last executing test programs: 3.700410242s ago: executing program 0 (id=2891): unshare(0x6a040000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095", @ANYRES64=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x11c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x108, 0x11, 0x0, 0x1, [@nested={0x101, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @generic="8f3bec68ef62803fe98daf2de4c76a713091d7d093f16995a391c42d5dfc312e9b67f3e831135df00a399b5234733f156436b0ed25721632972efdd7a775655ff99c2abdc650ece6458a5f9db07c36adc6ebcfe60b70e5a54a83041bc8e1c08dc0afd69868eddb1e9634f84ef01b3f9c31b8c76a0e2ac9dba5adc10a3c9a2360cb2fe6e11e9efcaff1b39dd49895a112f947e4923d9b5c428a37b673f33f3ed02d225807d47efe0a590665b49bf5eaa0890c512f2a01eb6713c6b3539790dca05a2632596c591745bbbf4953c0a783a881f8cf755e6c"]}]}]}, 0x11c}], 0x1, 0x0, 0x0, 0x84}, 0x300) (async) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) socket(0x1, 0x803, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r8, &(0x7f0000000100), 0xa, 0x0, 0x0) 3.100600613s ago: executing program 0 (id=2901): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) unshare(0x26020480) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x3, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r3, r1, 0x1, 0x0, 0x0, 0x9, 0xcb, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x0, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 2.786236154s ago: executing program 2 (id=2906): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000100)={@mcast2, r1}, 0x14) 2.693867601s ago: executing program 0 (id=2907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40048c0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000340)=0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0xffffffffffffff14, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) close(0x3) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x100, 0x0, 0xb5, {[@window={0x3, 0x3, 0x2f}, @timestamp={0x8, 0xa, 0x4, 0xe}, @fastopen={0x22, 0x2}, @fastopen={0x22, 0x11, "6a36ec6c9af6895c27dcc7919be777"}]}}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x48001}, 0x40048c0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000340)=0x3, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0xffffffffffffff14, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) close(0x3) (async) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x34, 0x6, 0x0, @local, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x2, 0x100, 0x0, 0xb5, {[@window={0x3, 0x3, 0x2f}, @timestamp={0x8, 0xa, 0x4, 0xe}, @fastopen={0x22, 0x2}, @fastopen={0x22, 0x11, "6a36ec6c9af6895c27dcc7919be777"}]}}}}}}}}, 0x0) (async) 2.470447378s ago: executing program 2 (id=2910): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x5) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x2fc) sendmmsg$inet(r0, &(0x7f0000001880)=[{{&(0x7f0000000d00)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e80)="66a42e", 0x3}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001380)='$`^', 0x3}], 0x1}}], 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x40001}, 0x40044) 2.297837484s ago: executing program 2 (id=2912): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.191321304s ago: executing program 0 (id=2913): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) 2.07583969s ago: executing program 0 (id=2915): unshare(0x6a040000) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYRES16, @ANYRES32, @ANYRESDEC], 0x10e8}, 0x1, 0x0, 0x0, 0x10048044}, 0xc000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4f21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001640)=ANY=[@ANYRES16=r2, @ANYRESOCT], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r4, @ANYRESOCT=r3, @ANYRESDEC], &(0x7f0000000080)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0xfff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x6, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa20, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="020ae805020000b03af820af2a893300"], 0x10}}, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r7, &(0x7f00000002c0)=ANY=[], 0xfdef) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000240)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0xa, [0x4, 0x779, 0x8, 0x6e, 0x2, 0x8, 0xc, 0x6, 0x7, 0x2]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x22051, r7, 0x0) openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="081ff827019c63f991dd2fa9b3afd61ba4feee7b9731dc0b0ae50400000005000000000000805810000044783dcc083bc4defc2efb2a28d381fb6cbef874036c07bb9e5d53e312b5afedc818a91eaf0f8afa913a7edf76f3b96d4bd867d5ad23ef6d45b460c4decdc83b79d6043b43d561ecbcdde5cfb79989b5f4ff200c5b92fe38f6aefc31a7b0fafacef65b67926a5b999ffeb63db69bd81f33b09b83e08e6db6", @ANYRES32, @ANYBLOB="000000060000000000000000000000000000000094d020ba6d3ee65b09c3590e747443be2d45d034bbe8f22c269dbf7957d9136428cb5b68349a8ad3f72b7a64c99cbd8341249dd706e9eb341f4c789f5b3154ed248cd65fec74701b388e5642ac9128def6a858321f3815991dc06eab226512519e49b16ee70cb4bfadf8039701000000000000806c24ffa1a8ca376f18336dca25d6b1d4939105ee9f0b59b53b56139b8063e8bdf09f89c429a5095c1af19de4ac9180034b2838b6510980ba7bbdb0fba88fbc0d6ba26767fa83ac10f8a32470849bcd1494bbd7c6da6afdfd9144790541e1ddcb87a1618225ba14613387d2690aed3408579ba02b17830bbb54950b251e732700000000000000000000000000004393cfabe46837557e575da0be2ac8ce362f36acf4ad3ad5d80155c0a8c312b960", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000500"/28], 0x50) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.059208121s ago: executing program 2 (id=2916): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="120000000800000004000000b47c000000000000", @ANYRES32, @ANYBLOB="0f000000000000972f9ec3c7579eb70f29000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_ext={0x1c, 0x14, &(0x7f0000000300)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x4f}], &(0x7f00000003c0)='GPL\x00', 0x2, 0xdf, &(0x7f0000000a00)=""/223, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000bc0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000c00)={0x1, 0x6, 0xefc0, 0xfffffb40}, 0x10, 0x2ef71, r1, 0x7, &(0x7f0000000d00)=[r2, r2, r0], &(0x7f0000000d40)=[{0x2, 0x4, 0xf, 0x6}, {0x2, 0x4, 0x0, 0x4}, {0x5, 0x1, 0x0, 0x2}, {0x3, 0x5, 0xd, 0x6}, {0x0, 0x2, 0x3, 0x8}, {0x1, 0x1, 0xb, 0xc}, {0x3, 0x4, 0x0, 0x2}], 0x10, 0x1d}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x306) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'pim6reg1\x00', @multicast}) close(0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r7, @ANYBLOB="01009c079562b080b7050000080000004608f0ff76000000cf49000000000000000000b700fa0000000000009500"/65], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000830000006909000000000000550901000000000095000000000000007617040007000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x41}, 0x94) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2020600}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xf4, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040805) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r8, 0x0) r9 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r9, &(0x7f0000000400)={&(0x7f0000000100)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44040044}, 0x80) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.959206191s ago: executing program 4 (id=2917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000001}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0xffffffffffffff8c, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000104108000"/20, @ANYRES32=0x0, @ANYBLOB="03000012800c002100b000000000000000"], 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x8}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x80001f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000680)="2747a273c78d62d4dac0d7f7b58aab8d0c6100030df1e22f804cb4f85615b53f3c023960092a64b251526086ff235e04661a8ee45322f356383db0373341233d1e17c8216a78c34737ae4719c95162fd1e95d88e5341eb3d2eb1fe5d4fdc2e659c99dbf91182903c4e05af3e2fe9c5b05722dedca136f1e8119289cc8d483601eff02f684f029999464345068ef09f07c0eef5c0e2591e09f36a3a779a25959f01c55c258a56676f6a53", 0xaa}], 0x1, &(0x7f0000000880)=[@ip_retopts={{0x24, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x96, [@local, @loopback, @remote, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}}}], 0x60}}], 0x1, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'gretap0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x40, 0x7, 0x80000001, 0xfd07, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x64, 0x0, 0x16, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x7, 0xd2, [@rand_addr=0x64010101]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'tunl0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x20, 0x7, 0x1, 0x2, {{0xe, 0x4, 0x2, 0x3, 0x38, 0x65, 0x0, 0xd, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@noop, @ssrr={0x89, 0x23, 0x5d, [@private=0xa010100, @loopback, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @rand_addr=0x64010101, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r15, r14, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x304, r5, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x1e0, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0xf4, 0x3, 0x4}, {0x8, 0xe6, 0x3, 0x6}, {0x5, 0x2, 0xb1, 0x5}, {0xfff, 0xb, 0x3, 0x5}, {0x8, 0x7, 0x5, 0xfffffffd}, {0x9, 0x3, 0x1, 0xb}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x304}, 0x1, 0x0, 0x0, 0xc001}, 0x44040) 1.777783707s ago: executing program 1 (id=2918): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x2c}}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4) 1.767406234s ago: executing program 4 (id=2919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x10448) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000280000038000180060001000200000008000500000000000c000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd3c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc73cd11aa26b84bc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x27}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x84000) 1.577496497s ago: executing program 1 (id=2921): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000040)=""/220, 0xdc}], 0x2}, 0x8000}], 0x2, 0x10002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, {0x1, @link_local}, 0x4a, {0x2, 0x4e23, @private=0xa010102}, 'veth0_to_bond\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x8, 0x6, "04000000"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000980)=ANY=[@ANYRES16=0x0, @ANYRES64, @ANYRES64=r3, @ANYRES16=r0], 0x48}}, 0x0) ioctl$sock_bt_hci(r1, 0x400448e0, &(0x7f0000000a00)) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000240)="74ad96f494") r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000100)={0x6, 'wg1\x00', {0x7ff}, 0x2}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f00010300000000480000000101"], 0x114}], 0x1}, 0x24044010) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="e524713b6e2a06001a2653b1d6aa0ed7bc1476e8e0c2705aaf345e85be15d9f433f65d330c417d70c21c7af4cc9b8f7d6d0f668d8e2ef406822cb51b31743f27a06462a061617ad4cd12fed05e915565d263be424b5eddb1b1b217c9a3542694558f848d788c50ca6aee0bfc2b82ae2b4e53abdc00318c7907bd67152ecdc0c5da3359adf5a67715923d931987ca8f138d6dad4d7c93f176cd850903dd890aa0cd2b7b60f975fcfa39f49c3f568a4a250e9f77a084e3575439308380d3be190051a9e09500b814502fc789dd3eb6b3f8376d5d2223bffd4363f39d70881e5e8c322b1646cc3c1e493ee569a8eb324fdad2c575892e32", 0xf6}, {&(0x7f00000001c0)="e08ae28af32ee93fb315610f8ac9ac4d7089", 0x12}, {&(0x7f0000000440)="2020a465bbfa927c80927ef29d40f89fad53454d5369d70fce1cb4d1b68d4df579e5e948ca804be046dbe699f50517c78bedbe270d6996bb0cab1e2142e955655d1ad9c4e2ec65956eddb972ca5a1960cc716df17f0de31b2d7fdded4633a0683f26871624c8ff86fb5ea57fcde3d6874de3aefe092ef2d94c06bf56888dd4f020ae17f49ec23c6b00f60c13327c53c72e20b8", 0x93}], 0x3, &(0x7f0000000700)=[@iv={0x20, 0x117, 0x2, 0x9, "c3dae1ea6223764a1e"}, @assoc={0x18, 0x117, 0x4, 0x7}, @iv={0x48, 0x117, 0x2, 0x2f, "ae9b91923d0fa880998ccceaf86948bb7e5f070eeff24962138277de6faee3bf0afb9cb11a60911030ea1a45f45771"}], 0x80, 0x1}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000780)="bf7ad47296646a33d13c16c1a12385523b3a085efc8fd30d1471904fb9f9cfa7696b3937cae37cdf2a5cb70d0af839bac74373162c8614204d64c08ade0e65149c6fa93e5310a3071064bae87f508f7c9ae31d824447dd8d045ba0d0637f583218822db4799bd9bd3bbb7f925c423e4b0050166c9688040c23a10527388885e3da5fd05475dcb43b7304487a5c731ce54a30097cf7be7a2073997e6604bbf3158c985de6e0cf337471ba011417c1127a950023b740ce080ae3910da82d008376b4fe65269dba76f2aa8eb64a0ba0ad538aeb5afe06551eba97bc15", 0xdb}, {&(0x7f0000000880)="d44468cd1c85e35079e67535dbb0b823966c2f6c85e6c376fd9e15247baa731f7ddd3896d9e6cd3f6e30a9b08d1713cab5e73cb8f0d16cd059067328c661e7b0c3fdf2c01e60b235bf578ee830a94f0aa3af3d6a234e87f9aa06bc69126a05426697ddeb0271599079b291d5821e1610397b5b68abc78892f50daffc9609c351160406c816db8c572868708e4fcfbaa3336e94280cf661c70b6357554fa0b200a7fa4593cd97fe157ba14d1c40b37b7dd6d94db26f9e712aae6ac9c0fac26045bce66595114f58de5870268b610953c2e2017e23536a92fef0755ec61f5e2ff185f467fb959194f941d365fcf2d9199bf20284981a92a6", 0xf7}, {&(0x7f0000000fc0)="264bf6f67092b7d21b8972565dacd4eb9d6e4463cfe9f6dd735aa7688ba2a601734925fc5ed018342e6cd886dcd089301a68ecaaca2b9131e38182e2a9a8205992cd27d835e3c628b4eaf3db011b6bea99b0376fe1803c90e7eb29661c3195c6667ddb790c638d1a8eac18070d92f547b7d7c9a47a352c81dcd142745981354cb69e497fa782ecf8f62fda412cf2c6c74ac5be382d49a4523f0e27126b60653dd901de08c8894b9cd9cd5fd7d9dda636bf0e625999ecbb6f3eb9aaf91d", 0xbd}, {&(0x7f0000000bc0)="050da61fc1e0927248f6f0c2ae1431bfce83a97913efc156ca83185697356c5cccc75bc589abf5fb83abd7cd056bbc2b31de597ba16e3c86457e672b1a980565746b242a629f7ecc6254ec906f5ab61bc26fc553698c77020325056a14d7cc47851cd4491ec3fe8275d1418738bf1717bc755e3dbd704bad3552231854e5da6dc1281119aa4da2453048a7209d209acbe749173279e33650130ee8f9301fd503a7af9c7266b5c5a55d03700db695170afc422d939da2cfbc871392dc7d0b300a6b33813cc3f8136518", 0xc9}, {&(0x7f0000000580)="b4c8b1dffd44b55d495d6928b1e60047", 0x10}, {&(0x7f0000000cc0)="39ef1026a5e9f04696125d6fd9472ab7f32509aa2d136c398806fd1ce7d083e362a0d179689cff83985a412a038996c5c69f882cbd30fb5ceddaf3be7955a422e0bc658d6dcb29f4c71fe05fa4aec09dddeb1b961668bc1a892490a2399511ce1381807e0c7c4968821912156641953a5382b51e9fa83878cc7ed1f35dba1dc480dcbc3125982673dd9714745e486d48f3d2e626280c01c47da6c93bd386283476dedcd48d2e4365b2a8cae3b71196b84069b3022ab49c5027de4bda4d9a45dec016de4088c430b552da866445a5040a7372ec126c5c5c933900046cfcaf5d978a54223e8b64b6d7fe285f996fac073b4b7358de4b68552af6", 0xf9}, {&(0x7f0000000dc0)="61b8d52144ad241deb4010851d13a4c202627d7093e92780082625802e823cc48c0adcf11e700083b690a086c7341e052979c6cb9b396976f49ec980606a9db68485bfe37b65e807d4401cf3521db435ea6c1b6b6ca57a9dbbb66f7c33d646f2ca0413fd77dec9245fa0b358f35783677b163b488e22e3da17f937b8a63bc40c3279765f3f6129d4e0803aaac1c36f94a172ebdd93038636", 0x98}], 0x7, &(0x7f0000000e80)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x60, 0x21000}], 0x2, 0xc011) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xfffffffe}, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(r7, 0x0, 0x8804) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r8, 0x952de000) r9 = openat$cgroup_ro(r8, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000000c000000040000000200000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000d21d"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000540), &(0x7f0000000500)}, 0x20) 1.536131855s ago: executing program 4 (id=2922): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x70, r2, 0x306, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000c041) 1.144228874s ago: executing program 4 (id=2923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000010c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x4004810) 1.143539913s ago: executing program 2 (id=2924): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611930000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001700)=""/4096, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='devices.list\x00', 0x0, 0x0) r4 = accept4$rose(r3, 0x0, &(0x7f00000001c0), 0x180800) ioctl$SIOCRSACCEPT(r4, 0x89e3) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r5) r6 = accept$alg(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) readv(r6, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x200048c1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x9, 0x100, 0x30, 0x10, 0x0, 0x3}, 0x1c) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000a40)=0x2, 0x4) r8 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000000)='\x90\xb7\x1d\x83\xbe\xf7\xba\'?0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r10, 0x0, 0x0}, 0x20) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 594.170252ms ago: executing program 0 (id=2931): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xee00) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x2, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@txtime={{0x18, 0x1, 0x4f, 0x6}}], 0x18}, 0x80) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000210"], 0x18}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="7c0200001a0001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa000000002000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000ffffffffe7ffffff000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000080000000000000000000000000000000000000000000000001000000020001060000000000000000480003006465666c61746500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000430102"], 0x27c}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) 464.00227ms ago: executing program 1 (id=2932): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000080)={0x2}) unshare(0x2c020400) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) recvfrom$x25(r4, 0x0, 0x0, 0x2, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x80000) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r5) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x70, r6, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x14}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e1e}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) writev(r5, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xf61}], 0x1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) socket$tipc(0x1e, 0x5, 0x0) (async) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000080)={0x2}) (async) unshare(0x2c020400) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (async) close(r4) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) recvfrom$x25(r4, 0x0, 0x0, 0x2, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x80000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r5) (async) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x70, r6, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x81}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x14}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e1e}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8000000000000001}, @L2TP_ATTR_UDP_CSUM={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) (async) writev(r5, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xf61}], 0x1) (async) 419.503592ms ago: executing program 3 (id=2933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000040)}, 0x5) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004ec0)=ANY=[@ANYBLOB="28000000400007012bbd700000080000017a03000400c2800c0001800800108004000580040002"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001300010000000000000000000300000a20000007000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000080000000060a010400000099cff1ef0ec1b470a19800000000000100000008000b400000000058000480540001800e0001005202696d6d656469617465000000400002802400028020000280080003400000000408000180fffffffb0900020073797a32000000001800028014000280080001800000000008000340000000040900010073797a30000000001400000011000100"], 0xf4}}, 0x0) 290.668346ms ago: executing program 1 (id=2934): sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x4000001}, 0x10000000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) 232.304718ms ago: executing program 3 (id=2935): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') r2 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}], 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={&(0x7f0000000200)=@abs, 0x6e, &(0x7f0000000700)=[{0x0}, {&(0x7f00000004c0)=""/110, 0x6e}, {&(0x7f00000000c0)=""/39, 0x27}, {&(0x7f0000000540)=""/196, 0xc4}], 0x4}, 0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) r7 = getpid() (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8}) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r10, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}], 0x20, 0x40844}}], 0x1, 0x1) (async) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async) r15 = accept4$rose(0xffffffffffffffff, &(0x7f00000003c0)=@full={0xb, @remote, @null, 0x0, [@rose, @netrom, @default, @default, @netrom, @rose]}, &(0x7f0000000440)=0x40, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f0000000640)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001940)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r4, &(0x7f0000001b80)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000001bc0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="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"], 0x11f8}, {&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x18}], 0x2, &(0x7f0000001a80)=ANY=[@ANYBLOB="1c00000000000000010000006c000080", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r13, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r14, @ANYRES32, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r15, @ANYRES32=r5, @ANYRES32, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0xe0, 0x40800}, 0x20040080) r19 = socket(0x15, 0x5, 0x0) getsockopt(r19, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (async) close(r0) r20 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r20}, 0x38) 144.75533ms ago: executing program 1 (id=2936): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000100)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x94) 92.514991ms ago: executing program 1 (id=2937): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000180d00001800000007000000020000000100001304000000046000"/50], 0x0, 0x37, 0x0, 0x1, 0x1}, 0x28) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r1, &(0x7f00000003c0)={0x0, 0x36, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r2, 0xba87317d461c07c9, 0x70bd2d, 0x4004}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40490c4) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x7ff}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r6, 0x4004743c, &(0x7f0000000100)) shutdown(r3, 0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 3 (id=2938): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0500"/15, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00810000"], 0x48}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e61}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @generic={0x8, 0x1, 0x4, 0xff81, 0xfffffffa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x8d, &(0x7f0000000480)=""/141, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000200)=[0x1, r0, 0x1, 0x1, 0x1, r0, 0xffffffffffffffff], &(0x7f0000000280)=[{0x4, 0x3, 0x0, 0x7}, {0x1, 0x5, 0x2, 0x6}, {0x5, 0x4, 0xb, 0x2}, {0x3, 0x3, 0x9, 0x8}], 0x10, 0x6}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000003c0)=r3) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0x8100, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) kernel console output (not intermixed with test programs): as an invalid length. [ 255.866357][T11668] bond0: (slave dummy0): Releasing backup interface [ 255.902527][T11668] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 255.950650][T11668] team0: Failed to send options change via netlink (err -105) [ 255.979435][T11668] team0: Port device dummy0 added [ 256.132432][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1401'. [ 256.211022][T11685] wg1 speed is unknown, defaulting to 1000 [ 256.249152][T11684] netlink: 'syz.2.1403': attribute type 10 has an invalid length. [ 256.268536][T11685] lo speed is unknown, defaulting to 1000 [ 256.274496][T11684] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1403'. [ 256.325158][T11684] team0: Port device geneve0 added [ 256.670519][T11700] tipc: Enabling of bearer rejected, already enabled [ 256.890182][T11706] netlink: 'syz.2.1408': attribute type 10 has an invalid length. [ 256.917704][T11706] veth0_vlan: entered allmulticast mode [ 256.944672][T11702] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.993223][T11706] veth0_vlan: left promiscuous mode [ 257.030087][T11706] veth0_vlan: entered promiscuous mode [ 257.058343][T11706] team0: Device veth0_vlan failed to register rx_handler [ 257.263020][T11718] wg1 speed is unknown, defaulting to 1000 [ 257.271032][T11718] lo speed is unknown, defaulting to 1000 [ 257.310569][T11728] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1412'. [ 257.455102][T11737] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 257.817064][T11750] tipc: Enabling of bearer rejected, failed to enable media [ 257.892766][T11745] wg1 speed is unknown, defaulting to 1000 [ 257.925798][T11745] lo speed is unknown, defaulting to 1000 [ 258.255288][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1426'. [ 258.345600][T11780] wg1 speed is unknown, defaulting to 1000 [ 258.348238][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1429'. [ 258.364305][T11780] lo speed is unknown, defaulting to 1000 [ 258.575499][T11798] netlink: 'syz.2.1432': attribute type 29 has an invalid length. [ 258.689833][T11810] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1435'. [ 258.703162][T11810] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1435'. [ 258.729900][T11813] netlink: 'syz.2.1436': attribute type 1 has an invalid length. [ 258.739897][T11813] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) ! [ 258.845326][T11817] tipc: Enabling of bearer rejected, failed to enable media [ 258.894854][T11821] openvswitch: netlink: IP tunnel dst address not specified [ 258.975823][T11825] syzkaller1: entered promiscuous mode [ 258.997897][T11825] syzkaller1: entered allmulticast mode [ 259.308101][T11853] __nla_validate_parse: 3 callbacks suppressed [ 259.308122][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 259.309838][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 259.364079][T11853] netlink: 'syz.0.1445': attribute type 2 has an invalid length. [ 259.365460][T11849] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1446'. [ 259.400320][T11853] netlink: 'syz.0.1445': attribute type 2 has an invalid length. [ 259.450513][T11849] wg1 speed is unknown, defaulting to 1000 [ 259.485661][T11849] lo speed is unknown, defaulting to 1000 [ 259.532415][T11855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1446'. [ 259.692838][T11880] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 259.797513][T11883] wg1 speed is unknown, defaulting to 1000 [ 259.813872][T11883] lo speed is unknown, defaulting to 1000 [ 259.901108][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1450'. [ 260.454802][T11919] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 260.459471][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1461'. [ 260.464754][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1460'. [ 260.574690][T11919] bond0: (slave bond_slave_1): Releasing backup interface [ 260.896792][T11934] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 3, id = 0 [ 261.621406][T11961] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1471'. [ 261.725450][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 261.859047][T11966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 261.930695][T11975] netlink: 'syz.3.1475': attribute type 1 has an invalid length. [ 262.019726][T11978] bond4: entered promiscuous mode [ 262.024919][T11978] bond4: entered allmulticast mode [ 262.054910][T11978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.104589][T11975] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 263.160279][T12028] gretap0: left allmulticast mode [ 263.165678][T12028] gretap0: left promiscuous mode [ 263.175920][T12028] bridge0: port 3(gretap0) entered disabled state [ 263.190227][T12028] bridge_slave_0: left allmulticast mode [ 263.196220][T12028] bridge_slave_0: left promiscuous mode [ 263.212487][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.234739][T12028] bridge_slave_1: left allmulticast mode [ 263.240639][T12028] bridge_slave_1: left promiscuous mode [ 263.256982][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.270171][T12028] bond0: (slave bond_slave_0): Releasing backup interface [ 263.279934][T12028] bond0: (slave bond_slave_1): Releasing backup interface [ 263.291148][T12028] team0: Port device team_slave_0 removed [ 263.300294][T12028] team0: Port device team_slave_1 removed [ 263.307086][T12028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.316159][T12028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.326329][T12028] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.765859][T12059] wg1 speed is unknown, defaulting to 1000 [ 263.781001][T12059] lo speed is unknown, defaulting to 1000 [ 263.932179][ T1165] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.966658][ T1165] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.001918][ T1165] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.011294][ T1165] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.108925][T12078] siw: device registration error -23 [ 264.711373][T12097] __nla_validate_parse: 14 callbacks suppressed [ 264.711395][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1509'. [ 264.790351][T12100] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1510'. [ 264.810827][T12100] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1510'. [ 264.830644][T12103] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1511'. [ 265.344580][T12121] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1517'. [ 265.562542][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'. [ 265.605862][T12147] xt_l2tp: invalid flags combination: 8 [ 265.620181][T12147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1525'. [ 265.670737][T12142] Set syz0 is full, maxelem 0 reached [ 265.740531][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 265.929822][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 265.942114][T12177] tipc: Enabled bearer , priority 18 [ 266.039826][T12181] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 266.207448][T12198] netlink: 'syz.0.1536': attribute type 298 has an invalid length. [ 266.315588][ T30] audit: type=1804 audit(1763881533.821:6): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1538" name="/newroot/308/cgroup.controllers" dev="tmpfs" ino=1606 res=1 errno=0 [ 266.387500][T12206] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1540'. [ 266.417347][ T30] audit: type=1800 audit(1763881533.821:7): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1538" name="cgroup.controllers" dev="tmpfs" ino=1606 res=0 errno=0 [ 266.427790][T12208] nbd: socks must be embedded in a SOCK_ITEM attr [ 266.461745][ T30] audit: type=1804 audit(1763881533.821:8): pid=12202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1538" name="/newroot/308/cgroup.controllers" dev="tmpfs" ino=1606 res=1 errno=0 [ 266.595824][T12219] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 266.771616][T12231] netlink: del zone limit has 4 unknown bytes [ 266.785955][T12227] æÿîÿ: entered promiscuous mode [ 267.012693][T12251] tc_dump_action: action bad kind [ 267.057323][ T5871] tipc: Node number set to 2529981271 [ 267.098505][T12254] vlan0: left promiscuous mode [ 267.103981][T12254] tipc: Resetting bearer [ 267.110884][T12254] syzkaller0: left promiscuous mode [ 267.116206][T12254] syzkaller0: left allmulticast mode [ 267.141091][T12254] gtp0: left promiscuous mode [ 267.151669][T12254] gtp0: left allmulticast mode [ 267.239300][T12254] bridge5: left allmulticast mode [ 267.267822][T12254] bridge6: left allmulticast mode [ 267.294055][T12254] bridge7: left allmulticast mode [ 267.375296][T12254] bond4: left promiscuous mode [ 267.417583][T12254] bond4: left allmulticast mode [ 267.494129][ T2978] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.521467][ T2978] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.536260][ T2978] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.548096][ T2978] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.985967][T12288] syzkaller0: entered promiscuous mode [ 267.996780][T12288] syzkaller0: entered allmulticast mode [ 268.074451][T12288] wg1 speed is unknown, defaulting to 1000 [ 268.082866][T12288] lo speed is unknown, defaulting to 1000 [ 268.235004][T12299] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 269.540993][T12346] netlink: 'syz.0.1576': attribute type 8 has an invalid length. [ 269.600932][T12359] netlink: 'syz.4.1578': attribute type 30 has an invalid length. [ 269.687699][T12363] tipc: Enabling of bearer rejected, already enabled [ 269.697811][T12363] syzkaller0: entered promiscuous mode [ 269.703450][T12363] syzkaller0: entered allmulticast mode [ 269.775304][T12368] wg1 speed is unknown, defaulting to 1000 [ 269.781403][T12368] wg1 speed is unknown, defaulting to 1000 [ 269.790437][T12368] wg1 speed is unknown, defaulting to 1000 [ 269.815202][T12368] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 269.865079][T12368] wg1 speed is unknown, defaulting to 1000 [ 269.873315][T12368] wg1 speed is unknown, defaulting to 1000 [ 269.881472][T12368] wg1 speed is unknown, defaulting to 1000 [ 269.890440][T12368] wg1 speed is unknown, defaulting to 1000 [ 269.899756][T12368] wg1 speed is unknown, defaulting to 1000 [ 270.068835][T12384] __nla_validate_parse: 13 callbacks suppressed [ 270.068857][T12384] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1585'. [ 270.457100][T12376] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.615404][T12376] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.710565][T12399] dummy0: entered promiscuous mode [ 270.725493][T12399] dummy0: entered allmulticast mode [ 270.791991][T12376] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.868310][T12396] wg1 speed is unknown, defaulting to 1000 [ 270.895504][T12412] netlink: 'syz.3.1592': attribute type 11 has an invalid length. [ 270.912610][T12410] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.941795][T12413] netlink: 'syz.3.1592': attribute type 11 has an invalid length. [ 270.969447][T12376] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.066886][T12396] lo speed is unknown, defaulting to 1000 [ 271.074479][T12396] wg1 speed is unknown, defaulting to 1000 [ 271.138392][T12405] wg1 speed is unknown, defaulting to 1000 [ 271.162310][T12405] lo speed is unknown, defaulting to 1000 [ 271.177334][T12422] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1593'. [ 271.261825][T12405] wg1 speed is unknown, defaulting to 1000 [ 271.347484][T12429] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1595'. [ 271.378548][T12430] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1595'. [ 271.485596][T12439] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 271.680849][T12440] wg1 speed is unknown, defaulting to 1000 [ 271.802633][T12440] lo speed is unknown, defaulting to 1000 [ 271.849249][T12440] wg1 speed is unknown, defaulting to 1000 [ 271.952674][T12452] netlink: 'syz.4.1600': attribute type 7 has an invalid length. [ 272.249114][T12462] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1601'. [ 272.601524][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1605'. [ 272.626326][T12471] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1605'. [ 272.687357][T12476] netlink: 'syz.0.1606': attribute type 1 has an invalid length. [ 272.695764][T12476] netlink: 'syz.0.1606': attribute type 11 has an invalid length. [ 272.704253][T12476] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1606'. [ 272.859832][T12479] wg1 speed is unknown, defaulting to 1000 [ 272.871417][T12479] lo speed is unknown, defaulting to 1000 [ 272.883132][T12479] wg1 speed is unknown, defaulting to 1000 [ 273.915717][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1618'. [ 273.969908][T12531] 8021q: adding VLAN 0 to HW filter on device bond6 [ 274.004855][T12531] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 274.013275][T12531] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 274.130696][T12546] netlink: 'syz.4.1621': attribute type 11 has an invalid length. [ 274.164032][T12546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1621'. [ 274.421364][T12565] No such timeout policy "syz0" [ 274.546535][T12572] wg1 speed is unknown, defaulting to 1000 [ 274.560085][T12573] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 274.574646][T12568] wg1 speed is unknown, defaulting to 1000 [ 274.584548][T12572] lo speed is unknown, defaulting to 1000 [ 274.592955][T12568] lo speed is unknown, defaulting to 1000 [ 274.593013][T12572] wg1 speed is unknown, defaulting to 1000 [ 274.637701][T12568] wg1 speed is unknown, defaulting to 1000 [ 274.648671][T12575] xt_hashlimit: size too large, truncated to 1048576 [ 274.941278][T12584] wg1 speed is unknown, defaulting to 1000 [ 274.967233][T12584] lo speed is unknown, defaulting to 1000 [ 274.987188][T12584] wg1 speed is unknown, defaulting to 1000 [ 275.696101][T12593] wg1 speed is unknown, defaulting to 1000 [ 275.714268][T12593] lo speed is unknown, defaulting to 1000 [ 275.745770][T12593] wg1 speed is unknown, defaulting to 1000 [ 275.928457][T12606] IPVS: set_ctl: invalid protocol: 27 0.0.0.0:0 [ 276.010489][T12607] wg1 speed is unknown, defaulting to 1000 [ 276.060896][T12607] lo speed is unknown, defaulting to 1000 [ 276.110343][T12607] wg1 speed is unknown, defaulting to 1000 [ 277.131321][T12642] __nla_validate_parse: 2 callbacks suppressed [ 277.131344][T12642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1643'. [ 277.159787][T12643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 277.305762][T12645] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1645'. [ 277.353330][T12649] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1647'. [ 277.454204][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 277.577306][T12660] wg1 speed is unknown, defaulting to 1000 [ 277.587282][T12660] lo speed is unknown, defaulting to 1000 [ 277.595014][T12660] wg1 speed is unknown, defaulting to 1000 [ 278.153105][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1654'. [ 278.357823][T12689] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1654'. [ 278.486857][T12689] netlink: 676 bytes leftover after parsing attributes in process `syz.1.1654'. [ 278.539923][T12702] wg1 speed is unknown, defaulting to 1000 [ 278.568809][T12702] lo speed is unknown, defaulting to 1000 [ 278.576536][T12702] wg1 speed is unknown, defaulting to 1000 [ 279.001173][T12732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1662'. [ 279.248977][T12751] block nbd2: Unsupported socket: should be TCP or UNIX. [ 279.416972][T12754] IPVS: Scheduler module ip_vs_sip not found [ 279.572045][T12762] tipc: Enabling of bearer rejected, failed to enable media [ 279.622676][T12754] IPVS: length: 141 != 8 [ 280.542808][T12788] bond1: (slave macvlan1): Releasing backup interface [ 280.812060][T12800] wg1 speed is unknown, defaulting to 1000 [ 280.850721][T12800] lo speed is unknown, defaulting to 1000 [ 280.870880][T12800] wg1 speed is unknown, defaulting to 1000 [ 281.074094][T12818] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1684'. [ 281.786038][T12846] wg1 speed is unknown, defaulting to 1000 [ 281.809576][T12846] lo speed is unknown, defaulting to 1000 [ 281.818057][T12846] wg1 speed is unknown, defaulting to 1000 [ 282.188127][T12853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1689'. [ 282.346533][T12859] 8021q: adding VLAN 0 to HW filter on device bond7 [ 282.413651][T12862] 8021q: adding VLAN 0 to HW filter on device bond8 [ 282.421394][T12861] tipc: Enabling of bearer <“dp:s> rejected, media not registered [ 282.809312][T12883] syzkaller0: Caught tx_queue_len zero misconfig [ 282.945956][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1700'. [ 282.969103][T12889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 282.991474][T12889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1700'. [ 283.035540][T12894] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1702'. [ 283.115647][T12894] veth5: entered promiscuous mode [ 283.148896][T12902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1705'. [ 283.239726][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1704'. [ 283.516093][T12918] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1708'. [ 284.486459][T12982] netlink: 'syz.0.1722': attribute type 13 has an invalid length. [ 284.497032][T12982] netlink: 'syz.0.1722': attribute type 17 has an invalid length. [ 284.563384][T12982] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 284.599114][T12978] wg1 speed is unknown, defaulting to 1000 [ 284.671192][T12978] lo speed is unknown, defaulting to 1000 [ 284.697428][T12978] wg1 speed is unknown, defaulting to 1000 [ 284.795240][T12996] No such timeout policy "syz1" [ 285.161497][T13007] wg1 speed is unknown, defaulting to 1000 [ 285.188673][T13007] lo speed is unknown, defaulting to 1000 [ 285.196455][T13007] wg1 speed is unknown, defaulting to 1000 [ 285.413949][T13025] Set syz0 is full, maxelem 0 reached [ 285.499114][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1736'. [ 285.705510][T13049] netlink: 'syz.3.1740': attribute type 39 has an invalid length. [ 286.119575][T13065] netlink: 'syz.3.1742': attribute type 13 has an invalid length. [ 286.151794][T13065] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1742'. [ 286.224927][T13065] wg1 speed is unknown, defaulting to 1000 [ 286.240802][T13065] lo speed is unknown, defaulting to 1000 [ 286.248735][T13065] wg1 speed is unknown, defaulting to 1000 [ 286.525154][T13085] wg1 speed is unknown, defaulting to 1000 [ 286.534653][T13085] lo speed is unknown, defaulting to 1000 [ 286.543459][T13085] wg1 speed is unknown, defaulting to 1000 [ 286.603450][T13082] IPVS: length: 141 != 8 [ 287.311578][T13117] wg1 speed is unknown, defaulting to 1000 [ 287.337306][T13117] lo speed is unknown, defaulting to 1000 [ 287.345533][T13099] __nla_validate_parse: 5 callbacks suppressed [ 287.345553][T13099] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1752'. [ 287.362242][T13117] wg1 speed is unknown, defaulting to 1000 [ 287.557415][T13125] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1760'. [ 287.571418][T13125] netlink: 'syz.0.1760': attribute type 12 has an invalid length. [ 287.897321][T13144] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 287.920337][T13147] netlink: 'syz.3.1765': attribute type 2 has an invalid length. [ 287.945706][T13144] 8021q: adding VLAN 0 to HW filter on device bond9 [ 287.962703][T13147] @„;: entered promiscuous mode [ 287.988237][T13144] bond9: (slave geneve3): making interface the new active one [ 287.997795][T13144] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 288.155406][T13155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 288.280078][T13164] `: left allmulticast mode [ 288.285084][T13164] team_slave_0: left allmulticast mode [ 288.291995][T13164] team_slave_1: left allmulticast mode [ 288.305418][T13164] bridge0: port 3(`) entered disabled state [ 288.330846][T13160] syz.4.1770: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 288.350748][T13160] CPU: 1 UID: 0 PID: 13160 Comm: syz.4.1770 Not tainted syzkaller #0 PREEMPT(full) [ 288.350778][T13160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 288.350792][T13160] Call Trace: [ 288.350801][T13160] [ 288.350810][T13160] dump_stack_lvl+0x189/0x250 [ 288.350852][T13160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.350884][T13160] ? __pfx__printk+0x10/0x10 [ 288.350908][T13160] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.350940][T13160] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 288.350974][T13160] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 288.351009][T13160] warn_alloc+0x214/0x310 [ 288.351051][T13160] ? __pfx_warn_alloc+0x10/0x10 [ 288.351097][T13160] ? __get_vm_area_node+0x28f/0x300 [ 288.351137][T13160] ? xskq_create+0xbf/0x170 [ 288.351164][T13160] __vmalloc_node_range_noprof+0x690/0x12d0 [ 288.351234][T13160] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.351272][T13160] ? __kasan_kmalloc+0x93/0xb0 [ 288.351314][T13160] vmalloc_user_noprof+0xad/0xf0 [ 288.351347][T13160] ? xskq_create+0xbf/0x170 [ 288.351369][T13160] xskq_create+0xbf/0x170 [ 288.351431][T13160] xsk_init_queue+0xb0/0x110 [ 288.351468][T13160] xsk_setsockopt+0x57b/0x8d0 [ 288.351503][T13160] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.351539][T13160] ? __pfx_aa_sk_perm+0x10/0x10 [ 288.351577][T13160] ? aa_sock_opt_perm+0xff/0x1b0 [ 288.351614][T13160] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 288.351636][T13160] ? __pfx_xsk_setsockopt+0x10/0x10 [ 288.351670][T13160] do_sock_setsockopt+0x17c/0x1b0 [ 288.351702][T13160] __x64_sys_setsockopt+0x13f/0x1b0 [ 288.351734][T13160] do_syscall_64+0xfa/0xfa0 [ 288.351755][T13160] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.351779][T13160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.351819][T13160] ? clear_bhb_loop+0x60/0xb0 [ 288.351846][T13160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.351868][T13160] RIP: 0033:0x7efcfa18f749 [ 288.351888][T13160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.351908][T13160] RSP: 002b:00007efcfaf55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 288.351932][T13160] RAX: ffffffffffffffda RBX: 00007efcfa3e6090 RCX: 00007efcfa18f749 [ 288.351949][T13160] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000008 [ 288.351962][T13160] RBP: 00007efcfa213f91 R08: 0000000000000004 R09: 0000000000000000 [ 288.351976][T13160] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 288.351991][T13160] R13: 00007efcfa3e6128 R14: 00007efcfa3e6090 R15: 00007fff04305ae8 [ 288.352029][T13160] [ 288.352128][T13160] Mem-Info: [ 288.513119][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 288.619089][T13160] active_anon:7009 inactive_anon:0 isolated_anon:0 [ 288.619089][T13160] active_file:3333 inactive_file:39967 isolated_file:0 [ 288.619089][T13160] unevictable:768 dirty:75 writeback:0 [ 288.619089][T13160] slab_reclaimable:12092 slab_unreclaimable:161559 [ 288.619089][T13160] mapped:30199 shmem:1364 pagetables:982 [ 288.619089][T13160] sec_pagetables:0 bounce:0 [ 288.619089][T13160] kernel_misc_reclaimable:0 [ 288.619089][T13160] free:1266791 free_pcp:12739 free_cma:0 [ 288.678724][T13160] Node 0 active_anon:28136kB inactive_anon:0kB active_file:13332kB inactive_file:159664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120896kB dirty:296kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12280kB pagetables:3792kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.694358][T13164] bridge_slave_0: left allmulticast mode [ 288.712835][T13160] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 288.740235][T13164] bridge_slave_0: left promiscuous mode [ 288.747821][T13160] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.766854][T13164] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.792319][T13160] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 288.801598][T13164] bridge_slave_1: left allmulticast mode [ 288.806007][T13160] Node 0 DMA32 free:1157840kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28136kB inactive_anon:0kB active_file:13332kB inactive_file:159664kB unevictable:1536kB writepending:296kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:33676kB local_pcp:15060kB free_cma:0kB [ 288.809772][T13164] bridge_slave_1: left promiscuous mode [ 288.851086][T13164] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.867325][T13164] bond0: (slave bond_slave_0): Releasing backup interface [ 288.875019][T13160] lowmem_reserve[]: 0 0 0 0 0 [ 288.901482][T13164] team_slave_0: left promiscuous mode [ 288.918114][T13160] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 288.953887][T13164] `: Port device team_slave_0 removed [ 288.968374][T13164] team_slave_1: left promiscuous mode [ 288.970709][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 288.994418][T13164] `: Port device team_slave_1 removed [ 289.005658][T13164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.013351][T13160] lowmem_reserve[]: 0 0 0 0 0 [ 289.025943][T13173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1772'. [ 289.026725][T13164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.042625][T13160] Node 1 Normal free:3893708kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15980kB local_pcp:9740kB free_cma:0kB [ 289.108982][T13160] lowmem_reserve[]: 0 [ 289.110756][T13164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.122863][T13160] 0 0 0 0 [ 289.126064][T13164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.133495][T13160] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 289.147638][T13160] Node 0 DMA32: 822*4kB (UM) 829*8kB (UM) 660*16kB (UME) 1266*32kB (UM) 453*64kB (UM) 106*128kB (UM) 63*256kB (UME) 21*512kB (UM) 15*1024kB (U) 2*2048kB (M) 246*4096kB (M) = 1157504kB [ 289.166266][T13160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 289.178288][T13160] Node 1 Normal: 63*4kB (UM) 10*8kB (UME) 26*16kB (UME) 153*32kB (UME) 35*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3893964kB [ 289.197258][T13160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.207444][T13160] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.210233][T13164] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.227265][T13160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 289.244711][T13160] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 289.255541][ T24] lo speed is unknown, defaulting to 1000 [ 289.259647][T13160] 44661 total pagecache pages [ 289.266045][T13160] 0 pages in swap cache [ 289.271016][T13160] Free swap = 124996kB [ 289.275267][T13172] tipc: Enabling of bearer rejected, already enabled [ 289.284426][T13160] Total swap = 124996kB [ 289.289044][T13160] 2097051 pages RAM [ 289.292899][T13160] 0 pages HighMem/MovableOnly [ 289.300494][T13173] tipc: Enabling of bearer rejected, already enabled [ 289.316855][T13160] 424134 pages reserved [ 289.321424][T13160] 0 pages cma reserved [ 289.400626][T13178] syzkaller0: entered promiscuous mode [ 289.406237][T13178] syzkaller0: entered allmulticast mode [ 289.485587][T13181] ip6tnl2: entered promiscuous mode [ 289.494739][T13184] netlink: 'syz.3.1775': attribute type 1 has an invalid length. [ 289.528305][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 289.559525][T13178] netlink: zone id is out of range [ 289.597857][T13192] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1775'. [ 289.625322][T13191] wg1 speed is unknown, defaulting to 1000 [ 289.663419][T13191] lo speed is unknown, defaulting to 1000 [ 289.738819][T13191] wg1 speed is unknown, defaulting to 1000 [ 289.748072][T13197] netlink: 'syz.2.1780': attribute type 10 has an invalid length. [ 289.769907][T13197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.793263][T13197] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 289.799277][T13201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1782'. [ 289.811991][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1782'. [ 289.821266][T13201] netlink: 'syz.3.1782': attribute type 13 has an invalid length. [ 289.841516][T13199] tipc: Enabled bearer , priority 0 [ 289.869651][T13199] syzkaller0: entered promiscuous mode [ 289.883045][T13199] syzkaller0: entered allmulticast mode [ 289.938854][T13199] tipc: Resetting bearer [ 289.998096][T13212] mac80211_hwsim hwsim10 wlan1: Device is already in use. [ 290.101244][T13212] mac80211_hwsim hwsim10 wlan1 (unregistering): left promiscuous mode [ 290.172086][T13209] tipc: Resetting bearer [ 290.205479][T13209] tipc: Disabling bearer [ 290.375049][T13207] wg1 speed is unknown, defaulting to 1000 [ 290.388278][T13207] lo speed is unknown, defaulting to 1000 [ 290.406401][T13207] wg1 speed is unknown, defaulting to 1000 [ 291.621260][ T1071] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x1 [ 291.664200][T13292] vxcan2: entered allmulticast mode [ 291.691296][ T1071] hid-generic 0005:0C45:1012.0001: ignoring exceeding usage max [ 291.736071][ T1071] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x4 [ 291.765727][ T1071] hid-generic 0005:0C45:1012.0001: unknown main item tag 0x5 [ 291.792950][ T1071] hid-generic 0005:0C45:1012.0001: reserved main item tag 0xd [ 291.809966][ T1071] hid-generic 0005:0C45:1012.0001: item fetching failed at offset 31/33 [ 291.840497][ T1071] hid-generic 0005:0C45:1012.0001: probe with driver hid-generic failed with error -22 [ 292.440753][T13339] __nla_validate_parse: 4 callbacks suppressed [ 292.440772][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 292.610374][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 292.709460][T13353] netlink: 'syz.1.1812': attribute type 39 has an invalid length. [ 292.839558][T13362] atomic_op ffff888052891998 conn xmit_atomic 0000000000000000 [ 292.995931][T13370] xt_TCPMSS: Only works on TCP SYN packets [ 293.175566][T13383] netlink: 'syz.3.1821': attribute type 10 has an invalid length. [ 293.245805][T13385] syzkaller0: entered promiscuous mode [ 293.274758][T13385] syzkaller0: entered allmulticast mode [ 293.289729][T13383] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.303695][T13383] bond0: (slave team0): Enslaving as an active interface with an up link [ 293.404189][T13394] wg1 speed is unknown, defaulting to 1000 [ 293.405387][T13382] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 293.440674][T13394] lo speed is unknown, defaulting to 1000 [ 293.467196][T13394] wg1 speed is unknown, defaulting to 1000 [ 293.693061][T13412] syzkaller0: entered promiscuous mode [ 293.700947][T13412] syzkaller0: entered allmulticast mode [ 293.730076][T13412] netlink: 'syz.2.1828': attribute type 1 has an invalid length. [ 294.013525][ T24] IPVS: starting estimator thread 0... [ 294.054467][T13413] wg1 speed is unknown, defaulting to 1000 [ 294.074938][T13413] lo speed is unknown, defaulting to 1000 [ 294.096102][T13413] wg1 speed is unknown, defaulting to 1000 [ 294.111027][T13433] IPVS: using max 26 ests per chain, 62400 per kthread [ 294.150191][T13442] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1834'. [ 294.208816][T13434] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1832'. [ 294.220804][T13439] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 294.249056][T13439] bond6 (unregistering): Released all slaves [ 294.301378][T13445] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 294.404892][T13452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1838'. [ 294.583679][T13457] vxcan1: entered allmulticast mode [ 294.833491][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1842'. [ 294.974482][T13474] wg1 speed is unknown, defaulting to 1000 [ 294.985367][T13474] lo speed is unknown, defaulting to 1000 [ 295.004725][T13474] wg1 speed is unknown, defaulting to 1000 [ 295.010668][T13486] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1845'. [ 295.265608][T13499] tipc: Enabled bearer , priority 0 [ 295.296758][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1847'. [ 296.145932][T13529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1857'. [ 296.197764][T13529] 8021q: adding VLAN 0 to HW filter on device bond6 [ 296.234257][T13529] bond6: (slave bond0): Enslaving as an active interface with an up link [ 296.259047][ T24] syz1: Port: 1 Link ACTIVE [ 296.325564][T13540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 296.531051][T13529] bond6 (unregistering): (slave bond0): Releasing backup interface [ 296.559156][T13529] bond6 (unregistering): Released all slaves [ 296.600007][ T1071] syz1: Port: 1 Link DOWN [ 296.627378][T13551] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 296.837266][T13560] wg1 speed is unknown, defaulting to 1000 [ 296.850011][T13560] lo speed is unknown, defaulting to 1000 [ 296.879864][T13561] macvtap1: entered promiscuous mode [ 296.885215][T13561] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 296.918387][T13560] wg1 speed is unknown, defaulting to 1000 [ 297.020700][ T5147] Bluetooth: hci4: link tx timeout [ 297.027634][ T5147] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 297.370009][T13587] netlink: 'syz.3.1872': attribute type 1 has an invalid length. [ 297.423328][T13587] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 297.481002][T13596] openvswitch: netlink: Flow key attr not present in new flow. [ 297.632548][ T9072] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.644652][ T9072] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.665146][T13606] sctp: [Deprecated]: syz.4.1873 (pid 13606) Use of int in max_burst socket option. [ 297.665146][T13606] Use struct sctp_assoc_value instead [ 297.772749][ T1150] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.788930][ T1150] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.851995][ T1150] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.884608][ T1150] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.924215][ T1150] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.944973][ T1150] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.357602][T13624] wg1 speed is unknown, defaulting to 1000 [ 298.369117][T13624] lo speed is unknown, defaulting to 1000 [ 298.385854][T13627] __nla_validate_parse: 4 callbacks suppressed [ 298.385875][T13627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 298.419640][T13624] wg1 speed is unknown, defaulting to 1000 [ 298.718684][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1885'. [ 298.815283][T13650] netlink: 'syz.2.1886': attribute type 6 has an invalid length. [ 298.856986][T13650] IPv6: NLM_F_CREATE should be specified when creating new route [ 299.054776][T13659] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 299.072986][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 299.371479][T13673] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1892'. [ 299.381443][T13673] netlink: 'syz.1.1892': attribute type 9 has an invalid length. [ 299.389463][T13673] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1892'. [ 299.399128][T13673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1892'. [ 299.455794][T13675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1893'. [ 299.489202][T13673] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1892'. [ 299.513874][T13681] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 299.848012][T13696] netlink: 'syz.1.1900': attribute type 11 has an invalid length. [ 299.856123][T13696] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1900'. [ 299.951695][T13703] netlink: 'syz.2.1901': attribute type 10 has an invalid length. [ 300.067464][T13709] wg1 speed is unknown, defaulting to 1000 [ 300.088038][T13705] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1902'. [ 300.111904][T13709] lo speed is unknown, defaulting to 1000 [ 300.128648][T13709] wg1 speed is unknown, defaulting to 1000 [ 300.259118][T13716] syzkaller0: entered promiscuous mode [ 300.267230][T13716] syzkaller0: entered allmulticast mode [ 300.386374][T13723] netlink: 'syz.1.1907': attribute type 15 has an invalid length. [ 300.401775][T13716] tipc: Enabled bearer , priority 0 [ 300.423461][T13716] netlink: 'syz.2.1906': attribute type 11 has an invalid length. [ 300.432499][T13716] netlink: 'syz.2.1906': attribute type 11 has an invalid length. [ 300.440455][T13716] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1906'. [ 300.460770][T13715] tipc: Resetting bearer [ 300.479520][T13715] tipc: Disabling bearer [ 301.138287][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 301.208806][T13754] wg1 speed is unknown, defaulting to 1000 [ 301.256775][T13754] lo speed is unknown, defaulting to 1000 [ 301.263590][T13757] wg1 speed is unknown, defaulting to 1000 [ 301.273023][T13754] wg1 speed is unknown, defaulting to 1000 [ 301.352460][T13757] lo speed is unknown, defaulting to 1000 [ 301.368079][T13757] wg1 speed is unknown, defaulting to 1000 [ 301.930345][T13786] wg1 speed is unknown, defaulting to 1000 [ 301.945239][T13788] tipc: Enabling of bearer rejected, already enabled [ 301.969887][T13786] lo speed is unknown, defaulting to 1000 [ 301.978084][T13786] wg1 speed is unknown, defaulting to 1000 [ 302.008105][T13788] syzkaller0: entered promiscuous mode [ 302.015965][T13788] syzkaller0: entered allmulticast mode [ 302.103986][T13788] tipc: Enabled bearer , priority 0 [ 302.145672][T13787] tipc: Resetting bearer [ 302.287972][T13787] tipc: Disabling bearer [ 302.900139][T13836] netlink: 'syz.2.1933': attribute type 1 has an invalid length. [ 302.994017][T13836] bond7: entered promiscuous mode [ 303.001171][T13836] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.268964][T13857] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 303.309431][T13854] netlink: 'syz.0.1936': attribute type 1 has an invalid length. [ 303.865671][T13883] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 303.894472][T13880] wg1 speed is unknown, defaulting to 1000 [ 303.966145][T13880] lo speed is unknown, defaulting to 1000 [ 304.069768][T13880] wg1 speed is unknown, defaulting to 1000 [ 304.116241][T13899] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 305.151034][T13936] tipc: Enabled bearer , priority 0 [ 305.187623][T13936] syzkaller0: entered promiscuous mode [ 305.193158][T13936] syzkaller0: entered allmulticast mode [ 305.251857][T13936] tipc: Resetting bearer [ 305.287757][T13935] tipc: Resetting bearer [ 305.304972][T13947] __nla_validate_parse: 3 callbacks suppressed [ 305.304991][T13947] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1962'. [ 305.337246][T13935] tipc: Disabling bearer [ 305.350553][T13945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'. [ 305.578671][T13968] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1969'. [ 305.617697][T13964] netlink: 'syz.0.1968': attribute type 15 has an invalid length. [ 305.623530][T13970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1970'. [ 305.791873][T13974] wg1 speed is unknown, defaulting to 1000 [ 305.812679][T13974] lo speed is unknown, defaulting to 1000 [ 305.817969][T13976] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1971'. [ 305.858424][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 305.870573][T13974] wg1 speed is unknown, defaulting to 1000 [ 305.876872][T13979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1973'. [ 306.031537][T13983] wg1 speed is unknown, defaulting to 1000 [ 306.067481][T13990] netlink: 'syz.2.1975': attribute type 1 has an invalid length. [ 306.101005][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1975'. [ 306.110311][T13983] lo speed is unknown, defaulting to 1000 [ 306.115009][T13990] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 306.120286][T13983] wg1 speed is unknown, defaulting to 1000 [ 306.168311][T13997] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 306.369945][T14007] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1980'. [ 306.547192][T14023] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1983'. [ 306.756174][T14029] netlink: 'syz.3.1985': attribute type 11 has an invalid length. [ 306.858774][T14035] netlink: 'syz.4.1988': attribute type 12 has an invalid length. [ 306.868043][T14029] vetè0_virt_wif: renamed from lo [ 306.887951][T14032] wg1 speed is unknown, defaulting to 1000 [ 306.941540][T14032] lo speed is unknown, defaulting to 1000 [ 306.951864][T14032] wg1 speed is unknown, defaulting to 1000 [ 306.958311][T14036] wg1 speed is unknown, defaulting to 1000 [ 307.092850][T14036] lo speed is unknown, defaulting to 1000 [ 307.177831][T14036] wg1 speed is unknown, defaulting to 1000 [ 307.408749][T14067] tipc: Enabled bearer , priority 10 [ 308.409814][T14095] tipc: Enabled bearer , priority 0 [ 308.418582][T14095] syzkaller0: entered promiscuous mode [ 308.424269][T14095] syzkaller0: entered allmulticast mode [ 308.458004][T14095] tipc: Resetting bearer [ 308.458817][T14101] netlink: 'syz.4.2005': attribute type 8 has an invalid length. [ 308.485642][T14094] tipc: Resetting bearer [ 308.508244][T14094] tipc: Disabling bearer [ 308.546180][T14097] wg1 speed is unknown, defaulting to 1000 [ 308.561785][T14103] tap0: tun_chr_ioctl cmd 1074025677 [ 308.579348][T14103] tap0: linktype set to 0 [ 308.590108][T14097] lo speed is unknown, defaulting to 1000 [ 308.609050][T14101] wg1 speed is unknown, defaulting to 1000 [ 308.648050][T14101] lo speed is unknown, defaulting to 1000 [ 308.659264][T14097] wg1 speed is unknown, defaulting to 1000 [ 308.683160][T14101] wg1 speed is unknown, defaulting to 1000 [ 308.786814][T14113] netlink: 'syz.0.2010': attribute type 26 has an invalid length. [ 309.124515][T14130] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 309.270893][T14136] .70·: renamed from hsr0 [ 309.297459][T14136] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 309.320750][T14136] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 309.346060][T14136] .70·: entered allmulticast mode [ 309.351824][T14136] hsr_slave_0: entered allmulticast mode [ 309.357887][T14136] hsr_slave_1: entered allmulticast mode [ 309.366355][T14136] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 309.682291][T14147] batman_adv: batadv0: Adding interface: dummy0 [ 309.721678][T14147] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.786698][T14147] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 309.815914][T14152] macvtap1: mtu less than device minimum [ 309.855528][T14145] wg1 speed is unknown, defaulting to 1000 [ 309.956780][T14145] lo speed is unknown, defaulting to 1000 [ 310.003954][T14145] wg1 speed is unknown, defaulting to 1000 [ 310.039290][T14160] wg1 speed is unknown, defaulting to 1000 [ 310.096127][T14160] lo speed is unknown, defaulting to 1000 [ 310.149758][T14160] wg1 speed is unknown, defaulting to 1000 [ 310.488915][T14170] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 310.498871][T14170] bridge2: entered allmulticast mode [ 310.863181][T14160] __nla_validate_parse: 6 callbacks suppressed [ 310.863203][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 311.715995][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2036'. [ 311.748132][ T36] bond0: (slave team0): link status definitely down, disabling slave [ 311.765197][ T36] bond0: (slave batadv0): link status definitely down, disabling slave [ 311.956499][T14227] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2038'. [ 312.275451][T14243] netlink: 'syz.2.2043': attribute type 2 has an invalid length. [ 312.283951][T14243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2043'. [ 312.398181][T14250] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2044'. [ 312.622992][T14246] Cannot find set identified by id 1 to match [ 312.699151][T14258] tipc: MTU too low for tipc bearer [ 312.716318][T14258] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2046'. [ 312.748227][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'. [ 312.790877][T14258] team0: Port device geneve0 removed [ 313.301760][T14274] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 314.040021][T14304] batadv_slave_1: entered promiscuous mode [ 314.058642][T14304] batadv_slave_1: left promiscuous mode [ 314.142361][T14313] openvswitch: netlink: Message has 572 unknown bytes. [ 314.156843][T14313] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.189116][T14315] netlink: 'syz.0.2062': attribute type 4 has an invalid length. [ 314.216403][T14318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.230204][ T5871] lo speed is unknown, defaulting to 1000 [ 314.235972][ T5871] syz2: Port: 1 Link DOWN [ 314.252294][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2061'. [ 314.257556][T14315] netlink: 'syz.0.2062': attribute type 4 has an invalid length. [ 314.276410][T14318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.301073][ T5871] lo speed is unknown, defaulting to 1000 [ 314.307877][ T5871] syz2: Port: 1 Link ACTIVE [ 314.385651][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2062'. [ 314.639912][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2064'. [ 314.771519][T14344] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 314.956753][T14351] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 315.008930][T14351] syzkaller1: entered promiscuous mode [ 315.014462][T14351] syzkaller1: entered allmulticast mode [ 315.342439][T14366] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.358887][T14366] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.532589][T14366] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.554096][T14366] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.651448][T14366] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.672011][T14366] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.787173][T14366] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.797326][T14366] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.979168][ T9064] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.995893][ T9064] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.036047][ T9064] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.075200][ T9064] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.105255][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.114098][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.153147][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.162102][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.335600][T14385] __nla_validate_parse: 3 callbacks suppressed [ 316.335621][T14385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2077'. [ 316.848639][T14385] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2077'. [ 317.139848][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2085'. [ 317.150613][T14415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2085'. [ 317.161381][T14417] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2084'. [ 317.237117][T14415] geneve3: entered promiscuous mode [ 317.242551][T14415] geneve3: entered allmulticast mode [ 317.366287][T14428] netlink: 'syz.1.2087': attribute type 2 has an invalid length. [ 317.375496][T14426] netlink: 'syz.1.2087': attribute type 2 has an invalid length. [ 317.395763][T14429] openvswitch: netlink: IP tunnel dst address not specified [ 317.403423][T14428] !: entered promiscuous mode [ 317.418832][T14428] gretap1: entered promiscuous mode [ 317.425068][T14428] batman_adv: batadv0: Adding interface: gretap1 [ 317.432284][T14428] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 317.454423][T14428] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 317.485834][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2090'. [ 317.782186][T14453] x_tables: unsorted entry at hook 1 [ 317.790818][T14455] netlink: 'syz.1.2095': attribute type 1 has an invalid length. [ 317.852083][T14455] bond1: entered promiscuous mode [ 317.857992][T14455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 317.873832][T14455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2095'. [ 317.883012][T14455] bond1: entered allmulticast mode [ 317.915467][T14455] bond1: (slave bridge3): making interface the new active one [ 317.946708][T14455] bridge3: entered promiscuous mode [ 317.952164][T14455] bridge3: entered allmulticast mode [ 317.960740][T14455] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 318.055005][T14468] ip_vti0: entered promiscuous mode [ 318.061230][T14468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2098'. [ 318.073796][T14466] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2097'. [ 318.092891][T14466] vlan3: entered allmulticast mode [ 318.098702][T14466] erspan0: entered allmulticast mode [ 318.188095][T14475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2100'. [ 318.989776][T14513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.360804][T14523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.368091][T14523] IPv6: NLM_F_CREATE should be set when creating new route [ 319.375389][T14523] IPv6: NLM_F_CREATE should be set when creating new route [ 319.382701][T14523] IPv6: NLM_F_CREATE should be set when creating new route [ 319.398673][T14523] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.641812][T14535] syzkaller1: entered promiscuous mode [ 319.653524][T14535] syzkaller1: entered allmulticast mode [ 319.673776][T14531] wg1 speed is unknown, defaulting to 1000 [ 319.710517][T14531] lo speed is unknown, defaulting to 1000 [ 319.744204][T14531] wg1 speed is unknown, defaulting to 1000 [ 319.858013][T14551] xt_TCPMSS: Only works on TCP SYN packets [ 320.579853][T14572] team0: Port device dummy0 removed [ 320.661748][T14583] veth1_virt_wifi: entered promiscuous mode [ 320.668583][T14583] veth1_virt_wifi: entered allmulticast mode [ 320.686718][T14577] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 320.854014][T14591] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 320.995446][T14597] veth1_to_bond: entered allmulticast mode [ 321.005402][T14594] veth1_to_bond: left allmulticast mode [ 322.027453][T14665] smc: net device hsr0 applied user defined pnetid SYZ2 [ 322.033732][T14666] __nla_validate_parse: 5 callbacks suppressed [ 322.033753][T14666] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2152'. [ 322.035413][T14665] smc: net device hsr0 erased user defined pnetid SYZ2 [ 322.144884][T14672] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 322.198042][T14676] netlink: 'syz.0.2155': attribute type 4 has an invalid length. [ 322.241022][ T5871] lo speed is unknown, defaulting to 1000 [ 322.242709][ T1071] lo speed is unknown, defaulting to 1000 [ 322.433462][T14685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2155'. [ 322.478617][T14682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.557933][T14692] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 322.569631][T14691] wg1 speed is unknown, defaulting to 1000 [ 322.608999][T14691] lo speed is unknown, defaulting to 1000 [ 322.631231][T14691] wg1 speed is unknown, defaulting to 1000 [ 322.742061][ T5147] Bluetooth: hci0: command tx timeout [ 322.868886][T14698] sctp: [Deprecated]: syz.2.2163 (pid 14698) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.868886][T14698] Use struct sctp_sack_info instead [ 323.668428][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2170'. [ 323.790820][T14737] netlink: 'syz.2.2172': attribute type 21 has an invalid length. [ 323.804034][T14737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2172'. [ 324.246294][T14760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2177'. [ 324.268784][T14762] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2177'. [ 324.779363][T14778] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2181'. [ 325.156092][T14781] syzkaller1: entered promiscuous mode [ 325.167775][T14781] syzkaller1: entered allmulticast mode [ 325.323200][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 325.338066][T14789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 325.458919][T14799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.486468][T14798] Bluetooth: MGMT ver 1.23 [ 325.645532][T14809] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2189'. [ 326.086650][T14831] wg1 speed is unknown, defaulting to 1000 [ 326.117833][T14831] lo speed is unknown, defaulting to 1000 [ 326.152288][T14831] wg1 speed is unknown, defaulting to 1000 [ 326.913823][T14853] netlink: 'syz.3.2202': attribute type 10 has an invalid length. [ 327.139229][T14858] __nla_validate_parse: 2 callbacks suppressed [ 327.139250][T14858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2204'. [ 327.166854][T14860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2205'. [ 327.374626][T14860] bond0: (slave team0): Releasing backup interface [ 327.480636][T14872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2208'. [ 327.588488][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2211'. [ 327.616047][T14883] bridge_slave_0: default FDB implementation only supports local addresses [ 327.949523][T14900] tipc: Enabling of bearer rejected, failed to enable media [ 328.016000][T14900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2214'. [ 328.027082][T14900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2214'. [ 328.161438][T14906] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 328.386023][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 328.460317][T14924] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2219'. [ 328.682628][T14937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2223'. [ 328.770254][T14934] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2223'. [ 328.780982][T14934] tipc: Enabled bearer , priority 0 [ 328.895265][T14943] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.927472][T14945] wg1 speed is unknown, defaulting to 1000 [ 328.935377][T14945] lo speed is unknown, defaulting to 1000 [ 328.943761][T14945] wg1 speed is unknown, defaulting to 1000 [ 329.030851][T14937] syzkaller0: entered promiscuous mode [ 329.037386][T14937] syzkaller0: entered allmulticast mode [ 329.043942][T14937] tipc: Resetting bearer [ 329.066445][T14932] tipc: Resetting bearer [ 329.217775][T14965] netlink: 'syz.3.2231': attribute type 33 has an invalid length. [ 330.413769][T14932] tipc: Disabling bearer [ 330.662212][ T1071] tipc: Node number set to 818760080 [ 330.764434][T14988] nbd: must specify a device to reconfigure [ 330.783465][T14976] wg1 speed is unknown, defaulting to 1000 [ 330.791431][T14976] lo speed is unknown, defaulting to 1000 [ 330.823700][T14976] wg1 speed is unknown, defaulting to 1000 [ 330.972422][T14999] netlink: 'syz.4.2235': attribute type 7 has an invalid length. [ 331.161385][T15004] wg1 speed is unknown, defaulting to 1000 [ 331.227989][T15004] lo speed is unknown, defaulting to 1000 [ 331.344196][T15008] 8021q: VLANs not supported on vcan0 [ 331.371739][T15008] openvswitch: netlink: Message has 4 unknown bytes. [ 331.381362][T15004] wg1 speed is unknown, defaulting to 1000 [ 331.402236][T15007] openvswitch: netlink: Message has 4 unknown bytes. [ 331.419480][T15007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.439468][T15008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.148097][T15039] netlink: 'syz.1.2248': attribute type 58 has an invalid length. [ 332.148113][T15038] netlink: 'syz.1.2248': attribute type 58 has an invalid length. [ 332.167442][T15042] netlink: 'syz.3.2249': attribute type 39 has an invalid length. [ 332.175679][T15042] netlink: 'syz.3.2249': attribute type 39 has an invalid length. [ 332.179877][T15039] __nla_validate_parse: 12 callbacks suppressed [ 332.179897][T15039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2248'. [ 332.193821][T15042] netlink: 'syz.3.2249': attribute type 39 has an invalid length. [ 332.217169][T15042] netlink: 'syz.3.2249': attribute type 39 has an invalid length. [ 332.227036][T15038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2248'. [ 332.301116][T15042] netlink: 'syz.3.2249': attribute type 39 has an invalid length. [ 332.349234][T15042] netlink: 'syz.3.2249': attribute type 39 has an invalid length. [ 332.528959][T15050] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 332.547880][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2250'. [ 333.105925][T15028] Unsupported ieee802154 address type: 0 [ 333.225863][T15078] tun0: tun_chr_ioctl cmd 1074025675 [ 333.266794][T15078] tun0: persist enabled [ 333.293399][T15078] tun0: tun_chr_ioctl cmd 1074025675 [ 333.331934][T15078] tun0: persist enabled [ 334.130260][T15098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.518536][T15136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2270'. [ 335.101812][T15155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 335.513421][T15185] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2284'. [ 335.742709][T15197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2286'. [ 335.784290][T15205] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2290'. [ 335.889247][T15206] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.911623][T15206] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.972362][T15216] C: renamed from vetè0_virt_wif [ 335.991374][T15216] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 336.020736][T15206] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.033244][T15206] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.064016][T15197] wg1 speed is unknown, defaulting to 1000 [ 336.075760][T15197] lo speed is unknown, defaulting to 1000 [ 336.087685][T15206] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.114865][T15206] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.138479][T15197] wg1 speed is unknown, defaulting to 1000 [ 336.208237][T15206] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.252728][T15206] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.295721][T15231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2294'. [ 336.382531][ T1150] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.391650][ T1150] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.433216][ T1150] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.442433][ T1150] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.451063][ T1150] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.455259][T15238] x_tables: unsorted entry at hook 2 [ 336.459515][ T1150] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.490899][ T1165] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 336.502268][ T1165] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.633341][T15209] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.644655][T15209] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.711717][T15209] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.734637][T15209] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.808619][T15209] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.826692][T15209] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.916424][T15209] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.936642][T15209] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.243087][T15268] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2302'. [ 337.478272][T15285] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2307'. [ 337.523465][T15285] bond7: option tlb_dynamic_lb: invalid value (71) [ 337.533681][T15285] bond7 (unregistering): Released all slaves [ 337.576221][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2307'. [ 337.643159][T15292] syzkaller0: entered promiscuous mode [ 337.650156][T15292] syzkaller0: entered allmulticast mode [ 337.697461][T15279] wg1 speed is unknown, defaulting to 1000 [ 337.705358][T15279] lo speed is unknown, defaulting to 1000 [ 337.714955][T15279] wg1 speed is unknown, defaulting to 1000 [ 337.825984][T15298] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2310'. [ 337.889723][T15302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 337.909504][T15302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2309'. [ 338.072102][T15308] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2311'. [ 338.217081][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2314'. [ 338.226036][T15314] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2314'. [ 338.235502][T15318] validate_nla: 27 callbacks suppressed [ 338.235520][T15318] netlink: 'syz.0.2316': attribute type 1 has an invalid length. [ 338.242448][T15314] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2314'. [ 338.282603][T15319] vlan4: entered allmulticast mode [ 338.289147][T15319] dummy0: entered allmulticast mode [ 338.358376][T15318] 8021q: adding VLAN 0 to HW filter on device bond10 [ 338.586334][T15341] geneve3: entered promiscuous mode [ 338.614026][ T1165] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.627962][T15341] openvswitch: netlink: nsh attr 0 has unexpected len 16 expected 0 [ 338.634839][ T1165] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.667539][T15341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.676813][ T1165] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.685077][ T1165] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.718924][T15348] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.829611][T15348] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.927168][T15348] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.973642][T15365] netlink: 'syz.4.2329': attribute type 13 has an invalid length. [ 338.985047][T15365] netlink: 'syz.4.2329': attribute type 17 has an invalid length. [ 339.004825][T15348] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.168235][T15365] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.182342][T15365] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.274916][ T1150] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.305675][ T9064] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.349465][ T9064] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.437759][ T9064] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.489410][T15380] 8021q: adding VLAN 0 to HW filter on device bond11 [ 339.675604][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.687783][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.732086][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.750715][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.804131][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.821638][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.894288][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.909033][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.965887][T15394] bond12: entered promiscuous mode [ 339.971997][T15394] 8021q: adding VLAN 0 to HW filter on device bond12 [ 340.061568][T15397] 8021q: adding VLAN 0 to HW filter on device bond13 [ 340.071531][T15397] bond13: entered promiscuous mode [ 340.087503][T15397] bond12: (slave bond13): Enslaving as an active interface with an up link [ 340.545095][T15418] wg1 speed is unknown, defaulting to 1000 [ 340.569290][T15418] lo speed is unknown, defaulting to 1000 [ 340.577652][T15418] wg1 speed is unknown, defaulting to 1000 [ 340.902013][T15430] xt_ecn: cannot match TCP bits for non-tcp packets [ 340.949075][T15432] gretap2: entered allmulticast mode [ 341.109932][T15432] gretap2: entered allmulticast mode [ 341.250891][T15432] gretap2: entered allmulticast mode [ 341.339081][T15432] gretap2: entered allmulticast mode [ 341.441708][T15432] gretap2: entered allmulticast mode [ 341.555097][T15432] gretap2: entered allmulticast mode [ 341.684686][T15432] gretap2: entered allmulticast mode [ 342.653993][T15508] __nla_validate_parse: 15 callbacks suppressed [ 342.654010][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2358'. [ 342.869126][T15511] ipvlan0: mtu less than device minimum [ 343.124143][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 343.145906][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2368'. [ 343.195641][T15526] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2369'. [ 343.197343][T15519] bond0: entered promiscuous mode [ 343.238760][T15519] gretap0: entered promiscuous mode [ 343.251331][T15519] hsr1: entered promiscuous mode [ 343.258075][T15520] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 343.360848][T15531] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2370'. [ 343.430030][T15531] wg1 speed is unknown, defaulting to 1000 [ 343.441136][T15531] lo speed is unknown, defaulting to 1000 [ 343.460514][T15531] wg1 speed is unknown, defaulting to 1000 [ 343.993714][T15559] wg1 speed is unknown, defaulting to 1000 [ 344.048063][T15559] lo speed is unknown, defaulting to 1000 [ 344.072188][T15559] wg1 speed is unknown, defaulting to 1000 [ 344.103726][T15564] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 344.111944][T15563] netlink: 'syz.2.2378': attribute type 13 has an invalid length. [ 344.667108][T15563] bridge0: port 1(1¾x9ÿ) entered disabled state [ 344.839850][T15582] netlink: 428 bytes leftover after parsing attributes in process `syz.3.2382'. [ 345.067822][T15563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.093479][T15563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.361227][T15563] erspan0: left allmulticast mode [ 345.433305][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 345.443506][T15568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 345.470083][T15582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2382'. [ 345.582141][T15584] bond7: option primary_reselect: invalid value (6) [ 345.592802][T15584] bond7 (unregistering): Released all slaves [ 345.616004][ T36] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.626262][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.634852][ T36] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.643309][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.687605][ T36] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.696137][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.721844][T15604] tipc: Enabling of bearer rejected, already enabled [ 345.731882][T15604] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 345.747598][T15604] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 345.760114][ T36] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.772768][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.784244][T15608] IPVS: stopping backup sync thread 11934 ... [ 345.971857][T15616] sctp: [Deprecated]: syz.3.2387 (pid 15616) Use of int in max_burst socket option. [ 345.971857][T15616] Use struct sctp_assoc_value instead [ 345.998962][T15619] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2388'. [ 346.279945][T15635] wg1 speed is unknown, defaulting to 1000 [ 346.304914][T15635] lo speed is unknown, defaulting to 1000 [ 346.323418][T15635] wg1 speed is unknown, defaulting to 1000 [ 347.376188][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 347.394813][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 347.422605][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 347.449739][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 347.465401][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 347.479385][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 347.488270][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 347.496330][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 347.504976][T15677] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 348.767838][T15680] kthread_run failed with err -4 [ 348.787482][T15667] wg1 speed is unknown, defaulting to 1000 [ 348.836356][T15667] lo speed is unknown, defaulting to 1000 [ 348.851195][T15667] wg1 speed is unknown, defaulting to 1000 [ 349.230273][T15717] wg1 speed is unknown, defaulting to 1000 [ 349.239065][T15717] lo speed is unknown, defaulting to 1000 [ 349.257886][T15722] __nla_validate_parse: 5 callbacks suppressed [ 349.257909][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 349.258428][T15717] wg1 speed is unknown, defaulting to 1000 [ 349.504465][T15730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2420'. [ 349.534555][T15730] tipc: Enabled bearer , priority 0 [ 349.571452][T15732] batadv_slave_1: entered promiscuous mode [ 349.715658][T15739] validate_nla: 24 callbacks suppressed [ 349.715679][T15739] netlink: 'syz.1.2423': attribute type 4 has an invalid length. [ 349.739997][T15731] batadv_slave_1: left promiscuous mode [ 349.760530][T15741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2424'. [ 349.971096][T15747] tipc: Enabled bearer , priority 0 [ 350.005979][T15747] syzkaller0: entered promiscuous mode [ 350.011875][T15750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.017606][T15747] syzkaller0: entered allmulticast mode [ 350.042556][T15746] tipc: Resetting bearer [ 350.083459][T15746] tipc: Disabling bearer [ 350.267734][T15765] netlink: 'syz.0.2432': attribute type 14 has an invalid length. [ 350.275638][T15765] netem: change failed [ 350.319815][T15762] wg1 speed is unknown, defaulting to 1000 [ 350.330363][T15771] netlink: 'syz.4.2435': attribute type 1 has an invalid length. [ 350.344157][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 350.370711][T15762] lo speed is unknown, defaulting to 1000 [ 350.431872][T15781] netlink: 588 bytes leftover after parsing attributes in process `syz.4.2435'. [ 350.472627][T15771] 8021q: adding VLAN 0 to HW filter on device bond5 [ 350.510948][T15762] wg1 speed is unknown, defaulting to 1000 [ 350.585515][T15771] veth3: entered promiscuous mode [ 350.600770][T15771] bond5: (slave veth3): Enslaving as an active interface with a down link [ 350.664509][T15786] Bluetooth: MGMT ver 1.23 [ 350.685782][T15788] netlink: 'syz.1.2437': attribute type 9 has an invalid length. [ 350.695085][T15788] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2437'. [ 350.710225][T15791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2438'. [ 350.977591][T15806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2439'. [ 351.227876][T15817] bond0: Device is already in use. [ 351.363063][T15817] veth0: entered promiscuous mode [ 351.389570][T15816] veth0: left promiscuous mode [ 351.497872][T15831] netlink: 'syz.3.2449': attribute type 4 has an invalid length. [ 351.515918][T15832] netlink: 'syz.3.2449': attribute type 4 has an invalid length. [ 351.531902][T15824] wg1 speed is unknown, defaulting to 1000 [ 351.680755][T15835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2450'. [ 351.682369][T15824] lo speed is unknown, defaulting to 1000 [ 351.727749][T15835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 351.782259][T15597] lo speed is unknown, defaulting to 1000 [ 351.784615][T15824] wg1 speed is unknown, defaulting to 1000 [ 351.789541][T15597] syz2: Port: 1 Link DOWN [ 352.132158][T15850] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2454'. [ 352.155967][T15852] SET target dimension over the limit! [ 352.386932][T15861] netlink: 'syz.1.2456': attribute type 64 has an invalid length. [ 352.713659][T15874] netlink: 'syz.1.2459': attribute type 3 has an invalid length. [ 352.755067][T15876] gtp2: entered promiscuous mode [ 352.760617][T15876] gtp2: entered allmulticast mode [ 352.860623][T15880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.375859][T15906] bond11: option broadcast_neighbor: invalid value (5) [ 353.402685][T15906] bond11 (unregistering): Released all slaves [ 353.579133][T15923] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 353.620229][T15923] ip6gre1: entered allmulticast mode [ 353.674408][T15927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.969649][T15939] bond0: (slave team0): Releasing backup interface [ 354.097544][T15939] bond0: (slave batadv0): Releasing backup interface [ 354.115601][T15939] ¾x9ÿ: left allmulticast mode [ 354.128124][T15939] ¾x9ÿ: left promiscuous mode [ 354.137140][T15939] bridge0: port 1(1¾x9ÿ) entered disabled state [ 354.157177][T15939] bond0: (slave bond_slave_0): Releasing backup interface [ 354.177365][T15939] bond0: (slave bond_slave_1): Releasing backup interface [ 354.200153][T15939] team0: Port device team_slave_1 removed [ 354.206317][T15939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.240103][T15939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.361506][T15939] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.430884][T15945] netlink: 'syz.4.2482': attribute type 11 has an invalid length. [ 354.455909][T15945] netlink: 'syz.4.2482': attribute type 11 has an invalid length. [ 354.481482][T15945] __nla_validate_parse: 7 callbacks suppressed [ 354.481503][T15945] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2482'. [ 354.760016][T15958] netlink: 'syz.4.2485': attribute type 27 has an invalid length. [ 354.770488][T15958] sctp: [Deprecated]: syz.4.2485 (pid 15958) Use of struct sctp_assoc_value in delayed_ack socket option. [ 354.770488][T15958] Use struct sctp_sack_info instead [ 354.875201][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2488'. [ 354.963627][T15967] netlink: 'syz.4.2489': attribute type 1 has an invalid length. [ 355.025333][T15969] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 355.079599][T15971] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.2491'. [ 355.127019][T15971] openvswitch: netlink: Message has 16 unknown bytes. [ 355.222435][T15977] netlink: 'syz.0.2493': attribute type 10 has an invalid length. [ 355.261590][T15977] batman_adv: batadv0: Adding interface: netdevsim0 [ 355.273739][T15981] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2492'. [ 355.281009][T15977] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 355.320376][T15981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2492'. [ 355.332329][T15977] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 355.352919][ T30] audit: type=1800 audit(1763881622.861:9): pid=15986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2496" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2607 res=0 errno=0 [ 355.437873][T15991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2498'. [ 355.450627][T15991] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2498'. [ 355.500002][T15993] dummy0: Device is already in use. [ 355.541684][T15993] wg1 speed is unknown, defaulting to 1000 [ 355.555617][T15993] lo speed is unknown, defaulting to 1000 [ 355.579099][T15993] wg1 speed is unknown, defaulting to 1000 [ 355.698279][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2501'. [ 355.876169][T16014] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2503'. [ 356.115271][T16029] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2507'. [ 356.321542][T16037] tipc: Resetting bearer [ 356.336443][T16037] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 356.473710][ T36] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.497489][ T36] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.518797][ T36] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.527871][ T36] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.814182][T16059] bond14: entered promiscuous mode [ 356.854243][T16059] 8021q: adding VLAN 0 to HW filter on device bond14 [ 357.004133][T16076] netlink: 'syz.1.2522': attribute type 1 has an invalid length. [ 357.032995][T16072] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 358.199174][T16129] block nbd2: Unsupported socket: should be TCP or UNIX. [ 358.369147][T16140] netlink: 'syz.3.2539': attribute type 11 has an invalid length. [ 358.590074][T16155] batadv_slave_1: entered promiscuous mode [ 358.641614][T16151] netlink: 'syz.0.2543': attribute type 21 has an invalid length. [ 358.650233][T16154] batadv_slave_1: left promiscuous mode [ 358.716485][T16151] netlink: 'syz.0.2543': attribute type 1 has an invalid length. [ 358.990952][T16172] wg1 speed is unknown, defaulting to 1000 [ 359.059139][T16172] lo speed is unknown, defaulting to 1000 [ 359.066847][T16172] wg1 speed is unknown, defaulting to 1000 [ 359.078211][T16175] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 359.249568][T16157] delete_channel: no stack [ 359.984946][T16203] __nla_validate_parse: 6 callbacks suppressed [ 359.984972][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2556'. [ 360.295641][T16223] wg1 speed is unknown, defaulting to 1000 [ 360.330066][T16223] lo speed is unknown, defaulting to 1000 [ 360.369724][T16223] wg1 speed is unknown, defaulting to 1000 [ 360.612220][T16235] netlink: 'syz.4.2563': attribute type 10 has an invalid length. [ 360.654680][T16235] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2563'. [ 360.696009][T16239] pim6reg: entered allmulticast mode [ 360.704253][T16235] batadv0: entered promiscuous mode [ 360.704817][T16237] x_tables: duplicate underflow at hook 2 [ 360.732129][T16235] batadv0: entered allmulticast mode [ 360.739582][T16235] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 360.756013][T16240] pim6reg: left allmulticast mode [ 360.819035][T16242] netlink: 'syz.3.2565': attribute type 32 has an invalid length. [ 360.870580][T16247] syzkaller0: left promiscuous mode [ 360.876071][T16247] syzkaller0: left allmulticast mode [ 361.529971][T16277] gretap0: entered promiscuous mode [ 361.549031][T16277] vlan5: entered promiscuous mode [ 361.830956][T16283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2575'. [ 362.011316][T16297] netlink: 'syz.3.2580': attribute type 1 has an invalid length. [ 362.214833][T16297] bond7: entered promiscuous mode [ 362.220351][T16297] bond7: entered allmulticast mode [ 362.226320][T16297] 8021q: adding VLAN 0 to HW filter on device bond7 [ 362.466802][T16314] No such timeout policy "syz1" [ 362.661248][T16326] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 362.672176][T16326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2585'. [ 362.790612][T16339] netlink: 'syz.3.2589': attribute type 6 has an invalid length. [ 362.794239][T16331] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2585'. [ 362.820120][T16339] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2589'. [ 362.848903][T16339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2589'. [ 362.874110][T16341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2587'. [ 362.922878][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2590'. [ 362.936460][T16348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2590'. [ 363.083051][T16350] bond0: entered promiscuous mode [ 363.092181][T16350] batadv0: entered promiscuous mode [ 363.100232][T16350] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 363.110892][T16350] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 363.123178][T16350] bond0: left promiscuous mode [ 363.128932][T16350] batadv0: left promiscuous mode [ 363.621041][T16385] block nbd2: Unsupported socket: should be TCP or UNIX. [ 363.728825][T16390] netlink: ct family unspecified [ 363.736675][T16390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.495026][T16417] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 364.550716][T16417] bridge7: entered allmulticast mode [ 364.639063][T16428] netlink: 'syz.2.2612': attribute type 1 has an invalid length. [ 364.745106][T16436] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 3, id = 0 [ 365.122849][T16456] batadv_slave_1: entered promiscuous mode [ 365.331866][T16462] __nla_validate_parse: 10 callbacks suppressed [ 365.331886][T16462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 365.397136][T16462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.568510][T16462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.972743][T16487] bond2: option mode: invalid value (254) [ 365.981764][T16487] bond2 (unregistering): Released all slaves [ 366.009733][T16455] batadv_slave_1: left promiscuous mode [ 366.020832][T16491] netlink: 'syz.3.2624': attribute type 10 has an invalid length. [ 366.145106][T16494] pim6reg1: entered promiscuous mode [ 366.155785][T16494] pim6reg1: entered allmulticast mode [ 366.235088][T16499] wg1 speed is unknown, defaulting to 1000 [ 366.254437][T16499] lo speed is unknown, defaulting to 1000 [ 366.288522][T16499] wg1 speed is unknown, defaulting to 1000 [ 366.337365][T16506] netlink: 'syz.1.2632': attribute type 1 has an invalid length. [ 366.354319][T16507] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2631'. [ 366.397910][T16506] bond2: entered promiscuous mode [ 366.403288][T16506] bond2: entered allmulticast mode [ 366.409689][T16506] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.449287][T16506] netlink: 'syz.1.2632': attribute type 1 has an invalid length. [ 366.489336][T16510] macvlan0: entered promiscuous mode [ 366.494691][T16510] macvlan0: entered allmulticast mode [ 366.503079][T16510] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 366.708165][T16518] bond0: (slave rose0): Releasing backup interface [ 366.735802][T16520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 366.762417][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 366.771779][T16524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 366.781281][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 366.952773][T16534] netlink: 'syz.0.2638': attribute type 1 has an invalid length. [ 367.008447][T16534] bond15: entered promiscuous mode [ 367.014034][T16534] 8021q: adding VLAN 0 to HW filter on device bond15 [ 367.062812][T16534] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2638'. [ 367.072693][T16534] bond15: entered allmulticast mode [ 367.124560][T16542] netlink: 29 bytes leftover after parsing attributes in process `syz.1.2640'. [ 367.145157][T16542] ip_vti0: left promiscuous mode [ 367.173400][T16542] gretap1: left promiscuous mode [ 367.183913][T16542] bond1: left promiscuous mode [ 367.190091][T16542] bridge3: left promiscuous mode [ 367.210650][T16542] tipc: Resetting bearer [ 367.218526][T16542] syzkaller0: left promiscuous mode [ 367.252508][T16542] bond2: left promiscuous mode [ 367.259130][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 367.591389][T16553] syzkaller0: entered promiscuous mode [ 368.231507][T16572] netlink: 'syz.2.2648': attribute type 11 has an invalid length. [ 368.374843][T16579] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2650'. [ 368.700506][T16605] wg1 speed is unknown, defaulting to 1000 [ 368.711007][T16605] lo speed is unknown, defaulting to 1000 [ 368.721155][T16605] wg1 speed is unknown, defaulting to 1000 [ 368.802147][T16618] netlink: 'syz.3.2658': attribute type 1 has an invalid length. [ 368.822325][T16621] netlink: 'syz.3.2658': attribute type 1 has an invalid length. [ 368.980868][T16622] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 368.996108][T16622] bond8: (slave vxcan5): Error -95 calling set_mac_address [ 369.248674][T16644] wg1 speed is unknown, defaulting to 1000 [ 369.256910][T16644] lo speed is unknown, defaulting to 1000 [ 369.264881][T16644] wg1 speed is unknown, defaulting to 1000 [ 369.610055][T16663] vlan0: entered promiscuous mode [ 369.615164][T16663] dummy0: entered promiscuous mode [ 369.859655][T16670] wg1 speed is unknown, defaulting to 1000 [ 369.885433][T16670] lo speed is unknown, defaulting to 1000 [ 369.911968][T16670] wg1 speed is unknown, defaulting to 1000 [ 369.920341][T16684] netlink: 'syz.1.2677': attribute type 3 has an invalid length. [ 369.966188][T16686] bridge3: entered allmulticast mode [ 370.021092][T16688] netlink: 'syz.4.2675': attribute type 4 has an invalid length. [ 370.038298][T16686] bridge4: entered allmulticast mode [ 370.080454][T16694] netlink: 'syz.4.2675': attribute type 4 has an invalid length. [ 370.125881][T16686] bridge5: entered allmulticast mode [ 370.197060][T16686] bridge6: entered allmulticast mode [ 370.241378][T16686] bridge7: entered allmulticast mode [ 370.258209][T16693] syzkaller1: entered allmulticast mode [ 370.287963][T16686] bridge8: entered allmulticast mode [ 370.426455][T16686] bridge9: entered allmulticast mode [ 370.481813][T16686] __nla_validate_parse: 16 callbacks suppressed [ 370.481835][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 370.581583][T16686] bridge10: entered allmulticast mode [ 370.654722][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 370.812857][T16686] bridge11: entered allmulticast mode [ 370.871489][T16719] tap0: tun_chr_ioctl cmd 2148553947 [ 371.274515][T16730] netlink: 'syz.3.2682': attribute type 2 has an invalid length. [ 371.493188][T16757] netlink: 'syz.0.2692': attribute type 4 has an invalid length. [ 371.510594][T16757] netlink: 'syz.0.2692': attribute type 4 has an invalid length. [ 371.563923][ T44] lo speed is unknown, defaulting to 1000 [ 371.570034][ T44] syz2: Port: 1 Link ACTIVE [ 371.964361][T16777] tipc: Enabled bearer , priority 0 [ 371.974971][T16778] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2697'. [ 372.009477][T16773] wg1 speed is unknown, defaulting to 1000 [ 372.017400][T16773] lo speed is unknown, defaulting to 1000 [ 372.024979][T16773] wg1 speed is unknown, defaulting to 1000 [ 372.187710][T16785] syz.4.2699: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 372.217656][T16783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 372.225317][T16785] CPU: 1 UID: 0 PID: 16785 Comm: syz.4.2699 Not tainted syzkaller #0 PREEMPT(full) [ 372.225347][T16785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 372.225369][T16785] Call Trace: [ 372.225378][T16785] [ 372.225388][T16785] dump_stack_lvl+0x189/0x250 [ 372.225428][T16785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.225458][T16785] ? __pfx__printk+0x10/0x10 [ 372.225481][T16785] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 372.225511][T16785] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 372.225544][T16785] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 372.225578][T16785] warn_alloc+0x214/0x310 [ 372.225625][T16785] ? __pfx_warn_alloc+0x10/0x10 [ 372.225670][T16785] ? __get_vm_area_node+0x28f/0x300 [ 372.225701][T16785] ? xskq_create+0xbf/0x170 [ 372.225727][T16785] __vmalloc_node_range_noprof+0x690/0x12d0 [ 372.225793][T16785] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 372.225830][T16785] ? __kasan_kmalloc+0x93/0xb0 [ 372.225870][T16785] vmalloc_user_noprof+0xad/0xf0 [ 372.225903][T16785] ? xskq_create+0xbf/0x170 [ 372.225924][T16785] xskq_create+0xbf/0x170 [ 372.225949][T16785] xsk_init_queue+0xb0/0x110 [ 372.225985][T16785] xsk_setsockopt+0x57b/0x8d0 [ 372.226021][T16785] ? __pfx_xsk_setsockopt+0x10/0x10 [ 372.226057][T16785] ? __pfx_aa_sk_perm+0x10/0x10 [ 372.226090][T16785] ? aa_sock_opt_perm+0xff/0x1b0 [ 372.226126][T16785] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 372.226148][T16785] ? __pfx_xsk_setsockopt+0x10/0x10 [ 372.226180][T16785] do_sock_setsockopt+0x17c/0x1b0 [ 372.226211][T16785] __x64_sys_setsockopt+0x13f/0x1b0 [ 372.226241][T16785] do_syscall_64+0xfa/0xfa0 [ 372.226262][T16785] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.226284][T16785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.226304][T16785] ? clear_bhb_loop+0x60/0xb0 [ 372.226331][T16785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.226357][T16785] RIP: 0033:0x7efcfa18f749 [ 372.226375][T16785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.226392][T16785] RSP: 002b:00007efcfaf76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 372.226414][T16785] RAX: ffffffffffffffda RBX: 00007efcfa3e5fa0 RCX: 00007efcfa18f749 [ 372.226429][T16785] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000a [ 372.226442][T16785] RBP: 00007efcfa213f91 R08: 0000000000000004 R09: 0000000000000000 [ 372.226455][T16785] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 372.226467][T16785] R13: 00007efcfa3e6038 R14: 00007efcfa3e5fa0 R15: 00007fff04305ae8 [ 372.226501][T16785] [ 372.573016][T16785] Mem-Info: [ 372.576202][T16785] active_anon:7157 inactive_anon:0 isolated_anon:0 [ 372.576202][T16785] active_file:3333 inactive_file:40001 isolated_file:0 [ 372.576202][T16785] unevictable:768 dirty:213 writeback:0 [ 372.576202][T16785] slab_reclaimable:12520 slab_unreclaimable:181328 [ 372.576202][T16785] mapped:29208 shmem:1363 pagetables:943 [ 372.576202][T16785] sec_pagetables:0 bounce:0 [ 372.576202][T16785] kernel_misc_reclaimable:0 [ 372.576202][T16785] free:1231661 free_pcp:28386 free_cma:0 [ 372.632186][T16785] Node 0 active_anon:30728kB inactive_anon:0kB active_file:13332kB inactive_file:159800kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116832kB dirty:648kB writeback:200kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12964kB pagetables:3636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.666446][T16785] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 372.699964][T16785] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.732718][T16785] lowmem_reserve[]: 0 2504 2505 2505 2505 [ 372.739638][T16785] Node 0 DMA32 free:1010832kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30728kB inactive_anon:0kB active_file:13332kB inactive_file:159800kB unevictable:1536kB writepending:648kB zspages:0kB present:3129332kB managed:2565100kB mlocked:0kB bounce:0kB free_pcp:102008kB local_pcp:24524kB free_cma:0kB [ 372.740110][T16797] IPVS: length: 24 != 393240 [ 372.773389][T16785] lowmem_reserve[]: 0 0 0 0 0 [ 372.782762][T16785] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 372.812244][T16785] lowmem_reserve[]: 0 0 0 0 0 [ 372.819322][T16785] Node 1 Normal free:3897452kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12300kB local_pcp:7396kB free_cma:0kB [ 372.852769][T16785] lowmem_reserve[]: 0 0 0 0 0 [ 372.857710][T16785] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 372.861148][T16799] syz_tun: entered allmulticast mode [ 372.879451][T16785] Node 0 DMA32: 388*4kB (UE) 441*8kB (UME) 505*16kB (UME) 485*32kB (UME) 360*64kB (UME) 80*128kB (UM) 46*256kB (UM) 20*512kB (UME) 17*1024kB (UM) 8*2048kB (UE) 218*4096kB (UM) = 1010696kB [ 372.888021][T16799] netlink: 'syz.3.2702': attribute type 39 has an invalid length. [ 372.899324][T16785] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 372.924966][T16785] Node 1 Normal: 161*4kB (UM) 53*8kB (UME) 26*16kB (UME) 205*32kB (UME) 50*64kB (UME) 11*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3897452kB [ 372.943577][T16785] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.953575][T16785] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 372.963554][T16785] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 372.973405][T16785] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 372.982954][T16785] 44694 total pagecache pages [ 372.988059][T16785] 0 pages in swap cache [ 372.992260][T16785] Free swap = 124996kB [ 372.996441][T16785] Total swap = 124996kB [ 373.000849][T16785] 2097051 pages RAM [ 373.004678][T16785] 0 pages HighMem/MovableOnly [ 373.009506][T16785] 424134 pages reserved [ 373.013680][T16785] 0 pages cma reserved [ 373.058545][T16799] syz_tun (unregistering): left allmulticast mode [ 373.123442][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2704'. [ 373.166447][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2704'. [ 373.198448][T16805] netlink: 'syz.0.2704': attribute type 18 has an invalid length. [ 373.276810][T16807] IPVS: Scheduler module ip_vs_sip not found [ 373.375577][T16814] syzkaller1: entered promiscuous mode [ 373.405178][T16814] syzkaller1: entered allmulticast mode [ 373.508875][T16824] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2709'. [ 373.544873][T16832] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2709'. [ 373.601236][T16832] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 373.627538][T16824] veth1_macvtap: left promiscuous mode [ 373.649986][T16824] macsec0: entered allmulticast mode [ 373.670492][T16832] veth1_macvtap: entered promiscuous mode [ 373.677439][T16832] veth1_macvtap: entered allmulticast mode [ 373.699576][T16832] macsec0: left allmulticast mode [ 373.704694][T16832] veth1_macvtap: left allmulticast mode [ 373.838542][T16845] netlink: 'syz.4.2708': attribute type 1 has an invalid length. [ 374.046627][T16850] wg1 speed is unknown, defaulting to 1000 [ 374.095396][T16850] lo speed is unknown, defaulting to 1000 [ 374.148784][T16848] wg1 speed is unknown, defaulting to 1000 [ 374.156275][T16835] wg1 speed is unknown, defaulting to 1000 [ 374.175770][T16850] wg1 speed is unknown, defaulting to 1000 [ 374.219653][T16848] lo speed is unknown, defaulting to 1000 [ 374.309342][T16848] wg1 speed is unknown, defaulting to 1000 [ 374.312067][T16870] tipc: Enabling of bearer rejected, already enabled [ 374.376065][T16835] lo speed is unknown, defaulting to 1000 [ 374.411005][T16835] wg1 speed is unknown, defaulting to 1000 [ 374.440031][T16877] netlink: 'syz.0.2723': attribute type 8 has an invalid length. [ 374.465828][T16874] wg1 speed is unknown, defaulting to 1000 [ 374.533093][T16876] tipc: Enabling of bearer rejected, already enabled [ 374.579555][T16880] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2724'. [ 374.607544][T16878] syzkaller0: entered promiscuous mode [ 374.613081][T16878] syzkaller0: entered allmulticast mode [ 374.621836][T16874] lo speed is unknown, defaulting to 1000 [ 374.622915][T16876] netem: change failed [ 374.634145][T16887] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2724'. [ 374.673721][T16880] 0ªX¹¦À: renamed from caif0 [ 374.681217][T16880] 0ªX¹¦À: entered allmulticast mode [ 374.687007][T16880] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 374.711943][T16874] wg1 speed is unknown, defaulting to 1000 [ 374.718923][T16880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2724'. [ 374.748925][T16877] wg1 speed is unknown, defaulting to 1000 [ 374.775207][T16877] lo speed is unknown, defaulting to 1000 [ 374.885565][T16877] wg1 speed is unknown, defaulting to 1000 [ 375.489801][ T30] audit: type=1804 audit(1763881643.001:10): pid=16918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2733" name="cgroup.controllers" dev="tmpfs" ino=2830 res=1 errno=0 [ 375.527100][T16920] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 375.545773][ T30] audit: type=1800 audit(1763881643.031:11): pid=16918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2733" name="cgroup.controllers" dev="tmpfs" ino=2830 res=0 errno=0 [ 375.556759][T16921] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20001 [ 375.761703][T16926] tipc: New replicast peer: 255.255.255.255 [ 375.783202][T16926] tipc: Enabled bearer , priority 10 [ 375.801186][T16926] netlink: 'syz.2.2736': attribute type 11 has an invalid length. [ 375.838158][T16926] netlink: 'syz.2.2736': attribute type 11 has an invalid length. [ 375.855648][T16926] __nla_validate_parse: 3 callbacks suppressed [ 375.855669][T16926] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2736'. [ 375.888721][T16930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 376.216360][T16926] bridge7: entered promiscuous mode [ 376.280091][T16926] bridge7: entered allmulticast mode [ 376.386128][T16948] wg1 speed is unknown, defaulting to 1000 [ 376.437619][T16948] lo speed is unknown, defaulting to 1000 [ 376.459101][T16948] wg1 speed is unknown, defaulting to 1000 [ 376.487107][T16939] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2740'. [ 376.557225][T16954] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 376.608005][T16962] netlink: 'syz.0.2745': attribute type 2 has an invalid length. [ 376.625212][T16962] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2745'. [ 376.682720][T16955] wg1 speed is unknown, defaulting to 1000 [ 376.701645][T16955] lo speed is unknown, defaulting to 1000 [ 376.710200][T16955] wg1 speed is unknown, defaulting to 1000 [ 377.542281][T16991] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2751'. [ 377.547483][T16993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2751'. [ 377.690048][T16984] pimreg: entered allmulticast mode [ 377.695670][T16985] pimreg: left allmulticast mode [ 377.761199][T16999] syz.2.2750 (16999) used obsolete PPPIOCDETACH ioctl [ 377.920836][T17003] syzkaller1: entered promiscuous mode [ 377.936079][T17003] syzkaller1: entered allmulticast mode [ 378.490872][T17026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2759'. [ 378.500611][T17026] netlink: 'syz.1.2759': attribute type 2 has an invalid length. [ 378.526881][T17026] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2759'. [ 378.617931][T17030] netlink: 'syz.2.2760': attribute type 1 has an invalid length. [ 378.693539][T17030] 8021q: adding VLAN 0 to HW filter on device bond11 [ 378.842545][T17035] bond11: (slave veth9): Enslaving as an active interface with a down link [ 379.239787][T17038] bond11 (unregistering): (slave veth9): Releasing active interface [ 379.251657][T17038] bond11 (unregistering): Released all slaves [ 379.296324][T17062] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2768'. [ 379.677619][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2775'. [ 379.702305][T17074] wg1 speed is unknown, defaulting to 1000 [ 379.710301][T17074] lo speed is unknown, defaulting to 1000 [ 379.718817][T17074] wg1 speed is unknown, defaulting to 1000 [ 379.921482][T17084] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 379.933918][T17084] dvmrp1: linktype set to 769 [ 380.386377][T17112] netlink: 'syz.4.2782': attribute type 13 has an invalid length. [ 380.768405][T17112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.206927][ T44] wg1 speed is unknown, defaulting to 1000 [ 381.212822][ T44] syz0: Port: 1 Link DOWN [ 381.218242][T17124] sit0: entered promiscuous mode [ 381.226457][T17124] __nla_validate_parse: 1 callbacks suppressed [ 381.226477][T17124] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2785'. [ 381.267418][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2785'. [ 381.401854][T17132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.415949][T17132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.432677][T17142] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2791'. [ 381.454252][ T1165] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.471432][ T1165] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.480170][ T1165] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.489178][ T1165] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.544646][T17132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.559798][T17132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.575924][ T1165] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.585376][ T1165] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.595038][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2791'. [ 381.604688][ T1165] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.622496][ T1165] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.711495][T17132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.723751][T17132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.774823][T17144] wg1 speed is unknown, defaulting to 1000 [ 381.784463][T17144] lo speed is unknown, defaulting to 1000 [ 381.815221][T17132] batman_adv: batadv0: Removing interface: netdevsim0 [ 381.824619][T17132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.857198][T17132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.883212][T17144] wg1 speed is unknown, defaulting to 1000 [ 381.965391][T17164] nbd: nbd0 already in use [ 381.975421][T17164] nbd: must specify an index to disconnect [ 382.094732][ T9064] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.097322][T17174] netlink: 'syz.1.2798': attribute type 10 has an invalid length. [ 382.104542][ T9064] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.177707][T17175] netlink: 'syz.1.2798': attribute type 10 has an invalid length. [ 382.264355][T17179] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2799'. [ 382.301576][T17174] batman_adv: batadv0: Removing interface: dummy0 [ 382.324571][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2799'. [ 382.328986][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.346680][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.365379][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.384502][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.410097][T17178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2799'. [ 382.445164][T17178] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2799'. [ 382.474193][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 382.494402][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.703268][T17191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2803'. [ 383.950838][T17240] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2812'. [ 384.666168][T17261] nbd4: detected capacity change from 0 to 63 [ 384.695112][T17265] block nbd4: NBD_DISCONNECT [ 384.707223][T17265] block nbd4: Disconnected due to user request. [ 384.727980][T17265] block nbd4: shutting down sockets [ 385.135169][T17276] wg1 speed is unknown, defaulting to 1000 [ 385.188869][T17276] lo speed is unknown, defaulting to 1000 [ 385.196414][T17276] wg1 speed is unknown, defaulting to 1000 [ 385.744585][T17315] netlink: 'syz.2.2826': attribute type 1 has an invalid length. [ 385.842342][T17315] 8021q: adding VLAN 0 to HW filter on device bond11 [ 385.953960][T17317] bond11: (slave gretap2): making interface the new active one [ 386.002810][T17317] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 386.419442][T17318] bond11 (unregistering): (slave gretap2): Releasing active interface [ 386.449399][T17318] bond11 (unregistering): Released all slaves [ 386.641720][T17320] wg1 speed is unknown, defaulting to 1000 [ 386.670512][T17320] lo speed is unknown, defaulting to 1000 [ 386.715863][T17320] wg1 speed is unknown, defaulting to 1000 [ 386.901951][T17339] netlink: 'syz.2.2832': attribute type 1 has an invalid length. [ 386.927246][T17339] netlink: 'syz.2.2832': attribute type 4 has an invalid length. [ 386.947586][T17339] __nla_validate_parse: 3 callbacks suppressed [ 386.947608][T17339] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2832'. [ 387.427353][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 387.446888][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 387.450035][T17362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2841'. [ 387.463869][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 387.474376][T17362] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 387.478130][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2839'. [ 387.506902][T17363] netlink: 'syz.3.2841': attribute type 1 has an invalid length. [ 388.107392][T17386] ip6t_srh: unknown srh invflags BA61 [ 388.255977][T17388] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2847'. [ 388.476191][T17401] netlink: 'syz.0.2850': attribute type 1 has an invalid length. [ 388.676817][T17404] xt_socket: unknown flags 0xfc [ 388.764141][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2852'. [ 389.216017][T17420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.352748][T17431] syzkaller0: create flow: hash 1086858807 index 1 [ 389.363721][T17429] syzkaller0: entered promiscuous mode [ 389.387422][T17429] syzkaller0: entered allmulticast mode [ 389.395337][T17303] syzkaller0: tun_net_xmit 48 [ 389.554511][T17429] syzkaller0: delete flow: hash 1086858807 index 1 [ 391.336125][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 391.357770][T17309] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.366183][T17309] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.375098][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2861'. [ 391.386172][T17309] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.405487][T17309] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.484279][T17481] __nla_validate_parse: 3 callbacks suppressed [ 392.484302][T17481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2872'. [ 394.194887][T17509] wg1 speed is unknown, defaulting to 1000 [ 394.197021][T17517] netlink: 'syz.3.2878': attribute type 15 has an invalid length. [ 394.222212][T17517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2878'. [ 394.256122][T17509] lo speed is unknown, defaulting to 1000 [ 394.257563][T17511] wg1 speed is unknown, defaulting to 1000 [ 394.290915][T17509] wg1 speed is unknown, defaulting to 1000 [ 394.315634][T17511] lo speed is unknown, defaulting to 1000 [ 394.339472][T17511] wg1 speed is unknown, defaulting to 1000 [ 394.425135][T17517] x_tables: duplicate underflow at hook 1 [ 394.494779][T17525] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 394.638469][T17530] tipc: Enabling of bearer rejected, already enabled [ 395.183746][T17545] netlink: 'syz.3.2887': attribute type 16 has an invalid length. [ 395.195153][T17545] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2887'. [ 395.305082][T17548] wg1 speed is unknown, defaulting to 1000 [ 395.317622][T17548] lo speed is unknown, defaulting to 1000 [ 395.329083][T17548] wg1 speed is unknown, defaulting to 1000 [ 395.522614][T17558] wg1 speed is unknown, defaulting to 1000 [ 395.532093][T17560] netlink: 'syz.1.2892': attribute type 1 has an invalid length. [ 395.533765][T17558] lo speed is unknown, defaulting to 1000 [ 395.569093][T17560] 8021q: adding VLAN 0 to HW filter on device bond4 [ 395.576335][T17558] wg1 speed is unknown, defaulting to 1000 [ 395.976105][T17577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2896'. [ 396.485117][T17607] vlan1: entered promiscuous mode [ 396.516991][T17607] bridge0: entered promiscuous mode [ 396.716987][T17602] wg1 speed is unknown, defaulting to 1000 [ 396.744122][T17602] lo speed is unknown, defaulting to 1000 [ 396.762430][T17602] wg1 speed is unknown, defaulting to 1000 [ 397.044325][T17627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2911'. [ 397.054750][T17631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2911'. [ 397.137768][T17637] openvswitch: netlink: Message has 94 unknown bytes. [ 397.145506][T17638] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 397.399816][T17633] wg1 speed is unknown, defaulting to 1000 [ 397.438647][T17633] lo speed is unknown, defaulting to 1000 [ 397.516258][T17633] wg1 speed is unknown, defaulting to 1000 [ 397.598099][T17663] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2920'. [ 397.749980][T17647] pim6reg1: entered promiscuous mode [ 397.755336][T17647] pim6reg1: entered allmulticast mode [ 397.843959][T17670] netlink: 'syz.1.2921': attribute type 9 has an invalid length. [ 397.852554][T17670] netlink: 'syz.1.2921': attribute type 6 has an invalid length. [ 397.896321][T17670] netlink: 'syz.1.2921': attribute type 7 has an invalid length. [ 397.904526][T17670] netlink: 'syz.1.2921': attribute type 8 has an invalid length. [ 397.911321][ T30] audit: type=1800 audit(1763881665.421:12): pid=17669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2921" name="memory.events" dev="tmpfs" ino=3058 res=0 errno=0 [ 398.241322][T17687] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2925'. [ 398.551774][T17698] syzkaller0: entered promiscuous mode [ 398.559463][T17698] syzkaller0: entered allmulticast mode [ 398.579755][T17704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2930'. [ 398.835916][T17710] openvswitch: netlink: IP tunnel dst address not specified [ 399.076230][T17722] netlink: 'syz.3.2935': attribute type 1 has an invalid length. [ 400.427348][T17695] wg1 speed is unknown, defaulting to 1000 [ 400.438341][T17699] wg1 speed is unknown, defaulting to 1000 [ 400.451876][T17699] lo speed is unknown, defaulting to 1000 [ 400.480253][T17731] wg1 speed is unknown, defaulting to 1000 [ 400.481171][T17695] lo speed is unknown, defaulting to 1000 [ 400.487237][T17699] wg1 speed is unknown, defaulting to 1000 [ 400.561742][T17731] lo speed is unknown, defaulting to 1000 [ 400.561777][T17695] wg1 speed is unknown, defaulting to 1000 [ 400.677914][T17731] wg1 speed is unknown, defaulting to 1000 [ 401.186881][T17767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 401.283210][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.294224][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.303608][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.313022][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.321444][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.400648][T17772] bond4: option mode: unable to set because the bond device has slaves [ 401.409736][T17769] wg1 speed is unknown, defaulting to 1000 [ 401.429097][T17772] bond4: (slave veth11): Enslaving as an active interface with a down link [ 401.439008][T17769] lo speed is unknown, defaulting to 1000 [ 401.454838][T17769] wg1 speed is unknown, defaulting to 1000 [ 401.671661][T17769] chnl_net:caif_netlink_parms(): no params data found [ 401.753886][T17769] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.761308][T17769] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.769175][T17769] bridge_slave_0: entered allmulticast mode [ 401.778242][T17769] bridge_slave_0: entered promiscuous mode [ 401.786327][T17769] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.793973][T17769] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.801420][T17769] bridge_slave_1: entered allmulticast mode [ 401.808788][T17769] bridge_slave_1: entered promiscuous mode [ 401.843659][T17769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.856117][T17769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.905910][T17769] team0: Port device team_slave_0 added [ 401.914230][T17769] team0: Port device team_slave_1 added [ 401.945964][T17769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.953733][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.979998][T17769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.992774][T17769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.000088][T17769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.026940][T17769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.074037][T17769] hsr_slave_0: entered promiscuous mode [ 402.080703][T17769] hsr_slave_1: entered promiscuous mode [ 402.435338][T17769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.446856][T17769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.457239][T17769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.469202][T17769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.557785][T17769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.578112][T17769] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.592201][T17308] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.599402][T17308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.614388][T17303] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.621545][T17303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.812320][T17769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.817570][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 402.839769][T10309] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 402.851716][T10309] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 402.860126][T10309] CPU: 1 UID: 0 PID: 10309 Comm: kbnepd  Not tainted syzkaller #0 PREEMPT(full) [ 402.869358][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 402.879407][T10309] RIP: 0010:klist_del+0x49/0x110 [ 402.884345][T10309] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 ea e7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b ea e7 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8 [ 402.903953][T10309] RSP: 0018:ffffc9000e13f748 EFLAGS: 00010202 [ 402.910033][T10309] RAX: 000000000000000b RBX: ffff88807e5e0060 RCX: ffff88807cc73c80 [ 402.918007][T10309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 402.925984][T10309] RBP: ffffc9000e13f870 R08: ffff88807dc40963 R09: 1ffff1100fb8812c [ 402.933961][T10309] R10: dffffc0000000000 R11: ffffed100fb8812d R12: dffffc0000000000 [ 402.941943][T10309] R13: 1ffff1100fcbc00c R14: 0000000000000000 R15: ffff8880325d2758 [ 402.949920][T10309] FS: 0000000000000000(0000) GS:ffff888126235000(0000) knlGS:0000000000000000 [ 402.958856][T10309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.965447][T10309] CR2: 00007f1c43084e9c CR3: 000000007d2ea000 CR4: 00000000003526f0 [ 402.973427][T10309] Call Trace: [ 402.976709][T10309] [ 402.979647][T10309] device_del+0x280/0x8e0 [ 402.983992][T10309] ? _raw_spin_unlock_irq+0x2e/0x50 [ 402.989204][T10309] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 402.995285][T10309] ? __pfx_device_del+0x10/0x10 [ 403.000148][T10309] ? netdev_unregister_kobject+0x344/0x450 [ 403.005980][T10309] unregister_netdevice_many_notify+0x1df2/0x2390 [ 403.012458][T10309] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 403.019241][T10309] ? rtnl_net_dev_lock+0x257/0x2f0 [ 403.024366][T10309] unregister_netdevice_queue+0x33c/0x380 [ 403.030125][T10309] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 403.036375][T10309] ? rtnl_net_dev_lock+0x36/0x2f0 [ 403.041403][T10309] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 403.046534][T10309] unregister_netdev+0x1f/0x60 [ 403.051320][T10309] bnep_session+0x294d/0x2b40 [ 403.056010][T10309] ? rcu_is_watching+0x15/0xb0 [ 403.060780][T10309] ? trace_sched_exit_tp+0x36/0x110 [ 403.065999][T10309] ? __lock_acquire+0xab9/0xd20 [ 403.070882][T10309] ? __pfx_bnep_session+0x10/0x10 [ 403.075929][T10309] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 403.081859][T10309] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 403.088200][T10309] ? __pfx_woken_wake_function+0x10/0x10 [ 403.093851][T10309] ? __kthread_parkme+0x7b/0x200 [ 403.098794][T10309] ? __kthread_parkme+0x1a1/0x200 [ 403.103851][T10309] kthread+0x711/0x8a0 [ 403.107931][T10309] ? __pfx_bnep_session+0x10/0x10 [ 403.112971][T10309] ? __pfx_kthread+0x10/0x10 [ 403.117571][T10309] ? _raw_spin_unlock_irq+0x23/0x50 [ 403.122781][T10309] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.127979][T10309] ? __pfx_kthread+0x10/0x10 [ 403.132581][T10309] ret_from_fork+0x4bc/0x870 [ 403.137176][T10309] ? __pfx_ret_from_fork+0x10/0x10 [ 403.142317][T10309] ? __switch_to_asm+0x39/0x70 [ 403.147081][T10309] ? __switch_to_asm+0x33/0x70 [ 403.151842][T10309] ? __pfx_kthread+0x10/0x10 [ 403.156440][T10309] ret_from_fork_asm+0x1a/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 403.161226][T10309] [ 403.164274][T10309] Modules linked in: [ 403.169784][T10309] ---[ end trace 0000000000000000 ]--- [ 403.177397][T10309] RIP: 0010:klist_del+0x49/0x110 [ 403.182384][T10309] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 29 ea e7 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 0b ea e7 f6 4d 8b 7e 58 4c 89 f7 e8 3f f8 [ 403.202992][T10309] RSP: 0018:ffffc9000e13f748 EFLAGS: 00010202 [ 403.209252][T10309] RAX: 000000000000000b RBX: ffff88807e5e0060 RCX: ffff88807cc73c80 [ 403.217992][T10309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 403.226007][T10309] RBP: ffffc9000e13f870 R08: ffff88807dc40963 R09: 1ffff1100fb8812c [ 403.234454][T10309] R10: dffffc0000000000 R11: ffffed100fb8812d R12: dffffc0000000000 [ 403.242589][T10309] R13: 1ffff1100fcbc00c R14: 0000000000000000 R15: ffff8880325d2758 [ 403.250665][T10309] FS: 0000000000000000(0000) GS:ffff888126235000(0000) knlGS:0000000000000000 [ 403.260177][T10309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.266857][T10309] CR2: 00007f1c43084e9c CR3: 000000007d2ea000 CR4: 00000000003526f0 [ 403.274855][T10309] Kernel panic - not syncing: Fatal exception [ 403.281228][T10309] Kernel Offset: disabled [ 403.285552][T10309] Rebooting in 86400 seconds..