last executing test programs: 12.668816273s ago: executing program 0 (id=5888): socket(0x1, 0x803, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) 12.489242867s ago: executing program 0 (id=5892): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)='A\a', 0x2}, {&(0x7f0000000100)="9f91", 0x2}], 0x2, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x0) (async) pipe(&(0x7f00000045c0)) (async) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)='A\a', 0x2}, {&(0x7f0000000100)="9f91", 0x2}], 0x2, 0x8) (async) syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) (async) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) (async) 12.331219468s ago: executing program 0 (id=5895): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x7, 0x60000, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast1, 0x7800, 0x8000, 0xfffffff9, 0x4}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000005c0)={@rand_addr, @private, 0x0}, &(0x7f0000000600)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000640)={'syztnl2\x00', 0x0, 0x8, 0x7800, 0x0, 0x1ff, {{0xb, 0x4, 0x3, 0x10, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x32}, {[@ssrr={0x89, 0x13, 0xbc, [@empty, @loopback, @multicast2, @remote]}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0x0, 0x7, 0x4e20, 0x1000, 0xa, 0x20, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf8, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x804) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}, 0x1, 0x620b}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'netdevsim0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a010100"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) recvmmsg(r9, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000007c0)={'gretap0\x00', &(0x7f0000000740)={'ip_vti0\x00', 0x0, 0x1, 0x700, 0xffff7fff, 0xf92, {{0xb, 0x4, 0x3, 0x1, 0x2c, 0x65, 0x0, 0x7f, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x11, "856a00de19b1144e6a421265e4d54d"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000009c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000800)={0x148, r1, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1511fdc5b5647690}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa95bea0269c03e9c}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) syz_emit_ethernet(0x62, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @exp_fastopen={0xfe, 0x10, 0xf989, "6080356e793ca9d55b8ef24e"}, @nop, @generic={0x0, 0xc, "04f6fea52eb715ea7022"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x90, r1, 0x304, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xc}, @ETHTOOL_A_LINKINFO_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xdc}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004) r17 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) 4.398799846s ago: executing program 1 (id=5980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x10, r2}, 0x18) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001008210404000000070000000000000036099dc6b82074ccff7cd8ef6df6", @ANYRES32=0x0, @ANYBLOB="adffa888d2260000240012"], 0x50}}, 0xc080) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x7, 0x2, 0x0, 0x47, [0xfffffffc, 0x80]}}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c00000400000014000180147a5c06000600800a000008001300ffffff7f"], 0x2c}}, 0x0) 3.852862344s ago: executing program 1 (id=5984): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.642036791s ago: executing program 1 (id=5985): r0 = socket$inet(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9}, 0x48) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) socket$netlink(0x10, 0x3, 0x6) (async) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x0, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r6, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f00000002c0)={r0}) 3.087293691s ago: executing program 1 (id=5992): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000040)="1300000032001f00030300f9002304000a04d6", 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmmsg(r2, &(0x7f0000001f40)=[{{&(0x7f00000003c0)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha384-arm64\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000480)="f1df7d9dc5d134164e72b49f22ca7255c9ff34cc4ff64568d6690ea0f3af6c7b32267ed1a3607d41518b8bcf13cba15d21861b989ec7450e116c63e3fb90702877047aa6989fdec140c7c7fe68e3ba5821f4dca2c9fbc0d584ff2a27e53f209bda", 0x61}, {&(0x7f0000000500)="36ff4d858fe5d84b68c3551bdfc4912bbb5a0f3021cb702cd8f178c1a0f43969feb7fe468ca5286a5bbbbce881e70dcd49ec58ec1e92d33a3d03df5b3dd5f8a03e07cbbd47c944cd75b814d3e3e1c092063c4ad55681a5f33451404a7f5fc2925d90b5b9da1a97bd6211044c654f", 0x6e}, {&(0x7f0000000140)="879825392ab4b6a1092b4b7eaeefa54a668f0a804e456cfd59d4066f51c14a77cecb622a12b079372933e26f9c8299f52664e996f46f3118c38100fb6c2143", 0x3f}], 0x3, &(0x7f0000000680)=[{0x1010, 0x88, 0x1, "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"}, {0xc8, 0x29, 0x3, "192dd3d73142c636cc8d2e8f9b999505d58e9010b2f2128084e38f4acf6697381719fdf49887272992a5b84928dccdd878c9767c57fb50bb0d444e9b6b969f1bb9f412bc74e4bd90311c222f0af79fd7217fb83fb9eaa677e3442fb94315bccb862639b0c27bdc731ae4dc363790ba79d8c4d07ee56076b048425c2cff5842e927d700a84d826b16c79d0cb03515656a25b2f4d315666c5e59ef373d92c464fead8ca74d5f8934b47a2a1ce7d3a0952d7b"}, {0x110, 0x118, 0x400, "e7e89b7041d8194c466ca6a206a209101870987e5fe8a584e1a7d16fc297d49bcde41918cf140e025c21d4e18c341369f1583fb6c0e14f3ec915cc59b7651040d69813845a30b0195f989f464e3a148c7d4bf12bc7e70d6a8be8772fed9efff6f689341f5b8d14e7f56088d8c3bc0c50c75504e151fd2320d626a989fa5920f0136d894584d8f539600c82806589d98167291276e99f942dd31ba7acc1e09e660a6a0b4fe499063c41de09f9e29217c13e28f4c2a07a1a266965cad75bf496323e4b7f1ffeb01bc1951336798c9dfe3d0857f4b50a4d7839ee5515549b422c974d2d8d9a300f0554faaec9c9cea4e697d4fc3e77fe79372c8efd"}], 0x11e8}}, {{&(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x3, 0x1, 0x1, {0xa, 0x4e24, 0x0, @private0, 0x4}}}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001880)="0de4063a63f734c7d974706638827135d59e26e9778f5cf2e535f13ff2174301dca3ad9ed8c6f5090a1fd4b15eb06e5a3947aeeb896134df619dc69b0f1e41b2a3aa37c92e9c0c15ad05004e76dc49dd78c901f5953f4aea1ffe78bae46f6f78ea7719434049c0d1d7f409e735da507c37fb104099e0f54cf84fc262ed892d617d5976400dbf9513a24e92f8708fa51c730016c348957a07171250217ac7270995dd2411e9c8c6c25df67f873176ca4d2436254f0c526fc8f0fb71920df887e7fc53a08264b0af3bb209", 0xca}, {&(0x7f0000001980)="f160bda029b14048b7cf19c05108a121fe097eaf76bf914c1d6de4ff9162c08dab42a47382926e0e54c110e8377f418108c552ba4576e40d744545d29eea1d09836eca6ba31281f1b83facce91f3ca8f547a6b1dbe39972a4fa9a83952dc94469520541a4c3c2cfdc16c7aebb2f04374f6850a281e60c6bb9d70363c8372a7274331aba4fce9ee8910eb4adfc2d25a06dbed8ab410dd8550c5f06349b79dbf081e83fbf53668450a27", 0xa9}, {&(0x7f0000001a40)="bf6c38d5d4d94773c12f2f9b26f5dd4159d79a26a9957d28d25d57920be2b5eac8f81cf3c9af962fe0895c47218bb4672394d18704a0a870bff09afa885df495789d2c48121530588e417534a659ac0ace046b749f0f492625476223df", 0x5d}, {&(0x7f0000001ac0)="18d3d8739d8893fbeca9d03ff8d391aed488812dbffd4787076a759b9a96a6d354a6b75bd0d7d9f2a10f2d9f1e5a150b9701490f25ee5c26b683ede386ab72d3cf63ff478f93dc02d326f9d325181a03277095a80eabaf418732565cc1cccff531427a25b5f23c7b64a99c19f942389cd343c1cb34ec66825f9e2ebea1e6db6cdf62d92e1f0e3e90aa364de5bed8c5bf4f290bdd7710c328dafa5415acb8d6993af790d6", 0xa4}, {&(0x7f0000001b80)="9fa3d4410b0031614a3171cae9442f138f21adb991cf06577a08f4e6b8685c3927609c8cf49e208fbaea176ef93ca7276030d61e9b910babb3e0de7840f67c8a20890230e4bb5934e99f60d306998f4d2c69cedb5529f251fbcc31f1f5a1008d", 0x60}, {&(0x7f0000001c00)="5521b8f26e243710446719b9fb9312aff166b900eaa3fff5024955c89224ab18533e625df39d52dbd82e251efb1017f11b800fe74a117d290e41970debafc739e89e92c25d7bd5e70cf0a84d3406b3146fb0a23fd96c0cc99293b18c5b2501197f73caa6cb60", 0x66}, {&(0x7f0000001c80)="25685a66be0ed2b8f1da092a6f1b14c5c99087a6abf844aba203e6b87a56fc6b5c9ce97ae1a22c2705256aa656b21ab85f58e22e81617125a4be55f12875ce3d25f7a03baddbcfd202787b1d143b74e5c16e4e5731f0e86856020643daecaf1c2aea140135114e269cdfe900518d441d4ae6c65c383db626e48bf5556251a0e697c4f172c188ce0d583be6b6f355d835a7e0e1020f5c996a024b0734abd367579b8b1e296000f4f860046ddc361c53030e17afe9dc1d6ef713f16e670e38d07c07e9fe3952144612dc9b57f26b3b7e", 0xcf}, {&(0x7f0000001d80)="56778a528c25c2d9bbf11916e99dad51e13310f7295cc76a6867764fad5baa793b4820af8353678434edadf48df65191f914629077b51909717a1f060f4da0fd424d07", 0x43}], 0x8, &(0x7f0000001e80)=[{0x90, 0x197, 0x1ff, "eb4d089bff4d1e406ecdc747c2c60b0723b5b4b7cee6708d4a236af0f4f318341c9f5678e9cb44b017f058fd3f1aadd4d0b7d01ea60a3ddd72223cc5dd3b3929a4ac6b5e34e475a5a84f7a9822945ba9ef363291cbd39c628f8f5ae17733b824911595c9da0d8a9d30e86520c179d6f47124bc152a3908a381"}], 0x90}}], 0x2, 0x20098840) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 2.799209553s ago: executing program 1 (id=5995): r0 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000240)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff2500000056150a5981fd2af11000000006000000faffffff"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000000)=@raw=[@alu={0x4, 0x1, 0x3, 0x7, 0x4, 0xffffffffffffffcd, 0xffffffffffffffff}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)={0x4b8, 0x24, 0x1, 0x70bd26, 0x2, "", [@nested={0x4a8, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x48d, 0xeb, 0x0, 0x1, [@generic="dab8ca993f84687a64cd87a2f961cc55af32afa7c6ff99b17597f02a3c4fa8cb61bd9b214a9054b1345a6a6e9440406560313a993916d7b4564890cdcf68a04dd049604827675ce904b3f559c25cca97f5d55ca6f74e681f71faaf73e7dbf0251e5f1a8b61b41bc7b56534826d9a2effb9074fc3a3a1e26468c17181f1313e164b8010bc8941cd1a3fd431c87709f6c9c3258ad3130d5f25d9e54ec4c0cad3a79a688f090d48a46df520f35fb2ff6be10c", @generic="5ddef55553470034ff840aaad3364de4d6fbd3", @generic="a171b8c1f2873a1b7b610c968bb1ff24255071e0ba0cd7d00542070af8e8eead716167967fde659fbd7e4e8a4e5d73c4064fc46df4c2529d584c", @nested={0x201, 0x72, 0x0, 0x1, [@nested={0x4, 0xf}, @generic="434f1bb8106cb29841c806c46c527381fdaf6a5491", @generic="914573c47093055f5640a24c19b78aa97e60e656ea0709a7fcd493f93606bbb6b89ff9a8f5919d5b4631bc4797e40eb2c10bd4ccb5d82c582625314b4a2ce13b8b9404002b2a132afe1888ddc0c8f99ed177186aa8e0f3320f10f5c97633578da8ed82d7cde72034ab5646d7e17463390c8c0c8e6365ffa0faf1717ece25ae80f66cb25cf71535b22d276ed529b5", @generic="d1f446ff667012a7fe600890547d3ab4d30dc5f1951eb2a663f3f5f7e9210519d417107fd9144b3ef446f15a02be3181e5e6f409e98e4b6c9fabbbc652cd7515c86ae35a3717ef18ab4a724b3eb198b5c8fa5ecb8f37a97f01d7a295", @generic="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"]}, @generic="962c49afb5868d5de5446c2c80a0a50421d2600aaf0eb5e54a99bdca60790d898c7c8d3d909456f608a2cb869a327da6576dbb699e8134cbeea9748933b415639b91768ea8081915790d3becef2070a39c67c236c76ca95112007d20ee93b8f6a91b9917f4", @generic="0d768294f529804d515d270ca24e6d146c55dc1e4f2e90fcaa5d0315947956fb3d6598b27b333a190b896fc1b0e4076faa0f4748ef52ce701eac673a50882dc86b79dd85ada336aabba29f9f073cda9746a6f1dad3d1ee9816f4164552f04d7349f25a532e3e745ece81a0c27d415a4afe5b4e34449d19e2574e1d0e50d70e31fa21c307f9ce587b8ccbf1e63dc9f18e1a88738be82914b9cac5fd2b281a5035daa4635ff65abfdc735b1edece672df050da3c564d85b9791b3152391efa4ca92b3cf3c08891faf37080", @nested={0x55, 0x94, 0x0, 0x1, [@generic="113ac7f3808e9adf1660f5b33acc6ade5dfa5d05c551871aec1ca314fceb95be2a3315d1414824db041083e881811762c088b8041361ad8390eea9d07fbad5834e59a61edf", @nested={0x4, 0x12b}, @nested={0x4, 0x134}, @nested={0x4, 0x6e}]}]}]}]}, 0x4b8}], 0x1}, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'macvtap0\x00'}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x400000, @remote, 0x34}]}, &(0x7f0000002100)=0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10, 0x80800) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@assoc_value, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e23, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3c}}, 0x8, 0xadc2, 0x2, 0x0, 0x84, 0x7fff, 0x5}, &(0x7f0000000440)=0x9c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000880)=@newtaction={0x14, 0x68, 0x1}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0x20000008}) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'ip6tnl0\x00', 0x7f}) 2.511430088s ago: executing program 4 (id=5998): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010100000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a32000000000900010073797a300000000008000a40000000042c000000080a01080000000000000000010000000900f60073797a32000000000900010073797a30"], 0xa8}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESHEX=r0], 0x3c}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x3, 0x7, 0x901, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0xc841) 2.481291812s ago: executing program 2 (id=5999): unshare(0x400) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r0, &(0x7f00000078c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40016) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000e640f5047ac950e0934432ff30000000000000095000071100000000078057073492e7b0295de618c9777e82a83e7d1"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.314947084s ago: executing program 4 (id=6001): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r1}}}}]}, 0x38}}, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x14) 2.313500221s ago: executing program 2 (id=6002): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x2, 0xb, 0x4}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000100)={0x8, 0x25}, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002080)={0x18, r3, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x4142, 0x9060}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast1}]}}}]}, 0x48}}, 0x40010) (async) r4 = accept4$alg(r1, 0x0, 0x0, 0x140000) (async) connect$netlink(r1, &(0x7f0000000180)=@unspec, 0xc) getpeername(r4, &(0x7f0000000000)=@ethernet={0x0, @local}, &(0x7f0000000080)=0x80) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) (async) socket$kcm(0x29, 0x0, 0x0) 2.054621191s ago: executing program 4 (id=6003): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x24000805) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x1c, 0x0, &(0x7f0000000080)) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c00090008"], 0x30}}, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x2c}}, 0x0) 1.817272698s ago: executing program 1 (id=6004): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000500)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000540)="e8691a913b", 0x1718}, {0x0, 0x2900}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}], 0x38}, 0x0) (async) r4 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff68) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x6) (async) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8}}]}, 0x38}}, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) (async) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000240)=@req={0x1, 0x0, 0x553, 0x986}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x8, 0x6}, {0xffe0, 0xb}, {0x4, 0xf}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20000401) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f00000002c0)={'dummy0\x00'}) bind$alg(r6, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-neon\x00'}, 0x58) 1.731261065s ago: executing program 4 (id=6005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xffff, 0xb}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r5) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000e740)=ANY=[], 0x6ae8}, 0x1, 0x0, 0x0, 0x41}, 0x840) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000080)=r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, 0x0, 0x4) sendmsg$NL802154_CMD_NEW_INTERFACE(r9, 0x0, 0x4004) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r9) sendmsg$NLBL_MGMT_C_LISTALL(r9, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4842) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010029bd7000ffdbdf250b001c0008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmmsg$sock(r4, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="4b4f96b516044ac26d7355a646468dfbcdabb2d02e33a1b6ea3c488d0c45c88ac1f47e4059511381eda0b36e7448aee96027e75140cce900b1a93cb4980f26a484f6b09b12a8a05a3359ff5142a906636a6a099809b2e1d242f4aea6f8a2e77363d1bc422e0c3bdf9fd2619bc62e36a67a1e68a051f0f0ae6ede5588e7f62720da7c42794317b917700c2d1b1f6223c7e0a557ed0d699c8bc71a0bfdd3d4329aac8f1fa3befab2f9e6d34a72cf833b295342b78f03e29c9259cce6c55745a81dd45ded3666473dd1a5648d4ecb928c29e0757d52e3b94e596bb336f66f24a5f2dd8f94d05fc1cb82e7", 0xe9}], 0x1, &(0x7f0000000300)=[@mark={{0x14, 0x1, 0x24, 0x800}}, @txtime={{0x18, 0x1, 0x3d, 0x1a5}}, @txtime={{0x18, 0x1, 0x3d, 0xa7}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5eb1}}, @timestamping={{0x14, 0x1, 0x25, 0x7c0b9f41}}], 0x90}}, {{&(0x7f0000000440)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000004c0)=[@txtime={{0x18, 0x1, 0x3d, 0xaa}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x68}}], 0xa8}}, {{&(0x7f0000000580)=@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000600)="f32466c63af801aef68729ddffc4999388b1f219ef5eeadf26e2ed9e9ef558a27f2c33651539cfffe0e572288a3c6f449d86873a3803a75b9e0c2866fd633ec3d35f774b8170cb2d7e726a51db00c55ff47c120748c40321659ed1711c9cc1d1cf2d2fc6c57cb084241efcddb758f536d3ca49d7e87293a5c89d153de5718500ae7560c7ce0b1eead6126c518cef63ab835db2cf2793225544631eda5704b6f59dd52a1f9109aae23fc64f1302a2f1049ad0b3ff1c9c4c8342a683615a802861bf86c597758a", 0xc6}, {&(0x7f0000000700)="2332d996520741022420fd8f3b67aaa57b9c1c999bee1d8e512d397430c2bcf54ca1ef2269af67c648061d5d02badec35dd0ea1e1ccdc473264f6419bd07d7540b456b3769508bfa94da510383860ef3bf12ead17e05f3e59c33e0baa2cd5f27d5cc4ec68546986f692ce40f51ed670e0789f71e3bd781ed3ee0bb943754e904", 0x80}, {&(0x7f0000000780)="d107fb4876b532ba402f16c4d066e6ce229742f36b2f5cb2d9a960ca4f9b444c8f853c13c1bfdc9da41a04977a4c3ed75afad2394d8ce2bae4168eb308eb64f6e23c5f93694a0028e2d909f2be08ad19e1ac9221a6365699a27205f2d97f8d711d0e93b9d8396784ec78cf0228e7e42471f0d8574bd8a15963aaea1815cecf64d7d8d30c1a0ee0304aab80833525150f692a23", 0x93}, {&(0x7f0000000840)="a708f21e0aa873fcbf51c75e3b016e33de1db50ca97f8b2d9c29a6f3bb96fbabcfd56e4538d78a4aeca28f4a5ed7967bc9f279868cd3432f6288da66cbc5446506e4748325eda90d85ceee217b9403ad42a160335b7a0b8a9242205c429ad1f6d8010ca2c2ba4eadd60e0fccaab30fe3e3481d2445d233a23126132ecdef6cdc7b6db241dd0d4bf944e592bc2acba55e494b11c38886ad3c3ae341e827bc3ff525f1d67419e47ced74c913c93f6fbfd5c71abd8b712dbf3152625920ff32f3e1958198ae07886529598819a60b", 0xcd}], 0x4, &(0x7f0000000940)=[@txtime={{0x18, 0x1, 0x3d, 0xb7a}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xe3}}], 0x60}}, {{&(0x7f00000009c0)=@isdn={0x22, 0x8, 0x4, 0x14, 0x5}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="f07e20d5281f9b956f2feb368b6b77fb1d4b75b9f4e43ad6f4fcc7c148c85e19b5eb5c9482052f9f10657c40c949ad66ff6279b8221f09fa46d1a5beaebfb3517c8f49f4cc01ca087ca546d51e7214774c1f701f0dc44a23f640776030991174e3ba28c5a32044a4b2498f6aa128dfd65404382482a665a8cc08f1da84f2f853b79610da8bdcf20004d621a4175061dae4", 0x91}, {&(0x7f0000001b00)="c86e17efdd61617b6bd24e2a0c1f20b05dc319327d1f7db34cfa3061a5c0ece63ea68c85f9b3eed2db7ff0fbd263e8800b0b8592a8b6647fc1dbcd0d9f8d169f2bd00b8dda1d472713aed6e809672ba77e84400eda59f4a05900220b34bf1fb8b55a40c6feab6e8c9171d7beb19c", 0x6e}], 0x3}}, {{&(0x7f0000001bc0)=@ll={0x11, 0xc, r8, 0x1, 0x1}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001c40)="8af804db89218c9ec4e409f8de60dc909dce55e0b2895895a9631c039c23b6318c709bfbb9b0ef98bb903c17449d89adfd6d88ba71128b629e717ba3ad207b401ee33e6192c7f32affe0152a9beb3db91a514fb87e47c3a1d7f264c396a12c8e440b3797a3f318b67a2bc75b7155418f4a163b8bfe56d0a6", 0x78}, {&(0x7f0000001cc0)="52d73ff9698154fc9db4bff7d5174a27541b7e074b5358dc99f073b9c4e934b8ec7c64ea13960818f63fa66ba76d0376c1766bb9ad642fa61dc8c646e9b4f2b71019441cfbce79fc02e88008ea11b7c9c45c5ee55cab6ed526785fbbf4994023b3f36e288bd891ad6266aa9993ce8d9de13d1a1bdce26e0226514a67c0ee680e033af0a40b8e8be2ed2d4ac8ceaef188135cf90bb99fe647ab02cd9923e5d9dd142dd0fe095c04784287111460466627d19fadbfe4ad58357562ecbc2d75ec6994ad30233b8752864e2c9221a7ee33a8270b057f", 0xd4}, {&(0x7f0000001dc0)="852083a2f614a864088bbc307fd09f477a1a4e9eda30f866b68b53e13949f9dd9c94f481048b7593ca6dbccc9f4c6d56b9837be8e2d1d0f982c91196615bf0cc869bfb7372eaa419f07b34844c69865ddbe875d62a7ffa7ebecf530d14ba42225f8e3e8a201dd685f4534e6ca1318db6ad474896be233b2224da880863d2fc8c0fa765f0a04c944369f55a28d7ba6dc8c990407dd5cce12311483d2861b6bddb70b98d3c7e5a748fc2d8dacc4e038c8157d69c4f2660b62ebda4926015f369ff20e4dbbccb5fe359c3045bcf92995e96d5c832add7", 0xd5}, {&(0x7f0000001ec0)="3ef4e6d8a5bdb602bc649d21c2a8a90af66efbdfa1c28d416f1b865f1504a2491984426218a6ca320ca871b687e18d84464ffd3b7e0a442bb00f420f41bbf9b25ce6ec98c11d9ff4", 0x48}, {&(0x7f0000001f40)="a6338393146952ae0913c5b995d95645e31ac01bb1aa0f0a457a9cb9f5102b95074b80424c9d30e98dd67f3e2f2e1962ee9d72caba448b66723d66bbd616592f397801725e4155717f9b58c67ab9038257419b499de066a88ffcec47c941ab9d183d17d00f74fc198272e526f82ac3675dc6b897bc98857462742a124a61ba03f942be0199108eac283cf7bfd6d2b05ff9e3ec5dea513844947ab232339f209ce339db52", 0xa4}], 0x5, &(0x7f0000002080)=[@txtime={{0x18, 0x1, 0x3d, 0xa4}}], 0x18}}], 0x5, 0x4000084) 1.607723502s ago: executing program 0 (id=5899): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, 0x0, 0x0, 0x10100, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) r3 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x5ac}], 0x1}}], 0x1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r8, 0x5, 0x0, 0x0, {0x7, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IPV6MASK={0x8, 0x3, @mcast2={0xff, 0x7, '\x00', 0xa}}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) close(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0xc1}]}, @restrict={0xb, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x28) syz_emit_ethernet(0xc0, &(0x7f0000000180)={@broadcast, @random="1804be5a9bde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb2, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @remote, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}, {@local}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private}, {@multicast2}, {@local}, {@remote}, {@private}, {@dev={0xac, 0x14, 0x14, 0x80}}, {@private}]}]}}, "c979f5b1b500"}}}}}, 0x0) 1.446488205s ago: executing program 3 (id=6007): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x400, @none}, 0xe) listen(r0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = accept(r0, 0x0, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000140)={r0}) socket$inet6(0xa, 0x3, 0x6) (async, rerun: 32) r2 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, &(0x7f0000000600)) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/136, 0x88}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/211, 0xd3}], 0x3, 0x5, 0x7) sendfile(r3, r3, 0x0, 0x1) 1.299375258s ago: executing program 2 (id=6008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) close(r2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="580000001000090600"/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="08002800988da8"], 0x58}}, 0x4000) 1.153761116s ago: executing program 3 (id=6009): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d0001"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0040040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000000000700a09b1d6acbb54823e00000000100000aa79a16872b9b14e480205cfe4dc8"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_80211_inject_frame(&(0x7f0000000600)=@broadcast, &(0x7f00000006c0)=ANY=[@ANYBLOB="08ba06000802110000009ad0f4428195a634aa68cbfe2ad106004780"], 0x1c) 865.608208ms ago: executing program 2 (id=6010): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x9, 0x0, 0x3, 0x8, 0x4}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000400004803c0001800b00010065787468647200002c000280050002000000000008000340000000000800014000000013080004400000000008000540000002"], 0x94}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000001c0)={r3, 0x2, 0x7}, 0x8) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) (async) pipe(&(0x7f0000000280)) (async) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendto$inet6(r0, &(0x7f0000000240)="eb", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb4386e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000e000100636f6e6e62797465730000000900010073797a30000000000900020073797a32000000"], 0xb0}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) (async) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000080)) 683.148732ms ago: executing program 4 (id=6011): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x100, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x802}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfc0}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4000000000000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x4048000}, 0x20044040) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x407, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x1c}}, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0503000000000000f6ff0700000008000300", @ANYRES32], 0x1c}}, 0x24044080) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6c9ff732}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffe00}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8db}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}}, 0x80) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x54, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 681.53286ms ago: executing program 2 (id=6012): unshare(0x22020600) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf090000000000005509010000030000950000000000000085100000f5ffffffbf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb300000000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="050001"], 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000080)='b', 0x1}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x0, 0x4) r5 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000009c0)={0x0, 0x8, 0x10, 0x1, 0xffffffffffffff01}, &(0x7f0000000a00)=0x18) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000a40)={0x0, 0x69, "7c54a5516082c5f5effac8e49dd66d4da79b8c876c49040c837a6b7eaf7bb1e2f11abf4ad2d4ef4b6ce8af0f5e28a489f44d8d6663813ce9042a797c41f7cf14c335f222852ee775ad6fb3dddc78d116124c45d786305ec3fd368b864c7c2472803bd0369db404e10d"}, &(0x7f0000000ac0)=0x71) sendmsg$inet_sctp(r5, &(0x7f0000000bc0)={&(0x7f0000000500)=@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x26}, 0x40}, 0x1c, &(0x7f0000000940)=[{&(0x7f0000000540)="c4846bdbf7b667e7d9144a921728e4", 0xf}, {&(0x7f0000000580)="6bedfbd10e9336fe014b782747d3195faf46308b65eeed3c3d04d61a9a44ebeae42efb77fa0e676609a668b3910a89eaf659d35a8c74a02269ac6625f0708e18ccddd667a35db89875e45488a38f34af654282b2fe5758a4a44189404ddd8b", 0x5f}, {&(0x7f0000000600)="d730afcd7ee9f5ae33f82223f44a4d1db55f4fcecb7168843e5de8e8d4846c093d1b1262ee0bc94dcdbe18e3da865155645ec0fbb198d973a0014c09c0f0e86ae9a36566e57149b83089d611d6c6866a80d98e0aa011f451fa54410602cdb5bb25def29075993eea85591d594bfa51a35a1c309d01eb1a8cd77e053a69a15140cb14481a55978ee87a221f11c412abd7", 0x90}, {&(0x7f00000006c0)="f930c8cc9b010d070a7d1b42d1179645ebd0a1b9ca6f07b395fb249658fcccf5efc57c2191f3b1932d870648f505ccd1f4383900f20baf5cbd6148e394ba0279829c9c0687e5dec25df137e89b356f2fd9d353029923762074b86bdd8a622813d55cbc9f28287b4ea5024f8e2a1221ddcf53", 0x72}, {&(0x7f0000000740)="58d57d147932c1", 0x7}, {&(0x7f0000000780)="ebdedb5c68986f2be3b562bd4adcfd3948c401599c35dcced51e6cf6f3a70c73723d0f61f20693e64e", 0x29}, {&(0x7f0000000840)="a147b8849b39509d2cc8eb2566d3da55cf1a0f0a298f7fa301e05b17e124f72d0f18020725936fecadeef7049cf9711da48920ae9152fdb2b3dbee58223ebaeed74ad3b5941d5444d05a5b73b6701b01eaba7b19eb8a89cc180e38f968834999fb3531fa32011bb6ea056387e7f8f3d9f59e64e36cef1709860cd64183b5ebafe84f0599ea12a65324efa2a6349b7524c1196c080998aa08f3bc3ce135d4beaf4ed11834f3140b7d2cc9b950ed87e15d13df519d5609ee1ee619c107198ed32458d95b71bc49d45e071750704f6705b296bfb57810cb0c916fbc22f21969fe5d60bdd150385344e502d14c01366da059171e368aade8e6", 0xf7}], 0x7, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x8009, 0x5, 0x648, r6}}, @sndinfo={0x20, 0x84, 0x2, {0xdc4, 0x208, 0xfff, 0xffffffa7}}, @init={0x18, 0x84, 0x0, {0x8, 0x7, 0xee6, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0xe93, 0x0, 0x8002, 0x2, 0x0, 0x0, 0x6, 0x80000001, r7}}], 0x88, 0x40}, 0x4095) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=@gettfilter={0x64, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x2, 0xe}, {0xd, 0xffe0}, {0xf, 0xdac5e9b77d3d872e}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x401}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x8c}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x18, &(0x7f0000000000)=0xf3, 0x4) getsockopt$inet_tcp_buf(r9, 0x6, 0x18, 0x0, &(0x7f0000000340)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x3, 0x7, [0x800, 0x77c9, 0x885d, 0x3, 0xb8, 0xa9e8, 0xa]}, &(0x7f0000000440)=0x16) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f0000000480)={r11, 0x65}, &(0x7f00000004c0)=0x8) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') socket$inet_udplite(0x2, 0x2, 0x88) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r13, 0x1, 0x4c, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r12}]}, 0x3c}}, 0x0) 622.885096ms ago: executing program 0 (id=6013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='xprt_reserve\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 483.673045ms ago: executing program 4 (id=6014): r0 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}}, 0x800) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040c0}, 0x48802) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x810) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 426.668708ms ago: executing program 3 (id=6015): sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, 0x0, 0xfc00) socket$kcm(0x21, 0x2, 0xa) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}, 0x1, 0x600000000000000}, 0x20040000) 302.017527ms ago: executing program 2 (id=6016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002c40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003600)={0x34, r3, 0x51b, 0x7, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048004}, 0x4000000) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21cc0f6fbd0dc42c}, 0x4000054) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7fffffffffffffff}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 242.401068ms ago: executing program 3 (id=6017): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@get={0x128, 0x13, 0x400, 0x70bd26, 0x25dfdbfb, {{'morus640-sse2\x00'}, '\x00', '\x00', 0x2600, 0x400}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0xeffffffc}, {0x8, 0x1, 0xfffffbfa}, {0x8, 0x1, 0xf}, {0x8}, {0x8, 0x1, 0x8000}, {0x8}, {0x8, 0x1, 0x82a7}, {0x8, 0x1, 0x7}]}, 0x128}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=@get={0x100, 0x13, 0x300, 0x70bd2b, 0x25dfdbfd, {{'stdrng\x00'}, '\x00', '\x00', 0x2000, 0x2400}, [{0x8, 0x1, 0x3ff}, {0x8, 0x1, 0xfffffffd}, {0x8, 0x1, 0x4c1}, {0x8, 0x1, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x8080}, 0x40000) r0 = socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 191.463899ms ago: executing program 0 (id=6018): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="18080400430001002c0012801100010062726964676500006c61766500000000140005800600020068"], 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffffd}]}}]}, 0x38}}, 0x0) 91.920286ms ago: executing program 3 (id=6019): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0x79, 0x7, 0x1, 0x0, "f45b0eb823a8d4a7a78f604883ba5ab12558529c7292177e6230e70e63fa14f5b7fc9a34a187926d36e181a8ab1161ba96207249f9bd7628e0fc36399c7219453d2cbbf98ec54aef21629846ca3513a5dedf0543fc8c76b9aa4fba9cd671fabe5836c6c5a8d8e59ab774652d436742b5480eb2ba2a"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xd0}}, 0x0) 0s ago: executing program 3 (id=6020): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) recvfrom$unix(r3, &(0x7f0000000c00)=""/4096, 0x1000, 0x40, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r6, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x3c}}, 0x15) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xb}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 4.638412][T20354] tipc: Resetting bearer [ 404.666067][T20349] tipc: Resetting bearer [ 404.789803][T20349] tipc: Disabling bearer [ 405.760414][T20426] netlink: 'syz.0.4159': attribute type 12 has an invalid length. [ 405.768497][T20426] netlink: 'syz.0.4159': attribute type 29 has an invalid length. [ 405.776898][T20426] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4159'. [ 405.786390][T20426] netlink: 'syz.0.4159': attribute type 2 has an invalid length. [ 405.794531][T20426] netlink: 23 bytes leftover after parsing attributes in process `syz.0.4159'. [ 405.986917][T20433] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4161'. [ 406.142610][T20445] netlink: 'syz.0.4164': attribute type 21 has an invalid length. [ 406.164128][T20445] netlink: 'syz.0.4164': attribute type 22 has an invalid length. [ 406.196448][T20445] netlink: 'syz.0.4164': attribute type 23 has an invalid length. [ 406.254386][T20445] netlink: 'syz.0.4164': attribute type 25 has an invalid length. [ 406.299613][T20445] netlink: 'syz.0.4164': attribute type 26 has an invalid length. [ 406.330089][T20445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4164'. [ 406.346310][T20451] netlink: 'syz.2.4165': attribute type 1 has an invalid length. [ 406.355083][T20451] netlink: 1172 bytes leftover after parsing attributes in process `syz.2.4165'. [ 406.437911][T20454] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4166'. [ 406.511142][T20455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4166'. [ 407.873328][T20455] bridge_slave_0: left allmulticast mode [ 407.879023][T20455] bridge_slave_0: left promiscuous mode [ 407.888052][T20455] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.992330][T20459] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4168'. [ 408.075544][T20465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'. [ 408.183425][T20468] validate_nla: 3 callbacks suppressed [ 408.183448][T20468] netlink: 'syz.2.4171': attribute type 29 has an invalid length. [ 408.230779][T20473] netlink: 'syz.2.4171': attribute type 29 has an invalid length. [ 408.242060][T20472] hsr_slave_0: left promiscuous mode [ 408.407867][T20489] netlink: 'syz.0.4176': attribute type 1 has an invalid length. [ 408.432458][T20479] bridge_slave_0: left allmulticast mode [ 408.438152][T20479] bridge_slave_0: left promiscuous mode [ 408.453811][T20479] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.472253][T20479] bridge_slave_1: left allmulticast mode [ 408.488154][T20479] bridge_slave_1: left promiscuous mode [ 408.508624][T20479] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.556345][T20479] team0: Port device team_slave_0 removed [ 408.575880][T20479] team0: Port device team_slave_1 removed [ 408.595605][T20479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.609119][T20479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.641224][T20479] bond1: left promiscuous mode [ 408.652338][T20479] bridge0: port 3(bond1) entered disabled state [ 408.689275][T20473] team0: Device vti0 is up. Set it down before adding it as a team port [ 408.743298][T20508] __nla_validate_parse: 4 callbacks suppressed [ 408.743317][T20508] netlink: 300 bytes leftover after parsing attributes in process `syz.3.4179'. [ 408.809001][T20489] bond8 (unregistering): Released all slaves [ 408.894344][T20491] ip6tnl2: entered promiscuous mode [ 408.913234][T20491] ip6tnl2: entered allmulticast mode [ 409.012622][T20512] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4180'. [ 409.109577][T20522] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 409.161277][T20526] gretap2: entered promiscuous mode [ 409.185851][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4185'. [ 409.302246][T20538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4186'. [ 409.338932][T20541] netlink: 'syz.0.4187': attribute type 3 has an invalid length. [ 409.349787][T20532] veth7: entered allmulticast mode [ 409.377275][T20541] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.521609][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4189'. [ 409.689834][T20562] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.731446][T20562] bridge_slave_1: left allmulticast mode [ 409.747462][T20562] bridge_slave_1: left promiscuous mode [ 409.765006][T20562] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.822393][T20571] openvswitch: netlink: Message has -1 unknown bytes. [ 409.841475][T20562] bond0: (slave bond_slave_0): Releasing backup interface [ 409.893656][T20562] bond0: (slave bond_slave_1): Releasing backup interface [ 409.945729][T20562] team0: Port device team_slave_0 removed [ 409.994588][T20562] team0: Port device team_slave_1 removed [ 410.014061][T20562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.027130][T20562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.035610][T20562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.306124][T20587] syzkaller1: entered promiscuous mode [ 410.315393][T20601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4201'. [ 410.322932][T20587] syzkaller1: entered allmulticast mode [ 410.391627][T20602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4204'. [ 410.402054][T20602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4204'. [ 410.411396][T20602] netlink: 'syz.3.4204': attribute type 15 has an invalid length. [ 410.436310][T20602] netlink: 'syz.3.4204': attribute type 1 has an invalid length. [ 410.474473][T20602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4204'. [ 410.651530][T20607] netlink: 'syz.0.4205': attribute type 1 has an invalid length. [ 410.682898][T20607] netlink: 'syz.0.4205': attribute type 2 has an invalid length. [ 410.704962][T20607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4205'. [ 410.927028][T20621] syzkaller1: entered promiscuous mode [ 410.973036][T20632] netlink: 'syz.3.4213': attribute type 1 has an invalid length. [ 410.994013][T20621] syzkaller1: entered allmulticast mode [ 411.402880][T20647] netlink: 'syz.2.4218': attribute type 7 has an invalid length. [ 411.622104][T20661] lo: left promiscuous mode [ 411.675551][T20661] tunl0: left promiscuous mode [ 411.716728][T20661] gre0: left promiscuous mode [ 411.819245][T20661] gretap0: left promiscuous mode [ 411.836043][T20661] erspan0: left promiscuous mode [ 411.871484][T20661] ip_vti0: left promiscuous mode [ 411.917260][T20661] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.207776][T20661] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.685003][T20699] sctp: [Deprecated]: syz.4.4234 (pid 20699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.685003][T20699] Use struct sctp_sack_info instead [ 412.914115][T20711] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 413.065193][T20677] hsr0 speed is unknown, defaulting to 1000 [ 413.090135][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 413.113541][T20677] lo speed is unknown, defaulting to 1000 [ 413.274538][T20730] validate_nla: 4 callbacks suppressed [ 413.274557][T20730] netlink: 'syz.2.4240': attribute type 18 has an invalid length. [ 413.309198][T20731] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 413.666409][T20746] netlink: 'syz.2.4245': attribute type 10 has an invalid length. [ 413.912818][T20753] __nla_validate_parse: 11 callbacks suppressed [ 413.912839][T20753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4247'. [ 414.307802][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4253'. [ 414.394142][T20769] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4254'. [ 414.471916][T20780] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4256'. [ 414.492421][T20781] openvswitch: netlink: IPv6 tunnel dst address is zero [ 414.527585][T20769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4254'. [ 414.597713][T20787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4258'. [ 414.674342][T20781] netlink: 'syz.2.4257': attribute type 1 has an invalid length. [ 414.948988][T20798] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4262'. [ 414.995747][T20798] netlink: 176 bytes leftover after parsing attributes in process `syz.4.4262'. [ 415.093146][T20806] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4265'. [ 415.464911][T20826] netlink: 'syz.3.4273': attribute type 1 has an invalid length. [ 415.499565][T20826] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4273'. [ 417.024660][T20903] tipc: Enabling of bearer rejected, failed to enable media [ 417.521834][T20927] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 417.546259][T20925] syz.1.4306 uses old SIOCAX25GETINFO [ 417.647375][T20936] netlink: 'syz.4.4307': attribute type 3 has an invalid length. [ 418.579684][T20964] netlink: 'syz.4.4317': attribute type 1 has an invalid length. [ 418.633712][T20966] bond0: entered promiscuous mode [ 418.639053][T20966] dummy0: entered promiscuous mode [ 418.679386][T20964] bond2: (slave geneve3): making interface the new active one [ 418.713346][T20964] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 418.722642][ T6410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 418.732820][ T6399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 418.820753][ T6399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 418.843101][ T6399] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 419.026843][T20983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.038050][T20983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.049046][T20983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.217174][T20983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.236395][T21002] netlink: 'syz.1.4329': attribute type 1 has an invalid length. [ 419.247664][T21002] __nla_validate_parse: 10 callbacks suppressed [ 419.247679][T21002] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4329'. [ 419.265735][T21002] netlink: 21 bytes leftover after parsing attributes in process `syz.1.4329'. [ 419.278347][T20983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.298261][T20983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.343514][T20997] Bluetooth: MGMT ver 1.23 [ 419.350065][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4330'. [ 419.397973][T21008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4330'. [ 419.415676][T20983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.426510][T20983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.473753][T20983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.633626][T20983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.659493][T20983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.681981][T20983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 419.724843][T21020] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4335'. [ 419.885775][T21030] C: renamed from team_slave_0 [ 419.904631][T21030] netlink: 'syz.1.4338': attribute type 1 has an invalid length. [ 419.931049][T21030] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 420.002260][T21030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4338'. [ 420.017190][ T6399] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.031094][ T6399] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 420.039631][ T6399] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.063388][ T6399] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.100070][ T6399] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 420.123190][ T6399] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.205508][ T6399] nci: nci_rsp_packet: unsupported rsp opcode 0xf2d [ 420.211408][ T6412] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.224753][ T6412] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 420.257375][ T6412] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.267767][ T6412] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.286799][ T6412] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 420.307642][ T6412] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 420.351634][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'. [ 420.385255][T21051] netlink: 'syz.2.4345': attribute type 15 has an invalid length. [ 420.405180][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4345'. [ 420.424114][T21059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4347'. [ 420.435768][T21059] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 420.449529][T21059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.462175][T21051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4345'. [ 420.471341][T20577] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 420.479660][T20577] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 420.494777][T20577] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 420.508965][T20577] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 420.518766][T21051] netlink: 'syz.2.4345': attribute type 15 has an invalid length. [ 421.143794][T21091] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 421.493749][T21112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.235887][T21136] bond2: entered promiscuous mode [ 422.241204][T21136] bond2: entered allmulticast mode [ 422.246811][T21136] 8021q: adding VLAN 0 to HW filter on device bond2 [ 422.456547][T21150] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 422.500696][T21150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.093864][T21187] netlink: 'syz.0.4385': attribute type 21 has an invalid length. [ 423.275251][T21195] tipc: Enabled bearer , priority 0 [ 423.288840][T21195] syzkaller0: entered promiscuous mode [ 423.316666][T21195] syzkaller0: entered allmulticast mode [ 423.658521][T21213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.824365][T21220] openvswitch: netlink: Flow key attr not present in new flow. [ 423.966150][T21230] netlink: 'syz.2.4400': attribute type 1 has an invalid length. [ 423.985128][T21189] tipc: Resetting bearer [ 424.037439][T21189] tipc: Disabling bearer [ 424.404698][T21255] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 424.432742][T21255] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 424.583666][T21267] __nla_validate_parse: 10 callbacks suppressed [ 424.583687][T21267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4412'. [ 424.813202][T21285] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 424.914560][T21288] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4418'. [ 424.945435][T21292] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4418'. [ 424.969369][T21288] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4418'. [ 424.997309][T21294] syz_tun: entered allmulticast mode [ 425.020355][T21293] syz_tun: left allmulticast mode [ 425.660440][T21336] netlink: 'syz.0.4433': attribute type 10 has an invalid length. [ 425.674516][T21336] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 425.850794][T21345] netlink: 'syz.4.4437': attribute type 1 has an invalid length. [ 425.884990][T21335] IPv6: sit2: Disabled Multicast RS [ 425.907069][T21335] sit2: entered allmulticast mode [ 425.971341][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4438'. [ 425.989329][T21352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4438'. [ 426.066913][T21345] 8021q: adding VLAN 0 to HW filter on device bond3 [ 426.086423][T21351] vlan2: entered allmulticast mode [ 426.092511][T21351] veth1: entered allmulticast mode [ 426.099366][T21351] bond3: (slave vlan2): Opening slave failed [ 426.690139][T21270] Bluetooth: hci2: command 0x0406 tx timeout [ 427.121731][T21378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4448'. [ 427.211015][T21380] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4448'. [ 427.275103][T21382] netlink: 'syz.0.4450': attribute type 33 has an invalid length. [ 427.304292][T21382] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4450'. [ 427.331369][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4450'. [ 427.405435][T21382] netlink: 'syz.0.4450': attribute type 33 has an invalid length. [ 427.842666][T21430] syzkaller0: entered promiscuous mode [ 427.848308][T21430] syzkaller0: entered allmulticast mode [ 428.702651][T21447] netlink: 'syz.2.4465': attribute type 1 has an invalid length. [ 428.740885][T21447] netlink: 'syz.2.4465': attribute type 10 has an invalid length. [ 428.748977][T21447] netlink: 'syz.2.4465': attribute type 4 has an invalid length. [ 428.764663][T21453] netlink: zone id is out of range [ 428.942840][T21458] netlink: 'syz.1.4470': attribute type 11 has an invalid length. [ 429.125841][T21470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.359477][T21483] bridge2: entered allmulticast mode [ 429.419450][T21482] bridge2: left allmulticast mode [ 429.454657][T21491] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.487547][T21491] netlink: 'syz.2.4480': attribute type 4 has an invalid length. [ 429.604512][T21503] __nla_validate_parse: 8 callbacks suppressed [ 429.604531][T21503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4486'. [ 429.655151][T21504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4485'. [ 429.677643][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4485'. [ 429.694463][T21509] sctp: [Deprecated]: syz.3.4487 (pid 21509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 429.694463][T21509] Use struct sctp_sack_info instead [ 429.871625][T21517] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4490'. [ 430.062898][T20577] tipc: Subscription rejected, illegal request [ 430.121358][T21530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.492385][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4501'. [ 430.643527][T21560] netlink: 'syz.3.4502': attribute type 15 has an invalid length. [ 430.654347][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4502'. [ 430.683615][T20577] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 430.683625][T21560] netlink: 'syz.3.4502': attribute type 15 has an invalid length. [ 430.683648][T21560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4502'. [ 430.705172][T20577] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 430.772129][T20577] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 430.791408][T20577] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 430.826222][T21569] delete_channel: no stack [ 430.959744][T21577] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 431.207168][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4517'. [ 431.257141][T21604] netlink: 'syz.0.4517': attribute type 1 has an invalid length. [ 431.269722][T21604] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4517'. [ 431.292728][T21607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4518'. [ 431.391611][T21612] netlink: 'syz.4.4519': attribute type 11 has an invalid length. [ 432.011131][T21656] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 432.087384][T21656] bond5: entered promiscuous mode [ 432.096729][T21656] bond5: entered allmulticast mode [ 432.103453][T21656] 8021q: adding VLAN 0 to HW filter on device bond5 [ 432.182014][ T6410] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.194523][T21668] netlink: 'syz.1.4538': attribute type 2 has an invalid length. [ 432.202543][ T6410] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.222360][ T6410] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.233049][ T6410] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.417279][T21681] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 432.504958][T21683] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 432.889506][T21709] netlink: 'syz.0.4550': attribute type 7 has an invalid length. [ 433.553395][T21750] wg1: entered promiscuous mode [ 433.568783][T21750] wg1: entered allmulticast mode [ 433.675441][T21753] syzkaller1: entered promiscuous mode [ 433.690587][T21753] syzkaller1: entered allmulticast mode [ 434.323744][T21790] netlink: 'syz.2.4575': attribute type 10 has an invalid length. [ 434.348573][T21790] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 434.551688][T21755] lec:lec_atm_close: lec0: Shut down! [ 434.570112][T21802] netlink: 'syz.1.4579': attribute type 16 has an invalid length. [ 434.577954][T21802] netlink: 'syz.1.4579': attribute type 3 has an invalid length. [ 434.682092][T21802] __nla_validate_parse: 12 callbacks suppressed [ 434.682112][T21802] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4579'. [ 434.742196][T21809] tipc: Enabling of bearer rejected, failed to enable media [ 434.859216][T21813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4583'. [ 434.864391][T21270] Bluetooth: hci5: command tx timeout [ 435.174357][T21834] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4588'. [ 435.239065][T21837] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4588'. [ 435.472588][T21856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4596'. [ 435.628483][T21862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4599'. [ 435.732720][T21872] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4602'. [ 435.864890][T21881] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 435.896150][T21880] macsec1: entered promiscuous mode [ 435.912191][T21880] macsec1: entered allmulticast mode [ 436.005537][T21887] netlink: 'syz.3.4609': attribute type 1 has an invalid length. [ 436.062026][T21887] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4609'. [ 436.094591][T21887] nbd: couldn't find a device at index 1 [ 436.148053][T21897] tipc: Enabled bearer , priority 0 [ 436.206231][T21896] tipc: Disabling bearer [ 436.467415][T21911] bridge5: entered promiscuous mode [ 436.510043][T21911] bridge5: entered allmulticast mode [ 436.554522][T21920] netlink: 'syz.1.4620': attribute type 13 has an invalid length. [ 436.773804][T21936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4626'. [ 436.931388][T21270] Bluetooth: hci1: command 0x0406 tx timeout [ 438.002120][T21955] sock: sock_timestamping_bind_phc: sock not bind to device [ 438.040199][T21943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.065654][T21943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 438.087870][T21943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 438.232501][T21943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.260927][T21943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 438.316640][T21943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 438.523414][T21981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4640'. [ 438.596275][T21943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.624309][T21943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 438.652443][T21943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 438.843269][T21943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.884981][T21943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 438.896553][T21943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 439.206747][ T3533] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.215346][ T3533] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 439.234251][ T3533] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.284915][T22014] netlink: 'syz.3.4651': attribute type 7 has an invalid length. [ 439.293311][ T3533] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.302625][ T3533] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 439.330542][ T3533] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.357983][ T3533] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.379232][ T3533] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 439.399704][ T3533] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.477955][ T3533] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 439.491145][ T3533] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 439.509746][ T3533] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 439.519420][T22021] 8021q: VLANs not supported on ip6_vti0 [ 439.702185][T22030] atomic_op ffff888059114998 conn xmit_atomic 0000000000000000 [ 439.929059][T22038] netlink: 'syz.3.4659': attribute type 3 has an invalid length. [ 439.938787][T22038] __nla_validate_parse: 4 callbacks suppressed [ 439.938804][T22038] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4659'. [ 439.974046][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.377203][T22062] tipc: Enabled bearer , priority 0 [ 440.430393][T22062] syzkaller0: entered promiscuous mode [ 440.454755][T22062] syzkaller0: entered allmulticast mode [ 440.485645][T22061] tipc: Resetting bearer [ 440.553607][T22075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.598814][T22061] tipc: Disabling bearer [ 441.034904][T22102] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4678'. [ 441.044511][T22102] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4678'. [ 441.056592][T22102] netlink: 'syz.2.4678': attribute type 5 has an invalid length. [ 441.064707][T22102] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4678'. [ 441.344822][T22111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4681'. [ 441.519283][T22117] netlink: 'syz.2.4682': attribute type 12 has an invalid length. [ 441.537282][T22117] syzkaller1: left promiscuous mode [ 441.551114][T22117] syzkaller1: left allmulticast mode [ 441.566857][T22117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4682'. [ 441.905207][T22134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4688'. [ 441.925901][T22134] openvswitch: netlink: Flow actions attr not present in new flow. [ 441.943697][T22134] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4688'. [ 441.953760][T22136] netlink: 212316 bytes leftover after parsing attributes in process `syz.2.4689'. [ 442.460634][T22160] pim6reg1: entered promiscuous mode [ 442.477898][T22160] pim6reg1: entered allmulticast mode [ 442.494799][T22160] netlink: 'syz.0.4698': attribute type 1 has an invalid length. [ 442.514295][T22166] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 442.524078][T22168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4699'. [ 442.530071][T22166] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 442.667226][T22168] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 442.680257][T22182] netlink: 'syz.2.4703': attribute type 1 has an invalid length. [ 442.698676][T22182] netlink: 'syz.2.4703': attribute type 1 has an invalid length. [ 442.936708][T22189] sit1: entered promiscuous mode [ 442.950248][T22189] sit1: entered allmulticast mode [ 443.307207][T22215] openvswitch: netlink: Multiple metadata blocks provided [ 443.351288][T22215] netlink: 'syz.3.4716': attribute type 4 has an invalid length. [ 443.370117][T22217] netlink: 'syz.3.4716': attribute type 4 has an invalid length. [ 443.425212][T22231] netlink: 'syz.2.4720': attribute type 11 has an invalid length. [ 443.498078][ T7297] lo speed is unknown, defaulting to 1000 [ 443.519857][ T7297] syz0: Port: 1 Link DOWN [ 443.532874][ T7297] lo speed is unknown, defaulting to 1000 [ 443.568394][T22235] team0: Device vti0 is up. Set it down before adding it as a team port [ 443.613384][T22238] netlink: 'syz.1.4721': attribute type 1 has an invalid length. [ 444.034315][T22270] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 444.045636][T22270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.105477][T22273] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 444.159695][T22273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.425894][T22290] syzkaller1: entered promiscuous mode [ 444.443019][T22290] syzkaller1: entered allmulticast mode [ 444.636808][T22296] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 444.664371][T22296] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 444.710105][T22302] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 444.970415][T22300] hsr0 speed is unknown, defaulting to 1000 [ 444.978426][T22300] lo speed is unknown, defaulting to 1000 [ 445.611424][T22334] __nla_validate_parse: 4 callbacks suppressed [ 445.611444][T22334] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4750'. [ 445.768264][T22342] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 445.862034][T22350] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4754'. [ 446.536913][T22375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4763'. [ 446.559578][T22378] validate_nla: 3 callbacks suppressed [ 446.559597][T22378] netlink: 'syz.3.4765': attribute type 62 has an invalid length. [ 446.595555][T22375] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4763'. [ 446.668513][T22384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4766'. [ 446.713443][T22383] netlink: 'syz.1.4767': attribute type 16 has an invalid length. [ 446.721984][T22383] netlink: 'syz.1.4767': attribute type 17 has an invalid length. [ 446.741967][T22388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4768'. [ 446.784763][T22391] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 446.890608][T22383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 447.708410][T22440] netlink: 'syz.0.4781': attribute type 12 has an invalid length. [ 447.780739][T22440] netlink: 'syz.0.4781': attribute type 29 has an invalid length. [ 447.788749][T22440] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4781'. [ 447.798866][T22440] netlink: 59 bytes leftover after parsing attributes in process `syz.0.4781'. [ 447.837302][T22443] veth0: entered promiscuous mode [ 447.851750][T22446] netlink: 'syz.1.4782': attribute type 39 has an invalid length. [ 447.945807][T22441] veth0: left promiscuous mode [ 448.290521][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 448.299069][T22465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4788'. [ 448.335054][T22465] openvswitch: netlink: Unknown nsh attribute 0 [ 448.341977][T22465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.360790][T22465] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 448.503580][T22484] netlink: 'syz.0.4792': attribute type 3 has an invalid length. [ 448.558926][T22484] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4792'. [ 448.687842][T22487] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 448.987066][T22506] tipc: Enabling of bearer rejected, failed to enable media [ 449.519371][T22542] veth0: entered promiscuous mode [ 449.557863][T22546] dvmrp0: entered allmulticast mode [ 449.572519][T22542] veth0: left promiscuous mode [ 449.583013][T22546] dvmrp0: left allmulticast mode [ 450.134066][T22573] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 450.162978][T22575] netlink: 'syz.1.4818': attribute type 29 has an invalid length. [ 450.226792][T22583] netlink: 'syz.1.4818': attribute type 29 has an invalid length. [ 450.559335][T22605] IPVS: length: 8 != 1152 [ 451.019549][T22642] dvmrp0: entered allmulticast mode [ 451.065210][T22640] dvmrp0: left allmulticast mode [ 451.354502][T22665] __nla_validate_parse: 12 callbacks suppressed [ 451.354520][T22665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4847'. [ 451.425953][T22669] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4848'. [ 451.457528][T22671] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4848'. [ 451.618825][T22677] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 452.150504][T22700] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4859'. [ 452.214542][T22705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4858'. [ 452.461409][T22718] tipc: Enabling of bearer rejected, media not registered [ 452.487447][T22720] tipc: Enabling of bearer rejected, media not registered [ 452.654796][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4867'. [ 452.716188][T22727] netlink: 'syz.3.4867': attribute type 83 has an invalid length. [ 452.726216][T22727] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4867'. [ 452.880527][T22733] GUP no longer grows the stack in syz.2.4869 (22733): 200000003000-20000000a000 (200000001000) [ 452.904570][T22733] CPU: 0 UID: 0 PID: 22733 Comm: syz.2.4869 Not tainted syzkaller #0 PREEMPT(full) [ 452.904599][T22733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.904620][T22733] Call Trace: [ 452.904629][T22733] [ 452.904639][T22733] dump_stack_lvl+0x189/0x250 [ 452.904681][T22733] ? irqentry_exit+0x74/0x90 [ 452.904711][T22733] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.904759][T22733] __get_user_pages+0x24d0/0x2ce0 [ 452.904787][T22733] ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190 [ 452.904845][T22733] ? rcu_is_watching+0x15/0xb0 [ 452.904871][T22733] __gup_longterm_locked+0xde9/0x1660 [ 452.904912][T22733] ? sanity_check_pinned_pages+0x123a/0x1300 [ 452.904945][T22733] gup_fast_fallback+0x1e6a/0x2010 [ 452.905007][T22733] ? __pfx_gup_fast_fallback+0x10/0x10 [ 452.905029][T22733] ? stack_trace_save+0x9c/0xe0 [ 452.905052][T22733] ? __pfx_stack_trace_save+0x10/0x10 [ 452.905088][T22733] ? pin_user_pages_fast+0x4d/0xb0 [ 452.905116][T22733] iov_iter_extract_pages+0x35a/0x5e0 [ 452.905151][T22733] extract_iter_to_sg+0xe46/0x24e0 [ 452.905200][T22733] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 452.905251][T22733] ? __asan_memset+0x22/0x50 [ 452.905278][T22733] af_alg_get_rsgl+0x436/0x810 [ 452.905323][T22733] aead_recvmsg+0x4cc/0x13f0 [ 452.905398][T22733] ? __pfx_aead_recvmsg+0x10/0x10 [ 452.905431][T22733] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 452.905454][T22733] ? __pfx_aead_recvmsg+0x10/0x10 [ 452.905482][T22733] sock_recvmsg_nosec+0x183/0x1c0 [ 452.905511][T22733] ____sys_recvmsg+0x3aa/0x460 [ 452.905541][T22733] ? __pfx_____sys_recvmsg+0x10/0x10 [ 452.905580][T22733] ? import_iovec+0x74/0xa0 [ 452.905606][T22733] ___sys_recvmsg+0x1b5/0x510 [ 452.905632][T22733] ? __pfx____sys_recvmsg+0x10/0x10 [ 452.905686][T22733] ? __might_fault+0xb0/0x130 [ 452.905717][T22733] do_recvmmsg+0x307/0x770 [ 452.905748][T22733] ? __pfx_do_recvmmsg+0x10/0x10 [ 452.905764][T22733] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 452.905808][T22733] ? __pfx_do_futex+0x10/0x10 [ 452.905849][T22733] __x64_sys_recvmmsg+0x190/0x240 [ 452.905872][T22733] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 452.905889][T22733] ? rcu_is_watching+0x15/0xb0 [ 452.905911][T22733] ? do_syscall_64+0xbe/0x3b0 [ 452.905943][T22733] do_syscall_64+0xfa/0x3b0 [ 452.905967][T22733] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.905991][T22733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.906010][T22733] ? clear_bhb_loop+0x60/0xb0 [ 452.906033][T22733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.906058][T22733] RIP: 0033:0x7f515758ebe9 [ 452.906077][T22733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.906093][T22733] RSP: 002b:00007f51583ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 452.906114][T22733] RAX: ffffffffffffffda RBX: 00007f51577b5fa0 RCX: 00007f515758ebe9 [ 452.906128][T22733] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 000000000000000b [ 452.906140][T22733] RBP: 00007f5157611e19 R08: 0000000000000000 R09: 0000000000000000 [ 452.906151][T22733] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000 [ 452.906162][T22733] R13: 00007f51577b6038 R14: 00007f51577b5fa0 R15: 00007ffd812fbfa8 [ 452.906193][T22733] [ 453.287498][T22748] netlink: 'syz.3.4874': attribute type 8 has an invalid length. [ 453.506289][T22759] FAULT_INJECTION: forcing a failure. [ 453.506289][T22759] name failslab, interval 1, probability 0, space 0, times 1 [ 453.548983][T22759] CPU: 1 UID: 0 PID: 22759 Comm: syz.1.4877 Not tainted syzkaller #0 PREEMPT(full) [ 453.549011][T22759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.549023][T22759] Call Trace: [ 453.549031][T22759] [ 453.549039][T22759] dump_stack_lvl+0x189/0x250 [ 453.549069][T22759] ? __pfx____ratelimit+0x10/0x10 [ 453.549096][T22759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.549120][T22759] ? __pfx__printk+0x10/0x10 [ 453.549149][T22759] ? __lock_acquire+0xab9/0xd20 [ 453.549189][T22759] should_fail_ex+0x414/0x560 [ 453.549221][T22759] should_failslab+0xa8/0x100 [ 453.549253][T22759] kmem_cache_alloc_noprof+0x73/0x3c0 [ 453.549279][T22759] ? skb_clone+0x212/0x3a0 [ 453.549305][T22759] skb_clone+0x212/0x3a0 [ 453.549330][T22759] __netlink_deliver_tap+0x404/0x850 [ 453.549374][T22759] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.549404][T22759] netlink_deliver_tap+0x19c/0x1b0 [ 453.549435][T22759] netlink_unicast+0x7fa/0x9e0 [ 453.549471][T22759] ? __pfx_netlink_unicast+0x10/0x10 [ 453.549506][T22759] ? netlink_sendmsg+0x642/0xb30 [ 453.549532][T22759] ? skb_put+0x11b/0x210 [ 453.549567][T22759] netlink_sendmsg+0x805/0xb30 [ 453.549607][T22759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.549640][T22759] ? aa_sock_msg_perm+0xf1/0x1d0 [ 453.549672][T22759] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.549694][T22759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.549724][T22759] __sock_sendmsg+0x21c/0x270 [ 453.549753][T22759] ____sys_sendmsg+0x52d/0x830 [ 453.549779][T22759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.549810][T22759] ? import_iovec+0x74/0xa0 [ 453.549837][T22759] ___sys_sendmsg+0x21f/0x2a0 [ 453.549860][T22759] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.549935][T22759] ? __might_fault+0xb0/0x130 [ 453.549968][T22759] __sys_sendmmsg+0x227/0x430 [ 453.549994][T22759] ? __pfx___sys_sendmmsg+0x10/0x10 [ 453.550012][T22759] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 453.550070][T22759] ? ksys_write+0x22a/0x250 [ 453.550099][T22759] ? __pfx_ksys_write+0x10/0x10 [ 453.550122][T22759] ? rcu_is_watching+0x15/0xb0 [ 453.550150][T22759] __x64_sys_sendmmsg+0xa0/0xc0 [ 453.550172][T22759] do_syscall_64+0xfa/0x3b0 [ 453.550199][T22759] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.550225][T22759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.550244][T22759] ? clear_bhb_loop+0x60/0xb0 [ 453.550269][T22759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.550288][T22759] RIP: 0033:0x7f6e2e38ebe9 [ 453.550306][T22759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.550323][T22759] RSP: 002b:00007f6e2f128038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 453.550344][T22759] RAX: ffffffffffffffda RBX: 00007f6e2e5b5fa0 RCX: 00007f6e2e38ebe9 [ 453.550358][T22759] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 453.550371][T22759] RBP: 00007f6e2f128090 R08: 0000000000000000 R09: 0000000000000000 [ 453.550383][T22759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.550394][T22759] R13: 00007f6e2e5b6038 R14: 00007f6e2e5b5fa0 R15: 00007ffdb42cb7f8 [ 453.550427][T22759] [ 453.889636][T22772] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4879'. [ 454.069545][T22780] netlink: 'syz.2.4883': attribute type 1 has an invalid length. [ 454.078413][T22780] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4883'. [ 454.136188][T22782] sch_tbf: burst 0 is lower than device lo mtu (76) ! [ 454.155972][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4882'. [ 454.208846][T22784] tipc: Enabled bearer , priority 0 [ 454.247083][T22784] syzkaller0: entered promiscuous mode [ 454.283495][T22784] syzkaller0: entered allmulticast mode [ 454.321439][T22784] tipc: Resetting bearer [ 454.352276][T22783] tipc: Resetting bearer [ 454.422931][T22783] tipc: Disabling bearer [ 454.783801][T22818] bond0: vlans aren't supported yet for dev_uc|mc_add() [ 454.918451][T22823] netlink: 'syz.2.4897': attribute type 1 has an invalid length. [ 455.604657][T22862] tipc: Can't bind to reserved service type 2 [ 456.558904][T22885] hsr0 speed is unknown, defaulting to 1000 [ 456.566792][T22885] lo speed is unknown, defaulting to 1000 [ 456.693547][T22901] __nla_validate_parse: 5 callbacks suppressed [ 456.693567][T22901] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4918'. [ 456.728532][T22905] netlink: 'syz.2.4919': attribute type 1 has an invalid length. [ 456.786336][T22905] netlink: 'syz.2.4919': attribute type 1 has an invalid length. [ 457.052171][T22917] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4923'. [ 457.122995][T22919] FAULT_INJECTION: forcing a failure. [ 457.122995][T22919] name failslab, interval 1, probability 0, space 0, times 0 [ 457.140474][T22919] CPU: 1 UID: 0 PID: 22919 Comm: syz.4.4924 Not tainted syzkaller #0 PREEMPT(full) [ 457.140521][T22919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.140535][T22919] Call Trace: [ 457.140543][T22919] [ 457.140553][T22919] dump_stack_lvl+0x189/0x250 [ 457.140584][T22919] ? __pfx____ratelimit+0x10/0x10 [ 457.140614][T22919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.140641][T22919] ? __pfx__printk+0x10/0x10 [ 457.140684][T22919] ? __pfx___might_resched+0x10/0x10 [ 457.140706][T22919] ? fs_reclaim_acquire+0x7d/0x100 [ 457.140745][T22919] should_fail_ex+0x414/0x560 [ 457.140787][T22919] should_failslab+0xa8/0x100 [ 457.140821][T22919] __kmalloc_cache_noprof+0x70/0x3d0 [ 457.140851][T22919] ? tcf_chain_create+0xb0/0x310 [ 457.140890][T22919] tcf_chain_create+0xb0/0x310 [ 457.140940][T22919] __tcf_chain_get+0x111/0x3c0 [ 457.140975][T22919] tc_new_tfilter+0x753/0x15b0 [ 457.141029][T22919] ? __pfx_tc_new_tfilter+0x10/0x10 [ 457.141092][T22919] ? __pfx_tc_new_tfilter+0x10/0x10 [ 457.141113][T22919] rtnetlink_rcv_msg+0x7cc/0xb70 [ 457.141144][T22919] ? __lock_acquire+0xab9/0xd20 [ 457.141186][T22919] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 457.141223][T22919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.141276][T22919] netlink_rcv_skb+0x208/0x470 [ 457.141310][T22919] ? __lock_acquire+0xab9/0xd20 [ 457.141342][T22919] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.141376][T22919] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.141423][T22919] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.141465][T22919] netlink_unicast+0x82c/0x9e0 [ 457.141505][T22919] ? __pfx_netlink_unicast+0x10/0x10 [ 457.141536][T22919] ? netlink_sendmsg+0x642/0xb30 [ 457.141565][T22919] ? skb_put+0x11b/0x210 [ 457.141604][T22919] netlink_sendmsg+0x805/0xb30 [ 457.141649][T22919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.141686][T22919] ? aa_sock_msg_perm+0xf1/0x1d0 [ 457.141722][T22919] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.141746][T22919] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.141779][T22919] __sock_sendmsg+0x21c/0x270 [ 457.141812][T22919] ____sys_sendmsg+0x52d/0x830 [ 457.141841][T22919] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.141876][T22919] ? import_iovec+0x74/0xa0 [ 457.141906][T22919] ___sys_sendmsg+0x21f/0x2a0 [ 457.141931][T22919] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.142012][T22919] ? __might_fault+0xb0/0x130 [ 457.142047][T22919] __sys_sendmmsg+0x227/0x430 [ 457.142078][T22919] ? __pfx___sys_sendmmsg+0x10/0x10 [ 457.142097][T22919] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 457.142170][T22919] ? ksys_write+0x22a/0x250 [ 457.142202][T22919] ? __pfx_ksys_write+0x10/0x10 [ 457.142240][T22919] __x64_sys_sendmmsg+0xa0/0xc0 [ 457.142265][T22919] do_syscall_64+0xfa/0x3b0 [ 457.142295][T22919] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.142323][T22919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.142345][T22919] ? clear_bhb_loop+0x60/0xb0 [ 457.142373][T22919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.142393][T22919] RIP: 0033:0x7fa34238ebe9 [ 457.142413][T22919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.142431][T22919] RSP: 002b:00007fa3431b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 457.142454][T22919] RAX: ffffffffffffffda RBX: 00007fa3425b5fa0 RCX: 00007fa34238ebe9 [ 457.142471][T22919] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 457.142486][T22919] RBP: 00007fa3431b3090 R08: 0000000000000000 R09: 0000000000000000 [ 457.142499][T22919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.142511][T22919] R13: 00007fa3425b6038 R14: 00007fa3425b5fa0 R15: 00007fff0cd38018 [ 457.142549][T22919] [ 457.618502][T22926] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 457.659668][T22928] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4927'. [ 457.749128][T22936] openvswitch: netlink: VXLAN extension message has 11 unknown bytes. [ 458.063239][T22945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.076456][T22947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.287930][T22957] FAULT_INJECTION: forcing a failure. [ 458.287930][T22957] name failslab, interval 1, probability 0, space 0, times 0 [ 458.320065][T22957] CPU: 1 UID: 0 PID: 22957 Comm: syz.4.4937 Not tainted syzkaller #0 PREEMPT(full) [ 458.320091][T22957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 458.320103][T22957] Call Trace: [ 458.320111][T22957] [ 458.320120][T22957] dump_stack_lvl+0x189/0x250 [ 458.320148][T22957] ? __pfx____ratelimit+0x10/0x10 [ 458.320176][T22957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.320199][T22957] ? __pfx__printk+0x10/0x10 [ 458.320232][T22957] ? __pfx___might_resched+0x10/0x10 [ 458.320257][T22957] should_fail_ex+0x414/0x560 [ 458.320287][T22957] should_failslab+0xa8/0x100 [ 458.320326][T22957] __kmalloc_cache_noprof+0x70/0x3d0 [ 458.320352][T22957] ? tcf_proto_create+0x65/0x330 [ 458.320377][T22957] tcf_proto_create+0x65/0x330 [ 458.320402][T22957] tc_new_tfilter+0x11aa/0x15b0 [ 458.320448][T22957] ? __pfx_tc_new_tfilter+0x10/0x10 [ 458.320501][T22957] ? __pfx_tc_new_tfilter+0x10/0x10 [ 458.320521][T22957] rtnetlink_rcv_msg+0x7cc/0xb70 [ 458.320548][T22957] ? __lock_acquire+0xab9/0xd20 [ 458.320578][T22957] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 458.320601][T22957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.320639][T22957] netlink_rcv_skb+0x208/0x470 [ 458.320661][T22957] ? __lock_acquire+0xab9/0xd20 [ 458.320685][T22957] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 458.320710][T22957] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.320743][T22957] ? netlink_deliver_tap+0x2e/0x1b0 [ 458.320773][T22957] netlink_unicast+0x82c/0x9e0 [ 458.320811][T22957] ? __pfx_netlink_unicast+0x10/0x10 [ 458.320833][T22957] ? netlink_sendmsg+0x642/0xb30 [ 458.320855][T22957] ? skb_put+0x11b/0x210 [ 458.320883][T22957] netlink_sendmsg+0x805/0xb30 [ 458.320933][T22957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.320962][T22957] ? aa_sock_msg_perm+0xf1/0x1d0 [ 458.320991][T22957] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 458.321009][T22957] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.321036][T22957] __sock_sendmsg+0x21c/0x270 [ 458.321062][T22957] ____sys_sendmsg+0x52d/0x830 [ 458.321085][T22957] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.321111][T22957] ? import_iovec+0x74/0xa0 [ 458.321134][T22957] ___sys_sendmsg+0x21f/0x2a0 [ 458.321153][T22957] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.321211][T22957] ? __might_fault+0xb0/0x130 [ 458.321238][T22957] __sys_sendmmsg+0x227/0x430 [ 458.321261][T22957] ? __pfx___sys_sendmmsg+0x10/0x10 [ 458.321276][T22957] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 458.321325][T22957] ? ksys_write+0x22a/0x250 [ 458.321351][T22957] ? __pfx_ksys_write+0x10/0x10 [ 458.321371][T22957] ? rcu_is_watching+0x15/0xb0 [ 458.321394][T22957] __x64_sys_sendmmsg+0xa0/0xc0 [ 458.321414][T22957] do_syscall_64+0xfa/0x3b0 [ 458.321438][T22957] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.321460][T22957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.321477][T22957] ? clear_bhb_loop+0x60/0xb0 [ 458.321499][T22957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.321515][T22957] RIP: 0033:0x7fa34238ebe9 [ 458.321530][T22957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.321545][T22957] RSP: 002b:00007fa3431b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 458.321563][T22957] RAX: ffffffffffffffda RBX: 00007fa3425b5fa0 RCX: 00007fa34238ebe9 [ 458.321576][T22957] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 458.321587][T22957] RBP: 00007fa3431b3090 R08: 0000000000000000 R09: 0000000000000000 [ 458.321598][T22957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 458.321608][T22957] R13: 00007fa3425b6038 R14: 00007fa3425b5fa0 R15: 00007fff0cd38018 [ 458.321636][T22957] [ 458.816271][T22968] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 458.892142][T22972] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 458.946337][T22975] IPv6: sit1: Disabled Multicast RS [ 459.288636][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4947'. [ 459.304393][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4947'. [ 459.317095][T23004] FAULT_INJECTION: forcing a failure. [ 459.317095][T23004] name failslab, interval 1, probability 0, space 0, times 0 [ 459.332058][T23004] CPU: 1 UID: 0 PID: 23004 Comm: syz.1.4949 Not tainted syzkaller #0 PREEMPT(full) [ 459.332086][T23004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.332099][T23004] Call Trace: [ 459.332107][T23004] [ 459.332117][T23004] dump_stack_lvl+0x189/0x250 [ 459.332148][T23004] ? __pfx____ratelimit+0x10/0x10 [ 459.332179][T23004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.332205][T23004] ? __pfx__printk+0x10/0x10 [ 459.332238][T23004] ? __lock_acquire+0xab9/0xd20 [ 459.332282][T23004] should_fail_ex+0x414/0x560 [ 459.332315][T23004] should_failslab+0xa8/0x100 [ 459.332349][T23004] kmem_cache_alloc_noprof+0x73/0x3c0 [ 459.332378][T23004] ? skb_clone+0x212/0x3a0 [ 459.332407][T23004] skb_clone+0x212/0x3a0 [ 459.332434][T23004] __netlink_deliver_tap+0x404/0x850 [ 459.332482][T23004] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.332515][T23004] netlink_deliver_tap+0x19c/0x1b0 [ 459.332548][T23004] netlink_unicast+0x7fa/0x9e0 [ 459.332588][T23004] ? __pfx_netlink_unicast+0x10/0x10 [ 459.332619][T23004] ? netlink_sendmsg+0x642/0xb30 [ 459.332647][T23004] ? skb_put+0x11b/0x210 [ 459.332682][T23004] netlink_sendmsg+0x805/0xb30 [ 459.332722][T23004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.332757][T23004] ? aa_sock_msg_perm+0xf1/0x1d0 [ 459.332791][T23004] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.332814][T23004] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.332847][T23004] __sock_sendmsg+0x21c/0x270 [ 459.332878][T23004] ____sys_sendmsg+0x52d/0x830 [ 459.332908][T23004] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.332942][T23004] ? import_iovec+0x74/0xa0 [ 459.332981][T23004] ___sys_sendmsg+0x21f/0x2a0 [ 459.333007][T23004] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.333087][T23004] ? __might_fault+0xb0/0x130 [ 459.333123][T23004] __sys_sendmmsg+0x227/0x430 [ 459.333164][T23004] ? __pfx___sys_sendmmsg+0x10/0x10 [ 459.333194][T23004] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 459.333253][T23004] ? ksys_write+0x22a/0x250 [ 459.333282][T23004] ? __pfx_ksys_write+0x10/0x10 [ 459.333304][T23004] ? rcu_is_watching+0x15/0xb0 [ 459.333332][T23004] __x64_sys_sendmmsg+0xa0/0xc0 [ 459.333355][T23004] do_syscall_64+0xfa/0x3b0 [ 459.333381][T23004] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.333407][T23004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.333427][T23004] ? clear_bhb_loop+0x60/0xb0 [ 459.333461][T23004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.333481][T23004] RIP: 0033:0x7f6e2e38ebe9 [ 459.333498][T23004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.333515][T23004] RSP: 002b:00007f6e2f128038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 459.333554][T23004] RAX: ffffffffffffffda RBX: 00007f6e2e5b5fa0 RCX: 00007f6e2e38ebe9 [ 459.333570][T23004] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 459.333584][T23004] RBP: 00007f6e2f128090 R08: 0000000000000000 R09: 0000000000000000 [ 459.333602][T23004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 459.333614][T23004] R13: 00007f6e2e5b6038 R14: 00007f6e2e5b5fa0 R15: 00007ffdb42cb7f8 [ 459.333650][T23004] [ 459.933899][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4954'. [ 459.956108][T23021] netlink: 'syz.2.4953': attribute type 8 has an invalid length. [ 459.978435][T23025] netlink: 'syz.4.4955': attribute type 11 has an invalid length. [ 459.999456][T23020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4954'. [ 460.028616][T23025] netlink: 'syz.4.4955': attribute type 11 has an invalid length. [ 460.060055][T23025] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4955'. [ 460.807822][T23070] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4967'. [ 460.931209][T23083] netlink: 'syz.1.4970': attribute type 1 has an invalid length. [ 461.083145][T23093] netlink: 'syz.2.4972': attribute type 29 has an invalid length. [ 461.358750][T23109] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4975'. [ 461.513023][T23119] netlink: 'syz.4.4980': attribute type 33 has an invalid length. [ 461.818297][T23135] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 461.883053][T23139] netlink: 'syz.1.4985': attribute type 2 has an invalid length. [ 462.100238][T23150] __nla_validate_parse: 1 callbacks suppressed [ 462.100256][T23150] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'. [ 462.466136][T23176] netlink: 'syz.2.4997': attribute type 3 has an invalid length. [ 462.542342][T23173] syzkaller0: entered promiscuous mode [ 462.570975][T23173] syzkaller0: entered allmulticast mode [ 463.007071][T20577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.015614][T20577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.052984][T23196] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5005'. [ 463.103927][T23198] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5005'. [ 463.184625][T23202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5006'. [ 463.565348][T23217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5008'. [ 463.817605][T23226] netlink: 'syz.3.5009': attribute type 4 has an invalid length. [ 463.827219][T23226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5009'. [ 464.205645][T23246] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 464.481095][T23266] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5022'. [ 464.508273][T23259] pimreg3: entered allmulticast mode [ 464.587722][T23272] syzkaller0: entered promiscuous mode [ 464.593483][T23272] syzkaller0: entered allmulticast mode [ 465.502589][T23305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5031'. [ 465.557425][T23307] netlink: 'syz.4.5032': attribute type 178 has an invalid length. [ 465.574683][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.640265][T23309] netlink: 'syz.1.5033': attribute type 2 has an invalid length. [ 465.675678][T23313] netlink: zone id is out of range [ 465.681723][T23313] netlink: del zone limit has 4 unknown bytes [ 466.050953][T23338] netlink: 'syz.1.5041': attribute type 21 has an invalid length. [ 466.073993][T23338] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5041'. [ 466.188238][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5044'. [ 466.278694][T23346] vlan0: entered allmulticast mode [ 466.285872][T23346] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 466.744631][T23378] netlink: 'syz.2.5054': attribute type 1 has an invalid length. [ 466.908637][T23348] hsr0 speed is unknown, defaulting to 1000 [ 466.918436][T23348] lo speed is unknown, defaulting to 1000 [ 466.930027][T23383] netlink: 'syz.0.5056': attribute type 1 has an invalid length. [ 467.650456][T21270] Bluetooth: hci3: command 0x0406 tx timeout [ 467.828641][T23420] : entered promiscuous mode [ 467.987644][T23430] sctp: [Deprecated]: syz.1.5070 (pid 23430) Use of int in max_burst socket option deprecated. [ 467.987644][T23430] Use struct sctp_assoc_value instead [ 468.215595][T23439] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 468.254058][T23437] __nla_validate_parse: 4 callbacks suppressed [ 468.254076][T23437] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5072'. [ 468.368476][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5074'. [ 468.665627][T23449] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 468.680461][T23451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5077'. [ 468.697676][T23449] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 468.705813][T23451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5077'. [ 469.012701][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5081'. [ 469.047471][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5081'. [ 469.078021][T23469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5081'. [ 469.138186][T23473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5083'. [ 469.183001][T23473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5083'. [ 469.520318][T23491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5088'. [ 469.565975][T23494] netlink: 'syz.0.5090': attribute type 1 has an invalid length. [ 469.956608][T23520] netlink: 'syz.1.5096': attribute type 1 has an invalid length. [ 470.009170][T23521] netlink: 'syz.2.5097': attribute type 1 has an invalid length. [ 470.232258][T23533] syzkaller0: entered promiscuous mode [ 470.237788][T23533] syzkaller0: entered allmulticast mode [ 470.765227][ T6423] veth0_to_bridge: left allmulticast mode [ 470.786512][ T6423] veth0_to_bridge: left promiscuous mode [ 470.795391][ T6423] bridge0: port 2(veth0_to_bridge) entered disabled state [ 470.829772][ T6423] bridge_slave_0: left allmulticast mode [ 470.837262][ T6423] bridge_slave_0: left promiscuous mode [ 470.838517][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 470.854802][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.725727][ T6423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.737936][ T6423] bond_slave_0: left allmulticast mode [ 471.748751][ T6423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.760939][ T6423] bond_slave_1: left allmulticast mode [ 471.774678][ T6423] bond0 (unregistering): (slave bond13): Releasing backup interface [ 471.789375][ T6423] bond13 (unregistering): left allmulticast mode [ 471.796616][ T6423] bond0 (unregistering): Released all slaves [ 471.908569][ T6423] bond1 (unregistering): Released all slaves [ 472.020219][ T6423] bond2 (unregistering): Released all slaves [ 472.129394][ T6423] bond3 (unregistering): Released all slaves [ 472.238569][ T6423] bond4 (unregistering): Released all slaves [ 472.354800][ T6423] bond5 (unregistering): Released all slaves [ 472.458932][ T6423] bond6 (unregistering): Released all slaves [ 472.564625][ T6423] bond7 (unregistering): Released all slaves [ 472.669695][ T6423] bond8 (unregistering): Released all slaves [ 472.773960][ T6423] bond9 (unregistering): Released all slaves [ 472.879719][ T6423] bond10 (unregistering): Released all slaves [ 472.976560][ T6423] bond11 (unregistering): Released all slaves [ 473.073722][ T6423] bond12 (unregistering): Released all slaves [ 473.176075][ T6423] bond13 (unregistering): Released all slaves [ 473.278595][ T6423] team0: Port device bond14 removed [ 473.285012][ T6423] bond14 (unregistering): Released all slaves [ 473.396558][ T6423] bond15 (unregistering): Released all slaves [ 473.504867][ T6423] bond16 (unregistering): Released all slaves [ 473.523421][ T6423] bond17 (unregistering): Released all slaves [ 473.633206][ T6423] bond18 (unregistering): Released all slaves [ 473.648591][ T6423] bond19 (unregistering): Released all slaves [ 473.667212][ T6423] bond20 (unregistering): Released all slaves [ 473.883764][T23590] tipc: Enabled bearer , priority 0 [ 473.909572][T23590] syzkaller0: entered promiscuous mode [ 473.924764][T23596] netlink: 'syz.0.5124': attribute type 6 has an invalid length. [ 473.938311][T23590] syzkaller0: entered allmulticast mode [ 473.977640][T23596] netlink: 'syz.0.5124': attribute type 6 has an invalid length. [ 474.103626][T23590] syzkaller0: mtu less than device minimum [ 474.126246][ T6423] tipc: Disabling bearer [ 474.168371][ T6423] tipc: Left network mode [ 474.211121][T23588] tipc: Resetting bearer [ 474.328657][T23588] tipc: Disabling bearer [ 474.696020][T23640] __nla_validate_parse: 43 callbacks suppressed [ 474.696064][T23640] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5134'. [ 475.134939][T23657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5141'. [ 475.158413][T23659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5141'. [ 475.214550][T23662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5142'. [ 475.294358][T23662] netlink: 516 bytes leftover after parsing attributes in process `syz.3.5142'. [ 476.612507][T23691] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5153'. [ 476.622717][T23691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5153'. [ 476.624421][T23698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5152'. [ 476.823605][T23706] warn_alloc: 1 callbacks suppressed [ 476.823623][T23706] syz.2.5155: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 476.878747][T23706] CPU: 1 UID: 0 PID: 23706 Comm: syz.2.5155 Not tainted syzkaller #0 PREEMPT(full) [ 476.878773][T23706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.878785][T23706] Call Trace: [ 476.878793][T23706] [ 476.878803][T23706] dump_stack_lvl+0x189/0x250 [ 476.878835][T23706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.878859][T23706] ? __pfx__printk+0x10/0x10 [ 476.878886][T23706] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 476.878908][T23706] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 476.878934][T23706] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 476.878959][T23706] warn_alloc+0x214/0x310 [ 476.878989][T23706] ? stack_depot_save_flags+0x40/0x860 [ 476.879017][T23706] ? __pfx_warn_alloc+0x10/0x10 [ 476.879052][T23706] ? kasan_save_track+0x4f/0x80 [ 476.879076][T23706] ? xskq_create+0x56/0x170 [ 476.879097][T23706] ? xsk_init_queue+0xb0/0x110 [ 476.879118][T23706] ? xsk_setsockopt+0x4dc/0x8d0 [ 476.879137][T23706] ? do_sock_setsockopt+0x17c/0x1b0 [ 476.879165][T23706] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 476.879181][T23706] ? do_syscall_64+0xfa/0x3b0 [ 476.879205][T23706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.879232][T23706] __vmalloc_node_range_noprof+0x125/0x12f0 [ 476.879291][T23706] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 476.879321][T23706] ? xskq_create+0x56/0x170 [ 476.879347][T23706] ? __kasan_kmalloc+0x93/0xb0 [ 476.879376][T23706] vmalloc_user_noprof+0xad/0xf0 [ 476.879403][T23706] ? xskq_create+0xbf/0x170 [ 476.879428][T23706] xskq_create+0xbf/0x170 [ 476.879457][T23706] xsk_init_queue+0xb0/0x110 [ 476.879483][T23706] xsk_setsockopt+0x4dc/0x8d0 [ 476.879508][T23706] ? __pfx_xsk_setsockopt+0x10/0x10 [ 476.879536][T23706] ? __pfx_aa_sk_perm+0x10/0x10 [ 476.879568][T23706] ? aa_sock_opt_perm+0xff/0x1b0 [ 476.879589][T23706] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 476.879609][T23706] ? __pfx_xsk_setsockopt+0x10/0x10 [ 476.879633][T23706] do_sock_setsockopt+0x17c/0x1b0 [ 476.879668][T23706] __x64_sys_setsockopt+0x13f/0x1b0 [ 476.879692][T23706] do_syscall_64+0xfa/0x3b0 [ 476.879716][T23706] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.879741][T23706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.879758][T23706] ? clear_bhb_loop+0x60/0xb0 [ 476.879782][T23706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.879800][T23706] RIP: 0033:0x7f515758ebe9 [ 476.879817][T23706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 476.879834][T23706] RSP: 002b:00007f51583ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 476.879854][T23706] RAX: ffffffffffffffda RBX: 00007f51577b5fa0 RCX: 00007f515758ebe9 [ 476.879868][T23706] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 476.879878][T23706] RBP: 00007f5157611e19 R08: 0000000000000004 R09: 0000000000000000 [ 476.879890][T23706] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.879901][T23706] R13: 00007f51577b6038 R14: 00007f51577b5fa0 R15: 00007ffd812fbfa8 [ 476.879932][T23706] [ 477.198160][ T6423] hsr_slave_0: left promiscuous mode [ 477.203805][T23706] Mem-Info: [ 477.207019][T23706] active_anon:3569 inactive_anon:0 isolated_anon:0 [ 477.207019][T23706] active_file:3205 inactive_file:39997 isolated_file:0 [ 477.207019][T23706] unevictable:768 dirty:46 writeback:0 [ 477.207019][T23706] slab_reclaimable:14062 slab_unreclaimable:152960 [ 477.207019][T23706] mapped:29103 shmem:1358 pagetables:1101 [ 477.207019][T23706] sec_pagetables:0 bounce:0 [ 477.207019][T23706] kernel_misc_reclaimable:0 [ 477.207019][T23706] free:1265654 free_pcp:13519 free_cma:0 [ 477.258215][T23706] Node 0 active_anon:14476kB inactive_anon:0kB active_file:12820kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116412kB dirty:184kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16360kB pagetables:4248kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 477.295406][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.305009][T23706] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 477.346457][ T6423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.354080][T23719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5160'. [ 477.374296][T23706] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 477.411439][T23706] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 477.421353][T23706] Node 0 DMA32 free:1151016kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14532kB inactive_anon:0kB active_file:12820kB inactive_file:158208kB unevictable:1536kB writepending:184kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:41668kB local_pcp:22008kB free_cma:0kB [ 477.464754][T23706] lowmem_reserve[]: 0 0 1 1 1 [ 477.475278][T23706] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 477.521952][T23706] lowmem_reserve[]: 0 0 0 0 0 [ 477.536854][T23706] Node 1 Normal free:3896228kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12192kB local_pcp:6848kB free_cma:0kB [ 477.578345][T23706] lowmem_reserve[]: 0 0 0 0 0 [ 477.584831][T23706] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 477.607292][T23706] Node 0 DMA32: 2384*4kB (UM) 701*8kB (UME) 210*16kB (UME) 307*32kB (UME) 56*64kB (UM) 41*128kB (UM) 27*256kB (UM) 92*512kB (UM) 75*1024kB (UM) 4*2048kB (UM) 238*4096kB (UM) = 1151016kB [ 477.627216][T23706] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 477.642098][T23706] Node 1 Normal: 183*4kB (UME) 53*8kB (UME) 46*16kB (UME) 184*32kB (UME) 45*64kB (UME) 10*128kB (UME) 5*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 946*4096kB (M) = 3896228kB [ 477.661830][T23706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.674093][T23706] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 477.684190][T23706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 477.694469][T23706] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 477.704162][T23706] 44557 total pagecache pages [ 477.709136][T23706] 0 pages in swap cache [ 477.716505][T23706] Free swap = 124996kB [ 477.727688][T23706] Total swap = 124996kB [ 477.735854][T23706] 2097051 pages RAM [ 477.739806][T23706] 0 pages HighMem/MovableOnly [ 477.755688][T23706] 425656 pages reserved [ 477.764972][T23706] 0 pages cma reserved [ 478.029666][ T6423] team0 (unregistering): Port device team_slave_1 removed [ 478.065659][ T6423] team0 (unregistering): Port device team_slave_0 removed [ 478.298308][T23720] netlink: 'syz.2.5155': attribute type 2 has an invalid length. [ 478.308928][T23720] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5155'. [ 478.556957][T23735] openvswitch: netlink: Key type 169 is out of range max 32 [ 478.648439][T23740] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 478.697406][T23740] pim6reg1: entered promiscuous mode [ 478.708990][T23740] pim6reg1: entered allmulticast mode [ 478.909112][ T6423] IPVS: stop unused estimator thread 0... [ 479.283611][T23783] netlink: 'syz.3.5178': attribute type 1 has an invalid length. [ 479.452635][T23791] gretap2: entered promiscuous mode [ 479.493197][T23791] bond3: (slave gretap2): making interface the new active one [ 479.530437][T23791] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 479.559204][T23795] macvlan2: entered promiscuous mode [ 479.564869][T23795] macvlan2: entered allmulticast mode [ 479.592493][T23795] bond3: entered promiscuous mode [ 479.603283][T23795] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 479.620080][T23795] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 479.640842][T23795] bond3: left promiscuous mode [ 479.752173][T23802] tipc: Enabled bearer , priority 0 [ 479.769230][T23802] syzkaller0: entered promiscuous mode [ 479.776200][T23802] syzkaller0: entered allmulticast mode [ 479.783747][T23804] __nla_validate_parse: 4 callbacks suppressed [ 479.783762][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5184'. [ 479.823115][T23802] tipc: Resetting bearer [ 479.879403][T23801] tipc: Resetting bearer [ 479.957917][T23801] tipc: Disabling bearer [ 480.098955][T23825] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5188'. [ 480.151826][T23825] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 480.195792][T23825] dummy0: left promiscuous mode [ 480.232846][T23834] IPv6: NLM_F_CREATE should be specified when creating new route [ 480.236126][T23825] bond0 (unregistering): Released all slaves [ 480.289333][T23834] openvswitch: netlink: IPv6 tunnel dst address is zero [ 482.178916][T23882] netlink: 'syz.3.5208': attribute type 30 has an invalid length. [ 482.215442][T23882] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 482.257014][T23882] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 482.448263][T23897] netlink: 376 bytes leftover after parsing attributes in process `syz.3.5212'. [ 482.479102][T23897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5212'. [ 482.499404][T23897] tc_dump_action: action bad kind [ 482.604236][T23897] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.5212'. [ 483.015702][T23932] netlink: 340 bytes leftover after parsing attributes in process `syz.3.5221'. [ 483.116223][T23932] netlink: 192 bytes leftover after parsing attributes in process `syz.3.5221'. [ 483.308932][T23948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5225'. [ 483.339535][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5225'. [ 483.344894][T23951] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 483.422417][T23956] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5227'. [ 483.447360][T23956] netem: invalid attributes len -24 [ 483.455226][T23960] openvswitch: netlink: Key 0 has unexpected len 3 expected 0 [ 483.461088][T23956] netem: change failed [ 483.619459][T23971] netlink: 'syz.3.5231': attribute type 10 has an invalid length. [ 483.657452][T23971] team0: Device hsr_slave_0 failed to register rx_handler [ 483.810598][T23979] IPVS: Unknown mcast interface: nicvf0 [ 484.027201][T23989] netlink: 'syz.2.5239': attribute type 1 has an invalid length. [ 484.122318][T23999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.245675][T23989] veth11: entered promiscuous mode [ 484.258475][T23989] bond0: (slave veth11): Enslaving as a backup interface with a down link [ 484.370128][T24014] erspan0: entered allmulticast mode [ 485.005384][T24041] syzkaller0: entered promiscuous mode [ 485.013995][T24041] syzkaller0: entered allmulticast mode [ 485.072178][T24048] __nla_validate_parse: 7 callbacks suppressed [ 485.072199][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5258'. [ 485.088974][T24038] can: request_module (can-proto-0) failed. [ 485.096156][T24041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 485.111367][T24047] netlink: 'syz.4.5257': attribute type 15 has an invalid length. [ 485.126102][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5258'. [ 485.153279][T24048] netlink: 'syz.0.5258': attribute type 18 has an invalid length. [ 485.205118][T24048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5258'. [ 485.230576][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5258'. [ 485.245949][T24048] netlink: 'syz.0.5258': attribute type 18 has an invalid length. [ 485.524256][T24066] dvmrp1: left allmulticast mode [ 486.635757][T24119] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 486.684143][T24121] netlink: 'syz.1.5280': attribute type 1 has an invalid length. [ 486.825623][T24121] veth7: entered promiscuous mode [ 486.835255][T24121] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 487.058745][T24144] netlink: 'syz.1.5287': attribute type 1 has an invalid length. [ 487.077285][T24144] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5287'. [ 487.376312][T24162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5292'. [ 487.536295][T24172] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 487.583778][T24172] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5295'. [ 487.775109][T24186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5299'. [ 487.883617][T24189] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 487.912896][T24189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5300'. [ 488.267191][T24214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5307'. [ 488.314135][T24218] delete_channel: no stack [ 488.410710][T24218] delete_channel: no stack [ 489.279049][T24264] netlink: 'syz.2.5320': attribute type 21 has an invalid length. [ 489.303482][T24264] netlink: 'syz.2.5320': attribute type 1 has an invalid length. [ 489.324492][T24268] veth0: entered promiscuous mode [ 490.092005][T24306] IPVS: Error connecting to the multicast addr [ 490.365708][T24323] ksmbd: Unknown IPC event: 3, ignore. [ 490.596668][T24328] tipc: Enabling of bearer rejected, failed to enable media [ 490.659710][T24339] __nla_validate_parse: 10 callbacks suppressed [ 490.659729][T24339] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5344'. [ 490.724811][T24338] netlink: 'syz.1.5345': attribute type 3 has an invalid length. [ 490.747509][T24338] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5345'. [ 491.020585][T24356] IPVS: Unknown mcast interface: vcan0 [ 491.224349][T24373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5355'. [ 491.723885][T24400] netlink: 'syz.1.5360': attribute type 1 has an invalid length. [ 491.806256][T24400] 8021q: adding VLAN 0 to HW filter on device bond8 [ 491.815365][T24400] bond7: (slave bond8): making interface the new active one [ 491.823842][T24400] bond7: (slave bond8): Enslaving as an active interface with an up link [ 491.858732][T24408] tipc: Enabling not permitted [ 491.864597][T24408] tipc: Enabling of bearer rejected, failed to enable media [ 491.901769][T24405] bond7: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 491.924850][T24405] bond7: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 492.248196][T24427] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5365'. [ 492.406302][T24432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5369'. [ 492.645625][T24451] netlink: 'syz.1.5374': attribute type 13 has an invalid length. [ 492.818132][T24451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.047099][T24472] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5377'. [ 493.058151][T24476] FAULT_INJECTION: forcing a failure. [ 493.058151][T24476] name failslab, interval 1, probability 0, space 0, times 0 [ 493.106776][T24476] CPU: 0 UID: 0 PID: 24476 Comm: syz.2.5379 Not tainted syzkaller #0 PREEMPT(full) [ 493.106803][T24476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.106815][T24476] Call Trace: [ 493.106823][T24476] [ 493.106831][T24476] dump_stack_lvl+0x189/0x250 [ 493.106859][T24476] ? __pfx____ratelimit+0x10/0x10 [ 493.106884][T24476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.106908][T24476] ? __pfx__printk+0x10/0x10 [ 493.106935][T24476] ? __lock_acquire+0xab9/0xd20 [ 493.106973][T24476] should_fail_ex+0x414/0x560 [ 493.107003][T24476] should_failslab+0xa8/0x100 [ 493.107032][T24476] kmem_cache_alloc_noprof+0x73/0x3c0 [ 493.107056][T24476] ? skb_clone+0x212/0x3a0 [ 493.107081][T24476] skb_clone+0x212/0x3a0 [ 493.107104][T24476] __netlink_deliver_tap+0x404/0x850 [ 493.107150][T24476] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.107178][T24476] netlink_deliver_tap+0x19c/0x1b0 [ 493.107207][T24476] netlink_unicast+0x7fa/0x9e0 [ 493.107241][T24476] ? __pfx_netlink_unicast+0x10/0x10 [ 493.107266][T24476] ? netlink_sendmsg+0x642/0xb30 [ 493.107291][T24476] ? skb_put+0x11b/0x210 [ 493.107323][T24476] netlink_sendmsg+0x805/0xb30 [ 493.107360][T24476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.107410][T24476] ? aa_sock_msg_perm+0xf1/0x1d0 [ 493.107443][T24476] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 493.107464][T24476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.107494][T24476] __sock_sendmsg+0x21c/0x270 [ 493.107523][T24476] ____sys_sendmsg+0x505/0x830 [ 493.107549][T24476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.107580][T24476] ? import_iovec+0x74/0xa0 [ 493.107608][T24476] ___sys_sendmsg+0x21f/0x2a0 [ 493.107631][T24476] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.107691][T24476] ? __fget_files+0x2a/0x420 [ 493.107735][T24476] ? __fget_files+0x3a0/0x420 [ 493.107774][T24476] __x64_sys_sendmsg+0x19b/0x260 [ 493.107796][T24476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.107825][T24476] ? __pfx_ksys_write+0x10/0x10 [ 493.107847][T24476] ? rcu_is_watching+0x15/0xb0 [ 493.107872][T24476] ? do_syscall_64+0xbe/0x3b0 [ 493.107903][T24476] do_syscall_64+0xfa/0x3b0 [ 493.107931][T24476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.107948][T24476] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 493.107965][T24476] ? clear_bhb_loop+0x60/0xb0 [ 493.107988][T24476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.108006][T24476] RIP: 0033:0x7f515758ebe9 [ 493.108023][T24476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.108039][T24476] RSP: 002b:00007f51583ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.108058][T24476] RAX: ffffffffffffffda RBX: 00007f51577b5fa0 RCX: 00007f515758ebe9 [ 493.108072][T24476] RDX: 0000000020040000 RSI: 0000200000000040 RDI: 0000000000000005 [ 493.108083][T24476] RBP: 00007f51583ab090 R08: 0000000000000000 R09: 0000000000000000 [ 493.108095][T24476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.108105][T24476] R13: 00007f51577b6038 R14: 00007f51577b5fa0 R15: 00007ffd812fbfa8 [ 493.108142][T24476] [ 493.113087][T24480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5378'. [ 493.299368][T24489] netlink: 'syz.0.5382': attribute type 21 has an invalid length. [ 493.380566][T24483] netlink: 'syz.3.5380': attribute type 2 has an invalid length. [ 493.450722][T24483] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5380'. [ 493.470025][T24474] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5378'. [ 493.488183][T24483] nbd: must specify a device to reconfigure [ 493.818927][T24509] netem: unknown loss type 0 [ 493.842230][T24509] netem: change failed [ 493.876261][T24513] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 493.887618][T24512] veth7: entered promiscuous mode [ 493.895158][T24512] veth7: entered allmulticast mode [ 493.932747][T24515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5392'. [ 494.043361][T24521] netlink: zone id is out of range [ 494.049344][T24521] netlink: zone id is out of range [ 494.054975][T24521] netlink: zone id is out of range [ 494.072701][T24521] netlink: zone id is out of range [ 494.077913][T24521] netlink: zone id is out of range [ 494.083282][T24521] netlink: zone id is out of range [ 494.088467][T24521] netlink: zone id is out of range [ 494.094120][T24521] netlink: zone id is out of range [ 494.102712][T24521] netlink: zone id is out of range [ 494.999252][T24566] 8021q: adding VLAN 0 to HW filter on device bond6 [ 495.242347][T24576] FAULT_INJECTION: forcing a failure. [ 495.242347][T24576] name failslab, interval 1, probability 0, space 0, times 0 [ 495.262109][T24576] CPU: 0 UID: 0 PID: 24576 Comm: syz.3.5411 Not tainted syzkaller #0 PREEMPT(full) [ 495.262138][T24576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 495.262151][T24576] Call Trace: [ 495.262160][T24576] [ 495.262169][T24576] dump_stack_lvl+0x189/0x250 [ 495.262200][T24576] ? __pfx____ratelimit+0x10/0x10 [ 495.262230][T24576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 495.262257][T24576] ? __pfx__printk+0x10/0x10 [ 495.262297][T24576] ? __pfx___might_resched+0x10/0x10 [ 495.262317][T24576] ? fs_reclaim_acquire+0x7d/0x100 [ 495.262357][T24576] should_fail_ex+0x414/0x560 [ 495.262394][T24576] should_failslab+0xa8/0x100 [ 495.262429][T24576] __kmalloc_cache_noprof+0x70/0x3d0 [ 495.262458][T24576] ? hash_ip_create+0x6d5/0x1410 [ 495.262498][T24576] hash_ip_create+0x6d5/0x1410 [ 495.262530][T24576] ? __lock_acquire+0xab9/0xd20 [ 495.262580][T24576] ? __pfx_hash_ip_create+0x10/0x10 [ 495.262617][T24576] ? __nla_parse+0x40/0x60 [ 495.262650][T24576] ? __pfx_hash_ip_create+0x10/0x10 [ 495.262685][T24576] ip_set_create+0xa97/0x1940 [ 495.262712][T24576] ? ip_set_create+0x4a2/0x1940 [ 495.262753][T24576] ? __pfx_ip_set_create+0x10/0x10 [ 495.262826][T24576] nfnetlink_rcv_msg+0xb4d/0x1130 [ 495.262856][T24576] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 495.262909][T24576] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 495.262934][T24576] ? kasan_save_free_info+0x46/0x50 [ 495.263028][T24576] netlink_rcv_skb+0x208/0x470 [ 495.263077][T24576] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 495.263110][T24576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 495.263162][T24576] ? bpf_lsm_capable+0x9/0x20 [ 495.263186][T24576] ? security_capable+0x7e/0x2e0 [ 495.263222][T24576] nfnetlink_rcv+0x26a/0x2520 [ 495.263249][T24576] ? __dev_queue_xmit+0x1d79/0x3b50 [ 495.263282][T24576] ? __dev_queue_xmit+0x27b/0x3b50 [ 495.263317][T24576] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 495.263340][T24576] ? __pfx___dev_queue_xmit+0x10/0x10 [ 495.263375][T24576] ? ref_tracker_free+0x63a/0x7d0 [ 495.263402][T24576] ? __asan_memcpy+0x40/0x70 [ 495.263422][T24576] ? __pfx_ref_tracker_free+0x10/0x10 [ 495.263467][T24576] ? skb_clone+0x246/0x3a0 [ 495.263490][T24576] ? __netlink_deliver_tap+0x807/0x850 [ 495.263517][T24576] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.263551][T24576] ? netlink_deliver_tap+0x2e/0x1b0 [ 495.263587][T24576] netlink_unicast+0x82c/0x9e0 [ 495.263622][T24576] ? __pfx_netlink_unicast+0x10/0x10 [ 495.263649][T24576] ? netlink_sendmsg+0x642/0xb30 [ 495.263673][T24576] ? skb_put+0x11b/0x210 [ 495.263705][T24576] netlink_sendmsg+0x805/0xb30 [ 495.263744][T24576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.263776][T24576] ? aa_sock_msg_perm+0xf1/0x1d0 [ 495.263806][T24576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.263827][T24576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.263855][T24576] __sock_sendmsg+0x21c/0x270 [ 495.263883][T24576] ____sys_sendmsg+0x505/0x830 [ 495.263909][T24576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.263938][T24576] ? import_iovec+0x74/0xa0 [ 495.263970][T24576] ___sys_sendmsg+0x21f/0x2a0 [ 495.263992][T24576] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.264052][T24576] ? __fget_files+0x2a/0x420 [ 495.264080][T24576] ? __fget_files+0x3a0/0x420 [ 495.264120][T24576] __x64_sys_sendmsg+0x19b/0x260 [ 495.264143][T24576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.264173][T24576] ? __pfx_ksys_write+0x10/0x10 [ 495.264196][T24576] ? rcu_is_watching+0x15/0xb0 [ 495.264220][T24576] ? do_syscall_64+0xbe/0x3b0 [ 495.264252][T24576] do_syscall_64+0xfa/0x3b0 [ 495.264276][T24576] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.264301][T24576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.264320][T24576] ? clear_bhb_loop+0x60/0xb0 [ 495.264343][T24576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.264361][T24576] RIP: 0033:0x7fae2dd8ebe9 [ 495.264377][T24576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.264394][T24576] RSP: 002b:00007fae2eb13038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.264413][T24576] RAX: ffffffffffffffda RBX: 00007fae2dfb5fa0 RCX: 00007fae2dd8ebe9 [ 495.264426][T24576] RDX: 0000000020040000 RSI: 0000200000000040 RDI: 0000000000000005 [ 495.264438][T24576] RBP: 00007fae2eb13090 R08: 0000000000000000 R09: 0000000000000000 [ 495.264449][T24576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.264459][T24576] R13: 00007fae2dfb6038 R14: 00007fae2dfb5fa0 R15: 00007ffd54b297a8 [ 495.264490][T24576] [ 495.892632][ T5883] Bluetooth: hci0: command tx timeout [ 495.919251][T24590] __nla_validate_parse: 4 callbacks suppressed [ 495.919269][T24590] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5417'. [ 495.997839][T24584] vxcan1: entered allmulticast mode [ 496.066015][T24596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5414'. [ 496.169041][T24605] netlink: 576 bytes leftover after parsing attributes in process `syz.0.5420'. [ 496.334850][T24611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5423'. [ 496.576230][T24626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5427'. [ 496.909184][T24653] netlink: 'syz.1.5436': attribute type 83 has an invalid length. [ 496.988843][T24661] netlink: 'syz.3.5438': attribute type 1 has an invalid length. [ 497.006539][T24664] nbd: must specify a device to reconfigure [ 497.023929][T24661] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5438'. [ 497.192891][T24673] netlink: 'syz.3.5440': attribute type 16 has an invalid length. [ 497.221313][T24673] netlink: 'syz.3.5440': attribute type 17 has an invalid length. [ 497.270792][T24677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5443'. [ 497.282761][T24677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5443'. [ 497.298279][T24673] erspan0: left allmulticast mode [ 497.328375][ T10] lo speed is unknown, defaulting to 1000 [ 497.328592][T24677] netlink: 'syz.0.5443': attribute type 11 has an invalid length. [ 497.336460][ T10] syz0: Port: 1 Link ACTIVE [ 497.361263][ T5859] lo speed is unknown, defaulting to 1000 [ 497.681138][T24697] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5449'. [ 497.695820][T24698] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5449'. [ 498.182727][T24729] tap0: tun_chr_ioctl cmd 1074025672 [ 498.188085][T24729] tap0: ignored: set checksum disabled [ 498.410359][ T6430] tipc: Subscription rejected, illegal request [ 498.638544][T24760] syzkaller1: entered allmulticast mode [ 499.362077][T24803] netlink: 'syz.3.5482': attribute type 10 has an invalid length. [ 499.405391][T24803] team0: Port device geneve0 added [ 499.648578][T24821] net_ratelimit: 1046 callbacks suppressed [ 499.648605][T24821] openvswitch: netlink: Multiple metadata blocks provided [ 499.665562][T24817] netem: change failed [ 499.978505][T24832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.401732][T24861] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 500.805544][T24890] macvlan0: entered promiscuous mode [ 500.811200][T24890] macvlan0: entered allmulticast mode [ 500.817645][T24890] bond9: entered promiscuous mode [ 500.826795][T24890] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 500.890919][T24890] bond9: left promiscuous mode [ 501.073425][T24908] __nla_validate_parse: 8 callbacks suppressed [ 501.073444][T24908] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5512'. [ 501.092084][T24908] netlink: 'syz.0.5512': attribute type 1 has an invalid length. [ 501.100082][T24908] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5512'. [ 501.166492][T24914] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 501.195536][T24914] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5515'. [ 501.274752][T24922] netlink: 'syz.3.5517': attribute type 2 has an invalid length. [ 501.297222][T24924] delete_channel: no stack [ 501.398082][T24927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5519'. [ 501.416028][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.456588][T24929] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 501.473385][T24932] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 501.503332][T24932] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 501.704995][T24943] tipc: Enabling of bearer rejected, failed to enable media [ 501.829170][T24957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5524'. [ 501.875586][T24940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5521'. [ 501.935222][T24962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5525'. [ 502.199045][T24974] netlink: 'syz.0.5528': attribute type 1 has an invalid length. [ 502.366836][T24974] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 502.408452][T24986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5530'. [ 502.438606][T24986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5530'. [ 502.450976][ T5883] Bluetooth: hci1: command 0x0406 tx timeout [ 502.568851][T24989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5531'. [ 502.579043][T24989] netlink: 'syz.4.5531': attribute type 10 has an invalid length. [ 502.587729][T24989] bridge0: port 1(team0) entered blocking state [ 502.622310][T24989] bridge0: port 1(team0) entered disabled state [ 502.650101][T24989] team0: entered allmulticast mode [ 502.674129][T24989] team0: entered promiscuous mode [ 502.818370][T25003] netlink: 'syz.4.5536': attribute type 33 has an invalid length. [ 502.951188][T25003] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 503.351445][T25039] netlink: 'syz.1.5547': attribute type 5 has an invalid length. [ 503.657830][T25044] macvlan2: entered allmulticast mode [ 503.681251][T25044] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 503.749801][T25047] netlink: 'syz.2.5549': attribute type 1 has an invalid length. [ 504.528436][T25100] netlink: 'syz.2.5566': attribute type 2 has an invalid length. [ 504.534489][T25098] sctp: [Deprecated]: syz.1.5564 (pid 25098) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.534489][T25098] Use struct sctp_sack_info instead [ 504.904427][T25121] netlink: 'syz.4.5570': attribute type 83 has an invalid length. [ 505.076621][T25133] netlink: 'syz.3.5572': attribute type 33 has an invalid length. [ 505.442319][T25148] veth1: entered allmulticast mode [ 505.629080][T25171] netlink: 'syz.1.5587': attribute type 1 has an invalid length. [ 505.727956][T25171] 8021q: adding VLAN 0 to HW filter on device bond10 [ 505.771331][T25179] 8021q: adding VLAN 0 to HW filter on device bond10 [ 505.778534][T25179] bond10: (slave vxcan5): The slave device specified does not support setting the MAC address [ 505.792629][T25179] bond10: (slave vxcan5): Error -95 calling set_mac_address [ 505.894772][T25171] veth9: entered promiscuous mode [ 505.906097][T25171] bond10: (slave veth9): Enslaving as an active interface with a down link [ 505.938878][T25189] vlan0: entered allmulticast mode [ 505.947715][T25189] bond10: entered allmulticast mode [ 506.232328][T25186] hsr0 speed is unknown, defaulting to 1000 [ 506.249000][T25186] lo speed is unknown, defaulting to 1000 [ 506.941775][T25241] bond2: (slave veth5): Releasing backup interface [ 506.963005][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.008204][T25241] bond0: (slave veth11): Releasing backup interface [ 507.019319][T25252] netlink: 'syz.3.5610': attribute type 1 has an invalid length. [ 507.031754][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.227205][T25254] macvlan2: entered promiscuous mode [ 507.249611][T25254] macvlan2: entered allmulticast mode [ 507.256386][T25254] bond5: entered promiscuous mode [ 507.263073][T25254] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 507.280299][T25254] bond5: left promiscuous mode [ 507.324460][T25260] veth0_to_bridge: entered promiscuous mode [ 507.341216][T25260] veth0_to_bridge: left promiscuous mode [ 507.418002][T25263] ip6erspan0: entered promiscuous mode [ 507.470291][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 507.547079][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.190080][T25300] netlink: 'syz.0.5626': attribute type 33 has an invalid length. [ 508.224392][T25300] __nla_validate_parse: 12 callbacks suppressed [ 508.224408][T25300] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5626'. [ 508.254556][T25301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5626'. [ 508.269389][T25303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5628'. [ 508.751074][T25327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5634'. [ 508.868268][T25294] hsr0 speed is unknown, defaulting to 1000 [ 508.880225][T25330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5634'. [ 508.911763][T25294] lo speed is unknown, defaulting to 1000 [ 509.799818][T25367] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5643'. [ 510.034118][T25383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5646'. [ 510.233500][T25390] tipc: Enabled bearer , priority 0 [ 510.406081][T25390] tipc: Disabling bearer [ 510.616723][T25407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.912605][T25425] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 511.223287][T25447] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5665'. [ 511.244206][T25449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5666'. [ 511.263979][T25449] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 511.272002][T25449] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.403396][T25462] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5671'. [ 511.508445][T25465] netlink: 'syz.0.5672': attribute type 1 has an invalid length. [ 512.078556][T25498] netlink: 'syz.2.5685': attribute type 13 has an invalid length. [ 512.097344][T25498] lo: entered promiscuous mode [ 512.107199][T25498] lo: entered allmulticast mode [ 512.172528][T25498] tunl0: entered promiscuous mode [ 512.184513][T25498] tunl0: entered allmulticast mode [ 512.199609][T25498] gre0: entered promiscuous mode [ 512.205465][T25498] gre0: entered allmulticast mode [ 512.268866][T25498] gretap0: entered promiscuous mode [ 512.275280][T25498] gretap0: entered allmulticast mode [ 512.285844][T25498] gretap0: refused to change device tx_queue_len [ 512.294179][T25498] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 512.331466][T25498] veth0_to_bridge: entered promiscuous mode [ 512.855155][T25534] netlink: 'syz.1.5695': attribute type 1 has an invalid length. [ 512.888092][T25497] veth0_to_bridge: left promiscuous mode [ 512.907199][T25509] hsr0 speed is unknown, defaulting to 1000 [ 512.931314][T25509] lo speed is unknown, defaulting to 1000 [ 512.951102][T25536] 0ªî{X¹¦: renamed from gretap0 [ 512.964353][T25536] 0ªî{X¹¦: entered allmulticast mode [ 512.975127][T25536] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 513.239040][T25550] __nla_validate_parse: 10 callbacks suppressed [ 513.239167][T25550] netlink: 71 bytes leftover after parsing attributes in process `syz.1.5699'. [ 514.131722][T25587] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5711'. [ 514.191653][T25587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5711'. [ 514.483551][T25603] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5713'. [ 514.601970][T25612] nbd: must specify a size in bytes for the device [ 514.961654][T25612] sch_tbf: peakrate 2 is lower than or equals to rate 14785714993491659474 ! [ 514.992079][T25625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5719'. [ 515.218668][T25634] netlink: 'syz.0.5720': attribute type 1 has an invalid length. [ 515.537992][T25655] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.733248][T25666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'. [ 515.763297][T25666] netlink: 'syz.1.5731': attribute type 1 has an invalid length. [ 515.771283][T25666] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5731'. [ 515.780633][T25666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'. [ 515.808005][T25662] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5729'. [ 515.861063][T25675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5730'. [ 515.871748][T25672] delete_channel: no stack [ 515.878672][T25672] delete_channel: no stack [ 515.909598][T25672] delete_channel: no stack [ 515.941850][T25672] delete_channel: no stack [ 515.966435][T25681] netlink: 'syz.0.5733': attribute type 12 has an invalid length. [ 515.981196][T25672] delete_channel: no stack [ 515.998708][T25672] delete_channel: no stack [ 516.024198][T25681] netlink: 'syz.0.5733': attribute type 29 has an invalid length. [ 516.033297][T25672] delete_channel: no stack [ 516.037883][T25672] delete_channel: no stack [ 516.060277][T25672] delete_channel: no stack [ 516.073483][T25672] delete_channel: no stack [ 516.078391][T25672] delete_channel: no stack [ 516.101430][T25672] delete_channel: no stack [ 516.106033][T25672] delete_channel: no stack [ 516.133190][T25672] delete_channel: no stack [ 516.137788][T25672] delete_channel: no stack [ 516.162110][T25672] delete_channel: no stack [ 516.172203][T25672] delete_channel: no stack [ 516.176791][T25672] delete_channel: no stack [ 516.203972][T25672] delete_channel: no stack [ 516.208575][T25672] delete_channel: no stack [ 516.235390][T25672] delete_channel: no stack [ 516.246014][T25672] delete_channel: no stack [ 516.265309][T25672] delete_channel: no stack [ 516.282088][T25672] delete_channel: no stack [ 516.336469][T25672] delete_channel: no stack [ 516.349111][T25672] delete_channel: no stack [ 516.353996][T25672] delete_channel: no stack [ 516.358744][T25672] delete_channel: no stack [ 516.365414][T25672] delete_channel: no stack [ 516.374429][T25672] delete_channel: no stack [ 516.379147][T25672] delete_channel: no stack [ 516.384077][T25672] delete_channel: no stack [ 516.388798][T25672] delete_channel: no stack [ 516.450663][T25709] netlink: 'syz.4.5738': attribute type 1 has an invalid length. [ 516.458576][T25709] netlink: 'syz.4.5738': attribute type 1 has an invalid length. [ 516.467345][T25709] netlink: 'syz.4.5738': attribute type 2 has an invalid length. [ 516.489606][T25708] netlink: 'syz.2.5739': attribute type 4 has an invalid length. [ 516.770076][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 516.871997][T25732] netlink: 'syz.3.5745': attribute type 1 has an invalid length. [ 516.891825][T25736] netlink: 'syz.1.5746': attribute type 11 has an invalid length. [ 516.908098][T25736] netlink: 'syz.1.5746': attribute type 11 has an invalid length. [ 517.500571][T25753] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 517.626936][T25768] sctp: [Deprecated]: syz.2.5755 (pid 25768) Use of int in maxseg socket option. [ 517.626936][T25768] Use struct sctp_assoc_value instead [ 517.683561][T25771] sctp: [Deprecated]: syz.2.5755 (pid 25771) Use of int in maxseg socket option. [ 517.683561][T25771] Use struct sctp_assoc_value instead [ 517.790878][T25778] netlink: 'syz.4.5756': attribute type 10 has an invalid length. [ 517.900300][T25783] geneve3: entered promiscuous mode [ 517.905587][T25783] geneve3: entered allmulticast mode [ 518.141137][T25800] xfrm1: entered promiscuous mode [ 518.164155][T25800] xfrm1: entered allmulticast mode [ 518.291022][T25815] __nla_validate_parse: 17 callbacks suppressed [ 518.291043][T25815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5770'. [ 518.318805][T25815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5770'. [ 518.342295][T25822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5772'. [ 518.857854][T25852] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 519.101059][T25866] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5784'. [ 519.120574][T25866] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5784'. [ 519.204604][T25872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5786'. [ 519.269226][T25876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5787'. [ 519.293558][T25877] ip6gre0: Master is either lo or non-ether device [ 519.605596][T25894] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5792'. [ 519.707431][T25901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5795'. [ 520.130290][T21270] Bluetooth: hci5: command 0x0405 tx timeout [ 520.182737][T25933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5803'. [ 520.283943][ T5883] block nbd5: Receive control failed (result -32) [ 520.707451][T25960] veth0_to_team: entered promiscuous mode [ 520.724124][T25960] veth0_to_team: entered allmulticast mode [ 520.843157][T25969] validate_nla: 5 callbacks suppressed [ 520.843177][T25969] netlink: 'syz.3.5819': attribute type 1 has an invalid length. [ 520.975815][T25974] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 521.128172][T25980] bond7: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 521.227280][T25969] veth7: entered promiscuous mode [ 521.261120][T25969] bond7: (slave veth7): Enslaving as a backup interface with a down link [ 521.291877][T25990] 8021q: adding VLAN 0 to HW filter on device bond7 [ 521.307132][ T6399] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 521.423552][ T6399] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 521.777279][T26027] netlink: 'syz.3.5832': attribute type 3 has an invalid length. [ 521.861600][T26032] netlink: 'syz.2.5829': attribute type 11 has an invalid length. [ 521.911858][T26034] netlink: 'syz.0.5835': attribute type 1 has an invalid length. [ 522.045510][T26034] 8021q: adding VLAN 0 to HW filter on device bond10 [ 522.097607][T26044] netlink: 'syz.1.5838': attribute type 1 has an invalid length. [ 522.104173][T26037] bond10: (slave wlan0): Enslaving as an active interface with an up link [ 522.139126][T26044] 8021q: adding VLAN 0 to HW filter on device bond11 [ 522.156405][T26041] vlan2: entered allmulticast mode [ 522.161947][T26041] veth1: entered allmulticast mode [ 522.167837][T26041] veth1: entered promiscuous mode [ 522.175793][T26041] bond10: (slave vlan2): Enslaving as an active interface with an up link [ 522.254829][T26042] tipc: Enabled bearer , priority 0 [ 522.280394][T26050] netlink: 'syz.0.5839': attribute type 12 has an invalid length. [ 522.310342][T26050] netlink: 'syz.0.5839': attribute type 29 has an invalid length. [ 522.339465][T26045] syzkaller0: entered promiscuous mode [ 522.347190][T26045] syzkaller0: entered allmulticast mode [ 522.359681][T26051] netlink: 'syz.0.5839': attribute type 12 has an invalid length. [ 522.373458][T26051] netlink: 'syz.0.5839': attribute type 29 has an invalid length. [ 522.423845][T26042] tipc: Resetting bearer [ 522.446156][T26040] tipc: Resetting bearer [ 522.523460][T26040] tipc: Disabling bearer [ 522.711885][T26077] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20002 [ 523.396208][T26114] netlink: 'syz.1.5857': attribute type 10 has an invalid length. [ 523.569505][T26122] sctp: [Deprecated]: syz.3.5861 (pid 26122) Use of int in max_burst socket option deprecated. [ 523.569505][T26122] Use struct sctp_assoc_value instead [ 523.851974][T26147] __nla_validate_parse: 13 callbacks suppressed [ 523.851996][T26147] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.5867'. [ 523.962185][T26152] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5870'. [ 524.052480][T26158] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5871'. [ 524.098691][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5872'. [ 524.131096][T26159] tipc: Enabling of bearer rejected, failed to enable media [ 524.207287][T26166] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5874'. [ 524.258347][T26170] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5876'. [ 524.342297][T26170] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 524.351659][T26186] gtp1: entered promiscuous mode [ 524.356646][T26186] gtp1: entered allmulticast mode [ 524.381041][T26187] netlink: 535 bytes leftover after parsing attributes in process `syz.1.5876'. [ 524.416127][T26189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5877'. [ 524.476427][T26189] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5877'. [ 524.519287][T26189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5877'. [ 524.723339][T26200] pim6reg1: entered promiscuous mode [ 524.743896][T26200] pim6reg1: entered allmulticast mode [ 524.842252][T26207] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 525.031584][T26220] tunl0: entered promiscuous mode [ 525.876353][T26269] netem: invalid attributes len -24 [ 525.905978][T26269] netem: change failed [ 525.933382][T26269] netem: invalid attributes len -24 [ 526.001442][T26269] netem: change failed [ 526.049102][T26269] netem: invalid attributes len -24 [ 526.068809][T26269] netem: change failed [ 526.118461][T26269] netem: invalid attributes len -24 [ 526.128264][T26269] netem: change failed [ 526.159628][T26269] netem: invalid attributes len -24 [ 526.171229][T26282] netlink: zone id is out of range [ 526.176923][T26269] netem: change failed [ 526.190822][T26269] netem: invalid attributes len -24 [ 526.210700][T26269] netem: change failed [ 526.239037][T26269] netem: invalid attributes len -24 [ 526.245141][T26269] netem: change failed [ 526.325574][T26285] gretap2: entered promiscuous mode [ 526.380593][T26285] gretap2: entered allmulticast mode [ 526.422865][T26269] netem: invalid attributes len -24 [ 526.428124][T26269] netem: change failed [ 526.480293][T26269] netem: invalid attributes len -24 [ 526.485703][T26269] netem: change failed [ 526.603506][T26269] netem: invalid attributes len -24 [ 526.608944][T26269] netem: change failed [ 526.634144][T21270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.663703][T21270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.681133][T21270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.694573][T21270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.703755][T21270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 527.105399][T26329] validate_nla: 37 callbacks suppressed [ 527.105419][T26329] netlink: 'syz.2.5918': attribute type 12 has an invalid length. [ 527.146854][T26329] netlink: 'syz.2.5918': attribute type 11 has an invalid length. [ 527.283739][T26336] netlink: 'syz.3.5920': attribute type 1 has an invalid length. [ 527.334233][T26336] netlink: 'syz.3.5920': attribute type 11 has an invalid length. [ 527.512296][T26304] hsr0 speed is unknown, defaulting to 1000 [ 527.531765][T26352] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 527.543360][T26304] lo speed is unknown, defaulting to 1000 [ 528.009577][T26373] vlan0: entered allmulticast mode [ 528.028309][T26373] bridge0: entered allmulticast mode [ 528.036837][T26373] bridge8: port 1(vlan0) entered blocking state [ 528.081719][T26373] bridge8: port 1(vlan0) entered disabled state [ 528.109414][T26373] vlan0: entered promiscuous mode [ 528.160695][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.185298][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.214713][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.320110][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 528.563873][T26404] netlink: 'syz.1.5937': attribute type 1 has an invalid length. [ 528.708523][T26304] chnl_net:caif_netlink_parms(): no params data found [ 528.726616][T26411] netlink: 'syz.3.5939': attribute type 49 has an invalid length. [ 528.746077][T26400] macvlan0: entered promiscuous mode [ 528.752085][T26400] macvlan0: entered allmulticast mode [ 528.758714][T26400] bond12: entered promiscuous mode [ 528.766048][T26400] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 528.779705][T26400] bond12: left promiscuous mode [ 528.780176][ T5883] Bluetooth: hci2: command tx timeout [ 529.207555][T26304] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.231441][T26304] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.249271][T26304] bridge_slave_0: entered allmulticast mode [ 529.257253][T26304] bridge_slave_0: entered promiscuous mode [ 529.283500][T26304] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.330865][T26304] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.338283][T26304] bridge_slave_1: entered allmulticast mode [ 529.363407][T26304] bridge_slave_1: entered promiscuous mode [ 529.496669][T26304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.585237][T26304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.709022][T26465] 8021q: VLANs not supported on pim6reg0 [ 529.732502][T26304] team0: Port device team_slave_0 added [ 529.754057][T26304] team0: Port device team_slave_1 added [ 529.994730][T26450] hsr0 speed is unknown, defaulting to 1000 [ 529.996572][T26304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.020939][T26304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.034730][T26474] netlink: 'syz.1.5952': attribute type 21 has an invalid length. [ 530.047578][T26304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.066865][T26450] lo speed is unknown, defaulting to 1000 [ 530.073175][T26471] __nla_validate_parse: 30 callbacks suppressed [ 530.073189][T26471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5953'. [ 530.257966][T26475] can: request_module (can-proto-0) failed. [ 530.302000][T26304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.325570][T26304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.354255][T26304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.575091][T26486] netlink: 'syz.1.5957': attribute type 4 has an invalid length. [ 530.582040][T26304] hsr_slave_0: entered promiscuous mode [ 530.594989][T26304] hsr_slave_1: entered promiscuous mode [ 530.607172][T26304] debugfs: 'hsr0' already exists in 'hsr' [ 530.614574][T26304] Cannot create hsr debugfs directory [ 530.621296][T26486] tipc: Enabled bearer , priority 0 [ 530.683259][T26486] syzkaller0: entered promiscuous mode [ 530.690950][T26486] syzkaller0: entered allmulticast mode [ 530.723609][T26486] tipc: Resetting bearer [ 530.791664][T26485] tipc: Resetting bearer [ 530.860481][ T5883] Bluetooth: hci2: command tx timeout [ 530.876221][T26485] tipc: Disabling bearer [ 531.589573][ T1313] nci: nci_rx_work: unknown MT 0x6 [ 531.754578][T26304] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.768187][T26304] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 531.780690][T26304] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 531.858006][T26304] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.868445][T26304] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 531.880589][T26304] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 531.952937][T26304] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 531.977677][T26304] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 531.992041][T26304] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 532.027853][T26537] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 532.049464][T26304] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.061397][T26304] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 532.072105][T26304] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 532.337497][T26304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 532.405980][T26304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 532.475992][T26304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 532.520962][T26304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 532.841327][T26563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5973'. [ 532.874594][T26563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5973'. [ 532.930613][ T5883] Bluetooth: hci2: command tx timeout [ 532.947782][T26567] gre2: entered promiscuous mode [ 532.965681][T26567] gre2: entered allmulticast mode [ 533.010926][T26553] hsr0 speed is unknown, defaulting to 1000 [ 533.028748][T26553] lo speed is unknown, defaulting to 1000 [ 533.135873][T26304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.179428][T26304] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.383862][ T6399] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.391207][ T6399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.523141][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.523237][T26584] openvswitch: netlink: Message has 16 unknown bytes. [ 533.530548][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.057164][ T5883] Bluetooth: hci0: command tx timeout [ 534.161955][T26602] netlink: 'syz.1.5985': attribute type 9 has an invalid length. [ 534.212078][T26603] netlink: 'syz.1.5985': attribute type 9 has an invalid length. [ 534.232397][T26608] netlink: 'syz.1.5985': attribute type 9 has an invalid length. [ 534.577947][T26621] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5992'. [ 534.630158][T26619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5992'. [ 534.660341][T26304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.901435][T26304] veth0_vlan: entered promiscuous mode [ 535.020975][ T5883] Bluetooth: hci2: command tx timeout [ 535.035550][T26304] veth1_vlan: entered promiscuous mode [ 535.131049][T26644] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5997'. [ 535.134396][T26645] netlink: 'syz.4.5998': attribute type 11 has an invalid length. [ 535.204765][T26304] veth0_macvtap: entered promiscuous mode [ 535.244685][T26304] veth1_macvtap: entered promiscuous mode [ 535.315907][T26304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.367842][T26304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.464612][ T6430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.514490][ T6430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.561283][ T6430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.573457][ T6430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.775352][ T6430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.805910][ T6430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.908374][ T6399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.927589][ T6399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.165459][T26682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5899'. [ 536.488079][T26693] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6008'. [ 537.032580][T26706] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 537.143480][T21270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 537.158193][T21270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 537.177556][T21270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 537.204416][T21270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 537.213506][T21270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 537.280355][ T6401] bridge_slave_0: left allmulticast mode [ 537.286086][ T6401] bridge_slave_0: left promiscuous mode [ 537.310564][ T6401] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.464986][T26726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6017'. [ 537.860695][ C0] ------------[ cut here ]------------ [ 537.866595][ C0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 537.872500][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 537.878917][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 537.888141][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.898211][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 537.903430][ C0] Code: 8e ae 00 e9 45 ff ff ff e8 62 25 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 10 a1 8a 03 e9 4d ff ff ff e8 46 25 4b 00 90 <0f> 0b e8 3e 25 4b 00 90 0f 0b e8 36 25 4b 00 90 0f 0b 0f 1f 00 90 [ 537.923051][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 [ 537.929143][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00 [ 537.937128][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 537.945115][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a7f8c7 [ 537.953110][ C0] R10: dffffc0000000000 R11: ffffffff8a01e100 R12: ffffffff8a01e100 [ 537.961101][ C0] R13: ffffffff81a7f8c7 R14: 000000017fff0000 R15: dffffc0000000000 [ 537.969084][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 537.978023][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.984613][ C0] CR2: 00007f8be539a6b0 CR3: 0000000032d2c000 CR4: 00000000003526f0 [ 537.992598][ C0] Call Trace: [ 537.995892][ C0] [ 537.998831][ C0] ? in_dev_free_rcu+0x49/0x60 [ 538.003613][ C0] kfree+0x77/0x440 [ 538.007434][ C0] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 538.012733][ C0] ? rcu_core+0xc37/0x1770 [ 538.017168][ C0] in_dev_free_rcu+0x49/0x60 [ 538.021775][ C0] rcu_core+0xca8/0x1770 [ 538.026037][ C0] ? __lock_acquire+0xab9/0xd20 [ 538.030914][ C0] ? __pfx_rcu_core+0x10/0x10 [ 538.035617][ C0] ? rcu_qs+0xc4/0x170 [ 538.039694][ C0] ? __pfx_rcu_qs+0x10/0x10 [ 538.044205][ C0] ? sched_clock_cpu+0x74/0x430 [ 538.049079][ C0] ? rcu_softirq_qs+0xf2/0x350 [ 538.053857][ C0] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 538.059084][ C0] handle_softirqs+0x283/0x870 [ 538.063886][ C0] ? run_ksoftirqd+0x9b/0x100 [ 538.068603][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 538.073927][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 538.078987][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 538.084043][ C0] run_ksoftirqd+0x9b/0x100 [ 538.088573][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 538.093698][ C0] smpboot_thread_fn+0x542/0xa60 [ 538.098647][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 538.103680][ C0] kthread+0x711/0x8a0 [ 538.107761][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 538.113224][ C0] ? __pfx_kthread+0x10/0x10 [ 538.117825][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 538.123036][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.128248][ C0] ? __pfx_kthread+0x10/0x10 [ 538.132849][ C0] ret_from_fork+0x3f9/0x770 [ 538.137447][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 538.142567][ C0] ? __switch_to_asm+0x39/0x70 [ 538.147346][ C0] ? __switch_to_asm+0x33/0x70 [ 538.152129][ C0] ? __pfx_kthread+0x10/0x10 [ 538.156744][ C0] ret_from_fork_asm+0x1a/0x30 [ 538.161530][ C0] [ 538.164569][ C0] Modules linked in: [ 538.168535][ C0] ---[ end trace 0000000000000000 ]--- [ 538.174050][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 538.179313][ C0] Code: 8e ae 00 e9 45 ff ff ff e8 62 25 4b 00 48 c7 c7 50 cf fa 8d 48 89 de 4c 89 f2 e8 10 a1 8a 03 e9 4d ff ff ff e8 46 25 4b 00 90 <0f> 0b e8 3e 25 4b 00 90 0f 0b e8 36 25 4b 00 90 0f 0b 0f 1f 00 90 [ 538.198994][ C0] RSP: 0018:ffffc90000147878 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 538.205133][ C0] RAX: ffffffff817486ea RBX: 00007780ffff0000 RCX: ffff88801ce9bc00 [ 538.213197][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 538.221235][ C0] RBP: ffffc90000147b50 R08: 0000000000000000 R09: ffffffff81a7f8c7 [ 538.229267][ C0] R10: dffffc0000000000 R11: ffffffff8a01e100 R12: ffffffff8a01e100 [ 538.237314][ C0] R13: ffffffff81a7f8c7 R14: 000000017fff0000 R15: dffffc0000000000 [ 538.245354][ C0] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 538.254349][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 538.261001][ C0] CR2: 00007f8be539a6b0 CR3: 0000000032d2c000 CR4: 00000000003526f0 [ 538.269030][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 538.276614][ C0] Kernel Offset: disabled [ 538.280951][ C0] Rebooting in 86400 seconds..