last executing test programs: 38.850339005s ago: executing program 0 (id=2632): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0xfe, 0x6}, [@RTA_MULTIPATH={0x5, 0x9, {0xc15}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}, @RTA_ENCAP_TYPE, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x0, 0x2, @private=0xa010102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000d4}, 0x0) r3 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000001c0)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r3, &(0x7f0000000140)='THAWED\x00', 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000030002000b00004008000300", @ANYRES32=r7, @ANYBLOB="200050800500020000000000080003000aac0f0009000100f8ff00fa08000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x400}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c880}, 0x24000045) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="0600cd0000000000590033"], 0x80}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r13, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="00fb0000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xec, r12, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfb30}, {0x6, 0x11, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000001}, {0x6, 0x11, 0x8001}}]}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x4000810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r15) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r11, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x184, r16, 0x20, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x61, 0x3, 0x2}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x20000020}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xf1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x38}}, 0x0) 38.41670865s ago: executing program 0 (id=2638): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) getpeername$qrtr(r4, &(0x7f0000000200), &(0x7f0000000400)=0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r7) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000298b8efb22aa2fe466e570c3a1dccfe512863ef08b109a65622521bf8815957521eeb6eb9d88af0412dbf3dc02df7f3a9f0e1172f49c5faf71657d5d6a3d680b35e671ef613a478d418d63161b4ce3393acd1a16506d30ae5352eea630dab7b78861db12ae680bbd3a61bf36b8c382734e85e7e8b8883f7d1c98f722d39097b47a4d70770b11a2c72b3054b8c0ac08219feb756eafb9ae8b2bae8624635407212e1b130546", @ANYRES16=r8, @ANYBLOB="39d829bd7000fcdbdf250a000000"], 0x14}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x117c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xf3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x80010000}, @filter_kind_options=@f_u32={{0x8}, {0x1138, 0x2, [@TCA_U32_POLICE={0x1078, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x80000000, 0x0, 0x5, 0x8f, 0xc, 0x10000, 0xd, 0xd8, 0x3, 0x4, 0x6, 0x495, 0x795f, 0x80000001, 0x577a, 0x1000, 0x4, 0x1, 0xf, 0x8, 0x3, 0x2, 0x3, 0xb34d, 0x5, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1ee3a7e3, 0xfffffffe, 0x8, 0xe, 0x9, 0x328, 0x6, 0x0, 0x8, 0x6, 0x5, 0xd, 0x9, 0x0, 0x0, 0x3, 0xc4f, 0x1, 0xfffffffa, 0x6, 0x9d, 0xb46, 0xfffffffa, 0x370, 0x4, 0x1, 0xffff, 0x3, 0x8, 0x7fffffff, 0x1fc, 0x6d, 0x2, 0xf4f, 0x5, 0xffffffff, 0x7e22, 0x101, 0x7, 0x101, 0x6, 0x101, 0x7, 0x2, 0x5, 0xe, 0x4, 0x8000, 0x7, 0x4, 0x9, 0xfffffff8, 0x1, 0x800, 0x0, 0xcd, 0x5, 0x6e3a, 0x49, 0xb9, 0x5c, 0x101, 0x889c, 0x9, 0x4, 0x81, 0x4, 0x800, 0x7, 0x357, 0x7fff, 0x9, 0x1000, 0x1, 0x4, 0x2, 0x401, 0x8000, 0x2, 0x0, 0x40, 0x200, 0x2, 0x6, 0x8c, 0x7, 0xfffffbff, 0x6, 0x2, 0x301, 0x6, 0x7ff, 0x48e571c2, 0xff, 0x9, 0xc, 0x7fff, 0x5, 0x0, 0x47a, 0x5, 0x6, 0x7fff, 0x4, 0x4, 0x5, 0x9, 0x4, 0x10, 0x0, 0x2, 0x7, 0xfffffffe, 0xfff, 0x9, 0x5, 0x2, 0x10000, 0x9, 0x4, 0x4, 0x8, 0xb, 0x400, 0xaa29, 0x4000008, 0x40, 0x5b, 0x3, 0x10001, 0xffffffff, 0x5, 0x80000001, 0x17e, 0x3, 0x80000001, 0x5, 0x3, 0x1, 0x1ff, 0x80000001, 0x7, 0x2, 0x2, 0x4, 0x476e, 0x4, 0x4, 0x4, 0x80, 0x200, 0x3, 0x1, 0x4, 0x3, 0x4, 0x9, 0x43, 0x9, 0xfff, 0x6, 0x8, 0x7, 0x9, 0x7, 0xfffffff7, 0x8, 0x9, 0x3, 0x1, 0x5, 0x3ff, 0xff, 0x5, 0x6, 0x200, 0x8, 0x2, 0x80000001, 0x5, 0x4, 0x4, 0x7a6, 0x100, 0x4, 0x1, 0x4, 0x519c4c5a, 0x49, 0x1, 0x9, 0x59e, 0x6, 0xfffffbff, 0x5, 0x81, 0x81, 0x7930, 0x2, 0x4, 0x9, 0xc, 0x4, 0x7, 0x7, 0x5, 0x7fffffff, 0x3, 0x4, 0x2, 0x10001, 0x40, 0x10001, 0x8, 0x0, 0x7903, 0xfffffffb, 0xd2, 0x1, 0x4, 0x6, 0x8, 0x7ff, 0x9e, 0x3ff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x101}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x4, 0x3, 0x3, {0x7, 0x2, 0x885, 0x40, 0x77d4, 0xc65}, {0x6, 0x2, 0x9, 0x0, 0x7, 0x9}, 0x5, 0x2, 0x10000}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x4, 0x2, 0xc, 0xff, 0x5, 0x80, 0x1, 0x8000, 0x2, 0x1, 0x1, 0x4, 0x7fffffff, 0x8, 0x8, 0x37, 0x4, 0xf, 0xf, 0x3, 0x8, 0x7, 0x4, 0x2, 0x96a, 0x8, 0xfff, 0x4ce3, 0x8, 0x1000, 0x400, 0x8, 0xb3d, 0xa2f, 0x2, 0x2, 0x4, 0x7f, 0x4, 0x2, 0x400, 0x3, 0x5, 0x4, 0x400, 0x0, 0x7f, 0x3, 0xd307, 0x9, 0x8, 0xfffffff8, 0x4, 0x7, 0x400, 0x2, 0x2, 0x8000, 0xe, 0x4, 0x0, 0x5, 0x1, 0x8, 0x10000, 0x101, 0x2, 0x2, 0x0, 0x800, 0xfffff000, 0x80, 0x6, 0x46bb04b0, 0x4, 0x4, 0x5, 0x8, 0x40, 0xa3, 0x5, 0x10001, 0x3, 0x7, 0x8, 0x3, 0x0, 0x2, 0x9, 0xffffffff, 0xfffffffd, 0x6, 0x9, 0x4, 0x32860429, 0x0, 0xfffff00f, 0x0, 0x64a, 0x5, 0x10, 0x1000, 0x34, 0x10, 0x7d, 0x9, 0x0, 0x1ff, 0xaef9, 0xe, 0x7, 0x0, 0x4, 0x9, 0x80000000, 0x7ff, 0xff, 0x10, 0xeeb, 0x100, 0x8, 0x3, 0x5, 0x401, 0x8, 0x2, 0x88, 0x1, 0x5, 0xfed176d8, 0x2, 0x0, 0x9e8, 0x6, 0x1ff, 0x101, 0x10000, 0x6f, 0xbd, 0x4, 0xbccf, 0xf, 0x1000, 0x9, 0x6, 0xfffffff7, 0x3, 0x100, 0x6, 0xe0cd, 0x4, 0x2, 0x7fffffff, 0xb2, 0x7, 0x2, 0x4623, 0x4, 0x0, 0x3, 0x7, 0x0, 0x64b, 0x9, 0x3, 0xb, 0x0, 0x0, 0x9, 0x5, 0x7, 0x4, 0x3, 0x40, 0x11, 0xffff, 0x80, 0x8, 0x4, 0xffff8001, 0x5, 0x4, 0x3, 0x5, 0xffffffff, 0x738, 0x7f, 0x10, 0x80, 0x5, 0x8, 0xfffff99a, 0x69f8d351, 0x5, 0x5, 0x400, 0x8, 0x1, 0x10000, 0xd, 0x7db5, 0xb, 0x130, 0x8000, 0x6692, 0x7f, 0xffff, 0x1, 0x6, 0x0, 0xc40, 0x7ff, 0x5, 0x8, 0x6, 0x9, 0x5, 0x80, 0x9, 0x6, 0xffffffe5, 0x9, 0x7fffffff, 0xc736, 0x5, 0x5, 0x8, 0x8, 0x1, 0xa, 0x40, 0x2, 0x2, 0x0, 0x1, 0x9, 0x3, 0x40, 0x49, 0x0, 0x7ff, 0x5e47381a, 0xfffffffa, 0x1, 0xff, 0x7ff, 0xddd2, 0x5, 0x3, 0x7fffffff, 0xb, 0xd4f, 0x8, 0xc, 0x67fa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xa, 0x3df4098f, 0x7, 0xfffffff8, 0xff, 0x2, 0x3ff, 0x7, 0x2, 0x3, 0x36ce, 0x8000, 0x10001, 0x7, 0x0, 0x8, 0x7, 0x10, 0x3, 0x6, 0x4, 0x4, 0x6, 0x3, 0x0, 0x8, 0x8, 0x0, 0x4, 0x18d, 0xfffffffa, 0x3, 0x8, 0x3, 0x1000, 0x9, 0x8, 0x85d, 0x1, 0x9, 0x8, 0x9, 0x7, 0xfffffff8, 0x2, 0x80000000, 0x9, 0x9, 0x4, 0x9, 0x81, 0x1, 0x80000000, 0x8, 0x6, 0xfffffffa, 0x800, 0xaf, 0x7, 0x0, 0x54967507, 0xe, 0x6, 0x8, 0x3, 0x4, 0xff, 0x0, 0x7, 0x7, 0x7, 0xffff, 0x7fff, 0xe, 0x9e, 0x999, 0x71, 0xa277, 0xd1, 0xd9, 0x80, 0x7f, 0x7fffffff, 0x5, 0x3, 0x9, 0x0, 0x8, 0x7ff, 0xf4e, 0x3, 0x2, 0xb0, 0x9, 0xf4, 0x56e, 0xfffffffd, 0x80000000, 0xfffffff8, 0xae1, 0x4, 0x4, 0x4, 0x7f, 0x7, 0x9000000, 0x401, 0x0, 0x0, 0x4, 0xd5, 0x40, 0x9, 0x39db4846, 0x1, 0x9, 0x4, 0x7fffffff, 0x3183ee32, 0x40, 0x101, 0x2, 0x9, 0x9210, 0x0, 0x10000, 0x4, 0xffffffff, 0x2, 0x4, 0x5, 0x10, 0xffff8000, 0x7, 0x0, 0x4, 0x5, 0x5, 0x2, 0xffff8001, 0x5, 0xd8, 0xfffffffc, 0x3, 0x10000000, 0x8, 0x3, 0x101, 0x6, 0x3, 0x5, 0xf7, 0x7, 0x9, 0x7, 0x800, 0x9, 0x5, 0x8001, 0x5, 0x1, 0x95, 0x8, 0x7, 0x3, 0x8, 0x9, 0x1ff, 0x3, 0x2, 0xec, 0x3, 0x5, 0xb341, 0x6, 0x5, 0x0, 0x5, 0x7, 0x3c, 0x2, 0x2, 0x80, 0x7, 0x2, 0x8, 0x9, 0xff, 0x2, 0x6, 0x1, 0xff1c, 0xa, 0x400, 0x6, 0x6, 0xb, 0x40000000, 0x2ef, 0x9, 0x3, 0x1, 0x1, 0x9, 0x4, 0x10000, 0x1ff, 0x8, 0x400, 0x6, 0xd0ba, 0x8, 0x8, 0x0, 0xda, 0xffff8000, 0x7, 0xf67, 0x70a, 0x5, 0xffffff81, 0x800, 0x1, 0x5, 0x3, 0x0, 0x2, 0x5, 0x4, 0x9ca, 0x7f1dc22e, 0x1, 0xfffff628, 0x71b9, 0x2, 0x2, 0x8, 0x5, 0x5, 0x100, 0x6, 0x6, 0x1, 0x0, 0x8, 0x80000001, 0x40, 0x10, 0x200, 0x7, 0x140000, 0x9, 0x0, 0x381, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x1000, 0xd94, 0xa, 0x2, 0x4, 0x1000, 0x6, 0x5, 0x7f, 0xd, 0xb2c, 0x4, 0x80000000, 0xfffffff7, 0x6, 0x1, 0x7, 0xbd, 0x6, 0x8000, 0x7ff, 0x12, 0x3ab, 0x2, 0xff, 0x7, 0x4, 0x6, 0x7, 0x4, 0xfff, 0x8, 0x2f, 0xff, 0x269d, 0x80000000, 0x7, 0x0, 0x9dc, 0x6, 0x40, 0x4, 0x200, 0x0, 0xffffff67, 0x101, 0x4, 0x7, 0x6, 0x7fff, 0x7, 0x7ff, 0x2, 0x80000000, 0x3, 0x400000, 0x14e0, 0x3, 0x0, 0x80000001, 0x3, 0x8001, 0x0, 0x7, 0x7fffffff, 0x8fae, 0x0, 0x2, 0x12f9, 0x2, 0x4, 0x1, 0x6, 0x5, 0x7bf, 0x1ff, 0x0, 0x897, 0x7, 0x0, 0xffff, 0x4, 0x3ff, 0x4bf584ec, 0x4, 0x800, 0x4, 0x8, 0x0, 0x9, 0x1, 0x3, 0x100, 0x3, 0x1, 0x0, 0x4, 0xe44, 0x8, 0x6, 0x1, 0x7ff, 0x7, 0x7f, 0x10000, 0x4, 0xa2, 0x10, 0x0, 0x4, 0xffffffff, 0x4, 0x39, 0xd, 0x2, 0x4, 0x4, 0x8, 0x8e, 0x8000000, 0x80000001, 0x4, 0x5, 0x2, 0x9, 0x1, 0x3, 0x8, 0x10000, 0x6, 0x1, 0x0, 0x7, 0xfffffff8, 0x2, 0x8, 0x2, 0x3ff, 0x1, 0x1, 0x4, 0x4, 0x2, 0x9, 0x2, 0x0, 0xffffffff, 0xd9, 0x0, 0x0, 0x4, 0x5, 0x32d30610, 0x9, 0xffffff96, 0x5, 0x9, 0xfffffffb, 0x0, 0x7, 0x1, 0x4, 0x14e, 0x68ecb9d8, 0x9, 0xbc1, 0x0, 0x6, 0x7, 0x1, 0xfffffff7, 0x6, 0xf, 0xb24, 0x2, 0xff, 0x7, 0xfffffff7, 0x1, 0x101, 0x5, 0x7ff, 0xc69, 0x8, 0x2, 0x1, 0x7, 0x0, 0x5, 0xa1, 0x2, 0x3, 0x7, 0x40, 0x8, 0xf00, 0x4, 0x0, 0x3, 0x5, 0x80, 0x23, 0x200000, 0xffffff7f, 0xb4c2, 0x3, 0xffffffff, 0x8, 0x7fff, 0x9, 0x8, 0x0, 0x6, 0x3, 0x5, 0x32, 0x2, 0x4, 0x25c, 0x6, 0x40, 0x5, 0x7, 0x10001, 0x8, 0x400, 0x8, 0x4, 0xd04e, 0x80000000, 0x9, 0x0, 0xff, 0x8, 0x3, 0x401, 0x7ff, 0x9a7, 0x4, 0xe3, 0x0, 0x6, 0xb5a9, 0x8001, 0x10, 0x3, 0x6, 0x7fff, 0x3, 0x5, 0x5, 0x2, 0x2, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_U32_HASH={0x8, 0x2, 0x7}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}, @TCA_U32_LINK={0x8, 0x3, 0x9}, @TCA_U32_LINK={0x8, 0x3, 0x36}, @TCA_U32_ACT={0x9c, 0x7, [@m_ctinfo={0x98, 0x19, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0xe2, 0x2, 0x40, 0x637a}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x2}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xb}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x4, 0x8, 0x9, 0x9}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffc}]}, {0x14, 0x6, "b196c25f2823930fe2e15299d94bdc31"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x117c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x80800) close(0x4) close(r10) 37.363332947s ago: executing program 0 (id=2645): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000080)={r3, 0x800, 0x6, "2184e34d4650"}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 37.025284544s ago: executing program 0 (id=2647): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x88, 0x88, 0x6, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x0, 0x4}, {0xf, 0x1}, {0x10}, {0x1, 0x1}, {0x5, 0x1}]}, @union={0xf, 0x0, 0x0, 0x5, 0x0, 0x4}, @ptr={0x2}, @const={0x8, 0x0, 0x0, 0xa, 0x1}, @func={0x10, 0x0, 0x0, 0xc, 0x1}, @float={0x8, 0x0, 0x0, 0x10, 0x8}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, &(0x7f0000000680)=""/4096, 0xa6, 0x1000, 0x0, 0x9d, 0x10000, @value=r3}, 0x28) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000000003000000950000000000000000000000292261fef71a45ef7d92740edefefa0c0b4302cf1d17f270515c44112ae9e50ac91f2cf86dcfd1f3ebc38a117cf85b9ab0648f7644bf8e8131490815120e128be2b5164d8e0428dd26c9dee145"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r7, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001680)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) 36.856787091s ago: executing program 0 (id=2649): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, &(0x7f0000000300)=0xb0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600030a001800"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x65}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x840) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x1405, 0x1, 0x70bd2c, 0x25dfdbfd, "", [{{0x8}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}, {{0x8}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x80}}, 0x200408b0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f00000001c0)={0x6, 'bond_slave_0\x00', {0x7}, 0x6ef}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x20, 0x16, 0xb04, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}]}, 0x20}}, 0x0) 36.613446719s ago: executing program 0 (id=2653): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 21.596364602s ago: executing program 32 (id=2653): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000100)='FROZEN\x00', 0x7) 4.289476079s ago: executing program 2 (id=3033): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000056150a5981fd2af11000000006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") 4.241261302s ago: executing program 2 (id=3034): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0801000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x48, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, @in6={0xa, 0x4e21, 0x101, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r1, 0x81}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 4.081514657s ago: executing program 2 (id=3036): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r2 = epoll_create1(0x0) epoll_pwait(r2, 0xfffffffffffffffc, 0x0, 0x8000002, 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000140)=0x1e) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000140)=0x1e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 3.922961123s ago: executing program 2 (id=3039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x29, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x7, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x9, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x3, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6d, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0xfffffff9, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x0, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x6, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x29, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e9, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0xa3, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x70c, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x791bfd1ea2b89f05, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x801}, 0x20}}, 0x20000000) (async) 3.561505045s ago: executing program 2 (id=3044): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x1, 0x2, {0x0, 0xff, 0x2}, {0x0, 0x0, 0x2}, 0x2}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0xffff, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 3.358048029s ago: executing program 2 (id=3046): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="611076000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x29, 0x1, 0x0, 0x0, "", [@nested={0x102, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e8823f9f3cb639cfb05bc48c26c0a26237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf1374875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 2.005272891s ago: executing program 1 (id=3064): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x20, 0x1412, 0x1, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x240408d4}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db09f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) socketpair(0x1a, 0x80000, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40058c4}, 0x40801) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.862064826s ago: executing program 3 (id=3067): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'bridge0\x00', 0x9}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x890c, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x200000, {0x2, 0x20, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x4}}, 0x1c}}, 0x20000000) 1.757425344s ago: executing program 3 (id=3068): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f00000013c0)=[{{&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001400)=[@ip_tos_int={{0x14}}], 0x18}}], 0x1, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="de00000068fd00000200009009abfd03c6220000000c007129000000000000000000000cf875f58c000000000000f900c4ec50570b51ba28b8"], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 1.695653126s ago: executing program 4 (id=3070): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x40800) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newaddrlabel={0x60, 0x48, 0x1, 0x70bd2a, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, r2, 0x9}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x2c, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @IFAL_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="1a8c78063c3b25e8d41e457bc282b053977241d87019e108af8de515e6d1740283f6f4f8883b3ecd94f90a24c4f11a90c53fb063b2eb3c35f33e9fb461db8721aa3a2d24bc", 0x45}, {&(0x7f0000000080)="bc20a816b871ddce92593d625f9cc040b406156e3ebcfdee1f85ba11d3e3e68c5233cdcd34902885a6ff7f116a61174a3ba3cc25574323facfece75b9e38813ed3713762440bc2c785c0e761eced23fcc4c2e27f92e357c822d788baff31277cd67a2044fe90a7311e793f77189c7c94769461b7112236844076edde30c7488d1db151008b76aa6ec38017d7bd5c54a1185c25d108505faa9493e9a365ff6e01f0ed8372921d492973207e5f257e066f7d5b02d42d8fb002d02d1254ff4cf95ba8d85aed1e0fdd", 0xc7}, {&(0x7f0000000280)="8882e3fb10eac7cf15609a17fd38df1665f13333082f7f79333512b3ce4dd91c78c6997f921c2e71cef0affec0c6d52b102434b4b4ba43b34362cfa8cdca7810b49818f5054cf19a95", 0x49}], 0x3) 1.619475862s ago: executing program 4 (id=3071): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800a000100a0026e6765000000200002639df7797eb227e712080002400000000004000480080003800400e0ff0800010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x20000080) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.541593157s ago: executing program 3 (id=3072): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000300)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c0004800500030080ff00000500030080ffffff05000380ff0000000400030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.401620535s ago: executing program 4 (id=3074): r0 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207f00000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095", @ANYBLOB="9f45e6571cdfe7c63461829e7db06b29b9732fb4d82730d626a12a2575268a4d73ba4da48ea8147b62699212c37abfdcea51a7aa762e2454bb213a37094a456a8ef9fc9960e46ddd08fade58f754ccbf534e4a5f7875ee68077fe71342fb5b6cd5522e8331e40b84f70d71402ebbbadd5777ef8f54c8556156904c9e91fea268b717edfbde2eefc7b00780758868a1cfe7e24283b5fa4cd04bcb98313395881a50eebb28b1f9ef2c3aed780f2793030aac33"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.399663499s ago: executing program 1 (id=3075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x80fe, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) 1.282938023s ago: executing program 4 (id=3077): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xcb}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20008054}, 0x4040000) 1.181586164s ago: executing program 1 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a00), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) (rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a40)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x26, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0x4}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c00"], 0x1c}], 0x1}, 0x0) (async) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r6, @ANYRES8=r5, @ANYRESOCT=r1], 0x14}, 0x1, 0x0, 0x0, 0x24004854}, 0x0) 924.404638ms ago: executing program 3 (id=3080): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c0001800600060008060000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x10, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0xffffffffffffff02}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x9c}}, 0x20050800) 761.519137ms ago: executing program 4 (id=3081): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x2b9, 0x3, 0xffff, 0x2}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0xa006}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x5, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x58, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_EMATCHES={0x24, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x8001}, {{0x2, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002100010000000000000000e20900000000000000000000006653150002000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 759.612803ms ago: executing program 5 (id=3082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e2613c2b346dc3f0a7387", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200090a000000000000000000000003000600000000000200000000000000000000000000000002000100140000000000000700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) 720.104967ms ago: executing program 3 (id=3083): socket$inet6(0xa, 0x1, 0x100) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r4, 0x7) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r5, 0x100) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 628.316202ms ago: executing program 1 (id=3084): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'pim6reg', 0x32, 0x30}, 0xa) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) write$cgroup_netprio_ifpriomap(r0, &(0x7f00000000c0)={'team0', 0x32, 0x35}, 0x8) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x1, 0x3}, 0x10) (async) sendmsg$tipc(r1, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) 581.465039ms ago: executing program 5 (id=3085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_getroute={0x1c, 0x1a, 0x800, 0x70bd25, 0x25dfdbff, {0x2, 0x14, 0x14, 0x1, 0xfd, 0x1, 0x0, 0x4, 0x200}, ["", "", ""]}, 0x1c}, 0x1, 0xba01}, 0x0) 571.703885ms ago: executing program 3 (id=3086): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32=r2, @ANYBLOB="200001000f00e78e782c9f098df131e0b4cd", @ANYRES32=r2, @ANYBLOB="00030000fe8000000000000000000000000000bb86dd0000"], 0x38}}, 0x48801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x10001, r6}}], 0x20, 0x2400e044}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x5}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r8, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000040) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r7) sendmsg$NFC_CMD_GET_SE(r7, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}}, 0x1c}}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r7) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="030f000000000000000008000000150001000000005d"], 0x2c}}, 0x0) 486.905088ms ago: executing program 5 (id=3087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9effffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x20}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0xffff}, &(0x7f0000000140)=0x8) 365.387992ms ago: executing program 5 (id=3088): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x7, 0xb3, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 364.015976ms ago: executing program 1 (id=3089): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448df, &(0x7f0000000240)="810fe052") sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) close(r7) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000002b000701feffffff00000000037c00000c0001800100000001000000100002800c0001"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r13 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$alg(r13, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x40010}, 0x14000012) (async) recvmmsg(r13, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}, 0x8}], 0x1, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRESHEX=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000709b06001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r14, @ANYBLOB="63db80e391a6958ff8d7f6cf3b14b9e5774b270022edc3038e03bc3388cf0000000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 295.389124ms ago: executing program 4 (id=3090): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000010400000000000000000018190000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000dba900000000000035090100000000009500000000000000b702000000000000739af8ff00000000c4090000010000007baaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff270600000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x2, 0xb, 0xa2, @loopback, @local, 0x20, 0x80, 0x9, 0x97d3}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r5, 0x800, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'batadv_slave_1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002140)={r1, 0x58, &(0x7f00000020c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002140)={r1, 0x58, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002200)={'syztnl0\x00', &(0x7f0000002180)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x0, 0xd1, {{0xe, 0x4, 0x1, 0xf, 0x38, 0x65, 0x0, 0x8, 0x4, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x13, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @local]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0xb, 0x2, [{0x5, 0x5, "e7db57"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002200)={'syztnl0\x00', &(0x7f0000002180)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x0, 0xd1, {{0xe, 0x4, 0x1, 0xf, 0x38, 0x65, 0x0, 0x8, 0x4, 0x0, @empty, @loopback, {[@ssrr={0x89, 0x13, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x32}, @local]}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0xb, 0x2, [{0x5, 0x5, "e7db57"}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002400)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000002400)={'batadv0\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002580)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="911e03398bec45e0451c7272e1de7951803397bcc434275ffc4740cc49ffaf5e50c795b5435ddbbeee340fe072229b10798b321e0acc95a886e49952915697368f2eeda0c31ccd9c90f81087a729a21e6c977e93dbd2d6f964cc7b05a58d9d5a48eaf7057413149789ab867a7f3435fc1f2270c4a87bc58b37b0b5ccf697", 0x7e}, {&(0x7f00000002c0)="51a3e5511dcbaac3dfad57e78c4d6d58230b5c2966a93d8bf15cb42a7838e778d488e94d7458837fa991852031ee1915bb13c3fdf2525de4f76690c35596ea177accd64bd2282e14b676c042af90a79ca12fc71150d3eda284aabc0fe3be288e091eb6cc4e539127b32d8a16b7c2b5afe718a0667b86def2696b45c8df9ef63deeeb2faee38dd34f06f169a0f3bc514ccb85430a53f198fef74d47ea74b01db54717b09aaf65787829cc699614b15575fdce25b28491f5d98a24b3cc5e2fdbabbffa0baaffbbdf8f42d66745c5c6b049e08a5942a706c47c77ed", 0xda}, {&(0x7f00000003c0)="7dfa7b5a5e18b4cfec01bd2192835f90ab3348fddac37bf43b85b10fbd14436b4371e5b14673ec6a064f1ee5cbcc43e9c6fe81a8d8125b7b2d2f3b18102fa1c969b543d7883a8b394cf8de5bef3bff8de663271f5e5af1c586592ae063b9f82e91fefadc9ae0909c77891370f6d433b4251a3feea791269ba4c8604ca1af8ca53578ea042baced68974f29e4c44cfdedb74b6dd145cd4a96dadffaac3700209fd57237985f16c2f937a3d32717bf646a8e77bcd3ec90268a822b9f29a60ee025", 0xc0}, {&(0x7f0000000480)="5c1e645340d13eb522d395e590878f17c5d93182ccf5a82ccd1342cf4fafe935b30c9d982b93b32b4649933f6950e147cd4e33866ebcd40773b544f21f4357cf4d1a154688874be1eee9cf1d7711fd2e1216224cdc2ee948fdeddb820eeefbfbdeb21e2057b229b9c0ef3037de7cbdfc18cf504082128d34b8385d22", 0x7c}], 0x4}}, {{&(0x7f0000000500)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000540)="6a630d6133b1c4596195c99de72e4d1e24d36d065c0f04b05be2ee2d2bb1206aa1425c5628ae3ac83ced6ce14cff6ce2d3f9aef24667a80da3893bda128d9cf661541296a623408698efc435d5301ff6bb9342a31a59898b3258320eb8eb2d4b5b5c0915571c9a3ab8da14fb54a6f288a937624eb897e115eae8be71cd581cab232fb4272e74c25fdee278a4b91698367ca57fd65d1c5b595729f992045ed04d5473181f09861c978c1173de608dcf32fcfc1713420bdbf8dc5538af718f22549025", 0xc2}, {&(0x7f0000000640)="86422e35d444ce94c74445c3b0d1b254a613156783f0346464f9ca0364a2b24c", 0x20}, {&(0x7f0000000680)="73bc8e66ba287cf7237a4ffc61a2cf0a207d22e88c6935b7c98b4334ed9435158a9d78d63e6230abdb1e32fa63f0d256dcc02574d1302c28e1a0c7a88b0d1ec2c49f4e319e106266dd8ead63a54793059580d732e0cea745f42f74db21817fb93c4552a48f55642431ec8e5f8e847e30c1987dab99fc4f7d50ac58c8fc443aec452a87c30cb3c8c82cebf9809e6a8c910fec8e391693949a19cfd3071718e383c4778df3e9b85d475810984c77585887abdbd030ef26e7dd04c73c5ab658c9935a78c9cf053cf62f64166d50c2ddae3356f17c02561c60bcc322869a3ee2", 0xde}, {&(0x7f0000000780)="bd7bf42aedec41", 0x7}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f00000009c0)="a291c10a68d3ef086fe202fe1c72acb1d4423b3fb6cb95babbff49d31fb4f35fc6b515fd5d558833df3ee01902111c8d200a2e058b80070cd72607ed229d051a263240aaaa53975d4f4980ee659524e71ba218bff77e0c14a980187a01bba5e2d0d337e64b7dd6f5a032d16cd2e5457a9a8bb1031f9a1d61f18adf8ab605d675811c99728cbb2056e99e5d898b4a25755c6612bf844631a6fcb87ebcc03dfc0d1788534e54dcf8cdd3ca07a9d0a8b5767a43ff579b72343b9b6cece1aa1168242c55736d2e1caadbb58d091d143ec3d4", 0xd0}, {&(0x7f0000000ac0)="90bbd9426fea57aa5a0dc67852946dce1a430454cee0535357ba777f72f4845bd9427c4eea6ae3a40eb77a5f7530d642d98802f18e4b8237828d119213deda2faced88813c4f13563e7ac208611a8f3521c2d292d2ceb77476c6646a3b9d222786a129d66bad12018aca70abf4e77089d05a04e2053d59d34a1efc46caafe03d4ee5686e713b752e318b98767da364970e4e660464d1ad8943f6990b3d9cb0e65d9bf0d48a3f6f853e89bb4198918f62efa5e9d2", 0xb4}, {&(0x7f0000000b80)="e2e455a39466e1dc15010ad38933affd295d708afa98166c4d86504da2cf537afa75110c22c1f7ac3b4e2c8da93f9dcbec2a113c1d9d24f817933c19be783669da506a98b12fe430521991935fe656287668e02f8165cb61346686643c28100d15ae3682ae94e386ae64da350960bb647d9454a0f123407eadb6e676976f28591f2fe35c7164", 0x86}], 0x8, &(0x7f0000001e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @remote}}}], 0x60}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000001f00)="5ae25344aaa0bcd6c74456007fea773ff1ef90ca91b2e8381486b5d4e6ca6ca7416c3988cedd97a81e20b531aaa9ab944a6aab9460f4de5e657cd355189dcf3b073beb0f81296e7d665243ab670f1a83ac4ad93090fa9394ef038245bba021390e55fb39457d84597614a61843ddd50b319bff31379513254e3705ed99b8", 0x7e}, {&(0x7f0000001f80)="ccd9f7fa10ccb6eee699f6dfdd46c66e5a9437cd72e76f1d77ba7f4fb420b8828b64c6e9b2431d97d6f2d4c9e2300df9efd2680ee0116caada2d13a2ee9cb7e1846acdd0188971c2a8b4734462be38b0b79de0ec87a76b1520c38aa00c69defb485144aba34b9a8f7fd79c1e972abd498cf3eabcc5d5ad2c4f3a72f307cfaf6de9ca55e44781c185bf6ad06a3ce4f1e547", 0x91}, {&(0x7f0000002040)="d67c40c4343b9ff03d3ecbbe66e45e92a62c784b22db6c574e1f5b760342c01a87178de61f6d8f48cf98b45a1d05179a50f3f208e8289c00927a04463d94ba1c60f21b601ec8076fe2013b54e9a118df0d92046872f3ae6df535f26bf1812cadd7aa", 0x62}], 0x3, &(0x7f0000002240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @multicast2, @private=0xa010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @private=0xa010101}}}], 0x58}}, {{&(0x7f00000022c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000023c0)=[{&(0x7f0000002300)="5f0e288a7b17b568c5809904b7daa6029f345d7869f1aa504cc0ac2a3f8911d5e799823f5ad837b95fb61e48f2e622f22be4b332cac846a78a1e47da78d99d775fa57a5009447fc83f5af03168a77cf11f959a92904c", 0x56}, {&(0x7f0000002380)}], 0x2, &(0x7f0000002440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010102, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x12000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6a}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0xaf, 0x0, 0x7, [0x3, 0x80000000]}, @generic={0x7, 0x8, "f1157aba9783"}, @noop]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @rr={0x7, 0x7, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0xa4, [@remote]}, @noop, @end, @timestamp_prespec={0x44, 0x1c, 0x72, 0x3, 0x8, [{@empty, 0x1}, {@multicast2, 0xbc49}, {@local, 0x4}]}, @end, @generic={0x94, 0x5, "4b0671"}, @noop, @ssrr={0x89, 0x7, 0x71, [@local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}], 0x110}}], 0x4, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 160.574413ms ago: executing program 1 (id=3091): syz_emit_ethernet(0x7e, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0x12, "00000000000000963d096612e35232da"}, {0x0, 0x4, "4eb8"}, {0x0, 0x2}]}, @ssrr={0x89, 0x3}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x8038}], 0x1, &(0x7f00000003c0), 0x0, 0x0) (async) ppoll(&(0x7f00000001c0)=[{r2, 0x8038}], 0x1, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) (async) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x3, 0x3, 0x7, 0x4, 0x3, 0x8}, @mpls={[{0x5, 0x0, 0x1}], @llc={@llc={0x141, 0xdc, "cd", "f0167f50dd7bbb2fa5f45a8355853f5fe5974d73e931d5c25d191c89a6eab80ca2b8df627a4f7bf12b0edf3bccd4dbda2db063de0e8a269c9a9a504d2483200e1998d0ab125debc5e87c7af99a5422d00285ccd79dd49b988e94bba8b6eab221cf03154c0bc550d43b15e138b952ddc89d7a73160bdb507bf7d50bc169"}}}}, 0x8e) (async) write$tun(r0, &(0x7f00000001c0)={@void, @val={0x3, 0x3, 0x7, 0x4, 0x3, 0x8}, @mpls={[{0x5, 0x0, 0x1}], @llc={@llc={0x141, 0xdc, "cd", "f0167f50dd7bbb2fa5f45a8355853f5fe5974d73e931d5c25d191c89a6eab80ca2b8df627a4f7bf12b0edf3bccd4dbda2db063de0e8a269c9a9a504d2483200e1998d0ab125debc5e87c7af99a5422d00285ccd79dd49b988e94bba8b6eab221cf03154c0bc550d43b15e138b952ddc89d7a73160bdb507bf7d50bc169"}}}}, 0x8e) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=0x0], 0x54}}, 0x0) 61.593748ms ago: executing program 5 (id=3092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7fff}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 5 (id=3093): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', @broadcast}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): bute type 7 has an invalid length. [ 169.731179][T10722] openvswitch: netlink: IP tunnel dst address not specified [ 170.276338][T10749] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.319915][T10753] gretap0: entered promiscuous mode [ 170.356966][T10753] 0{X: renamed from gretap0 [ 170.407449][T10753] 0{X: left promiscuous mode [ 170.429109][T10753] 0{X: entered allmulticast mode [ 170.462857][T10753] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 170.867379][T10781] nbd: must specify at least one socket [ 170.934551][T10794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.078998][T10802] bridge_slave_0: entered promiscuous mode [ 171.536342][T10829] netlink: 'syz.2.1392': attribute type 10 has an invalid length. [ 171.569485][T10829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.598305][T10829] batadv0: entered allmulticast mode [ 171.613428][T10829] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 171.661334][T10834] syzkaller0: mtu greater than device maximum [ 171.771700][T10838] __nla_validate_parse: 75 callbacks suppressed [ 171.771718][T10838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1397'. [ 171.832899][T10848] netlink: 'syz.2.1399': attribute type 33 has an invalid length. [ 172.039177][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 172.067706][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1404'. [ 172.070725][T10861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1403'. [ 172.246324][T10870] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1405'. [ 172.292211][T10870] NCSI netlink: No device for ifindex 0 [ 172.338720][T10877] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1405'. [ 172.378921][T10877] NCSI netlink: No device for ifindex 0 [ 172.751402][T10892] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1412'. [ 172.774907][T10892] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1412'. [ 173.768019][T10959] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1431'. [ 173.818544][T10956] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1430'. [ 173.989093][T10974] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 174.347272][T10991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.261659][ T5861] Bluetooth: hci4: link tx timeout [ 175.268086][ T5861] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 175.480748][T11083] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 175.490789][T11083] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 175.678681][T11088] netlink: 'syz.2.1469': attribute type 5 has an invalid length. [ 175.931277][T11106] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.984513][T11112] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.000476][T11116] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.017056][T11119] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.026671][T11116] team0: Cannot enslave team device to itself [ 176.542298][T11152] tipc: Enabling of bearer rejected, failed to enable media [ 176.558344][T11152] tipc: Enabling of bearer rejected, failed to enable media [ 176.627073][T11150] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 176.635551][T11150] wlan1: mtu less than device minimum [ 176.640956][T11150] `: (slave wlan1): Error -22 calling dev_set_mtu [ 176.690785][T11160] netlink: 'syz.2.1490': attribute type 1 has an invalid length. [ 176.793866][T11160] bond5: entered promiscuous mode [ 176.799351][T11160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.878389][T11160] 8021q: adding VLAN 0 to HW filter on device bond5 [ 176.886173][T11160] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 176.897277][T11160] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 176.919397][T11160] bond5: (slave wireguard0): making interface the new active one [ 176.929016][T11160] wireguard0: entered promiscuous mode [ 176.938455][T11160] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 176.959579][T11177] __nla_validate_parse: 13 callbacks suppressed [ 176.959597][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'. [ 177.153472][T11184] netlink: 'syz.0.1497': attribute type 1 has an invalid length. [ 177.323285][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 177.405079][T11201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.464915][T11203] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1505'. [ 177.838097][T11230] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.196440][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 178.608487][T11274] tipc: Enabling of bearer rejected, already enabled [ 178.924677][T11292] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 179.284129][T11315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1533'. [ 180.306854][T11371] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 181.091732][T11416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1558'. [ 181.203130][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 181.283651][T11423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1560'. [ 181.306659][T11430] openvswitch: netlink: Unknown key attributes 2 [ 181.343645][T11430] openvswitch: netlink: Unknown key attributes 2 [ 181.350380][T11430] openvswitch: netlink: Unknown key attributes 2 [ 181.509721][T11445] netlink: 'syz.1.1566': attribute type 1 has an invalid length. [ 181.722237][T11454] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 181.936673][T11475] xt_limit: Overflow, try lower: 271964/0 [ 182.010509][T11480] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1573'. [ 182.038695][T11471] macsec0: entered promiscuous mode [ 182.047468][T11471] macsec0: entered allmulticast mode [ 182.088147][T11471] veth1_macvtap: entered allmulticast mode [ 182.127992][T11471] macsec0: left promiscuous mode [ 182.170808][T11471] macsec0: left allmulticast mode [ 182.194644][T11471] veth1_macvtap: left allmulticast mode [ 182.537714][T11505] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1580'. [ 182.548376][T11505] syzkaller1: entered promiscuous mode [ 182.553931][T11505] syzkaller1: entered allmulticast mode [ 182.689080][T11511] netlink: 'syz.2.1582': attribute type 7 has an invalid length. [ 182.991668][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1584'. [ 183.083009][ T5861] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 183.351746][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1590'. [ 183.442430][T11551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1592'. [ 183.442430][T11553] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1592'. [ 183.492001][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1591'. [ 183.507553][T11554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 183.537772][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 183.682280][T11554] netlink: 'syz.0.1591': attribute type 23 has an invalid length. [ 183.822301][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1596'. [ 183.870542][T11569] gtp0: entered promiscuous mode [ 183.889234][T11569] gtp0: entered allmulticast mode [ 184.393079][T11596] IPVS: length: 8 != 1152 [ 184.822540][T11617] tipc: Failed to remove unknown binding: 66,1,1/0:1486151866/1486151868 [ 184.836241][T11617] tipc: Failed to remove unknown binding: 66,1,1/0:1486151866/1486151868 [ 184.858128][T11617] tipc: Failed to remove unknown binding: 66,1,1/0:1486151866/1486151868 [ 184.869989][T11615] netlink: 'syz.4.1608': attribute type 13 has an invalid length. [ 185.566163][T11663] 8021q: adding VLAN 0 to HW filter on device bond3 [ 186.430393][T11711] tipc: Enabled bearer , priority 0 [ 186.982989][T11741] netlink: 'syz.1.1643': attribute type 1 has an invalid length. [ 187.034782][T11741] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 187.061595][T11695] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 187.198435][T11703] tipc: Disabling bearer [ 187.389515][T11762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.424965][T11762] __nla_validate_parse: 10 callbacks suppressed [ 187.424984][T11762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1647'. [ 187.571767][T11771] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1651'. [ 188.104969][T11797] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 188.254623][T11816] netlink: 'syz.0.1662': attribute type 6 has an invalid length. [ 188.459324][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 188.504104][T11825] netlink: 'syz.4.1666': attribute type 1 has an invalid length. [ 188.519903][T11822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1665'. [ 188.529641][T11825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1666'. [ 188.697508][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 188.807994][T11838] gretap0: entered promiscuous mode [ 188.822542][T11838] gretap0: entered allmulticast mode [ 189.089279][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 189.099338][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'. [ 189.115084][T11856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1676'. [ 189.129111][T11856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1676'. [ 189.471559][T11889] netlink: 'syz.3.1687': attribute type 1 has an invalid length. [ 190.772240][T11945] Unsupported ieee802154 address type: 0 [ 191.087643][T11967] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 191.151484][T11974] openvswitch: netlink: Missing key (keys=40, expected=100) [ 191.151583][T11967] ip6erspan0: entered promiscuous mode [ 191.251791][T11978] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 191.412280][T11986] Bluetooth: MGMT ver 1.23 [ 191.712493][T12005] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 191.818077][T12005] tipc: Enabling of bearer rejected, failed to enable media [ 192.439726][T12053] __nla_validate_parse: 11 callbacks suppressed [ 192.439745][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1733'. [ 192.547662][T12060] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 192.562311][T12060] netlink: 'syz.2.1735': attribute type 2 has an invalid length. [ 192.625205][T12071] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 192.640774][T12071] netlink: 'syz.2.1735': attribute type 2 has an invalid length. [ 192.897064][T12086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1743'. [ 192.985371][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1745'. [ 193.013396][T12094] openvswitch: netlink: Key 4 has unexpected len 4536 expected 12 [ 193.099946][T12104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1746'. [ 193.291150][T12110] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.309481][T12110] team0: Port device bond3 added [ 193.556198][T12131] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1754'. [ 193.593674][T12131] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 193.630788][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1758'. [ 193.640036][T12138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 193.663115][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1758'. [ 193.885639][T12156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 194.031604][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1765'. [ 194.143600][T12167] xt_socket: unknown flags 0xd0 [ 194.333383][T12174] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 194.348558][T12174] netlink: 'syz.3.1771': attribute type 2 has an invalid length. [ 194.495180][T12176] lo speed is unknown, defaulting to 1000 [ 194.733833][T12198] bond0: entered promiscuous mode [ 194.751255][T12198] bridge0: entered promiscuous mode [ 194.785368][T12198] bond0: left promiscuous mode [ 194.793838][T12198] bridge0: left promiscuous mode [ 194.826169][T12207] openvswitch: netlink: IPv4 tun info is not correct [ 195.148602][T12214] tipc: Enabling of bearer rejected, failed to enable media [ 195.218338][T12225] tipc: Enabled bearer , priority 0 [ 195.242977][T12225] syzkaller0: entered promiscuous mode [ 195.265131][T12225] syzkaller0: entered allmulticast mode [ 195.352751][T12225] tipc: Resetting bearer [ 195.561559][T12246] netlink: 'syz.2.1785': attribute type 32 has an invalid length. [ 195.671174][T12223] tipc: Resetting bearer [ 195.727585][T12223] tipc: Disabling bearer [ 195.844100][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.870856][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.899300][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 195.929537][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.103082][T12271] netlink: 'syz.3.1795': attribute type 16 has an invalid length. [ 196.127126][T12271] netlink: 'syz.3.1795': attribute type 3 has an invalid length. [ 196.442715][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 196.443908][ T5868] Bluetooth: hci2: command 0x0406 tx timeout [ 196.448912][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 196.596725][T12300] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 196.629277][T12300] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.637482][T12300] team0: entered allmulticast mode [ 196.644257][T12300] team_slave_0: entered allmulticast mode [ 196.650166][T12300] team_slave_1: entered allmulticast mode [ 196.656978][T12300] bond0: (slave team0): Enslaving as an active interface with an up link [ 197.219486][T12332] vlan2: entered allmulticast mode [ 197.256801][T12332] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 197.544513][T12350] __nla_validate_parse: 14 callbacks suppressed [ 197.544532][T12350] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1814'. [ 197.606564][T12358] netlink: 61 bytes leftover after parsing attributes in process `syz.4.1818'. [ 197.782735][T12370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1823'. [ 197.816649][T12371] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1823'. [ 197.840762][T12373] openvswitch: netlink: Missing key (keys=40, expected=100) [ 198.273420][T12409] netlink: 'syz.2.1833': attribute type 4 has an invalid length. [ 198.357757][T12413] netlink: 'syz.0.1834': attribute type 24 has an invalid length. [ 198.588745][T12427] sch_tbf: burst 0 is lower than device lo mtu (230) ! [ 198.701215][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 198.710660][T12438] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 198.830727][T12440] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1841'. [ 199.474533][T12477] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1851'. [ 199.634749][T12483] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 199.832886][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1855'. [ 199.846561][T12497] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1855'. [ 200.032531][T12509] netlink: 'syz.3.1858': attribute type 6 has an invalid length. [ 200.231555][T12518] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1862'. [ 200.306983][T12522] syz.0.1864: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.367455][T12522] CPU: 0 UID: 0 PID: 12522 Comm: syz.0.1864 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 200.367484][T12522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.367502][T12522] Call Trace: [ 200.367511][T12522] [ 200.367520][T12522] dump_stack_lvl+0x189/0x250 [ 200.367550][T12522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.367571][T12522] ? __pfx__printk+0x10/0x10 [ 200.367597][T12522] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.367618][T12522] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 200.367640][T12522] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 200.367664][T12522] warn_alloc+0x214/0x310 [ 200.367691][T12522] ? stack_depot_save_flags+0x40/0x860 [ 200.367716][T12522] ? __pfx_warn_alloc+0x10/0x10 [ 200.367751][T12522] ? kasan_save_track+0x4f/0x80 [ 200.367773][T12522] ? xskq_create+0x56/0x170 [ 200.367793][T12522] ? xsk_init_queue+0xb0/0x110 [ 200.367812][T12522] ? xsk_setsockopt+0x4dc/0x8d0 [ 200.367829][T12522] ? do_sock_setsockopt+0x179/0x1b0 [ 200.367853][T12522] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 200.367867][T12522] ? do_syscall_64+0xfa/0x3b0 [ 200.367886][T12522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.367908][T12522] __vmalloc_node_range_noprof+0x125/0x12f0 [ 200.367956][T12522] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.367978][T12522] ? xskq_create+0x56/0x170 [ 200.367999][T12522] ? __kasan_kmalloc+0x93/0xb0 [ 200.368024][T12522] vmalloc_user_noprof+0xad/0xf0 [ 200.368044][T12522] ? xskq_create+0xbf/0x170 [ 200.368063][T12522] xskq_create+0xbf/0x170 [ 200.368086][T12522] xsk_init_queue+0xb0/0x110 [ 200.368109][T12522] xsk_setsockopt+0x4dc/0x8d0 [ 200.368132][T12522] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.368153][T12522] ? __pfx_aa_sk_perm+0x10/0x10 [ 200.368180][T12522] ? aa_sock_opt_perm+0xff/0x1b0 [ 200.368199][T12522] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 200.368217][T12522] ? __pfx_xsk_setsockopt+0x10/0x10 [ 200.368237][T12522] do_sock_setsockopt+0x179/0x1b0 [ 200.368263][T12522] __x64_sys_setsockopt+0x13f/0x1b0 [ 200.368282][T12522] do_syscall_64+0xfa/0x3b0 [ 200.368301][T12522] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.368318][T12522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.368335][T12522] ? clear_bhb_loop+0x60/0xb0 [ 200.368354][T12522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.368370][T12522] RIP: 0033:0x7f124b58ebe9 [ 200.368386][T12522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.368399][T12522] RSP: 002b:00007f124c4ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.368418][T12522] RAX: ffffffffffffffda RBX: 00007f124b7b5fa0 RCX: 00007f124b58ebe9 [ 200.368431][T12522] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 200.368442][T12522] RBP: 00007f124b611e19 R08: 0000000000000004 R09: 0000000000000000 [ 200.368451][T12522] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.368461][T12522] R13: 00007f124b7b6038 R14: 00007f124b7b5fa0 R15: 00007ffc767a15e8 [ 200.368490][T12522] [ 200.368506][T12522] Mem-Info: [ 200.711177][T12522] active_anon:6222 inactive_anon:0 isolated_anon:0 [ 200.711177][T12522] active_file:2892 inactive_file:39874 isolated_file:0 [ 200.711177][T12522] unevictable:768 dirty:69 writeback:0 [ 200.711177][T12522] slab_reclaimable:11734 slab_unreclaimable:103400 [ 200.711177][T12522] mapped:32466 shmem:1377 pagetables:1347 [ 200.711177][T12522] sec_pagetables:0 bounce:0 [ 200.711177][T12522] kernel_misc_reclaimable:0 [ 200.711177][T12522] free:1320058 free_pcp:14823 free_cma:0 [ 200.819858][T12522] Node 0 active_anon:25188kB inactive_anon:0kB active_file:11568kB inactive_file:159292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129964kB dirty:272kB writeback:0kB shmem:3972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13584kB pagetables:5040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.852195][T12522] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 200.890595][T12522] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.959079][T12550] 8021q: VLANs not supported on wg1 [ 201.016996][T12522] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 201.043703][T12522] Node 0 DMA32 free:1371460kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25180kB inactive_anon:0kB active_file:11568kB inactive_file:157740kB unevictable:1536kB writepending:272kB present:3129332kB managed:2557480kB mlocked:0kB bounce:0kB free_pcp:42252kB local_pcp:21128kB free_cma:0kB [ 201.088573][T12522] lowmem_reserve[]: 0 0 1 1 1 [ 201.093492][T12522] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 201.179978][T12522] lowmem_reserve[]: 0 0 0 0 0 [ 201.213707][T12522] Node 1 Normal free:3893416kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16608kB local_pcp:8704kB free_cma:0kB [ 201.286466][T12522] lowmem_reserve[]: 0 0 0 0 0 [ 201.291332][T12522] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 201.331494][T12522] Node 0 DMA32: 1110*4kB (UME) 459*8kB (UME) 142*16kB (UME) 379*32kB (UME) 135*64kB (UM) 97*128kB (UM) 60*256kB (UM) 18*512kB (UME) 8*1024kB (UM) 1*2048kB (M) 316*4096kB (UM) = 1372720kB [ 201.415807][T12522] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 201.461776][T12522] Node 1 Normal: 208*4kB (UME) 47*8kB (UME) 47*16kB (UME) 90*32kB (UME) 33*64kB (UME) 11*128kB (UME) 6*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3893416kB [ 201.548980][T12522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.597927][T12522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.613568][T12522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 201.628922][T12522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 201.670179][T12585] ipvlan3: entered promiscuous mode [ 201.678537][T12522] 44141 total pagecache pages [ 201.719077][T12522] 0 pages in swap cache [ 201.729177][T12522] Free swap = 124996kB [ 201.748282][T12522] Total swap = 124996kB [ 201.767234][T12522] 2097051 pages RAM [ 201.778907][T12522] 0 pages HighMem/MovableOnly [ 201.791581][T12522] 425655 pages reserved [ 201.805737][T12522] 0 pages cma reserved [ 202.297907][T12616] netlink: 'syz.1.1887': attribute type 2 has an invalid length. [ 202.690340][T12643] netlink: 'syz.1.1893': attribute type 10 has an invalid length. [ 202.990321][T12662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.003252][T12663] __nla_validate_parse: 7 callbacks suppressed [ 203.003270][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 203.040213][T12663] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 203.070292][T12663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.527801][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 203.568655][T12687] veth0: entered promiscuous mode [ 203.585272][T12684] veth0: left promiscuous mode [ 203.815243][T12708] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1909'. [ 203.827280][T12708] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 203.880098][T12709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1907'. [ 203.892951][T12705] block nbd1: server does not support multiple connections per device. [ 203.903582][T12705] block nbd1: shutting down sockets [ 203.913409][T12713] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 203.948987][T12713] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1911'. [ 203.959706][T12713] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1911'. [ 204.130523][T12722] pim6reg1: entered promiscuous mode [ 204.152678][T12722] pim6reg1: entered allmulticast mode [ 204.225714][T12729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'. [ 204.244912][T12733] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 204.254111][T12733] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1920'. [ 204.277732][T12733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1920'. [ 204.289875][T12734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1919'. [ 204.566555][T12748] tipc: Enabled bearer , priority 0 [ 204.574422][T12748] syzkaller0: entered promiscuous mode [ 204.579912][T12748] syzkaller0: entered allmulticast mode [ 204.640652][T12748] tipc: Resetting bearer [ 204.665620][T12745] tipc: Resetting bearer [ 204.710593][T12745] tipc: Disabling bearer [ 204.963714][T12771] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 205.159485][T12787] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 205.342936][T12795] netlink: 'syz.0.1940': attribute type 11 has an invalid length. [ 205.390225][T12798] : renamed from hsr0 [ 205.491451][T12800] pim6reg1: entered promiscuous mode [ 205.515041][T12800] pim6reg1: entered allmulticast mode [ 205.665796][T12806] xt_policy: too many policy elements [ 205.900190][T12818] netlink: 'syz.4.1949': attribute type 1 has an invalid length. [ 206.093511][T12836] : renamed from hsr0 (while UP) [ 206.684579][T12856] gtp1: entered promiscuous mode [ 206.689580][T12856] gtp1: entered allmulticast mode [ 206.973303][T12878] lo speed is unknown, defaulting to 1000 [ 208.041430][T12951] __nla_validate_parse: 18 callbacks suppressed [ 208.041447][T12951] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1992'. [ 208.105602][T12956] sctp: [Deprecated]: syz.0.1993 (pid 12956) Use of struct sctp_assoc_value in delayed_ack socket option. [ 208.105602][T12956] Use struct sctp_sack_info instead [ 208.417164][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1999'. [ 208.437042][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1999'. [ 208.476483][T12973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 208.517895][T12976] netlink: 'syz.0.1999': attribute type 1 has an invalid length. [ 208.541015][T12976] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1999'. [ 208.577447][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1999'. [ 208.661667][T12988] netlink: 191164 bytes leftover after parsing attributes in process `syz.3.2004'. [ 208.683585][T12988] netlink: 'syz.3.2004': attribute type 1 has an invalid length. [ 208.701191][T12988] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2004'. [ 208.756715][T12992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2006'. [ 209.442060][T13030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 209.561131][T13037] syz_tun: entered allmulticast mode [ 209.593416][T13035] syz_tun: left allmulticast mode [ 209.845066][T13050] ipvlan4: entered promiscuous mode [ 210.063384][T13066] lo speed is unknown, defaulting to 1000 [ 210.258689][T13075] netlink: 'syz.0.2033': attribute type 21 has an invalid length. [ 210.269353][T13076] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 210.283575][T13079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.493740][T13086] bridge_slave_0: default FDB implementation only supports local addresses [ 210.803589][T13101] syzkaller0: entered promiscuous mode [ 210.809387][T13101] syzkaller0: entered allmulticast mode [ 212.805410][T13171] netlink: 'syz.0.2062': attribute type 33 has an invalid length. [ 212.860723][T13163] bridge_slave_0: left allmulticast mode [ 212.892341][T13163] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.285759][T13202] __nla_validate_parse: 16 callbacks suppressed [ 213.285778][T13202] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2070'. [ 213.342243][T13204] netlink: 'syz.2.2072': attribute type 58 has an invalid length. [ 213.350221][T13204] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2072'. [ 213.395091][T13211] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2072'. [ 213.405844][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2074'. [ 213.502186][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2075'. [ 213.596743][T13220] netlink: 'syz.4.2078': attribute type 21 has an invalid length. [ 213.605058][T13220] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2078'. [ 213.619116][T13220] netlink: 'syz.4.2078': attribute type 4 has an invalid length. [ 213.626922][T13220] netlink: 'syz.4.2078': attribute type 5 has an invalid length. [ 213.639160][T13220] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2078'. [ 213.650607][T13223] netlink: 'syz.4.2078': attribute type 21 has an invalid length. [ 213.653833][T13222] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2079'. [ 213.659145][T13223] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2078'. [ 213.680940][T13222] gretap0: left allmulticast mode [ 213.689256][T13223] netlink: 'syz.4.2078': attribute type 4 has an invalid length. [ 213.691959][T13222] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2079'. [ 213.699335][T13223] netlink: 'syz.4.2078': attribute type 5 has an invalid length. [ 213.714760][T13222] 0{X: renamed from gretap0 [ 213.724441][T13222] 0{X: left promiscuous mode [ 213.729522][T13222] 0{X: entered allmulticast mode [ 213.740107][T13222] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 214.484428][T13272] netem: invalid attributes len -24 [ 214.490223][T13272] netem: change failed [ 214.530102][T13276] netem: invalid attributes len -24 [ 214.540380][T13276] netem: change failed [ 214.690018][T13282] bond4: (slave gretap0): making interface the new active one [ 214.698808][T13282] bond4: (slave gretap0): Enslaving as an active interface with an up link [ 215.355463][T13314] validate_nla: 2 callbacks suppressed [ 215.355481][T13314] netlink: 'syz.4.2106': attribute type 1 has an invalid length. [ 215.374485][T13314] netlink: 'syz.4.2106': attribute type 1 has an invalid length. [ 215.718658][T13327] tipc: Enabled bearer , priority 0 [ 215.908592][T13334] syzkaller1: entered promiscuous mode [ 215.918794][T13334] syzkaller1: entered allmulticast mode [ 215.973513][T13325] tipc: Resetting bearer [ 216.139716][T13317] tipc: Resetting bearer [ 216.844082][ T981] tipc: Node number set to 843832742 [ 217.564095][T13317] tipc: Disabling bearer [ 218.204719][T13409] vlan3: entered promiscuous mode [ 218.220052][T13409] gretap0: entered promiscuous mode [ 218.428568][T13422] __nla_validate_parse: 15 callbacks suppressed [ 218.428588][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2138'. [ 218.443388][T13423] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2139'. [ 218.598675][T13427] tipc: Enabled bearer , priority 0 [ 218.609870][T13427] syzkaller0: entered promiscuous mode [ 218.610810][T13430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2142'. [ 218.618603][T13427] syzkaller0: entered allmulticast mode [ 218.692925][T13427] tipc: Resetting bearer [ 218.720931][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2142'. [ 218.745135][T13426] tipc: Resetting bearer [ 218.770922][T13426] tipc: Disabling bearer [ 218.883904][T13430] macvtap2: entered promiscuous mode [ 218.897210][T13430] macvtap2: entered allmulticast mode [ 218.928275][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2144'. [ 218.932742][T13444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2146'. [ 218.959135][T13446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2144'. [ 218.966008][T13444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2146'. [ 219.425467][T13475] netlink: 'syz.0.2156': attribute type 1 has an invalid length. [ 219.738773][T13501] netlink: 'syz.2.2161': attribute type 83 has an invalid length. [ 219.758442][T13499] bond0: Error: Cannot enslave bond to itself. [ 221.054663][T13547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.085567][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2179'. [ 221.157016][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2180'. [ 221.307771][T13562] delete_channel: no stack [ 221.489581][T13574] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20001 [ 222.086941][T13607] netlink: 'syz.0.2198': attribute type 7 has an invalid length. [ 222.135587][T13614] netlink: 'syz.2.2200': attribute type 1 has an invalid length. [ 222.247331][T13614] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.440098][T13614] bond6: (slave veth7): Enslaving as an active interface with a down link [ 222.485521][T13623] bond6: (slave veth0_to_bond): making interface the new active one [ 222.500645][T13623] veth0_to_bond: entered promiscuous mode [ 222.516705][T13623] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 222.579873][T13637] bond6: (slave veth9): Enslaving as an active interface with a down link [ 222.598218][T13642] tipc: Enabling of bearer rejected, already enabled [ 222.916140][T13666] netlink: zone id is out of range [ 222.922192][T13666] netlink: del zone limit has 4 unknown bytes [ 223.239564][T13685] tipc: Enabling of bearer rejected, already enabled [ 224.181786][ T981] IPVS: starting estimator thread 0... [ 224.258157][T13739] __nla_validate_parse: 4 callbacks suppressed [ 224.258174][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2238'. [ 224.286346][T13736] IPVS: using max 30 ests per chain, 72000 per kthread [ 224.314441][T13740] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 224.327567][T13739] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 224.439013][T13751] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2242'. [ 224.584694][T13756] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2244'. [ 224.609913][T13758] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2244'. [ 224.939703][T13771] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 225.096597][T13781] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2254'. [ 225.108882][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2253'. [ 225.460198][T13792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2257'. [ 225.503767][T13794] tipc: Enabled bearer , priority 0 [ 225.526946][T13794] syzkaller0: entered promiscuous mode [ 225.538885][T13794] syzkaller0: entered allmulticast mode [ 225.581426][T13798] netlink: 'syz.0.2260': attribute type 12 has an invalid length. [ 225.598631][T13794] tipc: Resetting bearer [ 225.620541][T13793] tipc: Resetting bearer [ 225.674437][T13793] tipc: Disabling bearer [ 225.696403][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 225.809080][T13805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2262'. [ 225.832492][T13806] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2262'. [ 225.984062][T13809] ip6erspan0: entered promiscuous mode [ 226.246903][T13821] netlink: 'syz.2.2266': attribute type 7 has an invalid length. [ 226.259024][T13821] netlink: 'syz.2.2266': attribute type 8 has an invalid length. [ 226.441281][T13829] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 226.846381][T13850] netlink: 'syz.0.2277': attribute type 3 has an invalid length. [ 226.911149][T13853] tipc: Enabling of bearer rejected, already enabled [ 226.982334][T13857] sock: sock_timestamping_bind_phc: sock not bind to device [ 227.027406][T13853] syzkaller0: mtu less than device minimum [ 227.508992][T13880] tipc: Enabling of bearer rejected, failed to enable media [ 227.550366][T13884] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 227.730757][T13895] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 227.985184][T13911] tipc: Enabled bearer , priority 10 [ 228.321773][T13929] 8021q: adding VLAN 0 to HW filter on device ` [ 228.330058][T13929] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.347800][T13929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.382731][T13933] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.438281][T13946] netlink: zone id is out of range [ 228.449857][T13946] netlink: zone id is out of range [ 228.460293][T13946] netlink: zone id is out of range [ 228.466102][T13946] netlink: zone id is out of range [ 228.471351][T13946] netlink: zone id is out of range [ 228.496766][T13946] netlink: zone id is out of range [ 228.898623][T13975] netlink: 'syz.3.2321': attribute type 178 has an invalid length. [ 228.932792][T13969] lo speed is unknown, defaulting to 1000 [ 229.512227][T14005] __nla_validate_parse: 20 callbacks suppressed [ 229.512246][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2330'. [ 229.542192][T14005] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2330'. [ 229.572539][T14015] netlink: 'syz.2.2332': attribute type 1 has an invalid length. [ 229.777278][T14015] 8021q: adding VLAN 0 to HW filter on device bond7 [ 229.930439][T14034] netlink: 'syz.4.2337': attribute type 13 has an invalid length. [ 229.947225][T14034] netlink: 'syz.4.2337': attribute type 58 has an invalid length. [ 229.961135][T14021] bond7: (slave veth11): Enslaving as an active interface with a down link [ 229.980568][T14034] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2337'. [ 229.991534][T14027] bond6: (slave veth0_to_bond): Releasing active interface [ 230.003958][T14027] veth0_to_bond: left promiscuous mode [ 230.018427][T14027] bond7: (slave veth0_to_bond): making interface the new active one [ 230.033920][T14027] veth0_to_bond: entered promiscuous mode [ 230.049157][T14027] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 230.088731][T14015] bond7: (slave veth13): Enslaving as an active interface with a down link [ 230.636707][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2351'. [ 230.708010][T14080] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2352'. [ 230.728354][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2352'. [ 230.779564][T14084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2354'. [ 230.909660][T14093] syzkaller1: entered promiscuous mode [ 230.916002][T14093] syzkaller1: entered allmulticast mode [ 230.995903][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2357'. [ 231.070752][T14099] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2358'. [ 231.508311][T14117] netlink: 208 bytes leftover after parsing attributes in process `syz.3.2365'. [ 231.568720][T14117] tipc: Enabled bearer , priority 0 [ 231.578774][T14117] syzkaller0: entered promiscuous mode [ 231.584985][T14117] syzkaller0: entered allmulticast mode [ 231.618178][T14117] tipc: Resetting bearer [ 231.668109][T14116] tipc: Resetting bearer [ 231.707666][T14129] unsupported nlmsg_type 40 [ 231.715416][T14116] tipc: Disabling bearer [ 231.876623][T14138] Bluetooth: MGMT ver 1.23 [ 232.331947][T14169] lo speed is unknown, defaulting to 1000 [ 232.369434][T14176] netlink: 'syz.4.2380': attribute type 6 has an invalid length. [ 232.879213][T14204] dummy0: entered promiscuous mode [ 232.906944][T14204] batadv_slave_1: entered promiscuous mode [ 233.089801][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 233.120626][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 233.153117][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 233.202142][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 233.204403][T14222] syz.1.2396 uses old SIOCAX25GETINFO [ 233.540230][T14243] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 233.581552][T14243] netlink: 'syz.0.2401': attribute type 2 has an invalid length. [ 234.801081][T14298] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 235.118550][T14325] netlink: 'syz.0.2418': attribute type 4 has an invalid length. [ 235.321580][T14335] __nla_validate_parse: 80 callbacks suppressed [ 235.321597][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 235.629591][T14341] tipc: Enabled bearer , priority 0 [ 235.638441][T14341] syzkaller0: entered promiscuous mode [ 235.661915][T14341] syzkaller0: entered allmulticast mode [ 235.683585][T14341] tipc: Resetting bearer [ 235.705449][T14339] tipc: Resetting bearer [ 235.752595][T14339] tipc: Disabling bearer [ 236.106170][T14373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2431'. [ 236.180821][T14373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2431'. [ 236.215482][T14379] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 236.225229][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2438'. [ 236.235580][T14379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2438'. [ 236.240215][T14381] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2437'. [ 236.258341][T14382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 236.427774][T14393] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2444'. [ 236.553634][ T1102] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.561672][ T1102] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.582574][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 236.621137][T14402] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2447'. [ 236.641086][T14401] netlink: 'syz.1.2446': attribute type 1 has an invalid length. [ 236.663001][T14401] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2446'. [ 236.721690][T14406] netlink: 'syz.0.2449': attribute type 15 has an invalid length. [ 236.730028][T14408] netlink: 'syz.0.2449': attribute type 15 has an invalid length. [ 236.916545][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.317087][T14437] netlink: 'syz.1.2462': attribute type 1 has an invalid length. [ 237.388414][T14439] pim6reg1: entered promiscuous mode [ 237.393899][T14439] pim6reg1: entered allmulticast mode [ 237.407168][ T5941] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 237.612936][T14440] IPVS: persistence engine module ip_vs_pe_ not found [ 238.046089][T14472] net_ratelimit: 221 callbacks suppressed [ 238.046107][T14472] openvswitch: netlink: Key type 85 is out of range max 32 [ 238.206747][T14488] netlink: 'syz.1.2478': attribute type 2 has an invalid length. [ 238.301640][T14491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.541170][T14507] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20002 [ 238.772536][T14517] tipc: Enabling of bearer rejected, already enabled [ 238.881544][T14523] openvswitch: netlink: Key type 13584 is out of range max 32 [ 239.111613][T14542] netlink: 'syz.3.2495': attribute type 1 has an invalid length. [ 239.300724][T14556] team0: Port device bond3 removed [ 239.339753][T14556] bond4: (slave gretap0): Releasing active interface [ 239.572466][T14570] nbd: couldn't find a device at index -373156329 [ 239.876472][T14595] erspan0: entered allmulticast mode [ 240.009919][T14604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.111293][T14606] netlink: 'syz.0.2514': attribute type 1 has an invalid length. [ 240.210066][T14606] 8021q: adding VLAN 0 to HW filter on device bond16 [ 240.232749][T14618] bond16: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 240.285369][T14614] bond16: (slave veth9): Enslaving as an active interface with a down link [ 240.391715][T14621] __nla_validate_parse: 22 callbacks suppressed [ 240.391732][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2520'. [ 240.601991][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.634417][T14641] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 241.015089][T14676] netlink: 'syz.1.2536': attribute type 1 has an invalid length. [ 241.038677][T14676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2536'. [ 241.157930][ T12] veth0_to_bond: left promiscuous mode [ 241.503747][T14709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2545'. [ 241.646571][T14714] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2547'. [ 249.402077][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.320298][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'. [ 266.340491][T14747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2554'. [ 266.558914][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2553'. [ 266.559261][T14746] 8021q: adding VLAN 0 to HW filter on device bond8 [ 266.659776][T14746] bond8: entered allmulticast mode [ 266.682040][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 266.695038][T14746] bond0: (slave bond8): Enslaving as an active interface with an up link [ 266.765830][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2557'. [ 266.775797][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2557'. [ 266.949116][T14772] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 267.049385][T14776] netlink: 'syz.3.2562': attribute type 5 has an invalid length. [ 267.547405][T14802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 267.724503][T14813] netlink: 'syz.0.2577': attribute type 3 has an invalid length. [ 267.765613][T14813] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2577'. [ 267.927192][T14829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2581'. [ 268.011725][T14833] netlink: 292 bytes leftover after parsing attributes in process `syz.2.2582'. [ 268.119227][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2583'. [ 268.171435][T14844] openvswitch: netlink: Message has 5 unknown bytes. [ 269.001079][T14899] batman_adv: batadv0: Adding interface: wlan1 [ 269.011257][T14903] openvswitch: netlink: Missing key (keys=40, expected=100) [ 269.032887][T14899] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 269.072188][T14899] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 269.353568][T14915] ip6gre2: entered allmulticast mode [ 269.427745][T14923] IPVS: ip_vs_add_dest(): server weight less than zero [ 269.538064][T14935] IPVS: set_ctl: invalid protocol: 11612 172.20.20.187:21 [ 269.724268][T14941] netlink: 'syz.4.2601': attribute type 4 has an invalid length. [ 269.974020][T14962] netlink: 'syz.2.2606': attribute type 2 has an invalid length. [ 270.011491][T14962] netlink: 'syz.2.2606': attribute type 2 has an invalid length. [ 270.141269][T14978] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 270.194374][T14977] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 270.392389][T14990] FAULT_INJECTION: forcing a failure. [ 270.392389][T14990] name failslab, interval 1, probability 0, space 0, times 1 [ 270.455680][T14990] CPU: 1 UID: 0 PID: 14990 Comm: syz.0.2612 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 270.455709][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 270.455735][T14990] Call Trace: [ 270.455742][T14990] [ 270.455750][T14990] dump_stack_lvl+0x189/0x250 [ 270.455776][T14990] ? __pfx____ratelimit+0x10/0x10 [ 270.455799][T14990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.455818][T14990] ? __pfx__printk+0x10/0x10 [ 270.455857][T14990] should_fail_ex+0x414/0x560 [ 270.455885][T14990] should_failslab+0xa8/0x100 [ 270.455910][T14990] __kmalloc_cache_noprof+0x70/0x3d0 [ 270.455933][T14990] ? sctp_add_bind_addr+0x8c/0x370 [ 270.455959][T14990] sctp_add_bind_addr+0x8c/0x370 [ 270.455984][T14990] sctp_copy_local_addr_list+0x30b/0x4e0 [ 270.456008][T14990] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 270.456029][T14990] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 270.456051][T14990] ? sctp_v6_is_any+0x64/0x80 [ 270.456074][T14990] ? sctp_copy_one_addr+0x93/0x360 [ 270.456099][T14990] sctp_bind_addr_copy+0xb3/0x3c0 [ 270.456119][T14990] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 270.456141][T14990] sctp_connect_new_asoc+0x2e0/0x690 [ 270.456167][T14990] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 270.456189][T14990] ? __local_bh_enable_ip+0x12d/0x1c0 [ 270.456213][T14990] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 270.456231][T14990] ? security_sctp_bind_connect+0x7e/0x2e0 [ 270.456256][T14990] sctp_sendmsg+0x155c/0x2810 [ 270.456291][T14990] ? __pfx_sctp_sendmsg+0x10/0x10 [ 270.456319][T14990] ? aa_sk_perm+0x81e/0x950 [ 270.456346][T14990] ? __pfx_aa_sk_perm+0x10/0x10 [ 270.456371][T14990] ? sock_rps_record_flow+0x19/0x410 [ 270.456395][T14990] ? inet_sendmsg+0x2f4/0x370 [ 270.456427][T14990] __sock_sendmsg+0x19c/0x270 [ 270.456454][T14990] ____sys_sendmsg+0x52d/0x830 [ 270.456478][T14990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.456505][T14990] ? import_iovec+0x74/0xa0 [ 270.456530][T14990] ___sys_sendmsg+0x21f/0x2a0 [ 270.456550][T14990] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.456606][T14990] ? __fget_files+0x2a/0x420 [ 270.456620][T14990] ? __fget_files+0x3a0/0x420 [ 270.456646][T14990] __sys_sendmmsg+0x227/0x430 [ 270.456666][T14990] ? __pfx___sys_sendmmsg+0x10/0x10 [ 270.456680][T14990] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 270.456731][T14990] ? ksys_write+0x22a/0x250 [ 270.456762][T14990] ? __pfx_ksys_write+0x10/0x10 [ 270.456780][T14990] ? rcu_is_watching+0x15/0xb0 [ 270.456805][T14990] __x64_sys_sendmmsg+0xa0/0xc0 [ 270.456823][T14990] do_syscall_64+0xfa/0x3b0 [ 270.456845][T14990] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.456865][T14990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.456881][T14990] ? clear_bhb_loop+0x60/0xb0 [ 270.456898][T14990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.456913][T14990] RIP: 0033:0x7f124b58ebe9 [ 270.456930][T14990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.456945][T14990] RSP: 002b:00007f124c4ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.456964][T14990] RAX: ffffffffffffffda RBX: 00007f124b7b5fa0 RCX: 00007f124b58ebe9 [ 270.456977][T14990] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 270.456988][T14990] RBP: 00007f124c4ce090 R08: 0000000000000000 R09: 0000000000000000 [ 270.456998][T14990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.457008][T14990] R13: 00007f124b7b6038 R14: 00007f124b7b5fa0 R15: 00007ffc767a15e8 [ 270.457038][T14990] [ 271.451091][T15035] __nla_validate_parse: 9 callbacks suppressed [ 271.451111][T15035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2618'. [ 271.516163][T15035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2618'. [ 271.708934][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2624'. [ 271.717356][T15055] FAULT_INJECTION: forcing a failure. [ 271.717356][T15055] name failslab, interval 1, probability 0, space 0, times 0 [ 271.734187][T15055] CPU: 1 UID: 0 PID: 15055 Comm: syz.4.2626 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 271.734215][T15055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 271.734225][T15055] Call Trace: [ 271.734232][T15055] [ 271.734240][T15055] dump_stack_lvl+0x189/0x250 [ 271.734266][T15055] ? __pfx____ratelimit+0x10/0x10 [ 271.734293][T15055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.734313][T15055] ? __pfx__printk+0x10/0x10 [ 271.734350][T15055] should_fail_ex+0x414/0x560 [ 271.734386][T15055] should_failslab+0xa8/0x100 [ 271.734412][T15055] __kmalloc_cache_noprof+0x70/0x3d0 [ 271.734435][T15055] ? sctp_add_bind_addr+0x8c/0x370 [ 271.734460][T15055] sctp_add_bind_addr+0x8c/0x370 [ 271.734485][T15055] sctp_copy_local_addr_list+0x30b/0x4e0 [ 271.734511][T15055] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 271.734532][T15055] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 271.734556][T15055] ? sctp_v6_is_any+0x64/0x80 [ 271.734580][T15055] ? sctp_copy_one_addr+0x93/0x360 [ 271.734604][T15055] sctp_bind_addr_copy+0xb3/0x3c0 [ 271.734627][T15055] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 271.734650][T15055] sctp_connect_new_asoc+0x2e0/0x690 [ 271.734679][T15055] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 271.734701][T15055] ? __local_bh_enable_ip+0x12d/0x1c0 [ 271.734728][T15055] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 271.734747][T15055] ? security_sctp_bind_connect+0x7e/0x2e0 [ 271.734772][T15055] sctp_sendmsg+0x155c/0x2810 [ 271.734809][T15055] ? __pfx_sctp_sendmsg+0x10/0x10 [ 271.734837][T15055] ? aa_sk_perm+0x81e/0x950 [ 271.734866][T15055] ? __pfx_aa_sk_perm+0x10/0x10 [ 271.734893][T15055] ? sock_rps_record_flow+0x19/0x410 [ 271.734916][T15055] ? inet_sendmsg+0x2f4/0x370 [ 271.734940][T15055] __sock_sendmsg+0x19c/0x270 [ 271.734965][T15055] ____sys_sendmsg+0x52d/0x830 [ 271.734990][T15055] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.735019][T15055] ? import_iovec+0x74/0xa0 [ 271.735042][T15055] ___sys_sendmsg+0x21f/0x2a0 [ 271.735063][T15055] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.735122][T15055] ? __fget_files+0x2a/0x420 [ 271.735136][T15055] ? __fget_files+0x3a0/0x420 [ 271.735163][T15055] __sys_sendmmsg+0x227/0x430 [ 271.735188][T15055] ? __pfx___sys_sendmmsg+0x10/0x10 [ 271.735203][T15055] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 271.735256][T15055] ? ksys_write+0x22a/0x250 [ 271.735280][T15055] ? __pfx_ksys_write+0x10/0x10 [ 271.735299][T15055] ? rcu_is_watching+0x15/0xb0 [ 271.735324][T15055] __x64_sys_sendmmsg+0xa0/0xc0 [ 271.735345][T15055] do_syscall_64+0xfa/0x3b0 [ 271.735373][T15055] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.735394][T15055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.735411][T15055] ? clear_bhb_loop+0x60/0xb0 [ 271.735434][T15055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.735450][T15055] RIP: 0033:0x7fb95bf8ebe9 [ 271.735466][T15055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.735480][T15055] RSP: 002b:00007fb95cea2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 271.735500][T15055] RAX: ffffffffffffffda RBX: 00007fb95c1b5fa0 RCX: 00007fb95bf8ebe9 [ 271.735513][T15055] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 271.735524][T15055] RBP: 00007fb95cea2090 R08: 0000000000000000 R09: 0000000000000000 [ 271.735535][T15055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.735545][T15055] R13: 00007fb95c1b6038 R14: 00007fb95c1b5fa0 R15: 00007ffd0291e338 [ 271.735576][T15055] [ 272.270504][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 272.331671][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2629'. [ 272.630459][T15090] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 272.705170][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2635'. [ 272.848739][T15106] FAULT_INJECTION: forcing a failure. [ 272.848739][T15106] name failslab, interval 1, probability 0, space 0, times 0 [ 272.911149][T15106] CPU: 1 UID: 0 PID: 15106 Comm: syz.1.2637 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 272.911178][T15106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.911189][T15106] Call Trace: [ 272.911204][T15106] [ 272.911213][T15106] dump_stack_lvl+0x189/0x250 [ 272.911239][T15106] ? __pfx____ratelimit+0x10/0x10 [ 272.911262][T15106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.911283][T15106] ? __pfx__printk+0x10/0x10 [ 272.911323][T15106] should_fail_ex+0x414/0x560 [ 272.911352][T15106] should_failslab+0xa8/0x100 [ 272.911379][T15106] __kmalloc_cache_noprof+0x70/0x3d0 [ 272.911401][T15106] ? sctp_add_bind_addr+0x8c/0x370 [ 272.911427][T15106] sctp_add_bind_addr+0x8c/0x370 [ 272.911452][T15106] sctp_copy_local_addr_list+0x30b/0x4e0 [ 272.911478][T15106] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 272.911499][T15106] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 272.911523][T15106] ? sctp_v6_is_any+0x64/0x80 [ 272.911546][T15106] ? sctp_copy_one_addr+0x93/0x360 [ 272.911572][T15106] sctp_bind_addr_copy+0xb3/0x3c0 [ 272.911595][T15106] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 272.911619][T15106] sctp_connect_new_asoc+0x2e0/0x690 [ 272.911647][T15106] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 272.911670][T15106] ? __local_bh_enable_ip+0x12d/0x1c0 [ 272.911696][T15106] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 272.911716][T15106] ? security_sctp_bind_connect+0x7e/0x2e0 [ 272.911741][T15106] sctp_sendmsg+0x155c/0x2810 [ 272.911782][T15106] ? __pfx_sctp_sendmsg+0x10/0x10 [ 272.911807][T15106] ? aa_sk_perm+0x81e/0x950 [ 272.911835][T15106] ? __pfx_aa_sk_perm+0x10/0x10 [ 272.911859][T15106] ? sock_rps_record_flow+0x19/0x410 [ 272.911882][T15106] ? inet_sendmsg+0x2f4/0x370 [ 272.911906][T15106] __sock_sendmsg+0x19c/0x270 [ 272.911932][T15106] ____sys_sendmsg+0x52d/0x830 [ 272.911957][T15106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.911986][T15106] ? import_iovec+0x74/0xa0 [ 272.912010][T15106] ___sys_sendmsg+0x21f/0x2a0 [ 272.912031][T15106] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.912091][T15106] ? __fget_files+0x2a/0x420 [ 272.912106][T15106] ? __fget_files+0x3a0/0x420 [ 272.912134][T15106] __sys_sendmmsg+0x227/0x430 [ 272.912159][T15106] ? __pfx___sys_sendmmsg+0x10/0x10 [ 272.912223][T15106] ? rcu_is_watching+0x15/0xb0 [ 272.912248][T15106] __x64_sys_sendmmsg+0xa0/0xc0 [ 272.912268][T15106] do_syscall_64+0xfa/0x3b0 [ 272.912291][T15106] ? lockdep_hardirqs_on+0x9c/0x150 [ 272.912313][T15106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.912330][T15106] ? clear_bhb_loop+0x60/0xb0 [ 272.912352][T15106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.912369][T15106] RIP: 0033:0x7fa6bc78ebe9 [ 272.912385][T15106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.912400][T15106] RSP: 002b:00007fa6bd5c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.912420][T15106] RAX: ffffffffffffffda RBX: 00007fa6bc9b5fa0 RCX: 00007fa6bc78ebe9 [ 272.912432][T15106] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 272.912443][T15106] RBP: 00007fa6bd5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 272.912453][T15106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.912463][T15106] R13: 00007fa6bc9b6038 R14: 00007fa6bc9b5fa0 R15: 00007ffd2e3818a8 [ 272.912495][T15106] [ 273.388659][T15118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 273.502961][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 273.552809][T15122] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2641'. [ 273.942769][T15135] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2643'. [ 273.955982][T15135] netlink: 'syz.1.2643': attribute type 2 has an invalid length. [ 274.197174][T15145] netlink: 'syz.1.2646': attribute type 1 has an invalid length. [ 275.032467][T15192] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 275.236376][T15205] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 276.607503][T15258] sctp: [Deprecated]: syz.1.2675 (pid 15258) Use of int in max_burst socket option deprecated. [ 276.607503][T15258] Use struct sctp_assoc_value instead [ 276.678497][T15264] __nla_validate_parse: 4 callbacks suppressed [ 276.678515][T15264] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2677'. [ 276.743625][T15266] netlink: 'syz.2.2678': attribute type 22 has an invalid length. [ 276.754810][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 276.765603][T15266] netlink: 'syz.2.2678': attribute type 22 has an invalid length. [ 276.777752][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2678'. [ 277.039009][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2681'. [ 277.080034][T15273] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2680'. [ 277.576376][T15306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2688'. [ 277.648864][ T30] audit: type=1804 audit(1755247838.228:2): pid=15308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2689" name="/newroot/561/cgroup.controllers" dev="tmpfs" ino=2870 res=1 errno=0 [ 277.686479][ T30] audit: type=1800 audit(1755247838.268:3): pid=15308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2689" name="cgroup.controllers" dev="tmpfs" ino=2870 res=0 errno=0 [ 277.872340][T15319] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 278.179588][T15333] netlink: 'syz.3.2693': attribute type 29 has an invalid length. [ 278.198495][T15333] netlink: 'syz.3.2693': attribute type 29 has an invalid length. [ 278.384611][T15341] lo speed is unknown, defaulting to 1000 [ 278.638922][T15348] netlink: 'syz.4.2697': attribute type 9 has an invalid length. [ 279.427690][T15395] netlink: 'syz.4.2704': attribute type 1 has an invalid length. [ 279.485354][T15395] bond5: entered promiscuous mode [ 279.490943][T15395] 8021q: adding VLAN 0 to HW filter on device bond5 [ 279.853112][T15424] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2712'. [ 279.880932][T15428] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2713'. [ 279.896373][T15431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2714'. [ 280.253211][T15452] FAULT_INJECTION: forcing a failure. [ 280.253211][T15452] name failslab, interval 1, probability 0, space 0, times 0 [ 280.320192][T15452] CPU: 0 UID: 0 PID: 15452 Comm: syz.1.2721 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 280.320218][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 280.320227][T15452] Call Trace: [ 280.320232][T15452] [ 280.320240][T15452] dump_stack_lvl+0x189/0x250 [ 280.320262][T15452] ? __pfx____ratelimit+0x10/0x10 [ 280.320282][T15452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.320298][T15452] ? __pfx__printk+0x10/0x10 [ 280.320328][T15452] should_fail_ex+0x414/0x560 [ 280.320350][T15452] should_failslab+0xa8/0x100 [ 280.320371][T15452] __kmalloc_cache_noprof+0x70/0x3d0 [ 280.320389][T15452] ? sctp_add_bind_addr+0x8c/0x370 [ 280.320409][T15452] sctp_add_bind_addr+0x8c/0x370 [ 280.320430][T15452] sctp_copy_local_addr_list+0x30b/0x4e0 [ 280.320451][T15452] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 280.320468][T15452] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 280.320488][T15452] ? sctp_v6_is_any+0x64/0x80 [ 280.320507][T15452] ? sctp_copy_one_addr+0x93/0x360 [ 280.320526][T15452] sctp_bind_addr_copy+0xb3/0x3c0 [ 280.320544][T15452] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 280.320563][T15452] sctp_connect_new_asoc+0x2e0/0x690 [ 280.320585][T15452] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 280.320603][T15452] ? __local_bh_enable_ip+0x12d/0x1c0 [ 280.320624][T15452] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 280.320639][T15452] ? security_sctp_bind_connect+0x7e/0x2e0 [ 280.320659][T15452] sctp_sendmsg+0x155c/0x2810 [ 280.320687][T15452] ? __pfx_sctp_sendmsg+0x10/0x10 [ 280.320710][T15452] ? aa_sk_perm+0x81e/0x950 [ 280.320741][T15452] ? __pfx_aa_sk_perm+0x10/0x10 [ 280.320762][T15452] ? sock_rps_record_flow+0x19/0x410 [ 280.320781][T15452] ? inet_sendmsg+0x2f4/0x370 [ 280.320800][T15452] __sock_sendmsg+0x19c/0x270 [ 280.320820][T15452] ____sys_sendmsg+0x52d/0x830 [ 280.320839][T15452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.320860][T15452] ? import_iovec+0x74/0xa0 [ 280.320879][T15452] ___sys_sendmsg+0x21f/0x2a0 [ 280.320895][T15452] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.320939][T15452] ? __fget_files+0x2a/0x420 [ 280.320951][T15452] ? __fget_files+0x3a0/0x420 [ 280.320972][T15452] __sys_sendmmsg+0x227/0x430 [ 280.320991][T15452] ? __pfx___sys_sendmmsg+0x10/0x10 [ 280.321003][T15452] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 280.321043][T15452] ? ksys_write+0x22a/0x250 [ 280.321062][T15452] ? __pfx_ksys_write+0x10/0x10 [ 280.321077][T15452] ? rcu_is_watching+0x15/0xb0 [ 280.321097][T15452] __x64_sys_sendmmsg+0xa0/0xc0 [ 280.321112][T15452] do_syscall_64+0xfa/0x3b0 [ 280.321129][T15452] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.321145][T15452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.321158][T15452] ? clear_bhb_loop+0x60/0xb0 [ 280.321174][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.321186][T15452] RIP: 0033:0x7fa6bc78ebe9 [ 280.321200][T15452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.321211][T15452] RSP: 002b:00007fa6bd5c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 280.321226][T15452] RAX: ffffffffffffffda RBX: 00007fa6bc9b5fa0 RCX: 00007fa6bc78ebe9 [ 280.321235][T15452] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 280.321244][T15452] RBP: 00007fa6bd5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 280.321252][T15452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.321260][T15452] R13: 00007fa6bc9b6038 R14: 00007fa6bc9b5fa0 R15: 00007ffd2e3818a8 [ 280.321282][T15452] [ 280.818538][T15461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2723'. [ 280.829486][T15464] openvswitch: netlink: Missing key (keys=40, expected=100) [ 280.927470][T15461] vlan3: entered allmulticast mode [ 280.933607][T15461] bridge0: entered allmulticast mode [ 280.945955][T15461] bridge0: port 1(vlan3) entered blocking state [ 280.968033][T15461] bridge0: port 1(vlan3) entered disabled state [ 281.155563][T15492] openvswitch: netlink: IPv4 tunnel dst address is zero [ 281.170763][T15492] openvswitch: netlink: IPv4 tunnel dst address is zero [ 281.224840][T15504] netlink: 'syz.4.2732': attribute type 4 has an invalid length. [ 281.260080][T15504] netlink: 'syz.4.2732': attribute type 4 has an invalid length. [ 281.397505][T15514] FAULT_INJECTION: forcing a failure. [ 281.397505][T15514] name failslab, interval 1, probability 0, space 0, times 0 [ 281.419183][T15514] CPU: 1 UID: 0 PID: 15514 Comm: syz.2.2737 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 281.419211][T15514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.419221][T15514] Call Trace: [ 281.419229][T15514] [ 281.419237][T15514] dump_stack_lvl+0x189/0x250 [ 281.419263][T15514] ? __pfx____ratelimit+0x10/0x10 [ 281.419286][T15514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.419307][T15514] ? __pfx__printk+0x10/0x10 [ 281.419345][T15514] should_fail_ex+0x414/0x560 [ 281.419373][T15514] should_failslab+0xa8/0x100 [ 281.419399][T15514] __kmalloc_cache_noprof+0x70/0x3d0 [ 281.419422][T15514] ? sctp_add_bind_addr+0x8c/0x370 [ 281.419445][T15514] sctp_add_bind_addr+0x8c/0x370 [ 281.419470][T15514] sctp_copy_local_addr_list+0x30b/0x4e0 [ 281.419495][T15514] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 281.419516][T15514] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 281.419540][T15514] ? sctp_v6_is_any+0x64/0x80 [ 281.419564][T15514] ? sctp_copy_one_addr+0x93/0x360 [ 281.419590][T15514] sctp_bind_addr_copy+0xb3/0x3c0 [ 281.419613][T15514] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 281.419636][T15514] sctp_connect_new_asoc+0x2e0/0x690 [ 281.419664][T15514] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 281.419694][T15514] ? __local_bh_enable_ip+0x12d/0x1c0 [ 281.419721][T15514] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 281.419740][T15514] ? security_sctp_bind_connect+0x7e/0x2e0 [ 281.419765][T15514] sctp_sendmsg+0x155c/0x2810 [ 281.419804][T15514] ? __pfx_sctp_sendmsg+0x10/0x10 [ 281.419832][T15514] ? aa_sk_perm+0x81e/0x950 [ 281.419862][T15514] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.419890][T15514] ? sock_rps_record_flow+0x19/0x410 [ 281.419914][T15514] ? inet_sendmsg+0x2f4/0x370 [ 281.419938][T15514] __sock_sendmsg+0x19c/0x270 [ 281.419967][T15514] ____sys_sendmsg+0x52d/0x830 [ 281.419993][T15514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.420021][T15514] ? import_iovec+0x74/0xa0 [ 281.420044][T15514] ___sys_sendmsg+0x21f/0x2a0 [ 281.420065][T15514] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.420125][T15514] ? __fget_files+0x2a/0x420 [ 281.420141][T15514] ? __fget_files+0x3a0/0x420 [ 281.420169][T15514] __sys_sendmmsg+0x227/0x430 [ 281.420193][T15514] ? __pfx___sys_sendmmsg+0x10/0x10 [ 281.420208][T15514] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 281.420257][T15514] ? ksys_write+0x22a/0x250 [ 281.420281][T15514] ? __pfx_ksys_write+0x10/0x10 [ 281.420300][T15514] ? rcu_is_watching+0x15/0xb0 [ 281.420323][T15514] __x64_sys_sendmmsg+0xa0/0xc0 [ 281.420343][T15514] do_syscall_64+0xfa/0x3b0 [ 281.420363][T15514] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.420383][T15514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.420400][T15514] ? clear_bhb_loop+0x60/0xb0 [ 281.420419][T15514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.420434][T15514] RIP: 0033:0x7f8744d8ebe9 [ 281.420451][T15514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.420465][T15514] RSP: 002b:00007f8745c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 281.420482][T15514] RAX: ffffffffffffffda RBX: 00007f8744fb5fa0 RCX: 00007f8744d8ebe9 [ 281.420493][T15514] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 281.420503][T15514] RBP: 00007f8745c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 281.420513][T15514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 281.420521][T15514] R13: 00007f8744fb6038 R14: 00007f8744fb5fa0 R15: 00007ffdddee0e98 [ 281.420549][T15514] [ 281.989375][T15523] tipc: Enabling of bearer rejected, already enabled [ 282.264398][T15536] __nla_validate_parse: 3 callbacks suppressed [ 282.264418][T15536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2744'. [ 282.432717][T15540] netlink: 'syz.4.2745': attribute type 1 has an invalid length. [ 283.183620][T15588] veth0_to_hsr: entered allmulticast mode [ 283.421016][T15603] netlink: 'syz.3.2767': attribute type 29 has an invalid length. [ 283.440628][T15603] netlink: 'syz.3.2767': attribute type 29 has an invalid length. [ 283.592704][T15603] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2767'. [ 283.837582][T15631] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2772'. [ 283.898419][T15635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2775'. [ 284.024994][T15639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 284.043801][T15639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2777'. [ 284.043801][T15642] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2777'. [ 284.082650][T15641] netlink: 'syz.3.2778': attribute type 1 has an invalid length. [ 284.096661][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2780'. [ 284.154875][T15649] bond5: (slave bridge5): making interface the new active one [ 284.163273][T15649] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 284.325555][T15662] netlink: 'syz.3.2782': attribute type 7 has an invalid length. [ 284.381750][T15662] : entered promiscuous mode [ 284.451478][T15672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2787'. [ 284.490517][T15672] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 284.660859][T15683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2790'. [ 284.877631][T15700] nbd: must specify at least one socket [ 285.450658][T15729] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 285.494201][T15739] tipc: Enabling of bearer rejected, failed to enable media [ 285.617479][T15747] bridge7: entered promiscuous mode [ 285.632290][T15747] bridge7: entered allmulticast mode [ 286.188454][T15787] nbd: must specify at least one socket [ 287.158621][T15847] FAULT_INJECTION: forcing a failure. [ 287.158621][T15847] name failslab, interval 1, probability 0, space 0, times 0 [ 287.182287][T15847] CPU: 0 UID: 0 PID: 15847 Comm: syz.2.2839 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 287.182313][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.182324][T15847] Call Trace: [ 287.182331][T15847] [ 287.182339][T15847] dump_stack_lvl+0x189/0x250 [ 287.182362][T15847] ? __pfx____ratelimit+0x10/0x10 [ 287.182383][T15847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.182402][T15847] ? __pfx__printk+0x10/0x10 [ 287.182437][T15847] should_fail_ex+0x414/0x560 [ 287.182465][T15847] should_failslab+0xa8/0x100 [ 287.182486][T15847] __kmalloc_cache_noprof+0x70/0x3d0 [ 287.182507][T15847] ? sctp_add_bind_addr+0x8c/0x370 [ 287.182533][T15847] sctp_add_bind_addr+0x8c/0x370 [ 287.182560][T15847] sctp_copy_local_addr_list+0x30b/0x4e0 [ 287.182586][T15847] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 287.182606][T15847] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 287.182628][T15847] ? sctp_v6_is_any+0x64/0x80 [ 287.182651][T15847] ? sctp_copy_one_addr+0x93/0x360 [ 287.182675][T15847] sctp_bind_addr_copy+0xb3/0x3c0 [ 287.182696][T15847] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 287.182718][T15847] sctp_connect_new_asoc+0x2e0/0x690 [ 287.182744][T15847] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 287.182766][T15847] ? __local_bh_enable_ip+0x12d/0x1c0 [ 287.182790][T15847] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 287.182808][T15847] ? security_sctp_bind_connect+0x7e/0x2e0 [ 287.182831][T15847] sctp_sendmsg+0x155c/0x2810 [ 287.182869][T15847] ? __pfx_sctp_sendmsg+0x10/0x10 [ 287.182895][T15847] ? aa_sk_perm+0x81e/0x950 [ 287.183016][T15847] ? __pfx_aa_sk_perm+0x10/0x10 [ 287.183042][T15847] ? sock_rps_record_flow+0x19/0x410 [ 287.183065][T15847] ? inet_sendmsg+0x2f4/0x370 [ 287.183089][T15847] __sock_sendmsg+0x19c/0x270 [ 287.183112][T15847] ____sys_sendmsg+0x52d/0x830 [ 287.183132][T15847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.183157][T15847] ? import_iovec+0x74/0xa0 [ 287.183178][T15847] ___sys_sendmsg+0x21f/0x2a0 [ 287.183196][T15847] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.183250][T15847] ? __fget_files+0x2a/0x420 [ 287.183264][T15847] ? __fget_files+0x3a0/0x420 [ 287.183287][T15847] __sys_sendmmsg+0x227/0x430 [ 287.183311][T15847] ? __pfx___sys_sendmmsg+0x10/0x10 [ 287.183326][T15847] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 287.183373][T15847] ? ksys_write+0x22a/0x250 [ 287.183396][T15847] ? __pfx_ksys_write+0x10/0x10 [ 287.183412][T15847] ? rcu_is_watching+0x15/0xb0 [ 287.183434][T15847] __x64_sys_sendmmsg+0xa0/0xc0 [ 287.183451][T15847] do_syscall_64+0xfa/0x3b0 [ 287.183471][T15847] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.183491][T15847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.183506][T15847] ? clear_bhb_loop+0x60/0xb0 [ 287.183528][T15847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.183544][T15847] RIP: 0033:0x7f8744d8ebe9 [ 287.183561][T15847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.183574][T15847] RSP: 002b:00007f8745c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 287.183591][T15847] RAX: ffffffffffffffda RBX: 00007f8744fb5fa0 RCX: 00007f8744d8ebe9 [ 287.183603][T15847] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 287.183614][T15847] RBP: 00007f8745c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 287.183624][T15847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.183633][T15847] R13: 00007f8744fb6038 R14: 00007f8744fb5fa0 R15: 00007ffdddee0e98 [ 287.183657][T15847] [ 287.728742][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 287.739673][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 287.751254][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 287.760953][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 287.769164][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 287.855076][T15855] __nla_validate_parse: 10 callbacks suppressed [ 287.855092][T15855] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2842'. [ 287.879219][T15852] lo speed is unknown, defaulting to 1000 [ 287.885200][T15861] netlink: 'syz.4.2844': attribute type 27 has an invalid length. [ 287.911737][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2842'. [ 288.281076][T15881] netlink: 'syz.2.2848': attribute type 2 has an invalid length. [ 288.295507][T15852] chnl_net:caif_netlink_parms(): no params data found [ 288.330234][T15885] netlink: 'syz.3.2850': attribute type 1 has an invalid length. [ 288.439519][T15889] FAULT_INJECTION: forcing a failure. [ 288.439519][T15889] name failslab, interval 1, probability 0, space 0, times 0 [ 288.459623][T15889] CPU: 1 UID: 0 PID: 15889 Comm: syz.2.2851 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 288.459652][T15889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.459663][T15889] Call Trace: [ 288.459671][T15889] [ 288.459679][T15889] dump_stack_lvl+0x189/0x250 [ 288.459706][T15889] ? __pfx____ratelimit+0x10/0x10 [ 288.459730][T15889] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.459750][T15889] ? __pfx__printk+0x10/0x10 [ 288.459787][T15889] should_fail_ex+0x414/0x560 [ 288.459822][T15889] should_failslab+0xa8/0x100 [ 288.459848][T15889] __kmalloc_cache_noprof+0x70/0x3d0 [ 288.459870][T15889] ? sctp_add_bind_addr+0x8c/0x370 [ 288.459896][T15889] sctp_add_bind_addr+0x8c/0x370 [ 288.459921][T15889] sctp_copy_local_addr_list+0x30b/0x4e0 [ 288.459946][T15889] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 288.459968][T15889] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 288.459992][T15889] ? sctp_v6_is_any+0x64/0x80 [ 288.460015][T15889] ? sctp_copy_one_addr+0x93/0x360 [ 288.460040][T15889] sctp_bind_addr_copy+0xb3/0x3c0 [ 288.460061][T15889] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 288.460085][T15889] sctp_connect_new_asoc+0x2e0/0x690 [ 288.460113][T15889] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 288.460135][T15889] ? __local_bh_enable_ip+0x12d/0x1c0 [ 288.460161][T15889] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 288.460181][T15889] ? security_sctp_bind_connect+0x7e/0x2e0 [ 288.460206][T15889] sctp_sendmsg+0x155c/0x2810 [ 288.460243][T15889] ? __pfx_sctp_sendmsg+0x10/0x10 [ 288.460270][T15889] ? aa_sk_perm+0x81e/0x950 [ 288.460299][T15889] ? __pfx_aa_sk_perm+0x10/0x10 [ 288.460326][T15889] ? sock_rps_record_flow+0x19/0x410 [ 288.460350][T15889] ? inet_sendmsg+0x2f4/0x370 [ 288.460374][T15889] __sock_sendmsg+0x19c/0x270 [ 288.460399][T15889] ____sys_sendmsg+0x52d/0x830 [ 288.460423][T15889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 288.460452][T15889] ? import_iovec+0x74/0xa0 [ 288.460476][T15889] ___sys_sendmsg+0x21f/0x2a0 [ 288.460496][T15889] ? __pfx____sys_sendmsg+0x10/0x10 [ 288.460553][T15889] ? __fget_files+0x2a/0x420 [ 288.460568][T15889] ? __fget_files+0x3a0/0x420 [ 288.460595][T15889] __sys_sendmmsg+0x227/0x430 [ 288.460619][T15889] ? __pfx___sys_sendmmsg+0x10/0x10 [ 288.460634][T15889] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 288.460686][T15889] ? ksys_write+0x22a/0x250 [ 288.460710][T15889] ? __pfx_ksys_write+0x10/0x10 [ 288.460729][T15889] ? rcu_is_watching+0x15/0xb0 [ 288.460753][T15889] __x64_sys_sendmmsg+0xa0/0xc0 [ 288.460774][T15889] do_syscall_64+0xfa/0x3b0 [ 288.460801][T15889] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.460823][T15889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.460840][T15889] ? clear_bhb_loop+0x60/0xb0 [ 288.460862][T15889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.460878][T15889] RIP: 0033:0x7f8744d8ebe9 [ 288.460895][T15889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.460908][T15889] RSP: 002b:00007f8745c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 288.460928][T15889] RAX: ffffffffffffffda RBX: 00007f8744fb5fa0 RCX: 00007f8744d8ebe9 [ 288.460941][T15889] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 288.460952][T15889] RBP: 00007f8745c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 288.460963][T15889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 288.460973][T15889] R13: 00007f8744fb6038 R14: 00007f8744fb5fa0 R15: 00007ffdddee0e98 [ 288.461004][T15889] [ 288.866226][T15852] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.919233][T15852] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.927706][T15852] bridge_slave_0: entered allmulticast mode [ 288.935677][T15852] bridge_slave_0: entered promiscuous mode [ 288.944585][T15852] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.952259][T15852] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.959510][T15852] bridge_slave_1: entered allmulticast mode [ 288.967568][T15852] bridge_slave_1: entered promiscuous mode [ 288.982847][T15909] : renamed from bridge_slave_0 [ 289.059181][T15914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2859'. [ 289.088834][T15917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.088974][T15918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 289.127859][T15852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.147630][T15852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.226547][T15852] team0: Port device team_slave_0 added [ 289.249852][T15852] team0: Port device team_slave_1 added [ 289.324069][T15852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.334455][T15852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.371360][T15852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.398183][T15852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.405335][T15852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.435726][T15852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.511168][T15852] hsr_slave_0: entered promiscuous mode [ 289.533436][T15852] hsr_slave_1: entered promiscuous mode [ 289.543804][T15852] debugfs: 'hsr0' already exists in 'hsr' [ 289.549733][T15852] Cannot create hsr debugfs directory [ 289.556656][T15926] netlink: 'syz.3.2864': attribute type 11 has an invalid length. [ 289.570995][T15926] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2864'. [ 289.733787][T15931] FAULT_INJECTION: forcing a failure. [ 289.733787][T15931] name failslab, interval 1, probability 0, space 0, times 0 [ 289.751173][T15931] CPU: 1 UID: 0 PID: 15931 Comm: syz.2.2867 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 289.751201][T15931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.751211][T15931] Call Trace: [ 289.751219][T15931] [ 289.751227][T15931] dump_stack_lvl+0x189/0x250 [ 289.751253][T15931] ? __pfx____ratelimit+0x10/0x10 [ 289.751275][T15931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.751296][T15931] ? __pfx__printk+0x10/0x10 [ 289.751334][T15931] should_fail_ex+0x414/0x560 [ 289.751361][T15931] should_failslab+0xa8/0x100 [ 289.751385][T15931] __kmalloc_cache_noprof+0x70/0x3d0 [ 289.751405][T15931] ? sctp_add_bind_addr+0x8c/0x370 [ 289.751433][T15931] sctp_add_bind_addr+0x8c/0x370 [ 289.751458][T15931] sctp_copy_local_addr_list+0x30b/0x4e0 [ 289.751484][T15931] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 289.751503][T15931] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 289.751526][T15931] ? sctp_v6_is_any+0x64/0x80 [ 289.751550][T15931] ? sctp_copy_one_addr+0x93/0x360 [ 289.751574][T15931] sctp_bind_addr_copy+0xb3/0x3c0 [ 289.751596][T15931] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 289.751618][T15931] sctp_connect_new_asoc+0x2e0/0x690 [ 289.751645][T15931] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 289.751665][T15931] ? __local_bh_enable_ip+0x12d/0x1c0 [ 289.751689][T15931] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 289.751708][T15931] ? security_sctp_bind_connect+0x7e/0x2e0 [ 289.751732][T15931] sctp_sendmsg+0x155c/0x2810 [ 289.751773][T15931] ? __pfx_sctp_sendmsg+0x10/0x10 [ 289.751796][T15931] ? aa_sk_perm+0x81e/0x950 [ 289.751823][T15931] ? __pfx_aa_sk_perm+0x10/0x10 [ 289.751847][T15931] ? sock_rps_record_flow+0x19/0x410 [ 289.751868][T15931] ? inet_sendmsg+0x2f4/0x370 [ 289.751891][T15931] __sock_sendmsg+0x19c/0x270 [ 289.751916][T15931] ____sys_sendmsg+0x52d/0x830 [ 289.751947][T15931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.751972][T15931] ? import_iovec+0x74/0xa0 [ 289.751994][T15931] ___sys_sendmsg+0x21f/0x2a0 [ 289.752013][T15931] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.752064][T15931] ? __fget_files+0x2a/0x420 [ 289.752078][T15931] ? __fget_files+0x3a0/0x420 [ 289.752101][T15931] __sys_sendmmsg+0x227/0x430 [ 289.752125][T15931] ? __pfx___sys_sendmmsg+0x10/0x10 [ 289.752139][T15931] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 289.752189][T15931] ? ksys_write+0x22a/0x250 [ 289.752214][T15931] ? __pfx_ksys_write+0x10/0x10 [ 289.752232][T15931] ? rcu_is_watching+0x15/0xb0 [ 289.752257][T15931] __x64_sys_sendmmsg+0xa0/0xc0 [ 289.752278][T15931] do_syscall_64+0xfa/0x3b0 [ 289.752299][T15931] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.752321][T15931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.752338][T15931] ? clear_bhb_loop+0x60/0xb0 [ 289.752360][T15931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.752377][T15931] RIP: 0033:0x7f8744d8ebe9 [ 289.752393][T15931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.752408][T15931] RSP: 002b:00007f8745c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 289.752427][T15931] RAX: ffffffffffffffda RBX: 00007f8744fb5fa0 RCX: 00007f8744d8ebe9 [ 289.752440][T15931] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 289.752451][T15931] RBP: 00007f8745c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 289.752462][T15931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.752472][T15931] R13: 00007f8744fb6038 R14: 00007f8744fb5fa0 R15: 00007ffdddee0e98 [ 289.752503][T15931] [ 289.817432][ T5861] Bluetooth: hci5: command tx timeout [ 290.260861][T15940] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2869'. [ 290.355781][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.374571][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.392218][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.412395][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.424702][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.467236][T15852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.483572][T15852] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 1473 - 0 [ 290.598023][T15852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.609363][T15852] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 1473 - 0 [ 290.650036][T15948] lo speed is unknown, defaulting to 1000 [ 290.708929][T15852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.741685][T15852] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 1473 - 0 [ 290.780563][T15964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2876'. [ 290.858116][T15852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 290.875667][T15852] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 1473 - 0 [ 290.877525][T15966] FAULT_INJECTION: forcing a failure. [ 290.877525][T15966] name failslab, interval 1, probability 0, space 0, times 0 [ 290.905721][T15966] CPU: 1 UID: 0 PID: 15966 Comm: syz.2.2877 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 290.905750][T15966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.905760][T15966] Call Trace: [ 290.905768][T15966] [ 290.905776][T15966] dump_stack_lvl+0x189/0x250 [ 290.905801][T15966] ? __pfx____ratelimit+0x10/0x10 [ 290.905824][T15966] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.905844][T15966] ? __pfx__printk+0x10/0x10 [ 290.905880][T15966] should_fail_ex+0x414/0x560 [ 290.905908][T15966] should_failslab+0xa8/0x100 [ 290.905934][T15966] __kmalloc_cache_noprof+0x70/0x3d0 [ 290.905956][T15966] ? sctp_add_bind_addr+0x8c/0x370 [ 290.905981][T15966] sctp_add_bind_addr+0x8c/0x370 [ 290.906008][T15966] sctp_copy_local_addr_list+0x30b/0x4e0 [ 290.906034][T15966] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 290.906054][T15966] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 290.906077][T15966] ? sctp_v6_is_any+0x64/0x80 [ 290.906100][T15966] ? sctp_copy_one_addr+0x93/0x360 [ 290.906124][T15966] sctp_bind_addr_copy+0xb3/0x3c0 [ 290.906147][T15966] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 290.906170][T15966] sctp_connect_new_asoc+0x2e0/0x690 [ 290.906198][T15966] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 290.906219][T15966] ? __local_bh_enable_ip+0x12d/0x1c0 [ 290.906245][T15966] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 290.906264][T15966] ? security_sctp_bind_connect+0x7e/0x2e0 [ 290.906289][T15966] sctp_sendmsg+0x155c/0x2810 [ 290.906326][T15966] ? __pfx_sctp_sendmsg+0x10/0x10 [ 290.906354][T15966] ? aa_sk_perm+0x81e/0x950 [ 290.906383][T15966] ? __pfx_aa_sk_perm+0x10/0x10 [ 290.906407][T15966] ? sock_rps_record_flow+0x19/0x410 [ 290.906430][T15966] ? inet_sendmsg+0x2f4/0x370 [ 290.906452][T15966] __sock_sendmsg+0x19c/0x270 [ 290.906475][T15966] ____sys_sendmsg+0x52d/0x830 [ 290.906496][T15966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.906522][T15966] ? import_iovec+0x74/0xa0 [ 290.906545][T15966] ___sys_sendmsg+0x21f/0x2a0 [ 290.906565][T15966] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.906626][T15966] ? __fget_files+0x2a/0x420 [ 290.906640][T15966] ? __fget_files+0x3a0/0x420 [ 290.906667][T15966] __sys_sendmmsg+0x227/0x430 [ 290.906690][T15966] ? __pfx___sys_sendmmsg+0x10/0x10 [ 290.906704][T15966] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 290.906755][T15966] ? ksys_write+0x22a/0x250 [ 290.906780][T15966] ? __pfx_ksys_write+0x10/0x10 [ 290.906799][T15966] ? rcu_is_watching+0x15/0xb0 [ 290.906823][T15966] __x64_sys_sendmmsg+0xa0/0xc0 [ 290.906843][T15966] do_syscall_64+0xfa/0x3b0 [ 290.906864][T15966] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.906886][T15966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.906904][T15966] ? clear_bhb_loop+0x60/0xb0 [ 290.906925][T15966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.906941][T15966] RIP: 0033:0x7f8744d8ebe9 [ 290.906958][T15966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.906971][T15966] RSP: 002b:00007f8745c0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.906990][T15966] RAX: ffffffffffffffda RBX: 00007f8744fb5fa0 RCX: 00007f8744d8ebe9 [ 290.907002][T15966] RDX: 0000000000000001 RSI: 00002000000071c0 RDI: 0000000000000003 [ 290.907012][T15966] RBP: 00007f8745c0d090 R08: 0000000000000000 R09: 0000000000000000 [ 290.907023][T15966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 290.907033][T15966] R13: 00007f8744fb6038 R14: 00007f8744fb5fa0 R15: 00007ffdddee0e98 [ 290.907061][T15966] [ 291.432974][T15972] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2879'. [ 291.585370][T15948] chnl_net:caif_netlink_parms(): no params data found [ 291.661613][T15976] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O' [ 291.674144][T15976] CPU: 1 UID: 0 PID: 15976 Comm: syz.2.2880 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 291.674169][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.674178][T15976] Call Trace: [ 291.674185][T15976] [ 291.674192][T15976] dump_stack_lvl+0x189/0x250 [ 291.674219][T15976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.674238][T15976] ? __pfx__printk+0x10/0x10 [ 291.674265][T15976] ? kernfs_path_from_node+0x2f/0x290 [ 291.674283][T15976] ? kernfs_path_from_node+0x250/0x290 [ 291.674300][T15976] ? kernfs_path_from_node+0x2f/0x290 [ 291.674321][T15976] sysfs_warn_dup+0x8e/0xa0 [ 291.674340][T15976] sysfs_do_create_link_sd+0xc0/0x110 [ 291.674361][T15976] device_add_class_symlinks+0x1cf/0x240 [ 291.674383][T15976] device_add+0x475/0xb50 [ 291.674404][T15976] wiphy_register+0x1ba6/0x28d0 [ 291.674445][T15976] ? __pfx_wiphy_register+0x10/0x10 [ 291.674466][T15976] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 291.674493][T15976] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 291.674533][T15976] ieee80211_register_hw+0x3425/0x4080 [ 291.674565][T15976] ? ieee80211_register_hw+0x1461/0x4080 [ 291.674589][T15976] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 291.674610][T15976] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 291.674638][T15976] ? __hrtimer_setup+0x187/0x210 [ 291.674652][T15976] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 291.674675][T15976] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 291.674728][T15976] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 291.674749][T15976] ? trace_kmalloc+0x1f/0xd0 [ 291.674766][T15976] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 291.674787][T15976] ? kstrndup+0xbf/0x160 [ 291.674815][T15976] hwsim_new_radio_nl+0xea4/0x1b10 [ 291.674838][T15976] ? __pfx___nla_validate_parse+0x10/0x10 [ 291.674877][T15976] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 291.674910][T15976] ? __nla_parse+0x40/0x60 [ 291.674935][T15976] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 291.674963][T15976] genl_family_rcv_msg_doit+0x212/0x300 [ 291.674990][T15976] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 291.675023][T15976] ? bpf_lsm_capable+0x9/0x20 [ 291.675044][T15976] ? security_capable+0x7e/0x2e0 [ 291.675073][T15976] genl_rcv_msg+0x60e/0x790 [ 291.675098][T15976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.675112][T15976] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 291.675145][T15976] netlink_rcv_skb+0x205/0x470 [ 291.675166][T15976] ? __lock_acquire+0xab9/0xd20 [ 291.675188][T15976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.675209][T15976] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.675249][T15976] ? down_read+0x1ad/0x2e0 [ 291.675273][T15976] genl_rcv+0x28/0x40 [ 291.675284][T15976] netlink_unicast+0x82f/0x9e0 [ 291.675309][T15976] ? __pfx_netlink_unicast+0x10/0x10 [ 291.675331][T15976] ? netlink_sendmsg+0x642/0xb30 [ 291.675347][T15976] ? skb_put+0x11b/0x210 [ 291.675364][T15976] netlink_sendmsg+0x805/0xb30 [ 291.675390][T15976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.675411][T15976] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.675431][T15976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.675445][T15976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.675463][T15976] __sock_sendmsg+0x21c/0x270 [ 291.675482][T15976] ____sys_sendmsg+0x505/0x830 [ 291.675501][T15976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.675534][T15976] ? import_iovec+0x74/0xa0 [ 291.675555][T15976] ___sys_sendmsg+0x21f/0x2a0 [ 291.675572][T15976] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.675630][T15976] ? __fget_files+0x2a/0x420 [ 291.675642][T15976] ? __fget_files+0x3a0/0x420 [ 291.675665][T15976] __x64_sys_sendmsg+0x19b/0x260 [ 291.675684][T15976] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.675707][T15976] ? rcu_is_watching+0x15/0xb0 [ 291.675728][T15976] ? do_syscall_64+0xbe/0x3b0 [ 291.675750][T15976] do_syscall_64+0xfa/0x3b0 [ 291.675767][T15976] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.675783][T15976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.675795][T15976] ? clear_bhb_loop+0x60/0xb0 [ 291.675812][T15976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.675824][T15976] RIP: 0033:0x7f8744d8ebe9 [ 291.675838][T15976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.675848][T15976] RSP: 002b:00007f8745c0d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.675864][T15976] RAX: ffffffffffffffda RBX: 00007f8744fb5fa0 RCX: 00007f8744d8ebe9 [ 291.675873][T15976] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 291.675881][T15976] RBP: 00007f8744e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 291.675888][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.675895][T15976] R13: 00007f8744fb6038 R14: 00007f8744fb5fa0 R15: 00007ffdddee0e98 [ 291.675919][T15976] [ 292.142523][ T5861] Bluetooth: hci5: command tx timeout [ 292.297127][T15948] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.304739][T15948] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.312465][T15948] bridge_slave_0: entered allmulticast mode [ 292.320249][T15948] bridge_slave_0: entered promiscuous mode [ 292.330987][T15852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 292.342939][T15948] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.350095][T15948] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.357662][T15948] bridge_slave_1: entered allmulticast mode [ 292.366601][T15948] bridge_slave_1: entered promiscuous mode [ 292.428569][T15852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 292.454783][T15852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 292.516889][T15948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.533576][ T5861] Bluetooth: hci3: command tx timeout [ 292.534355][T15948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.548574][T15852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.554273][T16004] netlink: 'syz.2.2886': attribute type 1 has an invalid length. [ 292.614187][T15948] team0: Port device team_slave_0 added [ 292.623455][T15948] team0: Port device team_slave_1 added [ 292.689998][T15948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.718454][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.751607][T15948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.770910][T15948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.777193][T16013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2887'. [ 292.778713][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.814498][T15948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.947046][T15948] hsr_slave_0: entered promiscuous mode [ 292.968839][T15948] hsr_slave_1: entered promiscuous mode [ 292.976031][T15948] debugfs: 'hsr0' already exists in 'hsr' [ 292.982220][T15948] Cannot create hsr debugfs directory [ 293.140054][T16034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2892'. [ 293.318074][T16034] hsr_slave_0 (unregistering): left promiscuous mode [ 293.375714][T16041] netlink: 'syz.4.2895': attribute type 10 has an invalid length. [ 293.400467][T15852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.413279][T16041] netlink: 'syz.4.2895': attribute type 1 has an invalid length. [ 293.627650][T16042] gretap2: entered promiscuous mode [ 293.639134][T16042] bond6: (slave gretap2): making interface the new active one [ 293.667235][T16042] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 293.682023][T16061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2899'. [ 293.725993][T16051] macvlan3: entered promiscuous mode [ 293.731333][T16051] macvlan3: entered allmulticast mode [ 293.738253][T16051] bond6: entered promiscuous mode [ 293.747304][T16051] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 293.755276][T16051] bond6: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 293.775799][T16051] bond6: left promiscuous mode [ 293.842066][T15852] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.894233][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.902427][ T6445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.970027][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.977230][ T6445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.129403][T16075] tipc: Enabled bearer , priority 0 [ 294.173292][T16071] tipc: Resetting bearer [ 294.202852][ T5861] Bluetooth: hci5: command tx timeout [ 294.615476][ T5861] Bluetooth: hci3: command tx timeout [ 295.666058][T16071] tipc: Disabling bearer [ 295.685777][T16087] tipc: Enabling of bearer rejected, already enabled [ 295.721752][T15948] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 295.783650][T15948] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 295.840196][T15948] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 295.869659][T15948] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 296.303380][ T5861] Bluetooth: hci5: command tx timeout [ 296.420463][T15948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.496908][T15948] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.557005][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.564241][ T6445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.650032][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.657304][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.687743][ T5861] Bluetooth: hci3: command tx timeout [ 296.697934][T16141] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.2919'. [ 296.836624][T16146] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 296.851555][T16146] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 296.859900][T16146] tipc: Resetting bearer [ 296.901003][T16151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 296.907345][T16146] tipc: Enabling of bearer rejected, already enabled [ 296.936172][T15852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.940337][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 296.976994][T16151] netlink: 'syz.4.2922': attribute type 1 has an invalid length. [ 296.992751][T16151] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2922'. [ 297.127143][T16159] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2924'. [ 297.153547][T16159] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2924'. [ 297.184691][T15852] veth0_vlan: entered promiscuous mode [ 297.229081][T15852] veth1_vlan: entered promiscuous mode [ 297.245425][T16167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2923'. [ 297.301246][T15852] veth0_macvtap: entered promiscuous mode [ 297.309058][T16169] netlink: 'syz.4.2925': attribute type 10 has an invalid length. [ 297.312729][T15852] veth1_macvtap: entered promiscuous mode [ 297.340469][T15852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.386915][T15852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.419857][ T6456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.437493][ T6456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.463372][ T6456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.478882][ T6456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.524176][T15948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.829001][T15948] veth0_vlan: entered promiscuous mode [ 297.841670][T15948] veth1_vlan: entered promiscuous mode [ 297.872755][T15948] veth0_macvtap: entered promiscuous mode [ 297.884419][T15948] veth1_macvtap: entered promiscuous mode [ 297.906003][T15948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.955894][T15948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.068173][ T6445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.087879][ T6166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.108734][ T6166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.129824][ T6445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.149039][ T6445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.169232][ T6445] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.285949][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.295694][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.419635][ T6448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.449743][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.552610][T16204] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 298.610230][ T6166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.639072][ T6166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.729044][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2931'. [ 298.767881][ T5861] Bluetooth: hci3: command tx timeout [ 298.770096][T16220] netlink: 'syz.3.2933': attribute type 1 has an invalid length. [ 298.831005][T16220] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 298.840596][T16223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2934'. [ 299.104853][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2938'. [ 299.437250][T16247] netlink: 'syz.2.2941': attribute type 2 has an invalid length. [ 299.564323][T16253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2942'. [ 299.605795][T16253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2942'. [ 299.988780][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 299.998919][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 300.007728][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 300.017289][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 300.026287][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 300.152932][T16272] lo speed is unknown, defaulting to 1000 [ 300.359219][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2951'. [ 300.387772][T16294] netlink: 'syz.1.2951': attribute type 5 has an invalid length. [ 300.396767][T16294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2951'. [ 300.612045][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 300.791534][T16294] geneve2: entered promiscuous mode [ 300.798804][T16294] geneve2: entered allmulticast mode [ 300.821320][ T49] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 300.858576][ T49] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 300.882852][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 300.892083][ T49] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 300.940746][T16272] chnl_net:caif_netlink_parms(): no params data found [ 301.188127][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.216133][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.233454][T16272] bridge_slave_0: entered allmulticast mode [ 301.268843][T16272] bridge_slave_0: entered promiscuous mode [ 301.316336][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.343716][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.352759][T16309] netlink: 'syz.1.2957': attribute type 13 has an invalid length. [ 301.365558][T16272] bridge_slave_1: entered allmulticast mode [ 301.374535][T16272] bridge_slave_1: entered promiscuous mode [ 301.420768][T16309] veth0_macvtap: left promiscuous mode [ 301.427640][T16309] macvtap0: entered allmulticast mode [ 301.438526][T16309] macvtap0: refused to change device tx_queue_len [ 301.521735][T16321] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 301.531211][T16321] bridge7: entered promiscuous mode [ 301.570876][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2959'. [ 301.573713][T16272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.636540][T16272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.729502][T16329] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2962'. [ 301.798338][T16331] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2963'. [ 301.831450][T16272] team0: Port device team_slave_0 added [ 301.854652][T16335] netlink: 'syz.1.2965': attribute type 4 has an invalid length. [ 301.894548][T16272] team0: Port device team_slave_1 added [ 302.099167][T16352] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 302.132519][ T51] Bluetooth: hci0: command tx timeout [ 302.174679][T16272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.214298][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.257744][T16272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.279898][T16272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.288810][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.319637][T16272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.350800][T16361] bond0: entered promiscuous mode [ 302.356115][T16366] netlink: 'syz.4.2971': attribute type 1 has an invalid length. [ 302.368944][T16361] bond_slave_0: entered promiscuous mode [ 302.386216][T16361] bond_slave_1: entered promiscuous mode [ 302.392896][T16361] bridge_slave_1: entered promiscuous mode [ 302.400272][T16361] batadv0: entered promiscuous mode [ 302.412363][T16361] team0: entered promiscuous mode [ 302.417583][T16361] team_slave_0: entered promiscuous mode [ 302.424679][T16361] team_slave_1: entered promiscuous mode [ 302.430900][T16361] bond8: entered promiscuous mode [ 302.441331][T16361] bond0: left promiscuous mode [ 302.452650][T16361] bond_slave_0: left promiscuous mode [ 302.460004][T16361] bond_slave_1: left promiscuous mode [ 302.466467][T16361] bridge_slave_1: left promiscuous mode [ 302.472809][T16361] batadv0: left promiscuous mode [ 302.478204][T16361] team0: left promiscuous mode [ 302.484195][T16361] team_slave_0: left promiscuous mode [ 302.489973][T16361] team_slave_1: left promiscuous mode [ 302.496058][T16361] bond8: left promiscuous mode [ 302.509283][T16369] nbd: must specify at least one socket [ 302.599082][T16354] lo speed is unknown, defaulting to 1000 [ 302.678192][T16272] hsr_slave_0: entered promiscuous mode [ 302.740566][T16272] hsr_slave_1: entered promiscuous mode [ 302.752257][T16272] debugfs: 'hsr0' already exists in 'hsr' [ 302.760047][T16272] Cannot create hsr debugfs directory [ 303.588143][T16404] can: request_module (can-proto-5) failed. [ 303.680689][T16416] pimreg: entered allmulticast mode [ 303.753510][T16419] __nla_validate_parse: 9 callbacks suppressed [ 303.753530][T16419] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2989'. [ 303.795368][T16419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 304.162312][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2996'. [ 304.172003][T16443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2996'. [ 304.196933][T16426] tipc: Started in network mode [ 304.203064][ T51] Bluetooth: hci0: command tx timeout [ 304.207873][T16426] tipc: Node identity 56bf1e95eae1, cluster identity 4711 [ 304.216031][T16426] tipc: Enabled bearer , priority 0 [ 304.252572][T16432] syzkaller0: entered promiscuous mode [ 304.268830][T16432] syzkaller0: entered allmulticast mode [ 304.428087][T16272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.451641][T16447] tipc: Resetting bearer [ 304.526064][T16272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.577268][T16425] tipc: Resetting bearer [ 304.621711][T16425] tipc: Disabling bearer [ 304.705985][T16272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.766072][T16272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 305.000716][T16468] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3004'. [ 305.045125][T16478] netlink: 'syz.4.3006': attribute type 10 has an invalid length. [ 305.054827][T16479] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3004'. [ 305.088201][T16468] gretap0: entered promiscuous mode [ 305.132984][T16479] 0{X: renamed from gretap0 [ 305.163611][T16479] 0{X: left promiscuous mode [ 305.168791][T16479] 0{X: entered allmulticast mode [ 305.188398][T16479] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 305.220966][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3008'. [ 305.254884][T16488] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3008'. [ 305.393778][T16272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.451691][T16272] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.629617][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.636844][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.694175][T16502] batman_adv: batadv0: Interface activated: wlan1 [ 305.735700][T14880] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.742996][T14880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.767586][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3012'. [ 305.818297][T16509] bridge1: entered promiscuous mode [ 305.843716][T16509] bridge1: entered allmulticast mode [ 306.285592][ T51] Bluetooth: hci0: command tx timeout [ 306.298210][T16532] netlink: 'syz.2.3021': attribute type 3 has an invalid length. [ 306.525413][T16545] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3024'. [ 306.565637][T16545] gretap0: entered promiscuous mode [ 306.578293][T16550] !: renamed from bond_slave_0 (while UP) [ 306.603211][T16272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.634937][T16548] 0{X: renamed from gretap0 [ 306.648688][T16548] 0{X: left promiscuous mode [ 306.671997][T16548] 0{X: entered allmulticast mode [ 306.694737][T16548] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 306.897705][T16564] team0: entered promiscuous mode [ 306.905249][T16564] team_slave_0: entered promiscuous mode [ 306.911343][T16564] team_slave_1: entered promiscuous mode [ 306.964217][T16564] team0: Cannot enslave team device to itself [ 306.979643][T16272] veth0_vlan: entered promiscuous mode [ 307.129746][T16272] veth1_vlan: entered promiscuous mode [ 307.218072][T16272] veth0_macvtap: entered promiscuous mode [ 307.265400][T16272] veth1_macvtap: entered promiscuous mode [ 307.314487][T16272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.369207][T16272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.433626][ T6451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.459559][ T6451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.487212][ T6451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.500490][ T6451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.702601][ T6456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.710459][ T6456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.841112][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.870989][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.057776][T16621] netlink: 'syz.2.3046': attribute type 1 has an invalid length. [ 308.072776][T16621] nbd: couldn't find device at index 1048576 [ 308.362484][ T51] Bluetooth: hci0: command tx timeout [ 308.789403][T16652] __nla_validate_parse: 7 callbacks suppressed [ 308.789421][T16652] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3057'. [ 308.845720][T16652] tc_dump_action: action bad kind [ 309.081027][T16663] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3059'. [ 309.119144][T16663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 309.252726][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.266627][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.282218][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.292680][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.306780][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.545408][ T6448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.569978][ T6448] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.600743][T16695] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3070'. [ 309.620406][T16678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.667917][T16698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3071'. [ 309.780366][ T6448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.781337][T16704] netlink: 'syz.3.3072': attribute type 3 has an invalid length. [ 309.799768][ T6448] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.874576][T16705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3072'. [ 310.006731][ T6448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.025420][ T6448] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.047441][T16671] lo speed is unknown, defaulting to 1000 [ 310.047492][T16705] bridge_slave_1: left allmulticast mode [ 310.061195][T16705] bridge_slave_1: left promiscuous mode [ 310.084901][T16705] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.103217][T16705] bridge_slave_0: left allmulticast mode [ 310.108972][T16705] bridge_slave_0: left promiscuous mode [ 310.120757][T16705] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.237366][T16711] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 310.249280][T16711] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 310.308486][ T6448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.332333][ T6448] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.391324][T16726] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 310.404430][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 310.416480][T16726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3080'. [ 311.035561][T16753] netlink: 'syz.3.3086': attribute type 1 has an invalid length. [ 311.348035][ T6448] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 311.356854][ T6448] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - ce:77:60:94:85:55 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 311.401904][ T5861] Bluetooth: hci1: command tx timeout [ 311.552913][ C1] ------------[ cut here ]------------ [ 311.562499][ C1] kernel BUG at arch/x86/mm/physaddr.c:28! [ 311.568373][ C1] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 311.574626][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.17.0-rc1-syzkaller-00108-g065c31f2c691 #0 PREEMPT(full) [ 311.586620][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 311.596666][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 311.601971][ C1] Code: 8d ae 00 e9 45 ff ff ff e8 c2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 50 a0 8a 03 e9 4d ff ff ff e8 a6 24 4b 00 90 <0f> 0b e8 9e 24 4b 00 90 0f 0b e8 96 24 4b 00 90 0f 0b 0f 1f 00 90 [ 311.621662][ C1] RSP: 0018:ffffc900001d7878 EFLAGS: 00010246 [ 311.627718][ C1] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801d2fda00 [ 311.635687][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 311.643667][ C1] RBP: ffffc900001d7b50 R08: 0000000000000000 R09: ffffffff81a7f827 [ 311.651642][ C1] R10: dffffc0000000000 R11: ffffffff8a01d920 R12: ffffffff8a01d920 [ 311.659625][ C1] R13: ffffffff81a7f827 R14: 000000017fff0000 R15: dffffc0000000000 [ 311.667595][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 311.676529][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.683283][ C1] CR2: 00007fd0b087af98 CR3: 0000000067178000 CR4: 00000000003526f0 [ 311.691247][ C1] Call Trace: [ 311.694521][ C1] [ 311.697439][ C1] ? in_dev_free_rcu+0x49/0x60 [ 311.702201][ C1] kfree+0x77/0x440 [ 311.705999][ C1] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 311.711283][ C1] ? rcu_core+0xc37/0x1770 [ 311.715713][ C1] in_dev_free_rcu+0x49/0x60 [ 311.720339][ C1] rcu_core+0xcab/0x1770 [ 311.724639][ C1] ? __lock_acquire+0xab9/0xd20 [ 311.729505][ C1] ? __pfx_rcu_core+0x10/0x10 [ 311.734194][ C1] ? rcu_qs+0xc4/0x170 [ 311.738254][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 311.743174][ C1] ? sched_clock_cpu+0x74/0x430 [ 311.748018][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 311.752769][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 311.757950][ C1] handle_softirqs+0x283/0x870 [ 311.762699][ C1] ? run_ksoftirqd+0x9b/0x100 [ 311.767358][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 311.772626][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 311.777637][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 311.782683][ C1] run_ksoftirqd+0x9b/0x100 [ 311.787173][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 311.792268][ C1] smpboot_thread_fn+0x53f/0xa60 [ 311.797185][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 311.802191][ C1] kthread+0x70e/0x8a0 [ 311.806248][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 311.811700][ C1] ? __pfx_kthread+0x10/0x10 [ 311.816275][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.821465][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.826678][ C1] ? __pfx_kthread+0x10/0x10 [ 311.831259][ C1] ret_from_fork+0x3f9/0x770 [ 311.835838][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 311.841024][ C1] ? __switch_to_asm+0x39/0x70 [ 311.845804][ C1] ? __switch_to_asm+0x33/0x70 [ 311.850555][ C1] ? __pfx_kthread+0x10/0x10 [ 311.855129][ C1] ret_from_fork_asm+0x1a/0x30 [ 311.859887][ C1] [ 311.862889][ C1] Modules linked in: [ 311.866829][ C1] ---[ end trace 0000000000000000 ]--- [ 311.872308][ C1] RIP: 0010:__phys_addr+0x16b/0x180 [ 311.877533][ C1] Code: 8d ae 00 e9 45 ff ff ff e8 c2 24 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 50 a0 8a 03 e9 4d ff ff ff e8 a6 24 4b 00 90 <0f> 0b e8 9e 24 4b 00 90 0f 0b e8 96 24 4b 00 90 0f 0b 0f 1f 00 90 [ 311.897187][ C1] RSP: 0018:ffffc900001d7878 EFLAGS: 00010246 [ 311.903298][ C1] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801d2fda00 [ 311.911280][ C1] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 311.919300][ C1] RBP: ffffc900001d7b50 R08: 0000000000000000 R09: ffffffff81a7f827 [ 311.927315][ C1] R10: dffffc0000000000 R11: ffffffff8a01d920 R12: ffffffff8a01d920 [ 311.935311][ C1] R13: ffffffff81a7f827 R14: 000000017fff0000 R15: dffffc0000000000 [ 311.943293][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 311.952239][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.958830][ C1] CR2: 00007fd0b087af98 CR3: 0000000067178000 CR4: 00000000003526f0 [ 311.966821][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 311.974291][ C1] Kernel Offset: disabled [ 311.978698][ C1] Rebooting in 86400 seconds..