+0x505/0x830 [ 158.234936][ T8570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.234964][ T8570] ? import_iovec+0x74/0xa0 [ 158.234988][ T8570] ___sys_sendmsg+0x21f/0x2a0 [ 158.235012][ T8570] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.235075][ T8570] ? __fget_files+0x2a/0x420 [ 158.235090][ T8570] ? __fget_files+0x3a0/0x420 [ 158.235118][ T8570] __x64_sys_sendmsg+0x19b/0x260 [ 158.235142][ T8570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.235174][ T8570] ? rcu_is_watching+0x15/0xb0 [ 158.235198][ T8570] ? do_syscall_64+0xbe/0x3b0 [ 158.235220][ T8570] do_syscall_64+0xfa/0x3b0 [ 158.235237][ T8570] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.235252][ T8570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.235273][ T8570] ? clear_bhb_loop+0x60/0xb0 [ 158.235296][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.235313][ T8570] RIP: 0033:0x7fa546f8ebe9 [ 158.235330][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.235344][ T8570] RSP: 002b:00007fa547e63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.235363][ T8570] RAX: ffffffffffffffda RBX: 00007fa5471c5fa0 RCX: 00007fa546f8ebe9 [ 158.235375][ T8570] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f [ 158.235386][ T8570] RBP: 00007fa547011e19 R08: 0000000000000000 R09: 0000000000000000 [ 158.235405][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.235416][ T8570] R13: 00007fa5471c6038 R14: 00007fa5471c5fa0 R15: 00007ffc124467a8 [ 158.235450][ T8570] [ 158.919564][ T8577] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 159.194214][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.689'. [ 159.295076][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'. [ 159.495050][ T8588] netlink: 'syz.2.690': attribute type 21 has an invalid length. [ 159.518921][ T8588] ipvlan2: entered promiscuous mode [ 159.554457][ T8588] bridge0: port 1(ipvlan2) entered blocking state [ 159.585881][ T8588] bridge0: port 1(ipvlan2) entered disabled state [ 159.614932][ T8588] ipvlan2: entered allmulticast mode [ 159.641049][ T8588] gretap0: entered allmulticast mode [ 159.652737][ T8588] ipvlan2: left allmulticast mode [ 159.670783][ T8588] gretap0: left allmulticast mode [ 159.696182][ T8604] netlink: 'syz.4.694': attribute type 1 has an invalid length. [ 160.514239][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 160.539555][ T8605] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 160.565131][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 160.705064][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 160.746654][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 160.816256][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 160.849438][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 160.863547][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 160.944225][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 161.148378][ T8638] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 161.397881][ T8651] netlink: 'syz.3.706': attribute type 1 has an invalid length. [ 162.222002][ T8692] netlink: 'syz.2.721': attribute type 1 has an invalid length. [ 162.310019][ T8695] !: renamed from dummy0 (while UP) [ 162.365777][ T8695] lo speed is unknown, defaulting to 1000 [ 163.436177][ T8750] macsec0: entered allmulticast mode [ 163.451394][ T8750] veth1_macvtap: entered allmulticast mode [ 164.427759][ T8783] __nla_validate_parse: 43 callbacks suppressed [ 164.427778][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.746'. [ 164.498644][ T8811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 164.541397][ T8812] netlink: 'syz.4.754': attribute type 13 has an invalid length. [ 164.549160][ T8812] netlink: 'syz.4.754': attribute type 17 has an invalid length. [ 164.685493][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 164.697925][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 164.757625][ T8812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.850245][ T8812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.625780][ T8845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 166.890222][ T8855] tipc: Started in network mode [ 166.901414][ T8863] netlink: 96 bytes leftover after parsing attributes in process `syz.3.767'. [ 166.908668][ T8855] tipc: Node identity 42453781f0a3, cluster identity 4711 [ 166.919852][ T8855] tipc: Enabled bearer , priority 0 [ 166.922733][ T8862] netlink: 96 bytes leftover after parsing attributes in process `syz.3.767'. [ 166.939431][ T8864] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 166.970528][ T8868] netlink: 'syz.2.768': attribute type 13 has an invalid length. [ 166.992184][ T8868] netlink: 'syz.2.768': attribute type 17 has an invalid length. [ 167.009441][ T8864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.179315][ T8870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.188894][ T8870] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 167.201453][ T8870] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 167.254639][ T8864] veth5: entered promiscuous mode [ 167.265338][ T8864] bond2: (slave veth5): Enslaving as an active interface with a down link [ 167.300892][ T8872] lo speed is unknown, defaulting to 1000 [ 167.345788][ T8859] tipc: Disabling bearer [ 167.474865][ T8892] 8021q: VLANs not supported on ip6gre0 [ 167.481896][ T8892] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 167.787528][ T8902] netlink: 'syz.4.779': attribute type 5 has an invalid length. [ 167.800301][ T8902] netlink: 'syz.4.779': attribute type 7 has an invalid length. [ 167.807124][ T8900] lo speed is unknown, defaulting to 1000 [ 167.865127][ T8902] : entered promiscuous mode [ 168.251935][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802929d000: rx timeout, send abort [ 168.262016][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802929d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 168.377552][ T8914] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 168.392895][ T8914] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 168.490337][ T8918] lo speed is unknown, defaulting to 1000 [ 168.641080][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.3.783'. [ 168.657202][ T8930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 168.681437][ T8930] netlink: 32 bytes leftover after parsing attributes in process `syz.4.786'. [ 168.865217][ T8914] vlan2: entered allmulticast mode [ 168.890583][ T8914] veth1: entered allmulticast mode [ 169.062226][ T8939] lo speed is unknown, defaulting to 1000 [ 169.607331][ T8960] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.642047][ T8960] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.750258][ T8960] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.774848][ T8960] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.905019][ T8960] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.931743][ T8960] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.032598][ T8973] openvswitch: netlink: Missing valid actions attribute. [ 170.040062][ T8973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.060379][ T8960] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.074292][ T8960] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.389496][ T2946] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.419615][ T2946] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.510777][ T8987] erspan0: entered promiscuous mode [ 170.533467][ T2946] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.558488][ T2946] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.608135][ T970] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.622269][ T970] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.697410][ T970] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.712485][ T970] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.907634][ T8994] lo speed is unknown, defaulting to 1000 [ 171.104652][ T9015] __nla_validate_parse: 7 callbacks suppressed [ 171.104914][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.813'. [ 171.249307][ T9022] netlink: 'syz.4.812': attribute type 1 has an invalid length. [ 171.329154][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.812'. [ 171.355271][ T8998] lo speed is unknown, defaulting to 1000 [ 171.378748][ T9024] netlink: 32 bytes leftover after parsing attributes in process `syz.4.812'. [ 171.439991][ T9024] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 171.452333][ T9024] gretap1: entered promiscuous mode [ 171.535894][ T9033] netlink: 165 bytes leftover after parsing attributes in process `syz.0.817'. [ 171.582698][ T9027] netlink: 256 bytes leftover after parsing attributes in process `syz.3.815'. [ 171.615036][ T9027] netlink: 48 bytes leftover after parsing attributes in process `syz.3.815'. [ 171.750618][ T9048] sctp: [Deprecated]: syz.0.821 (pid 9048) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.750618][ T9048] Use struct sctp_sack_info instead [ 171.780173][ T9027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.839055][ T9051] netlink: 48 bytes leftover after parsing attributes in process `syz.0.821'. [ 172.199018][ T9061] tipc: Enabled bearer , priority 0 [ 172.210311][ T9063] syzkaller0: entered promiscuous mode [ 172.241105][ T9063] syzkaller0: entered allmulticast mode [ 172.408669][ T9061] tipc: Resetting bearer [ 172.431413][ T9056] tipc: Resetting bearer [ 172.456933][ T9056] tipc: Disabling bearer [ 194.387225][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.394693][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.403028][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 196.464756][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 196.467110][ T5868] Bluetooth: hci0: command 0x080f tx timeout [ 196.471136][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 196.481010][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 199.430457][ T9077] openvswitch: netlink: IP tunnel dst address not specified [ 199.435126][ T9081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.833'. [ 199.479532][ T9080] netlink: 48 bytes leftover after parsing attributes in process `syz.1.832'. [ 199.498686][ T9077] can: request_module (can-proto-0) failed. [ 199.529079][ T9086] netlink: 'syz.4.835': attribute type 6 has an invalid length. [ 199.552692][ T9077] netlink: 24 bytes leftover after parsing attributes in process `syz.0.831'. [ 199.572964][ T9077] openvswitch: netlink: Flow key attr not present in new flow. [ 199.583800][ T920] IPVS: starting estimator thread 0... [ 199.611967][ T9077] vlan2: entered promiscuous mode [ 199.617275][ T9077] vlan2: entered allmulticast mode [ 199.624733][ T9077] hsr_slave_1: entered allmulticast mode [ 199.638620][ T9086] tipc: Enabled bearer , priority 0 [ 199.656229][ T9086] syzkaller0: entered promiscuous mode [ 199.662120][ T9086] syzkaller0: entered allmulticast mode [ 199.675150][ T9077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 199.691504][ T9091] IPVS: using max 32 ests per chain, 76800 per kthread [ 199.893826][ T9101] tipc: Resetting bearer [ 199.914034][ T9082] tipc: Resetting bearer [ 199.970812][ T9082] tipc: Disabling bearer [ 199.981032][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 199.989061][ C0] lec:lec_tx_timeout: lec0 [ 200.053747][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 200.064012][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 200.103270][ T9108] netlink: 'syz.1.841': attribute type 18 has an invalid length. [ 200.177215][ T9121] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'. [ 200.193962][ T9119] lo speed is unknown, defaulting to 1000 [ 200.514472][ T9131] netlink: 136 bytes leftover after parsing attributes in process `syz.0.848'. [ 201.438275][ T9174] netlink: 788 bytes leftover after parsing attributes in process `syz.1.859'. [ 201.471986][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 201.599767][ T9175] netlink: 'syz.4.857': attribute type 11 has an invalid length. [ 201.796372][ T9185] lo speed is unknown, defaulting to 1000 [ 202.147123][ T9199] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.185104][ T9199] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.300046][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 202.311943][ T9204] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 202.324686][ T9204] team0: Failed to send options change via netlink (err -105) [ 202.334328][ T9204] team0: Port device batadv1 added [ 202.392624][ T9199] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.404742][ T9199] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.518712][ T9199] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.529429][ T9199] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.647840][ T9199] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.697840][ T9199] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.007392][ T9213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.015508][ T9213] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 203.165590][ T6023] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.204340][ T6023] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.306191][ T6023] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.320736][ T6023] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.335474][ T6023] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.349298][ T6023] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.371334][ T6023] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.390454][ T6023] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.003196][ T9299] sctp: [Deprecated]: syz.0.892 (pid 9299) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.003196][ T9299] Use struct sctp_sack_info instead [ 204.051634][ T9302] netlink: 'syz.2.894': attribute type 29 has an invalid length. [ 204.099324][ T9249] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 204.234584][ T9300] syz.0.892: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.253285][ T9300] CPU: 0 UID: 0 PID: 9300 Comm: syz.0.892 Not tainted syzkaller #0 PREEMPT(full) [ 204.253307][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.253316][ T9300] Call Trace: [ 204.253324][ T9300] [ 204.253331][ T9300] dump_stack_lvl+0x189/0x250 [ 204.253359][ T9300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.253377][ T9300] ? __pfx__printk+0x10/0x10 [ 204.253397][ T9300] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.253415][ T9300] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.253435][ T9300] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 204.253455][ T9300] warn_alloc+0x214/0x310 [ 204.253494][ T9300] ? __pfx_warn_alloc+0x10/0x10 [ 204.253524][ T9300] ? __get_vm_area_node+0x28f/0x300 [ 204.253545][ T9300] ? xskq_create+0xbf/0x170 [ 204.253563][ T9300] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 204.253613][ T9300] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.253634][ T9300] ? xskq_create+0x56/0x170 [ 204.253650][ T9300] ? __kasan_kmalloc+0x93/0xb0 [ 204.253672][ T9300] vmalloc_user_noprof+0xad/0xf0 [ 204.253692][ T9300] ? xskq_create+0xbf/0x170 [ 204.253709][ T9300] xskq_create+0xbf/0x170 [ 204.253726][ T9300] xsk_init_queue+0xb0/0x110 [ 204.253751][ T9300] xsk_setsockopt+0x57b/0x8d0 [ 204.253776][ T9300] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.253798][ T9300] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.253824][ T9300] ? __fget_files+0x2a/0x420 [ 204.253838][ T9300] ? aa_sock_opt_perm+0xff/0x1b0 [ 204.253857][ T9300] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 204.253875][ T9300] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.253898][ T9300] do_sock_setsockopt+0x179/0x1b0 [ 204.253922][ T9300] __x64_sys_setsockopt+0x13f/0x1b0 [ 204.253946][ T9300] do_syscall_64+0xfa/0x3b0 [ 204.253963][ T9300] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.253980][ T9300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.253997][ T9300] ? clear_bhb_loop+0x60/0xb0 [ 204.254018][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.254034][ T9300] RIP: 0033:0x7f5532d8ebe9 [ 204.254050][ T9300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.254065][ T9300] RSP: 002b:00007f5533c5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.254084][ T9300] RAX: ffffffffffffffda RBX: 00007f5532fc6180 RCX: 00007f5532d8ebe9 [ 204.254096][ T9300] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000009 [ 204.254107][ T9300] RBP: 00007f5532e11e19 R08: 0000000000000004 R09: 0000000000000000 [ 204.254118][ T9300] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 204.254128][ T9300] R13: 00007f5532fc6218 R14: 00007f5532fc6180 R15: 00007ffd7230e138 [ 204.254159][ T9300] [ 204.254176][ T9300] Mem-Info: [ 204.551124][ T9300] active_anon:8312 inactive_anon:0 isolated_anon:0 [ 204.551124][ T9300] active_file:3206 inactive_file:39897 isolated_file:0 [ 204.551124][ T9300] unevictable:768 dirty:229 writeback:0 [ 204.551124][ T9300] slab_reclaimable:11785 slab_unreclaimable:155930 [ 204.551124][ T9300] mapped:29629 shmem:2042 pagetables:1188 [ 204.551124][ T9300] sec_pagetables:0 bounce:0 [ 204.551124][ T9300] kernel_misc_reclaimable:0 [ 204.551124][ T9300] free:1267719 free_pcp:14405 free_cma:0 [ 204.680455][ T9300] Node 0 active_anon:35948kB inactive_anon:0kB active_file:12824kB inactive_file:159388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121316kB dirty:916kB writeback:0kB shmem:9332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12256kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.788042][ T9324] erspan1: entered promiscuous mode [ 204.865040][ T9300] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 204.909524][ T9300] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 204.909600][ T9327] __nla_validate_parse: 13 callbacks suppressed [ 204.909611][ T9327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.902'. [ 204.945961][ T9300] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 204.980578][ T9300] Node 0 DMA32 free:1158616kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:42528kB inactive_anon:0kB active_file:12824kB inactive_file:157804kB unevictable:1536kB writepending:928kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:37844kB local_pcp:19108kB free_cma:0kB [ 205.045421][ T9300] lowmem_reserve[]: 0 0 1 1 1 [ 205.050201][ T9300] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1584kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 205.120600][ T9300] lowmem_reserve[]: 0 0 0 0 0 [ 205.133338][ T9300] Node 1 Normal free:3892628kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16704kB local_pcp:13312kB free_cma:0kB [ 205.220096][ T9300] lowmem_reserve[]: 0 0 0 0 0 [ 205.230223][ T9300] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 205.263677][ T9300] Node 0 DMA32: 1087*4kB (U) 980*8kB (UM) 293*16kB (UM) 774*32kB (UE) 432*64kB (UE) 264*128kB (UM) 170*256kB (UME) 120*512kB (UM) 80*1024kB (UM) 34*2048kB (UM) 195*4096kB (UM) = 1158316kB [ 205.308119][ T9300] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 205.333858][ T9300] Node 1 Normal: 205*4kB (UME) 58*8kB (UME) 39*16kB (UME) 113*32kB (UME) 34*64kB (UME) 11*128kB (UME) 2*256kB (M) 4*512kB (UME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892628kB [ 205.355625][ T9300] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.361781][ T5878] Bluetooth: hci0: command 0x080f tx timeout [ 205.415632][ T9345] lo speed is unknown, defaulting to 1000 [ 205.495816][ T9300] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.522380][ T9300] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 205.572537][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.908'. [ 205.577385][ T9300] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 205.672700][ T9300] 44612 total pagecache pages [ 205.677426][ T9300] 0 pages in swap cache [ 205.741695][ T9300] Free swap = 124996kB [ 205.745901][ T9300] Total swap = 124996kB [ 205.750066][ T9300] 2097051 pages RAM [ 205.798441][ T9300] 0 pages HighMem/MovableOnly [ 205.826699][ T9300] 425669 pages reserved [ 205.849803][ T9300] 0 pages cma reserved [ 206.111746][ T9365] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 206.141122][ T9365] netlink: 208 bytes leftover after parsing attributes in process `syz.0.911'. [ 206.263554][ T9358] lo speed is unknown, defaulting to 1000 [ 206.316024][ T9374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 206.604778][ T9389] netlink: 212328 bytes leftover after parsing attributes in process `syz.3.915'. [ 206.772098][ T9392] ip6gre2: entered promiscuous mode [ 206.964461][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 207.018540][ T9407] netlink: 'syz.3.920': attribute type 31 has an invalid length. [ 207.549003][ T9428] netlink: 'syz.3.924': attribute type 13 has an invalid length. [ 208.150673][ T57] lo speed is unknown, defaulting to 1000 [ 208.160007][ T57] syz0: Port: 1 Link DOWN [ 208.180433][ T970] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.195400][ T970] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.214931][ T970] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.233236][ T970] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.306352][ T9443] netlink: 68 bytes leftover after parsing attributes in process `syz.2.929'. [ 208.368767][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.376584][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.476072][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.930'. [ 208.555059][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.572630][ T9438] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.592377][ T9438] xfrm0: left promiscuous mode [ 208.597199][ T9438] xfrm0: left allmulticast mode [ 208.698887][ T9438] veth1_macvtap: left allmulticast mode [ 208.711333][ T9438] macsec0: left allmulticast mode [ 208.789243][ T9438] vti0: left promiscuous mode [ 208.794611][ T9438] vti0: left allmulticast mode [ 208.807759][ T9438] hsr1: left allmulticast mode [ 208.813036][ T9438] syz_tun: left allmulticast mode [ 208.818126][ T9438] batadv_slave_0: left allmulticast mode [ 208.837094][ T9438] ip6gre2: left promiscuous mode [ 208.844234][ T57] lo speed is unknown, defaulting to 1000 [ 208.854281][ T970] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.866570][ T970] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.877754][ T970] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.890136][ T970] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.916978][ T970] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.928473][ T970] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.944927][ T970] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.955238][ T970] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.970628][ T970] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.000582][ T970] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.010028][ T970] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.019442][ T970] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.055423][ T9463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.932'. [ 209.064846][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 209.402883][ T9480] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 209.443867][ T9482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.934'. [ 209.458791][ T9482] vlan0: entered allmulticast mode [ 209.467044][ T9482] hsr0: entered allmulticast mode [ 209.472941][ T9482] hsr_slave_0: entered allmulticast mode [ 209.479024][ T9482] hsr_slave_1: entered allmulticast mode [ 210.289944][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.1.942'. [ 210.330261][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.945'. [ 210.356063][ T9516] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.945'. [ 210.414208][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.946'. [ 210.441038][ T9519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.946'. [ 210.560514][ T9529] nbd: must specify a device to reconfigure [ 210.581768][ T9530] tipc: Enabled bearer , priority 0 [ 210.606673][ T9530] syzkaller0: entered promiscuous mode [ 210.621551][ T9530] syzkaller0: entered allmulticast mode [ 210.687222][ T9530] tipc: Resetting bearer [ 210.725185][ T9528] tipc: Resetting bearer [ 210.772911][ T9528] tipc: Disabling bearer [ 210.827681][ T9544] netlink: 14 bytes leftover after parsing attributes in process `syz.4.952'. [ 210.988180][ T9544] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 211.003466][ T9544] bond0 (unregistering): (slave team0): Releasing backup interface [ 211.014470][ T9544] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 211.027358][ T9544] bond0 (unregistering): Released all slaves [ 211.068789][ T9550] syzkaller1: entered promiscuous mode [ 211.074966][ T9550] syzkaller1: entered allmulticast mode [ 211.336649][ T9570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.958'. [ 211.513469][ T9580] geneve2: entered promiscuous mode [ 211.518722][ T9580] geneve2: entered allmulticast mode [ 211.548550][ T6027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 211.569842][ T6027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 211.572935][ T9580] netlink: 44 bytes leftover after parsing attributes in process `syz.3.962'. [ 211.581464][ T6027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 211.597510][ T6027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 211.598976][ T9580] netlink: 35 bytes leftover after parsing attributes in process `syz.3.962'. [ 211.633955][ T9580] netlink: 'syz.3.962': attribute type 5 has an invalid length. [ 211.688678][ T9580] netlink: 'syz.3.962': attribute type 6 has an invalid length. [ 211.707970][ T9580] netlink: 35 bytes leftover after parsing attributes in process `syz.3.962'. [ 211.718445][ T9588] batadv2: entered promiscuous mode [ 211.873116][ T9593] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 211.883637][ T57] IPVS: starting estimator thread 0... [ 211.971239][ T9595] IPVS: using max 32 ests per chain, 76800 per kthread [ 212.042985][ T9603] macsec1: entered promiscuous mode [ 212.049905][ T9603] macsec1: entered allmulticast mode [ 212.069939][ T9602] lo speed is unknown, defaulting to 1000 [ 212.162142][ T9571] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 212.227162][ T9605] netlink: 'syz.0.969': attribute type 13 has an invalid length. [ 212.436747][ T9610] netlink: 'syz.4.972': attribute type 14 has an invalid length. [ 212.698167][ T9626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.705458][ T9626] IPv6: NLM_F_CREATE should be set when creating new route [ 212.712774][ T9626] IPv6: NLM_F_CREATE should be set when creating new route [ 212.720001][ T9626] IPv6: NLM_F_CREATE should be set when creating new route [ 212.975764][ T9640] bridge: RTM_NEWNEIGH with invalid ether address [ 213.437191][ T9669] vxcan2: entered promiscuous mode [ 213.572058][ T9671] lo speed is unknown, defaulting to 1000 [ 213.701907][ T9682] netlink: 'syz.0.996': attribute type 5 has an invalid length. [ 214.309175][ T9723] vlan0: entered promiscuous mode [ 214.798956][ T9736] lo speed is unknown, defaulting to 1000 [ 215.364297][ T9760] lo speed is unknown, defaulting to 1000 [ 215.494915][ T9767] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 215.684024][ T9776] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 215.741071][ T9767] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.764715][ T9774] bond6: (slave bridge4): making interface the new active one [ 215.817440][ T9774] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 215.898794][ T9775] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 216.253240][ T9785] __nla_validate_parse: 74 callbacks suppressed [ 216.253261][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 216.306233][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1022'. [ 216.354201][ T9783] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 216.408043][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 216.440481][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 216.570522][ T9787] lo speed is unknown, defaulting to 1000 [ 216.611096][ T9783] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 216.848085][ T9783] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 216.944176][ T9783] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 217.127061][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 217.204667][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 217.261525][ T48] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 217.286805][ T9803] tipc: Enabled bearer , priority 0 [ 217.315900][ T9803] syzkaller0: entered promiscuous mode [ 217.329506][ T9803] syzkaller0: entered allmulticast mode [ 217.363881][ T2984] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 217.452048][ T9808] netlink: 'syz.3.1028': attribute type 2 has an invalid length. [ 217.453046][ T9803] tipc: Resetting bearer [ 217.622726][ T9802] tipc: Resetting bearer [ 217.650034][ T9802] tipc: Disabling bearer [ 218.162416][ T9835] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1036'. [ 218.244682][ T9841] netlink: 'syz.4.1034': attribute type 4 has an invalid length. [ 218.340428][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1034'. [ 218.375914][ T9848] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1039'. [ 218.397136][ T9850] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 218.411950][ T9850] CPU: 1 UID: 0 PID: 9850 Comm: syz.4.1034 Not tainted syzkaller #0 PREEMPT(full) [ 218.411977][ T9850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.411988][ T9850] Call Trace: [ 218.411996][ T9850] [ 218.412004][ T9850] dump_stack_lvl+0x189/0x250 [ 218.412035][ T9850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.412057][ T9850] ? __pfx__printk+0x10/0x10 [ 218.412086][ T9850] ? kernfs_path_from_node+0x2f/0x290 [ 218.412106][ T9850] ? kernfs_path_from_node+0x250/0x290 [ 218.412124][ T9850] ? kernfs_path_from_node+0x2f/0x290 [ 218.412148][ T9850] sysfs_warn_dup+0x8e/0xa0 [ 218.412166][ T9850] sysfs_do_create_link_sd+0xc0/0x110 [ 218.412196][ T9850] device_add_class_symlinks+0x1cf/0x240 [ 218.412222][ T9850] device_add+0x475/0xb50 [ 218.412246][ T9850] wiphy_register+0x1ba6/0x28d0 [ 218.412285][ T9850] ? __pfx_wiphy_register+0x10/0x10 [ 218.412303][ T9850] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 218.412334][ T9850] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 218.412361][ T9850] ieee80211_register_hw+0x3425/0x4080 [ 218.412403][ T9850] ? ieee80211_register_hw+0x13f1/0x4080 [ 218.412433][ T9850] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 218.412460][ T9850] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 218.412494][ T9850] ? __hrtimer_setup+0x187/0x210 [ 218.412510][ T9850] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 218.412539][ T9850] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 218.412597][ T9850] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 218.412619][ T9850] ? trace_kmalloc+0x1f/0xd0 [ 218.412638][ T9850] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 218.412661][ T9850] ? kstrndup+0xbf/0x160 [ 218.412691][ T9850] hwsim_new_radio_nl+0xea4/0x1b10 [ 218.412717][ T9850] ? __pfx___nla_validate_parse+0x10/0x10 [ 218.412758][ T9850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 218.412797][ T9850] ? __nla_parse+0x40/0x60 [ 218.412826][ T9850] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 218.412858][ T9850] genl_family_rcv_msg_doit+0x215/0x300 [ 218.412889][ T9850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 218.412926][ T9850] ? bpf_lsm_capable+0x9/0x20 [ 218.412946][ T9850] ? security_capable+0x7e/0x2e0 [ 218.412975][ T9850] genl_rcv_msg+0x60e/0x790 [ 218.413004][ T9850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.413023][ T9850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 218.413063][ T9850] netlink_rcv_skb+0x205/0x470 [ 218.413078][ T9850] ? __lock_acquire+0xab9/0xd20 [ 218.413103][ T9850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.413126][ T9850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.413166][ T9850] ? down_read+0x1ad/0x2e0 [ 218.413195][ T9850] genl_rcv+0x28/0x40 [ 218.413215][ T9850] netlink_unicast+0x82c/0x9e0 [ 218.413252][ T9850] ? __pfx_netlink_unicast+0x10/0x10 [ 218.413279][ T9850] ? netlink_sendmsg+0x642/0xb30 [ 218.413296][ T9850] ? skb_put+0x11b/0x210 [ 218.413319][ T9850] netlink_sendmsg+0x805/0xb30 [ 218.413349][ T9850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.413372][ T9850] ? aa_sock_msg_perm+0xf1/0x1d0 [ 218.413392][ T9850] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.413410][ T9850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.413426][ T9850] __sock_sendmsg+0x219/0x270 [ 218.413451][ T9850] ____sys_sendmsg+0x505/0x830 [ 218.413479][ T9850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.413511][ T9850] ? import_iovec+0x74/0xa0 [ 218.413536][ T9850] ___sys_sendmsg+0x21f/0x2a0 [ 218.413559][ T9850] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.413622][ T9850] ? __fget_files+0x2a/0x420 [ 218.413637][ T9850] ? __fget_files+0x3a0/0x420 [ 218.413666][ T9850] __x64_sys_sendmsg+0x19b/0x260 [ 218.413689][ T9850] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.413723][ T9850] ? rcu_is_watching+0x15/0xb0 [ 218.413747][ T9850] ? do_syscall_64+0xbe/0x3b0 [ 218.413771][ T9850] do_syscall_64+0xfa/0x3b0 [ 218.413788][ T9850] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.413805][ T9850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.413823][ T9850] ? clear_bhb_loop+0x60/0xb0 [ 218.413845][ T9850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.413861][ T9850] RIP: 0033:0x7fa546f8ebe9 [ 218.413879][ T9850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.413894][ T9850] RSP: 002b:00007fa547e42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.413915][ T9850] RAX: ffffffffffffffda RBX: 00007fa5471c6090 RCX: 00007fa546f8ebe9 [ 218.413928][ T9850] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000f [ 218.413939][ T9850] RBP: 00007fa547011e19 R08: 0000000000000000 R09: 0000000000000000 [ 218.413951][ T9850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.413962][ T9850] R13: 00007fa5471c6128 R14: 00007fa5471c6090 R15: 00007ffc124467a8 [ 218.413992][ T9850] [ 219.303602][ T9869] netlink: 'syz.3.1042': attribute type 2 has an invalid length. [ 219.318384][ T9869] netlink: 'syz.3.1042': attribute type 1 has an invalid length. [ 219.326306][ T9869] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1042'. [ 219.631214][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'. [ 219.709272][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1045'. [ 219.828971][ T9899] syzkaller0: entered promiscuous mode [ 219.834735][ T9899] syzkaller0: entered allmulticast mode [ 221.706111][ T30] audit: type=1800 audit(1756913964.216:6): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1061" name="memory.events" dev="tmpfs" ino=1132 res=0 errno=0 [ 222.394343][ T9935] syz_tun: Device is already in use. [ 222.466612][ T9933] lo speed is unknown, defaulting to 1000 [ 222.556126][ T9961] tipc: Enabled bearer , priority 0 [ 222.564200][ T9961] veth0: entered promiscuous mode [ 222.569398][ T9961] veth0: entered allmulticast mode [ 222.578870][ T9959] tipc: Disabling bearer [ 222.632307][ T9964] tipc: Enabled bearer , priority 0 [ 222.650505][ T9964] syzkaller0: entered promiscuous mode [ 222.669502][ T9964] syzkaller0: entered allmulticast mode [ 222.808478][ T9964] tipc: Resetting bearer [ 222.823396][ T9964] __nla_validate_parse: 65 callbacks suppressed [ 222.823416][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'. [ 222.879160][ T9963] tipc: Resetting bearer [ 222.906293][ T9963] tipc: Disabling bearer [ 223.313190][ T9988] 8021q: VLANs not supported on caif0 [ 223.324861][ T9989] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1075'. [ 223.369578][ T9991] netlink: 'syz.2.1076': attribute type 4 has an invalid length. [ 223.519808][ T9994] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1077'. [ 223.736420][ T9998] lo speed is unknown, defaulting to 1000 [ 224.274230][T10033] openvswitch: netlink: IP tunnel dst address not specified [ 224.352249][T10036] netlink: 'syz.4.1086': attribute type 10 has an invalid length. [ 224.435876][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1087'. [ 224.475704][T10041] bond_slave_1: entered promiscuous mode [ 224.514700][T10041] macvlan2: entered promiscuous mode [ 224.520048][T10041] bond0: entered promiscuous mode [ 224.541482][T10041] bond_slave_0: entered promiscuous mode [ 224.549821][T10041] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.087154][T10061] netlink: 'syz.1.1091': attribute type 16 has an invalid length. [ 225.105601][T10061] netlink: 'syz.1.1091': attribute type 17 has an invalid length. [ 225.220446][T10068] IPv6: NLM_F_REPLACE set, but no existing node found! [ 225.644275][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.652093][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.136910][T10061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.758908][T10065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 226.781138][T10073] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1094'. [ 226.814404][ T48] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.842672][ T48] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.861759][ T48] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.870256][ T48] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.966944][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1101'. [ 226.967620][T10095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1100'. [ 227.040034][T10104] lo speed is unknown, defaulting to 1000 [ 227.063556][T10095] netlink: 'syz.0.1100': attribute type 3 has an invalid length. [ 227.172723][T10108] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 227.207062][T10090] macsec1: entered promiscuous mode [ 227.225617][T10090] team0: entered promiscuous mode [ 227.245268][T10090] team_slave_1: entered promiscuous mode [ 227.362599][T10120] tipc: Cannot configure node identity twice [ 227.377240][T10120] tipc: Cannot configure node identity twice [ 227.394428][T10120] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 227.487289][T10120] 8021q: adding VLAN 0 to HW filter on device bond3 [ 227.615648][T10126] bond3: (slave geneve2): making interface the new active one [ 227.662777][T10126] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 227.671969][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.683111][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.728372][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.736828][ T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.792277][T10131] lo speed is unknown, defaulting to 1000 [ 228.010669][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 228.087141][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1114'. [ 228.501992][T10157] Bluetooth: MGMT ver 1.23 [ 229.130186][T10174] tipc: Cannot configure node identity twice [ 229.149789][T10174] tipc: Cannot configure node identity twice [ 229.172761][T10174] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 229.274926][T10174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.363112][T10186] bond0: (slave geneve4): making interface the new active one [ 229.372435][T10186] bond0: (slave geneve4): Enslaving as an active interface with an up link [ 229.382611][T10189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1129'. [ 229.707977][T10208] netlink: 'syz.3.1135': attribute type 39 has an invalid length. [ 229.876484][T10212] IPVS: Scheduler module ip_vs_sip not found [ 230.119847][T10217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1137'. [ 231.265539][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1132'. [ 231.413449][T10225] lo speed is unknown, defaulting to 1000 [ 231.471115][T10228] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1141'. [ 231.496891][T10231] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 231.899020][T10242] tc_dump_action: action bad kind [ 231.906157][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1145'. [ 232.133305][T10254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'. [ 232.279475][T10259] macsec1: entered promiscuous mode [ 232.291165][T10259] dummy0: entered promiscuous mode [ 232.297303][T10259] macsec1: entered allmulticast mode [ 232.308149][T10259] dummy0: entered allmulticast mode [ 232.335805][T10259] dummy0: left allmulticast mode [ 232.344832][T10259] dummy0: left promiscuous mode [ 232.476174][T10271] netlink: 'syz.2.1152': attribute type 2 has an invalid length. [ 232.477350][T10272] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1153'. [ 232.642920][T10287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1157'. [ 232.770767][T10271] lo speed is unknown, defaulting to 1000 [ 232.893788][T10293] tipc: Enabled bearer , priority 0 [ 232.931255][T10293] syzkaller0: entered promiscuous mode [ 232.936768][T10293] syzkaller0: entered allmulticast mode [ 233.099721][T10293] tipc: Resetting bearer [ 233.164516][T10292] tipc: Resetting bearer [ 233.248614][T10292] tipc: Disabling bearer [ 233.368810][T10310] dvmrp0: entered allmulticast mode [ 233.557850][T10315] macsec2: entered promiscuous mode [ 233.589845][T10315] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 233.638990][T10315] mac80211_hwsim hwsim6 wlan1: left promiscuous mode [ 234.062447][T10337] netlink: zone id is out of range [ 234.101215][T10337] netlink: zone id is out of range [ 234.106468][T10337] netlink: zone id is out of range [ 234.129039][T10337] netlink: zone id is out of range [ 234.186506][T10337] netlink: zone id is out of range [ 234.195927][T10337] netlink: zone id is out of range [ 234.201983][T10337] netlink: zone id is out of range [ 234.207242][T10337] netlink: zone id is out of range [ 234.213262][T10337] netlink: del zone limit has 4 unknown bytes [ 234.957545][T10386] tipc: Cannot configure node identity twice [ 234.964341][T10386] tipc: Cannot configure node identity twice [ 234.968180][T10394] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 234.970658][T10390] netlink: 'syz.2.1184': attribute type 1 has an invalid length. [ 234.987859][T10390] netlink: 'syz.2.1184': attribute type 4 has an invalid length. [ 234.998676][T10390] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1184'. [ 235.010359][T10390] NCSI netlink: No device for ifindex 3321692160 [ 235.044545][T10394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.197122][T10408] tipc: Cannot configure node identity twice [ 235.213592][T10408] tipc: Cannot configure node identity twice [ 235.286664][T10414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1192'. [ 235.304478][T10416] netlink: 664 bytes leftover after parsing attributes in process `syz.3.1191'. [ 235.316560][T10416] netlink: 664 bytes leftover after parsing attributes in process `syz.3.1191'. [ 235.334619][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 235.352174][T10418] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1193'. [ 235.578688][T10434] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 235.600679][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1198'. [ 235.672826][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 235.902998][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1203'. [ 235.926416][T10455] netlink: 'syz.4.1203': attribute type 29 has an invalid length. [ 235.935939][T10455] netlink: 'syz.4.1203': attribute type 29 has an invalid length. [ 235.948802][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 235.973989][T10462] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 236.268953][T10483] sctp: [Deprecated]: syz.0.1212 (pid 10483) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.268953][T10483] Use struct sctp_sack_info instead [ 236.469980][T10468] lo speed is unknown, defaulting to 1000 [ 237.382462][T10493] lo speed is unknown, defaulting to 1000 [ 237.797332][T10531] (unnamed net_device) (uninitialized): peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 238.025184][T10535] netlink: 'syz.4.1225': attribute type 1 has an invalid length. [ 238.082746][T10537] 8021q: adding VLAN 0 to HW filter on device bond4 [ 238.090083][T10537] bridge0: port 1(bond4) entered blocking state [ 238.097469][T10537] bridge0: port 1(bond4) entered disabled state [ 238.104557][T10537] bond4: entered allmulticast mode [ 238.112083][T10537] bond4: entered promiscuous mode [ 238.118016][T10537] bridge0: port 1(bond4) entered blocking state [ 238.124692][T10537] bridge0: port 1(bond4) entered forwarding state [ 238.168695][ T2984] bridge0: port 1(bond4) entered disabled state [ 238.256812][T10544] netlink: 'syz.4.1228': attribute type 3 has an invalid length. [ 238.270574][T10544] syz_tun: entered allmulticast mode [ 238.301657][T10544] pimreg: left allmulticast mode [ 238.404412][T10547] siw: device registration error -23 [ 238.484039][T10544] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.553864][T10543] syz_tun: left allmulticast mode [ 238.589651][T10552] IPVS: set_ctl: invalid protocol: 41 100.1.1.1:20003 [ 239.203671][T10581] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 239.263126][T10581] netlink: 'syz.0.1240': attribute type 3 has an invalid length. [ 239.623208][T10590] syzkaller0: entered promiscuous mode [ 239.648936][T10590] syzkaller0: entered allmulticast mode [ 239.714226][ T30] audit: type=1800 audit(1756913982.236:7): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1246" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1249 res=0 errno=0 [ 239.985345][T10604] lo speed is unknown, defaulting to 1000 [ 240.087247][T10612] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 240.091827][T10598] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 240.186043][T10611] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 240.196597][T10598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.213157][T10611] __nla_validate_parse: 10 callbacks suppressed [ 240.213175][T10611] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1248'. [ 240.258439][T10598] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 240.287057][T10626] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 240.332261][T10611] batadv0: entered promiscuous mode [ 240.388976][T10633] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1257'. [ 240.409426][T10611] batadv0: entered allmulticast mode [ 240.419774][T10633] net_ratelimit: 2 callbacks suppressed [ 240.419792][T10633] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 240.443411][T10637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1255'. [ 240.566341][T10633] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 240.598048][T10611] bond0: (slave batadv0): Releasing backup interface [ 240.722295][T10611] bridge0: port 3(batadv0) entered blocking state [ 240.759898][T10611] bridge0: port 3(batadv0) entered disabled state [ 240.945463][T10653] netlink: 'syz.3.1260': attribute type 2 has an invalid length. [ 240.967892][ T1112] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 240.977528][ T1112] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 241.019145][T10643] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 241.049021][T10642] batadv1: entered promiscuous mode [ 241.183836][T10654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.206162][T10654] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.236930][T10654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.299759][T10653] k›*·: entered promiscuous mode [ 241.422928][ T57] lo speed is unknown, defaulting to 1000 [ 241.430530][ T57] syz0: Port: 1 Link ACTIVE [ 241.458165][ T57] lo speed is unknown, defaulting to 1000 [ 241.709855][T10679] FAULT_INJECTION: forcing a failure. [ 241.709855][T10679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.731415][T10679] CPU: 0 UID: 0 PID: 10679 Comm: syz.3.1266 Not tainted syzkaller #0 PREEMPT(full) [ 241.731448][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.731467][T10679] Call Trace: [ 241.731474][T10679] [ 241.731483][T10679] dump_stack_lvl+0x189/0x250 [ 241.731510][T10679] ? __pfx____ratelimit+0x10/0x10 [ 241.731527][T10679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.731546][T10679] ? __pfx__printk+0x10/0x10 [ 241.731566][T10679] ? __might_fault+0xb0/0x130 [ 241.731596][T10679] should_fail_ex+0x414/0x560 [ 241.731634][T10679] _copy_from_user+0x2d/0xb0 [ 241.731652][T10679] ___sys_sendmsg+0x158/0x2a0 [ 241.731674][T10679] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.731727][T10679] ? __fget_files+0x2a/0x420 [ 241.731741][T10679] ? __fget_files+0x3a0/0x420 [ 241.731767][T10679] __x64_sys_sendmsg+0x19b/0x260 [ 241.731787][T10679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.731815][T10679] ? __pfx_ksys_write+0x10/0x10 [ 241.731833][T10679] ? rcu_is_watching+0x15/0xb0 [ 241.731853][T10679] ? do_syscall_64+0xbe/0x3b0 [ 241.731873][T10679] do_syscall_64+0xfa/0x3b0 [ 241.731889][T10679] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.731904][T10679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.731919][T10679] ? clear_bhb_loop+0x60/0xb0 [ 241.731939][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.731953][T10679] RIP: 0033:0x7fa75838ebe9 [ 241.731969][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.731981][T10679] RSP: 002b:00007fa759178038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.731999][T10679] RAX: ffffffffffffffda RBX: 00007fa7585c5fa0 RCX: 00007fa75838ebe9 [ 241.732019][T10679] RDX: 0000000000008004 RSI: 0000200000000100 RDI: 0000000000000004 [ 241.732029][T10679] RBP: 00007fa759178090 R08: 0000000000000000 R09: 0000000000000000 [ 241.732039][T10679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.732049][T10679] R13: 00007fa7585c6038 R14: 00007fa7585c5fa0 R15: 00007ffcc2b2cee8 [ 241.732078][T10679] [ 242.171862][T10685] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1268'. [ 242.500887][T10693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1269'. [ 242.532423][T10693] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1269'. [ 243.236868][T10693] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 243.249556][T10693] gretap1: entered promiscuous mode [ 243.267576][T10693] gretap1: entered allmulticast mode [ 243.493369][T10729] bridge0: port 1(veth0_to_team) entered blocking state [ 243.501486][T10729] bridge0: port 1(veth0_to_team) entered disabled state [ 243.508952][T10729] veth0_to_team: entered allmulticast mode [ 243.517802][T10729] veth0_to_team: entered promiscuous mode [ 243.530069][T10732] FAULT_INJECTION: forcing a failure. [ 243.530069][T10732] name failslab, interval 1, probability 0, space 0, times 0 [ 243.552542][T10732] CPU: 1 UID: 0 PID: 10732 Comm: syz.1.1278 Not tainted syzkaller #0 PREEMPT(full) [ 243.552568][T10732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.552579][T10732] Call Trace: [ 243.552586][T10732] [ 243.552595][T10732] dump_stack_lvl+0x189/0x250 [ 243.552619][T10732] ? __pfx____ratelimit+0x10/0x10 [ 243.552637][T10732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.552657][T10732] ? __pfx__printk+0x10/0x10 [ 243.552684][T10732] ? __pfx___might_resched+0x10/0x10 [ 243.552705][T10732] should_fail_ex+0x414/0x560 [ 243.552730][T10732] should_failslab+0xa8/0x100 [ 243.552755][T10732] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 243.552776][T10732] ? __alloc_skb+0x112/0x2d0 [ 243.552798][T10732] __alloc_skb+0x112/0x2d0 [ 243.552819][T10732] netlink_sendmsg+0x5c6/0xb30 [ 243.552845][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.552866][T10732] ? aa_sock_msg_perm+0xf1/0x1d0 [ 243.552884][T10732] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.552900][T10732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.552915][T10732] __sock_sendmsg+0x219/0x270 [ 243.552938][T10732] ____sys_sendmsg+0x505/0x830 [ 243.552961][T10732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.552988][T10732] ? import_iovec+0x74/0xa0 [ 243.553009][T10732] ___sys_sendmsg+0x21f/0x2a0 [ 243.553029][T10732] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.553085][T10732] ? __fget_files+0x2a/0x420 [ 243.553101][T10732] ? __fget_files+0x3a0/0x420 [ 243.553127][T10732] __x64_sys_sendmsg+0x19b/0x260 [ 243.553149][T10732] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.553178][T10732] ? __pfx_ksys_write+0x10/0x10 [ 243.553197][T10732] ? rcu_is_watching+0x15/0xb0 [ 243.553220][T10732] ? do_syscall_64+0xbe/0x3b0 [ 243.553242][T10732] do_syscall_64+0xfa/0x3b0 [ 243.553257][T10732] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.553274][T10732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.553291][T10732] ? clear_bhb_loop+0x60/0xb0 [ 243.553311][T10732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.553327][T10732] RIP: 0033:0x7ff46c78ebe9 [ 243.553343][T10732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.553358][T10732] RSP: 002b:00007ff46d5f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.553376][T10732] RAX: ffffffffffffffda RBX: 00007ff46c9c5fa0 RCX: 00007ff46c78ebe9 [ 243.553389][T10732] RDX: 0000000000008004 RSI: 0000200000000100 RDI: 0000000000000004 [ 243.553400][T10732] RBP: 00007ff46d5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 243.553410][T10732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.553421][T10732] R13: 00007ff46c9c6038 R14: 00007ff46c9c5fa0 R15: 00007ffe767c69c8 [ 243.553450][T10732] [ 244.053322][T10755] geneve3: entered promiscuous mode [ 244.059945][ T970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.116324][T10757] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 244.149323][ T970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.170475][ T1112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.194726][T10757] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 244.217520][ T1112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.237428][T10751] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1286'. [ 244.256738][T10757] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 244.285313][T10751] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 244.308317][T10757] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 244.401877][ T970] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 244.436396][ T970] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 244.457168][ T970] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 244.468056][ T970] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 244.627275][T10783] pim6reg: entered allmulticast mode [ 244.674785][T10783] pim6reg: left allmulticast mode [ 244.724977][T10786] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1298'. [ 244.763156][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'. [ 245.333557][T10812] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 245.365378][T10815] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 245.374658][T10818] FAULT_INJECTION: forcing a failure. [ 245.374658][T10818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.397514][T10818] CPU: 0 UID: 0 PID: 10818 Comm: syz.1.1308 Not tainted syzkaller #0 PREEMPT(full) [ 245.397539][T10818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.397550][T10818] Call Trace: [ 245.397556][T10818] [ 245.397563][T10818] dump_stack_lvl+0x189/0x250 [ 245.397588][T10818] ? __pfx____ratelimit+0x10/0x10 [ 245.397613][T10818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.397632][T10818] ? __pfx__printk+0x10/0x10 [ 245.397651][T10818] ? __might_fault+0xb0/0x130 [ 245.397681][T10818] should_fail_ex+0x414/0x560 [ 245.397706][T10818] _copy_from_iter+0x1de/0x1790 [ 245.397731][T10818] ? rcu_is_watching+0x15/0xb0 [ 245.397750][T10818] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 245.397773][T10818] ? __pfx__copy_from_iter+0x10/0x10 [ 245.397792][T10818] ? __build_skb_around+0x257/0x3e0 [ 245.397811][T10818] ? netlink_sendmsg+0x642/0xb30 [ 245.397825][T10818] ? skb_put+0x11b/0x210 [ 245.397844][T10818] netlink_sendmsg+0x6b2/0xb30 [ 245.397869][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.397888][T10818] ? aa_sock_msg_perm+0xf1/0x1d0 [ 245.397906][T10818] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.397923][T10818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.397941][T10818] __sock_sendmsg+0x219/0x270 [ 245.397967][T10818] ____sys_sendmsg+0x505/0x830 [ 245.397993][T10818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.398022][T10818] ? import_iovec+0x74/0xa0 [ 245.398045][T10818] ___sys_sendmsg+0x21f/0x2a0 [ 245.398068][T10818] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.398126][T10818] ? __fget_files+0x2a/0x420 [ 245.398141][T10818] ? __fget_files+0x3a0/0x420 [ 245.398167][T10818] __x64_sys_sendmsg+0x19b/0x260 [ 245.398190][T10818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.398220][T10818] ? __pfx_ksys_write+0x10/0x10 [ 245.398238][T10818] ? rcu_is_watching+0x15/0xb0 [ 245.398260][T10818] ? do_syscall_64+0xbe/0x3b0 [ 245.398282][T10818] do_syscall_64+0xfa/0x3b0 [ 245.398298][T10818] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.398315][T10818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.398332][T10818] ? clear_bhb_loop+0x60/0xb0 [ 245.398352][T10818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.398369][T10818] RIP: 0033:0x7ff46c78ebe9 [ 245.398385][T10818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.398399][T10818] RSP: 002b:00007ff46d5f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.398418][T10818] RAX: ffffffffffffffda RBX: 00007ff46c9c5fa0 RCX: 00007ff46c78ebe9 [ 245.398431][T10818] RDX: 0000000000008004 RSI: 0000200000000100 RDI: 0000000000000004 [ 245.398443][T10818] RBP: 00007ff46d5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 245.398453][T10818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.398464][T10818] R13: 00007ff46c9c6038 R14: 00007ff46c9c5fa0 R15: 00007ffe767c69c8 [ 245.398499][T10818] [ 245.825248][T10828] gtp0: entered promiscuous mode [ 245.832119][T10828] gtp0: entered allmulticast mode [ 245.839111][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 246.019787][T10841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 246.031077][T10837] netlink: 'syz.2.1314': attribute type 4 has an invalid length. [ 246.033329][T10840] netlink: 'syz.0.1313': attribute type 10 has an invalid length. [ 246.042598][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 246.050664][T10840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1313'. [ 246.124648][T10840] dummy0: entered promiscuous mode [ 246.149344][T10840] bridge0: port 4(dummy0) entered blocking state [ 246.174389][T10840] bridge0: port 4(dummy0) entered disabled state [ 246.197258][T10840] dummy0: entered allmulticast mode [ 246.285810][T10855] FAULT_INJECTION: forcing a failure. [ 246.285810][T10855] name failslab, interval 1, probability 0, space 0, times 0 [ 246.316394][T10855] CPU: 0 UID: 0 PID: 10855 Comm: syz.4.1321 Not tainted syzkaller #0 PREEMPT(full) [ 246.316419][T10855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 246.316429][T10855] Call Trace: [ 246.316436][T10855] [ 246.316443][T10855] dump_stack_lvl+0x189/0x250 [ 246.316468][T10855] ? __pfx____ratelimit+0x10/0x10 [ 246.316486][T10855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.316503][T10855] ? __pfx__printk+0x10/0x10 [ 246.316538][T10855] ? __lock_acquire+0xab9/0xd20 [ 246.316569][T10855] should_fail_ex+0x414/0x560 [ 246.316596][T10855] should_failslab+0xa8/0x100 [ 246.316621][T10855] kmem_cache_alloc_noprof+0x73/0x3c0 [ 246.316640][T10855] ? skb_clone+0x212/0x3a0 [ 246.316665][T10855] skb_clone+0x212/0x3a0 [ 246.316688][T10855] __netlink_deliver_tap+0x404/0x850 [ 246.316718][T10855] ? netlink_deliver_tap+0x2e/0x1b0 [ 246.316737][T10855] netlink_deliver_tap+0x19c/0x1b0 [ 246.316755][T10855] netlink_unicast+0x7fa/0x9e0 [ 246.316786][T10855] ? __pfx_netlink_unicast+0x10/0x10 [ 246.316811][T10855] ? netlink_sendmsg+0x642/0xb30 [ 246.316826][T10855] ? skb_put+0x11b/0x210 [ 246.316846][T10855] netlink_sendmsg+0x805/0xb30 [ 246.316874][T10855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.316895][T10855] ? aa_sock_msg_perm+0xf1/0x1d0 [ 246.316914][T10855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.316932][T10855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 246.316950][T10855] __sock_sendmsg+0x219/0x270 [ 246.316976][T10855] ____sys_sendmsg+0x505/0x830 [ 246.317001][T10855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.317030][T10855] ? import_iovec+0x74/0xa0 [ 246.317053][T10855] ___sys_sendmsg+0x21f/0x2a0 [ 246.317075][T10855] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.317133][T10855] ? __fget_files+0x2a/0x420 [ 246.317147][T10855] ? __fget_files+0x3a0/0x420 [ 246.317173][T10855] __x64_sys_sendmsg+0x19b/0x260 [ 246.317195][T10855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.317225][T10855] ? __pfx_ksys_write+0x10/0x10 [ 246.317252][T10855] ? do_syscall_64+0xbe/0x3b0 [ 246.317273][T10855] do_syscall_64+0xfa/0x3b0 [ 246.317289][T10855] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.317306][T10855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.317322][T10855] ? clear_bhb_loop+0x60/0xb0 [ 246.317343][T10855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.317359][T10855] RIP: 0033:0x7fa546f8ebe9 [ 246.317375][T10855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.317389][T10855] RSP: 002b:00007fa547e63038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.317407][T10855] RAX: ffffffffffffffda RBX: 00007fa5471c5fa0 RCX: 00007fa546f8ebe9 [ 246.317419][T10855] RDX: 0000000000008004 RSI: 0000200000000100 RDI: 0000000000000004 [ 246.317429][T10855] RBP: 00007fa547e63090 R08: 0000000000000000 R09: 0000000000000000 [ 246.317440][T10855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.317450][T10855] R13: 00007fa5471c6038 R14: 00007fa5471c5fa0 R15: 00007ffc124467a8 [ 246.317479][T10855] [ 246.685342][T10858] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1324'. [ 246.714681][T10858] tipc: Enabled bearer , priority 14 [ 246.852355][T10873] tipc: Enabled bearer , priority 0 [ 246.890173][T10873] syzkaller0: entered promiscuous mode [ 246.915928][T10873] syzkaller0: entered allmulticast mode [ 246.946331][T10879] netlink: 'syz.1.1327': attribute type 1 has an invalid length. [ 246.970570][T10880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1327'. [ 247.030776][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 247.035108][T10873] tipc: Resetting bearer [ 247.062998][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 247.105314][T10882] team0: Port device sit2 added [ 247.408203][T10900] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1336'. [ 247.441336][ T5924] IPVS: starting estimator thread 0... [ 247.459791][T10900] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 247.481284][T10900] tipc: Enabled bearer , priority 10 [ 247.491332][T10905] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1337'. [ 247.531415][T10902] IPVS: using max 35 ests per chain, 84000 per kthread [ 247.567008][T10909] netlink: 'syz.3.1338': attribute type 8 has an invalid length. [ 247.591415][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 247.629316][T10871] tipc: Resetting bearer [ 247.685702][T10871] tipc: Disabling bearer [ 247.731011][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 247.871248][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 247.981323][ T24] tipc: Node number set to 3001431937 [ 248.010998][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.114415][T10936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.150983][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.257527][T10944] dummy0: entered promiscuous mode [ 248.287781][T10944] macsec1: entered promiscuous mode [ 248.291265][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.296868][T10944] macsec1: entered allmulticast mode [ 248.328269][T10944] dummy0: entered allmulticast mode [ 248.345520][T10944] dummy0: left allmulticast mode [ 248.362566][T10944] dummy0: left promiscuous mode [ 248.431010][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 248.571211][ T5923] tipc: Node number set to 2082786286 [ 248.711459][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 249.105133][T10994] lo speed is unknown, defaulting to 1000 [ 249.289908][T11006] team0: entered promiscuous mode [ 249.309341][T11006] team_slave_0: entered promiscuous mode [ 249.319252][T11006] team_slave_1: entered promiscuous mode [ 250.095796][T11032] FAULT_INJECTION: forcing a failure. [ 250.095796][T11032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.151335][T11032] CPU: 1 UID: 0 PID: 11032 Comm: syz.1.1379 Not tainted syzkaller #0 PREEMPT(full) [ 250.151360][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 250.151371][T11032] Call Trace: [ 250.151378][T11032] [ 250.151386][T11032] dump_stack_lvl+0x189/0x250 [ 250.151411][T11032] ? __pfx____ratelimit+0x10/0x10 [ 250.151430][T11032] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.151453][T11032] ? __pfx__printk+0x10/0x10 [ 250.151475][T11032] ? __might_fault+0xb0/0x130 [ 250.151509][T11032] should_fail_ex+0x414/0x560 [ 250.151536][T11032] _copy_from_user+0x2d/0xb0 [ 250.151557][T11032] kstrtouint_from_user+0xc4/0x170 [ 250.151583][T11032] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 250.151626][T11032] proc_fail_nth_write+0x88/0x200 [ 250.151645][T11032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.151671][T11032] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.151692][T11032] vfs_write+0x27e/0xb30 [ 250.151723][T11032] ? __pfx_vfs_write+0x10/0x10 [ 250.151746][T11032] ? __fget_files+0x2a/0x420 [ 250.151767][T11032] ? __fget_files+0x3a0/0x420 [ 250.151780][T11032] ? __fget_files+0x2a/0x420 [ 250.151806][T11032] ksys_write+0x145/0x250 [ 250.151830][T11032] ? __pfx_ksys_write+0x10/0x10 [ 250.151848][T11032] ? rcu_is_watching+0x15/0xb0 [ 250.151871][T11032] ? do_syscall_64+0xbe/0x3b0 [ 250.151893][T11032] do_syscall_64+0xfa/0x3b0 [ 250.151909][T11032] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.151926][T11032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.151943][T11032] ? clear_bhb_loop+0x60/0xb0 [ 250.151964][T11032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.151980][T11032] RIP: 0033:0x7ff46c78d69f [ 250.151997][T11032] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 250.152011][T11032] RSP: 002b:00007ff46d5f3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.152030][T11032] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff46c78d69f [ 250.152043][T11032] RDX: 0000000000000001 RSI: 00007ff46d5f30a0 RDI: 0000000000000005 [ 250.152053][T11032] RBP: 00007ff46d5f3090 R08: 0000000000000000 R09: 0000000000000000 [ 250.152064][T11032] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 250.152074][T11032] R13: 00007ff46c9c6038 R14: 00007ff46c9c5fa0 R15: 00007ffe767c69c8 [ 250.152113][T11032] [ 250.791151][T11056] netlink: 'syz.4.1383': attribute type 13 has an invalid length. [ 250.825044][T11056] netlink: 'syz.4.1383': attribute type 17 has an invalid length. [ 250.979788][T11057] lo speed is unknown, defaulting to 1000 [ 251.057438][T11056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.510081][T11084] nft_compat: unsupported protocol 0 [ 252.440028][T11126] netlink: 'syz.0.1401': attribute type 4 has an invalid length. [ 252.452433][T11130] __nla_validate_parse: 8 callbacks suppressed [ 252.452451][T11130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1402'. [ 252.620992][ C0] net_ratelimit: 5 callbacks suppressed [ 252.621013][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 252.884158][T11137] lo speed is unknown, defaulting to 1000 [ 253.500873][T11164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'. [ 253.661070][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 253.759293][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1414'. [ 253.803292][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 254.203350][ T5923] hid-generic 0005:16C0:0009.0001: unknown main item tag 0x0 [ 254.286909][ T5923] hid-generic 0005:16C0:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 254.315001][T11176] lo speed is unknown, defaulting to 1000 [ 254.632568][T11202] netlink: 'syz.4.1423': attribute type 8 has an invalid length. [ 254.645200][T11204] team0: No ports can be present during mode change [ 254.651915][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 254.700982][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 254.711225][T11202] bond0: entered promiscuous mode [ 254.728001][T11202] geneve4: entered promiscuous mode [ 254.758811][T11202] bond0: left promiscuous mode [ 254.771094][T11202] geneve4: left promiscuous mode [ 254.831929][T11211] netlink: 'syz.1.1427': attribute type 4 has an invalid length. [ 254.843698][T11211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1427'. [ 254.997560][T11174] lo speed is unknown, defaulting to 1000 [ 255.049119][T11215] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1430'. [ 255.506039][T11225] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 255.541535][T11225] netlink: 'syz.1.1429': attribute type 1 has an invalid length. [ 255.577509][T11225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1429'. [ 255.741022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 255.836624][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.858790][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 256.048342][T11233] netlink: 'syz.0.1434': attribute type 4 has an invalid length. [ 256.235777][T11238] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1435'. [ 256.659503][T11231] wireguard0: entered promiscuous mode [ 256.665901][T11231] wireguard0: entered allmulticast mode [ 256.688637][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1436'. [ 256.715685][T11231] wireguard1: entered promiscuous mode [ 256.725232][T11231] wireguard1: entered allmulticast mode [ 256.752884][T11231] wireguard2: entered promiscuous mode [ 256.758656][T11231] wireguard2: entered allmulticast mode [ 256.770468][ T6027] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.781079][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 256.796200][ T6027] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 256.880813][T11231] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 256.894778][ T6027] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.913421][ T6027] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 256.929024][ T48] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.974356][ T48] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 257.074853][ T48] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.093715][ T48] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 257.564884][T11293] __nla_validate_parse: 2 callbacks suppressed [ 257.564904][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 257.820988][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 257.976160][T11299] €Â: renamed from macvtap0 [ 258.162472][T11313] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 258.360858][T11321] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1456'. [ 258.451965][T11324] lo speed is unknown, defaulting to 1000 [ 258.750199][T11338] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1460'. [ 258.861072][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 259.098177][T11349] macsec1: entered promiscuous mode [ 259.104304][T11349] !: entered promiscuous mode [ 259.109869][T11349] macsec1: entered allmulticast mode [ 259.115568][T11349] !: entered allmulticast mode [ 259.123932][T11349] !: left allmulticast mode [ 259.128745][T11349] !: left promiscuous mode [ 259.140080][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1464'. [ 259.166499][T11336] lo speed is unknown, defaulting to 1000 [ 259.404408][T11368] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (5) [ 259.501951][T11375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1471'. [ 259.652199][T11379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1472'. [ 259.662275][T11379] tipc: Enabled bearer , priority 0 [ 259.669755][T11379] syzkaller0: entered promiscuous mode [ 259.695629][T11379] syzkaller0: entered allmulticast mode [ 259.758692][T11393] veth0_to_bridge: entered promiscuous mode [ 259.775380][T11379] tipc: Resetting bearer [ 259.805917][T11376] tipc: Resetting bearer [ 259.870599][T11376] tipc: Disabling bearer [ 259.900978][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.120762][T11393] veth0_to_bridge: left promiscuous mode [ 260.166632][T11411] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (5) [ 260.354504][T11420] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.1485'. [ 260.436504][T11421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'. [ 260.632247][T11432] netlink: 'syz.0.1491': attribute type 3 has an invalid length. [ 260.640664][T11432] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1491'. [ 260.853004][T11442] vlan2: entered allmulticast mode [ 260.858329][T11442] bridge_slave_0: entered allmulticast mode [ 260.884878][T11446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1494'. [ 260.908840][T11446] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 260.941365][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 260.985803][T11443] lo speed is unknown, defaulting to 1000 [ 261.020958][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5160 ms [ 261.029016][ C0] lec:lec_tx_timeout: lec0 [ 261.308323][T11455] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (5) [ 261.328974][T11449] lo speed is unknown, defaulting to 1000 [ 261.589616][T11459] netlink: 'syz.4.1499': attribute type 6 has an invalid length. [ 261.981125][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 263.021151][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 263.951775][T11482] lo speed is unknown, defaulting to 1000 [ 264.061008][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 264.167872][T11496] !: renamed from dummy0 [ 264.202959][T11496] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 264.299576][T11502] __nla_validate_parse: 3 callbacks suppressed [ 264.299595][T11502] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1509'. [ 264.340820][T11502] IPv6: sit3: Disabled Multicast RS [ 264.347784][T11502] sit3: entered allmulticast mode [ 264.435807][T11506] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1511'. [ 264.448521][T11506] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1511'. [ 264.467914][T11506] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 264.478524][T11506] gretap1: entered promiscuous mode [ 264.484536][T11506] gretap1: entered allmulticast mode [ 264.585762][T11496] lo speed is unknown, defaulting to 1000 [ 264.774378][T11510] netlink: 'syz.0.1512': attribute type 3 has an invalid length. [ 264.797343][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1512'. [ 264.945319][T11512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 265.007672][T11495] lo speed is unknown, defaulting to 1000 [ 265.101014][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 265.635848][T11519] lo speed is unknown, defaulting to 1000 [ 265.767659][T11524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1515'. [ 265.924531][T11526] netlink: 'syz.2.1516': attribute type 4 has an invalid length. [ 265.938414][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1516'. [ 266.141219][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 266.143301][T11530] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 266.255092][T11534] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1519'. [ 266.442027][T11543] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 266.511604][T11543] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 266.670238][T11551] netlink: set zone limit has 4 unknown bytes [ 266.822145][T11554] netlink: 'syz.2.1526': attribute type 1 has an invalid length. [ 266.998115][T11554] veth5: entered promiscuous mode [ 267.013551][T11554] bond6: (slave veth5): Enslaving as a backup interface with a down link [ 267.138121][T11554] tipc: Enabled bearer , priority 0 [ 267.181100][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 267.194096][T11554] syzkaller0: entered promiscuous mode [ 267.206342][T11554] syzkaller0: entered allmulticast mode [ 267.220507][T11553] tipc: Resetting bearer [ 267.241663][T11570] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 [ 267.254026][T11553] tipc: Disabling bearer [ 267.278928][T11569] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 267.434144][T11575] lo speed is unknown, defaulting to 1000 [ 267.451706][T11577] FAULT_INJECTION: forcing a failure. [ 267.451706][T11577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.521264][T11577] CPU: 0 UID: 0 PID: 11577 Comm: syz.2.1534 Not tainted syzkaller #0 PREEMPT(full) [ 267.521289][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.521299][T11577] Call Trace: [ 267.521307][T11577] [ 267.521314][T11577] dump_stack_lvl+0x189/0x250 [ 267.521339][T11577] ? __pfx____ratelimit+0x10/0x10 [ 267.521357][T11577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.521375][T11577] ? __pfx__printk+0x10/0x10 [ 267.521397][T11577] ? __might_fault+0xb0/0x130 [ 267.521431][T11577] should_fail_ex+0x414/0x560 [ 267.521457][T11577] _copy_from_iter+0x1de/0x1790 [ 267.521481][T11577] ? rcu_is_watching+0x15/0xb0 [ 267.521498][T11577] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 267.521521][T11577] ? __pfx__copy_from_iter+0x10/0x10 [ 267.521540][T11577] ? __build_skb_around+0x257/0x3e0 [ 267.521561][T11577] ? netlink_sendmsg+0x642/0xb30 [ 267.521576][T11577] ? skb_put+0x11b/0x210 [ 267.521597][T11577] netlink_sendmsg+0x6b2/0xb30 [ 267.521623][T11577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.521644][T11577] ? aa_sock_msg_perm+0xf1/0x1d0 [ 267.521662][T11577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 267.521679][T11577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.521697][T11577] __sock_sendmsg+0x219/0x270 [ 267.521723][T11577] ____sys_sendmsg+0x505/0x830 [ 267.521748][T11577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.521776][T11577] ? import_iovec+0x74/0xa0 [ 267.521799][T11577] ___sys_sendmsg+0x21f/0x2a0 [ 267.521820][T11577] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.521885][T11577] ? __fget_files+0x2a/0x420 [ 267.521899][T11577] ? __fget_files+0x3a0/0x420 [ 267.521925][T11577] __x64_sys_sendmsg+0x19b/0x260 [ 267.521947][T11577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 267.521977][T11577] ? __pfx_ksys_write+0x10/0x10 [ 267.521994][T11577] ? rcu_is_watching+0x15/0xb0 [ 267.522016][T11577] ? do_syscall_64+0xbe/0x3b0 [ 267.522038][T11577] do_syscall_64+0xfa/0x3b0 [ 267.522054][T11577] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.522071][T11577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.522087][T11577] ? clear_bhb_loop+0x60/0xb0 [ 267.522107][T11577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.522123][T11577] RIP: 0033:0x7fafd8d8ebe9 [ 267.522139][T11577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.522153][T11577] RSP: 002b:00007fafd9bc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.522172][T11577] RAX: ffffffffffffffda RBX: 00007fafd8fc5fa0 RCX: 00007fafd8d8ebe9 [ 267.522185][T11577] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 267.522196][T11577] RBP: 00007fafd9bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 267.522207][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.522217][T11577] R13: 00007fafd8fc6038 R14: 00007fafd8fc5fa0 R15: 00007fffc1ad2888 [ 267.522247][T11577] [ 267.546433][T11579] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.853220][T11579] bond0: (slave bond4): Enslaving as an active interface with an up link [ 267.892684][T11585] tipc: Enabled bearer , priority 0 [ 267.911282][T11585] syzkaller0: entered promiscuous mode [ 267.923710][T11585] syzkaller0: entered allmulticast mode [ 268.196913][T11592] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 268.197865][T11596] tipc: Resetting bearer [ 268.221162][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 268.271413][T11592] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 268.300793][T11588] bridge0: entered promiscuous mode [ 268.306108][T11592] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 268.309694][T11588] macsec2: entered promiscuous mode [ 268.347638][T11588] bridge0: left promiscuous mode [ 268.565446][T11580] lo speed is unknown, defaulting to 1000 [ 268.687275][T11585] tipc: Resetting bearer [ 268.711047][T11585] tipc: Disabling bearer [ 268.865874][T11614] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 269.261075][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 269.389142][T11622] FAULT_INJECTION: forcing a failure. [ 269.389142][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 269.434978][T11622] CPU: 1 UID: 0 PID: 11622 Comm: syz.3.1547 Not tainted syzkaller #0 PREEMPT(full) [ 269.435005][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.435015][T11622] Call Trace: [ 269.435022][T11622] [ 269.435030][T11622] dump_stack_lvl+0x189/0x250 [ 269.435055][T11622] ? __pfx____ratelimit+0x10/0x10 [ 269.435073][T11622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.435092][T11622] ? __pfx__printk+0x10/0x10 [ 269.435117][T11622] ? __lock_acquire+0xab9/0xd20 [ 269.435149][T11622] should_fail_ex+0x414/0x560 [ 269.435175][T11622] should_failslab+0xa8/0x100 [ 269.435200][T11622] kmem_cache_alloc_noprof+0x73/0x3c0 [ 269.435221][T11622] ? skb_clone+0x212/0x3a0 [ 269.435245][T11622] skb_clone+0x212/0x3a0 [ 269.435269][T11622] __netlink_deliver_tap+0x404/0x850 [ 269.435300][T11622] ? netlink_deliver_tap+0x2e/0x1b0 [ 269.435319][T11622] netlink_deliver_tap+0x19c/0x1b0 [ 269.435339][T11622] netlink_unicast+0x7fa/0x9e0 [ 269.435370][T11622] ? __pfx_netlink_unicast+0x10/0x10 [ 269.435394][T11622] ? netlink_sendmsg+0x642/0xb30 [ 269.435409][T11622] ? skb_put+0x11b/0x210 [ 269.435431][T11622] netlink_sendmsg+0x805/0xb30 [ 269.435459][T11622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.435481][T11622] ? aa_sock_msg_perm+0xf1/0x1d0 [ 269.435500][T11622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 269.435518][T11622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.435536][T11622] __sock_sendmsg+0x219/0x270 [ 269.435563][T11622] ____sys_sendmsg+0x505/0x830 [ 269.435589][T11622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 269.435619][T11622] ? import_iovec+0x74/0xa0 [ 269.435643][T11622] ___sys_sendmsg+0x21f/0x2a0 [ 269.435665][T11622] ? __pfx____sys_sendmsg+0x10/0x10 [ 269.435724][T11622] ? __fget_files+0x2a/0x420 [ 269.435738][T11622] ? __fget_files+0x3a0/0x420 [ 269.435764][T11622] __x64_sys_sendmsg+0x19b/0x260 [ 269.435785][T11622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 269.435814][T11622] ? __pfx_ksys_write+0x10/0x10 [ 269.435832][T11622] ? rcu_is_watching+0x15/0xb0 [ 269.435856][T11622] ? do_syscall_64+0xbe/0x3b0 [ 269.435878][T11622] do_syscall_64+0xfa/0x3b0 [ 269.435894][T11622] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.435911][T11622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.435935][T11622] ? clear_bhb_loop+0x60/0xb0 [ 269.435956][T11622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.435973][T11622] RIP: 0033:0x7fa75838ebe9 [ 269.435989][T11622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.436004][T11622] RSP: 002b:00007fa759178038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.436024][T11622] RAX: ffffffffffffffda RBX: 00007fa7585c5fa0 RCX: 00007fa75838ebe9 [ 269.436036][T11622] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 269.436047][T11622] RBP: 00007fa759178090 R08: 0000000000000000 R09: 0000000000000000 [ 269.436058][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.436069][T11622] R13: 00007fa7585c6038 R14: 00007fa7585c5fa0 R15: 00007ffcc2b2cee8 [ 269.436100][T11622] [ 269.441928][T11622] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 269.861112][T11631] FAULT_INJECTION: forcing a failure. [ 269.861112][T11631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.879723][T11631] CPU: 1 UID: 0 PID: 11631 Comm: syz.2.1550 Not tainted syzkaller #0 PREEMPT(full) [ 269.879747][T11631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.879758][T11631] Call Trace: [ 269.879764][T11631] [ 269.879772][T11631] dump_stack_lvl+0x189/0x250 [ 269.879797][T11631] ? __pfx____ratelimit+0x10/0x10 [ 269.879812][T11631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.879827][T11631] ? __pfx__printk+0x10/0x10 [ 269.879847][T11631] ? __might_fault+0xb0/0x130 [ 269.879876][T11631] should_fail_ex+0x414/0x560 [ 269.879911][T11631] _copy_from_user+0x2d/0xb0 [ 269.879930][T11631] do_ipv6_setsockopt+0x23e/0x2eb0 [ 269.879955][T11631] ? aa_label_sk_perm+0x4cd/0x630 [ 269.879982][T11631] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 269.880003][T11631] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 269.880037][T11631] ? vfs_write+0x956/0xb30 [ 269.880062][T11631] ? __pfx___might_resched+0x10/0x10 [ 269.880089][T11631] ? __lock_acquire+0xab9/0xd20 [ 269.880115][T11631] ? aa_sk_perm+0x81e/0x950 [ 269.880141][T11631] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.880166][T11631] ? __fget_files+0x2a/0x420 [ 269.880178][T11631] ? aa_sock_opt_perm+0xff/0x1b0 [ 269.880195][T11631] ipv6_setsockopt+0x59/0x170 [ 269.880207][T11631] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 269.880231][T11631] do_sock_setsockopt+0x179/0x1b0 [ 269.880253][T11631] __x64_sys_setsockopt+0x13f/0x1b0 [ 269.880300][T11631] do_syscall_64+0xfa/0x3b0 [ 269.880317][T11631] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.880334][T11631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.880351][T11631] ? clear_bhb_loop+0x60/0xb0 [ 269.880371][T11631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.880387][T11631] RIP: 0033:0x7fafd8d8ebe9 [ 269.880403][T11631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.880418][T11631] RSP: 002b:00007fafd9bc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 269.880437][T11631] RAX: ffffffffffffffda RBX: 00007fafd8fc5fa0 RCX: 00007fafd8d8ebe9 [ 269.880450][T11631] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 269.880460][T11631] RBP: 00007fafd9bc4090 R08: 0000000000000032 R09: 0000000000000000 [ 269.880471][T11631] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 269.880482][T11631] R13: 00007fafd8fc6038 R14: 00007fafd8fc5fa0 R15: 00007fffc1ad2888 [ 269.880512][T11631] [ 270.300979][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 270.806417][ T7578] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 270.818425][ T7578] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 270.826873][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 270.836506][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.846558][ T7578] RIP: 0010:klist_del+0x49/0x110 [ 270.851498][ T7578] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 c5 b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b c5 b2 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 270.871188][ T7578] RSP: 0018:ffffc9000c02f768 EFLAGS: 00010202 [ 270.877281][ T7578] RAX: 000000000000000b RBX: ffff88805584d460 RCX: ffff888078623c00 [ 270.885270][ T7578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 270.893274][ T7578] RBP: ffffc9000c02f890 R08: ffff88802e650b43 R09: 1ffff11005cca168 [ 270.901270][ T7578] R10: dffffc0000000000 R11: ffffed1005cca169 R12: dffffc0000000000 [ 270.909414][ T7578] R13: 1ffff1100ab09a8c R14: 0000000000000000 R15: ffff8880545a8750 [ 270.917467][ T7578] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 270.926398][ T7578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.933005][ T7578] CR2: 00007ff5a60b7e9c CR3: 00000000217c0000 CR4: 00000000003526f0 [ 270.940985][ T7578] Call Trace: [ 270.944251][ T7578] [ 270.947176][ T7578] device_del+0x280/0x8e0 [ 270.951587][ T7578] ? _raw_spin_unlock_irq+0x2e/0x50 [ 270.956798][ T7578] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 270.962869][ T7578] ? __pfx_device_del+0x10/0x10 [ 270.967717][ T7578] ? netdev_unregister_kobject+0x344/0x450 [ 270.973562][ T7578] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 270.979991][ T7578] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 270.986751][ T7578] ? rtnl_net_dev_lock+0x257/0x2f0 [ 270.991936][ T7578] unregister_netdevice_queue+0x33c/0x380 [ 270.997675][ T7578] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 271.003919][ T7578] ? rtnl_net_dev_lock+0x36/0x2f0 [ 271.008932][ T7578] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 271.014042][ T7578] unregister_netdev+0x1f/0x60 [ 271.018825][ T7578] bnep_session+0x294d/0x2b40 [ 271.023566][ T7578] ? rcu_is_watching+0x15/0xb0 [ 271.028331][ T7578] ? trace_sched_exit_tp+0x36/0x110 [ 271.033611][ T7578] ? __lock_acquire+0xab9/0xd20 [ 271.038527][ T7578] ? __pfx_bnep_session+0x10/0x10 [ 271.043548][ T7578] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 271.049444][ T7578] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 271.055767][ T7578] ? __pfx_woken_wake_function+0x10/0x10 [ 271.061394][ T7578] ? __kthread_parkme+0x7b/0x200 [ 271.066368][ T7578] ? __kthread_parkme+0x1a1/0x200 [ 271.071382][ T7578] kthread+0x70e/0x8a0 [ 271.075446][ T7578] ? __pfx_bnep_session+0x10/0x10 [ 271.080461][ T7578] ? __pfx_kthread+0x10/0x10 [ 271.085064][ T7578] ? _raw_spin_unlock_irq+0x23/0x50 [ 271.090254][ T7578] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.095437][ T7578] ? __pfx_kthread+0x10/0x10 [ 271.100023][ T7578] ret_from_fork+0x3f9/0x770 [ 271.104598][ T7578] ? __pfx_ret_from_fork+0x10/0x10 [ 271.109701][ T7578] ? __switch_to_asm+0x39/0x70 [ 271.114541][ T7578] ? __switch_to_asm+0x33/0x70 [ 271.119295][ T7578] ? __pfx_kthread+0x10/0x10 [ 271.123879][ T7578] ret_from_fork_asm+0x1a/0x30 [ 271.128637][ T7578] [ 271.131661][ T7578] Modules linked in: [ 271.136559][ T7578] ---[ end trace 0000000000000000 ]--- [ 271.142735][ T7578] RIP: 0010:klist_del+0x49/0x110 [ 271.147703][ T7578] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 b9 c5 b2 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 9b c5 b2 f6 4d 8b 7e 58 4c 89 f7 e8 bf 73 [ 271.168014][ T7578] RSP: 0018:ffffc9000c02f768 EFLAGS: 00010202 [ 271.184840][ T7578] RAX: 000000000000000b RBX: ffff88805584d460 RCX: ffff888078623c00 [ 271.192917][ T7578] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 271.201083][ T7578] RBP: ffffc9000c02f890 R08: ffff88802e650b43 R09: 1ffff11005cca168 [ 271.209269][ T7578] R10: dffffc0000000000 R11: ffffed1005cca169 R12: dffffc0000000000 [ 271.217326][ T7578] R13: 1ffff1100ab09a8c R14: 0000000000000000 R15: ffff8880545a8750 [ 271.225484][ T7578] FS: 0000000000000000(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 271.234735][ T7578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.241562][ T7578] CR2: 00007fe0ebb3ae9c CR3: 000000000df36000 CR4: 00000000003526f0 [ 271.249563][ T7578] Kernel panic - not syncing: Fatal exception [ 271.255906][ T7578] Kernel Offset: disabled [ 271.260230][ T7578] Rebooting in 86400 seconds..