last executing test programs: 4.434061214s ago: executing program 4 (id=1725): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="ae2890bd918aff07d27c03a41f276540d41c11029a297f9e8fe2d245c01e7bb7b11912", 0x23}, 0x1, 0x0, 0x0, 0x48000}, 0x80) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x40, 0x80, 0x6, 0x8, {{0x16, 0x4, 0x1, 0xa, 0x58, 0x67, 0x0, 0x7, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_addr={0x44, 0x44, 0x7, 0x1, 0x9, [{@loopback, 0x3}, {@broadcast, 0x7}, {@multicast2, 0x6}, {@private=0xa010100, 0x1f8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbd1}, {@broadcast, 0x3}, {@private=0xa010100, 0xfffff000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)}, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/23, 0x17}, 0x69}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.234057474s ago: executing program 1 (id=1727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00'], 0x4c}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4008081) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)={0x0, 0x1f, "72f76f1b271fd77b006dcd2b70806be27c7250464dfc5bebbf5b6e632aef45"}, &(0x7f0000000580)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000005c0)={0x4, 0x2, 0x2, 0x2, 0x101, 0xfffffc01, 0x2, 0x0, r4}, &(0x7f0000000600)=0x20) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xda90) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000004b00)={0x0, 0x23, 0x5, 0x7, 0x80, 0x9, 0x401, 0x1, {0x0, @in6={{0xa, 0x4e22, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, 0xe5, 0x800, 0x3, 0x1, 0x82}}, &(0x7f0000004bc0)=0xb0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x5c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xe}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15cc}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x200040d0}, 0x20000c20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000180003800800040000000000080002000900000004000100"], 0x44}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x1e, &(0x7f0000000280)=0x9, 0x4) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000000c0)=0x808, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="41724adaf78d18d90f0000000400000008000000", @ANYBLOB="a1ebd9b03446e82e001d078032c2a5695c5e5d872377e277257c1839e37471882feecdacc818a0dd9f4813451bc3af09dab67135c43f661e7fe4dfc5b98b3f070340d9a98d1d601e462d737f332c6b29401b4329f4432ae3bb47baa7f815265eb1327eb42de6abbfe5437f8fcf218062622f0ea251c7a46d73af6bb6f43c45e7beacf942795fc3d5c2c74c8d9f48955e45abb45d22cf9581c1d9fe6e760c29b39c9ad9b65cd9c3be38e74d0d4aa94425462ec89149f7b0ace2e2dd5051ee0d2d92ad736dec6863dd2c73e15ab5a17188c08fcf869a1d", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000001d000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.497596888s ago: executing program 4 (id=1734): getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000180)={@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0xc, 0x7f, "e5d1ab5889453ee3c804af8bfe5ff2168ffccb959ea4095558723c98a20e52667526a19e24b44fe06e50dadeaeb657eabc583e12e1432305e0b59ad3bea375", 0x27}, {&(0x7f0000000100)=""/54, 0x36}, &(0x7f0000000140), 0x50}, 0xa0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r3, 0x0, 0x1, 0x29, &(0x7f0000000280)="ea", &(0x7f00000002c0)=""/41, 0x3, 0x0, 0x1000, 0xe3, &(0x7f0000000300)="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", &(0x7f0000001300)="027313d3a625fb3038e1b69bbc2c92ba9cededfff80d5c3c8ddde0368332e8ebfef8b5e86c7b4ccf017769dfc8b3713fee5d53819ecf2e617b4f4cbea0864bb3a6ef2926a6485d37f90372342379d55c7970bb6ed39a682ede5dc0f4b337d36cdc41ac9dd4f07d753b16f211935984e7657645904c46568fc83c0933aea728d5d4fd9bc3c7b01bd55ee6173ce02fef510cb0abf1042c77fe4d27a6f4dd80c8f1ba2f9f07ab6d9c90fbb2f5d86ca086cdb3c39b47c0247a79b31af7c53a50aeec87469885565a83b3c52ef1de59a328be36b02ce7683a56e9b05e1ecf1ac26f6dbaa09f", 0x2, 0x0, 0x51c0}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x14) syz_genetlink_get_family_id$fou(&(0x7f0000001480), r4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0), 0xda300, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x201) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000001500)={0x1, 0x10000}) r6 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000001540)={r4}) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000001600)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x5e99b4e2ab4522cf}, 0xc, &(0x7f00000015c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$rds(0x15, 0x5, 0x0) bind$tipc(r7, &(0x7f0000001640)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x1}}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@bloom_filter={0x1e, 0x6, 0xffffff5e, 0x3, 0x2, r8, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001a00)={&(0x7f0000001680)="a3be97f8d60b91c94437baa0a943e6a3bb06667fb78a93f5b0d1b3e49f6de5ae698a1d87d7523c4537c52bd01bcef1af7202c086b42fef4fdd70199f9d21779d3fcdddf60b2f80f46cd9fbe8cc6ef54e84f7efcdabd2c143c0365010f5d46cef1f65db919e9830f0abd3a5437f7cf1eeac92d613bc6e18292f4f7f50526b7bab136a575fbd7fdd6308f90006fb76e76ed9a507871c", &(0x7f0000001740)=""/248, &(0x7f0000001840)="559b9c1ff6c2f33d77992ef92c4d432e5533fddd15a7a2c48f88015087f183793b24a8717550c2c797e90cc0a8409e87d624b3d307ca", &(0x7f0000001880)="35cac4c144c3cc61d98240b491d954969b5443d27e6888e7f500e922369d99427cedc0882e51c12b50605c7aaf676b1378634de3a50a3c91875e616469109ad9a474e08247b973d092bbd64027a36cdcc447d6d94c409af0edd21b8dd63f5e1a239a19ec600c2411e757ae209ec30f7032a6341bc6dbbd404692fff76631880d9612daed90fcd5addea4db95d552abb369f293e5bd3ae96b08bb0ebd9e0ced222923ee8b735f98d3355ed694166ac88640a4d653801800de6e21863d1a8025f8febd1aaab9d25e814730a43d1295b54a3726b4d7070f7c268e15a2a66fc0", 0x8, r9}, 0x38) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000001a80), r4) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, r10, 0x51a, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x1) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001bc0), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000001e00)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x184, r11, 0x800, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xb3}, {0xc, 0x90, 0xdd4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xd}, {0xc, 0x90, 0x8001}}]}, 0x184}, 0x1, 0x0, 0x0, 0x5bd1646259597ca3}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)=@ipv6_deladdrlabel={0x4c, 0x49, 0x200, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0x1f, 0x0, 0x0, 0x2354}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x408c5}, 0x20000010) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000001f80), &(0x7f0000001fc0)=0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000002000)={r2, 0x3ff, 0x200, 0x9}) sendmsg$DEVLINK_CMD_RATE_NEW(r12, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x58, r11, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x801) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r12, 0xdfe96000) 3.149915642s ago: executing program 4 (id=1735): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2000000}, 0x94) 2.992048383s ago: executing program 1 (id=1737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FICLONE(r2, 0x40049409, r8) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x80000406, 0x1, 0xfdffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.991524555s ago: executing program 2 (id=1738): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400), 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 2.830938582s ago: executing program 4 (id=1740): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01600000000000000100077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003, 0x0, 0x80}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x7f, 0x2) unshare(0x6a040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r8 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x10) sendmsg$inet(r8, 0x0, 0x4000080) sendmsg$inet(r8, 0x0, 0x240448c4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000001c0)={0x0, 0x6c, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r6, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0xfffffffffffffdc6, 0x3, r10}]}, 0x24}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r11 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r11, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x810) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.736113203s ago: executing program 2 (id=1741): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x6, @mcast1, 0x108}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x3, {[0x6, 0x1000200, 0x1, 0xd, 0x2d, 0x1, 0x0, 0x6]}}, 0x5c) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) 2.634297644s ago: executing program 2 (id=1742): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x174, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x90, 0x1, [@m_mirred={0x5c, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xd, 0x6, "d527360c37d81b077c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x80, 0x1, [@m_ctinfo={0x7c, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffd"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r2, 0x29, 0x1f, &(0x7f0000000280)=""/4096, &(0x7f0000001280)=0x1000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmmsg$sock(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="114988120c8d32f1eb46684e638a4d7664d2590db8e05c2a5492570dbcf40993c65b62c40d67cb59dd9403c912f73783c3c256301e478ea15c13c71811e69179f60aab965ca48f339eb7bdbc51b01f82f170bd467a72b3d5f4a9", 0x5a}, {&(0x7f0000002340)="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", 0x167}], 0x2}}], 0x1, 0x4000000) recvmmsg(r4, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.56429562s ago: executing program 1 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, 0x0, 0x2000c800) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb4, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0) recvmsg(r0, &(0x7f0000001840)={&(0x7f00000018c0)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/185, 0xc5}, {&(0x7f00000005c0)=""/19, 0x29}, {&(0x7f0000000600)=""/104, 0x68}, {&(0x7f0000000680)=""/255, 0xff}, {&(0x7f0000001880)=""/15, 0x14}], 0x6, &(0x7f0000000840)=""/4096, 0x1000}, 0x142) bind$bt_l2cap(r6, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r6, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)='z', 0x1}], 0x1}}], 0x1, 0x4004004) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001940)=@newlink={0x29c, 0x10, 0x403, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x647e4, 0x64da0}, [@IFLA_VFINFO_LIST={0x26c, 0x16, 0x0, 0x1, [{0x7c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x7, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0x964, 0x1}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0x5, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x3, 0x2}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0x3}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xc, 0xc93f}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xae3c, 0x8}}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x6}}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0xff, 0x7ff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x3}}, @IFLA_VF_TRUST={0xc, 0x9, {0x67, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x401, 0x40}}, @IFLA_VF_MAC={0x28}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x7ff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x95, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0xa2000000, 0x9}}, @IFLA_VF_VLAN={0x10, 0x2, {0x5207, 0xba0, 0xe}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x9, 0xc83, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x38000, 0xe9}}]}, {0x100, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="4616a91790cf"}}, @IFLA_VF_RATE={0x10, 0x6, {0x200, 0x8, 0x12}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffd, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x2d07, 0x7fff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xfff}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x2}}, @IFLA_VF_VLAN_LIST={0x54, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xe, 0x7a3, 0x3, 0x88a8}}, {0x14, 0x1, {0x6, 0xe42, 0x1, 0x8100}}, {0x14, 0x1, {0xfff, 0x5b8, 0x0, 0x8100}}, {0x14, 0x1, {0x3ff, 0x50d, 0x200, 0x88a8}}]}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0xfffffff7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x78}}]}]}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x29c}, 0x1, 0xba01}, 0x0) socket$kcm(0x10, 0x3, 0x10) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x20900, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='xprtrdma_op_set_cto\x00', r10, 0x0, 0x5}, 0x18) 1.712424289s ago: executing program 2 (id=1749): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x65}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xb}, {}, {0xfff3, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfdc5, 0x2}}, {0x8, 0x1b, [0x5, 0x0]}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0800d907000000000000", 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x9, 0x20000000ec071, 0xffffffffffffffff, 0xf7fff000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) syz_emit_ethernet(0x76, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa236bdd70fc777100400600fe3c00000000000000000000000000bbfe8000000000000000000000000000aa00034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0002008290780000000002080d9294f8a639e2a611b3ea7a1e0300002208730b37ce18aa1e0dfa4006ba2dd15e056ad187000000"], 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x400c040) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xc000200a}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x62, 0x0, &(0x7f0000000240)="ff693ed422477b4af81206a65c428d1736e4ab88ba5d3da4d53cafdf7ab7a3024204542880c6c2d26b57d132a1e7e60992978812ce9f1eaf619d059a97f3bc429be6d2a6b9a078a6087513ccc2fd116f2153bea13123dbdbd4940cc4e80c7313c906", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1.439439768s ago: executing program 3 (id=1753): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x6, @mcast1, 0x108}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x3, {[0x6, 0x1000200, 0x1, 0xd, 0x2d, 0x1, 0x0, 0x6]}}, 0x5c) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) 1.375984576s ago: executing program 2 (id=1754): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r1, &(0x7f0000000940), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10122, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000006c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) close(r4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a5c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000001c300004802c0001800c0001007061796c6f6164001c00028008000340ffff00000800024000000002080004400000000014000000110001000000000000000000007c827c"], 0x84}, 0x1, 0x0, 0x0, 0x48046}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x20, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_MODE={0xa, 0x2, {0x1}}]}, 0x20}}, 0x18800) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f00000000c0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006120600800a0000040502"], 0x528}}, 0xc000) bind$alg(r6, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.30350808s ago: executing program 3 (id=1755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.235134099s ago: executing program 0 (id=1756): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000180)="ae2890bd918aff07d27c03a41f276540d41c11029a297f9e8fe2d245c01e7bb7b11912", 0x23}, 0x1, 0x0, 0x0, 0x48000}, 0x80) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x40, 0x80, 0x6, 0x8, {{0x16, 0x4, 0x1, 0xa, 0x58, 0x67, 0x0, 0x7, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_addr={0x44, 0x44, 0x7, 0x1, 0x9, [{@loopback, 0x3}, {@broadcast, 0x7}, {@multicast2, 0x6}, {@private=0xa010100, 0x1f8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xbd1}, {@broadcast, 0x3}, {@private=0xa010100, 0xfffff000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/23, 0x17}, 0x69}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 907.679418ms ago: executing program 1 (id=1757): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='!\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="4200000002000000000000002000"/28], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, 0x1, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="080003"], 0x94}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 907.124942ms ago: executing program 0 (id=1758): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) (async) ioctl$SIOCSIFMTU(r0, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x1, 0x1, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f0000000300)={r9, 0x10, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x82, &(0x7f0000000300)={r9, 0x10, 0x7}, 0x8) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029887cefffe25049f68dd31e000000370000000000000000000000bc688dd0dfc7f346417fa695cc9593397f41a3015df951be069069350776de68a238d696d863f85c348884743aed742e13193e6ae430c481d504f902ffd9fff0dab645ae96e618062da7ee84086f79e24309f7d61e7070a55857c12efe70c330299f3fcbd296502eb0c167300fb8f8bd4ea0c6ce9732320d68d3e6c2481acffadc653cf190ca790559988bdeee9cd17f050f2ae3abf8aa7db26ce9475c6d0cadd9996973c10bfce50541d8042849d2205ac874cd2b02"], 0x18}}], 0x1, 0x4000000) (async) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029887cefffe25049f68dd31e000000370000000000000000000000bc688dd0dfc7f346417fa695cc9593397f41a3015df951be069069350776de68a238d696d863f85c348884743aed742e13193e6ae430c481d504f902ffd9fff0dab645ae96e618062da7ee84086f79e24309f7d61e7070a55857c12efe70c330299f3fcbd296502eb0c167300fb8f8bd4ea0c6ce9732320d68d3e6c2481acffadc653cf190ca790559988bdeee9cd17f050f2ae3abf8aa7db26ce9475c6d0cadd9996973c10bfce50541d8042849d2205ac874cd2b02"], 0x18}}], 0x1, 0x4000000) 822.560782ms ago: executing program 3 (id=1759): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x20, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @target={{0xb}, @void}}]}], {0x14, 0x10}}, 0x94}, 0x1, 0x0, 0x0, 0x44001}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r3}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x82, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x0, 0x3}, @mss={0x2, 0x2}, @sack_perm, @window={0x3, 0x8, 0x2}, @timestamp, @sack_perm, @window={0x3, 0x1, 0x5}], 0x20000000000002c5) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f00000001c0)=0x8000, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000004000038008"], 0x110}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="70020000130029"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x25dfdbf9, {0xa, 0x0, 0x0, 0x5, 0x0, 0x3}}, 0x1c}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, r9, 0x8000, 0x1b223}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x26}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200448e0}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001800010000000000000000000a002000000000000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0xffff, @remote, 0x3}, 0x1c) unshare(0x20000400) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0069ae000000000000000023"], 0x1c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r10, 0x58, &(0x7f00000002c0)}, 0x10) 724.010628ms ago: executing program 2 (id=1760): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x1c, r1, 0x4, 0x70bd28, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x840) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001a640)=@delchain={0x174, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x6, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x124, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x90, 0x1, [@m_mirred={0x5c, 0x5, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xcdf, 0x1, 0x10000000, 0x2, 0xfffff001}, 0x4}}]}, {0xd, 0x6, "d527360c37d81b077c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_skbmod={0x30, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x80, 0x1, [@m_ctinfo={0x7c, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa2634cbcdbba1c88eea89d70023a7b9d8d2a94daf79fa1e5bffd"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r2 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300), 0x602, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="e61c58877b52a9", 0x7}], 0x1) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@private, 0x4d6, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r6, 0x1) recvmmsg(r6, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 723.109664ms ago: executing program 1 (id=1761): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b700000000000000630000000000000040020000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x34, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffffffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}]}, 0x34}, 0x4, 0x700000000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3f}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r8, 0x8983, &(0x7f00000004c0)={0x7, 'vlan0\x00', {0x8}, 0x6}) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffff800, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x9c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x24}, 0x94) 636.40062ms ago: executing program 0 (id=1762): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000200)=""/83, 0x53}], 0x3a}, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 635.881738ms ago: executing program 3 (id=1763): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10000000}, 0x94) 627.695986ms ago: executing program 4 (id=1764): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x1}}, 0x10) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r4, 0x89e9) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000f2c600000000000000001600000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000ffffff10ff2000"/138], 0x5000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00800000000000000c002b8008000100", @ANYRES32, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) 500.057098ms ago: executing program 0 (id=1765): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x6, @mcast1, 0x108}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x3, {[0x6, 0x1000200, 0x1, 0xd, 0x2d, 0x1, 0x0, 0x6]}}, 0x5c) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) sendmsg$tipc(r1, 0x0, 0x0) 455.987838ms ago: executing program 3 (id=1766): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x90, 0x35, 0x8, 0x0, 0x0, {0xb}, [@typed={0x8, 0x119, 0x0, 0x0, @uid=r1}, @generic="af3ae7d3596122c58db011b272b1223cb4cd61ca6878aa579bfa1086818a94eda0de4ac3b822ba37ef397b0bb3bd965b4af85a606318b029c3bd6fafd89f2048bd48b40ad539e33aa9b0c54fd33c1d09d5a5ceb38da10dc3c774", @typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3a}}, @typed={0x8, 0x4c, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x333, 0x0, 0x0, @fd}]}, 0x90}}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x328, 0xffffffff, 0xf0, 0x0, 0xf0, 0xffffffff, 0xffffffff, 0x290, 0x290, 0x290, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0xc8, 0xf0, 0x0, {0x100000000000000}, [@common=@inet=@tos={{0x28}, {0x1, 0xb, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x17}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x1, 0x3, [0x24, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x31, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r3, 0x80286722, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a7fdad8800000000280012800b0001006970366772650000180002800400120008000100", @ANYRES32=0x0, @ANYBLOB="06000300a00000004d3558d8d98841936ab84a784da10bcfbbe31c2dcfeb42d46bdbe5f8c9fe2913ae08e9b065230ce484466cb60efb2ed4f090307bee2d9ca6cc11f9857767096e33ae176d6d85a169bf6527a19fc884244d3a4daa3fb575f97d36f0c849a5e62b729a89ce3acbc9ac4ad9721b97a5d61f5f78ff995082c98b320331f7136a2be26137b095441f0b2006402494246865813de8421dd32011e6a4d796021d78ed33b7ca553509cd3afe"], 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 345.533748ms ago: executing program 0 (id=1767): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvfrom(r0, &(0x7f0000000000)=""/62, 0x3e, 0x40, &(0x7f0000000040)=@isdn={0x22, 0x8, 0x0, 0xc9, 0x3}, 0x80) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r1 = socket(0x8, 0x800, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x4}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x7, 0xf3, 0x3, 0x1, 0x2, 0xfffffff7, 0x3}}, {0xa, 0x2, [0xc, 0x6, 0x7b2]}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x100) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x10, 0x4, 0x3, 0x81, 0x13}, 0xc) 213.390698ms ago: executing program 3 (id=1768): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x700, @private0, 0x599}}, [0xfffffffffffffffb, 0x8000000000000001, 0x8, 0x4, 0x1, 0xe, 0x9, 0xfffffffffffffaf0, 0x2, 0x8, 0x237, 0x51, 0x4, 0x3, 0x4]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000003c0)={r4, 0x3}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f0000000840), &(0x7f0000004880)=@udp=r5}, 0x20) ioctl$int_in(r5, 0x5452, &(0x7f00000000c0)=0x14f) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x22) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x400}, 0x1c) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)={0x18, 0x56, 0x601, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r9, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r10, 0x2, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x10) socket$inet6(0xa, 0x4, 0x2a) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0xc21, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, 0x503}, [@IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) close(0x4) 162.686369ms ago: executing program 0 (id=1769): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x22020600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x4000000000000}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 27.909863ms ago: executing program 1 (id=1770): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0xfffd, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c000000020601020000000000000000000000000900020073797a32000000000500040000000000050005000200000015000300686173683a69702c7649d7c12c6e6574000000000c00078008001340fffffffc05000100070000005b2bc567c27d24bd1a26990d24686be9d3196e8b025431598a6dc1bc16a6df553a29b45446060e5de401202286f22f0e8309e96628b9504b980dc4866bdd8268bb3730ea62c9bb3b2d49ca2e298015b29c9b351490965670e8de855e423a6d5621a0779faa8f3fed241ddfd181905ecb884f0c6a19dcffa4253807e23d73797502919b447322b9467696b77622e320b68db955182b0b59afdc0dcbd4949a2fc96dfc1839dcbfb4fbfa126de05f6990c8c8d2068a"], 0x5c}}, 0x20000000) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x16) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x40, 0x6e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040}, 0x44001) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r5) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00022cbd7000fddbdf251200000050000780080002000e00f8000c0b04000500000000000000080001000900d6c40c00040003000000000000000e0003000c00000000000000080001000400000008000200530000810000000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x8821}, 0x14) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100ffffffff000000003900000008000300", @ANYRES32=r7, @ANYBLOB="18025a801400010305004428f465ef8cb45b02000a000000"], 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, 0xa) 0s ago: executing program 4 (id=1771): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="eebafe43ead041c9fc94d300d46d122babae65606c9e7537793cb118d9a78b8ee0b9d5c3b3da69dd4df3ab7cf3e94592623bc296c7ec5a8574c2d53ef04a1d5bad30ea90662283286677e2c05a16a3b496b32a5ce68af85c783e7f0d0857ae1d52d9017b776e2ee45880fdb304e9dd551cac2504d659988c46d5b8e00d2fccee252437e6d2edd2a9838c98deb7c6d0e1220b100a30312026e98940cfcff9b1f62752a2b25fa3a0749555b518adc9a7863c74c6ef83bc1455451936443160b575614fd0b3", 0xc4}, {&(0x7f0000000100)="8c23790bc3262549192846bcea5b47bddf9ed238424c7d7406ecf69c328b8ec6824b0dd54c3023c656b3c38870d8c640b8a07caf419ce6e32c047cc301fbc40267ea2857c0d43f3f3ea4d007e499df0d2b1babcc493e65f989fd21f5f6bf7e47a2f507e77405aa0fd40838198cd522f35ffaf9e0f7cd171ad9c4bfd43a0e478cbf7cd39b8e5022427e519cf7d04492e89696471146f0c05246f5fd92b115e3af66a3", 0xa2}, {&(0x7f00000001c0)="599f07f99e7cc0f4f766e4bc3f4683cfb0676a7440f86a94e1689a729daa8fe6cf43f4a44e32363814", 0x29}, {&(0x7f0000000200)="890a2b4ddfb816d5d0068c6bd974b7196824f55b2b1d51640dfcf9e153c78e7c7c5a0d8c455a836cd5f06d5e2bce1b1f466bb6e3cc1b006c7de8306915109436b50e4768c776ea123b5128684e05e99250e55288662842acc18b074c2e04f3f061caa1d43bdd65082a318c5b61f01d3b088730d37168cb2df3dafefbedec5044f51058bdf7ae", 0x86}, {&(0x7f00000002c0)="c54546441e389f07ff29fa812a2f985e2294a70ffa9daeadf3079451a2103c801175e1838ac529fa48276fb0073be3a298482799371959f0e3749b0595e7313850dfe2a1865be52b6947e6b303ebfef55a5efe508a", 0x55}, {&(0x7f0000000340)="548817d1e42de8b2743f74ce604432b0ebc277b8f6f9ccb0028f32803ced0e3572e98031ec9ea2d438c39c5a97be41fe6bcb8563826dac88fb6273f6d2d03057e832fdb2da3ba43e0f77715081ace6fc7a0d117622afa019fbf544b7c45b61f5ff4bc313990a2590b4cf0257e7b917c24decfe2f97570d1e4b5c599a6e2cd21c90b42281181f6afe633d67f0cf78884516e34e9ee363a27df1201017754563553ecc", 0xa2}, {&(0x7f0000000400)="dd2c7cc38ee74e8f7974be01d47ee241c876d111afa08d01fed67240417677f5311c8efa541f", 0x26}, {&(0x7f0000000440)="e9bb834038b817f9c4ff08814ea8c34265a5aa89c35594333f5f669a43eb9b9e048248a448da45d38b013f3479c2aeb27690f8b2854bac8ce91fea501d7d972d10308ac88dc1e1b83620cc001496c2c03e2b90e2908fd3d0be8b853d9e790dfb69e1d0003aa2736bf03ecc09072e432e548910b2bc46b6c963a91bad", 0x7c}, {&(0x7f00000004c0)="38739f95118b9dbad3da20fe046fd7353eeb2d804abe78e097f098848fd6ac5137f80c85e51b06073d5857c6ece398326e4322ee9bcbb7466c2813abb736cd518795f711ebe040d37c2d67f845912f7e4cf5e252a328a821503992ea4f4cdf33958bce0c22987d33925b15ac2da3f7e2c52f83056a9bf5cd5403c7fa7afda676934ebcc4c9a89ebaa2f2a79647832328c6deb45d577b151d1f23f58c63e23ec5fe4becd57d", 0xa5}], 0x9, &(0x7f0000000640)=[@ip_retopts={{0x20, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0xbd, 0x1, 0x7, [{@local, 0x8000}]}, @timestamp_prespec={0x44, 0x4, 0x74, 0x3, 0x2}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x38}, 0x800) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$pptp(0x18, 0x1, 0x2) r1 = socket$packet(0x11, 0x0, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x200000, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000700)=0xffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}, @NFTA_SET_EXPR={0x60, 0x11, 0x0, 0x1, @dup={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc4}, 0x1, 0x0, 0x0, 0x140}, 0x4093) r4 = accept$ax25(0xffffffffffffffff, &(0x7f0000000900)={{0x3, @null}, [@netrom, @null, @remote, @rose, @rose, @default, @null, @netrom]}, &(0x7f0000000980)=0x48) accept$ax25(r4, 0x0, &(0x7f00000009c0)) readv(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000a00)=""/227, 0xe3}, {&(0x7f0000000b00)=""/113, 0x71}], 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000bc0)={0x0, 0xfffffffb}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000c40)={r6, 0xcc37, 0x2, [0x1, 0x980]}, &(0x7f0000000c80)=0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d00), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r8, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x8000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e80)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r9, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x90, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, '\xbd]-(}^'}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '/dev/net/tun\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'syz1\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'dup\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '/dev/net/tun\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '/dev/net/tun\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x10, 0x14, '&(+:\\\xb9{:(\\!!'}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000090}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000001000)) getsockopt(r0, 0x80, 0x4, &(0x7f0000001040)=""/105, &(0x7f00000010c0)=0x69) r12 = socket$inet_sctp(0x2, 0x5, 0x84) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001100)={0xffffffffffffffff, 0x1}, 0xc) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r12, 0xc0c89425, &(0x7f0000001140)={"cba65cdc0fd5fea2123e5719f52612b0", 0x0, 0x0, {0x3, 0x28e5}, {0x5a0}, 0x8, [0x6, 0x6, 0xaa75, 0x9f, 0x58c, 0x0, 0x5, 0x6, 0x100000001, 0x200, 0x2, 0xfff, 0x3, 0x5, 0xffffffffffffffff, 0x4]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r13, 0x50009418, &(0x7f0000001240)={{r14}, r15, 0x1c, @unused=[0x7fffffffffffffff, 0x0, 0x10000000, 0x6], @name="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"}) kernel console output (not intermixed with test programs): check. [ 120.860628][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 121.642793][ T6745] netlink: 'syz.4.187': attribute type 32 has an invalid length. [ 121.671187][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 121.785284][ T6745] bond1: option coupled_control: invalid value (12) [ 121.807290][ T6745] bond1 (unregistering): Released all slaves [ 122.255790][ T6762] mac80211_hwsim hwsim10 ªªªªª;: renamed from wlan0 [ 122.327256][ T6762] syz_tun: entered allmulticast mode [ 122.350530][ T6761] syz_tun: left allmulticast mode [ 122.359437][ T6765] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.189'. [ 122.658297][ T6774] syz_tun: entered promiscuous mode [ 122.845827][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.851942][ T5849] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 123.276134][ T6790] lec:lec_atm_close: lec0: Shut down! [ 123.483644][ T6804] tipc: Started in network mode [ 123.489574][ T6804] tipc: Node identity fa12765cfdf8, cluster identity 4711 [ 123.497008][ T6804] tipc: Enabled bearer , priority 0 [ 123.511670][ T6803] syzkaller0: entered promiscuous mode [ 123.517565][ T6803] syzkaller0: entered allmulticast mode [ 123.616755][ T6803] tipc: Resetting bearer [ 123.642961][ T6812] netlink: 'syz.2.204': attribute type 1 has an invalid length. [ 123.668708][ T6812] netlink: 'syz.2.204': attribute type 2 has an invalid length. [ 123.677572][ T6802] tipc: Resetting bearer [ 123.699915][ T6802] tipc: Disabling bearer [ 123.774682][ T6814] syzkaller1: entered promiscuous mode [ 123.784903][ T6814] syzkaller1: entered allmulticast mode [ 123.811167][ T6814] __nla_validate_parse: 7 callbacks suppressed [ 123.811170][ T6820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.811187][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 123.867638][ T6820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.027120][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.3.209'. [ 124.297607][ T6842] netlink: 132 bytes leftover after parsing attributes in process `syz.4.213'. [ 124.523440][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 124.535498][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 124.568765][ T6846] tipc: Enabled bearer , priority 0 [ 124.672874][ T6846] syzkaller0: entered promiscuous mode [ 124.678541][ T6846] syzkaller0: entered allmulticast mode [ 124.685024][ T6846] tipc: Resetting bearer [ 124.718474][ T6845] tipc: Resetting bearer [ 124.805896][ T6865] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 125.581278][ T5932] tipc: Node number set to 132806236 [ 125.801953][ T6845] tipc: Disabling bearer [ 125.813717][ T6865] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 125.987026][ T6892] block nbd0: Unsupported socket: should be TCP or UNIX. [ 126.028251][ T6886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.125046][ T6886] smc: net device veth0_to_bond applied user defined pnetid SYZ0 [ 126.142467][ T6895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.230'. [ 126.266709][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 126.296583][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 126.305739][ T6901] netlink: 'syz.0.231': attribute type 15 has an invalid length. [ 126.373043][ T6906] netlink: 'syz.1.234': attribute type 13 has an invalid length. [ 126.383125][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.391064][ T6906] netlink: 'syz.1.234': attribute type 17 has an invalid length. [ 126.398894][ T6906] netlink: 'syz.1.234': attribute type 27 has an invalid length. [ 126.630595][ T6915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.235'. [ 126.653322][ T6908] netlink: 'syz.2.232': attribute type 16 has an invalid length. [ 126.724063][ T6908] netlink: 'syz.2.232': attribute type 17 has an invalid length. [ 126.820331][ T6908] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.842052][ T6908] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.278076][ T6986] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.252'. [ 128.296952][ T6989] raw_sendmsg: syz.2.252 forgot to set AF_INET. Fix it! [ 128.633177][ T6998] tipc: Enabled bearer , priority 0 [ 128.681244][ T6991] tipc: Resetting bearer [ 128.904620][ T7019] __nla_validate_parse: 1 callbacks suppressed [ 128.904639][ T7019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.257'. [ 129.666703][ T6339] tipc: Node number set to 2020370629 [ 129.827205][ T6991] tipc: Disabling bearer [ 130.092181][ T7030] netlink: 'syz.3.259': attribute type 21 has an invalid length. [ 130.330077][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 130.555879][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 130.697470][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.265'. [ 130.720704][ T7050] : entered promiscuous mode [ 130.729344][ T7050] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 130.768356][ T7050] bond1: entered promiscuous mode [ 130.793133][ T7050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.837203][ T7057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.265'. [ 130.885118][ T7055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.892697][ T7055] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 130.903034][ T7055] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 130.905589][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'. [ 130.920425][ T7055] bond1: (slave gre1): Opening slave failed [ 130.980611][ T7059] tipc: Started in network mode [ 130.985541][ T7059] tipc: Node identity 4260ac81ed3d, cluster identity 4711 [ 130.995938][ T7059] tipc: Enabled bearer , priority 0 [ 131.020863][ T7059] syzkaller0: entered promiscuous mode [ 131.039511][ T7059] syzkaller0: entered allmulticast mode [ 131.051198][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.268'. [ 131.096126][ T7059] tipc: Resetting bearer [ 131.113555][ T7058] tipc: Resetting bearer [ 131.143610][ T7058] tipc: Disabling bearer [ 131.315638][ T7071] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 131.327677][ T7071] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 131.513880][ T7078] netlink: 1 bytes leftover after parsing attributes in process `syz.2.271'. [ 131.574723][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'. [ 131.584136][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.273'. [ 131.632094][ T7091] geneve2: entered promiscuous mode [ 131.670610][ T7091] geneve2: entered allmulticast mode [ 132.064378][ T7106] team0: Port device team_slave_0 removed [ 132.235174][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 132.246076][ T7113] vlan0: entered promiscuous mode [ 132.288276][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 132.378323][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 133.099887][ T5932] wlan1 speed is unknown, defaulting to 1000 [ 133.127140][ T7115] infiniband syz2: set down [ 133.131946][ T7115] infiniband syz2: added wlan1 [ 133.147166][ T7115] syz2: rxe_create_cq: returned err = -12 [ 133.153482][ T7115] infiniband syz2: Couldn't create ib_mad CQ [ 133.161481][ T7115] infiniband syz2: Couldn't open port 1 [ 133.293329][ T7147] : renamed from bond_slave_0 [ 133.300599][ T7115] RDS/IB: syz2: added [ 133.305207][ T7115] smc: adding ib device syz2 with port count 1 [ 133.351180][ T7147] wlan1 speed is unknown, defaulting to 1000 [ 133.358202][ T7115] smc: ib device syz2 port 1 has no pnetid [ 133.418302][ T6344] wlan1 speed is unknown, defaulting to 1000 [ 133.904238][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 134.462339][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 134.686630][ T7186] __nla_validate_parse: 2 callbacks suppressed [ 134.686650][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.291'. [ 134.806410][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 134.899197][ T7193] syzkaller0: entered promiscuous mode [ 134.904730][ T7193] syzkaller0: entered allmulticast mode [ 135.094417][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 135.112697][ T6345] IPVS: starting estimator thread 0... [ 135.136599][ T7197] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 135.169544][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.296'. [ 135.225951][ T7198] IPVS: using max 25 ests per chain, 60000 per kthread [ 135.412821][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 135.442493][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 135.448217][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.299'. [ 135.522988][ T7212] trusted_key: syz.2.300 sent an empty control message without MSG_MORE. [ 135.650399][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 135.817221][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 135.986115][ T7115] wlan1 speed is unknown, defaulting to 1000 [ 136.212913][ T7212] syz.2.300 (7212) used greatest stack depth: 17832 bytes left [ 136.445204][ T7218] netlink: 24 bytes leftover after parsing attributes in process `syz.4.301'. [ 136.538363][ T7218] netlink: 'syz.4.301': attribute type 1 has an invalid length. [ 136.546265][ T7218] netlink: 'syz.4.301': attribute type 2 has an invalid length. [ 136.768819][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.303'. [ 137.078582][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.306'. [ 137.252369][ T7237] wlan1 speed is unknown, defaulting to 1000 [ 137.333639][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 138.116144][ T7279] netlink: 'syz.0.316': attribute type 13 has an invalid length. [ 138.124485][ T7279] netlink: 'syz.0.316': attribute type 17 has an invalid length. [ 138.141141][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.442215][ T7283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.489176][ T7287] netlink: 'syz.1.318': attribute type 1 has an invalid length. [ 138.540379][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 138.714544][ T7295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 138.953205][ T7279] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.134173][ T7273] wlan1 speed is unknown, defaulting to 1000 [ 139.451210][ T7303] netlink: 'syz.4.322': attribute type 1 has an invalid length. [ 139.459487][ T7303] netlink: 'syz.4.322': attribute type 2 has an invalid length. [ 139.480891][ T7302] bridge0: entered allmulticast mode [ 139.487366][ T7294] wlan1 speed is unknown, defaulting to 1000 [ 139.840317][ T7309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.971850][ T7309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.017461][ T7307] wlan1 speed is unknown, defaulting to 1000 [ 140.150994][ T7309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.429232][ T7309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.836215][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.016563][ T6281] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.035984][ T6281] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.121719][ T6281] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.282508][ T7314] netlink: 277 bytes leftover after parsing attributes in process `syz.1.326'. [ 141.357142][ T7314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.326'. [ 141.594446][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.329'. [ 141.634682][ T7324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 141.849620][ T7330] netlink: 'syz.3.327': attribute type 4 has an invalid length. [ 141.883279][ T7331] nbd: must specify a size in bytes for the device [ 141.998210][ T7337] netlink: 32 bytes leftover after parsing attributes in process `syz.4.331'. [ 142.066987][ T7338] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 142.275336][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 142.293914][ T7343] bond_slave_0: entered promiscuous mode [ 142.299910][ T7343] bond_slave_1: entered promiscuous mode [ 142.346388][ T7343] vlan3: entered promiscuous mode [ 142.363073][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 142.386135][ T7343] bond0: entered promiscuous mode [ 142.394053][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 142.574356][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 142.691137][ T7346] wlan1 speed is unknown, defaulting to 1000 [ 143.013548][ T7365] netlink: 'syz.4.337': attribute type 8 has an invalid length. [ 143.112333][ T7363] wlan1 speed is unknown, defaulting to 1000 [ 143.591499][ T7364] wlan1 speed is unknown, defaulting to 1000 [ 144.002304][ T7365] wlan1 speed is unknown, defaulting to 1000 [ 144.294209][ T7370] wlan1 speed is unknown, defaulting to 1000 [ 145.952456][ T7414] netlink: 'syz.0.348': attribute type 16 has an invalid length. [ 145.965524][ T7414] netlink: 'syz.0.348': attribute type 17 has an invalid length. [ 146.570016][ T7414] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.577964][ T7414] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.216836][ T7451] __nla_validate_parse: 8 callbacks suppressed [ 147.216858][ T7451] netlink: 14 bytes leftover after parsing attributes in process `syz.2.351'. [ 147.308346][ T7452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.351'. [ 147.324266][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.342695][ T7414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.449101][ T7414] veth1_vlan: left allmulticast mode [ 147.594306][ T7436] syzkaller0: entered promiscuous mode [ 147.604525][ T7436] syzkaller0: entered allmulticast mode [ 147.708435][ T7451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.722229][ T7451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.734812][ T7451] bond0 (unregistering): Released all slaves [ 147.880385][ T7452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.889212][ T6281] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.908209][ T6281] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.969185][ T6281] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.998706][ T7424] wlan1 speed is unknown, defaulting to 1000 [ 148.100247][ T6281] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.416889][ T7478] bond1: option tlb_dynamic_lb: invalid value (99) [ 148.433036][ T7478] bond1 (unregistering): Released all slaves [ 148.659238][ T7485] bond2: option resend_igmp: invalid value (2878) [ 148.702566][ T7485] bond2: option resend_igmp: allowed values 0 - 255 [ 148.728689][ T7490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.358'. [ 148.770467][ T7485] bond2 (unregistering): Released all slaves [ 149.174646][ T7513] tipc: Enabled bearer , priority 0 [ 149.183568][ T7513] syzkaller0: entered promiscuous mode [ 149.189607][ T7513] syzkaller0: entered allmulticast mode [ 149.205516][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.363'. [ 149.252603][ T7518] syz.3.364: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 149.321115][ T7518] CPU: 1 UID: 0 PID: 7518 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT(full) [ 149.321144][ T7518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.321164][ T7518] Call Trace: [ 149.321172][ T7518] [ 149.321181][ T7518] dump_stack_lvl+0x189/0x250 [ 149.321224][ T7518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.321248][ T7518] ? __pfx__printk+0x10/0x10 [ 149.321271][ T7518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.321294][ T7518] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.321319][ T7518] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 149.321364][ T7518] warn_alloc+0x214/0x310 [ 149.321390][ T7518] ? stack_depot_save_flags+0x40/0x860 [ 149.321418][ T7518] ? __pfx_warn_alloc+0x10/0x10 [ 149.321446][ T7518] ? kasan_save_track+0x3e/0x80 [ 149.321468][ T7518] ? __kasan_kmalloc+0x93/0xb0 [ 149.321495][ T7518] ? xsk_setsockopt+0x4dc/0x8d0 [ 149.321518][ T7518] ? do_sock_setsockopt+0x17c/0x1b0 [ 149.321540][ T7518] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 149.321561][ T7518] ? do_syscall_64+0xfa/0xfa0 [ 149.321588][ T7518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.321626][ T7518] __vmalloc_node_range_noprof+0x125/0x12d0 [ 149.321688][ T7518] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 149.321719][ T7518] ? __kasan_kmalloc+0x93/0xb0 [ 149.321752][ T7518] vmalloc_user_noprof+0xad/0xf0 [ 149.321777][ T7518] ? xskq_create+0xbf/0x170 [ 149.321805][ T7518] xskq_create+0xbf/0x170 [ 149.321837][ T7518] xsk_init_queue+0xb0/0x110 [ 149.321867][ T7518] xsk_setsockopt+0x4dc/0x8d0 [ 149.321896][ T7518] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.321925][ T7518] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.321957][ T7518] ? aa_sock_opt_perm+0xff/0x1b0 [ 149.321986][ T7518] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 149.322014][ T7518] ? __pfx_xsk_setsockopt+0x10/0x10 [ 149.322042][ T7518] do_sock_setsockopt+0x17c/0x1b0 [ 149.322071][ T7518] __x64_sys_setsockopt+0x13f/0x1b0 [ 149.322101][ T7518] do_syscall_64+0xfa/0xfa0 [ 149.322128][ T7518] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.322156][ T7518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.322177][ T7518] ? clear_bhb_loop+0x60/0xb0 [ 149.322204][ T7518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.322225][ T7518] RIP: 0033:0x7fc70a18efc9 [ 149.322257][ T7518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.322275][ T7518] RSP: 002b:00007fc70afb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 149.322297][ T7518] RAX: ffffffffffffffda RBX: 00007fc70a3e6090 RCX: 00007fc70a18efc9 [ 149.322313][ T7518] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000b [ 149.322325][ T7518] RBP: 00007fc70a211f91 R08: 0000000000000004 R09: 0000000000000000 [ 149.322338][ T7518] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.322352][ T7518] R13: 00007fc70a3e6128 R14: 00007fc70a3e6090 R15: 00007fff53eaa288 [ 149.322390][ T7518] [ 149.322403][ T7518] Mem-Info: [ 149.421564][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 149.491223][ T7518] active_anon:3999 inactive_anon:0 isolated_anon:0 [ 149.491223][ T7518] active_file:3080 inactive_file:39899 isolated_file:0 [ 149.491223][ T7518] unevictable:768 dirty:280 writeback:0 [ 149.491223][ T7518] slab_reclaimable:11200 slab_unreclaimable:152680 [ 149.491223][ T7518] mapped:30070 shmem:1356 pagetables:925 [ 149.491223][ T7518] sec_pagetables:0 bounce:0 [ 149.491223][ T7518] kernel_misc_reclaimable:0 [ 149.491223][ T7518] free:1270668 free_pcp:15459 free_cma:0 [ 149.525434][ T7532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 149.599617][ T7518] Node 0 active_anon:16896kB inactive_anon:0kB active_file:12320kB inactive_file:159396kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133980kB dirty:1120kB writeback:0kB shmem:4788kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12672kB pagetables:3792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.819345][ T7522] 8021q: VLANs not supported on ip_vti0 [ 149.846562][ T7518] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 149.926409][ T7518] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.998869][ T7511] wlan1 speed is unknown, defaulting to 1000 [ 150.034559][ T7518] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 150.105449][ T7518] Node 0 DMA32 free:1168780kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24376kB inactive_anon:0kB active_file:12320kB inactive_file:159404kB unevictable:1536kB writepending:1156kB zspages:0kB present:3129332kB managed:2561552kB mlocked:0kB bounce:0kB free_pcp:41912kB local_pcp:21340kB free_cma:0kB [ 150.153079][ T7512] tipc: Resetting bearer [ 150.183381][ T7518] lowmem_reserve[]: 0 0 1 1 1 [ 150.189373][ T7518] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 150.229173][ T7518] lowmem_reserve[]: 0 0 0 0 0 [ 150.233981][ T7518] Node 1 Normal free:3889552kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19672kB local_pcp:12280kB free_cma:0kB [ 150.321238][ T7518] lowmem_reserve[]: 0 0 0 0 0 [ 150.326187][ T7518] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.339147][ T7518] Node 0 DMA32: 5*4kB (ME) 1*8kB (E) 51*16kB (UM) 210*32kB (UM) 104*64kB (UME) 46*128kB (UME) 20*256kB (UME) 18*512kB (UME) 8*1024kB (UM) 5*2048kB (ME) 272*4096kB (UM) = 1166988kB [ 150.357465][ T7518] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 150.369190][ T7518] Node 1 Normal: 120*4kB (UME) 26*8kB (UME) 42*16kB (UME) 78*32kB (UME) 24*64kB (UME) 9*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3889552kB [ 150.414866][ T7518] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.452669][ T7518] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.464770][ T7518] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.487523][ T7518] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.511202][ T7518] 47183 total pagecache pages [ 150.526949][ T7518] 0 pages in swap cache [ 150.537025][ T7518] Free swap = 124996kB [ 150.546508][ T7518] Total swap = 124996kB [ 150.551056][ T7518] 2097051 pages RAM [ 150.555062][ T7518] 0 pages HighMem/MovableOnly [ 150.559907][ T7518] 424573 pages reserved [ 150.571827][ T7518] 0 pages cma reserved [ 150.577322][ T7512] tipc: Disabling bearer [ 151.161118][ T7563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.370'. [ 151.411839][ T7575] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 151.604710][ T7575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.697902][ T7581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 151.705216][ T7581] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 151.734149][ T7581] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 152.026277][ T7595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'. [ 152.432185][ T7614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.380'. [ 152.433252][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.381'. [ 152.458169][ T7614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.380'. [ 152.467741][ T7614] netlink: 52 bytes leftover after parsing attributes in process `syz.2.380'. [ 153.361005][ T7651] netlink: 52 bytes leftover after parsing attributes in process `syz.0.392'. [ 153.380994][ T7651] netlink: 52 bytes leftover after parsing attributes in process `syz.0.392'. [ 153.390056][ T7651] netlink: 52 bytes leftover after parsing attributes in process `syz.0.392'. [ 153.508631][ T7660] netlink: 'syz.4.395': attribute type 39 has an invalid length. [ 153.690047][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 153.718551][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 153.964800][ T7679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.404'. [ 154.062345][ T7673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.254891][ T7673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.311173][ T7697] xt_time: unknown flags 0xf4 [ 154.357982][ T7690] can: request_module (can-proto-5) failed. [ 154.479239][ T7673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.537121][ T7702] sch_fq: defrate 0 ignored. [ 154.757925][ T7673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.945153][ T7715] netlink: 'syz.0.411': attribute type 2 has an invalid length. [ 154.974403][ T7707] wlan1 speed is unknown, defaulting to 1000 [ 155.033266][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.077188][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.117821][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.167483][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.931526][ T7742] netlink: 'syz.2.422': attribute type 1 has an invalid length. [ 155.941407][ T7723] wlan1 speed is unknown, defaulting to 1000 [ 156.098734][ T7746] bond2: (slave bridge1): making interface the new active one [ 156.117578][ T7746] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 157.536830][ T7777] __nla_validate_parse: 13 callbacks suppressed [ 157.536848][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.429'. [ 157.690408][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.436'. [ 157.706878][ T7794] veth0_to_bond: entered allmulticast mode [ 157.727234][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 157.768764][ T7790] wlan1 speed is unknown, defaulting to 1000 [ 157.904966][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 158.065616][ T7813] netlink: 44 bytes leftover after parsing attributes in process `syz.1.437'. [ 158.174710][ T7817] netlink: 'syz.0.440': attribute type 3 has an invalid length. [ 158.199471][ T7816] netlink: 'syz.0.440': attribute type 3 has an invalid length. [ 158.231646][ T7816] syz_tun: entered allmulticast mode [ 158.289732][ T7816] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 158.309733][ T7816] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 158.416926][ T7817] bridge0: entered promiscuous mode [ 158.429200][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.439972][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.463007][ T7827] nbd: must specify a size in bytes for the device [ 158.488596][ T7817] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.510171][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.443'. [ 158.520317][ T7829] netlink: 36 bytes leftover after parsing attributes in process `syz.2.444'. [ 158.594432][ T7816] syz_tun: left allmulticast mode [ 158.828613][ T7840] netlink: 52 bytes leftover after parsing attributes in process `syz.0.447'. [ 159.069109][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'. [ 159.104783][ T7849] netlink: 'syz.0.449': attribute type 9 has an invalid length. [ 159.371240][ T7857] netlink: 64 bytes leftover after parsing attributes in process `syz.1.452'. [ 159.663488][ T7868] bridge0: left allmulticast mode [ 159.810926][ T7872] netlink: 'syz.0.456': attribute type 21 has an invalid length. [ 160.136815][ T7885] wlan1 speed is unknown, defaulting to 1000 [ 160.828678][ T7892] macsec2: entered promiscuous mode [ 160.871111][ T7892] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 160.907372][ T7892] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 161.048203][ T7897] bond3: option packets_per_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 161.062478][ T7897] bond3 (unregistering): Released all slaves [ 161.110645][ T7891] wlan1 speed is unknown, defaulting to 1000 [ 161.456525][ T7907] wlan1 speed is unknown, defaulting to 1000 [ 162.000821][ T7943] netlink: 'syz.0.472': attribute type 4 has an invalid length. [ 162.055298][ T7943] netlink: 'syz.0.472': attribute type 4 has an invalid length. [ 162.108565][ T7943] xt_hashlimit: max too large, truncated to 1048576 [ 162.619550][ T7957] syzkaller0: entered promiscuous mode [ 162.646396][ T7957] syzkaller0: entered allmulticast mode [ 162.800591][ T7964] __nla_validate_parse: 6 callbacks suppressed [ 162.800611][ T7964] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.478'. [ 164.166615][ T7986] wlan1 speed is unknown, defaulting to 1000 [ 164.276069][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.483'. [ 164.305618][ T7991] macvlan0: entered promiscuous mode [ 164.331910][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 164.335511][ T7991] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 164.424368][ T7991] netlink: 'syz.3.484': attribute type 2 has an invalid length. [ 165.525821][ T8047] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 165.910059][ T8057] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 165.922341][ T8057] netlink: 17 bytes leftover after parsing attributes in process `syz.0.499'. [ 166.170599][ T8065] netlink: 256 bytes leftover after parsing attributes in process `syz.3.500'. [ 166.203795][ T8061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.500'. [ 166.241737][ T8066] wlan1 speed is unknown, defaulting to 1000 [ 166.259580][ T8061] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.395108][ T8061] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.585160][ T8061] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.603342][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.503'. [ 166.658741][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 166.683240][ T8061] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.717825][ T8076] ipvlan2: entered promiscuous mode [ 166.865576][ T8085] netlink: 'syz.0.507': attribute type 9 has an invalid length. [ 166.891993][ T8085] netlink: 'syz.0.507': attribute type 7 has an invalid length. [ 166.920738][ T8085] netlink: 'syz.0.507': attribute type 8 has an invalid length. [ 167.082512][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.192602][ T1148] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.242825][ T1148] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.290551][ T1148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.448069][ T8094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.509'. [ 168.078583][ T8108] dvmrp0: entered allmulticast mode [ 168.122318][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.1.512'. [ 168.431329][ T8126] wlan1 speed is unknown, defaulting to 1000 [ 168.780296][ T8128] wlan1 speed is unknown, defaulting to 1000 [ 169.252817][ T8143] netlink: 'syz.0.522': attribute type 7 has an invalid length. [ 169.265411][ T8142] IPv6: addrconf: prefix option has invalid lifetime [ 169.542979][ T8151] netlink: 'syz.2.523': attribute type 298 has an invalid length. [ 169.652302][ T8151] IPVS: Scheduler module ip_vs_sip not found [ 169.834341][ T8168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'. [ 169.875085][ T8168] netlink: 120 bytes leftover after parsing attributes in process `syz.4.528'. [ 169.898320][ T8163] wlan1 speed is unknown, defaulting to 1000 [ 170.401718][ T8188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.441507][ T8167] wlan1 speed is unknown, defaulting to 1000 [ 170.558857][ T8190] x_tables: duplicate underflow at hook 2 [ 170.602164][ T7457] IPVS: starting estimator thread 0... [ 170.717388][ T8193] IPVS: using max 27 ests per chain, 64800 per kthread [ 170.853043][ T8203] netlink: 52 bytes leftover after parsing attributes in process `syz.3.538'. [ 170.891348][ T8203] netlink: 52 bytes leftover after parsing attributes in process `syz.3.538'. [ 170.930913][ T8203] netlink: 52 bytes leftover after parsing attributes in process `syz.3.538'. [ 171.227022][ T8165] wlan1 speed is unknown, defaulting to 1000 [ 171.727320][ T8252] bridge0: port 1(vlan2) entered blocking state [ 171.734200][ T8252] bridge0: port 1(vlan2) entered disabled state [ 171.740768][ T8252] vlan2: entered allmulticast mode [ 171.746063][ T8252] dummy0: entered allmulticast mode [ 171.969112][ T8260] Bluetooth: MGMT ver 1.23 [ 171.989143][ T8260] netlink: 'syz.1.551': attribute type 4 has an invalid length. [ 172.201232][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 172.253805][ T8263] wlan1 speed is unknown, defaulting to 1000 [ 172.616040][ T8268] FAULT_INJECTION: forcing a failure. [ 172.616040][ T8268] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 172.630742][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.0.554 Not tainted syzkaller #0 PREEMPT(full) [ 172.630771][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.630784][ T8268] Call Trace: [ 172.630800][ T8268] [ 172.630810][ T8268] dump_stack_lvl+0x189/0x250 [ 172.630839][ T8268] ? __pfx____ratelimit+0x10/0x10 [ 172.630867][ T8268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.630890][ T8268] ? __pfx__printk+0x10/0x10 [ 172.630927][ T8268] should_fail_ex+0x414/0x560 [ 172.630954][ T8268] _copy_to_user+0x31/0xb0 [ 172.630987][ T8268] simple_read_from_buffer+0xe1/0x170 [ 172.631018][ T8268] proc_fail_nth_read+0x1b3/0x220 [ 172.631042][ T8268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.631066][ T8268] ? rw_verify_area+0x2a6/0x4d0 [ 172.631087][ T8268] ? __lock_acquire+0xab9/0xd20 [ 172.631114][ T8268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.631136][ T8268] vfs_read+0x200/0xa30 [ 172.631157][ T8268] ? fdget_pos+0x247/0x320 [ 172.631190][ T8268] ? __pfx___mutex_lock+0x10/0x10 [ 172.631221][ T8268] ? __pfx_vfs_read+0x10/0x10 [ 172.631245][ T8268] ? __fget_files+0x2a/0x420 [ 172.631277][ T8268] ? __fget_files+0x3a0/0x420 [ 172.631303][ T8268] ? __fget_files+0x2a/0x420 [ 172.631341][ T8268] ksys_read+0x145/0x250 [ 172.631367][ T8268] ? __pfx_ksys_read+0x10/0x10 [ 172.631395][ T8268] ? do_syscall_64+0xbe/0xfa0 [ 172.631428][ T8268] do_syscall_64+0xfa/0xfa0 [ 172.631455][ T8268] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.631483][ T8268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.631504][ T8268] ? clear_bhb_loop+0x60/0xb0 [ 172.631530][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.631550][ T8268] RIP: 0033:0x7f9184d8d9dc [ 172.631569][ T8268] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.631586][ T8268] RSP: 002b:00007f9185ba5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.631608][ T8268] RAX: ffffffffffffffda RBX: 00007f9184fe5fa0 RCX: 00007f9184d8d9dc [ 172.631623][ T8268] RDX: 000000000000000f RSI: 00007f9185ba50a0 RDI: 0000000000000004 [ 172.631641][ T8268] RBP: 00007f9185ba5090 R08: 0000000000000000 R09: 0000000000000000 [ 172.631654][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.631666][ T8268] R13: 00007f9184fe6038 R14: 00007f9184fe5fa0 R15: 00007ffd73a326f8 [ 172.631702][ T8268] [ 172.871668][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.553'. [ 172.881937][ T8269] netlink: 20 bytes leftover after parsing attributes in process `syz.3.553'. [ 172.980683][ T8269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.553'. [ 173.204577][ T8285] netlink: 'syz.2.559': attribute type 21 has an invalid length. [ 173.265682][ T8279] sock: sock_set_timeout: `syz.3.558' (pid 8279) tries to set negative timeout [ 173.498956][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.552052][ T8297] netlink: 32 bytes leftover after parsing attributes in process `syz.3.562'. [ 173.801362][ T8306] syzkaller1: entered promiscuous mode [ 173.814416][ T8306] syzkaller1: entered allmulticast mode [ 173.862350][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 174.046203][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 174.141263][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'. [ 174.207418][ T8322] wlan1 speed is unknown, defaulting to 1000 [ 174.214691][ T8323] netlink: 256 bytes leftover after parsing attributes in process `syz.4.568'. [ 174.660865][ T8341] bond3 (unregistering): Released all slaves [ 174.776629][ T8353] netlink: 'syz.0.578': attribute type 1 has an invalid length. [ 174.808675][ T8354] bridge3: entered promiscuous mode [ 174.814092][ T8354] bridge3: entered allmulticast mode [ 174.971614][ T8353] bond1: entered promiscuous mode [ 174.989248][ T8353] bond1: entered allmulticast mode [ 175.300736][ T8372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.581'. [ 175.334238][ T8380] ip6gre1: entered promiscuous mode [ 175.494179][ T8382] netlink: 76 bytes leftover after parsing attributes in process `syz.4.584'. [ 175.721568][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 176.049422][ T8407] FAULT_INJECTION: forcing a failure. [ 176.049422][ T8407] name failslab, interval 1, probability 0, space 0, times 1 [ 176.062549][ T8407] CPU: 0 UID: 0 PID: 8407 Comm: syz.3.590 Not tainted syzkaller #0 PREEMPT(full) [ 176.062579][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.062591][ T8407] Call Trace: [ 176.062600][ T8407] [ 176.062608][ T8407] dump_stack_lvl+0x189/0x250 [ 176.062637][ T8407] ? __pfx____ratelimit+0x10/0x10 [ 176.062665][ T8407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.062688][ T8407] ? __pfx__printk+0x10/0x10 [ 176.062724][ T8407] ? __pfx___might_resched+0x10/0x10 [ 176.062754][ T8407] ? fs_reclaim_acquire+0x7d/0x100 [ 176.062786][ T8407] should_fail_ex+0x414/0x560 [ 176.062812][ T8407] should_failslab+0xa8/0x100 [ 176.062842][ T8407] __kmalloc_noprof+0xcb/0x7f0 [ 176.062864][ T8407] ? iovec_from_user+0x87/0x250 [ 176.062900][ T8407] iovec_from_user+0x87/0x250 [ 176.062933][ T8407] __import_iovec+0x163/0x7f0 [ 176.062974][ T8407] import_iovec+0x74/0xa0 [ 176.063008][ T8407] ___sys_recvmsg+0x43a/0x510 [ 176.063040][ T8407] ? __pfx____sys_recvmsg+0x10/0x10 [ 176.063095][ T8407] ? __fget_files+0x3a0/0x420 [ 176.063134][ T8407] do_recvmmsg+0x307/0x770 [ 176.063170][ T8407] ? __pfx_do_recvmmsg+0x10/0x10 [ 176.063210][ T8407] ? _copy_from_user+0x94/0xb0 [ 176.063257][ T8407] __x64_sys_recvmmsg+0x1af/0x240 [ 176.063287][ T8407] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 176.063317][ T8407] ? do_syscall_64+0xbe/0xfa0 [ 176.063350][ T8407] do_syscall_64+0xfa/0xfa0 [ 176.063377][ T8407] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.063410][ T8407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.063430][ T8407] ? clear_bhb_loop+0x60/0xb0 [ 176.063456][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.063476][ T8407] RIP: 0033:0x7fc70a18efc9 [ 176.063495][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.063525][ T8407] RSP: 002b:00007fc70afd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 176.063547][ T8407] RAX: ffffffffffffffda RBX: 00007fc70a3e5fa0 RCX: 00007fc70a18efc9 [ 176.063562][ T8407] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 176.063575][ T8407] RBP: 00007fc70afd9090 R08: 0000200000003700 R09: 0000000000000000 [ 176.063588][ T8407] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 176.063601][ T8407] R13: 00007fc70a3e6038 R14: 00007fc70a3e5fa0 R15: 00007fff53eaa288 [ 176.063635][ T8407] [ 176.544993][ T8418] IPVS: set_ctl: invalid protocol: 173 10.1.1.1:20001 [ 176.597115][ T7458] IPVS: starting estimator thread 0... [ 176.646428][ T8414] wlan1 speed is unknown, defaulting to 1000 [ 176.696113][ T8419] IPVS: using max 26 ests per chain, 62400 per kthread [ 176.986807][ T8435] team0: Port device team_slave_0 removed [ 177.644471][ T8460] netlink: 24 bytes leftover after parsing attributes in process `syz.1.601'. [ 177.792605][ T8466] netlink: 52 bytes leftover after parsing attributes in process `syz.4.602'. [ 177.822709][ T8466] netlink: 52 bytes leftover after parsing attributes in process `syz.4.602'. [ 178.150233][ T8477] wlan1 speed is unknown, defaulting to 1000 [ 178.648311][ T8488] wlan1 speed is unknown, defaulting to 1000 [ 179.080139][ T8494] wlan1 speed is unknown, defaulting to 1000 [ 179.382558][ T8524] syzkaller1: entered promiscuous mode [ 179.425751][ T8524] syzkaller1: entered allmulticast mode [ 179.477382][ T8529] tipc: Enabled bearer , priority 0 [ 179.522526][ T8529] tipc: Disabling bearer [ 179.734355][ T8495] wlan1 speed is unknown, defaulting to 1000 [ 179.802809][ T8534] __nla_validate_parse: 1 callbacks suppressed [ 179.802827][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 179.962095][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.969925][ T8539] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.093981][ T8539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.112909][ T8539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.157388][ T8539] vlan0: left promiscuous mode [ 180.162823][ T8539] macvlan0: left promiscuous mode [ 180.193540][ T8539] geneve2: left promiscuous mode [ 180.198908][ T8539] geneve2: left allmulticast mode [ 180.207154][ T8539] ip6gre1: left promiscuous mode [ 180.252311][ T8542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.621'. [ 180.253748][ T8538] wlan1 speed is unknown, defaulting to 1000 [ 180.276470][ T6287] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.287232][ T6287] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.306288][ T6287] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.317799][ T6287] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.491341][ T8547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.622'. [ 180.541238][ T8549] FAULT_INJECTION: forcing a failure. [ 180.541238][ T8549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.563054][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.3.623 Not tainted syzkaller #0 PREEMPT(full) [ 180.563084][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.563096][ T8549] Call Trace: [ 180.563104][ T8549] [ 180.563113][ T8549] dump_stack_lvl+0x189/0x250 [ 180.563142][ T8549] ? __pfx____ratelimit+0x10/0x10 [ 180.563177][ T8549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.563208][ T8549] ? __pfx__printk+0x10/0x10 [ 180.563231][ T8549] ? __might_fault+0xb0/0x130 [ 180.563267][ T8549] should_fail_ex+0x414/0x560 [ 180.563294][ T8549] _copy_to_iter+0x589/0x1790 [ 180.563338][ T8549] ? __pfx__copy_to_iter+0x10/0x10 [ 180.563362][ T8549] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 180.563396][ T8549] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 180.563430][ T8549] __skb_datagram_iter+0xf8/0x990 [ 180.563459][ T8549] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 180.563496][ T8549] skb_copy_datagram_iter+0xc5/0x230 [ 180.563527][ T8549] netlink_recvmsg+0x2ab/0xa30 [ 180.563561][ T8549] ? __pfx_netlink_recvmsg+0x10/0x10 [ 180.563590][ T8549] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.563616][ T8549] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 180.563643][ T8549] ? security_socket_recvmsg+0x7e/0x2e0 [ 180.563672][ T8549] ? __pfx_netlink_recvmsg+0x10/0x10 [ 180.563695][ T8549] sock_recvmsg+0x22c/0x270 [ 180.563730][ T8549] ____sys_recvmsg+0x1c9/0x460 [ 180.563766][ T8549] ? __pfx_____sys_recvmsg+0x10/0x10 [ 180.563809][ T8549] ? import_iovec+0x74/0xa0 [ 180.563842][ T8549] ___sys_recvmsg+0x1b5/0x510 [ 180.563873][ T8549] ? __pfx____sys_recvmsg+0x10/0x10 [ 180.563927][ T8549] ? __fget_files+0x3a0/0x420 [ 180.563967][ T8549] do_recvmmsg+0x307/0x770 [ 180.564002][ T8549] ? __pfx_do_recvmmsg+0x10/0x10 [ 180.564095][ T8549] ? _copy_from_user+0x94/0xb0 [ 180.564142][ T8549] __x64_sys_recvmmsg+0x1af/0x240 [ 180.564172][ T8549] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 180.564203][ T8549] ? do_syscall_64+0xbe/0xfa0 [ 180.564237][ T8549] do_syscall_64+0xfa/0xfa0 [ 180.564264][ T8549] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.564291][ T8549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.564312][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 180.564338][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.564358][ T8549] RIP: 0033:0x7fc70a18efc9 [ 180.564378][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.564396][ T8549] RSP: 002b:00007fc70afd9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 180.564419][ T8549] RAX: ffffffffffffffda RBX: 00007fc70a3e5fa0 RCX: 00007fc70a18efc9 [ 180.564435][ T8549] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000004 [ 180.564449][ T8549] RBP: 00007fc70afd9090 R08: 0000200000003700 R09: 0000000000000000 [ 180.564463][ T8549] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 180.564475][ T8549] R13: 00007fc70a3e6038 R14: 00007fc70a3e5fa0 R15: 00007fff53eaa288 [ 180.564511][ T8549] [ 180.575858][ T8550] netlink: 56 bytes leftover after parsing attributes in process `syz.0.622'. [ 180.777716][ T8552] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 180.892689][ T8552] netlink: 'syz.0.622': attribute type 4 has an invalid length. [ 180.903427][ T8552] netlink: 14514 bytes leftover after parsing attributes in process `syz.0.622'. [ 181.625155][ T8575] netlink: 12 bytes leftover after parsing attributes in process `syz.3.628'. [ 182.070531][ T8572] wlan1 speed is unknown, defaulting to 1000 [ 182.511929][ T8582] sctp: [Deprecated]: syz.4.631 (pid 8582) Use of int in maxseg socket option. [ 182.511929][ T8582] Use struct sctp_assoc_value instead [ 182.709137][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 182.738643][ T8587] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 182.772226][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 182.783978][ T8594] netlink: 56 bytes leftover after parsing attributes in process `syz.4.635'. [ 182.790050][ T8596] netlink: 52 bytes leftover after parsing attributes in process `syz.2.633'. [ 182.835036][ T8587] bond3: entered promiscuous mode [ 182.841042][ T8587] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.821594][ T8639] FAULT_INJECTION: forcing a failure. [ 183.821594][ T8639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.840811][ T8639] CPU: 1 UID: 0 PID: 8639 Comm: syz.0.647 Not tainted syzkaller #0 PREEMPT(full) [ 183.840841][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.840854][ T8639] Call Trace: [ 183.840863][ T8639] [ 183.840872][ T8639] dump_stack_lvl+0x189/0x250 [ 183.840902][ T8639] ? __pfx____ratelimit+0x10/0x10 [ 183.840929][ T8639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.840952][ T8639] ? __pfx__printk+0x10/0x10 [ 183.840992][ T8639] should_fail_ex+0x414/0x560 [ 183.841019][ T8639] _copy_to_iter+0x589/0x1790 [ 183.841064][ T8639] ? __pfx__copy_to_iter+0x10/0x10 [ 183.841087][ T8639] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 183.841122][ T8639] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 183.841156][ T8639] __skb_datagram_iter+0xf8/0x990 [ 183.841184][ T8639] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 183.841221][ T8639] skb_copy_datagram_iter+0xc5/0x230 [ 183.841253][ T8639] netlink_recvmsg+0x2ab/0xa30 [ 183.841287][ T8639] ? __pfx_netlink_recvmsg+0x10/0x10 [ 183.841316][ T8639] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.841343][ T8639] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 183.841370][ T8639] ? security_socket_recvmsg+0x7e/0x2e0 [ 183.841398][ T8639] ? __pfx_netlink_recvmsg+0x10/0x10 [ 183.841421][ T8639] sock_recvmsg+0x22c/0x270 [ 183.841457][ T8639] ____sys_recvmsg+0x1c9/0x460 [ 183.841493][ T8639] ? __pfx_____sys_recvmsg+0x10/0x10 [ 183.841537][ T8639] ? import_iovec+0x74/0xa0 [ 183.841571][ T8639] ___sys_recvmsg+0x1b5/0x510 [ 183.841603][ T8639] ? __pfx____sys_recvmsg+0x10/0x10 [ 183.841676][ T8639] ? __fget_files+0x3a0/0x420 [ 183.841717][ T8639] do_recvmmsg+0x307/0x770 [ 183.841753][ T8639] ? __pfx_do_recvmmsg+0x10/0x10 [ 183.841802][ T8639] ? _copy_from_user+0x94/0xb0 [ 183.841851][ T8639] __x64_sys_recvmmsg+0x1af/0x240 [ 183.841881][ T8639] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 183.841912][ T8639] ? do_syscall_64+0xbe/0xfa0 [ 183.841946][ T8639] do_syscall_64+0xfa/0xfa0 [ 183.841972][ T8639] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.842000][ T8639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.842021][ T8639] ? clear_bhb_loop+0x60/0xb0 [ 183.842048][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.842069][ T8639] RIP: 0033:0x7f9184d8efc9 [ 183.842088][ T8639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.842106][ T8639] RSP: 002b:00007f9185b84038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 183.842128][ T8639] RAX: ffffffffffffffda RBX: 00007f9184fe6090 RCX: 00007f9184d8efc9 [ 183.842143][ T8639] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000005 [ 183.842157][ T8639] RBP: 00007f9185b84090 R08: 0000200000003700 R09: 0000000000000000 [ 183.842171][ T8639] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 183.842183][ T8639] R13: 00007f9184fe6128 R14: 00007f9184fe6090 R15: 00007ffd73a326f8 [ 183.842219][ T8639] [ 184.591904][ T8648] wlan1 speed is unknown, defaulting to 1000 [ 184.935440][ T8663] __nla_validate_parse: 140 callbacks suppressed [ 184.935459][ T8663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.653'. [ 185.036787][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 185.198319][ T8666] wlan1 speed is unknown, defaulting to 1000 [ 185.753222][ T8688] netlink: 36 bytes leftover after parsing attributes in process `syz.1.659'. [ 186.429032][ T8708] netlink: 'syz.4.665': attribute type 30 has an invalid length. [ 186.559269][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.667'. [ 186.654657][ T8711] wlan1 speed is unknown, defaulting to 1000 [ 186.761681][ T8732] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 186.770364][ T8732] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002 [ 187.050725][ T8745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.102752][ T8745] bond0: (slave rose0): Enslaving as an active interface with an up link [ 187.103042][ T8749] netlink: 44 bytes leftover after parsing attributes in process `syz.2.674'. [ 187.146268][ T8749] netlink: 43 bytes leftover after parsing attributes in process `syz.2.674'. [ 187.155472][ T8749] netlink: 'syz.2.674': attribute type 6 has an invalid length. [ 187.164178][ T8749] netlink: 'syz.2.674': attribute type 5 has an invalid length. [ 187.172149][ T8749] netlink: 43 bytes leftover after parsing attributes in process `syz.2.674'. [ 187.947268][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 188.463916][ T8799] netlink: 'syz.0.683': attribute type 10 has an invalid length. [ 188.516881][ T8799] team0: Port device dummy0 added [ 188.700225][ T8813] netlink: 'syz.4.692': attribute type 1 has an invalid length. [ 188.777674][ T8812] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20002 [ 188.894492][ T8820] wlan1 speed is unknown, defaulting to 1000 [ 188.989915][ T8830] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 189.127999][ T8830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.285971][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 189.295007][ T8842] netlink: 'syz.1.699': attribute type 18 has an invalid length. [ 190.035625][ T8878] __nla_validate_parse: 5 callbacks suppressed [ 190.062461][ T8878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.710'. [ 190.084130][ T8884] netlink: 'syz.3.711': attribute type 6 has an invalid length. [ 190.111234][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.711'. [ 190.346252][ T8902] netlink: 64 bytes leftover after parsing attributes in process `syz.3.717'. [ 190.540837][ T8914] netlink: 36 bytes leftover after parsing attributes in process `syz.2.721'. [ 190.551052][ T8914] netlink: 52 bytes leftover after parsing attributes in process `syz.2.721'. [ 190.560950][ T8904] wlan1 speed is unknown, defaulting to 1000 [ 190.872819][ T8932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 190.903882][ T8932] ieee802154 phy0 wpan0: encryption failed: -22 [ 191.160643][ T8940] lo speed is unknown, defaulting to 1000 [ 191.183874][ T8940] lo speed is unknown, defaulting to 1000 [ 191.225434][ T8940] lo speed is unknown, defaulting to 1000 [ 191.278008][ T8951] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 191.311804][ T8940] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 191.423085][ T8940] lo speed is unknown, defaulting to 1000 [ 191.432502][ T8956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 191.457332][ T8940] lo speed is unknown, defaulting to 1000 [ 191.470533][ T8940] lo speed is unknown, defaulting to 1000 [ 191.480676][ T8940] lo speed is unknown, defaulting to 1000 [ 191.491721][ T8958] netlink: 'syz.1.732': attribute type 30 has an invalid length. [ 191.492587][ T8940] lo speed is unknown, defaulting to 1000 [ 191.505450][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 191.538234][ T8940] lo speed is unknown, defaulting to 1000 [ 191.607053][ T8963] netlink: 36 bytes leftover after parsing attributes in process `syz.1.733'. [ 191.619559][ T8963] netlink: 52 bytes leftover after parsing attributes in process `syz.1.733'. [ 192.023503][ T8976] netlink: 'syz.1.739': attribute type 21 has an invalid length. [ 192.124006][ T6343] IPVS: starting estimator thread 0... [ 192.215792][ T8980] IPVS: using max 24 ests per chain, 57600 per kthread [ 193.741711][ T9052] ip6t_srh: unknown srh match flags 4000 [ 193.831324][ T9054] wlan1 speed is unknown, defaulting to 1000 [ 193.994103][ T9057] syzkaller0: entered promiscuous mode [ 194.012743][ T9057] syzkaller0: entered allmulticast mode [ 194.045483][ T9062] tipc: Enabled bearer , priority 0 [ 194.053356][ T9062] syzkaller0: entered promiscuous mode [ 194.060355][ T9062] syzkaller0: entered allmulticast mode [ 194.084091][ T9060] tipc: Resetting bearer [ 194.134457][ T9060] tipc: Disabling bearer [ 194.495564][ T9054] lo speed is unknown, defaulting to 1000 [ 194.742921][ T9094] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 195.112918][ T9106] __nla_validate_parse: 17 callbacks suppressed [ 195.112938][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.773'. [ 196.517632][ T9094] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 196.794564][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 196.874954][ T9133] syzkaller1: entered promiscuous mode [ 196.891188][ T9133] syzkaller1: entered allmulticast mode [ 196.954672][ T9139] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20002 [ 197.222988][ T9145] netlink: 'syz.3.785': attribute type 13 has an invalid length. [ 197.692451][ T9167] xt_policy: output policy not valid in PREROUTING and INPUT [ 197.780419][ T9166] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.830196][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.787'. [ 197.901019][ T9174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.791'. [ 197.919919][ T9177] syz.3.793: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.920629][ T9166] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.947105][ T9177] CPU: 0 UID: 0 PID: 9177 Comm: syz.3.793 Not tainted syzkaller #0 PREEMPT(full) [ 197.947139][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.947153][ T9177] Call Trace: [ 197.947164][ T9177] [ 197.947174][ T9177] dump_stack_lvl+0x189/0x250 [ 197.947212][ T9177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.947237][ T9177] ? __pfx__printk+0x10/0x10 [ 197.947262][ T9177] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 197.947289][ T9177] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 197.947318][ T9177] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 197.947349][ T9177] warn_alloc+0x214/0x310 [ 197.947386][ T9177] ? __pfx_warn_alloc+0x10/0x10 [ 197.947427][ T9177] ? __get_vm_area_node+0x28f/0x300 [ 197.947454][ T9177] ? xskq_create+0xbf/0x170 [ 197.947490][ T9177] __vmalloc_node_range_noprof+0x690/0x12d0 [ 197.947563][ T9177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.947598][ T9177] ? __kasan_kmalloc+0x93/0xb0 [ 197.947635][ T9177] vmalloc_user_noprof+0xad/0xf0 [ 197.947663][ T9177] ? xskq_create+0xbf/0x170 [ 197.947695][ T9177] xskq_create+0xbf/0x170 [ 197.947728][ T9177] xsk_init_queue+0xb0/0x110 [ 197.947762][ T9177] xsk_setsockopt+0x57b/0x8d0 [ 197.947793][ T9177] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.947825][ T9177] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.947855][ T9177] ? aa_sock_opt_perm+0xff/0x1b0 [ 197.947886][ T9177] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 197.947915][ T9177] ? __pfx_xsk_setsockopt+0x10/0x10 [ 197.947940][ T9177] do_sock_setsockopt+0x17c/0x1b0 [ 197.947969][ T9177] __x64_sys_setsockopt+0x13f/0x1b0 [ 197.947997][ T9177] do_syscall_64+0xfa/0xfa0 [ 197.948025][ T9177] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.948052][ T9177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.948074][ T9177] ? clear_bhb_loop+0x60/0xb0 [ 197.948100][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.948121][ T9177] RIP: 0033:0x7fc70a18efc9 [ 197.948139][ T9177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.948156][ T9177] RSP: 002b:00007fc70afd9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.948179][ T9177] RAX: ffffffffffffffda RBX: 00007fc70a3e5fa0 RCX: 00007fc70a18efc9 [ 197.948194][ T9177] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000004 [ 197.948207][ T9177] RBP: 00007fc70a211f91 R08: 0000000000000004 R09: 0000000000000000 [ 197.948220][ T9177] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 197.948233][ T9177] R13: 00007fc70a3e6038 R14: 00007fc70a3e5fa0 R15: 00007fff53eaa288 [ 197.948268][ T9177] [ 197.948276][ T9177] Mem-Info: [ 197.948288][ T9177] active_anon:5481 inactive_anon:0 isolated_anon:0 [ 197.948288][ T9177] active_file:3145 inactive_file:39925 isolated_file:0 [ 197.948288][ T9177] unevictable:768 dirty:219 writeback:0 [ 197.948288][ T9177] slab_reclaimable:11652 slab_unreclaimable:124406 [ 197.948288][ T9177] mapped:29167 shmem:1391 pagetables:919 [ 197.948288][ T9177] sec_pagetables:0 bounce:0 [ 197.948288][ T9177] kernel_misc_reclaimable:0 [ 197.948288][ T9177] free:1298147 free_pcp:15360 free_cma:0 [ 198.223723][ T9188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 198.259552][ T9177] Node 0 active_anon:21940kB inactive_anon:0kB active_file:12580kB inactive_file:159500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123352kB dirty:880kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12472kB pagetables:3916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.326061][ T9177] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 198.353146][ T9188] wlan1 speed is unknown, defaulting to 1000 [ 198.368159][ T9166] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.378097][ T9177] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.378177][ T9177] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 198.378228][ T9177] Node 0 DMA32 free:1286936kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22140kB inactive_anon:0kB active_file:12580kB inactive_file:159500kB unevictable:1536kB writepending:880kB zspages:0kB present:3129332kB managed:2561552kB mlocked:0kB bounce:0kB free_pcp:42168kB local_pcp:21084kB free_cma:0kB [ 198.378293][ T9177] lowmem_reserve[]: 0 0 1 1 1 [ 198.378338][ T9177] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 198.378399][ T9177] lowmem_reserve[]: 0 0 0 0 0 [ 198.378446][ T9177] Node 1 Normal free:3891396kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17860kB local_pcp:7104kB free_cma:0kB [ 198.378517][ T9177] lowmem_reserve[]: 0 0 0 0 0 [ 198.378565][ T9177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 198.541220][ T9177] Node 0 DMA32: 1634*4kB (UM) 252*8kB (UM) 131*16kB (UME) 243*32kB (UM) 136*64kB (UME) 83*128kB (UME) 39*256kB (UME) 14*512kB (UME) 1*1024kB (M) 5*2048kB (M) 298*4096kB (UM) = 1286776kB [ 198.547087][ T9193] netlink: 'syz.4.795': attribute type 1 has an invalid length. [ 198.560997][ T9177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 198.580185][ T9177] Node 1 Normal: 181*4kB (UME) 26*8kB (UME) 42*16kB (UME) 116*32kB (UME) 30*64kB (UME) 9*128kB (UME) 2*256kB (M) 3*512kB (ME) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891396kB [ 198.600164][ T9177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.625530][ T9177] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.635514][ T9177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 198.652951][ T9193] bond3: entered promiscuous mode [ 198.685445][ T9177] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 198.757311][ T9193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 198.772858][ T9177] 44423 total pagecache pages [ 198.782946][ T9177] 0 pages in swap cache [ 198.787379][ T9177] Free swap = 124996kB [ 198.792846][ T9177] Total swap = 124996kB [ 198.800170][ T9177] 2097051 pages RAM [ 198.804195][ T9177] 0 pages HighMem/MovableOnly [ 198.809148][ T9177] 424573 pages reserved [ 198.813420][ T9177] 0 pages cma reserved [ 198.821350][ T9188] lo speed is unknown, defaulting to 1000 [ 198.880799][ T9194] bond3: (slave bridge2): making interface the new active one [ 198.897540][ T9194] bridge2: entered promiscuous mode [ 198.905856][ T9194] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 198.919308][ T9166] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.064009][ T9204] netlink: 'syz.4.798': attribute type 11 has an invalid length. [ 199.168030][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 199.572813][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.454132][ T9217] bond0: Caught tx_queue_len zero misconfig [ 200.460766][ T9217] netlink: 648 bytes leftover after parsing attributes in process `syz.3.803'. [ 200.552096][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 200.564790][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 200.589082][ T13] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.738208][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.755394][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.839563][ T9238] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 200.896910][ T3523] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.909400][ T9241] netlink: 'syz.4.809': attribute type 12 has an invalid length. [ 201.030300][ T9236] syzkaller0: entered promiscuous mode [ 201.045348][ T9236] syzkaller0: entered allmulticast mode [ 201.121542][ T9238] wlan1 speed is unknown, defaulting to 1000 [ 201.159351][ T9245] tipc: Enabled bearer , priority 0 [ 201.365405][ T9259] netlink: 27 bytes leftover after parsing attributes in process `syz.1.811'. [ 202.278731][ T7457] tipc: Node number set to 3977654742 [ 202.471022][ T9245] syzkaller0: entered promiscuous mode [ 202.476906][ T9245] syzkaller0: entered allmulticast mode [ 202.486637][ T9257] tipc: Resetting bearer [ 202.498873][ T9244] tipc: Resetting bearer [ 202.515797][ T9244] tipc: Disabling bearer [ 202.549210][ T9239] delete_channel: no stack [ 202.575762][ T9238] lo speed is unknown, defaulting to 1000 [ 202.738522][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 202.781152][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.1.816'. [ 203.010772][ T9291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.821'. [ 203.142734][ T9296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.225113][ T9300] netlink: 104 bytes leftover after parsing attributes in process `syz.2.824'. [ 203.234907][ T9301] netlink: 'syz.1.823': attribute type 13 has an invalid length. [ 203.253032][ T9301] netlink: 'syz.1.823': attribute type 17 has an invalid length. [ 203.432700][ T9301] syz_tun: left promiscuous mode [ 203.513471][ T9301] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.572539][ T9304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.823'. [ 203.704248][ T9306] wlan1 speed is unknown, defaulting to 1000 [ 203.759616][ T9301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.317001][ T9320] wlan1 speed is unknown, defaulting to 1000 [ 204.329370][ T9306] lo speed is unknown, defaulting to 1000 [ 204.508814][ T9329] Unsupported ieee802154 address type: 0 [ 204.555271][ T9332] chnl_net:caif_netlink_parms(): no params data found [ 204.859129][ T9320] lo speed is unknown, defaulting to 1000 [ 205.471619][ T9362] wlan1 speed is unknown, defaulting to 1000 [ 205.755153][ T9376] netlink: 'syz.4.844': attribute type 1 has an invalid length. [ 205.781574][ T9376] __nla_validate_parse: 7 callbacks suppressed [ 205.781594][ T9376] netlink: 224 bytes leftover after parsing attributes in process `syz.4.844'. [ 205.851698][ T9362] lo speed is unknown, defaulting to 1000 [ 206.384540][ T9412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 206.403118][ T9408] sock: sock_set_timeout: `syz.0.851' (pid 9408) tries to set negative timeout [ 206.413010][ T9415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.852'. [ 206.474601][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.0.851'. [ 206.690578][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.855'. [ 206.968646][ T9439] netlink: 'syz.4.858': attribute type 10 has an invalid length. [ 207.408977][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 207.423088][ T9457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 207.601140][ T9465] tc_dump_action: action bad kind [ 207.691798][ T9467] wlan1 speed is unknown, defaulting to 1000 [ 207.803898][ T9476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.869'. [ 207.835704][ T9476] netlink: 48 bytes leftover after parsing attributes in process `syz.0.869'. [ 207.844791][ T9476] veth1_vlan: entered allmulticast mode [ 207.930750][ T9482] netlink: 'syz.4.871': attribute type 1 has an invalid length. [ 208.092808][ T9486] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.106606][ T9486] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 208.117516][ T9489] netlink: 48 bytes leftover after parsing attributes in process `syz.0.872'. [ 208.162382][ T9467] lo speed is unknown, defaulting to 1000 [ 208.251084][ T9487] bond4: (slave gretap1): making interface the new active one [ 208.288598][ T9487] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 208.412624][ T9482] macvlan2: entered promiscuous mode [ 208.418065][ T9482] macvlan2: entered allmulticast mode [ 208.424502][ T9482] bond4: entered promiscuous mode [ 208.429996][ T9482] gretap1: entered promiscuous mode [ 208.436454][ T9482] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 208.466272][ T9482] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 208.497353][ T9482] bond4: left promiscuous mode [ 208.502268][ T9482] gretap1: left promiscuous mode [ 208.836182][ T9482] syz.4.871 (9482) used greatest stack depth: 17688 bytes left [ 210.138181][ T9554] syzkaller1: entered promiscuous mode [ 210.150599][ T9554] syzkaller1: entered allmulticast mode [ 210.502173][ T9562] wlan1 speed is unknown, defaulting to 1000 [ 211.037675][ T9562] lo speed is unknown, defaulting to 1000 [ 211.105355][ T9565] wlan1 speed is unknown, defaulting to 1000 [ 211.600015][ T9600] netlink: 'syz.1.901': attribute type 13 has an invalid length. [ 211.606398][ T9565] lo speed is unknown, defaulting to 1000 [ 211.722709][ T9604] __nla_validate_parse: 6 callbacks suppressed [ 211.722728][ T9604] netlink: 24 bytes leftover after parsing attributes in process `syz.0.903'. [ 211.938743][ T9601] wlan1 speed is unknown, defaulting to 1000 [ 212.280082][ T9607] wlan1 speed is unknown, defaulting to 1000 [ 212.476236][ T9601] lo speed is unknown, defaulting to 1000 [ 212.497663][ T9607] lo speed is unknown, defaulting to 1000 [ 212.502057][ T9620] tipc: Invalid UDP bearer configuration [ 212.505543][ T9620] tipc: Enabling of bearer rejected, failed to enable media [ 212.690683][ T9625] netlink: 'syz.3.908': attribute type 5 has an invalid length. [ 212.775799][ T9625] netlink: 'syz.3.908': attribute type 83 has an invalid length. [ 212.880753][ T9628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.909'. [ 212.995786][ T9631] siw: device registration error -23 [ 213.530695][ T9644] wlan1 speed is unknown, defaulting to 1000 [ 213.701729][ T9660] sctp: [Deprecated]: syz.2.915 (pid 9660) Use of int in maxseg socket option. [ 213.701729][ T9660] Use struct sctp_assoc_value instead [ 213.721495][ T9659] netlink: 'syz.4.918': attribute type 10 has an invalid length. [ 213.736748][ T9659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.918'. [ 213.752402][ T9664] netlink: 'syz.1.917': attribute type 13 has an invalid length. [ 213.756186][ T9659] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 213.787202][ T9664] netlink: 'syz.1.917': attribute type 17 has an invalid length. [ 213.902579][ T9664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.927210][ T9666] netlink: 100 bytes leftover after parsing attributes in process `syz.2.915'. [ 214.087297][ T9664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.114251][ T9669] wlan1 speed is unknown, defaulting to 1000 [ 214.141496][ T9644] lo speed is unknown, defaulting to 1000 [ 214.193317][ T9664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.258669][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 214.612720][ T9669] lo speed is unknown, defaulting to 1000 [ 214.619410][ T9665] wlan1 speed is unknown, defaulting to 1000 [ 215.110132][ T9670] wlan1 speed is unknown, defaulting to 1000 [ 215.297303][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.924'. [ 215.370263][ T9705] netlink: 72 bytes leftover after parsing attributes in process `syz.4.930'. [ 215.409538][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 215.478481][ T9665] lo speed is unknown, defaulting to 1000 [ 215.715732][ T9670] lo speed is unknown, defaulting to 1000 [ 216.207252][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 216.637387][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 216.698738][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 216.754025][ T9732] bridge0: entered promiscuous mode [ 216.776864][ T9732] bridge0: left promiscuous mode [ 216.912206][ T9735] netlink: 71 bytes leftover after parsing attributes in process `syz.1.937'. [ 216.977532][ T9741] netlink: 'syz.3.939': attribute type 29 has an invalid length. [ 216.996729][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.939'. [ 217.006009][ T52] Bluetooth: hci2: command 0x0401 tx timeout [ 217.006173][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 217.015342][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 217.021600][ T9741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.939'. [ 217.033691][ T9741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.043324][ T9741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.106158][ T9744] netlink: 'syz.2.940': attribute type 1 has an invalid length. [ 217.166800][ T9747] netlink: 16 bytes leftover after parsing attributes in process `syz.1.941'. [ 217.170760][ T9744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.185254][ T9744] bond5: (slave bond6): Enslaving as a backup interface with a down link [ 217.563914][ T9773] wlan1 speed is unknown, defaulting to 1000 [ 217.927952][ T9796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.955'. [ 217.960216][ T9796] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 218.003807][ T9796] bond2 (unregistering): Released all slaves [ 218.074213][ T9771] wlan1 speed is unknown, defaulting to 1000 [ 218.092762][ T9773] lo speed is unknown, defaulting to 1000 [ 218.116645][ T9806] tipc: Enabled bearer , priority 0 [ 218.160275][ T9806] syzkaller0: entered promiscuous mode [ 218.166402][ T9806] syzkaller0: entered allmulticast mode [ 218.204677][ T9805] tipc: Resetting bearer [ 218.277062][ T9805] tipc: Disabling bearer [ 218.460180][ T9816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.962'. [ 218.622861][ T9771] lo speed is unknown, defaulting to 1000 [ 219.212826][ T9822] wlan1 speed is unknown, defaulting to 1000 [ 219.549653][ T9822] lo speed is unknown, defaulting to 1000 [ 219.575380][ T9838] wlan1 speed is unknown, defaulting to 1000 [ 220.294922][ T9838] lo speed is unknown, defaulting to 1000 [ 220.759059][ T9860] netlink: 64 bytes leftover after parsing attributes in process `syz.4.973'. [ 221.426037][ T9895] netlink: 20 bytes leftover after parsing attributes in process `syz.2.983'. [ 221.641308][ T9901] wlan1 speed is unknown, defaulting to 1000 [ 221.653104][ T9905] openvswitch: netlink: Message has 2688 unknown bytes. [ 221.816598][ T9909] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 221.831737][ T9910] netlink: 'syz.2.987': attribute type 30 has an invalid length. [ 221.947786][ T9912] pim6reg1: entered promiscuous mode [ 221.953233][ T9912] pim6reg1: entered allmulticast mode [ 222.396546][ T9901] lo speed is unknown, defaulting to 1000 [ 222.549845][ T9922] veth1_to_bond: entered allmulticast mode [ 222.587556][ T9922] veth1_to_bond: entered promiscuous mode [ 222.783983][ T9922] veth1_to_bond: left promiscuous mode [ 222.790102][ T9922] veth1_to_bond: left allmulticast mode [ 222.826802][ T9939] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.992'. [ 223.103289][ T9953] macsec3: entered promiscuous mode [ 223.109420][ T9953] macsec3: entered allmulticast mode [ 223.379497][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 223.402820][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1005'. [ 223.430775][ T9972] netlink: 'syz.2.1006': attribute type 13 has an invalid length. [ 223.448159][ T9972] netlink: 'syz.2.1006': attribute type 17 has an invalid length. [ 223.585273][ T9972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.727605][ T9975] wlan1 speed is unknown, defaulting to 1000 [ 223.954102][ T9975] lo speed is unknown, defaulting to 1000 [ 224.391859][T10003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1012'. [ 224.687031][T10018] netlink: 'syz.4.1016': attribute type 54 has an invalid length. [ 224.751916][T10017] tipc: Started in network mode [ 224.775846][T10017] tipc: Node identity ac14140f, cluster identity 4711 [ 224.783172][T10017] tipc: New replicast peer: 255.255.255.255 [ 224.828906][T10017] tipc: Enabled bearer , priority 10 [ 224.850081][T10021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1019'. [ 224.976946][T10025] wlan1 speed is unknown, defaulting to 1000 [ 225.380026][T10025] lo speed is unknown, defaulting to 1000 [ 225.477874][T10039] wlan1 speed is unknown, defaulting to 1000 [ 225.761888][T10049] pim6reg: entered allmulticast mode [ 225.945958][ T9386] tipc: Node number set to 2886997007 [ 226.045100][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1029'. [ 226.193647][T10063] tipc: Failed to remove unknown binding: 66,1,1/132806236:2601551601/2601551603 [ 226.230967][T10063] tipc: Failed to remove unknown binding: 66,1,1/132806236:2601551601/2601551603 [ 226.398194][T10075] syzkaller0: entered promiscuous mode [ 226.429256][T10075] syzkaller0: entered allmulticast mode [ 226.487652][T10039] lo speed is unknown, defaulting to 1000 [ 227.053055][T10092] syzkaller0: entered promiscuous mode [ 227.076025][T10092] syzkaller0: entered allmulticast mode [ 228.413094][T10122] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1049'. [ 228.463923][T10124] batadv0: entered promiscuous mode [ 228.475958][T10124] batadv0: entered allmulticast mode [ 228.492141][T10124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.739367][T10135] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.760029][T10135] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.771671][T10135] hsr0: entered promiscuous mode [ 228.778252][T10135] hsr0: entered allmulticast mode [ 228.783607][T10135] hsr_slave_0: entered allmulticast mode [ 228.790317][T10135] hsr_slave_1: entered allmulticast mode [ 228.801510][T10132] wlan1 speed is unknown, defaulting to 1000 [ 228.826326][T10139] gretap2: entered allmulticast mode [ 229.202044][T10132] lo speed is unknown, defaulting to 1000 [ 229.655197][T10161] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1057'. [ 229.760126][T10161] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1057'. [ 230.042714][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 230.403740][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 230.612777][T10191] wlan1 speed is unknown, defaulting to 1000 [ 230.631758][T10195] bridge_slave_0: entered promiscuous mode [ 230.974474][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 231.021928][T10204] tipc: Enabled bearer , priority 0 [ 231.038750][T10191] lo speed is unknown, defaulting to 1000 [ 231.046813][T10204] syzkaller0: entered promiscuous mode [ 231.053385][T10204] syzkaller0: entered allmulticast mode [ 231.077661][T10204] tipc: Resetting bearer [ 231.096404][T10203] tipc: Resetting bearer [ 231.120883][T10203] tipc: Disabling bearer [ 231.483667][T10224] sctp: [Deprecated]: syz.3.1071 (pid 10224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 231.483667][T10224] Use struct sctp_sack_info instead [ 231.875779][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 231.996139][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 232.162074][T10239] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1078'. [ 232.335067][T10257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.369355][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 232.375197][T10257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.472443][T10263] IPVS: length: 215 != 8 [ 233.000039][T10290] netlink: 'syz.1.1092': attribute type 1 has an invalid length. [ 233.084558][T10290] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.526680][T10299] __nla_validate_parse: 3 callbacks suppressed [ 233.526700][T10299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1095'. [ 233.865211][T10319] netlink: 'syz.2.1100': attribute type 15 has an invalid length. [ 234.078206][T10330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1104'. [ 234.097657][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1104'. [ 234.130793][T10330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1104'. [ 234.165221][T10338] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1104'. [ 234.181407][T10330] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1104'. [ 234.738901][T10363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1112'. [ 234.848192][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1116'. [ 234.938919][T10375] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1117'. [ 234.977461][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 235.301584][T10394] bridge0: entered promiscuous mode [ 235.314276][T10394] vlan2: entered promiscuous mode [ 235.329637][T10394] dummy0: entered promiscuous mode [ 235.343189][T10394] bridge0: left promiscuous mode [ 235.367536][T10394] vlan2: left promiscuous mode [ 235.372776][T10394] dummy0: left promiscuous mode [ 235.633358][ T1090] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 235.677733][T10412] pim6reg1: entered promiscuous mode [ 235.683167][T10412] pim6reg1: entered allmulticast mode [ 235.746081][T10407] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 235.956013][T10414] wlan1 speed is unknown, defaulting to 1000 [ 236.349087][T10434] netlink: 'syz.3.1132': attribute type 13 has an invalid length. [ 236.376028][T10434] netlink: 'syz.3.1132': attribute type 17 has an invalid length. [ 236.383906][T10434] netlink: 'syz.3.1132': attribute type 5 has an invalid length. [ 236.585502][T10415] wlan1 speed is unknown, defaulting to 1000 [ 236.593839][T10447] xt_TCPMSS: Only works on TCP SYN packets [ 236.613421][T10414] lo speed is unknown, defaulting to 1000 [ 237.457014][T10434] wlan1 speed is unknown, defaulting to 1000 [ 237.786954][T10450] wlan1 speed is unknown, defaulting to 1000 [ 238.118333][T10481] wlan1 speed is unknown, defaulting to 1000 [ 238.127949][T10434] lo speed is unknown, defaulting to 1000 [ 238.151715][T10450] lo speed is unknown, defaulting to 1000 [ 238.179757][T10415] lo speed is unknown, defaulting to 1000 [ 238.641507][T10481] lo speed is unknown, defaulting to 1000 [ 240.263399][T10503] wlan1 speed is unknown, defaulting to 1000 [ 240.435008][T10512] __nla_validate_parse: 7 callbacks suppressed [ 240.435027][T10512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1150'. [ 240.665521][T10506] pim6reg1: entered promiscuous mode [ 240.687255][T10506] pim6reg1: entered allmulticast mode [ 240.973384][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1155'. [ 241.117441][T10540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1155'. [ 241.121817][T10503] lo speed is unknown, defaulting to 1000 [ 241.143683][T10527] wlan1 speed is unknown, defaulting to 1000 [ 241.517798][T10554] veth0: entered allmulticast mode [ 241.647396][T10537] wlan1 speed is unknown, defaulting to 1000 [ 241.881700][T10574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 241.883848][T10571] netlink: 'syz.3.1161': attribute type 9 has an invalid length. [ 242.070276][T10576] netlink: 'syz.2.1165': attribute type 13 has an invalid length. [ 242.380951][T10589] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1168'. [ 242.396989][T10576] gretap0: refused to change device tx_queue_len [ 242.415131][T10576] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 242.465324][T10527] lo speed is unknown, defaulting to 1000 [ 242.492213][T10537] lo speed is unknown, defaulting to 1000 [ 243.644646][T10619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1177'. [ 243.655532][T10615] SET target dimension over the limit! [ 243.932696][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1182'. [ 243.991091][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 244.136838][T10647] netlink: 'syz.2.1186': attribute type 39 has an invalid length. [ 244.467496][T10660] syzkaller0: left promiscuous mode [ 244.472989][T10660] syzkaller0: left allmulticast mode [ 244.966539][T10693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1200'. [ 245.070875][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 245.521107][T10719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1209'. [ 245.599607][T10724] ipvlan2: entered promiscuous mode [ 245.626269][T10725] netlink: 'syz.3.1212': attribute type 13 has an invalid length. [ 245.661735][T10725] netlink: 'syz.3.1212': attribute type 17 has an invalid length. [ 245.703825][T10725] netlink: 'syz.3.1212': attribute type 27 has an invalid length. [ 245.823757][T10731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1214'. [ 245.849141][T10726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.865331][T10725] wlan1 speed is unknown, defaulting to 1000 [ 246.092916][T10743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1217'. [ 246.196979][T10743] netlink: 'syz.1.1217': attribute type 4 has an invalid length. [ 246.255023][T10743] netlink: 'syz.1.1217': attribute type 4 has an invalid length. [ 246.258046][T10725] lo speed is unknown, defaulting to 1000 [ 246.607960][T10766] bond9: option fail_over_mac: invalid value (253) [ 246.619956][T10766] bond9 (unregistering): Released all slaves [ 246.673180][T10775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1222'. [ 246.878642][T10789] wlan1 speed is unknown, defaulting to 1000 [ 247.153895][T10792] : option downdelay: invalid value (18446744073709551615) [ 247.163141][T10792] : option downdelay: allowed values 0 - 2147483647 [ 247.188159][T10792]  (unregistering): Released all slaves [ 247.367450][T10791] wlan1 speed is unknown, defaulting to 1000 [ 247.379020][T10789] lo speed is unknown, defaulting to 1000 [ 247.525379][T10807] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.586650][T10810] tipc: Enabled bearer , priority 0 [ 247.616003][T10810] syzkaller0: entered promiscuous mode [ 247.624583][T10810] syzkaller0: entered allmulticast mode [ 247.693010][T10810] tipc: Resetting bearer [ 247.888836][T10791] lo speed is unknown, defaulting to 1000 [ 248.373360][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1240'. [ 248.522457][T10831] wlan1 speed is unknown, defaulting to 1000 [ 248.559650][T10822] netlink: 516 bytes leftover after parsing attributes in process `syz.0.1239'. [ 249.295538][T10832] wlan1 speed is unknown, defaulting to 1000 [ 249.519433][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1249'. [ 249.536949][T10875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1252'. [ 249.566890][T10869] wlan1 speed is unknown, defaulting to 1000 [ 249.577888][T10831] lo speed is unknown, defaulting to 1000 [ 249.857716][T10832] lo speed is unknown, defaulting to 1000 [ 249.996048][T10885] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 250.205222][T10869] lo speed is unknown, defaulting to 1000 [ 250.567465][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1259'. [ 250.587105][T10908] block nbd0: not configured, cannot reconfigure [ 250.635312][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1260'. [ 250.890983][T10918] Cannot find set identified by id 65534 to match [ 250.921083][T10920] Cannot find set identified by id 65534 to match [ 251.227186][T10932] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1267'. [ 251.349116][T10940] netlink: 'syz.0.1267': attribute type 46 has an invalid length. [ 251.380037][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1267'. [ 253.721923][T10944] netlink: 'syz.1.1269': attribute type 6 has an invalid length. [ 254.105868][T10943] netlink: 'syz.1.1269': attribute type 6 has an invalid length. [ 255.216612][T10936] netlink: 676 bytes leftover after parsing attributes in process `syz.3.1268'. [ 255.243632][T10936] netlink: 676 bytes leftover after parsing attributes in process `syz.3.1268'. [ 255.263847][T10966] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1275'. [ 255.274111][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1275'. [ 255.409097][T10972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 255.447807][T10972] bridge0: port 3(batadv1) entered blocking state [ 255.476915][T10972] bridge0: port 3(batadv1) entered disabled state [ 255.483580][T10972] batadv1: entered allmulticast mode [ 255.504501][T10972] batadv1: entered promiscuous mode [ 255.511771][T10978] 8021q: VLANs not supported on dvmrp0 [ 255.577827][T10986] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1278'. [ 255.602041][T10979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1278'. [ 255.721319][T10992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1283'. [ 255.735044][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1284'. [ 255.774446][T10992] wlan1 speed is unknown, defaulting to 1000 [ 255.862687][T11003] xt_NFQUEUE: number of total queues is 0 [ 255.945746][ T6291] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 255.955494][ T6291] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 256.091199][T11015] tunl0: Caught tx_queue_len zero misconfig [ 256.097688][T11017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1283'. [ 256.200405][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1287'. [ 256.237639][T11022] netlink: 'syz.1.1287': attribute type 5 has an invalid length. [ 256.259214][T11022] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1287'. [ 256.314073][T11022] geneve2: entered promiscuous mode [ 256.342120][T11022] geneve2: entered allmulticast mode [ 256.358907][ T6287] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 256.370450][ T6287] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 256.382712][ T6287] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 256.392172][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 256.398255][ T6287] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 256.475179][T10992] lo speed is unknown, defaulting to 1000 [ 256.502516][T11028] wlan1 speed is unknown, defaulting to 1000 [ 256.949657][T11028] lo speed is unknown, defaulting to 1000 [ 257.007808][T11044] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1293'. [ 257.078438][T11044] unsupported nlmsg_type 40 [ 258.190243][T11076] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1301'. [ 258.584365][T11099] Unknown options in mask b7f2 [ 258.816388][T11112] sctp: [Deprecated]: syz.0.1314 (pid 11112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.816388][T11112] Use struct sctp_sack_info instead [ 258.866516][T11112] sctp: [Deprecated]: syz.0.1314 (pid 11112) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.866516][T11112] Use struct sctp_sack_info instead [ 259.248027][T11121] team0: Port device vlan0 removed [ 259.734258][T11159] wlan1 speed is unknown, defaulting to 1000 [ 260.613897][T11159] lo speed is unknown, defaulting to 1000 [ 261.371725][T11235] netlink: 'syz.0.1341': attribute type 10 has an invalid length. [ 261.391087][T11235] __nla_validate_parse: 11 callbacks suppressed [ 261.391107][T11235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1341'. [ 261.637629][T11250] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1346'. [ 261.738048][T11255] netlink: 'syz.2.1347': attribute type 13 has an invalid length. [ 261.750471][T11255] netlink: 'syz.2.1347': attribute type 17 has an invalid length. [ 261.974862][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.098188][T11255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.154199][T11264] tipc: Enabling of bearer rejected, failed to enable media [ 262.185154][T11260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.211757][T11268] bridge3: entered promiscuous mode [ 262.227939][T11268] bridge3: entered allmulticast mode [ 262.247881][T11268] team0: Port device bridge3 added [ 262.367036][T11256] wlan1 speed is unknown, defaulting to 1000 [ 262.861721][T11256] lo speed is unknown, defaulting to 1000 [ 263.170290][T11301] netlink: 'syz.4.1357': attribute type 5 has an invalid length. [ 263.592316][T11311] netlink: 'syz.3.1360': attribute type 10 has an invalid length. [ 263.622554][T11311] team0: Port device 0! added [ 263.633411][T11311] netlink: 'syz.3.1360': attribute type 10 has an invalid length. [ 263.669366][T11311] team0: Failed to send port change of device 0! via netlink (err -105) [ 263.729982][T11317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.746288][T11311] team0: Failed to send options change via netlink (err -105) [ 263.754041][T11311] team0: Failed to send port change of device 0! via netlink (err -105) [ 263.767147][T11311] team0: Port device 0! removed [ 263.780418][T11311] bond0: (slave 0!): Enslaving as an active interface with an up link [ 263.950186][T11329] netlink: zone id is out of range [ 263.955455][T11329] netlink: zone id is out of range [ 263.977883][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1367'. [ 263.987367][T11331] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1367'. [ 264.142198][T11336] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1371'. [ 264.152993][T11340] syz_tun: entered allmulticast mode [ 264.158633][T11338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1373'. [ 264.196585][T11340] syz_tun: left allmulticast mode [ 264.472919][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1378'. [ 264.699306][T11365] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1381'. [ 264.721481][T11365] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1381'. [ 265.314872][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1389'. [ 265.837211][T11416] wlan1 speed is unknown, defaulting to 1000 [ 266.109285][T11416] lo speed is unknown, defaulting to 1000 [ 266.349204][T11432] Can't find ip_set type hash:ip$mec [ 266.473479][ T1150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.485281][ T1150] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.496620][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.584222][T11454] lo: entered promiscuous mode [ 266.598182][T11454] tunl0: entered promiscuous mode [ 266.604596][T11454] gre0: entered promiscuous mode [ 266.611663][T11454] gretap0: entered promiscuous mode [ 266.619054][ T5895] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.628727][T11454] erspan0: entered promiscuous mode [ 266.635410][T11454] ip_vti0: entered promiscuous mode [ 266.647293][T11454] ip6_vti0: entered promiscuous mode [ 266.654502][T11454] sit0: entered promiscuous mode [ 266.689722][T11454] ip6tnl0: entered promiscuous mode [ 266.702141][T11454] ip6gre0: entered promiscuous mode [ 266.710331][T11454] syz_tun: entered promiscuous mode [ 266.719436][T11454] ip6gretap0: entered promiscuous mode [ 266.728526][T11454] bridge0: entered promiscuous mode [ 266.735443][T11454] vcan0: entered promiscuous mode [ 266.744704][T11454] bond0: entered promiscuous mode [ 266.775937][T11454] bond_slave_0: entered promiscuous mode [ 266.792422][T11454] bond_slave_1: entered promiscuous mode [ 266.814499][T11454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.832909][T11454] dummy0: entered promiscuous mode [ 266.938235][T11454] nlmon0: entered promiscuous mode [ 266.956824][T11454] caif0: entered promiscuous mode [ 266.973161][T11454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.006301][T11444] syzkaller0: entered promiscuous mode [ 267.015919][T11444] syzkaller0: entered allmulticast mode [ 267.115865][ T7458] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 267.241932][T11439] bond5: option arp_all_targets: invalid value (3) [ 267.281543][T11439] bond5 (unregistering): Released all slaves [ 267.506509][T11471] wlan1 speed is unknown, defaulting to 1000 [ 267.521668][T11476] __nla_validate_parse: 1 callbacks suppressed [ 267.521687][T11476] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1411'. [ 267.841776][T11472] wlan1 speed is unknown, defaulting to 1000 [ 267.866317][T11471] lo speed is unknown, defaulting to 1000 [ 268.358862][T11472] lo speed is unknown, defaulting to 1000 [ 268.539702][T11519] netlink: 'syz.0.1422': attribute type 13 has an invalid length. [ 268.548018][T11519] netlink: 'syz.0.1422': attribute type 17 has an invalid length. [ 268.627451][T11519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.738809][T11529] xt_TCPMSS: Only works on TCP SYN packets [ 268.912582][T11532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1422'. [ 268.949814][T11519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.068101][T11512] wlan1 speed is unknown, defaulting to 1000 [ 269.647987][T11548] netlink: 'syz.1.1434': attribute type 13 has an invalid length. [ 269.757488][T11548] gretap0: refused to change device tx_queue_len [ 269.775773][T11548] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 269.794439][T11512] lo speed is unknown, defaulting to 1000 [ 269.876013][T11557] tipc: New replicast peer: 255.255.255.255 [ 269.882962][T11557] tipc: Enabled bearer , priority 10 [ 269.990682][T11559] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.010465][T11559] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.064900][T11561] wlan1 speed is unknown, defaulting to 1000 [ 270.103361][T11559] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.114996][T11559] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.206675][T11559] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.224455][T11559] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.334416][T11559] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.352151][T11559] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.365856][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 270.509486][ T6291] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 270.523988][ T6291] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.574105][ T6291] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 270.595885][ T6291] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.653524][ T6291] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 270.678709][ T6291] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.733624][ T1150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 270.742948][ T1150] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.775018][T11561] lo speed is unknown, defaulting to 1000 [ 270.984196][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 271.020093][T11590] xt_CT: No such helper "netbios-ns" [ 271.268317][T11605] geneve3: entered promiscuous mode [ 271.520388][T11618] wlan1 speed is unknown, defaulting to 1000 [ 271.667835][T11622] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.283758][T11618] lo speed is unknown, defaulting to 1000 [ 272.643435][T11650] wlan1 speed is unknown, defaulting to 1000 [ 272.865067][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1467'. [ 273.027703][T11650] lo speed is unknown, defaulting to 1000 [ 273.091487][T11667] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 273.143135][T11668] netlink: 'syz.4.1470': attribute type 4 has an invalid length. [ 273.937672][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1478'. [ 275.088458][T11698] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1478'. [ 275.097883][T11698] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 275.296150][T11715] xt_l2tp: v2 doesn't support IP mode [ 275.338856][T11709] netlink: 'syz.2.1482': attribute type 39 has an invalid length. [ 275.462090][T11722] sctp: [Deprecated]: syz.1.1487 (pid 11722) Use of struct sctp_assoc_value in delayed_ack socket option. [ 275.462090][T11722] Use struct sctp_sack_info instead [ 275.698042][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 275.808853][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1489'. [ 277.279723][T11734] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 277.285381][T11734] dvmrp1: linktype set to 768 [ 277.503010][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 277.542279][T11761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1497'. [ 277.595092][T11761] wlan1 speed is unknown, defaulting to 1000 [ 277.695374][T11771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1494'. [ 277.810959][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1499'. [ 277.837383][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 277.842860][T11776] netlink: 'syz.3.1499': attribute type 83 has an invalid length. [ 278.097603][T11761] lo speed is unknown, defaulting to 1000 [ 278.285815][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 279.024010][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 279.097142][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1517'. [ 279.101208][T11833] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 279.117471][T11829] wlan1 speed is unknown, defaulting to 1000 [ 279.128770][T11833] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1516'. [ 279.208119][T11833] netlink: 'syz.4.1516': attribute type 10 has an invalid length. [ 279.217291][T11833] veth1_vlan: entered allmulticast mode [ 279.373817][T11842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 279.445121][T11853] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 279.675201][T11855] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 279.693113][T11855] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 279.696282][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1519'. [ 279.743776][T11847] netlink: 'syz.3.1519': attribute type 17 has an invalid length. [ 279.754341][T11864] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 279.833133][T11847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.853755][ T5896] lo speed is unknown, defaulting to 1000 [ 279.867418][ T5896] syz1: Port: 1 Link ACTIVE [ 279.870229][T11829] lo speed is unknown, defaulting to 1000 [ 279.874865][T11845] wlan1 speed is unknown, defaulting to 1000 [ 279.919471][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 280.329458][T11845] lo speed is unknown, defaulting to 1000 [ 280.589559][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1530'. [ 281.258681][T11929] netlink: 'syz.1.1535': attribute type 83 has an invalid length. [ 281.290867][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1534'. [ 281.320830][T11927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1534'. [ 281.695368][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'. [ 281.761212][T11940] wlan1 speed is unknown, defaulting to 1000 [ 282.230160][T11959] block nbd0: not configured, cannot reconfigure [ 282.305074][T11961] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 282.318713][T11961] bond6 (unregistering): Released all slaves [ 282.547640][T11974] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 282.593682][T11974] bond6 (unregistering): Released all slaves [ 282.705751][T11940] lo speed is unknown, defaulting to 1000 [ 282.894099][T11990] wlan1 speed is unknown, defaulting to 1000 [ 283.531446][T12029] lo: Caught tx_queue_len zero misconfig [ 283.559414][T11990] lo speed is unknown, defaulting to 1000 [ 283.559453][T12005] wlan1 speed is unknown, defaulting to 1000 [ 283.677795][T12029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.929526][T12047] netlink: 'syz.3.1558': attribute type 1 has an invalid length. [ 283.940165][T12005] lo speed is unknown, defaulting to 1000 [ 283.995555][T12047] bond1: entered promiscuous mode [ 284.001534][T12047] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.009033][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.058395][T12046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 284.079252][T12046] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 284.090560][T12046] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 284.113726][T12046] bond1: (slave wireguard0): making interface the new active one [ 284.122182][T12046] wireguard0: entered promiscuous mode [ 284.130056][T12046] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 284.186968][T12051] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 284.218923][T12051] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 284.239022][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.298287][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.353298][T12010] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 284.524298][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.569222][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.581084][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.602518][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.611507][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.621117][T12010] wg1 speed is unknown, defaulting to 1000 [ 284.909371][T12076] __nla_validate_parse: 6 callbacks suppressed [ 284.909392][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'. [ 284.940347][T12079] netlink: 'syz.2.1563': attribute type 11 has an invalid length. [ 285.125031][T12071] wlan1 speed is unknown, defaulting to 1000 [ 285.269388][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1567'. [ 285.547689][T12112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1570'. [ 285.818619][T12071] lo speed is unknown, defaulting to 1000 [ 285.833406][T12071] wg1 speed is unknown, defaulting to 1000 [ 285.899655][T12124] team0: Port device dummy0 removed [ 285.910001][T12124] batman_adv: batadv0: Adding interface: dummy0 [ 285.926351][T12124] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.001040][T12124] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 286.243863][T12126] wlan1 speed is unknown, defaulting to 1000 [ 286.339912][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 286.370860][T12138] bridge_slave_1: left allmulticast mode [ 286.385789][T12138] bridge_slave_1: left promiscuous mode [ 286.405033][T12138] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.465095][T12138] bridge_slave_0: left allmulticast mode [ 286.488208][T12138] bridge_slave_0: left promiscuous mode [ 286.510182][T12138] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.742804][T12151] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1579'. [ 286.765283][T12151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1579'. [ 286.781480][T12144] wlan1 speed is unknown, defaulting to 1000 [ 286.788746][T12126] lo speed is unknown, defaulting to 1000 [ 286.825164][T12126] wg1 speed is unknown, defaulting to 1000 [ 286.955044][T12153] ip6tnl0: Caught tx_queue_len zero misconfig [ 287.032279][T12160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1579'. [ 287.433389][T12144] lo speed is unknown, defaulting to 1000 [ 287.441093][T12142] wlan1 speed is unknown, defaulting to 1000 [ 287.451738][T12144] wg1 speed is unknown, defaulting to 1000 [ 287.638864][T12167] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 287.700065][T12182] tc_dump_action: action bad kind [ 287.712724][T12182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1585'. [ 287.799605][T12182] netlink: 'syz.4.1585': attribute type 4 has an invalid length. [ 287.837050][T12182] netlink: 'syz.4.1585': attribute type 4 has an invalid length. [ 287.913095][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 287.964917][T12188] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1587'. [ 288.024659][T12151] wlan1 speed is unknown, defaulting to 1000 [ 288.375529][T12151] lo speed is unknown, defaulting to 1000 [ 288.384186][T12186] wlan1 speed is unknown, defaulting to 1000 [ 288.384631][T12142] lo speed is unknown, defaulting to 1000 [ 288.400571][T12151] wg1 speed is unknown, defaulting to 1000 [ 289.027538][T12172] wlan1 speed is unknown, defaulting to 1000 [ 289.250543][T12175] wlan1 speed is unknown, defaulting to 1000 [ 289.320876][T12217] netlink: 'syz.4.1593': attribute type 5 has an invalid length. [ 289.454381][T12175] lo speed is unknown, defaulting to 1000 [ 289.465967][T12186] lo speed is unknown, defaulting to 1000 [ 289.473677][T12175] wg1 speed is unknown, defaulting to 1000 [ 289.507969][T12172] lo speed is unknown, defaulting to 1000 [ 289.547687][T12142] wg1 speed is unknown, defaulting to 1000 [ 289.681785][T12186] wg1 speed is unknown, defaulting to 1000 [ 289.850681][T12172] wg1 speed is unknown, defaulting to 1000 [ 290.866893][T12231] wlan1 speed is unknown, defaulting to 1000 [ 291.271669][T12231] lo speed is unknown, defaulting to 1000 [ 291.291308][T12231] wg1 speed is unknown, defaulting to 1000 [ 291.380613][T12262] netlink: 'syz.1.1605': attribute type 21 has an invalid length. [ 291.421362][T12262] __nla_validate_parse: 3 callbacks suppressed [ 291.421384][T12262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1605'. [ 291.955819][T12281] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1610'. [ 291.987447][T12281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1610'. [ 292.028431][T12281] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1610'. [ 292.239496][T12291] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1612'. [ 292.270884][T12291] tc_dump_action: action bad kind [ 292.464437][T12294] wlan1 speed is unknown, defaulting to 1000 [ 292.577340][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1614'. [ 292.840859][T12294] lo speed is unknown, defaulting to 1000 [ 292.843994][T12299] wlan1 speed is unknown, defaulting to 1000 [ 292.849432][T12294] wg1 speed is unknown, defaulting to 1000 [ 292.858081][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'. [ 293.374755][T12331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1620'. [ 293.497411][T12338] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 293.755792][T12306] wlan1 speed is unknown, defaulting to 1000 [ 293.790665][T12299] lo speed is unknown, defaulting to 1000 [ 293.817691][T12299] wg1 speed is unknown, defaulting to 1000 [ 294.285854][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 294.421000][T12339] wlan1 speed is unknown, defaulting to 1000 [ 294.452561][T12364] SET target dimension over the limit! [ 294.752732][T12339] lo speed is unknown, defaulting to 1000 [ 294.772835][T12306] lo speed is unknown, defaulting to 1000 [ 294.779839][T12373] wlan1 speed is unknown, defaulting to 1000 [ 294.787825][T12306] wg1 speed is unknown, defaulting to 1000 [ 294.854458][T12339] wg1 speed is unknown, defaulting to 1000 [ 295.138297][T12380] macvtap1: entered allmulticast mode [ 295.143742][T12380] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 295.157224][T12380] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 295.274570][T12373] lo speed is unknown, defaulting to 1000 [ 295.328651][T12373] wg1 speed is unknown, defaulting to 1000 [ 295.804543][T12388] wlan1 speed is unknown, defaulting to 1000 [ 296.227229][T12388] lo speed is unknown, defaulting to 1000 [ 296.254215][T12388] wg1 speed is unknown, defaulting to 1000 [ 296.346104][T12402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 296.419843][T12402] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 296.633051][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1635'. [ 296.646092][T12411] bridge_slave_1: left allmulticast mode [ 296.651904][T12411] bridge_slave_1: left promiscuous mode [ 296.660009][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.714658][T12411] bridge_slave_0: left allmulticast mode [ 296.722748][T12411] bridge_slave_0: left promiscuous mode [ 296.728668][T12411] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.118471][T12427] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 297.184668][T12430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1638'. [ 297.356851][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1644'. [ 297.887992][T12470] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1653'. [ 298.051046][T12473] wlan1 speed is unknown, defaulting to 1000 [ 298.576663][T12473] lo speed is unknown, defaulting to 1000 [ 298.618697][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1661'. [ 298.646206][T12473] wg1 speed is unknown, defaulting to 1000 [ 298.784506][T12499] syzkaller1: entered promiscuous mode [ 298.804659][T12499] syzkaller1: entered allmulticast mode [ 299.081061][T12507] netlink: 'syz.0.1662': attribute type 12 has an invalid length. [ 299.089836][T12507] netlink: 'syz.0.1662': attribute type 29 has an invalid length. [ 299.098415][T12507] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1662'. [ 299.386591][T12517] syz.2.1663 (12517) used obsolete PPPIOCDETACH ioctl [ 299.792657][T12525] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 300.404601][T12544] nicvf0: entered promiscuous mode [ 300.419584][ T6287] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 300.436147][ T6287] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 300.444488][ T6287] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 300.473081][ T6287] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 301.648778][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1683'. [ 302.598874][T12624] netlink: 'syz.0.1696': attribute type 21 has an invalid length. [ 302.635839][T12624] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1696'. [ 303.216648][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 303.253307][T12664] wlan1 speed is unknown, defaulting to 1000 [ 303.296603][T12667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1709'. [ 303.485430][T12676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.575973][T12683] tipc: Cannot configure node identity twice [ 303.586791][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1709'. [ 303.597275][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1708'. [ 303.980298][T12704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1713'. [ 304.224875][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 304.243934][T12667] wlan1 speed is unknown, defaulting to 1000 [ 304.245321][T12664] lo speed is unknown, defaulting to 1000 [ 304.261863][T12664] wg1 speed is unknown, defaulting to 1000 [ 304.542275][T12699] wlan1 speed is unknown, defaulting to 1000 [ 304.693016][T12704] wlan1 speed is unknown, defaulting to 1000 [ 304.912166][T12704] lo speed is unknown, defaulting to 1000 [ 304.921690][T12724] IPVS: set_ctl: invalid protocol: 58 172.30.1.3:20000 [ 304.931076][T12699] lo speed is unknown, defaulting to 1000 [ 304.941050][T12704] wg1 speed is unknown, defaulting to 1000 [ 304.990921][T12699] wg1 speed is unknown, defaulting to 1000 [ 304.991111][T12667] lo speed is unknown, defaulting to 1000 [ 305.020468][T12667] wg1 speed is unknown, defaulting to 1000 [ 306.203797][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 306.214679][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'. [ 306.234498][T12744] wlan1 speed is unknown, defaulting to 1000 [ 306.652311][T12744] lo speed is unknown, defaulting to 1000 [ 306.662187][T12744] wg1 speed is unknown, defaulting to 1000 [ 306.800006][T12775] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1729'. [ 306.826486][T12775] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1729'. [ 306.912344][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1732'. [ 307.652647][T12796] tipc: Enabled bearer , priority 0 [ 307.685119][T12796] syzkaller0: entered promiscuous mode [ 307.706201][T12796] syzkaller0: entered allmulticast mode [ 307.839925][T12796] tipc: Resetting bearer [ 307.865077][T12795] tipc: Resetting bearer [ 307.881638][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1740'. [ 307.896522][T12795] tipc: Disabling bearer [ 308.058002][T12803] wlan1 speed is unknown, defaulting to 1000 [ 308.213667][T12821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1740'. [ 308.331994][T12823] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1745'. [ 308.365256][T12816] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1743'. [ 308.408273][ T5847] Bluetooth: hci4: link tx timeout [ 308.413987][ T5847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 308.633436][T12833] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 308.676455][T12803] lo speed is unknown, defaulting to 1000 [ 308.684455][T12803] wg1 speed is unknown, defaulting to 1000 [ 308.805016][T12837] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1747'. [ 309.003071][T12844] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1749'. [ 309.777049][T12866] block nbd0: server does not support multiple connections per device. [ 309.801809][T12866] block nbd0: shutting down sockets [ 309.858590][T12872] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 309.869091][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1759'. [ 309.983798][T12874] wlan1 speed is unknown, defaulting to 1000 [ 310.069245][T12885] tipc: Trying to set illegal importance in message [ 310.302404][T12894] ip6gre2: entered promiscuous mode [ 310.451928][ T5833] Bluetooth: hci4: command 0x0405 tx timeout [ 310.623295][T12905] bridge0: entered promiscuous mode [ 310.628954][T12905] vlan2: entered promiscuous mode [ 310.634056][T12905] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575 [ 310.643496][T12905] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12905, name: syz.1.1770 [ 310.652758][T12905] preempt_count: 201, expected: 0 [ 310.657933][T12905] RCU nest depth: 0, expected: 0 [ 310.662905][T12905] 3 locks held by syz.1.1770/12905: [ 310.668254][T12905] #0: ffffffff8f9e6120 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 310.677981][T12905] #1: ffffffff8f4e0bc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 310.687203][T12905] #2: ffff88803291c368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 310.697674][T12905] Preemption disabled at: [ 310.697688][T12905] [] dev_uc_add+0x56/0x120 [ 310.708153][T12905] CPU: 0 UID: 0 PID: 12905 Comm: syz.1.1770 Not tainted syzkaller #0 PREEMPT(full) [ 310.708180][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.708202][T12905] Call Trace: [ 310.708211][T12905] [ 310.708220][T12905] dump_stack_lvl+0x189/0x250 [ 310.708252][T12905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.708271][T12905] ? __pfx__printk+0x10/0x10 [ 310.708293][T12905] ? print_lock_name+0xde/0x100 [ 310.708311][T12905] ? dev_uc_add+0x56/0x120 [ 310.708335][T12905] __might_resched+0x495/0x610 [ 310.708365][T12905] ? dev_uc_add+0x56/0x120 [ 310.708384][T12905] ? __pfx___might_resched+0x10/0x10 [ 310.708410][T12905] ? console_unlock+0x13a/0x190 [ 310.708444][T12905] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 310.708473][T12905] __mutex_lock+0x109/0x1350 [ 310.708502][T12905] ? __pfx__printk+0x10/0x10 [ 310.708524][T12905] ? __netdev_printk+0x365/0x4d0 [ 310.708546][T12905] ? dev_set_promiscuity+0x10e/0x260 [ 310.708567][T12905] ? __pfx___mutex_lock+0x10/0x10 [ 310.708590][T12905] ? netdev_info+0x10a/0x160 [ 310.708619][T12905] ? __pfx_netdev_info+0x10/0x10 [ 310.708641][T12905] ? _printk+0xcf/0x120 [ 310.708658][T12905] ? do_syscall_64+0xfa/0xfa0 [ 310.708688][T12905] dev_set_promiscuity+0x10e/0x260 [ 310.708709][T12905] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 310.708726][T12905] __dev_set_promiscuity+0x534/0x740 [ 310.708748][T12905] ? netdev_info+0x10a/0x160 [ 310.708774][T12905] netif_set_promiscuity+0x50/0xe0 [ 310.708795][T12905] dev_set_promiscuity+0x126/0x260 [ 310.708817][T12905] br_manage_promisc+0x180/0x560 [ 310.708845][T12905] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 310.708872][T12905] __dev_set_promiscuity+0x534/0x740 [ 310.708893][T12905] ? __hw_addr_add_ex+0x3c5/0x770 [ 310.708915][T12905] __dev_set_rx_mode+0x17c/0x260 [ 310.708935][T12905] dev_uc_add+0xc8/0x120 [ 310.708957][T12905] macsec_dev_open+0xd9/0x530 [ 310.708979][T12905] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 310.708996][T12905] ? __pfx_macsec_dev_open+0x10/0x10 [ 310.709017][T12905] ? ib_device_get_by_netdev+0x84/0x4d0 [ 310.709031][T12905] ? hsr_netdev_notify+0x29e/0xcf0 [ 310.709047][T12905] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 310.709066][T12905] ? udp_tunnel_nic_netdevice_event+0x1ac/0x1810 [ 310.709092][T12905] ? ip6_route_dev_notify+0x9a/0x5b0 [ 310.709117][T12905] ? notifier_call_chain+0x3bf/0x3e0 [ 310.709151][T12905] __dev_open+0x470/0x880 [ 310.709185][T12905] ? __pfx___dev_open+0x10/0x10 [ 310.709224][T12905] __dev_change_flags+0x1ea/0x6d0 [ 310.709245][T12905] ? validate_linkmsg+0x765/0x950 [ 310.709270][T12905] ? __pfx___dev_change_flags+0x10/0x10 [ 310.709298][T12905] rtnl_newlink_create+0x555/0xb00 [ 310.709334][T12905] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 310.709356][T12905] ? __pfx___mutex_lock+0x10/0x10 [ 310.709390][T12905] ? ns_capable+0x8a/0xf0 [ 310.709418][T12905] rtnl_newlink+0x16e4/0x1c80 [ 310.709443][T12905] ? ____sys_sendmsg+0x505/0x830 [ 310.709474][T12905] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.709511][T12905] ? kasan_quarantine_put+0xdd/0x220 [ 310.709531][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.709560][T12905] ? nlmon_xmit+0xb0/0x100 [ 310.709581][T12905] ? kmem_cache_free+0x19b/0x690 [ 310.709610][T12905] ? __local_bh_enable_ip+0x12d/0x1c0 [ 310.709635][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.709667][T12905] ? __local_bh_enable_ip+0x12d/0x1c0 [ 310.709692][T12905] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 310.709720][T12905] ? __dev_queue_xmit+0x284/0x3740 [ 310.709763][T12905] ? __dev_queue_xmit+0x284/0x3740 [ 310.709786][T12905] ? __dev_queue_xmit+0x1bfb/0x3740 [ 310.709817][T12905] ? __lock_acquire+0xab9/0xd20 [ 310.709871][T12905] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.709887][T12905] rtnetlink_rcv_msg+0x7cf/0xb70 [ 310.709920][T12905] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 310.709948][T12905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.709975][T12905] ? ref_tracker_free+0x63a/0x7d0 [ 310.709996][T12905] ? __asan_memcpy+0x40/0x70 [ 310.710014][T12905] ? __pfx_ref_tracker_free+0x10/0x10 [ 310.710059][T12905] netlink_rcv_skb+0x208/0x470 [ 310.710086][T12905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.710117][T12905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.710147][T12905] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.710173][T12905] netlink_unicast+0x82f/0x9e0 [ 310.710210][T12905] ? __pfx_netlink_unicast+0x10/0x10 [ 310.710240][T12905] ? netlink_sendmsg+0x642/0xb30 [ 310.710266][T12905] ? skb_put+0x11b/0x210 [ 310.710288][T12905] netlink_sendmsg+0x805/0xb30 [ 310.710317][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.710340][T12905] ? aa_sock_msg_perm+0xf1/0x1d0 [ 310.710363][T12905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 310.710387][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.710407][T12905] __sock_sendmsg+0x21c/0x270 [ 310.710442][T12905] ____sys_sendmsg+0x505/0x830 [ 310.710468][T12905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.710498][T12905] ? import_iovec+0x74/0xa0 [ 310.710526][T12905] ___sys_sendmsg+0x21f/0x2a0 [ 310.710549][T12905] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.710605][T12905] ? __fget_files+0x2a/0x420 [ 310.710626][T12905] ? __fget_files+0x3a0/0x420 [ 310.710659][T12905] __x64_sys_sendmsg+0x19b/0x260 [ 310.710682][T12905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.710719][T12905] ? do_syscall_64+0xbe/0xfa0 [ 310.710747][T12905] do_syscall_64+0xfa/0xfa0 [ 310.710770][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.710793][T12905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.710810][T12905] ? clear_bhb_loop+0x60/0xb0 [ 310.710840][T12905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.710858][T12905] RIP: 0033:0x7fa80598efc9 [ 310.710876][T12905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.710892][T12905] RSP: 002b:00007fa8067be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.710911][T12905] RAX: ffffffffffffffda RBX: 00007fa805be5fa0 RCX: 00007fa80598efc9 [ 310.710924][T12905] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 310.710936][T12905] RBP: 00007fa805a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 310.710947][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.710958][T12905] R13: 00007fa805be6038 R14: 00007fa805be5fa0 R15: 00007ffd027b7aa8 [ 310.710989][T12905] [ 310.711012][T12905] [ 311.318838][T12905] ============================= [ 311.323688][T12905] [ BUG: Invalid wait context ] [ 311.328534][T12905] syzkaller #0 Tainted: G W [ 311.334512][T12905] ----------------------------- [ 311.339355][T12905] syz.1.1770/12905 is trying to lock: [ 311.344720][T12905] ffff88807b930d38 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 311.355090][T12905] other info that might help us debug this: [ 311.360975][T12905] context-{5:5} [ 311.364444][T12905] 3 locks held by syz.1.1770/12905: [ 311.369659][T12905] #0: ffffffff8f9e6120 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 311.379198][T12905] #1: ffffffff8f4e0bc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 311.388278][T12905] #2: ffff88803291c368 (&dev_addr_list_lock_key#6/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 311.398503][T12905] stack backtrace: [ 311.402232][T12905] CPU: 0 UID: 0 PID: 12905 Comm: syz.1.1770 Tainted: G W syzkaller #0 PREEMPT(full) [ 311.402258][T12905] Tainted: [W]=WARN [ 311.402264][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.402275][T12905] Call Trace: [ 311.402283][T12905] [ 311.402292][T12905] dump_stack_lvl+0x189/0x250 [ 311.402315][T12905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.402334][T12905] ? __pfx__printk+0x10/0x10 [ 311.402356][T12905] ? print_lock_name+0xde/0x100 [ 311.402374][T12905] __lock_acquire+0xbcb/0xd20 [ 311.402409][T12905] ? dev_set_promiscuity+0x10e/0x260 [ 311.402426][T12905] lock_acquire+0x120/0x360 [ 311.402448][T12905] ? dev_set_promiscuity+0x10e/0x260 [ 311.402473][T12905] __mutex_lock+0x187/0x1350 [ 311.402498][T12905] ? dev_set_promiscuity+0x10e/0x260 [ 311.402517][T12905] ? __pfx__printk+0x10/0x10 [ 311.402537][T12905] ? __netdev_printk+0x365/0x4d0 [ 311.402559][T12905] ? dev_set_promiscuity+0x10e/0x260 [ 311.402579][T12905] ? __pfx___mutex_lock+0x10/0x10 [ 311.402603][T12905] ? netdev_info+0x10a/0x160 [ 311.402630][T12905] ? __pfx_netdev_info+0x10/0x10 [ 311.402654][T12905] ? _printk+0xcf/0x120 [ 311.402670][T12905] ? do_syscall_64+0xfa/0xfa0 [ 311.402698][T12905] dev_set_promiscuity+0x10e/0x260 [ 311.402718][T12905] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 311.402735][T12905] __dev_set_promiscuity+0x534/0x740 [ 311.402755][T12905] ? netdev_info+0x10a/0x160 [ 311.402781][T12905] netif_set_promiscuity+0x50/0xe0 [ 311.402800][T12905] dev_set_promiscuity+0x126/0x260 [ 311.402820][T12905] br_manage_promisc+0x180/0x560 [ 311.402845][T12905] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 311.402873][T12905] __dev_set_promiscuity+0x534/0x740 [ 311.402892][T12905] ? __hw_addr_add_ex+0x3c5/0x770 [ 311.402913][T12905] __dev_set_rx_mode+0x17c/0x260 [ 311.402932][T12905] dev_uc_add+0xc8/0x120 [ 311.402953][T12905] macsec_dev_open+0xd9/0x530 [ 311.402975][T12905] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 311.402993][T12905] ? __pfx_macsec_dev_open+0x10/0x10 [ 311.403014][T12905] ? ib_device_get_by_netdev+0x84/0x4d0 [ 311.403030][T12905] ? hsr_netdev_notify+0x29e/0xcf0 [ 311.403046][T12905] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 311.403063][T12905] ? udp_tunnel_nic_netdevice_event+0x1ac/0x1810 [ 311.403087][T12905] ? ip6_route_dev_notify+0x9a/0x5b0 [ 311.403111][T12905] ? notifier_call_chain+0x3bf/0x3e0 [ 311.403143][T12905] __dev_open+0x470/0x880 [ 311.403171][T12905] ? __pfx___dev_open+0x10/0x10 [ 311.403202][T12905] __dev_change_flags+0x1ea/0x6d0 [ 311.403221][T12905] ? validate_linkmsg+0x765/0x950 [ 311.403246][T12905] ? __pfx___dev_change_flags+0x10/0x10 [ 311.403271][T12905] rtnl_newlink_create+0x555/0xb00 [ 311.403296][T12905] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 311.403317][T12905] ? __pfx___mutex_lock+0x10/0x10 [ 311.403355][T12905] ? ns_capable+0x8a/0xf0 [ 311.403388][T12905] rtnl_newlink+0x16e4/0x1c80 [ 311.403405][T12905] ? ____sys_sendmsg+0x505/0x830 [ 311.403429][T12905] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.403456][T12905] ? kasan_quarantine_put+0xdd/0x220 [ 311.403476][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.403502][T12905] ? nlmon_xmit+0xb0/0x100 [ 311.403524][T12905] ? kmem_cache_free+0x19b/0x690 [ 311.403549][T12905] ? __local_bh_enable_ip+0x12d/0x1c0 [ 311.403574][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.403598][T12905] ? __local_bh_enable_ip+0x12d/0x1c0 [ 311.403623][T12905] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 311.403650][T12905] ? __dev_queue_xmit+0x284/0x3740 [ 311.403673][T12905] ? __dev_queue_xmit+0x284/0x3740 [ 311.403695][T12905] ? __dev_queue_xmit+0x1bfb/0x3740 [ 311.403720][T12905] ? __lock_acquire+0xab9/0xd20 [ 311.403754][T12905] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.403770][T12905] rtnetlink_rcv_msg+0x7cf/0xb70 [ 311.403799][T12905] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 311.403827][T12905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.403853][T12905] ? ref_tracker_free+0x63a/0x7d0 [ 311.403873][T12905] ? __asan_memcpy+0x40/0x70 [ 311.403890][T12905] ? __pfx_ref_tracker_free+0x10/0x10 [ 311.403913][T12905] netlink_rcv_skb+0x208/0x470 [ 311.403931][T12905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.403960][T12905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.403982][T12905] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.404003][T12905] netlink_unicast+0x82f/0x9e0 [ 311.404033][T12905] ? __pfx_netlink_unicast+0x10/0x10 [ 311.404060][T12905] ? netlink_sendmsg+0x642/0xb30 [ 311.404077][T12905] ? skb_put+0x11b/0x210 [ 311.404095][T12905] netlink_sendmsg+0x805/0xb30 [ 311.404118][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.404138][T12905] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.404160][T12905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.404184][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.404202][T12905] __sock_sendmsg+0x21c/0x270 [ 311.404228][T12905] ____sys_sendmsg+0x505/0x830 [ 311.404250][T12905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.404273][T12905] ? import_iovec+0x74/0xa0 [ 311.404299][T12905] ___sys_sendmsg+0x21f/0x2a0 [ 311.404319][T12905] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.404356][T12905] ? __fget_files+0x2a/0x420 [ 311.404378][T12905] ? __fget_files+0x3a0/0x420 [ 311.404413][T12905] __x64_sys_sendmsg+0x19b/0x260 [ 311.404434][T12905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.404462][T12905] ? do_syscall_64+0xbe/0xfa0 [ 311.404487][T12905] do_syscall_64+0xfa/0xfa0 [ 311.404510][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.404533][T12905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.404550][T12905] ? clear_bhb_loop+0x60/0xb0 [ 311.404570][T12905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.404587][T12905] RIP: 0033:0x7fa80598efc9 [ 311.404604][T12905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.404624][T12905] RSP: 002b:00007fa8067be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.404643][T12905] RAX: ffffffffffffffda RBX: 00007fa805be5fa0 RCX: 00007fa80598efc9 [ 311.404657][T12905] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 311.404668][T12905] RBP: 00007fa805a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 311.404680][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.404690][T12905] R13: 00007fa805be6038 R14: 00007fa805be5fa0 R15: 00007ffd027b7aa8 [ 311.404712][T12905] [ 312.010508][T12905] dummy0: entered promiscuous mode [ 312.044413][T12905] macsec1: entered promiscuous mode [ 312.050630][T12905] bridge0: port 2(macsec1) entered blocking state [ 312.057199][T12905] bridge0: port 2(macsec1) entered disabled state [ 312.063837][T12905] macsec1: entered allmulticast mode [ 312.069229][T12905] bridge0: entered allmulticast mode [ 312.080359][T12905] macsec1: left allmulticast mode [ 312.085444][T12905] bridge0: left allmulticast mode [ 312.110440][T12905] bridge0: left promiscuous mode [ 312.115490][T12905] vlan2: left promiscuous mode [ 312.120317][T12905] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:575 [ 312.129741][T12905] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 12905, name: syz.1.1770 [ 312.138919][T12905] preempt_count: 201, expected: 0 [ 312.143971][T12905] RCU nest depth: 0, expected: 0 [ 312.148966][T12905] INFO: lockdep is turned off. [ 312.153753][T12905] Preemption disabled at: [ 312.153767][T12905] [] dev_uc_del+0x56/0x110 [ 312.164162][T12905] CPU: 0 UID: 0 PID: 12905 Comm: syz.1.1770 Tainted: G W syzkaller #0 PREEMPT(full) [ 312.164196][T12905] Tainted: [W]=WARN [ 312.164204][T12905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 312.164217][T12905] Call Trace: [ 312.164225][T12905] [ 312.164234][T12905] dump_stack_lvl+0x189/0x250 [ 312.164266][T12905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.164290][T12905] ? __pfx__printk+0x10/0x10 [ 312.164326][T12905] ? dev_uc_del+0x56/0x110 [ 312.164353][T12905] __might_resched+0x495/0x610 [ 312.164389][T12905] ? dev_uc_del+0x56/0x110 [ 312.164413][T12905] ? __pfx___might_resched+0x10/0x10 [ 312.164443][T12905] ? __kasan_kmalloc+0x93/0xb0 [ 312.164470][T12905] ? __hw_addr_add_ex+0x1f4/0x770 [ 312.164494][T12905] ? dev_uc_add+0xa1/0x120 [ 312.164516][T12905] ? br_fdb_sync_static+0x1bf/0x3f0 [ 312.164541][T12905] ? __dev_set_promiscuity+0x534/0x740 [ 312.164563][T12905] ? __dev_set_rx_mode+0x17c/0x260 [ 312.164583][T12905] ? dev_uc_del+0xc0/0x110 [ 312.164615][T12905] __mutex_lock+0x109/0x1350 [ 312.164649][T12905] ? __pfx__printk+0x10/0x10 [ 312.164673][T12905] ? __netdev_printk+0x365/0x4d0 [ 312.164701][T12905] ? dev_set_promiscuity+0x10e/0x260 [ 312.164725][T12905] ? __pfx___mutex_lock+0x10/0x10 [ 312.164754][T12905] ? netdev_info+0x10a/0x160 [ 312.164786][T12905] ? __pfx_netdev_info+0x10/0x10 [ 312.164822][T12905] dev_set_promiscuity+0x10e/0x260 [ 312.164847][T12905] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 312.164869][T12905] __dev_set_promiscuity+0x534/0x740 [ 312.164893][T12905] ? lock_release+0x4b/0x3e0 [ 312.164924][T12905] netif_set_promiscuity+0x50/0xe0 [ 312.164948][T12905] dev_set_promiscuity+0x126/0x260 [ 312.164973][T12905] br_manage_promisc+0x4db/0x560 [ 312.165004][T12905] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 312.165038][T12905] __dev_set_promiscuity+0x534/0x740 [ 312.165066][T12905] __dev_set_rx_mode+0x17c/0x260 [ 312.165091][T12905] dev_uc_del+0xc0/0x110 [ 312.165117][T12905] macsec_dev_stop+0x2b6/0x380 [ 312.165145][T12905] ? __pfx_macsec_dev_stop+0x10/0x10 [ 312.165169][T12905] ? dev_deactivate_many+0xb62/0xd40 [ 312.165191][T12905] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.165224][T12905] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 312.165257][T12905] ? do_raw_spin_unlock+0x122/0x240 [ 312.165281][T12905] ? dev_deactivate_many+0xb62/0xd40 [ 312.165304][T12905] ? dev_deactivate_many+0xd06/0xd40 [ 312.165337][T12905] ? dev_deactivate_many+0x258/0xd40 [ 312.165359][T12905] ? __pfx_macsec_dev_stop+0x10/0x10 [ 312.165386][T12905] __dev_close_many+0x364/0x6f0 [ 312.165418][T12905] ? stack_depot_save_flags+0x40/0x860 [ 312.165444][T12905] ? __pfx___dev_close_many+0x10/0x10 [ 312.165477][T12905] ? kasan_save_track+0x3e/0x80 [ 312.165500][T12905] ? __kasan_save_free_info+0x46/0x50 [ 312.165534][T12905] ? kfree+0x19a/0x6d0 [ 312.165552][T12905] ? rtnl_newlink_create+0x7fa/0xb00 [ 312.165578][T12905] ? rtnl_newlink+0x16e4/0x1c80 [ 312.165596][T12905] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 312.165631][T12905] netif_close_many+0x225/0x410 [ 312.165660][T12905] ? do_syscall_64+0xfa/0xfa0 [ 312.165689][T12905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.165714][T12905] ? __pfx_netif_close_many+0x10/0x10 [ 312.165753][T12905] unregister_netdevice_many_notify+0xb29/0x2390 [ 312.165792][T12905] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 312.165823][T12905] ? rcu_is_watching+0x15/0xb0 [ 312.165862][T12905] ? kfree+0x19a/0x6d0 [ 312.165885][T12905] rtnl_newlink_create+0x802/0xb00 [ 312.165916][T12905] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 312.165941][T12905] ? __pfx___mutex_lock+0x10/0x10 [ 312.165978][T12905] ? ns_capable+0x8a/0xf0 [ 312.166011][T12905] rtnl_newlink+0x16e4/0x1c80 [ 312.166032][T12905] ? ____sys_sendmsg+0x505/0x830 [ 312.166063][T12905] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.166096][T12905] ? kasan_quarantine_put+0xdd/0x220 [ 312.166120][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.166153][T12905] ? nlmon_xmit+0xb0/0x100 [ 312.166180][T12905] ? kmem_cache_free+0x19b/0x690 [ 312.166210][T12905] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.166242][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.166271][T12905] ? __local_bh_enable_ip+0x12d/0x1c0 [ 312.166303][T12905] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 312.166343][T12905] ? __dev_queue_xmit+0x284/0x3740 [ 312.166372][T12905] ? __dev_queue_xmit+0x284/0x3740 [ 312.166399][T12905] ? __dev_queue_xmit+0x1bfb/0x3740 [ 312.166431][T12905] ? __lock_acquire+0xab9/0xd20 [ 312.166475][T12905] ? __pfx_rtnl_newlink+0x10/0x10 [ 312.166494][T12905] rtnetlink_rcv_msg+0x7cf/0xb70 [ 312.166531][T12905] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 312.166565][T12905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.166599][T12905] ? ref_tracker_free+0x63a/0x7d0 [ 312.166622][T12905] ? __asan_memcpy+0x40/0x70 [ 312.166643][T12905] ? __pfx_ref_tracker_free+0x10/0x10 [ 312.166672][T12905] netlink_rcv_skb+0x208/0x470 [ 312.166694][T12905] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 312.166730][T12905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.166758][T12905] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.166785][T12905] netlink_unicast+0x82f/0x9e0 [ 312.166822][T12905] ? __pfx_netlink_unicast+0x10/0x10 [ 312.166856][T12905] ? netlink_sendmsg+0x642/0xb30 [ 312.166877][T12905] ? skb_put+0x11b/0x210 [ 312.166901][T12905] netlink_sendmsg+0x805/0xb30 [ 312.166929][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.166953][T12905] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.166979][T12905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.167008][T12905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.167031][T12905] __sock_sendmsg+0x21c/0x270 [ 312.167063][T12905] ____sys_sendmsg+0x505/0x830 [ 312.167091][T12905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.167120][T12905] ? import_iovec+0x74/0xa0 [ 312.167152][T12905] ___sys_sendmsg+0x21f/0x2a0 [ 312.167177][T12905] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.167224][T12905] ? __fget_files+0x2a/0x420 [ 312.167250][T12905] ? __fget_files+0x3a0/0x420 [ 312.167284][T12905] __x64_sys_sendmsg+0x19b/0x260 [ 312.167318][T12905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.167353][T12905] ? do_syscall_64+0xbe/0xfa0 [ 312.167384][T12905] do_syscall_64+0xfa/0xfa0 [ 312.167413][T12905] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.167441][T12905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.167463][T12905] ? clear_bhb_loop+0x60/0xb0 [ 312.167488][T12905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.167510][T12905] RIP: 0033:0x7fa80598efc9 [ 312.167529][T12905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.167549][T12905] RSP: 002b:00007fa8067be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.167573][T12905] RAX: ffffffffffffffda RBX: 00007fa805be5fa0 RCX: 00007fa80598efc9 [ 312.167590][T12905] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 312.167605][T12905] RBP: 00007fa805a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 312.167619][T12905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.167632][T12905] R13: 00007fa805be6038 R14: 00007fa805be5fa0 R15: 00007ffd027b7aa8 [ 312.167659][T12905] [ 312.174453][T12921] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1770'. [ 312.178712][T12905] dummy0: left promiscuous mode [ 312.882287][T12874] lo speed is unknown, defaulting to 1000 [ 312.889106][T12874] wg1 speed is unknown, defaulting to 1000