last executing test programs: 7.358197295s ago: executing program 0 (id=1080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000870a000000000000637e00000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x10e, &(0x7f0000001a80)=""/270}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0xfff}, {&(0x7f00000011c0)="14d5", 0x2}], 0x2, 0xf) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) pwritev(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="0a2a9ab9bcbb4a9c354a256af5", 0xd}, {&(0x7f0000001600)="a18e58476679a4d96878b5546643b51114fedf6aabfd3d841a6dbd34b32a66118e7bed308e1c136eba08e5d75c38f57a21fd1c61f8c28518613d68933fb8d15d4c755fb51794c47b6da1ce8371f14e614d922fff053c41ae0409bb8e326c8dda594e90855177e95a9fa1c38b3705c77163bf24c5a5223b9dfa574131ae454c5a385f7ec374eb476108da5681247e401f7c96944c653f60e5d3b6affe76465707f632ea4e4c9316bb6e69e92d129db9630de16086f30dc84a86eba74582787ca8d7827c14cbef64fcbca3a33c3ceb2cbb70ec8d4fdf0cbc2bb55a5eb5bea42bff5b9f", 0xe2}, {&(0x7f00000001c0)="b34ee18e5afaa0d319adb7900d32aeecafc04cd5cda291b10da066c3fa061956ffd88a38f48ce378a08b0ad7c57d799e116b7b71", 0x34}, {&(0x7f0000000200)="079c2ae9ce67ea10fbe6db38ea8209f146dfbbd9c7c16af2a45bd9d6eb6b7042304687da7684b31aa2c3e1a362a9bb5fdded94115a70dbb3c2891048e8cba55880e1c6ee", 0x44}], 0x4, 0x8, 0x8100000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0xe}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x5c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711228000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={r1, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000012c0)=[0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000001340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001380), &(0x7f0000001400), 0x8, 0xc7, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001200)=@ipv4_newroute={0x50, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc8, 0x9, 0x2700}, [@RTA_METRICS={0x2c, 0x8, 0x0, 0x1, "1dc149c02fa997eef33e207950e64742b935c10af0abdd13877a47f2afa716494c9478c5099568a6"}, @RTA_IIF={0x8, 0x3, r5}]}, 0x50}}, 0x0) 7.194557149s ago: executing program 0 (id=1082): getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x99, 0x7, 0x0, 0x1, 0x5392, 0xc, 0x9, {0x0, @in6={{0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10}}, 0x81, 0x3, 0xc, 0x4b, 0x9}}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000002040)=0x8, 0x4) sendmmsg$inet6(r1, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x5, @remote, 0x7}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000500)="43400a0129a12fbf348e79b3b925f7cea7ed79a9b8629c023cfd2e053ac8bfaef3b308f2e03c95a7eb1648", 0xfff7}], 0x1}}], 0x1, 0x4001c00) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=r1, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7.172833975s ago: executing program 0 (id=1083): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 6.274789141s ago: executing program 2 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018150000", @ANYRES32=r0, @ANYBLOB="0000300200000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.244344659s ago: executing program 2 (id=1094): socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x13f32) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x613f, 0x81, 0x9cdbee1763468153, 0x3, 0x9}, 0x40}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0xa, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'vlan1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)='7', 0x4f, 0x2004c064, &(0x7f0000000040)={0x11, 0x1b, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8000f75d38e0d369bd7c50580", 0x1c}, {&(0x7f0000000000)="9c74dfbf770400000000", 0xa}], 0x2) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000011) 3.738955973s ago: executing program 0 (id=1109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 3.145353384s ago: executing program 1 (id=1111): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', 0xffffffffffffffff, 0x0, 0xb9b}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x8, &(0x7f0000000000)='S', 0x1) getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000100)=""/19, &(0x7f0000000080)=0x13) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r5, 0x10e, 0x7, &(0x7f0000000000)=""/46, &(0x7f0000000080)=0x2e) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELOBJ={0x3, 0x14, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0x9a, 0x8, "52cd9217c2081fb8d3721ccc9c9f3a6d56c3eb0e1eef8de4de0c49e11a6b25d38da0af59751a600611344be8b0aba64b5d0ad3a6f71bff88850d4e3b5415a539374ed030755226de489931e4ff606b11758288c55320302af12558348ca58f25854159c111fec184f552c0fcec43c2eaad4939dd377b8a46603a7d9186c92e67ee8e1b823e429fc9d9743d778f03e3a3eace2b447642"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1006}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x174}}, 0x0) 3.118336345s ago: executing program 2 (id=1112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='ext4_writepages\x00', r1}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r5 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r6, 0x4, 0xc, 0xd5, 0x6, 0x3ff}, &(0x7f00000001c0)=0x14) listen(r4, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000400)) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRES32=0x41424344, @ANYBLOB="80c200009078000004021e0aa000e00000010000"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80000) ioctl$SIOCX25GFACILITIES(r7, 0x89e2, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) 2.806800619s ago: executing program 1 (id=1114): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x30, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000000)="9df6d9166b78cf1d26784600d7609e34e6ec7438c123f9621250703c9f2e37892ed1ced0e5d47513e07dd585332288d92606faf3754fb39faeae020ffebd86e385f035984323c560b569322335f92b4387fd7cd4fc86869193948413f70eb11ff0fdf9") socket$inet_sctp(0x2, 0x1, 0x84) 2.798858342s ago: executing program 0 (id=1115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018150000", @ANYRES32=r0, @ANYBLOB="0000800400000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000014000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.736706508s ago: executing program 2 (id=1116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="0f000000fc6c5aab3642ad86ed155ffedb4b4c2e8f19d91e9602d531d8d3c147737aa531a8c5d27511547745683909eb02a16b6facab65ef7734e594b70cd47d6eadb6902d", @ANYRES16=r1, @ANYBLOB="000128bd7000fbdbdf250200000034000180140002006c6f00000000000000000000000000000800030000000000140002006d6163766c616e300000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x2}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x800, 0xfb4}) sendfile(r4, r3, 0x0, 0xf03a0005) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=@ipmr_newroute={0x4c, 0x18, 0x300, 0x70bd2d, 0x25dfdbfd, {0x80, 0x14, 0x20, 0x81, 0xfe, 0x1, 0xff, 0x6, 0x1000}, [@RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_PRIORITY={0x8, 0x6, 0x3}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_OIF={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0x4c}}, 0x45) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001d80)={'bond_slave_1\x00', &(0x7f0000001340)=@ethtool_per_queue_op={0x4b, 0x1, [0x7, 0xffff7fff, 0x6, 0x200fff, 0x8, 0x10001, 0x1, 0x28000, 0x8, 0x5, 0x9, 0x1ff, 0x1, 0xfffff001, 0x0, 0x5, 0x9, 0x6, 0x5, 0x1, 0x401, 0x1000, 0x4, 0xfffffff8, 0x0, 0x6cb, 0x2, 0x9, 0x4, 0xffffffff, 0x6, 0x50, 0x5, 0x0, 0x2, 0x5, 0xfffff001, 0x5, 0x8, 0x3, 0x2f2, 0x2, 0x9c, 0x7, 0x6, 0x4, 0x10, 0x1, 0x10001, 0x7, 0x75f, 0x10000, 0x1000, 0x0, 0x33, 0xb, 0xae4, 0x8, 0x5, 0x3, 0x7f, 0x88, 0x7, 0xffff7fff, 0x80, 0x6, 0x5, 0x8, 0x8, 0x28d, 0xdbae, 0x8, 0x7f, 0x9, 0x3, 0x1, 0x6f44, 0x2, 0x3, 0x9, 0x0, 0x40, 0x1, 0x6, 0x8, 0x5, 0xfff, 0x8, 0x7ff, 0xe5, 0x0, 0xf, 0x80b, 0x9, 0x8001, 0x7, 0x8, 0x8, 0x8, 0x5, 0x1, 0x9, 0x6, 0xa, 0x80000001, 0xfffffff8, 0x7fff, 0x3, 0x8001, 0x8001, 0x9398, 0x4, 0xf1, 0x4, 0x5, 0xfffffff9, 0x5, 0x7, 0x3, 0x1, 0x8, 0x0, 0x0, 0x400, 0x2, 0x2, 0x9de, 0xd534]}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000008a59bd5a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000009aaa000018150000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000080735af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.68577712s ago: executing program 1 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000003, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x25c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}, @TCA_POLICE_PEAKRATE={0x391, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x20000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8dc, 0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x7a1, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf3, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0xfffffffd, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x100]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x2e, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) socket$packet(0x11, 0x1, 0x300) 2.652667408s ago: executing program 0 (id=1119): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 2.569050438s ago: executing program 1 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000004}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x900, 0x4064}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0) 2.514780745s ago: executing program 2 (id=1121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000016010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 2.434075741s ago: executing program 2 (id=1122): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3ebc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x40010, 0xffffffffffffffff, 0x0) 2.380020702s ago: executing program 1 (id=1123): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x400, [0x56, 0x1, 0x7, 0x400, 0x2, 0x6]}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r4, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000005c0)=""/76, 0x4c}, {&(0x7f0000000640)=""/238, 0xee}], 0x2, &(0x7f0000000780)=""/178, 0xb2}, 0xfffffff1}, {{&(0x7f0000000880)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001b40), 0x0, &(0x7f0000001a00)=""/165, 0xa5}, 0x7b7}], 0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x1, 0xd, 0x1, 0x9, 0x40, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x5b}, @generic={0x5, 0x3, 0x5, 0x2, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x1, 0x0, 0x1, 0x4, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x49, 0x0, 0x0) close(0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x2, 0x41, 0x0, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f0000000300)=@name={0x1e, 0x2, 0x2, {{}, 0x3}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000004c0)="372ccf99527daed1d0c25f646ac97ac7a694a4fba5e859e7d0d7fbcd380e37ae2b8fe57c811e4e516576fe14d2300ea7a2118f237c06e00dac44f4fb44d34822643f65c6f9b6ba96f888f553224053103f7d99ce4da788e0e0025c38b0cc47ed75a7f19b6c976c37aeebbdbe9f46a4f58177ce503eb8736575569865d751be1c15bbe970dbb993a6be3c29a356c676b029622c2c127c53b1171c42a1d5e5ff636497661b10d90e7d9c6f6843fc3b8436d5034de3e3580f70fdaa3e76c0cc17e3315080969c17997794f764b8cb76e4ef94f34f7542274d8d8a384807814628", 0xdf}], 0x1, &(0x7f0000000900)="76a4fc4eee8326ec604a1f0c1ebeaa2af267eb822d32b41c3a019c596af97cc03b4947b55b91ae766ac4f1aff38724bb429887c43a60be6f2266532c7208809c12300f752735476614bbf2790c8e76532b69aec5f4ca809e7847cd6a4391855d37057107ade94e58cc1178045bdb7eceaffbb20d52cada39f2aed1557157a5cb52ec2e192dddd3301bc34c0a52a94b10cdd5a09b76b2935abdb491", 0x9b, 0x4000001}, 0xc0880) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r9, 0x4018f50b, &(0x7f0000000040)={0x0, 0x7, 0xfffffffffffffff7}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x20, 0x10, 0x401}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) 2.28072s ago: executing program 3 (id=1124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e25, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000001440)="95", 0x1}], 0x1}}], 0x2, 0x20000004) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x40}}, 0x2, 0x9}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002880)={0x0}) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) shutdown(r3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 1.868017444s ago: executing program 1 (id=1127): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x4c, 0x0, 0x200, 0x470bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x10, 0x3, 0xc) unshare(0x40020000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, 0x0) unshare(0xc4050200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085580000bb0000006d0000000000000018000040f7ff000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35}, 0x90) 1.814752018s ago: executing program 3 (id=1128): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) 1.570737327s ago: executing program 3 (id=1129): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket$inet(0x2, 0x4, 0x4) recvfrom$inet(r1, &(0x7f00000001c0), 0x0, 0x2002, &(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={r0, 0x1, 0x0, 0x2}) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x410, 0x110, 0x218, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000480), {[{{@arp={@remote, @multicast1, 0xffffff00, 0xffffffff, 0x4, 0x9, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff]}}, 0x7, 0x7, 0x0, 0x0, 0x2, 0x3ff, '\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x3f}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @remote, @local, 0x5, 0xffffffff}}}, {{@arp={@empty, @private=0xa010100, 0xffffffff, 0xff000000, 0x1, 0xb, {@empty, {[0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x40f6, 0x7, 0x3, 0x8, 0x0, 0x7, 'ip6tnl0\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x252}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x9, 'syz1\x00', {0x74}}}}, {{@arp={@private=0xa010102, @broadcast, 0xff000000, 0xff000000, 0x6, 0x2, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0xff, 0xff, 0x1fe, 0xbf26814404a2db71]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0xfff8, 0x4, 0xd42, 0x4, 0x1, 0xe, '\x00', 'veth0_vlan\x00', {}, {0x33d8b92cd6f562b5}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="18cd761c4deb9b737f0649d40a8bfe01e87e1251a04885921b607606eb95920bd2b5bc2289c0c59258202619e72c20aac5d99b15694013f63661deed8dd13ef16846079da81c9e7d719841620d0d6407e775e2e1", 0x54}, {&(0x7f00000002c0)="f5310503863226286f4d000cca9e00ac4fcb298360ccfbc5ddf6dd99192fd538a1296339b87b3e7949a44f39f6143d3fab72fbc61a362903cecc837bf2d4b06f0b9ce6", 0x43}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000181000000000000017010000040000000104000000000000480000000000000017010000020000002e000000c70db55ad7a08dfa904f7ec01d06dba2204cad1c60442a92720f46c00f0151a714557b4ece0d7deeed1da20efc6e00000000000000a023677e1e52e36bdaada63e6a3b8f77b0d2195042e92e0511cf358e3cba9636cb965f886ec3f589c9d9ca6fcf75cca5f84b9d00bd4fa6820865bde1d5548d905c2e3025ee64b9b6b509f13a9b672c423f9d8a3d1fa9d8dd5057f707c1d9ffbaa03bd347646fc4518ddb526f81310333e3608bd7a712404a2f3ae8076eeacfaac77df5995f"], 0x78, 0x8841}, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0xb6, 0x2, 0x8, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x40, 0x5f81, 0x2}}) 1.230272588s ago: executing program 3 (id=1131): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) r2 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x200000000114, 0x5, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xfffffffffffffeb7) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000001c0)={{0x2, 0xe65}, 0x41}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc7, '\x00', 0x86dc, 0x3, 0x100, 0xc}}}}]}, 0x48}}, 0x40400f0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000200)={'security\x00', 0x0, [0x6, 0x8001, 0x4, 0x0, 0x4000]}, &(0x7f0000000380)=0x54) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r9}, 0x18) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000010000104008077c537b92e8191773393", @ANYRES32=0x0, @ANYBLOB="03800000000000001400128009000100766574680000000004000280"], 0x34}}, 0x0) 1.082933482s ago: executing program 4 (id=1132): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000018010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) 944.421168ms ago: executing program 4 (id=1133): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ce857675ddd3284c010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_val={0x18, 0x9, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x33092cfa}, @map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0xf, 0x3, 0xfffffffffffffff4, 0x4}, @call={0x85, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0xf7, &(0x7f0000000500)=""/247, 0x41000, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x9, 0x5, 0x4935f59e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r11, @ANYBLOB="200001"], 0x38}}, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r10, 0x29, 0xd3, &(0x7f0000000780)={{0xa, 0x4e24, 0x6, @local, 0x7}, {0xa, 0x4e24, 0x8001, @local, 0xd}, 0x0, {[0xa, 0x336d, 0x3, 0x10, 0x5, 0x869d, 0xd, 0x2]}}, 0x5c) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="ce857675ddd3284c010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600), 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff}, [@map_val={0x18, 0x9, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x33092cfa}, @map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x6, 0xf, 0x3, 0xfffffffffffffff4, 0x4}, @call={0x85, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0xf7, &(0x7f0000000500)=""/247, 0x41000, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x9, 0x5, 0x4935f59e}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000600000008000300", @ANYRES32], 0x1c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r11, @ANYBLOB="200001"], 0x38}}, 0x0) (async) setsockopt$MRT6_DEL_MFC_PROXY(r10, 0x29, 0xd3, &(0x7f0000000780)={{0xa, 0x4e24, 0x6, @local, 0x7}, {0xa, 0x4e24, 0x8001, @local, 0xd}, 0x0, {[0xa, 0x336d, 0x3, 0x10, 0x5, 0x869d, 0xd, 0x2]}}, 0x5c) (async) 848.81233ms ago: executing program 3 (id=1134): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) (async, rerun: 64) r4 = socket(0x2, 0x80802, 0x0) (async, rerun: 64) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000001c0)) (async, rerun: 32) shutdown(r4, 0x0) (async, rerun: 32) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) close(r3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async, rerun: 32) r11 = socket$unix(0x1, 0x2, 0x0) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000006800010003001000fdffff7f00000000000000000c000200010000001500000024000c8008000300ff7fffff08000280d91700000600010005000000060001000b0000000600030001"], 0x50}, 0x1, 0x0, 0x0, 0xc018}, 0x4000080) 654.67944ms ago: executing program 4 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1030, 0x13, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0xc, 0x142, 0x0, 0x1, [@nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}, @nested={0x1008, 0x2, 0x0, 0x1, [@typed={0x1004, 0x113, 0x0, 0x0, @binary="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"}]}, @typed={0x6, 0xad, 0x0, 0x0, @str='\x80\n'}]}, 0x1030}, 0x1, 0x0, 0x0, 0xc000}, 0x80) 555.061778ms ago: executing program 3 (id=1136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf0}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 460.911625ms ago: executing program 4 (id=1137): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f0000000280)=0x100, 0x4) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)="8555bd", 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000080)=0x10, 0x4) bind$can_raw(r2, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={0x0, 0xd8}}, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) 206.702637ms ago: executing program 4 (id=1138): r0 = socket(0x10, 0x800, 0x200) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r1, 0x890c, &(0x7f0000000840)={0x0, {0x2, 0x4e25, @empty}, {0x2, 0x44, @broadcast}, {0x2, 0x4e2f, @broadcast}, 0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='lo\x00', 0xffffffff}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000001040)=[{}], &(0x7f0000000100)=0x41) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000002050005000204000005000400000000000c00078010000005000100070000000900020073797a300000e7000d0003006800"/68], 0x54}}, 0x8000) (async) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendto$inet(0xffffffffffffffff, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) (async) getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @broadcast}, 0x14) close(r0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x234, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x57, 0x3, "9c69a3c6054fac5405b6734493bc1edb4e6916dfe828741414637781efe5fb0c9f2e054842cb849a062ec9a20225a1280ae9245807096ec71c615084c177d113da3213e0e2d90ccabbd64da2ff86383c9bce9c"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x62, 0x3, "c1e81d6e198aef86c9ab272eb64c4ae0c919b67be654dd22cfcdd5cf2539fff43950fe623e6b0b09c384f1c40847b095728105ccbb169c0328e2255514e34ad4a2cde44bf9fb25a996143cd8e63981d0046ca6d601e3d0e51798d8c8cc84"}]}, @TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc15}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "2f46fff302b04d157f1258d3b2e3f032bb2bc89c859b66920357cf4e4a1b82"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x54}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x6c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4b, 0x3, "ace869400482559d994751a858274f82654fbcb6f82cfd7ec800ba5f2d09d31b72d8bc7b622f5ec0f0f868e32ff89b2dbd4474e3602a8fcce4ce7793093b5967df1a7bba01ae1f"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x4081}, 0x90) 0s ago: executing program 4 (id=1139): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x20004040) kernel console output (not intermixed with test programs): after_hwframe+0x77/0x7f [ 220.159979][ T7371] RIP: 0033:0x7f77c158ebe9 [ 220.159997][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.160013][ T7371] RSP: 002b:00007f77c247d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.160035][ T7371] RAX: ffffffffffffffda RBX: 00007f77c17b5fa0 RCX: 00007f77c158ebe9 [ 220.160049][ T7371] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 220.160061][ T7371] RBP: 00007f77c1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 220.160072][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.160083][ T7371] R13: 00007f77c17b6038 R14: 00007f77c17b5fa0 R15: 00007ffdbc1c6e58 [ 220.160117][ T7371] [ 220.943146][ T7378] __nla_validate_parse: 10 callbacks suppressed [ 220.943167][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'. [ 220.982761][ T7380] sctp: [Deprecated]: syz.0.333 (pid 7380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.982761][ T7380] Use struct sctp_sack_info instead [ 221.011093][ T7383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.331'. [ 221.096020][ T7383] netlink: 260 bytes leftover after parsing attributes in process `syz.3.331'. [ 221.130764][ T7380] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 221.171261][ T7380] CPU: 0 UID: 0 PID: 7380 Comm: syz.0.333 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 221.171292][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.171304][ T7380] Call Trace: [ 221.171313][ T7380] [ 221.171322][ T7380] dump_stack_lvl+0x189/0x250 [ 221.171355][ T7380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.171378][ T7380] ? __pfx__printk+0x10/0x10 [ 221.171412][ T7380] ? kernfs_path_from_node+0x2f/0x290 [ 221.171435][ T7380] ? kernfs_path_from_node+0x250/0x290 [ 221.171457][ T7380] ? kernfs_path_from_node+0x2f/0x290 [ 221.171494][ T7380] sysfs_warn_dup+0x8e/0xa0 [ 221.171517][ T7380] sysfs_do_create_link_sd+0xc0/0x110 [ 221.171543][ T7380] device_add_class_symlinks+0x1cf/0x240 [ 221.171571][ T7380] device_add+0x475/0xb50 [ 221.171597][ T7380] wiphy_register+0x1ba6/0x28d0 [ 221.171646][ T7380] ? __pfx_wiphy_register+0x10/0x10 [ 221.171674][ T7380] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 221.171705][ T7380] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 221.171746][ T7380] ieee80211_register_hw+0x3425/0x4080 [ 221.171788][ T7380] ? ieee80211_register_hw+0x14b1/0x4080 [ 221.171821][ T7380] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 221.171848][ T7380] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.171884][ T7380] ? __hrtimer_setup+0x187/0x210 [ 221.171903][ T7380] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 221.171936][ T7380] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 221.172000][ T7380] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 221.172025][ T7380] ? trace_kmalloc+0x1f/0xd0 [ 221.172049][ T7380] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 221.172079][ T7380] ? kstrndup+0xbf/0x160 [ 221.172113][ T7380] hwsim_new_radio_nl+0xea4/0x1b10 [ 221.172143][ T7380] ? __pfx___nla_validate_parse+0x10/0x10 [ 221.172192][ T7380] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.172234][ T7380] ? __nla_parse+0x40/0x60 [ 221.172275][ T7380] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 221.172321][ T7380] genl_family_rcv_msg_doit+0x215/0x300 [ 221.172351][ T7380] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.172409][ T7380] ? bpf_lsm_capable+0x9/0x20 [ 221.172436][ T7380] ? security_capable+0x7e/0x2e0 [ 221.172480][ T7380] genl_rcv_msg+0x60e/0x790 [ 221.172512][ T7380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.172534][ T7380] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 221.172579][ T7380] netlink_rcv_skb+0x205/0x470 [ 221.172605][ T7380] ? __lock_acquire+0xab9/0xd20 [ 221.172637][ T7380] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.172662][ T7380] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.172716][ T7380] ? down_read+0x1ad/0x2e0 [ 221.172738][ T7380] genl_rcv+0x28/0x40 [ 221.172758][ T7380] netlink_unicast+0x82c/0x9e0 [ 221.172796][ T7380] ? __pfx_netlink_unicast+0x10/0x10 [ 221.172826][ T7380] ? netlink_sendmsg+0x642/0xb30 [ 221.172854][ T7380] ? skb_put+0x11b/0x210 [ 221.172877][ T7380] netlink_sendmsg+0x805/0xb30 [ 221.172920][ T7380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.172955][ T7380] ? aa_sock_msg_perm+0xf1/0x1d0 [ 221.172989][ T7380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.173010][ T7380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.173042][ T7380] __sock_sendmsg+0x219/0x270 [ 221.173073][ T7380] ____sys_sendmsg+0x505/0x830 [ 221.173101][ T7380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.173134][ T7380] ? import_iovec+0x74/0xa0 [ 221.173161][ T7380] ___sys_sendmsg+0x21f/0x2a0 [ 221.173203][ T7380] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.173289][ T7380] ? __fget_files+0x2a/0x420 [ 221.173306][ T7380] ? __fget_files+0x3a0/0x420 [ 221.173338][ T7380] __x64_sys_sendmsg+0x19b/0x260 [ 221.173364][ T7380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.173398][ T7380] ? rcu_is_watching+0x15/0xb0 [ 221.173426][ T7380] ? do_syscall_64+0xbe/0x3b0 [ 221.173462][ T7380] do_syscall_64+0xfa/0x3b0 [ 221.173496][ T7380] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.173524][ T7380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.173544][ T7380] ? clear_bhb_loop+0x60/0xb0 [ 221.173570][ T7380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.173590][ T7380] RIP: 0033:0x7f77c158ebe9 [ 221.173610][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.173639][ T7380] RSP: 002b:00007f77c247d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.173662][ T7380] RAX: ffffffffffffffda RBX: 00007f77c17b5fa0 RCX: 00007f77c158ebe9 [ 221.173676][ T7380] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 221.173688][ T7380] RBP: 00007f77c1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 221.173699][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.173710][ T7380] R13: 00007f77c17b6038 R14: 00007f77c17b5fa0 R15: 00007ffdbc1c6e58 [ 221.173746][ T7380] [ 221.760925][ T7391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.953413][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 222.026898][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 222.083017][ T7398] netlink: 128 bytes leftover after parsing attributes in process `syz.3.337'. [ 222.745625][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 222.825057][ T7424] netlink: 'syz.4.346': attribute type 6 has an invalid length. [ 222.871027][ T7430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.883955][ T7431] sctp: [Deprecated]: syz.2.348 (pid 7431) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.883955][ T7431] Use struct sctp_sack_info instead [ 222.948766][ T7431] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 222.968741][ T7431] CPU: 1 UID: 0 PID: 7431 Comm: syz.2.348 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 222.968769][ T7431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.968781][ T7431] Call Trace: [ 222.968789][ T7431] [ 222.968798][ T7431] dump_stack_lvl+0x189/0x250 [ 222.968831][ T7431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.968857][ T7431] ? __pfx__printk+0x10/0x10 [ 222.968894][ T7431] ? kernfs_path_from_node+0x2f/0x290 [ 222.968916][ T7431] ? kernfs_path_from_node+0x250/0x290 [ 222.968936][ T7431] ? kernfs_path_from_node+0x2f/0x290 [ 222.968962][ T7431] sysfs_warn_dup+0x8e/0xa0 [ 222.968984][ T7431] sysfs_do_create_link_sd+0xc0/0x110 [ 222.969009][ T7431] device_add_class_symlinks+0x1cf/0x240 [ 222.969045][ T7431] device_add+0x475/0xb50 [ 222.969070][ T7431] wiphy_register+0x1ba6/0x28d0 [ 222.969116][ T7431] ? __pfx_wiphy_register+0x10/0x10 [ 222.969141][ T7431] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 222.969169][ T7431] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 222.969206][ T7431] ieee80211_register_hw+0x3425/0x4080 [ 222.969246][ T7431] ? ieee80211_register_hw+0x14b1/0x4080 [ 222.969275][ T7431] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 222.969301][ T7431] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.969335][ T7431] ? __hrtimer_setup+0x187/0x210 [ 222.969352][ T7431] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 222.969390][ T7431] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 222.969447][ T7431] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 222.969470][ T7431] ? trace_kmalloc+0x1f/0xd0 [ 222.969493][ T7431] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 222.969520][ T7431] ? kstrndup+0xbf/0x160 [ 222.969550][ T7431] hwsim_new_radio_nl+0xea4/0x1b10 [ 222.969579][ T7431] ? __pfx___nla_validate_parse+0x10/0x10 [ 222.969625][ T7431] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 222.969663][ T7431] ? __nla_parse+0x40/0x60 [ 222.969695][ T7431] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 222.969728][ T7431] genl_family_rcv_msg_doit+0x215/0x300 [ 222.969762][ T7431] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 222.969800][ T7431] ? bpf_lsm_capable+0x9/0x20 [ 222.969824][ T7431] ? security_capable+0x7e/0x2e0 [ 222.969859][ T7431] genl_rcv_msg+0x60e/0x790 [ 222.969887][ T7431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.969906][ T7431] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 222.969944][ T7431] netlink_rcv_skb+0x205/0x470 [ 222.969968][ T7431] ? __lock_acquire+0xab9/0xd20 [ 222.969997][ T7431] ? __pfx_genl_rcv_msg+0x10/0x10 [ 222.970018][ T7431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.970065][ T7431] ? down_read+0x1ad/0x2e0 [ 222.970085][ T7431] genl_rcv+0x28/0x40 [ 222.970103][ T7431] netlink_unicast+0x82c/0x9e0 [ 222.970140][ T7431] ? __pfx_netlink_unicast+0x10/0x10 [ 222.970167][ T7431] ? netlink_sendmsg+0x642/0xb30 [ 222.970193][ T7431] ? skb_put+0x11b/0x210 [ 222.970215][ T7431] netlink_sendmsg+0x805/0xb30 [ 222.970253][ T7431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.970285][ T7431] ? aa_sock_msg_perm+0xf1/0x1d0 [ 222.970316][ T7431] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.970336][ T7431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.970372][ T7431] __sock_sendmsg+0x219/0x270 [ 222.970401][ T7431] ____sys_sendmsg+0x505/0x830 [ 222.970427][ T7431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.970458][ T7431] ? import_iovec+0x74/0xa0 [ 222.970483][ T7431] ___sys_sendmsg+0x21f/0x2a0 [ 222.970524][ T7431] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.970590][ T7431] ? __fget_files+0x2a/0x420 [ 222.970608][ T7431] ? __fget_files+0x3a0/0x420 [ 222.970638][ T7431] __x64_sys_sendmsg+0x19b/0x260 [ 222.970663][ T7431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.970697][ T7431] ? rcu_is_watching+0x15/0xb0 [ 222.970725][ T7431] ? do_syscall_64+0xbe/0x3b0 [ 222.970760][ T7431] do_syscall_64+0xfa/0x3b0 [ 222.970788][ T7431] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.970815][ T7431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.970834][ T7431] ? clear_bhb_loop+0x60/0xb0 [ 222.970859][ T7431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.970879][ T7431] RIP: 0033:0x7f9c5178ebe9 [ 222.970897][ T7431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.970914][ T7431] RSP: 002b:00007f9c525d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.970935][ T7431] RAX: ffffffffffffffda RBX: 00007f9c519b6090 RCX: 00007f9c5178ebe9 [ 222.970982][ T7431] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 222.970995][ T7431] RBP: 00007f9c51811e19 R08: 0000000000000000 R09: 0000000000000000 [ 222.971006][ T7431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.971034][ T7431] R13: 00007f9c519b6128 R14: 00007f9c519b6090 R15: 00007ffd493b46f8 [ 222.971070][ T7431] [ 223.093976][ T7435] netlink: 'syz.4.350': attribute type 8 has an invalid length. [ 223.291312][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.357455][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 223.470137][ T7433] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 223.505343][ T7433] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 223.599719][ T7435] bond0: entered promiscuous mode [ 223.621657][ T7435] bond_slave_0: entered promiscuous mode [ 223.631194][ T7435] bond_slave_1: entered promiscuous mode [ 223.638763][ T7435] bond0: left promiscuous mode [ 223.643672][ T7435] bond_slave_0: left promiscuous mode [ 223.649960][ T7435] bond_slave_1: left promiscuous mode [ 223.845430][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 223.874283][ T7442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.146846][ T7467] sctp: [Deprecated]: syz.4.359 (pid 7467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.146846][ T7467] Use struct sctp_sack_info instead [ 224.388849][ T7476] netlink: 104 bytes leftover after parsing attributes in process `syz.2.362'. [ 224.485751][ T7473] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.788217][ T7487] sctp: [Deprecated]: syz.3.365 (pid 7487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.788217][ T7487] Use struct sctp_sack_info instead [ 224.825911][ T7485] netlink: 'syz.4.364': attribute type 18 has an invalid length. [ 224.859944][ T7487] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 224.873849][ T7487] CPU: 1 UID: 0 PID: 7487 Comm: syz.3.365 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 224.873880][ T7487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.873893][ T7487] Call Trace: [ 224.873901][ T7487] [ 224.873910][ T7487] dump_stack_lvl+0x189/0x250 [ 224.873946][ T7487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.873972][ T7487] ? __pfx__printk+0x10/0x10 [ 224.874020][ T7487] ? kernfs_path_from_node+0x2f/0x290 [ 224.874043][ T7487] ? kernfs_path_from_node+0x250/0x290 [ 224.874063][ T7487] ? kernfs_path_from_node+0x2f/0x290 [ 224.874090][ T7487] sysfs_warn_dup+0x8e/0xa0 [ 224.874119][ T7487] sysfs_do_create_link_sd+0xc0/0x110 [ 224.874144][ T7487] device_add_class_symlinks+0x1cf/0x240 [ 224.874171][ T7487] device_add+0x475/0xb50 [ 224.874197][ T7487] wiphy_register+0x1ba6/0x28d0 [ 224.874246][ T7487] ? __pfx_wiphy_register+0x10/0x10 [ 224.874272][ T7487] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 224.874302][ T7487] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 224.874344][ T7487] ieee80211_register_hw+0x3425/0x4080 [ 224.874385][ T7487] ? ieee80211_register_hw+0x14b1/0x4080 [ 224.874418][ T7487] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 224.874456][ T7487] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 224.874507][ T7487] ? __hrtimer_setup+0x187/0x210 [ 224.874525][ T7487] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 224.874558][ T7487] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 224.874616][ T7487] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 224.874640][ T7487] ? trace_kmalloc+0x1f/0xd0 [ 224.874665][ T7487] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 224.874693][ T7487] ? kstrndup+0xbf/0x160 [ 224.874726][ T7487] hwsim_new_radio_nl+0xea4/0x1b10 [ 224.874756][ T7487] ? __pfx___nla_validate_parse+0x10/0x10 [ 224.874804][ T7487] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 224.874854][ T7487] ? __nla_parse+0x40/0x60 [ 224.874886][ T7487] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 224.874918][ T7487] genl_family_rcv_msg_doit+0x215/0x300 [ 224.874948][ T7487] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 224.874985][ T7487] ? bpf_lsm_capable+0x9/0x20 [ 224.875010][ T7487] ? security_capable+0x7e/0x2e0 [ 224.875046][ T7487] genl_rcv_msg+0x60e/0x790 [ 224.875074][ T7487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.875101][ T7487] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 224.875143][ T7487] netlink_rcv_skb+0x205/0x470 [ 224.875168][ T7487] ? __lock_acquire+0xab9/0xd20 [ 224.875197][ T7487] ? __pfx_genl_rcv_msg+0x10/0x10 [ 224.875220][ T7487] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 224.875270][ T7487] ? down_read+0x1ad/0x2e0 [ 224.875290][ T7487] genl_rcv+0x28/0x40 [ 224.875309][ T7487] netlink_unicast+0x82c/0x9e0 [ 224.875363][ T7487] ? __pfx_netlink_unicast+0x10/0x10 [ 224.875392][ T7487] ? netlink_sendmsg+0x642/0xb30 [ 224.875419][ T7487] ? skb_put+0x11b/0x210 [ 224.875443][ T7487] netlink_sendmsg+0x805/0xb30 [ 224.875485][ T7487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.875518][ T7487] ? aa_sock_msg_perm+0xf1/0x1d0 [ 224.875552][ T7487] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 224.875572][ T7487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.875603][ T7487] __sock_sendmsg+0x219/0x270 [ 224.875633][ T7487] ____sys_sendmsg+0x505/0x830 [ 224.875660][ T7487] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.875693][ T7487] ? import_iovec+0x74/0xa0 [ 224.875722][ T7487] ___sys_sendmsg+0x21f/0x2a0 [ 224.875747][ T7487] ? __pfx____sys_sendmsg+0x10/0x10 [ 224.875811][ T7487] ? __fget_files+0x2a/0x420 [ 224.875828][ T7487] ? __fget_files+0x3a0/0x420 [ 224.875859][ T7487] __x64_sys_sendmsg+0x19b/0x260 [ 224.875893][ T7487] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 224.875926][ T7487] ? rcu_is_watching+0x15/0xb0 [ 224.875953][ T7487] ? do_syscall_64+0xbe/0x3b0 [ 224.875985][ T7487] do_syscall_64+0xfa/0x3b0 [ 224.876011][ T7487] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.876037][ T7487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.876055][ T7487] ? clear_bhb_loop+0x60/0xb0 [ 224.876079][ T7487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.876105][ T7487] RIP: 0033:0x7fc870d8ebe9 [ 224.876122][ T7487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.876138][ T7487] RSP: 002b:00007fc871ba4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.876158][ T7487] RAX: ffffffffffffffda RBX: 00007fc870fb5fa0 RCX: 00007fc870d8ebe9 [ 224.876171][ T7487] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 224.876182][ T7487] RBP: 00007fc870e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 224.876194][ T7487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.876205][ T7487] R13: 00007fc870fb6038 R14: 00007fc870fb5fa0 R15: 00007fff20597118 [ 224.876237][ T7487] [ 225.971503][ T7508] __nla_validate_parse: 4 callbacks suppressed [ 225.971522][ T7508] netlink: 256 bytes leftover after parsing attributes in process `syz.1.371'. [ 226.130929][ T7514] netlink: 'syz.4.373': attribute type 32 has an invalid length. [ 226.180177][ T7514] netlink: 60 bytes leftover after parsing attributes in process `syz.4.373'. [ 226.369300][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 226.430855][ T7517] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 227.060401][ T7553] sctp: [Deprecated]: syz.2.380 (pid 7553) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.060401][ T7553] Use struct sctp_sack_info instead [ 227.148881][ T7556] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 227.193124][ T7556] CPU: 0 UID: 0 PID: 7556 Comm: syz.2.380 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 227.193155][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 227.193168][ T7556] Call Trace: [ 227.193176][ T7556] [ 227.193186][ T7556] dump_stack_lvl+0x189/0x250 [ 227.193221][ T7556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.193247][ T7556] ? __pfx__printk+0x10/0x10 [ 227.193285][ T7556] ? kernfs_path_from_node+0x2f/0x290 [ 227.193308][ T7556] ? kernfs_path_from_node+0x250/0x290 [ 227.193329][ T7556] ? kernfs_path_from_node+0x2f/0x290 [ 227.193362][ T7556] sysfs_warn_dup+0x8e/0xa0 [ 227.193385][ T7556] sysfs_do_create_link_sd+0xc0/0x110 [ 227.193411][ T7556] device_add_class_symlinks+0x1cf/0x240 [ 227.193439][ T7556] device_add+0x475/0xb50 [ 227.193466][ T7556] wiphy_register+0x1ba6/0x28d0 [ 227.193518][ T7556] ? __pfx_wiphy_register+0x10/0x10 [ 227.193546][ T7556] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 227.193578][ T7556] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 227.193618][ T7556] ieee80211_register_hw+0x3425/0x4080 [ 227.193670][ T7556] ? ieee80211_register_hw+0x14b1/0x4080 [ 227.193704][ T7556] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 227.193732][ T7556] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 227.193781][ T7556] ? __hrtimer_setup+0x187/0x210 [ 227.193799][ T7556] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 227.193832][ T7556] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 227.193901][ T7556] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 227.193924][ T7556] ? trace_kmalloc+0x1f/0xd0 [ 227.193945][ T7556] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 227.193971][ T7556] ? kstrndup+0xbf/0x160 [ 227.194002][ T7556] hwsim_new_radio_nl+0xea4/0x1b10 [ 227.194031][ T7556] ? __pfx___nla_validate_parse+0x10/0x10 [ 227.194076][ T7556] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 227.194116][ T7556] ? __nla_parse+0x40/0x60 [ 227.194149][ T7556] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 227.194181][ T7556] genl_family_rcv_msg_doit+0x215/0x300 [ 227.194212][ T7556] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 227.194249][ T7556] ? bpf_lsm_capable+0x9/0x20 [ 227.194274][ T7556] ? security_capable+0x7e/0x2e0 [ 227.194309][ T7556] genl_rcv_msg+0x60e/0x790 [ 227.194337][ T7556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.194356][ T7556] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 227.194395][ T7556] netlink_rcv_skb+0x205/0x470 [ 227.194419][ T7556] ? __lock_acquire+0xab9/0xd20 [ 227.194446][ T7556] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.194468][ T7556] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.194517][ T7556] ? down_read+0x1ad/0x2e0 [ 227.194537][ T7556] genl_rcv+0x28/0x40 [ 227.194556][ T7556] netlink_unicast+0x82c/0x9e0 [ 227.194590][ T7556] ? __pfx_netlink_unicast+0x10/0x10 [ 227.194617][ T7556] ? netlink_sendmsg+0x642/0xb30 [ 227.194650][ T7556] ? skb_put+0x11b/0x210 [ 227.194673][ T7556] netlink_sendmsg+0x805/0xb30 [ 227.194712][ T7556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.194745][ T7556] ? aa_sock_msg_perm+0xf1/0x1d0 [ 227.194776][ T7556] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 227.194796][ T7556] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.194825][ T7556] __sock_sendmsg+0x219/0x270 [ 227.194853][ T7556] ____sys_sendmsg+0x505/0x830 [ 227.194879][ T7556] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.194910][ T7556] ? import_iovec+0x74/0xa0 [ 227.194936][ T7556] ___sys_sendmsg+0x21f/0x2a0 [ 227.194959][ T7556] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.195030][ T7556] ? __fget_files+0x2a/0x420 [ 227.195062][ T7556] ? __fget_files+0x3a0/0x420 [ 227.195090][ T7556] __x64_sys_sendmsg+0x19b/0x260 [ 227.195113][ T7556] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.195144][ T7556] ? rcu_is_watching+0x15/0xb0 [ 227.195169][ T7556] ? do_syscall_64+0xbe/0x3b0 [ 227.195203][ T7556] do_syscall_64+0xfa/0x3b0 [ 227.195228][ T7556] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.195254][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.195273][ T7556] ? clear_bhb_loop+0x60/0xb0 [ 227.195296][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.195315][ T7556] RIP: 0033:0x7f9c5178ebe9 [ 227.195333][ T7556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.195348][ T7556] RSP: 002b:00007f9c525b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.195368][ T7556] RAX: ffffffffffffffda RBX: 00007f9c519b6180 RCX: 00007f9c5178ebe9 [ 227.195382][ T7556] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 227.195394][ T7556] RBP: 00007f9c51811e19 R08: 0000000000000000 R09: 0000000000000000 [ 227.195405][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.195416][ T7556] R13: 00007f9c519b6218 R14: 00007f9c519b6180 R15: 00007ffd493b46f8 [ 227.195450][ T7556] [ 228.120809][ T7585] netlink: 28 bytes leftover after parsing attributes in process `syz.4.390'. [ 228.130056][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 228.148657][ T7585] netlink: 128 bytes leftover after parsing attributes in process `syz.4.390'. [ 228.437640][ T7597] netlink: 'syz.3.392': attribute type 32 has an invalid length. [ 228.484443][ T7597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.392'. [ 228.585947][ T7607] sctp: [Deprecated]: syz.1.396 (pid 7607) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.585947][ T7607] Use struct sctp_sack_info instead [ 228.617045][ T7606] vlan2: entered promiscuous mode [ 228.637670][ T7606] vlan2: entered allmulticast mode [ 228.667199][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.394'. [ 228.679283][ T7606] hsr_slave_1: entered allmulticast mode [ 228.723841][ T7607] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 228.751903][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 228.779837][ T7607] CPU: 0 UID: 0 PID: 7607 Comm: syz.1.396 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 228.779868][ T7607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 228.779880][ T7607] Call Trace: [ 228.779888][ T7607] [ 228.779897][ T7607] dump_stack_lvl+0x189/0x250 [ 228.779932][ T7607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.779957][ T7607] ? __pfx__printk+0x10/0x10 [ 228.779994][ T7607] ? kernfs_path_from_node+0x2f/0x290 [ 228.780016][ T7607] ? kernfs_path_from_node+0x250/0x290 [ 228.780037][ T7607] ? kernfs_path_from_node+0x2f/0x290 [ 228.780064][ T7607] sysfs_warn_dup+0x8e/0xa0 [ 228.780086][ T7607] sysfs_do_create_link_sd+0xc0/0x110 [ 228.780112][ T7607] device_add_class_symlinks+0x1cf/0x240 [ 228.780150][ T7607] device_add+0x475/0xb50 [ 228.780174][ T7607] wiphy_register+0x1ba6/0x28d0 [ 228.780221][ T7607] ? __pfx_wiphy_register+0x10/0x10 [ 228.780246][ T7607] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 228.780275][ T7607] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 228.780311][ T7607] ieee80211_register_hw+0x3425/0x4080 [ 228.780349][ T7607] ? ieee80211_register_hw+0x14b1/0x4080 [ 228.780379][ T7607] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 228.780404][ T7607] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 228.780454][ T7607] ? __hrtimer_setup+0x187/0x210 [ 228.780472][ T7607] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 228.780504][ T7607] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 228.780565][ T7607] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 228.780596][ T7607] ? trace_kmalloc+0x1f/0xd0 [ 228.780620][ T7607] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 228.780647][ T7607] ? kstrndup+0xbf/0x160 [ 228.780681][ T7607] hwsim_new_radio_nl+0xea4/0x1b10 [ 228.780710][ T7607] ? __pfx___nla_validate_parse+0x10/0x10 [ 228.780758][ T7607] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 228.780804][ T7607] ? __nla_parse+0x40/0x60 [ 228.780839][ T7607] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 228.780873][ T7607] genl_family_rcv_msg_doit+0x215/0x300 [ 228.780905][ T7607] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 228.780944][ T7607] ? bpf_lsm_capable+0x9/0x20 [ 228.780970][ T7607] ? security_capable+0x7e/0x2e0 [ 228.781009][ T7607] genl_rcv_msg+0x60e/0x790 [ 228.781040][ T7607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.781061][ T7607] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 228.781104][ T7607] netlink_rcv_skb+0x205/0x470 [ 228.781130][ T7607] ? __lock_acquire+0xab9/0xd20 [ 228.781160][ T7607] ? __pfx_genl_rcv_msg+0x10/0x10 [ 228.781184][ T7607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 228.781237][ T7607] ? down_read+0x1ad/0x2e0 [ 228.781258][ T7607] genl_rcv+0x28/0x40 [ 228.781278][ T7607] netlink_unicast+0x82c/0x9e0 [ 228.781316][ T7607] ? __pfx_netlink_unicast+0x10/0x10 [ 228.781345][ T7607] ? netlink_sendmsg+0x642/0xb30 [ 228.781373][ T7607] ? skb_put+0x11b/0x210 [ 228.781396][ T7607] netlink_sendmsg+0x805/0xb30 [ 228.781438][ T7607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.781473][ T7607] ? aa_sock_msg_perm+0xf1/0x1d0 [ 228.781506][ T7607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 228.781527][ T7607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 228.781558][ T7607] __sock_sendmsg+0x219/0x270 [ 228.781598][ T7607] ____sys_sendmsg+0x505/0x830 [ 228.781626][ T7607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 228.781659][ T7607] ? import_iovec+0x74/0xa0 [ 228.781688][ T7607] ___sys_sendmsg+0x21f/0x2a0 [ 228.781712][ T7607] ? __pfx____sys_sendmsg+0x10/0x10 [ 228.781780][ T7607] ? __fget_files+0x2a/0x420 [ 228.781798][ T7607] ? __fget_files+0x3a0/0x420 [ 228.781829][ T7607] __x64_sys_sendmsg+0x19b/0x260 [ 228.781855][ T7607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 228.781889][ T7607] ? rcu_is_watching+0x15/0xb0 [ 228.781916][ T7607] ? do_syscall_64+0xbe/0x3b0 [ 228.781951][ T7607] do_syscall_64+0xfa/0x3b0 [ 228.781978][ T7607] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.782005][ T7607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.782025][ T7607] ? clear_bhb_loop+0x60/0xb0 [ 228.782050][ T7607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.782070][ T7607] RIP: 0033:0x7f0acc98ebe9 [ 228.782088][ T7607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.782103][ T7607] RSP: 002b:00007f0acd8e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.782125][ T7607] RAX: ffffffffffffffda RBX: 00007f0accbb5fa0 RCX: 00007f0acc98ebe9 [ 228.782139][ T7607] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 228.782152][ T7607] RBP: 00007f0acca11e19 R08: 0000000000000000 R09: 0000000000000000 [ 228.782164][ T7607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.782174][ T7607] R13: 00007f0accbb6038 R14: 00007f0accbb5fa0 R15: 00007ffec375d2e8 [ 228.782208][ T7607] [ 229.750906][ T7636] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 230.304726][ T7662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.405'. [ 230.934243][ T7679] netlink: 'syz.1.410': attribute type 32 has an invalid length. [ 231.457701][ T7695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.465173][ T7695] IPv6: NLM_F_CREATE should be set when creating new route [ 231.467819][ T7688] veth3: entered promiscuous mode [ 231.472514][ T7695] IPv6: NLM_F_CREATE should be set when creating new route [ 231.484808][ T7695] IPv6: NLM_F_CREATE should be set when creating new route [ 231.514251][ T7695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.829191][ T7703] __nla_validate_parse: 1 callbacks suppressed [ 231.829209][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.415'. [ 232.005271][ T7710] netlink: 80 bytes leftover after parsing attributes in process `syz.1.417'. [ 232.366462][ T7714] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 233.215298][ T7740] syz_tun: entered allmulticast mode [ 233.283006][ T7742] wg1: entered promiscuous mode [ 233.298689][ T7742] wg1: entered allmulticast mode [ 233.322717][ T7736] syz_tun: left allmulticast mode [ 233.563541][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.429'. [ 233.589367][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 233.591505][ T7744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.697329][ T7746] netlink: 128 bytes leftover after parsing attributes in process `syz.0.429'. [ 233.829249][ T7735] netlink: 5 bytes leftover after parsing attributes in process `syz.3.426'. [ 234.049902][ T7754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.318787][ T7760] netlink: 'syz.2.433': attribute type 7 has an invalid length. [ 234.344113][ T7760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.433'. [ 234.438359][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.438'. [ 234.572824][ T7776] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 234.581574][ T7776] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 234.591286][ T7776] netlink: 'syz.2.439': attribute type 16 has an invalid length. [ 234.609609][ T7776] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.439'. [ 235.499748][ T7807] netlink: 'syz.4.445': attribute type 32 has an invalid length. [ 235.511419][ T7807] netlink: 60 bytes leftover after parsing attributes in process `syz.4.445'. [ 235.716342][ T7808] tipc: Started in network mode [ 235.739001][ T7808] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 235.755368][ T7808] tipc: Enabled bearer , priority 0 [ 236.581997][ T7855] netlink: 'syz.2.455': attribute type 4 has an invalid length. [ 236.885236][ T24] tipc: Node number set to 11578026 [ 237.192363][ T7875] __nla_validate_parse: 2 callbacks suppressed [ 237.192381][ T7875] netlink: 12 bytes leftover after parsing attributes in process `syz.4.459'. [ 237.423983][ T7881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.426180][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'. [ 237.504454][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 237.567378][ T7884] netlink: 128 bytes leftover after parsing attributes in process `syz.4.463'. [ 237.575099][ T7890] netlink: 'syz.2.464': attribute type 32 has an invalid length. [ 237.595328][ T7890] netlink: 60 bytes leftover after parsing attributes in process `syz.2.464'. [ 237.859003][ T5942] IPVS: starting estimator thread 0... [ 237.980059][ T7900] IPVS: using max 29 ests per chain, 69600 per kthread [ 238.579634][ T7922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.415556][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.4.479'. [ 239.430052][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.478'. [ 239.507927][ T7952] netlink: 128 bytes leftover after parsing attributes in process `syz.2.478'. [ 239.536272][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 239.791544][ T7959] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 239.825425][ T5229] udevd[5229]: worker [6918] terminated by signal 33 (Unknown signal 33) [ 239.848784][ T7960] tipc: Resetting bearer [ 239.858450][ T5229] udevd[5229]: worker [6918] failed while handling '/devices/virtual/block/loop3' [ 239.940998][ T7960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.121317][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 240.527474][ T7979] IPv6: syztnl1: Disabled Multicast RS [ 240.855804][ T7994] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 240.884547][ T7994] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 241.169810][ T8004] netlink: 'syz.0.498': attribute type 32 has an invalid length. [ 241.846489][ T8025] netlink: 'syz.3.504': attribute type 13 has an invalid length. [ 241.854842][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 241.862201][ T8025] netlink: 'syz.3.504': attribute type 17 has an invalid length. [ 242.014599][ T8025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.023685][ T8025] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.075291][ T8025] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.146130][ T8033] delete_channel: no stack [ 242.802366][ T8024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.107967][ T8054] __nla_validate_parse: 4 callbacks suppressed [ 243.107988][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.510'. [ 243.185988][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 243.187656][ T8057] netlink: 128 bytes leftover after parsing attributes in process `syz.2.510'. [ 243.389953][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'. [ 243.407145][ T8059] netlink: 'syz.0.512': attribute type 1 has an invalid length. [ 243.427950][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.512'. [ 243.511999][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 243.562289][ T8064] netlink: 356 bytes leftover after parsing attributes in process `syz.2.513'. [ 243.583433][ T8061] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 243.600149][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 243.657706][ T8063] tipc: Resetting bearer [ 244.139056][ T8083] netlink: 'syz.2.516': attribute type 12 has an invalid length. [ 244.163241][ T8083] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.516'. [ 244.181715][ T5859] Bluetooth: hci4: link tx timeout [ 244.187801][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.206586][ T5859] Bluetooth: hci4: link tx timeout [ 244.213237][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.240328][ T5859] Bluetooth: hci4: link tx timeout [ 244.254426][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.262369][ T5859] Bluetooth: hci4: link tx timeout [ 244.267770][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.275642][ T5859] Bluetooth: hci4: link tx timeout [ 244.280799][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.288718][ T5859] Bluetooth: hci4: link tx timeout [ 244.293954][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.301770][ T5859] Bluetooth: hci4: link tx timeout [ 244.307230][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.334548][ T5859] Bluetooth: hci4: link tx timeout [ 244.339852][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.347648][ T5859] Bluetooth: hci4: link tx timeout [ 244.352909][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.360636][ T5859] Bluetooth: hci4: link tx timeout [ 244.366034][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.373705][ T5859] Bluetooth: hci4: link tx timeout [ 244.379134][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.386946][ T5859] Bluetooth: hci4: link tx timeout [ 244.392261][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.399971][ T5859] Bluetooth: hci4: link tx timeout [ 244.405313][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.412977][ T5859] Bluetooth: hci4: link tx timeout [ 244.418421][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.426241][ T5859] Bluetooth: hci4: link tx timeout [ 244.431528][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.439262][ T5859] Bluetooth: hci4: link tx timeout [ 244.444582][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.452257][ T5859] Bluetooth: hci4: link tx timeout [ 244.457754][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.465530][ T5859] Bluetooth: hci4: link tx timeout [ 244.470786][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.478557][ T5859] Bluetooth: hci4: link tx timeout [ 244.483829][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.491612][ T5859] Bluetooth: hci4: link tx timeout [ 244.496963][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.504970][ T5859] Bluetooth: hci4: link tx timeout [ 244.514469][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.522274][ T5859] Bluetooth: hci4: link tx timeout [ 244.527544][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.544685][ T5859] Bluetooth: hci4: link tx timeout [ 244.549910][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.557674][ T5859] Bluetooth: hci4: link tx timeout [ 244.562894][ T5859] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 244.904839][ T8099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.523'. [ 246.060514][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.085635][ T8128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.116926][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.140415][ T8128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.171882][ T8116] syzkaller0: entered promiscuous mode [ 246.177766][ T8116] syzkaller0: entered allmulticast mode [ 246.189240][ T8123] netlink: 'syz.3.526': attribute type 3 has an invalid length. [ 246.244605][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 246.289600][ T8134] vcan0: tx drop: invalid sa for name 0xfffffffffffffffe [ 246.386688][ T8137] netlink: 'syz.3.531': attribute type 32 has an invalid length. [ 246.533146][ T8145] openvswitch: netlink: Flow actions attr not present in new flow. [ 246.545898][ T8142] lo speed is unknown, defaulting to 1000 [ 246.577005][ T8142] lo speed is unknown, defaulting to 1000 [ 246.590230][ T8142] lo speed is unknown, defaulting to 1000 [ 246.659353][ T8151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.761527][ T8153] netlink: 'syz.0.535': attribute type 13 has an invalid length. [ 246.784613][ T8153] netlink: 'syz.0.535': attribute type 17 has an invalid length. [ 246.866826][ T8153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 246.931116][ T10] lo speed is unknown, defaulting to 1000 [ 246.944510][ T8142] infiniband syz0: set active [ 246.950245][ T8151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.951768][ T8142] infiniband syz0: added lo [ 247.036149][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.049411][ T8142] RDS/IB: syz0: added [ 247.054239][ T8142] smc: adding ib device syz0 with port count 1 [ 247.070770][ T8142] smc: ib device syz0 port 1 has pnetid [ 247.085209][ T5942] lo speed is unknown, defaulting to 1000 [ 247.126177][ T8153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.140906][ T8142] lo speed is unknown, defaulting to 1000 [ 247.700785][ T8160] lo speed is unknown, defaulting to 1000 [ 248.079924][ T8186] netlink: 'syz.1.546': attribute type 32 has an invalid length. [ 248.228648][ T8142] lo speed is unknown, defaulting to 1000 [ 248.383125][ T8195] trusted_key: syz.2.548 sent an empty control message without MSG_MORE. [ 248.463003][ T8198] __nla_validate_parse: 8 callbacks suppressed [ 248.463022][ T8198] netlink: 104 bytes leftover after parsing attributes in process `syz.2.548'. [ 248.699811][ T8142] lo speed is unknown, defaulting to 1000 [ 248.726876][ T8203] netlink: 'syz.1.550': attribute type 1 has an invalid length. [ 248.769723][ T8203] smc: adding net device bond0 with user defined pnetid SYZ2 [ 248.804304][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.870364][ T8205] bond0: (slave bridge1): making interface the new active one [ 248.879999][ T8205] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 248.911467][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 248.926546][ T8208] netlink: 'syz.0.551': attribute type 7 has an invalid length. [ 248.947641][ T8208] netlink: 'syz.0.551': attribute type 8 has an invalid length. [ 248.975557][ T8208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 249.001001][ T8142] lo speed is unknown, defaulting to 1000 [ 249.014604][ T8207] netlink: 'syz.0.551': attribute type 2 has an invalid length. [ 249.022614][ T8207] netlink: 64 bytes leftover after parsing attributes in process `syz.0.551'. [ 249.038622][ T8209] netlink: 'syz.0.551': attribute type 2 has an invalid length. [ 249.054886][ T8209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.551'. [ 249.255820][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.307515][ T8220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.555'. [ 249.327162][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 249.363065][ T8220] netlink: 128 bytes leftover after parsing attributes in process `syz.2.555'. [ 249.399225][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.556'. [ 249.483355][ T8226] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 249.568792][ T8142] lo speed is unknown, defaulting to 1000 [ 249.770136][ T8228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.807475][ T8232] bond2: (slave bridge1): making interface the new active one [ 249.818697][ T8232] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 249.904009][ T8142] lo speed is unknown, defaulting to 1000 [ 249.941751][ T8228] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 250.463466][ T8242] syzkaller0: entered promiscuous mode [ 250.477801][ T8242] syzkaller0: entered allmulticast mode [ 250.571207][ T8242] macsec1: entered promiscuous mode [ 250.793066][ T8245] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 250.810849][ T10] lo speed is unknown, defaulting to 1000 [ 250.825078][ T10] syz0: Port: 1 Link DOWN [ 250.924044][ T10] lo speed is unknown, defaulting to 1000 [ 251.021048][ T8251] lo speed is unknown, defaulting to 1000 [ 251.050460][ T8250] siw: device registration error -23 [ 251.062506][ T8251] lo speed is unknown, defaulting to 1000 [ 251.083236][ T8251] lo speed is unknown, defaulting to 1000 [ 251.181310][ T8251] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 251.301971][ T8263] !: renamed from dummy0 (while UP) [ 251.323915][ T8251] lo speed is unknown, defaulting to 1000 [ 251.483831][ T8265] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.540111][ T8251] lo speed is unknown, defaulting to 1000 [ 251.573841][ T8251] lo speed is unknown, defaulting to 1000 [ 251.669879][ T8265] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.748992][ T8251] lo speed is unknown, defaulting to 1000 [ 251.832503][ T8265] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.860485][ T8251] lo speed is unknown, defaulting to 1000 [ 251.875548][ T8269] lo speed is unknown, defaulting to 1000 [ 251.880178][ T8251] lo speed is unknown, defaulting to 1000 [ 252.049205][ T8265] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.378936][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.448302][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.507290][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.574967][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.642666][ T8325] tipc: Enabled bearer , priority 0 [ 253.660821][ T8327] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 253.744075][ T8328] syzkaller0: entered promiscuous mode [ 253.753401][ T8328] syzkaller0: entered allmulticast mode [ 253.774539][ T8315] lo speed is unknown, defaulting to 1000 [ 253.842177][ T8325] tipc: Resetting bearer [ 253.859661][ T8324] tipc: Resetting bearer [ 253.958425][ T8324] tipc: Disabling bearer [ 254.714138][ T8322] lo speed is unknown, defaulting to 1000 [ 254.783299][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.3.584'. [ 254.792653][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 254.943728][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.586'. [ 255.636197][ T8315] lo speed is unknown, defaulting to 1000 [ 255.788342][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.794894][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.258665][ T8342] lo speed is unknown, defaulting to 1000 [ 256.259105][ T8322] lo speed is unknown, defaulting to 1000 [ 256.273680][ T8381] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 256.871744][ T8397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.597'. [ 256.940766][ T8342] lo speed is unknown, defaulting to 1000 [ 257.250927][ T8403] validate_nla: 2 callbacks suppressed [ 257.250943][ T8403] netlink: 'syz.4.599': attribute type 6 has an invalid length. [ 257.278458][ T8403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.599'. [ 257.510059][ T8415] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.609111][ T8415] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.678951][ T8417] tipc: Enabled bearer , priority 0 [ 257.693707][ T8417] tipc: Resetting bearer [ 257.734904][ T8415] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.816808][ T8415] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.940147][ T59] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.970601][ T59] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.008998][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.046734][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.145327][ T8419] lo speed is unknown, defaulting to 1000 [ 258.158839][ T8425] netlink: 256 bytes leftover after parsing attributes in process `syz.1.606'. [ 258.463436][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.609'. [ 258.507243][ T8443] netlink: 'syz.2.610': attribute type 32 has an invalid length. [ 258.542383][ T8443] netlink: 60 bytes leftover after parsing attributes in process `syz.2.610'. [ 258.558680][ T8442] tipc: Enabled bearer , priority 0 [ 258.581708][ T8442] netlink: 56 bytes leftover after parsing attributes in process `syz.4.612'. [ 258.642177][ T8441] tipc: Disabling bearer [ 258.675710][ T10] tipc: Node number set to 2033339151 [ 258.825689][ T8419] lo speed is unknown, defaulting to 1000 [ 259.311537][ T8463] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 259.409171][ T8457] lo speed is unknown, defaulting to 1000 [ 259.949746][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.627'. [ 259.961457][ T8494] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 259.965989][ T8493] netlink: 2 bytes leftover after parsing attributes in process `syz.2.627'. [ 259.994585][ T8494] netlink: 'syz.1.626': attribute type 2 has an invalid length. [ 260.022271][ T8494] netlink: 1172 bytes leftover after parsing attributes in process `syz.1.626'. [ 260.362641][ T8509] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 260.366793][ T8511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.633'. [ 260.404791][ T8510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.525235][ T8511] team1: entered promiscuous mode [ 260.530406][ T8511] team1: entered allmulticast mode [ 260.535458][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.635'. [ 260.578857][ T8517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.635'. [ 260.605346][ T8517] netlink: 34 bytes leftover after parsing attributes in process `syz.2.635'. [ 260.717866][ T8457] lo speed is unknown, defaulting to 1000 [ 260.928029][ T8523] wg1: entered promiscuous mode [ 260.944452][ T8523] wg1: entered allmulticast mode [ 261.138006][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.644'. [ 261.147136][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 261.221734][ T8526] tipc: Started in network mode [ 261.227255][ T8526] tipc: Node identity 7a4a2ce78a16, cluster identity 4711 [ 261.235924][ T8526] tipc: Enabled bearer , priority 0 [ 261.252253][ T8529] syzkaller0: entered promiscuous mode [ 261.258208][ T8529] syzkaller0: entered allmulticast mode [ 261.307731][ T8537] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 261.348666][ T8541] tipc: Resetting bearer [ 261.361875][ T8525] tipc: Resetting bearer [ 261.477946][ T8525] tipc: Disabling bearer [ 261.741739][ T8561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.650'. [ 261.906690][ T8559] team1: left promiscuous mode [ 261.911622][ T8559] team1: left allmulticast mode [ 262.046877][ T8572] netlink: 'syz.3.653': attribute type 32 has an invalid length. [ 262.771436][ T8588] : entered promiscuous mode [ 262.786284][ T8590] netlink: 'syz.2.656': attribute type 1 has an invalid length. [ 263.960221][ T8622] netlink: 'syz.2.666': attribute type 1 has an invalid length. [ 263.981512][ T8624] netlink: 'syz.1.665': attribute type 32 has an invalid length. [ 263.998260][ T8622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 264.060544][ T8622] bond3: (slave bridge4): making interface the new active one [ 264.083723][ T8622] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 264.117764][ T8631] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 264.243232][ T8637] sctp: [Deprecated]: syz.0.668 (pid 8637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 264.243232][ T8637] Use struct sctp_sack_info instead [ 264.438905][ T8645] only policy match revision 0 supported [ 264.438928][ T8645] unable to load match [ 264.488689][ T8646] lo speed is unknown, defaulting to 1000 [ 265.090442][ T8646] lo speed is unknown, defaulting to 1000 [ 265.308244][ T8675] netlink: 'syz.0.680': attribute type 1 has an invalid length. [ 265.424117][ T8677] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 265.528747][ T8677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.572399][ T8675] syzkaller1: entered promiscuous mode [ 265.584548][ T8675] syzkaller1: entered allmulticast mode [ 265.590331][ T8682] netlink: 'syz.1.682': attribute type 32 has an invalid length. [ 265.630552][ T8682] __nla_validate_parse: 10 callbacks suppressed [ 265.630573][ T8682] netlink: 60 bytes leftover after parsing attributes in process `syz.1.682'. [ 265.724148][ T8680] bond4: (slave bridge3): making interface the new active one [ 265.768234][ T8680] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 265.813778][ T8677] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 266.279004][ T8702] netlink: 48 bytes leftover after parsing attributes in process `syz.4.686'. [ 266.590035][ T8718] lo speed is unknown, defaulting to 1000 [ 267.138308][ T8718] lo speed is unknown, defaulting to 1000 [ 267.437131][ T8742] lo speed is unknown, defaulting to 1000 [ 267.692965][ T8754] netlink: 'syz.0.700': attribute type 32 has an invalid length. [ 267.730130][ T8754] netlink: 60 bytes leftover after parsing attributes in process `syz.0.700'. [ 268.017517][ T8758] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.024763][ T8758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.033302][ T8758] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.040509][ T8758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.060256][ T8758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.071774][ T8758] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 268.113895][ T851] lo speed is unknown, defaulting to 1000 [ 268.130704][ T851] syz2: Port: 1 Link ACTIVE [ 268.142630][ T8745] lo speed is unknown, defaulting to 1000 [ 268.582430][ T8755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.602752][ T8756] lo speed is unknown, defaulting to 1000 [ 268.611225][ T8745] lo speed is unknown, defaulting to 1000 [ 268.671632][ T8742] lo speed is unknown, defaulting to 1000 [ 268.697543][ T8792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.708'. [ 268.724100][ T8792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 269.223754][ T8806] netlink: 'syz.0.712': attribute type 1 has an invalid length. [ 269.326602][ T8756] lo speed is unknown, defaulting to 1000 [ 269.348951][ T8805] lo speed is unknown, defaulting to 1000 [ 269.451333][ T8811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 269.658755][ T8814] netlink: 'syz.2.715': attribute type 32 has an invalid length. [ 269.675044][ T8814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.715'. [ 270.191809][ T8823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.717'. [ 270.203472][ T8823] netlink: 'syz.0.717': attribute type 4 has an invalid length. [ 270.240902][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.717'. [ 270.766777][ T8805] lo speed is unknown, defaulting to 1000 [ 270.781973][ T8851] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 270.986783][ T8851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.032351][ T8856] bond1: (slave bridge1): making interface the new active one [ 271.041519][ T8856] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 271.181966][ T8861] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.342804][ T8861] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.392773][ T8863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.727'. [ 271.436466][ T8861] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.552379][ T8861] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.861659][ T8873] netlink: 48 bytes leftover after parsing attributes in process `syz.2.731'. [ 271.878348][ T8872] netlink: 256 bytes leftover after parsing attributes in process `syz.3.730'. [ 272.220316][ T6416] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.285301][ T8868] Set syz1 is full, maxelem 6117 reached [ 272.299971][ T59] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.361079][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.434117][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.715341][ T8898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.736'. [ 273.039972][ T8914] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 273.144767][ T8914] nbd1: detected capacity change from 0 to 127 [ 273.169322][ T5179] block nbd1: Receive control failed (result -32) [ 273.169643][ T7279] block nbd1: Send control failed (result -32) [ 273.187173][ T8910] lo speed is unknown, defaulting to 1000 [ 273.192769][ T7279] block nbd1: Request send failed, requeueing [ 273.228626][ T95] block nbd1: Dead connection, failed to find a fallback [ 273.236312][ T95] block nbd1: shutting down sockets [ 273.241990][ T95] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.254585][ T95] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.265988][ T7279] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.290365][ T7279] Buffer I/O error on dev nbd1, logical block 1, async page read [ 273.317335][ T7279] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.329646][ T7279] Buffer I/O error on dev nbd1, logical block 2, async page read [ 273.338206][ T7279] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.349709][ T7279] Buffer I/O error on dev nbd1, logical block 3, async page read [ 273.358515][ T7279] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.369648][ T7279] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.378130][ T7279] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.387698][ T7279] Buffer I/O error on dev nbd1, logical block 1, async page read [ 273.396825][ T7279] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.406270][ T7279] Buffer I/O error on dev nbd1, logical block 2, async page read [ 273.414242][ T7279] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.423818][ T7279] Buffer I/O error on dev nbd1, logical block 3, async page read [ 273.440517][ T7279] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.474452][ T7279] Buffer I/O error on dev nbd1, logical block 0, async page read [ 273.491274][ T7279] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 273.516428][ T7279] Buffer I/O error on dev nbd1, logical block 1, async page read [ 273.574015][ T7279] ldm_validate_partition_table(): Disk read failed. [ 273.616727][ T7279] Dev nbd1: unable to read RDB block 0 [ 273.639691][ T7279] nbd1: unable to read partition table [ 273.703184][ T7279] ldm_validate_partition_table(): Disk read failed. [ 273.747810][ T7279] Dev nbd1: unable to read RDB block 0 [ 273.796101][ T7279] nbd1: unable to read partition table [ 274.235591][ T8942] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 274.300038][ T8942] netlink: 224 bytes leftover after parsing attributes in process `syz.0.743'. [ 274.537919][ T8910] lo speed is unknown, defaulting to 1000 [ 274.538533][ T8953] 8021q: VLANs not supported on caif0 [ 274.553197][ T8952] 8021q: VLANs not supported on caif0 [ 274.841286][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 274.873374][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.3.751'. [ 275.077713][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.751'. [ 275.442868][ T8985] lo speed is unknown, defaulting to 1000 [ 275.446289][ T8990] netlink: 732 bytes leftover after parsing attributes in process `syz.2.757'. [ 275.468534][ T8990] netlink: 732 bytes leftover after parsing attributes in process `syz.2.757'. [ 276.433190][ T8985] lo speed is unknown, defaulting to 1000 [ 276.602506][ T8988] lo speed is unknown, defaulting to 1000 [ 276.789739][ T9036] netlink: 'syz.2.770': attribute type 32 has an invalid length. [ 276.817419][ T9036] __nla_validate_parse: 4 callbacks suppressed [ 276.817437][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.2.770'. [ 277.682534][ T9049] lo speed is unknown, defaulting to 1000 [ 277.692867][ T8988] lo speed is unknown, defaulting to 1000 [ 278.027678][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 278.055795][ T9071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.776'. [ 278.094464][ T9071] netlink: 'syz.3.776': attribute type 15 has an invalid length. [ 278.450434][ T9076] netlink: 304 bytes leftover after parsing attributes in process `syz.1.777'. [ 278.896323][ T9093] netlink: 'syz.3.782': attribute type 32 has an invalid length. [ 278.925951][ T9093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.782'. [ 279.684182][ T9049] lo speed is unknown, defaulting to 1000 [ 279.684255][ T5915] IPVS: starting estimator thread 0... [ 279.715131][ T9113] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:0 [ 279.799803][ T9118] geneve0: entered promiscuous mode [ 279.814575][ T9115] IPVS: using max 25 ests per chain, 60000 per kthread [ 279.858383][ T9121] netlink: 'syz.1.787': attribute type 6 has an invalid length. [ 280.333305][ T9129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 280.348148][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 280.439331][ T5928] IPVS: starting estimator thread 0... [ 280.546505][ T9136] IPVS: using max 29 ests per chain, 69600 per kthread [ 280.628556][ T9143] netlink: 'syz.3.798': attribute type 32 has an invalid length. [ 280.649814][ T9143] netlink: 60 bytes leftover after parsing attributes in process `syz.3.798'. [ 281.043151][ T9166] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 281.075077][ T9167] sctp: [Deprecated]: syz.4.802 (pid 9167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.075077][ T9167] Use struct sctp_sack_info instead [ 281.105268][ T9160] lo speed is unknown, defaulting to 1000 [ 281.150985][ T9167] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 281.196139][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: syz.4.802 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 281.196167][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.196182][ T9167] Call Trace: [ 281.196190][ T9167] [ 281.196199][ T9167] dump_stack_lvl+0x189/0x250 [ 281.196232][ T9167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.196256][ T9167] ? __pfx__printk+0x10/0x10 [ 281.196288][ T9167] ? kernfs_path_from_node+0x2f/0x290 [ 281.196310][ T9167] ? kernfs_path_from_node+0x250/0x290 [ 281.196328][ T9167] ? kernfs_path_from_node+0x2f/0x290 [ 281.196352][ T9167] sysfs_warn_dup+0x8e/0xa0 [ 281.196371][ T9167] sysfs_do_create_link_sd+0xc0/0x110 [ 281.196394][ T9167] device_add_class_symlinks+0x1cf/0x240 [ 281.196417][ T9167] device_add+0x475/0xb50 [ 281.196441][ T9167] wiphy_register+0x1ba6/0x28d0 [ 281.196484][ T9167] ? __pfx_wiphy_register+0x10/0x10 [ 281.196526][ T9167] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 281.196556][ T9167] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 281.196592][ T9167] ieee80211_register_hw+0x3425/0x4080 [ 281.196630][ T9167] ? ieee80211_register_hw+0x14b1/0x4080 [ 281.196660][ T9167] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 281.196685][ T9167] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 281.196718][ T9167] ? __hrtimer_setup+0x187/0x210 [ 281.196735][ T9167] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 281.196767][ T9167] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 281.196833][ T9167] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 281.196856][ T9167] ? trace_kmalloc+0x1f/0xd0 [ 281.196880][ T9167] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 281.196906][ T9167] ? kstrndup+0xbf/0x160 [ 281.196936][ T9167] hwsim_new_radio_nl+0xea4/0x1b10 [ 281.196965][ T9167] ? __pfx___nla_validate_parse+0x10/0x10 [ 281.197011][ T9167] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 281.197050][ T9167] ? __nla_parse+0x40/0x60 [ 281.197083][ T9167] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 281.197115][ T9167] genl_family_rcv_msg_doit+0x215/0x300 [ 281.197149][ T9167] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 281.197193][ T9167] ? bpf_lsm_capable+0x9/0x20 [ 281.197219][ T9167] ? security_capable+0x7e/0x2e0 [ 281.197255][ T9167] genl_rcv_msg+0x60e/0x790 [ 281.197284][ T9167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.197305][ T9167] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 281.197346][ T9167] netlink_rcv_skb+0x205/0x470 [ 281.197372][ T9167] ? __lock_acquire+0xab9/0xd20 [ 281.197400][ T9167] ? __pfx_genl_rcv_msg+0x10/0x10 [ 281.197423][ T9167] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 281.197509][ T9167] ? down_read+0x1ad/0x2e0 [ 281.197535][ T9167] genl_rcv+0x28/0x40 [ 281.197554][ T9167] netlink_unicast+0x82c/0x9e0 [ 281.197594][ T9167] ? __pfx_netlink_unicast+0x10/0x10 [ 281.197625][ T9167] ? netlink_sendmsg+0x642/0xb30 [ 281.197654][ T9167] ? skb_put+0x11b/0x210 [ 281.197679][ T9167] netlink_sendmsg+0x805/0xb30 [ 281.197723][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.197759][ T9167] ? aa_sock_msg_perm+0xf1/0x1d0 [ 281.197809][ T9167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 281.197832][ T9167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.197865][ T9167] __sock_sendmsg+0x219/0x270 [ 281.197909][ T9167] ____sys_sendmsg+0x505/0x830 [ 281.197937][ T9167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.197971][ T9167] ? import_iovec+0x74/0xa0 [ 281.197999][ T9167] ___sys_sendmsg+0x21f/0x2a0 [ 281.198023][ T9167] ? __pfx____sys_sendmsg+0x10/0x10 [ 281.198088][ T9167] ? __fget_files+0x2a/0x420 [ 281.198106][ T9167] ? __fget_files+0x3a0/0x420 [ 281.198137][ T9167] __x64_sys_sendmsg+0x19b/0x260 [ 281.198182][ T9167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 281.198218][ T9167] ? rcu_is_watching+0x15/0xb0 [ 281.198246][ T9167] ? do_syscall_64+0xbe/0x3b0 [ 281.198284][ T9167] do_syscall_64+0xfa/0x3b0 [ 281.198312][ T9167] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.198341][ T9167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.198362][ T9167] ? clear_bhb_loop+0x60/0xb0 [ 281.198389][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.198417][ T9167] RIP: 0033:0x7fe0ba98ebe9 [ 281.198438][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.198456][ T9167] RSP: 002b:00007fe0bb762038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.198478][ T9167] RAX: ffffffffffffffda RBX: 00007fe0babb6090 RCX: 00007fe0ba98ebe9 [ 281.198494][ T9167] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 281.198508][ T9167] RBP: 00007fe0baa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 281.198521][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.198534][ T9167] R13: 00007fe0babb6128 R14: 00007fe0babb6090 R15: 00007ffc2e66bbd8 [ 281.198581][ T9167] [ 281.702334][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.804'. [ 281.711581][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.804'. [ 282.049808][ T9178] netlink: 'syz.0.806': attribute type 1 has an invalid length. [ 282.088034][ T9180] netlink: 68 bytes leftover after parsing attributes in process `syz.4.807'. [ 282.138056][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.807'. [ 282.178825][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.807'. [ 282.231070][ T9178] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.260601][ T9184] bond2: (slave bridge2): making interface the new active one [ 282.270455][ T9184] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 282.540434][ T9196] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 282.613843][ T9200] delete_channel: no stack [ 282.812187][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.812'. [ 283.182651][ T9160] lo speed is unknown, defaulting to 1000 [ 283.190987][ T9207] lo speed is unknown, defaulting to 1000 [ 283.636724][ T9229] netlink: 40 bytes leftover after parsing attributes in process `syz.0.816'. [ 283.944189][ T9234] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'. [ 283.953885][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 284.077578][ T9235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.126972][ T9239] netlink: 'syz.1.819': attribute type 21 has an invalid length. [ 284.187131][ T30] audit: type=1804 audit(1755343194.761:3): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.819" name="/newroot/150/memory.events" dev="tmpfs" ino=777 res=1 errno=0 [ 284.254099][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 284.264563][ T30] audit: type=1800 audit(1755343194.781:4): pid=9239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.819" name="memory.events" dev="tmpfs" ino=777 res=0 errno=0 [ 284.286115][ T9241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 284.450449][ T9241] netlink: 'syz.3.820': attribute type 1 has an invalid length. [ 284.517302][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 284.684097][ T9256] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 284.714480][ T9207] lo speed is unknown, defaulting to 1000 [ 284.979799][ T9256] 8021q: adding VLAN 0 to HW filter on device bond3 [ 285.086382][ T9259] bond3: (slave bridge3): making interface the new active one [ 285.102141][ T9259] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 285.140978][ T9262] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 285.970322][ T9301] lo speed is unknown, defaulting to 1000 [ 285.981175][ T9304] netlink: 'syz.1.839': attribute type 1 has an invalid length. [ 286.070393][ T9304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 286.317850][ T9308] bond1: (slave bridge2): making interface the new active one [ 286.352733][ T9308] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 286.373613][ T9315] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 286.433752][ T9315] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.568299][ T9317] bond2: (slave bridge1): making interface the new active one [ 286.616384][ T9317] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 286.695690][ T9315] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 286.785354][ T9301] lo speed is unknown, defaulting to 1000 [ 287.284208][ T9354] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 287.386434][ T9356] tipc: Enabled bearer , priority 0 [ 287.401943][ T9356] syzkaller0: entered promiscuous mode [ 287.413267][ T9356] syzkaller0: entered allmulticast mode [ 287.526987][ T9360] tipc: Resetting bearer [ 287.534150][ T9354] lo speed is unknown, defaulting to 1000 [ 287.560648][ T9355] tipc: Resetting bearer [ 287.645456][ T9355] tipc: Disabling bearer [ 288.323901][ T9377] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 288.369394][ T9377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.855'. [ 288.398936][ T9377] netlink: 'syz.4.855': attribute type 10 has an invalid length. [ 288.427291][ T9377] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 288.730066][ T9388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.765423][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 288.986852][ T9354] lo speed is unknown, defaulting to 1000 [ 289.133728][ T9400] netlink: 'syz.3.859': attribute type 1 has an invalid length. [ 289.244178][ T9400] 8021q: adding VLAN 0 to HW filter on device bond6 [ 289.296025][ T9403] bond6: (slave bridge5): making interface the new active one [ 289.310695][ T9403] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 289.512380][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 289.518962][ T9400] bond6: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 289.591643][ T9407] smc: removing ib device syz0 [ 289.735746][ T9414] netlink: 'syz.3.864': attribute type 32 has an invalid length. [ 289.749236][ T9414] netlink: 60 bytes leftover after parsing attributes in process `syz.3.864'. [ 291.307550][ T9454] netlink: 36 bytes leftover after parsing attributes in process `syz.2.871'. [ 291.405897][ T9454] netlink: 'syz.2.871': attribute type 2 has an invalid length. [ 292.281775][ T9485] netlink: 'syz.4.882': attribute type 32 has an invalid length. [ 292.300828][ T9485] netlink: 60 bytes leftover after parsing attributes in process `syz.4.882'. [ 292.316225][ T9487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.883'. [ 292.430308][ T9491] syzkaller1: entered promiscuous mode [ 292.449927][ T9491] syzkaller1: entered allmulticast mode [ 292.998195][ T9512] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 293.034121][ T9512] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 293.152482][ T9510] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 293.297686][ T9515] delete_channel: no stack [ 293.772273][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.893'. [ 293.856883][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'. [ 294.379537][ T9547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.896'. [ 294.456147][ T9549] netlink: 32 bytes leftover after parsing attributes in process `syz.2.897'. [ 294.483994][ T9549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.897'. [ 294.512151][ T9549] tipc: Resetting bearer [ 295.001411][ T9559] tipc: Enabling of bearer rejected, failed to enable media [ 295.021250][ T9559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 295.311624][ T9569] netlink: 60 bytes leftover after parsing attributes in process `syz.2.905'. [ 295.320780][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.905'. [ 295.836776][ T9583] nbd: nbd0 already in use [ 295.861344][ T9583] nbd: nbd0 already in use [ 295.896352][ T9586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 296.052870][ T9594] netlink: 'syz.2.913': attribute type 32 has an invalid length. [ 296.071488][ T9594] netlink: 60 bytes leftover after parsing attributes in process `syz.2.913'. [ 296.783506][ T9610] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 296.877480][ T9610] 8021q: adding VLAN 0 to HW filter on device bond5 [ 296.885671][ T9613] tipc: Enabling of bearer rejected, already enabled [ 296.910549][ T9615] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 296.918133][ T9615] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 296.953852][ T9621] bond5: (slave bridge5): making interface the new active one [ 296.963938][ T9621] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 296.979336][ T9613] tipc: Enabling of bearer rejected, already enabled [ 297.052863][ T9610] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 297.173588][ T9630] lo speed is unknown, defaulting to 1000 [ 297.500238][ T9652] sctp: [Deprecated]: syz.2.925 (pid 9652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.500238][ T9652] Use struct sctp_sack_info instead [ 297.612455][ T9652] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 297.652460][ T9652] CPU: 1 UID: 0 PID: 9652 Comm: syz.2.925 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 297.652489][ T9652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.652502][ T9652] Call Trace: [ 297.652510][ T9652] [ 297.652518][ T9652] dump_stack_lvl+0x189/0x250 [ 297.652552][ T9652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.652576][ T9652] ? __pfx__printk+0x10/0x10 [ 297.652609][ T9652] ? kernfs_path_from_node+0x2f/0x290 [ 297.652631][ T9652] ? kernfs_path_from_node+0x250/0x290 [ 297.652649][ T9652] ? kernfs_path_from_node+0x2f/0x290 [ 297.652675][ T9652] sysfs_warn_dup+0x8e/0xa0 [ 297.652695][ T9652] sysfs_do_create_link_sd+0xc0/0x110 [ 297.652724][ T9652] device_add_class_symlinks+0x1cf/0x240 [ 297.652750][ T9652] device_add+0x475/0xb50 [ 297.652775][ T9652] wiphy_register+0x1ba6/0x28d0 [ 297.652818][ T9652] ? __pfx_wiphy_register+0x10/0x10 [ 297.652843][ T9652] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 297.652871][ T9652] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 297.652908][ T9652] ieee80211_register_hw+0x3425/0x4080 [ 297.652947][ T9652] ? ieee80211_register_hw+0x14b1/0x4080 [ 297.652977][ T9652] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 297.653002][ T9652] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.653034][ T9652] ? __hrtimer_setup+0x187/0x210 [ 297.653052][ T9652] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 297.653083][ T9652] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 297.653141][ T9652] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 297.653163][ T9652] ? trace_kmalloc+0x1f/0xd0 [ 297.653186][ T9652] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 297.653230][ T9652] ? kstrndup+0xbf/0x160 [ 297.653278][ T9652] hwsim_new_radio_nl+0xea4/0x1b10 [ 297.653306][ T9652] ? __pfx___nla_validate_parse+0x10/0x10 [ 297.653349][ T9652] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.653386][ T9652] ? __nla_parse+0x40/0x60 [ 297.653419][ T9652] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 297.653452][ T9652] genl_family_rcv_msg_doit+0x215/0x300 [ 297.653484][ T9652] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.653519][ T9652] ? bpf_lsm_capable+0x9/0x20 [ 297.653545][ T9652] ? security_capable+0x7e/0x2e0 [ 297.653580][ T9652] genl_rcv_msg+0x60e/0x790 [ 297.653610][ T9652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.653631][ T9652] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 297.653672][ T9652] netlink_rcv_skb+0x205/0x470 [ 297.653697][ T9652] ? __lock_acquire+0xab9/0xd20 [ 297.653726][ T9652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.653749][ T9652] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.653799][ T9652] ? down_read+0x1ad/0x2e0 [ 297.653820][ T9652] genl_rcv+0x28/0x40 [ 297.653838][ T9652] netlink_unicast+0x82c/0x9e0 [ 297.653875][ T9652] ? __pfx_netlink_unicast+0x10/0x10 [ 297.653903][ T9652] ? netlink_sendmsg+0x642/0xb30 [ 297.653929][ T9652] ? skb_put+0x11b/0x210 [ 297.653952][ T9652] netlink_sendmsg+0x805/0xb30 [ 297.654011][ T9652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.654041][ T9652] ? aa_sock_msg_perm+0xf1/0x1d0 [ 297.654071][ T9652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 297.654090][ T9652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.654118][ T9652] __sock_sendmsg+0x219/0x270 [ 297.654144][ T9652] ____sys_sendmsg+0x505/0x830 [ 297.654169][ T9652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.654215][ T9652] ? import_iovec+0x74/0xa0 [ 297.654257][ T9652] ___sys_sendmsg+0x21f/0x2a0 [ 297.654280][ T9652] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.654341][ T9652] ? __fget_files+0x2a/0x420 [ 297.654357][ T9652] ? __fget_files+0x3a0/0x420 [ 297.654386][ T9652] __x64_sys_sendmsg+0x19b/0x260 [ 297.654411][ T9652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.654453][ T9652] ? rcu_is_watching+0x15/0xb0 [ 297.654477][ T9652] ? do_syscall_64+0xbe/0x3b0 [ 297.654507][ T9652] do_syscall_64+0xfa/0x3b0 [ 297.654531][ T9652] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.654554][ T9652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.654572][ T9652] ? clear_bhb_loop+0x60/0xb0 [ 297.654594][ T9652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.654611][ T9652] RIP: 0033:0x7f9c5178ebe9 [ 297.654627][ T9652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.654642][ T9652] RSP: 002b:00007f9c525d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.654661][ T9652] RAX: ffffffffffffffda RBX: 00007f9c519b6090 RCX: 00007f9c5178ebe9 [ 297.654674][ T9652] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 297.654686][ T9652] RBP: 00007f9c51811e19 R08: 0000000000000000 R09: 0000000000000000 [ 297.654698][ T9652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.654708][ T9652] R13: 00007f9c519b6128 R14: 00007f9c519b6090 R15: 00007ffd493b46f8 [ 297.654740][ T9652] [ 298.146707][ T9643] lo speed is unknown, defaulting to 1000 [ 298.543438][ T9670] netlink: 'syz.2.928': attribute type 13 has an invalid length. [ 298.972978][ T9686] __nla_validate_parse: 4 callbacks suppressed [ 298.972999][ T9686] netlink: 48 bytes leftover after parsing attributes in process `syz.4.931'. [ 299.010013][ T9670] tipc: Resetting bearer [ 299.156899][ T9691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.271748][ T9674] netlink: 20 bytes leftover after parsing attributes in process `syz.2.928'. [ 299.645283][ T9701] bridge0: port 3(erspan0) entered blocking state [ 299.662358][ T9701] bridge0: port 3(erspan0) entered disabled state [ 299.675298][ T9701] erspan0: entered allmulticast mode [ 299.682931][ T9701] erspan0: entered promiscuous mode [ 299.691122][ T9701] bridge0: port 3(erspan0) entered blocking state [ 299.697876][ T9701] bridge0: port 3(erspan0) entered forwarding state [ 299.711332][ T9701] erspan0: left allmulticast mode [ 299.734536][ T9701] erspan0: left promiscuous mode [ 299.750696][ T9701] bridge0: port 3(erspan0) entered disabled state [ 300.210776][ T9723] netlink: 20 bytes leftover after parsing attributes in process `syz.4.937'. [ 300.284632][ T9720] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 300.489147][ T9733] lo speed is unknown, defaulting to 1000 [ 301.102860][ T9751] netlink: 52 bytes leftover after parsing attributes in process `syz.3.945'. [ 301.171161][ T9753] netlink: 'syz.2.946': attribute type 32 has an invalid length. [ 301.210061][ T9753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.946'. [ 301.533593][ T9766] sctp: [Deprecated]: syz.3.949 (pid 9766) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.533593][ T9766] Use struct sctp_sack_info instead [ 301.615821][ T9766] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 301.634970][ T9766] CPU: 1 UID: 0 PID: 9766 Comm: syz.3.949 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 301.635001][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 301.635014][ T9766] Call Trace: [ 301.635022][ T9766] [ 301.635032][ T9766] dump_stack_lvl+0x189/0x250 [ 301.635067][ T9766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.635094][ T9766] ? __pfx__printk+0x10/0x10 [ 301.635131][ T9766] ? kernfs_path_from_node+0x2f/0x290 [ 301.635154][ T9766] ? kernfs_path_from_node+0x250/0x290 [ 301.635175][ T9766] ? kernfs_path_from_node+0x2f/0x290 [ 301.635204][ T9766] sysfs_warn_dup+0x8e/0xa0 [ 301.635226][ T9766] sysfs_do_create_link_sd+0xc0/0x110 [ 301.635253][ T9766] device_add_class_symlinks+0x1cf/0x240 [ 301.635280][ T9766] device_add+0x475/0xb50 [ 301.635306][ T9766] wiphy_register+0x1ba6/0x28d0 [ 301.635358][ T9766] ? __pfx_wiphy_register+0x10/0x10 [ 301.635386][ T9766] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 301.635417][ T9766] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 301.635457][ T9766] ieee80211_register_hw+0x3425/0x4080 [ 301.635501][ T9766] ? ieee80211_register_hw+0x14b1/0x4080 [ 301.635534][ T9766] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 301.635563][ T9766] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 301.635599][ T9766] ? __hrtimer_setup+0x187/0x210 [ 301.635619][ T9766] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.635653][ T9766] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 301.635724][ T9766] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 301.635750][ T9766] ? trace_kmalloc+0x1f/0xd0 [ 301.635776][ T9766] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 301.635805][ T9766] ? kstrndup+0xbf/0x160 [ 301.635838][ T9766] hwsim_new_radio_nl+0xea4/0x1b10 [ 301.635866][ T9766] ? __pfx___nla_validate_parse+0x10/0x10 [ 301.635916][ T9766] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 301.635958][ T9766] ? __nla_parse+0x40/0x60 [ 301.635998][ T9766] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 301.636036][ T9766] genl_family_rcv_msg_doit+0x215/0x300 [ 301.636070][ T9766] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 301.636112][ T9766] ? bpf_lsm_capable+0x9/0x20 [ 301.636140][ T9766] ? security_capable+0x7e/0x2e0 [ 301.636180][ T9766] genl_rcv_msg+0x60e/0x790 [ 301.636213][ T9766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.636235][ T9766] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 301.636280][ T9766] netlink_rcv_skb+0x205/0x470 [ 301.636308][ T9766] ? __lock_acquire+0xab9/0xd20 [ 301.636338][ T9766] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.636364][ T9766] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.636418][ T9766] ? down_read+0x1ad/0x2e0 [ 301.636447][ T9766] genl_rcv+0x28/0x40 [ 301.636479][ T9766] netlink_unicast+0x82c/0x9e0 [ 301.636518][ T9766] ? __pfx_netlink_unicast+0x10/0x10 [ 301.636549][ T9766] ? netlink_sendmsg+0x642/0xb30 [ 301.636576][ T9766] ? skb_put+0x11b/0x210 [ 301.636599][ T9766] netlink_sendmsg+0x805/0xb30 [ 301.636641][ T9766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.636676][ T9766] ? aa_sock_msg_perm+0xf1/0x1d0 [ 301.636717][ T9766] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.636740][ T9766] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.636772][ T9766] __sock_sendmsg+0x219/0x270 [ 301.636804][ T9766] ____sys_sendmsg+0x505/0x830 [ 301.636850][ T9766] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.636884][ T9766] ? import_iovec+0x74/0xa0 [ 301.636914][ T9766] ___sys_sendmsg+0x21f/0x2a0 [ 301.636940][ T9766] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.637008][ T9766] ? __fget_files+0x2a/0x420 [ 301.637027][ T9766] ? __fget_files+0x3a0/0x420 [ 301.637060][ T9766] __x64_sys_sendmsg+0x19b/0x260 [ 301.637085][ T9766] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.637121][ T9766] ? rcu_is_watching+0x15/0xb0 [ 301.637150][ T9766] ? do_syscall_64+0xbe/0x3b0 [ 301.637186][ T9766] do_syscall_64+0xfa/0x3b0 [ 301.637214][ T9766] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.637243][ T9766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.637264][ T9766] ? clear_bhb_loop+0x60/0xb0 [ 301.637290][ T9766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.637311][ T9766] RIP: 0033:0x7fc870d8ebe9 [ 301.637330][ T9766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.637347][ T9766] RSP: 002b:00007fc871b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.637370][ T9766] RAX: ffffffffffffffda RBX: 00007fc870fb6090 RCX: 00007fc870d8ebe9 [ 301.637385][ T9766] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 301.637399][ T9766] RBP: 00007fc870e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 301.637417][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.637430][ T9766] R13: 00007fc870fb6128 R14: 00007fc870fb6090 R15: 00007fff20597118 [ 301.637467][ T9766] [ 302.351204][ T9778] netlink: 16 bytes leftover after parsing attributes in process `syz.1.952'. [ 302.992135][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.959'. [ 303.002343][ T9803] netlink: 32 bytes leftover after parsing attributes in process `syz.3.959'. [ 303.211545][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.960'. [ 303.741544][ T9828] sctp: [Deprecated]: syz.3.964 (pid 9828) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.741544][ T9828] Use struct sctp_sack_info instead [ 303.792792][ T9828] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 303.822918][ T9828] CPU: 0 UID: 0 PID: 9828 Comm: syz.3.964 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 303.822944][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.822955][ T9828] Call Trace: [ 303.822962][ T9828] [ 303.822971][ T9828] dump_stack_lvl+0x189/0x250 [ 303.823001][ T9828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.823025][ T9828] ? __pfx__printk+0x10/0x10 [ 303.823057][ T9828] ? kernfs_path_from_node+0x2f/0x290 [ 303.823079][ T9828] ? kernfs_path_from_node+0x250/0x290 [ 303.823097][ T9828] ? kernfs_path_from_node+0x2f/0x290 [ 303.823122][ T9828] sysfs_warn_dup+0x8e/0xa0 [ 303.823140][ T9828] sysfs_do_create_link_sd+0xc0/0x110 [ 303.823164][ T9828] device_add_class_symlinks+0x1cf/0x240 [ 303.823186][ T9828] device_add+0x475/0xb50 [ 303.823209][ T9828] wiphy_register+0x1ba6/0x28d0 [ 303.823253][ T9828] ? __pfx_wiphy_register+0x10/0x10 [ 303.823278][ T9828] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 303.823305][ T9828] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 303.823340][ T9828] ieee80211_register_hw+0x3425/0x4080 [ 303.823378][ T9828] ? ieee80211_register_hw+0x14b1/0x4080 [ 303.823424][ T9828] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 303.823450][ T9828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 303.823491][ T9828] ? __hrtimer_setup+0x187/0x210 [ 303.823510][ T9828] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 303.823542][ T9828] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 303.823600][ T9828] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 303.823623][ T9828] ? trace_kmalloc+0x1f/0xd0 [ 303.823660][ T9828] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 303.823685][ T9828] ? kstrndup+0xbf/0x160 [ 303.823714][ T9828] hwsim_new_radio_nl+0xea4/0x1b10 [ 303.823741][ T9828] ? __pfx___nla_validate_parse+0x10/0x10 [ 303.823784][ T9828] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 303.823820][ T9828] ? __nla_parse+0x40/0x60 [ 303.823851][ T9828] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 303.823883][ T9828] genl_family_rcv_msg_doit+0x215/0x300 [ 303.823911][ T9828] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 303.823946][ T9828] ? bpf_lsm_capable+0x9/0x20 [ 303.823971][ T9828] ? security_capable+0x7e/0x2e0 [ 303.824005][ T9828] genl_rcv_msg+0x60e/0x790 [ 303.824032][ T9828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.824069][ T9828] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 303.824110][ T9828] netlink_rcv_skb+0x205/0x470 [ 303.824137][ T9828] ? __lock_acquire+0xab9/0xd20 [ 303.824165][ T9828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.824189][ T9828] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.824238][ T9828] ? down_read+0x1ad/0x2e0 [ 303.824269][ T9828] genl_rcv+0x28/0x40 [ 303.824287][ T9828] netlink_unicast+0x82c/0x9e0 [ 303.824320][ T9828] ? __pfx_netlink_unicast+0x10/0x10 [ 303.824349][ T9828] ? netlink_sendmsg+0x642/0xb30 [ 303.824373][ T9828] ? skb_put+0x11b/0x210 [ 303.824394][ T9828] netlink_sendmsg+0x805/0xb30 [ 303.824431][ T9828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.824468][ T9828] ? aa_sock_msg_perm+0xf1/0x1d0 [ 303.824498][ T9828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.824517][ T9828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.824545][ T9828] __sock_sendmsg+0x219/0x270 [ 303.824571][ T9828] ____sys_sendmsg+0x505/0x830 [ 303.824595][ T9828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.824624][ T9828] ? import_iovec+0x74/0xa0 [ 303.824650][ T9828] ___sys_sendmsg+0x21f/0x2a0 [ 303.824671][ T9828] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.824729][ T9828] ? __fget_files+0x2a/0x420 [ 303.824743][ T9828] ? __fget_files+0x3a0/0x420 [ 303.824771][ T9828] __x64_sys_sendmsg+0x19b/0x260 [ 303.824793][ T9828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.824823][ T9828] ? rcu_is_watching+0x15/0xb0 [ 303.824847][ T9828] ? do_syscall_64+0xbe/0x3b0 [ 303.824877][ T9828] do_syscall_64+0xfa/0x3b0 [ 303.824901][ T9828] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.824925][ T9828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.824942][ T9828] ? clear_bhb_loop+0x60/0xb0 [ 303.824982][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.824999][ T9828] RIP: 0033:0x7fc870d8ebe9 [ 303.825016][ T9828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.825033][ T9828] RSP: 002b:00007fc871b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.825054][ T9828] RAX: ffffffffffffffda RBX: 00007fc870fb6090 RCX: 00007fc870d8ebe9 [ 303.825068][ T9828] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 303.825081][ T9828] RBP: 00007fc870e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.825092][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.825103][ T9828] R13: 00007fc870fb6128 R14: 00007fc870fb6090 R15: 00007fff20597118 [ 303.825135][ T9828] [ 304.462955][ T9845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.969'. [ 304.503365][ T9845] gretap1: entered promiscuous mode [ 304.739494][ T9854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.971'. [ 305.179672][ T9865] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 305.548914][ T9888] sctp: [Deprecated]: syz.2.978 (pid 9888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 305.548914][ T9888] Use struct sctp_sack_info instead [ 305.747537][ T9888] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 305.826194][ T9888] CPU: 1 UID: 0 PID: 9888 Comm: syz.2.978 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 305.826225][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 305.826248][ T9888] Call Trace: [ 305.826257][ T9888] [ 305.826266][ T9888] dump_stack_lvl+0x189/0x250 [ 305.826300][ T9888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.826326][ T9888] ? __pfx__printk+0x10/0x10 [ 305.826373][ T9888] ? kernfs_path_from_node+0x2f/0x290 [ 305.826394][ T9888] ? kernfs_path_from_node+0x250/0x290 [ 305.826414][ T9888] ? kernfs_path_from_node+0x2f/0x290 [ 305.826440][ T9888] sysfs_warn_dup+0x8e/0xa0 [ 305.826461][ T9888] sysfs_do_create_link_sd+0xc0/0x110 [ 305.826486][ T9888] device_add_class_symlinks+0x1cf/0x240 [ 305.826512][ T9888] device_add+0x475/0xb50 [ 305.826536][ T9888] wiphy_register+0x1ba6/0x28d0 [ 305.826584][ T9888] ? __pfx_wiphy_register+0x10/0x10 [ 305.826609][ T9888] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 305.826638][ T9888] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 305.826676][ T9888] ieee80211_register_hw+0x3425/0x4080 [ 305.826716][ T9888] ? ieee80211_register_hw+0x14b1/0x4080 [ 305.826746][ T9888] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 305.826772][ T9888] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 305.826806][ T9888] ? __hrtimer_setup+0x187/0x210 [ 305.826823][ T9888] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 305.826854][ T9888] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 305.826913][ T9888] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 305.826937][ T9888] ? trace_kmalloc+0x1f/0xd0 [ 305.826960][ T9888] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 305.826991][ T9888] ? kstrndup+0xbf/0x160 [ 305.827023][ T9888] hwsim_new_radio_nl+0xea4/0x1b10 [ 305.827052][ T9888] ? __pfx___nla_validate_parse+0x10/0x10 [ 305.827099][ T9888] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 305.827139][ T9888] ? __nla_parse+0x40/0x60 [ 305.827172][ T9888] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 305.827206][ T9888] genl_family_rcv_msg_doit+0x215/0x300 [ 305.827242][ T9888] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 305.827281][ T9888] ? bpf_lsm_capable+0x9/0x20 [ 305.827306][ T9888] ? security_capable+0x7e/0x2e0 [ 305.827343][ T9888] genl_rcv_msg+0x60e/0x790 [ 305.827372][ T9888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.827393][ T9888] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 305.827438][ T9888] netlink_rcv_skb+0x205/0x470 [ 305.827484][ T9888] ? __lock_acquire+0xab9/0xd20 [ 305.827516][ T9888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.827542][ T9888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.827598][ T9888] ? down_read+0x1ad/0x2e0 [ 305.827620][ T9888] genl_rcv+0x28/0x40 [ 305.827641][ T9888] netlink_unicast+0x82c/0x9e0 [ 305.827680][ T9888] ? __pfx_netlink_unicast+0x10/0x10 [ 305.827711][ T9888] ? netlink_sendmsg+0x642/0xb30 [ 305.827739][ T9888] ? skb_put+0x11b/0x210 [ 305.827765][ T9888] netlink_sendmsg+0x805/0xb30 [ 305.827809][ T9888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.827845][ T9888] ? aa_sock_msg_perm+0xf1/0x1d0 [ 305.827880][ T9888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.827903][ T9888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.827936][ T9888] __sock_sendmsg+0x219/0x270 [ 305.827968][ T9888] ____sys_sendmsg+0x505/0x830 [ 305.827998][ T9888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.828032][ T9888] ? import_iovec+0x74/0xa0 [ 305.828062][ T9888] ___sys_sendmsg+0x21f/0x2a0 [ 305.828087][ T9888] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.828156][ T9888] ? __fget_files+0x2a/0x420 [ 305.828174][ T9888] ? __fget_files+0x3a0/0x420 [ 305.828206][ T9888] __x64_sys_sendmsg+0x19b/0x260 [ 305.828240][ T9888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.828275][ T9888] ? rcu_is_watching+0x15/0xb0 [ 305.828304][ T9888] ? do_syscall_64+0xbe/0x3b0 [ 305.828341][ T9888] do_syscall_64+0xfa/0x3b0 [ 305.828370][ T9888] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.828398][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.828419][ T9888] ? clear_bhb_loop+0x60/0xb0 [ 305.828446][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.828466][ T9888] RIP: 0033:0x7f9c5178ebe9 [ 305.828486][ T9888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.828503][ T9888] RSP: 002b:00007f9c525d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.828526][ T9888] RAX: ffffffffffffffda RBX: 00007f9c519b6090 RCX: 00007f9c5178ebe9 [ 305.828541][ T9888] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 305.828555][ T9888] RBP: 00007f9c51811e19 R08: 0000000000000000 R09: 0000000000000000 [ 305.828568][ T9888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.828581][ T9888] R13: 00007f9c519b6128 R14: 00007f9c519b6090 R15: 00007ffd493b46f8 [ 305.828630][ T9888] [ 306.321971][ T9893] tipc: Enabling of bearer rejected, failed to enable media [ 306.464946][ T9894] syzkaller0: entered promiscuous mode [ 306.470974][ T9894] syzkaller0: entered allmulticast mode [ 306.621940][ T9892] ieee802154 phy1 wpan1: encryption failed: -22 [ 306.912640][ T9912] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.933653][ T9915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.986'. [ 307.014213][ T9912] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.068416][ T9912] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.163315][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 307.220897][ T9924] netlink: 24 bytes leftover after parsing attributes in process `syz.3.988'. [ 307.366780][ T9912] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.406430][ T9919] netlink: 'syz.3.988': attribute type 4 has an invalid length. [ 307.451675][ T9919] netlink: 'syz.3.988': attribute type 4 has an invalid length. [ 307.492103][ T1145] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.516688][ T1145] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.545143][ T1145] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.568705][ T1145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.817573][ T9941] sctp: [Deprecated]: syz.0.991 (pid 9941) Use of struct sctp_assoc_value in delayed_ack socket option. [ 307.817573][ T9941] Use struct sctp_sack_info instead [ 307.899144][ T9941] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 307.950837][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.0.991 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 307.950867][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.950879][ T9941] Call Trace: [ 307.950888][ T9941] [ 307.950896][ T9941] dump_stack_lvl+0x189/0x250 [ 307.950930][ T9941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.950954][ T9941] ? __pfx__printk+0x10/0x10 [ 307.950990][ T9941] ? kernfs_path_from_node+0x2f/0x290 [ 307.951011][ T9941] ? kernfs_path_from_node+0x250/0x290 [ 307.951041][ T9941] ? kernfs_path_from_node+0x2f/0x290 [ 307.951067][ T9941] sysfs_warn_dup+0x8e/0xa0 [ 307.951089][ T9941] sysfs_do_create_link_sd+0xc0/0x110 [ 307.951114][ T9941] device_add_class_symlinks+0x1cf/0x240 [ 307.951139][ T9941] device_add+0x475/0xb50 [ 307.951163][ T9941] wiphy_register+0x1ba6/0x28d0 [ 307.951214][ T9941] ? __pfx_wiphy_register+0x10/0x10 [ 307.951242][ T9941] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 307.951269][ T9941] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 307.951306][ T9941] ieee80211_register_hw+0x3425/0x4080 [ 307.951345][ T9941] ? ieee80211_register_hw+0x14b1/0x4080 [ 307.951376][ T9941] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 307.951403][ T9941] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 307.951437][ T9941] ? __hrtimer_setup+0x187/0x210 [ 307.951454][ T9941] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 307.951485][ T9941] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 307.951546][ T9941] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 307.951569][ T9941] ? trace_kmalloc+0x1f/0xd0 [ 307.951592][ T9941] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 307.951619][ T9941] ? kstrndup+0xbf/0x160 [ 307.951650][ T9941] hwsim_new_radio_nl+0xea4/0x1b10 [ 307.951678][ T9941] ? __pfx___nla_validate_parse+0x10/0x10 [ 307.951723][ T9941] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 307.951763][ T9941] ? __nla_parse+0x40/0x60 [ 307.951806][ T9941] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 307.951837][ T9941] genl_family_rcv_msg_doit+0x215/0x300 [ 307.951866][ T9941] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 307.951901][ T9941] ? bpf_lsm_capable+0x9/0x20 [ 307.951926][ T9941] ? security_capable+0x7e/0x2e0 [ 307.951960][ T9941] genl_rcv_msg+0x60e/0x790 [ 307.951988][ T9941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.952033][ T9941] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 307.952075][ T9941] netlink_rcv_skb+0x205/0x470 [ 307.952101][ T9941] ? __lock_acquire+0xab9/0xd20 [ 307.952130][ T9941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 307.952154][ T9941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 307.952203][ T9941] ? down_read+0x1ad/0x2e0 [ 307.952223][ T9941] genl_rcv+0x28/0x40 [ 307.952242][ T9941] netlink_unicast+0x82c/0x9e0 [ 307.952277][ T9941] ? __pfx_netlink_unicast+0x10/0x10 [ 307.952306][ T9941] ? netlink_sendmsg+0x642/0xb30 [ 307.952332][ T9941] ? skb_put+0x11b/0x210 [ 307.952354][ T9941] netlink_sendmsg+0x805/0xb30 [ 307.952394][ T9941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.952427][ T9941] ? aa_sock_msg_perm+0xf1/0x1d0 [ 307.952459][ T9941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 307.952480][ T9941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 307.952509][ T9941] __sock_sendmsg+0x219/0x270 [ 307.952538][ T9941] ____sys_sendmsg+0x505/0x830 [ 307.952565][ T9941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.952596][ T9941] ? import_iovec+0x74/0xa0 [ 307.952623][ T9941] ___sys_sendmsg+0x21f/0x2a0 [ 307.952645][ T9941] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.952722][ T9941] ? __fget_files+0x2a/0x420 [ 307.952737][ T9941] ? __fget_files+0x3a0/0x420 [ 307.952765][ T9941] __x64_sys_sendmsg+0x19b/0x260 [ 307.952787][ T9941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 307.952817][ T9941] ? rcu_is_watching+0x15/0xb0 [ 307.952841][ T9941] ? do_syscall_64+0xbe/0x3b0 [ 307.952872][ T9941] do_syscall_64+0xfa/0x3b0 [ 307.952896][ T9941] ? lockdep_hardirqs_on+0x9c/0x150 [ 307.952920][ T9941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.952939][ T9941] ? clear_bhb_loop+0x60/0xb0 [ 307.952961][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.952996][ T9941] RIP: 0033:0x7f77c158ebe9 [ 307.953014][ T9941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.953038][ T9941] RSP: 002b:00007f77c245c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 307.953060][ T9941] RAX: ffffffffffffffda RBX: 00007f77c17b6090 RCX: 00007f77c158ebe9 [ 307.953074][ T9941] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 307.953087][ T9941] RBP: 00007f77c1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 307.953099][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.953110][ T9941] R13: 00007f77c17b6128 R14: 00007f77c17b6090 R15: 00007ffdbc1c6e58 [ 307.953143][ T9941] [ 308.720983][ T9950] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 309.000025][ T9970] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.022573][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 309.085403][ T9974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1002'. [ 309.097311][ T9974] openvswitch: netlink: Flow key attr not present in new flow. [ 309.108876][ T9970] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.122811][ T9974] IPv6: Can't replace route, no match found [ 309.130074][ T9974] netlink: 'syz.3.1002': attribute type 29 has an invalid length. [ 309.182347][ T9970] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.237808][ T9978] netlink: 'syz.3.1004': attribute type 32 has an invalid length. [ 309.245817][ T9978] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1004'. [ 309.273088][ T9970] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.428757][ T1145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.461432][ T6402] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.498712][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.546008][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.813202][ T9994] sctp: [Deprecated]: syz.3.1007 (pid 9994) Use of struct sctp_assoc_value in delayed_ack socket option. [ 309.813202][ T9994] Use struct sctp_sack_info instead [ 309.863830][ T9994] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 309.882023][ T9994] CPU: 0 UID: 0 PID: 9994 Comm: syz.3.1007 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 309.882055][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 309.882069][ T9994] Call Trace: [ 309.882077][ T9994] [ 309.882107][ T9994] dump_stack_lvl+0x189/0x250 [ 309.882146][ T9994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.882172][ T9994] ? __pfx__printk+0x10/0x10 [ 309.882209][ T9994] ? kernfs_path_from_node+0x2f/0x290 [ 309.882233][ T9994] ? kernfs_path_from_node+0x250/0x290 [ 309.882255][ T9994] ? kernfs_path_from_node+0x2f/0x290 [ 309.882284][ T9994] sysfs_warn_dup+0x8e/0xa0 [ 309.882307][ T9994] sysfs_do_create_link_sd+0xc0/0x110 [ 309.882333][ T9994] device_add_class_symlinks+0x1cf/0x240 [ 309.882361][ T9994] device_add+0x475/0xb50 [ 309.882389][ T9994] wiphy_register+0x1ba6/0x28d0 [ 309.882440][ T9994] ? __pfx_wiphy_register+0x10/0x10 [ 309.882468][ T9994] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 309.882511][ T9994] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 309.882553][ T9994] ieee80211_register_hw+0x3425/0x4080 [ 309.882597][ T9994] ? ieee80211_register_hw+0x14b1/0x4080 [ 309.882630][ T9994] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 309.882659][ T9994] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 309.882696][ T9994] ? __hrtimer_setup+0x187/0x210 [ 309.882715][ T9994] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 309.882750][ T9994] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 309.882814][ T9994] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 309.882840][ T9994] ? trace_kmalloc+0x1f/0xd0 [ 309.882865][ T9994] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 309.882895][ T9994] ? kstrndup+0xbf/0x160 [ 309.882930][ T9994] hwsim_new_radio_nl+0xea4/0x1b10 [ 309.882961][ T9994] ? __pfx___nla_validate_parse+0x10/0x10 [ 309.883010][ T9994] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 309.883052][ T9994] ? __nla_parse+0x40/0x60 [ 309.883098][ T9994] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 309.883135][ T9994] genl_family_rcv_msg_doit+0x215/0x300 [ 309.883169][ T9994] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 309.883210][ T9994] ? bpf_lsm_capable+0x9/0x20 [ 309.883239][ T9994] ? security_capable+0x7e/0x2e0 [ 309.883280][ T9994] genl_rcv_msg+0x60e/0x790 [ 309.883312][ T9994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.883335][ T9994] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 309.883381][ T9994] netlink_rcv_skb+0x205/0x470 [ 309.883409][ T9994] ? __lock_acquire+0xab9/0xd20 [ 309.883441][ T9994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 309.883467][ T9994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.883522][ T9994] ? down_read+0x1ad/0x2e0 [ 309.883545][ T9994] genl_rcv+0x28/0x40 [ 309.883566][ T9994] netlink_unicast+0x82c/0x9e0 [ 309.883605][ T9994] ? __pfx_netlink_unicast+0x10/0x10 [ 309.883636][ T9994] ? netlink_sendmsg+0x642/0xb30 [ 309.883663][ T9994] ? skb_put+0x11b/0x210 [ 309.883688][ T9994] netlink_sendmsg+0x805/0xb30 [ 309.883729][ T9994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.883767][ T9994] ? aa_sock_msg_perm+0xf1/0x1d0 [ 309.883801][ T9994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 309.883823][ T9994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.883856][ T9994] __sock_sendmsg+0x219/0x270 [ 309.883888][ T9994] ____sys_sendmsg+0x505/0x830 [ 309.883917][ T9994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.883951][ T9994] ? import_iovec+0x74/0xa0 [ 309.883980][ T9994] ___sys_sendmsg+0x21f/0x2a0 [ 309.884005][ T9994] ? __pfx____sys_sendmsg+0x10/0x10 [ 309.884074][ T9994] ? __fget_files+0x2a/0x420 [ 309.884101][ T9994] ? __fget_files+0x3a0/0x420 [ 309.884132][ T9994] __x64_sys_sendmsg+0x19b/0x260 [ 309.884158][ T9994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 309.884194][ T9994] ? rcu_is_watching+0x15/0xb0 [ 309.884224][ T9994] ? do_syscall_64+0xbe/0x3b0 [ 309.884268][ T9994] do_syscall_64+0xfa/0x3b0 [ 309.884301][ T9994] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.884329][ T9994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.884349][ T9994] ? clear_bhb_loop+0x60/0xb0 [ 309.884375][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.884396][ T9994] RIP: 0033:0x7fc870d8ebe9 [ 309.884415][ T9994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.884432][ T9994] RSP: 002b:00007fc871b83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.884454][ T9994] RAX: ffffffffffffffda RBX: 00007fc870fb6090 RCX: 00007fc870d8ebe9 [ 309.884468][ T9994] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000008 [ 309.884480][ T9994] RBP: 00007fc870e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 309.884492][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.884504][ T9994] R13: 00007fc870fb6128 R14: 00007fc870fb6090 R15: 00007fff20597118 [ 309.884540][ T9994] [ 310.466615][T10005] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 310.494856][T10005] Bluetooth: MGMT ver 1.23 [ 310.503304][T10008] netlink: 'syz.2.1011': attribute type 1 has an invalid length. [ 310.523610][T10005] geneve2: entered promiscuous mode [ 310.559607][T10008] 8021q: adding VLAN 0 to HW filter on device bond6 [ 310.586214][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 310.594773][T10008] bond6: (slave bridge6): making interface the new active one [ 310.603848][T10008] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 310.679128][T10008] bond6: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 310.748109][T10013] tipc: Enabled bearer , priority 0 [ 310.779976][T10013] tipc: Resetting bearer [ 310.881027][T10023] netlink: 'syz.2.1014': attribute type 10 has an invalid length. [ 310.891343][T10023] team0: Cannot enslave team device to itself [ 311.339242][T10042] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 311.435197][T10042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 311.484918][T10049] bond2: (slave bridge3): making interface the new active one [ 311.494530][T10049] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 311.518491][T10051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1021'. [ 311.560316][T10042] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 311.794439][ T5928] tipc: Node number set to 1128293992 [ 311.810546][T10061] netlink: 'syz.4.1025': attribute type 1 has an invalid length. [ 311.857504][T10061] 8021q: adding VLAN 0 to HW filter on device bond3 [ 311.934747][T10061] bond3: (slave bridge4): making interface the new active one [ 311.945559][T10061] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 312.018468][T10061] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 312.160962][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 312.184125][T10072] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1027'. [ 312.216401][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1027'. [ 312.273602][T10072] tipc: Can't bind to reserved service type 0 [ 312.428124][T10082] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 4, id = 0 [ 312.555117][T10085] netlink: 'syz.2.1031': attribute type 32 has an invalid length. [ 312.593589][T10085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1031'. [ 312.909451][T10093] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1034'. [ 312.988795][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'. [ 313.003432][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'. [ 313.605762][T10123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1040'. [ 313.637050][T10123] bridge0: port 1(gretap0) entered blocking state [ 313.647835][T10123] bridge0: port 1(gretap0) entered disabled state [ 313.665541][T10123] gretap0: entered allmulticast mode [ 313.683061][T10123] gretap0: entered promiscuous mode [ 313.700799][T10123] bridge0: port 1(gretap0) entered blocking state [ 313.707520][T10123] bridge0: port 1(gretap0) entered forwarding state [ 313.815774][T10127] lo speed is unknown, defaulting to 1000 [ 314.039950][T10129] bond4: entered promiscuous mode [ 314.084527][T10129] bond4: entered allmulticast mode [ 314.097035][T10129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 314.289177][T10135] netlink: 'syz.0.1045': attribute type 58 has an invalid length. [ 314.629158][T10143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.670182][T10145] netlink: 'syz.0.1048': attribute type 5 has an invalid length. [ 314.706479][T10147] team0: Port device bond0 removed [ 314.731954][T10147] bridge_slave_0: left allmulticast mode [ 314.753527][T10147] bridge_slave_0: left promiscuous mode [ 314.772734][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.790189][T10147] bridge_slave_1: left allmulticast mode [ 314.796901][T10147] bridge_slave_1: left promiscuous mode [ 314.802769][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.823262][T10147] bond0: (slave bond_slave_0): Releasing backup interface [ 314.841407][T10147] bond0: (slave bond_slave_1): Releasing backup interface [ 314.857546][T10147] team0: Port device C removed [ 314.870598][T10147] team0: Port device team_slave_1 removed [ 314.893587][T10147] bond2: (slave bridge1): Releasing active interface [ 314.920448][T10147] bond3: (slave bridge4): Releasing active interface [ 314.966910][T10155] tipc: Enabling of bearer rejected, failed to enable media [ 315.077559][T10141] lo speed is unknown, defaulting to 1000 [ 315.255105][T10155] syzkaller0: entered promiscuous mode [ 315.260730][T10155] syzkaller0: entered allmulticast mode [ 315.633775][T10178] netlink: 'syz.2.1054': attribute type 2 has an invalid length. [ 315.854165][T10185] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 315.928314][T10189] tipc: Enabled bearer , priority 0 [ 316.047210][T10189] tipc: Resetting bearer [ 316.048578][T10181] __nla_validate_parse: 8 callbacks suppressed [ 316.048599][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 316.088970][T10187] tipc: Disabling bearer [ 316.283853][T10205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1060'. [ 316.651796][T10215] netlink: 'syz.2.1062': attribute type 1 has an invalid length. [ 316.994464][T10215] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1062'. [ 317.208075][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.594760][T10233] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1068'. [ 317.922346][T10242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 318.077912][ T7279] udevd[7279]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 318.082302][T10255] netlink: 'syz.3.1073': attribute type 1 has an invalid length. [ 318.207155][T10255] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.257671][T10264] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1074'. [ 318.308564][T10264] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1074'. [ 318.320056][T10258] bond7: (slave bridge0): making interface the new active one [ 318.331463][T10258] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 318.431118][T10276] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 318.583750][T10281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 318.607637][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 318.625086][T10281] netlink: 'syz.3.1081': attribute type 2 has an invalid length. [ 318.856151][T10291] lo speed is unknown, defaulting to 1000 [ 318.890542][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 320.024027][T10329] tipc: Enabled bearer , priority 0 [ 320.469853][T10312] tipc: Resetting bearer [ 321.190595][T10352] netlink: 'syz.4.1102': attribute type 13 has an invalid length. [ 321.222531][T10352] netlink: 'syz.4.1102': attribute type 17 has an invalid length. [ 322.569189][T10312] tipc: Disabling bearer [ 322.677085][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.741107][T10352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 322.826100][T10347] lo speed is unknown, defaulting to 1000 [ 322.965537][T10390] __nla_validate_parse: 3 callbacks suppressed [ 322.965556][T10390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 323.200146][T10400] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1117'. [ 323.720242][T10413] lo speed is unknown, defaulting to 1000 [ 323.828780][ T5179] Bluetooth: hci4: link tx timeout [ 323.833948][ T5179] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 324.132834][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1127'. [ 324.170532][T10435] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 324.269321][T10428] IPVS: Scheduler module ip_vs_sip not found [ 324.351840][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1126'. [ 324.403309][T10435] lo speed is unknown, defaulting to 1000 [ 325.066832][T10467] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 325.481255][T10483] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.845128][ T5859] Bluetooth: hci4: command 0x0406 tx timeout [ 325.885563][ T8949] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 325.897512][ T8949] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 325.905948][ T8949] CPU: 1 UID: 0 PID: 8949 Comm: kbnepd bnep0 Not tainted 6.17.0-rc1-syzkaller-00215-gbab3ce404553 #0 PREEMPT(full) [ 325.918114][ T8949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.928189][ T8949] RIP: 0010:klist_del+0x49/0x110 [ 325.933141][ T8949] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 9e b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 9e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 325.952745][ T8949] RSP: 0018:ffffc90002f67768 EFLAGS: 00010202 [ 325.958817][ T8949] RAX: 000000000000000b RBX: ffff888056d28460 RCX: ffff888025c7bc00 [ 325.966786][ T8949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 325.974752][ T8949] RBP: ffffc90002f67890 R08: ffff888052958f03 R09: 1ffff1100a52b1e0 [ 325.982723][ T8949] R10: dffffc0000000000 R11: ffffed100a52b1e1 R12: dffffc0000000000 [ 325.990698][ T8949] R13: 1ffff1100ada508c R14: 0000000000000000 R15: ffff888053874750 [ 325.998670][ T8949] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 326.007616][ T8949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.014203][ T8949] CR2: 00002000005ba030 CR3: 000000007dc20000 CR4: 00000000003526f0 [ 326.022176][ T8949] Call Trace: [ 326.025462][ T8949] [ 326.028399][ T8949] device_del+0x280/0x8e0 [ 326.032740][ T8949] ? _raw_spin_unlock_irq+0x2e/0x50 [ 326.037945][ T8949] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 326.044018][ T8949] ? __pfx_device_del+0x10/0x10 [ 326.048872][ T8949] ? netdev_unregister_kobject+0x344/0x450 [ 326.054684][ T8949] unregister_netdevice_many_notify+0x1a6b/0x1ff0 [ 326.061111][ T8949] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 326.067884][ T8949] ? rtnl_net_dev_lock+0x257/0x2f0 [ 326.073014][ T8949] unregister_netdevice_queue+0x33c/0x380 [ 326.078740][ T8949] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 326.084984][ T8949] ? rtnl_net_dev_lock+0x36/0x2f0 [ 326.090018][ T8949] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 326.095135][ T8949] unregister_netdev+0x1f/0x60 [ 326.099896][ T8949] bnep_session+0x294d/0x2b40 [ 326.104578][ T8949] ? rcu_is_watching+0x15/0xb0 [ 326.109342][ T8949] ? trace_sched_exit_tp+0x36/0x110 [ 326.114544][ T8949] ? __lock_acquire+0xab9/0xd20 [ 326.119418][ T8949] ? __pfx_bnep_session+0x10/0x10 [ 326.124457][ T8949] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 326.130359][ T8949] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.136703][ T8949] ? __pfx_woken_wake_function+0x10/0x10 [ 326.142343][ T8949] ? __kthread_parkme+0x7b/0x200 [ 326.147277][ T8949] ? __kthread_parkme+0x1a1/0x200 [ 326.152316][ T8949] kthread+0x70e/0x8a0 [ 326.156403][ T8949] ? __pfx_bnep_session+0x10/0x10 [ 326.161426][ T8949] ? __pfx_kthread+0x10/0x10 [ 326.166020][ T8949] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.171220][ T8949] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.176423][ T8949] ? __pfx_kthread+0x10/0x10 [ 326.181020][ T8949] ret_from_fork+0x3f9/0x770 [ 326.185605][ T8949] ? __pfx_ret_from_fork+0x10/0x10 [ 326.190715][ T8949] ? __switch_to_asm+0x39/0x70 [ 326.195485][ T8949] ? __switch_to_asm+0x33/0x70 [ 326.200264][ T8949] ? __pfx_kthread+0x10/0x10 [ 326.204859][ T8949] ret_from_fork_asm+0x1a/0x30 [ 326.209631][ T8949] [ 326.212670][ T8949] Modules linked in: [ 326.216875][ T8949] ---[ end trace 0000000000000000 ]--- [ 326.226135][ T8949] RIP: 0010:klist_del+0x49/0x110 [ 326.231489][ T8949] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 9e b3 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 9e b3 f6 4d 8b 7e 58 4c 89 f7 e8 5f 74 [ 326.252845][ T8949] RSP: 0018:ffffc90002f67768 EFLAGS: 00010202 [ 326.259498][ T8949] RAX: 000000000000000b RBX: ffff888056d28460 RCX: ffff888025c7bc00 [ 326.267687][ T8949] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 326.277769][ T8949] RBP: ffffc90002f67890 R08: ffff888052958f03 R09: 1ffff1100a52b1e0 [ 326.285850][ T8949] R10: dffffc0000000000 R11: ffffed100a52b1e1 R12: dffffc0000000000 [ 326.293888][ T8949] R13: 1ffff1100ada508c R14: 0000000000000000 R15: ffff888053874750 [ 326.301897][ T8949] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 326.311250][ T8949] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.317959][ T8949] CR2: 00007ffec375bdc8 CR3: 0000000076eee000 CR4: 00000000003526f0 [ 326.326163][ T8949] Kernel panic - not syncing: Fatal exception [ 326.332558][ T8949] Kernel Offset: disabled [ 326.336879][ T8949] Rebooting in 86400 seconds..