last executing test programs: 2.356640454s ago: executing program 4 (id=1967): syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="0580c20000000180c200000008004500005c00000000002f90780000000000000000248065580000000010000800000086dd0006ffff080088be0000000010b200000100000000000000080022eb000000002000000002887881703902cacba52cd217ef7f00843ef4000000000000000000000800655800015a377b0e158cb0659d17f53a6ce627f7fb594dfae6b6e849e1f76c51b8c4a28116759150c985e52823d68115ee55a0731420ae691d2febaf843303564bf25bab74c64b3977eab6405a7668636c1043ade3582955be5286d27de9652cfffe5bbe1ecee5ddfa7dc425a7fea6c4b618528a7775d8d70e3261c907c803a81e9a0923f6f9eeb309196855325fd7bf5ce8fed63f46cfa7a553a060751b2c90160e7e99885dc93f0d1bebe692fe435a648e302c795e510d7e4091b89566df4ea385ddc406eb756ccd8c3cb981604c88123147cba42833d895f7db623ea9b613db764394a403d91f9bc908c2b3ed39cff55acf0cb5cdcc88cb45f87a0c8285c6aeea"], 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0x8, 0x9, 0xf94, 0x4000f1, 0x37, 0x409, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x3, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x4, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x1, 0x3, 0x2, 0x2, 0x4, 0xa, 0xffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xb, 0x6, 0x80, 0x4, 0x4, 0x2, 0x4000040, 0xb, 0xfffffffd, 0x5, 0x7, 0x4, 0x6, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa5, 0x2, 0x9]}}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) epoll_wait(r5, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x20}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffc}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback={0xff00000000000000}, 0x10000}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001e000126bd7000fedbdf250700000000", @ANYRES32=0x0, @ANYBLOB="00000400080009"], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) pwritev(r3, &(0x7f0000000b00)=[{&(0x7f0000000480)="e8990c1e102b3b46e2c484699d7d1c391f659e624be6b18dbb539c1e751641c1147b9bf5cc47290dcc4272b40d47ee763adc46002ecd62b48578f7e44d75f7ad22adbda8ab57e4307a9b75f5c3af93cc0a36d0b0749ec1cc", 0x58}, {&(0x7f0000000500)="38f554fdd8982dfc276892b15fbd974a78b89316626961b08cad275240082ead302aa1372ebd77942b17996b9c8caf4cbc4f3b1bdd6554968458db6cd2b46c8cdd0fc0ab67e515581df877adc25c86d9068428a1a272e16d447bce46b950420d58816949c752660bb0ac23b709c16fc9378225fb5d7f7807ce4bf3340e072cbfc275ab4d04bb283ab7ed07b54086f04828e00f31bc770798395f11d476e778ec27cef4b7238015ea59eea6e64ec56f61772f03b69a4e2205f34607279593ddab3a52e65e13a5701e6304ccfc271f0b1d22039d3a1742", 0xd6}, {&(0x7f0000000700)="95405b49bb365fa2a0bccb217a9128385cda4229ffbff0e29b8dd06d15861acdeb583a3c59d05ac87c962d7c323736ce0b32bc90b23f8353fd1bfcfc7f5de4157af209263894a67dda829bde66127f4a96d11e4c2fbb37c6987fd497057dd47d29eed9b26b3454a05c5eb9b465c31dd59274c75265b2afe6429ef12ee14467669b39096558c36527a9090565a85e56da11080a003bb18f966ab3b0146b7b9ae446a4ff19476b25dc12f8688f018251276a15fbf7c1f5668eb7d07b5ac189f4c38332ff304d09760ed7cab1fb1f9a41282ea7cbcea6bc4c4c9cea20483998c34ea8e7680d47b26efe2223663cf5d05f9344", 0xf1}, {&(0x7f0000000800)="a62ad1d058be79437cfe61460f9f694f50bf72aae2861277e5d75da8ae1ca71b0824e285d58548ef2ef9c6cdc47223a376ea3e8efb1ee6b80622a42af8279e1c01dd3af74698cf4de2d19981b4bdc077e34f5df86a3edc10771b52b05da400d669ab49b3c4c8f9d6bbac12ae18f886a3c526a0853c8f2cf745c2257fd40e1e544ee129184ff02bc4eb35749173534028db3ceba53b3f76895cde6ccff94d98c6fda23b1ebbbf6b6fc659eb04016448122ee8e1b937a2e16e8c00a6b27eb2408cc8932875172dd5ce", 0xc8}, {&(0x7f0000000040)="aa02d6e8af634d", 0x7}, {&(0x7f0000000640)="6337606f1aa6ec3a30f55cb6260ffa37786c24dc8ddfbdf674601c10b414ceb5e6b173ae454970725ff0297c10e9f1241d81e5b4fc9faa8779043ef565ed477ca5c3346bb7b64f4ec4e0f04099e853", 0x4f}, {&(0x7f0000000900)="897e7e11bcba82928e93f44cb1798da8c9041952b473aac0e812d8626e91b2b835db0b16ea321fbc32faac188cdea4ac75be00349d4eb1e4df8300716196a4561e3be2", 0x43}, {&(0x7f0000000980)="b8edbb0cc94de96f90ea7367e3e46e885a228563b5093c120cfd427d5f9011d80e4a7824a8aaa6ae7c6c5efb22047fc430e3f3675e8fe8c0373bf6e640f3e6c20273d05ba32016a0569ed18145a381d51fb078ce65af7a390c3ae7ec607dd0a05764acc01d3384d4d0e23b92016d991eca284e6112341413409219a4d781422544964d1f1c4eb8043cdd14833367f1c500749bcda04a7f8166fa1dee482a8f1471793895a2ecfbe98dad8268062309c08270c6335bf4a417f7ff85bd607a39824df52df9b6a8bf1d6b0f6324c0a63f648550394bdf40e99c9ad5e161c867fa9bdcb8089b81d68492f7eead053a9f5ae169", 0xf1}, {&(0x7f0000000a80)="cb7d704a58e828741f47443db800349ff6ab54e8a91b3bf6988bbb0399d3f6e0ee4e236eb87f186c2db0a9e1acfe9870a243045af9c5036422898938762b4c565ea0f03e7eca4f2f94a3b93c84a7c743c557fa269c48b31138f1508ac2", 0x5d}], 0x9, 0x400, 0x6) 1.393675289s ago: executing program 4 (id=1976): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket(0x1000000000000010, 0x80802, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) sendmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20040881) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000004880)=0xffff580c, 0x4) 1.333136885s ago: executing program 1 (id=1978): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.280215569s ago: executing program 3 (id=1979): r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$ITER_CREATE(0x3f, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}}, 0x18) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e24, 0x10001, @ipv4={'\x00', '\xff\xff', @remote}, 0x800000}, 0x1c) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) (async) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) (async) close(r5) 1.253456081s ago: executing program 0 (id=1980): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01030000000000000000070000070900020073797a31000000000900010073797a3000000000f4110380f011008008000340000000020900090073797a3000000000d8110a"], 0x12b4}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40048c4) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x40884, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r7, 0x3, {0x1, 0xf0}}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000040)={@private1, 0x0}, &(0x7f00000001c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x9, '\x00', r9, 0xffffffffffffffff, 0x2, 0x3}, 0x50) socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) 1.221865372s ago: executing program 1 (id=1981): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)='+', 0x1) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r2, 0x104, 0x3, &(0x7f0000000040)=0x200, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) 1.156371158s ago: executing program 3 (id=1982): socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/time_for_children\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 1.048813957s ago: executing program 0 (id=1983): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x9000000, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.026989234s ago: executing program 1 (id=1984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r3, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private=0x300, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x8000000, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}]]}, 0x68}}, 0x0) 940.22629ms ago: executing program 2 (id=1985): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="5c341e8f7f2e2a01639fb33f4862", 0x0, 0x703, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000005328140000000083fb000000400007006a000000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x84) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0xfce) 934.072086ms ago: executing program 1 (id=1986): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000010000104000000000000000000030000ea4b21b8d31f38427c9a6d61ae6e6daa482233eb165dc554409e06bc847c35d76bcfa64c192e0fa1155969aa78dbbefd6717ff010000bf69721ed912092d42568e94505aa34182e1740f241c7f42644bcba6633d5c8941f37e5a66ac838e18aead9cb5652bf29d2bde3b17af7be43607603b62d26f485721c139ca21035c4333a155af98a8faab79f4e5", @ANYRES32=r1, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 64) sendmsg$can_j1939(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0x1, 0x3}, 0x2}, 0x18, &(0x7f00000001c0)={&(0x7f0000000400)="fda57409d524ba0bd7b660a5311953930fa716dee3e67e559d7eee438f8b8716dc97ae5616cc485dfb3b497161ba624b87009c38c4d7cf25f94532b3b27cd0d58d2313fdaa728f587c633e1009850eedf9bcd73e17e82e1a370c7a0e6115ac422d628cfaf6db19849aadf137f2791ab9e4004cc3a2ab1e845fca0651de93d45eafd63383129cd30de23ebf55b83e252de4b2f0d792f9ee15b3c8935ee17f673bd2386248d75eca63fed04569781611dd0fc933780fdb8f3ddb9b417b75", 0xbd}, 0x1, 0x0, 0x0, 0x8435}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="04", @ANYRES16=r7, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r8, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100000000"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) (async) sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) r11 = socket$inet(0x2, 0x5, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r12 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r12, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r12, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_mreqsrc(r11, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 876.445499ms ago: executing program 0 (id=1987): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x88081, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x80047441, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0xe4, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x37a9, 0x2a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1f}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x38c}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1458}]]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r5, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012000000bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800000f130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4, @ANYBLOB="00032bbd7000fbdbdf2506000000080004001000000008000500090000000c0003800600040003000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000801}, 0x10000000) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 755.965681ms ago: executing program 1 (id=1988): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc000) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="03233aae3f3114a27eb7e7c6542c477e37b19b5ded5ba8d01630bde7697373405a187661fe1fa42df369beb7836d43bc9017255bf6bb5693f2bdc76f1b682c04b7fb435b", 0x44, 0x4000800, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0xf4, r5, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) 725.30323ms ago: executing program 2 (id=1989): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xbff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x80, 0x700, 0x10, 0x8, {{0xa, 0x4, 0x2, 0x0, 0x28, 0x65, 0x0, 0x0, 0x2d, 0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote, {[@ssrr={0x89, 0x13, 0x50, [@dev={0xac, 0x14, 0x14, 0x13}, @local, @broadcast, @private=0xa010102]}]}}}}}) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0x2, &(0x7f00000000c0)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r1}], &(0x7f0000000340)='syzkaller\x00', 0xa16, 0x16, &(0x7f0000000480)=""/22, 0x40f00, 0x0, '\x00', r2, @flow_dissector, r3, 0x8, &(0x7f0000000680)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, &(0x7f00000006c0)=[{0x2, 0x2, 0x9, 0xb}, {0x3, 0x1, 0x5}, {0x2, 0x1, 0x5, 0x5}, {0x0, 0x3, 0xa, 0x4}, {0x1, 0x4, 0x5, 0x6}, {0x3, 0x1, 0x6, 0xc}, {0x5, 0x2, 0x1, 0x3}, {0x2, 0x3, 0xe, 0x8}, {0x3, 0x1, 0xe, 0x3}], 0x10, 0x8}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) listen(r5, 0x0) (async) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @remote, 0x5}, 0x1c) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) (async) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="e13650b5290a576ace6e3cec562d7a97bea9209657a104d4221cd217163a0b401c37406907a67e54bcd5f478a326ec692ffcf847478bb1c2bd65fc571e8b31f2de93a2219657967b65a0d7a2ef93dd8e577225c6b32260406f437117a0c9509babbe97a1b27fe399c7de49b92ae5dfc9934f06b120b1692ba618304d0de4d2f9338e514cb2bc6eeb5d0bf749d69b4f9969b13e48a16f5d69a796688cf23c1c13cb442c17c15bc7c79073a7300555ed77712e1fbc67956cc2172208600d058eca1a8431844f1fb1f2f7f920824572ef2be2db707f82e11000a8d0d8926250", 0xde}, {&(0x7f0000000180)="8209bca041c10503f6f9859a626cf690e30e662dde5b425d85e9f42c0533b6c0ab66ff1b86acc84c305fdf3a1810a0568b6f96e503f73beec59879d4d49432ddab8d2b9bb2170b65f24de0d46f5599d38caf89d40a567cfff552b8eac0364ba5e6bc8d078e227970bda57df3db94bde7fb73272f", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f00000012c0)="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", 0x1e5}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 704.885064ms ago: executing program 3 (id=1990): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x8942, &(0x7f0000000640)={'tunl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x403, 0xfffefffc, 0x3d, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x1}, @IFLA_GENEVE_ID={0x8, 0x1, 0x3}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004}, 0x4804) r4 = getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, r5, 0x0, 0x0, 0x0}, 0x30) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa}, @IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f00000002c0)=@rose={'rose', 0x0}, 0x10) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095003200000000006916000000000000bf67000000000000350605000fff07206706000002000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d39d25991b085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e5671c888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e17417a249a2cd8ff62aa6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a122822bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c6310121ecb9029e7f835420f8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc12b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35349fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d3743a0be77b64961753faba6131c136fb14b1963960f2f7f118bc451a18b216bf26c3cec2575a059da60baede629711a5f11c347fcbca73440d27b1147b44fb15106c00669da23964fd9de079d1a9077848100f6e75d29b2d60016abc6ef1542bd3062f599676bb04e64decb6c843a407f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) 636.198161ms ago: executing program 0 (id=1991): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x10, 0x4) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto$l2tp6(r0, &(0x7f00000000c0)="14fb10e9440853e1eaef01c8f554b94878dff8dab9c03503a7e671412e4b07e40279cbc92554fc7ccbadd554f7871db19f88d5e99f87e0db14394ac404ef1d44a844f07ddc13b0c4daab111922f50d00", 0x50, 0x4000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@ipv6_delrule={0x58, 0x21, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x20, 0x10, 0x10, 0xbb, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_SRC={0x14, 0x2, @mcast2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x1100}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 542.520447ms ago: executing program 1 (id=1992): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket(0x1e, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8081) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 441.715278ms ago: executing program 2 (id=1993): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}], 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x4}, 0x28) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0x10, 0x4, 0x4, 0x6}, 0x50) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @local, 0x1, 0x1, [@empty]}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000200), &(0x7f0000000240)=@udp, 0x1}, 0x20) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, 0x0, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0xe, &(0x7f0000000000)={@empty}, &(0x7f0000000040)=0x14) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) 416.242455ms ago: executing program 0 (id=1994): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x4, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000080)={0x7, 'vcan0\x00', {}, 0x7}) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000000)={0x1d, r3, 0x1000000000, {0x2, 0x0, 0x6}, 0xff}, 0x18) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048081) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[], 0x1c) socket$netlink(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8001}, 0x4) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a", 0x21) socket(0x1e, 0x4, 0x0) unshare(0x6020480) 415.724843ms ago: executing program 4 (id=1995): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, 0xee00}, 0xc) 414.398106ms ago: executing program 3 (id=1996): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x40, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0x2d, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\xc3\xe6S\xc6jO\x7f\x03\x00\x00f\x02\xf4\xed\x16\xeb$s,\xba\xa7\x88\xdbBj*?\x9b\x97\xf0\xd7\xd7\xaf\xfb\r'}]}, 0x40}], 0x1, 0x0, 0x0, 0x20048001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r1, &(0x7f0000007680)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/130, 0x82}], 0x4, &(0x7f0000000440)}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/69, 0x45}, {&(0x7f0000001580)=""/82, 0x52}, {&(0x7f0000001600)=""/200, 0xc8}, {&(0x7f0000001700)=""/227, 0xe3}, {&(0x7f0000001800)=""/186, 0xba}], 0x6, &(0x7f0000001940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001ac0)=""/42, 0x2a}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/210, 0xd2}, {&(0x7f0000002c00)=""/10, 0xa}, {&(0x7f0000002c40)=""/194, 0xc2}, {&(0x7f0000002d40)=""/164, 0xa4}, {&(0x7f0000002e00)=""/121, 0x79}, {&(0x7f0000002e80)=""/193, 0xc1}], 0x8, &(0x7f0000003000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000003080), 0x6e, &(0x7f00000043c0)=[{&(0x7f0000003100)=""/176, 0xb0}, {&(0x7f00000031c0)=""/225, 0xe1}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/146, 0x92}, {&(0x7f0000004380)}], 0x5, &(0x7f0000004440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004480), 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004500)=""/24, 0x18}, {&(0x7f0000004540)=""/61, 0x3d}, {&(0x7f0000004580)=""/149, 0x95}, {&(0x7f0000004640)=""/79, 0x4f}], 0x4}}, {{&(0x7f0000004700), 0x6e, &(0x7f00000059c0)=[{&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)=""/203, 0xcb}, {&(0x7f0000005880)=""/127, 0x7f}, {&(0x7f0000005900)=""/127, 0x7f}, {&(0x7f0000005980)=""/26, 0x1a}], 0x5, &(0x7f0000005a40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000005b40)=""/168, 0xa8}, {&(0x7f0000005c00)}, {&(0x7f0000005c40)=""/164, 0xa4}, {&(0x7f0000005d00)=""/115, 0x73}, {&(0x7f0000005d80)=""/4096, 0x1000}], 0x5, &(0x7f0000006e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000006e80), 0x6e, &(0x7f0000007080)=[{&(0x7f0000006f00)=""/27, 0x1b}, {&(0x7f0000006f40)=""/103, 0x67}, {&(0x7f0000006fc0)=""/125, 0x7d}, {&(0x7f0000007040)}], 0x4, &(0x7f00000070c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000007100), 0x6e, &(0x7f0000007600)=[{&(0x7f0000007180)=""/118, 0x76}, {&(0x7f0000007200)=""/214, 0xd6}, {&(0x7f0000007300)=""/36, 0x24}, {&(0x7f0000007340)=""/191, 0xbf}, {&(0x7f0000007400)=""/194, 0xc2}, {&(0x7f0000007500)=""/85, 0x55}, {&(0x7f0000007580)=""/47, 0x2f}, {&(0x7f00000075c0)=""/1, 0x1}], 0x8}}], 0x9, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x40, 0x19, 0x15, 0x0, 0xfffffffc, "", [@typed={0x2d, 0x0, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\xc3\xe6S\xc6jO\x7f\x03\x00\x00f\x02\xf4\xed\x16\xeb$s,\xba\xa7\x88\xdbBj*?\x9b\x97\xf0\xd7\xd7\xaf\xfb\r'}]}, 0x40}], 0x1, 0x0, 0x0, 0x20048001}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) recvmmsg$unix(r1, &(0x7f0000007680)=[{{&(0x7f0000000100), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f0000000340)=""/130, 0x82}], 0x4, &(0x7f0000000440)}}, {{&(0x7f0000000480)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/69, 0x45}, {&(0x7f0000001580)=""/82, 0x52}, {&(0x7f0000001600)=""/200, 0xc8}, {&(0x7f0000001700)=""/227, 0xe3}, {&(0x7f0000001800)=""/186, 0xba}], 0x6, &(0x7f0000001940)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000002f80)=[{&(0x7f0000001ac0)=""/42, 0x2a}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/210, 0xd2}, {&(0x7f0000002c00)=""/10, 0xa}, {&(0x7f0000002c40)=""/194, 0xc2}, {&(0x7f0000002d40)=""/164, 0xa4}, {&(0x7f0000002e00)=""/121, 0x79}, {&(0x7f0000002e80)=""/193, 0xc1}], 0x8, &(0x7f0000003000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000003080), 0x6e, &(0x7f00000043c0)=[{&(0x7f0000003100)=""/176, 0xb0}, {&(0x7f00000031c0)=""/225, 0xe1}, {&(0x7f00000032c0)=""/4096, 0x1000}, {&(0x7f00000042c0)=""/146, 0x92}, {&(0x7f0000004380)}], 0x5, &(0x7f0000004440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004480), 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004500)=""/24, 0x18}, {&(0x7f0000004540)=""/61, 0x3d}, {&(0x7f0000004580)=""/149, 0x95}, {&(0x7f0000004640)=""/79, 0x4f}], 0x4}}, {{&(0x7f0000004700), 0x6e, &(0x7f00000059c0)=[{&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)=""/203, 0xcb}, {&(0x7f0000005880)=""/127, 0x7f}, {&(0x7f0000005900)=""/127, 0x7f}, {&(0x7f0000005980)=""/26, 0x1a}], 0x5, &(0x7f0000005a40)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000006d80)=[{&(0x7f0000005b40)=""/168, 0xa8}, {&(0x7f0000005c00)}, {&(0x7f0000005c40)=""/164, 0xa4}, {&(0x7f0000005d00)=""/115, 0x73}, {&(0x7f0000005d80)=""/4096, 0x1000}], 0x5, &(0x7f0000006e00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000006e80), 0x6e, &(0x7f0000007080)=[{&(0x7f0000006f00)=""/27, 0x1b}, {&(0x7f0000006f40)=""/103, 0x67}, {&(0x7f0000006fc0)=""/125, 0x7d}, {&(0x7f0000007040)}], 0x4, &(0x7f00000070c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000007100), 0x6e, &(0x7f0000007600)=[{&(0x7f0000007180)=""/118, 0x76}, {&(0x7f0000007200)=""/214, 0xd6}, {&(0x7f0000007300)=""/36, 0x24}, {&(0x7f0000007340)=""/191, 0xbf}, {&(0x7f0000007400)=""/194, 0xc2}, {&(0x7f0000007500)=""/85, 0x55}, {&(0x7f0000007580)=""/47, 0x2f}, {&(0x7f00000075c0)=""/1, 0x1}], 0x8}}], 0x9, 0x1, 0x0) (async) 268.122936ms ago: executing program 3 (id=1997): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x11000000, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 267.759706ms ago: executing program 4 (id=1998): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe11}, 0x94) (async) 267.461572ms ago: executing program 0 (id=1999): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x3f, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 243.019924ms ago: executing program 2 (id=2000): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="a92cc47333282c70"], 0xfffffffffffffcf2}}, 0x0) 184.759512ms ago: executing program 3 (id=2001): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000009000000050000000400000048100000", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000fe432b5800010000000100"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000009000000050000000400000048100000", @ANYRES32=r1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000fe432b5800010000000100"/28], 0x50) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, 0x0, &(0x7f0000000040)) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, 0x0, &(0x7f0000000040)) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r6, 0x8) 116.233852ms ago: executing program 2 (id=2002): r0 = socket(0x2a, 0x2, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x80, 0x0, 0x44, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2={0xff, 0x5}, 0x10, 0x0, 0x27, 0xfffffffd}}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) (async, rerun: 32) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0x23d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}}, &(0x7f0000001200)=0x84) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000001240)={r1, 0x3ff, 0x400, 0x7, 0x8, 0x9, 0x1, 0x0, {r3, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x6, 0x0, 0x5, 0x5, 0x7fff}}, &(0x7f0000001300)=0xb0) 109.294681ms ago: executing program 4 (id=2003): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="080029bd7000fbdbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000900000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300000000060800090002000000080001007063690011000200303030303a303006000000000000000008000300000000000800090006000000"], 0xa0}, 0x1, 0x0, 0x0, 0xc000}, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x3, @none}, 0xe) setsockopt$inet_opts(r1, 0x0, 0x1a, &(0x7f0000000000)="89", 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 51.076951ms ago: executing program 2 (id=2004): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x19, 0x0, 0x1, [@nested={0x4, 0x1, 0x0, 0x1, [@generic]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f00000001c0)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffff81}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0x3, 0x0, 0x3, 0x80, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], &(0x7f0000000140)='GPL\x00', 0xb, 0xad, &(0x7f0000000240)=""/173, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0xffffffffffffffff, 0x1], &(0x7f00000003c0)=[{0x4, 0x4, 0xb, 0x5}, {0x5, 0x1, 0xe, 0x4}, {0x0, 0x4, 0xd, 0xa}, {0x1, 0x1}, {0x0, 0x5, 0x8, 0x3}, {0x1, 0x2, 0x2, 0xf}, {0x1, 0x5}, {0x1, 0x4, 0x10, 0xb}, {0x3, 0x2, 0x2, 0xe}, {0x3, 0x1, 0xd, 0x5}]}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000100), &(0x7f0000000540)=r2}, 0x20) 0s ago: executing program 4 (id=2005): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x1004) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r1) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0153000000000000000001"], 0x34}, 0x1, 0x40030000000000}, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r4) kernel console output (not intermixed with test programs): 145.601933][ T7480] netlink: 60 bytes leftover after parsing attributes in process `syz.3.406'. [ 145.760941][ T7486] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.775487][ T7486] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.826127][ T7488] netlink: 36 bytes leftover after parsing attributes in process `syz.0.408'. [ 145.936775][ T7454] hsr0 speed is unknown, defaulting to 1000 [ 145.945734][ T7494] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 145.948796][ T7454] syz0: Port: 1 Link DOWN [ 146.138168][ T7499] delete_channel: no stack [ 146.412776][ T7515] netlink: 28 bytes leftover after parsing attributes in process `syz.4.417'. [ 146.740204][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 146.798504][ T7525] !: renamed from dummy0 (while UP) [ 147.024571][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 147.044792][ T7542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 147.056289][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 147.085688][ T7546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'. [ 147.149893][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 147.169510][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.426'. [ 147.240250][ T7549] hsr0 speed is unknown, defaulting to 1000 [ 147.587191][ T7554] hsr0 speed is unknown, defaulting to 1000 [ 148.159867][ T7584] netlink: 'syz.3.432': attribute type 18 has an invalid length. [ 148.194108][ T1096] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.203331][ T7584] netlink: 'syz.3.432': attribute type 18 has an invalid length. [ 148.211171][ T1096] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.262762][ T1096] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.393912][ T7592] netlink: 'syz.1.435': attribute type 13 has an invalid length. [ 148.428132][ T7591] netlink: 'syz.1.435': attribute type 13 has an invalid length. [ 148.497998][ T1096] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.531322][ T7580] tipc: Started in network mode [ 148.549129][ T7580] tipc: Node identity , cluster identity 4711 [ 148.706793][ T7586] hsr0 speed is unknown, defaulting to 1000 [ 148.796336][ T1146] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.838961][ T1146] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.900010][ T7608] batadv_slave_1: entered promiscuous mode [ 148.916832][ T1146] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.000819][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.778148][ T7641] hsr0 speed is unknown, defaulting to 1000 [ 149.813272][ T7649] netlink: 'syz.4.449': attribute type 10 has an invalid length. [ 149.939294][ T7650] veth7: entered allmulticast mode [ 150.244593][ T7658] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 150.252407][ T7658] netlink: 'syz.4.451': attribute type 2 has an invalid length. [ 150.289421][ T7658] netlink: 'syz.4.451': attribute type 1 has an invalid length. [ 150.329623][ T30] audit: type=1800 audit(1754179052.980:2): pid=7620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.442" name="cgroup.controllers" dev="tmpfs" ino=473 res=0 errno=0 [ 150.958996][ T7677] __nla_validate_parse: 10 callbacks suppressed [ 150.959017][ T7677] netlink: 14 bytes leftover after parsing attributes in process `syz.2.456'. [ 151.083170][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 151.102346][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.458'. [ 151.604221][ T7708] gtp0: entered promiscuous mode [ 151.858753][ T30] audit: type=1800 audit(1754179054.510:3): pid=7704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.465" name="cgroup.controllers" dev="tmpfs" ino=457 res=0 errno=0 [ 151.860970][ T7718] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 152.030669][ T7727] veth0: entered promiscuous mode [ 152.038823][ T7726] veth0: left promiscuous mode [ 152.323476][ T7735] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 152.375613][ T7735] netlink: 224 bytes leftover after parsing attributes in process `syz.1.475'. [ 152.382994][ T7738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.475'. [ 152.550815][ T7739] hsr0 speed is unknown, defaulting to 1000 [ 152.970325][ T7749] netlink: 96 bytes leftover after parsing attributes in process `syz.3.479'. [ 153.158670][ T7751] bridge0: port 3(erspan0) entered blocking state [ 153.166350][ T7751] bridge0: port 3(erspan0) entered disabled state [ 153.176602][ T7751] erspan0: entered allmulticast mode [ 153.192241][ T7751] erspan0: entered promiscuous mode [ 153.265554][ T7751] erspan0: left allmulticast mode [ 153.279710][ T7751] erspan0: left promiscuous mode [ 153.306459][ T7751] bridge0: port 3(erspan0) entered disabled state [ 153.986791][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 154.065901][ T7787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.486'. [ 154.160940][ T7783] wireguard0: entered promiscuous mode [ 154.207038][ T7783] wireguard0: entered allmulticast mode [ 154.264550][ T7799] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 154.273286][ T7799] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 154.438702][ T7806] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 154.647035][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'. [ 154.791186][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 155.539036][ T30] audit: type=1800 audit(1754179058.190:4): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.499" name="memory.events" dev="tmpfs" ino=538 res=0 errno=0 [ 155.716959][ T7833] macvlan2: entered allmulticast mode [ 155.742777][ T7833] veth1_vlan: entered allmulticast mode [ 155.753411][ T7833] veth1_vlan: left allmulticast mode [ 155.972467][ T30] audit: type=1800 audit(1754179058.620:5): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.504" name="@" dev="tmpfs" ino=552 res=0 errno=0 [ 156.348091][ T7880] hsr0 speed is unknown, defaulting to 1000 [ 156.750869][ T7880] netlink: 'syz.1.509': attribute type 4 has an invalid length. [ 156.786258][ T7880] __nla_validate_parse: 1 callbacks suppressed [ 156.786275][ T7880] netlink: 17 bytes leftover after parsing attributes in process `syz.1.509'. [ 156.971683][ T7900] tipc: Enabled bearer , priority 0 [ 156.994921][ T7900] syzkaller0: entered promiscuous mode [ 157.000572][ T7900] syzkaller0: entered allmulticast mode [ 157.060545][ T7899] tipc: Resetting bearer [ 157.138877][ T7899] tipc: Disabling bearer [ 157.168892][ T7913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.519'. [ 157.184110][ T7908] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 157.195487][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.519'. [ 157.466492][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 157.718649][ T7934] syzkaller0: entered promiscuous mode [ 157.725442][ T7934] syzkaller0: entered allmulticast mode [ 157.986848][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'. [ 159.484117][ T7973] batman_adv: batadv0: Adding interface: macvlan2 [ 159.490611][ T7973] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.518591][ T7973] batman_adv: batadv0: Interface activated: macvlan2 [ 159.549517][ T7987] syz_tun: entered allmulticast mode [ 159.599609][ T7986] syz_tun: left allmulticast mode [ 159.629406][ T7983] hsr0 speed is unknown, defaulting to 1000 [ 159.636705][ T7993] netlink: 212264 bytes leftover after parsing attributes in process `syz.3.540'. [ 159.645166][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.3.540'. [ 159.755743][ T7997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 159.824996][ T8001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.543'. [ 159.946603][ T8009] netlink: 'syz.1.541': attribute type 1 has an invalid length. [ 159.972632][ T8009] netlink: 'syz.1.541': attribute type 2 has an invalid length. [ 159.978374][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 160.122389][ T8007] hsr0 speed is unknown, defaulting to 1000 [ 160.341551][ T30] audit: type=1800 audit(1754179062.980:6): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.549" name="memory.events" dev="tmpfs" ino=529 res=0 errno=0 [ 160.401982][ T30] audit: type=1804 audit(1754179062.990:7): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.549" name="memory.events" dev="tmpfs" ino=529 res=1 errno=0 [ 160.601363][ T8032] tipc: Enabled bearer , priority 0 [ 160.634873][ T8032] syzkaller0: entered promiscuous mode [ 160.650478][ T8032] syzkaller0: entered allmulticast mode [ 160.699581][ T8036] tipc: Resetting bearer [ 160.724082][ T8036] tipc: Disabling bearer [ 160.798862][ T8050] syzkaller0: entered promiscuous mode [ 160.806517][ T8038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.820996][ T8050] syzkaller0: entered allmulticast mode [ 160.966798][ T8057] batman_adv: batadv0: Adding interface: ip6gretap1 [ 160.979874][ T8057] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.008725][ T8057] batman_adv: batadv0: Interface activated: ip6gretap1 [ 161.140257][ T8069] netlink: 'syz.0.561': attribute type 9 has an invalid length. [ 161.151414][ T8069] netlink: 'syz.0.561': attribute type 9 has an invalid length. [ 161.191764][ T8070] macvlan0: entered allmulticast mode [ 161.228307][ T8070] veth1_vlan: entered allmulticast mode [ 161.234440][ T8071] netlink: 'syz.0.561': attribute type 13 has an invalid length. [ 161.278039][ T8070] team0: Port device macvlan0 added [ 161.438201][ T8071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.539777][ T8075] netlink: 'syz.3.562': attribute type 2 has an invalid length. [ 161.558081][ T8075] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 161.751171][ T8078] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 161.937038][ T8077] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 162.330849][ T8104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.243920][ T8139] __nla_validate_parse: 3 callbacks suppressed [ 163.243938][ T8139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 163.846093][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 163.935847][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.584'. [ 163.971663][ T8154] netlink: 68 bytes leftover after parsing attributes in process `syz.0.585'. [ 163.997581][ T8154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.585'. [ 164.015429][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.585'. [ 164.091794][ T8156] netlink: 48 bytes leftover after parsing attributes in process `syz.3.586'. [ 164.234912][ T8162] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 164.327789][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.4.587'. [ 164.711366][ T8183] hsr0 speed is unknown, defaulting to 1000 [ 164.736659][ T8185] macvtap0: entered promiscuous mode [ 164.749337][ T8185] batadv0: entered promiscuous mode [ 164.759819][ T8185] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 164.775461][ T8185] batadv0: left promiscuous mode [ 165.219844][ T5836] IPVS: starting estimator thread 0... [ 165.280720][ T8210] hsr0 speed is unknown, defaulting to 1000 [ 165.323442][ T8207] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 165.329689][ T8209] IPVS: using max 27 ests per chain, 64800 per kthread [ 165.529641][ T8218] 8021q: VLANs not supported on ip6gre0 [ 165.839046][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.610'. [ 166.085275][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.613'. [ 166.122868][ T30] audit: type=1804 audit(1754179068.770:8): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.612" name="/newroot/139/cgroup.controllers" dev="tmpfs" ino=724 res=1 errno=0 [ 166.193423][ T30] audit: type=1800 audit(1754179068.770:9): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.612" name="cgroup.controllers" dev="tmpfs" ino=724 res=0 errno=0 [ 166.815649][ T8268] batadv_slave_1: entered promiscuous mode [ 167.100169][ T8271] batadv_slave_1: left promiscuous mode [ 167.303981][ T8287] tipc: Started in network mode [ 167.309015][ T8287] tipc: Node identity 92b4b2260fa8, cluster identity 4711 [ 167.338386][ T8287] tipc: Enabled bearer , priority 0 [ 167.367740][ T8291] syzkaller0: entered promiscuous mode [ 167.374082][ T8291] syzkaller0: entered allmulticast mode [ 167.417544][ T8287] tipc: Resetting bearer [ 167.447656][ T8286] tipc: Resetting bearer [ 167.546675][ T8286] tipc: Disabling bearer [ 167.595312][ T8302] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 168.564827][ T8334] hsr0 speed is unknown, defaulting to 1000 [ 168.578996][ T8342] netlink: 'syz.2.629': attribute type 1 has an invalid length. [ 168.725651][ T8342] __nla_validate_parse: 3 callbacks suppressed [ 168.725670][ T8342] netlink: 228 bytes leftover after parsing attributes in process `syz.2.629'. [ 168.995230][ T8350] veth1_vlan: left allmulticast mode [ 169.052930][ T8350] macvlan0: left allmulticast mode [ 169.085059][ T8350] netlink: 'syz.3.630': attribute type 2 has an invalid length. [ 194.326674][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 211.769907][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.772607][ T5157] Bluetooth: hci0: command 0x0406 tx timeout [ 216.886321][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 216.886730][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 218.115955][ T8384] IPVS: length: 93 != 8 [ 218.676608][ T8405] netlink: 32 bytes leftover after parsing attributes in process `syz.4.645'. [ 218.934768][ T6320] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 219.438899][ T8443] Bluetooth: MGMT ver 1.23 [ 219.557733][ T8450] netlink: 164 bytes leftover after parsing attributes in process `syz.3.653'. [ 219.580330][ T8450] netlink: 164 bytes leftover after parsing attributes in process `syz.3.653'. [ 219.625123][ T8450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.653'. [ 219.949009][ T8465] netlink: 'syz.2.658': attribute type 9 has an invalid length. [ 220.019276][ T8467] netlink: 36 bytes leftover after parsing attributes in process `syz.0.660'. [ 220.432148][ T8378] hsr0 speed is unknown, defaulting to 1000 [ 220.721964][ T8502] netlink: 'syz.4.670': attribute type 1 has an invalid length. [ 220.801562][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.670'. [ 220.870626][ T8502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.060042][ T8510] tipc: Started in network mode [ 221.076953][ T8510] tipc: Node identity d648fcc8586f, cluster identity 4711 [ 221.101784][ T8510] tipc: Enabled bearer , priority 0 [ 221.184902][ T8507] tipc: Disabling bearer [ 221.185355][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 221.228182][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.671'. [ 221.240881][ T8510] netlink: 24 bytes leftover after parsing attributes in process `syz.0.671'. [ 221.627898][ T8533] sctp: [Deprecated]: syz.3.677 (pid 8533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.627898][ T8533] Use struct sctp_sack_info instead [ 221.741902][ T8541] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 221.764882][ T8541] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 221.810142][ T8539] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.881831][ T8539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.991735][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.681'. [ 222.142530][ T8553] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.152630][ T8553] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.218729][ T8554] bridge_slave_1: left allmulticast mode [ 222.226037][ T8554] bridge_slave_1: left promiscuous mode [ 222.232260][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.252363][ T8554] bridge_slave_0: left allmulticast mode [ 222.297878][ T8554] bridge_slave_0: left promiscuous mode [ 222.308547][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.358830][ T8562] netlink: zone id is out of range [ 222.506488][ T8558] macsec1: entered promiscuous mode [ 222.512215][ T8558] macsec1: entered allmulticast mode [ 222.589125][ T8570] batadv1: entered promiscuous mode [ 222.620080][ T8570] batadv1: entered allmulticast mode [ 222.802297][ T8585] C: renamed from team_slave_0 [ 222.839499][ T8585] netlink: 'syz.1.690': attribute type 1 has an invalid length. [ 222.863150][ T8585] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 222.887918][ T8591] netlink: 'syz.2.692': attribute type 2 has an invalid length. [ 222.921926][ T8591] : entered promiscuous mode [ 223.041550][ T8593] tap0: tun_chr_ioctl cmd 1074025677 [ 223.058625][ T8597] netlink: 'syz.2.695': attribute type 11 has an invalid length. [ 223.067553][ T8593] tap0: linktype set to 825 [ 223.078893][ T8597] netlink: 'syz.2.695': attribute type 4 has an invalid length. [ 223.469591][ T8626] IPv6: NLM_F_REPLACE set, but no existing node found! [ 223.691431][ T8638] __nla_validate_parse: 9 callbacks suppressed [ 223.691450][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 223.697682][ T8640] tipc: Resetting bearer [ 223.715401][ T8640] syzkaller0: left promiscuous mode [ 223.720812][ T8640] syzkaller0: left allmulticast mode [ 223.741138][ T8640] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 223.788980][ T78] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.801480][ T78] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.815790][ T78] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.827343][ T78] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.035133][ T8650] ..@ÿ: renamed from bond_slave_0 (while UP) [ 224.088258][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.108103][ T8655] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 224.124985][ T8655] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 224.253467][ T8659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 224.359480][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.715'. [ 224.494248][ T8670] netlink: 248 bytes leftover after parsing attributes in process `syz.2.716'. [ 224.509798][ T8667] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 224.563658][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.715'. [ 224.599566][ T1165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 224.635302][ T1165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 224.664180][ T8672] 8021q: adding VLAN 0 to HW filter on device bond2 [ 224.693873][ T1165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 224.730545][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 224.731335][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 224.761443][ T1165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 224.917128][ T8698] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 225.024786][ T8703] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 225.062136][ T8703] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 225.116563][ T8709] syzkaller0: entered promiscuous mode [ 225.122089][ T8709] syzkaller0: entered allmulticast mode [ 225.268655][ T8708] macsec1: entered promiscuous mode [ 225.312959][ T8708] !: entered promiscuous mode [ 225.327419][ T8708] macsec1: entered allmulticast mode [ 225.342279][ T8708] !: entered allmulticast mode [ 225.385597][ T8708] !: left allmulticast mode [ 225.391571][ T8708] !: left promiscuous mode [ 225.510023][ T8725] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 225.845059][ T8755] tipc: Enabled bearer , priority 0 [ 225.893809][ T8752] tipc: Enabling of bearer rejected, already enabled [ 225.938503][ T8755] syzkaller0: entered promiscuous mode [ 226.011784][ T8755] syzkaller0: entered allmulticast mode [ 226.168703][ T8758] tipc: Resetting bearer [ 226.203671][ T8750] tipc: Resetting bearer [ 226.328795][ T8750] tipc: Disabling bearer [ 226.422514][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 226.474979][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 226.543582][ T8789] netlink: 'syz.3.739': attribute type 5 has an invalid length. [ 226.551363][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.739'. [ 226.817974][ T8805] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 226.930349][ T8805] bond2: entered promiscuous mode [ 226.938142][ T8805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 226.969980][ T8805] bond2: left promiscuous mode [ 227.031781][ T8812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.042139][ T8812] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 227.063931][ T8812] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 227.295777][ T8829] netlink: 'syz.1.747': attribute type 1 has an invalid length. [ 227.532519][ T8847] vlan2: entered promiscuous mode [ 227.542439][ T8847] vlan2: entered allmulticast mode [ 227.564936][ T8847] hsr_slave_1: entered allmulticast mode [ 227.597780][ T8852] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 227.619694][ T8852] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 227.981648][ T8871] macvtap0: refused to change device tx_queue_len [ 227.997120][ T8871] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 228.253337][ T8875] hsr0 speed is unknown, defaulting to 1000 [ 228.345709][ T8889] Bluetooth: MGMT ver 1.23 [ 228.386681][ T8881] netlink: 'syz.3.762': attribute type 10 has an invalid length. [ 228.425532][ T8881] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 228.573485][ T8896] hsr0 speed is unknown, defaulting to 1000 [ 229.581916][ T8927] lo speed is unknown, defaulting to 1000 [ 229.625887][ T8927] lo speed is unknown, defaulting to 1000 [ 229.663696][ T8925] __nla_validate_parse: 9 callbacks suppressed [ 229.663718][ T8925] netlink: 32 bytes leftover after parsing attributes in process `syz.1.773'. [ 229.685979][ T8927] lo speed is unknown, defaulting to 1000 [ 229.829223][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.776'. [ 229.901525][ T8927] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 230.080090][ T8927] lo speed is unknown, defaulting to 1000 [ 230.105161][ T8927] lo speed is unknown, defaulting to 1000 [ 230.115934][ T8927] lo speed is unknown, defaulting to 1000 [ 230.158501][ T8927] lo speed is unknown, defaulting to 1000 [ 230.205187][ T8927] lo speed is unknown, defaulting to 1000 [ 230.616764][ T8963] vlan2: entered promiscuous mode [ 230.621954][ T8963] team0: entered promiscuous mode [ 230.628187][ T8963] C: entered promiscuous mode [ 230.645145][ T8963] team_slave_1: entered promiscuous mode [ 230.683810][ T8968] netlink: 44 bytes leftover after parsing attributes in process `syz.4.785'. [ 230.704897][ T8968] netlink: 43 bytes leftover after parsing attributes in process `syz.4.785'. [ 230.720442][ T8968] netlink: 'syz.4.785': attribute type 6 has an invalid length. [ 230.755026][ T8968] netlink: 'syz.4.785': attribute type 5 has an invalid length. [ 230.775902][ T8968] netlink: 43 bytes leftover after parsing attributes in process `syz.4.785'. [ 230.819018][ T8975] netlink: 100 bytes leftover after parsing attributes in process `syz.0.787'. [ 230.923275][ T8987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.788'. [ 230.965338][ T8987] siw: device registration error -23 [ 231.028198][ T8995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.788'. [ 231.170276][ T8998] netlink: 48 bytes leftover after parsing attributes in process `syz.4.791'. [ 231.182416][ T8997] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.189314][ T8997] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.327085][ T9006] openvswitch: netlink: Message has 4 unknown bytes. [ 231.740668][ T30] audit: type=1800 audit(1754179134.390:10): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.795" name="memory.events" dev="tmpfs" ino=906 res=0 errno=0 [ 231.960271][ T9036] netlink: 'syz.3.800': attribute type 1 has an invalid length. [ 232.056630][ T9036] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.178657][ T9034] bond3: (slave veth9): Enslaving as an active interface with a down link [ 232.278140][ T9034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.310498][ T9053] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 232.465167][ T9060] hsr0 speed is unknown, defaulting to 1000 [ 232.505649][ T9060] lo speed is unknown, defaulting to 1000 [ 232.884584][ T9093] sctp: [Deprecated]: syz.0.815 (pid 9093) Use of int in maxseg socket option. [ 232.884584][ T9093] Use struct sctp_assoc_value instead [ 233.068608][ T9098] netlink: 'syz.1.816': attribute type 10 has an invalid length. [ 233.089169][ T9098] !: entered promiscuous mode [ 233.096678][ T9098] team0: Port device 0! added [ 233.670535][ T9120] tipc: Enabled bearer , priority 0 [ 233.808564][ T9130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.824'. [ 233.888501][ T9120] syzkaller0: entered promiscuous mode [ 233.895731][ T9120] syzkaller0: entered allmulticast mode [ 233.902012][ T9120] tipc: Resetting bearer [ 233.947503][ T9141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.962522][ T9134] tipc: Resetting bearer [ 233.979070][ T9134] syzkaller0: left promiscuous mode [ 233.985692][ T9134] syzkaller0: left allmulticast mode [ 235.248310][ T6320] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.263478][ T13] tipc: Resetting bearer [ 235.271434][ T9119] tipc: Resetting bearer [ 235.305802][ T9119] tipc: Disabling bearer [ 235.420346][ T6320] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.440343][ T6320] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.566098][ T6320] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 235.670479][ T9185] __nla_validate_parse: 3 callbacks suppressed [ 235.670505][ T9185] netlink: 232 bytes leftover after parsing attributes in process `syz.3.838'. [ 235.807335][ T9193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.839'. [ 235.971674][ T9203] netlink: 'syz.0.843': attribute type 10 has an invalid length. [ 235.988502][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 236.003582][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 236.027345][ T9203] team0: Port device netdevsim0 added [ 236.198549][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.847'. [ 236.201908][ T9217] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 236.210672][ T9216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.847'. [ 236.284394][ T9219] bond4: (slave gretap1): making interface the new active one [ 236.293314][ T9219] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 236.591903][ T9237] netlink: 772 bytes leftover after parsing attributes in process `syz.0.850'. [ 236.946250][ T9232] sch_tbf: peakrate 4294967294 is lower than or equals to rate 15845583634802964877 ! [ 237.328157][ T9262] hsr0 speed is unknown, defaulting to 1000 [ 237.359643][ T9262] lo speed is unknown, defaulting to 1000 [ 237.573991][ T9257] syz.4.856: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 237.645816][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.4.856 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 237.645846][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 237.645860][ T9257] Call Trace: [ 237.645868][ T9257] [ 237.645878][ T9257] dump_stack_lvl+0x189/0x250 [ 237.645909][ T9257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.645930][ T9257] ? __pfx__printk+0x10/0x10 [ 237.645967][ T9257] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.645989][ T9257] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 237.646012][ T9257] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 237.646036][ T9257] warn_alloc+0x214/0x310 [ 237.646063][ T9257] ? __pfx_warn_alloc+0x10/0x10 [ 237.646091][ T9257] ? __get_vm_area_node+0x28f/0x300 [ 237.646122][ T9257] ? xskq_create+0xbf/0x170 [ 237.646153][ T9257] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 237.646202][ T9257] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.646229][ T9257] ? __kasan_kmalloc+0x93/0xb0 [ 237.646262][ T9257] vmalloc_user_noprof+0xad/0xf0 [ 237.646285][ T9257] ? xskq_create+0xbf/0x170 [ 237.646320][ T9257] xskq_create+0xbf/0x170 [ 237.646350][ T9257] xsk_init_queue+0xb0/0x110 [ 237.646379][ T9257] xsk_setsockopt+0x57b/0x8d0 [ 237.646407][ T9257] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.646431][ T9257] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.646458][ T9257] ? __se_sys_futex+0x36f/0x400 [ 237.646481][ T9257] ? aa_sock_opt_perm+0x74/0x110 [ 237.646510][ T9257] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.646532][ T9257] ? __pfx_xsk_setsockopt+0x10/0x10 [ 237.646559][ T9257] do_sock_setsockopt+0x17c/0x1b0 [ 237.646584][ T9257] __x64_sys_setsockopt+0x13f/0x1b0 [ 237.646609][ T9257] do_syscall_64+0xfa/0x3b0 [ 237.646636][ T9257] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.646662][ T9257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.646681][ T9257] ? clear_bhb_loop+0x60/0xb0 [ 237.646705][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.646723][ T9257] RIP: 0033:0x7fadf518eb69 [ 237.646741][ T9257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.646757][ T9257] RSP: 002b:00007fadf6012038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 237.646778][ T9257] RAX: ffffffffffffffda RBX: 00007fadf53b5fa0 RCX: 00007fadf518eb69 [ 237.646791][ T9257] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000d [ 237.646802][ T9257] RBP: 00007fadf5211df1 R08: 0000000000000004 R09: 0000000000000000 [ 237.646812][ T9257] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 237.646823][ T9257] R13: 0000000000000000 R14: 00007fadf53b5fa0 R15: 00007fffd84680e8 [ 237.646853][ T9257] [ 237.646870][ T9257] Mem-Info: [ 237.938952][ T9257] active_anon:7475 inactive_anon:0 isolated_anon:0 [ 237.938952][ T9257] active_file:1520 inactive_file:39888 isolated_file:0 [ 237.938952][ T9257] unevictable:768 dirty:276 writeback:0 [ 237.938952][ T9257] slab_reclaimable:11536 slab_unreclaimable:110931 [ 237.938952][ T9257] mapped:35430 shmem:2450 pagetables:1172 [ 237.938952][ T9257] sec_pagetables:0 bounce:0 [ 237.938952][ T9257] kernel_misc_reclaimable:0 [ 237.938952][ T9257] free:1313742 free_pcp:17366 free_cma:0 [ 238.045662][ T9257] Node 0 active_anon:31600kB inactive_anon:0kB active_file:6080kB inactive_file:159352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143420kB dirty:1104kB writeback:0kB shmem:9964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13164kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 238.097366][ T9257] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 238.176960][ T9257] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 238.210238][ T9257] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 238.220735][ T9257] Node 0 DMA32 free:1342204kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36752kB inactive_anon:0kB active_file:6080kB inactive_file:157524kB unevictable:1536kB writepending:1104kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:44396kB local_pcp:23916kB free_cma:0kB [ 238.254058][ T9257] lowmem_reserve[]: 0 0 1 1 1 [ 238.259054][ T9257] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 238.319546][ T9257] lowmem_reserve[]: 0 0 0 0 0 [ 238.358431][ T9257] Node 1 Normal free:3893688kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22272kB local_pcp:11648kB free_cma:0kB [ 238.464796][ T9257] lowmem_reserve[]: 0 0 0 0 0 [ 238.469614][ T9257] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 238.520472][ T9257] Node 0 DMA32: 1112*4kB (UME) 137*8kB (UM) 77*16kB (UME) 566*32kB (UME) 169*64kB (UM) 61*128kB (UM) 45*256kB (UM) 12*512kB (UME) 9*1024kB (UME) 3*2048kB (U) 310*4096kB (UM) = 1346296kB [ 238.548074][ T9308] netlink: 14 bytes leftover after parsing attributes in process `syz.2.867'. [ 238.563865][ T9308] hsr_slave_0: left promiscuous mode [ 238.572010][ T9308] hsr_slave_1: left promiscuous mode [ 238.591764][ T9257] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 238.615165][ T9257] Node 1 Normal: 218*4kB (UE) 50*8kB (UME) 42*16kB (UME) 87*32kB (UME) 23*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893688kB [ 238.634846][ T9257] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.659998][ T9257] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.674737][ T9257] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 238.685489][ T9257] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 238.700042][ T9257] 42779 total pagecache pages [ 238.705804][ T9257] 0 pages in swap cache [ 238.710057][ T9257] Free swap = 124996kB [ 238.715592][ T9257] Total swap = 124996kB [ 238.719847][ T9257] 2097051 pages RAM [ 238.725581][ T9257] 0 pages HighMem/MovableOnly [ 238.731024][ T9257] 424872 pages reserved [ 238.736910][ T9257] 0 pages cma reserved [ 238.756245][ T9318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 239.095774][ T9336] tipc: Enabled bearer , priority 0 [ 239.107447][ T9336] syzkaller0: entered promiscuous mode [ 239.114057][ T9336] syzkaller0: entered allmulticast mode [ 239.127538][ T9336] tipc: Resetting bearer [ 239.135530][ T9335] tipc: Resetting bearer [ 239.150348][ T9335] tipc: Disabling bearer [ 239.320326][ T9343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.335520][ T9343] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.557502][ T9343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.616591][ T9343] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.729732][ T9343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.752286][ T9343] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.788131][ T9363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.880'. [ 239.867759][ T9343] team0: Port device netdevsim0 removed [ 239.897066][ T9343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.919530][ T9343] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.037331][ T9369] netlink: 'syz.4.882': attribute type 1 has an invalid length. [ 240.188072][ T6317] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.204243][ T6317] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.246779][ T1001] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.250451][ T30] audit: type=1800 audit(1754179142.900:11): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.881" name="memory.events" dev="tmpfs" ino=876 res=0 errno=0 [ 240.301253][ T1001] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.331216][ T1146] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.356043][ T1146] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.408627][ T1146] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.438167][ T1146] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.509148][ T9376] netlink: 'syz.1.883': attribute type 11 has an invalid length. [ 240.701169][ T9391] dvmrp0: entered allmulticast mode [ 240.820769][ T9402] FAULT_INJECTION: forcing a failure. [ 240.820769][ T9402] name failslab, interval 1, probability 0, space 0, times 0 [ 240.849621][ T9402] CPU: 1 UID: 0 PID: 9402 Comm: syz.0.888 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 240.849650][ T9402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.849662][ T9402] Call Trace: [ 240.849670][ T9402] [ 240.849679][ T9402] dump_stack_lvl+0x189/0x250 [ 240.849705][ T9402] ? __pfx____ratelimit+0x10/0x10 [ 240.849733][ T9402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.849753][ T9402] ? __pfx__printk+0x10/0x10 [ 240.849783][ T9402] ? __pfx___might_resched+0x10/0x10 [ 240.849810][ T9402] ? fs_reclaim_acquire+0x7d/0x100 [ 240.849836][ T9402] should_fail_ex+0x414/0x560 [ 240.849871][ T9402] should_failslab+0xa8/0x100 [ 240.849891][ T9402] __kmalloc_cache_noprof+0x70/0x3d0 [ 240.849919][ T9402] ? __inet_diag_dump_start+0x9d/0xa10 [ 240.849944][ T9402] __inet_diag_dump_start+0x9d/0xa10 [ 240.849963][ T9402] ? netlink_lookup+0x30/0x200 [ 240.849989][ T9402] ? netlink_lookup+0x30/0x200 [ 240.850022][ T9402] __netlink_dump_start+0x469/0x7e0 [ 240.850070][ T9402] inet_diag_handler_cmd+0x1bf/0x290 [ 240.850093][ T9402] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 240.850110][ T9402] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 240.850126][ T9402] ? __pfx_inet_diag_dump+0x10/0x10 [ 240.850142][ T9402] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 240.850162][ T9402] ? sock_diag_lock_handler+0x19/0x290 [ 240.850189][ T9402] ? sock_diag_lock_handler+0x19/0x290 [ 240.850223][ T9402] sock_diag_rcv_msg+0x4cc/0x600 [ 240.850255][ T9402] netlink_rcv_skb+0x205/0x470 [ 240.850286][ T9402] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 240.850314][ T9402] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.850373][ T9402] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.850426][ T9402] netlink_unicast+0x82c/0x9e0 [ 240.850461][ T9402] ? __pfx_netlink_unicast+0x10/0x10 [ 240.850489][ T9402] ? netlink_sendmsg+0x642/0xb30 [ 240.850516][ T9402] ? skb_put+0x11b/0x210 [ 240.850538][ T9402] netlink_sendmsg+0x805/0xb30 [ 240.850577][ T9402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.850610][ T9402] ? aa_sock_msg_perm+0x94/0x160 [ 240.850637][ T9402] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.850661][ T9402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.850691][ T9402] __sock_sendmsg+0x219/0x270 [ 240.850721][ T9402] sock_write_iter+0x258/0x330 [ 240.850748][ T9402] ? __pfx_sock_write_iter+0x10/0x10 [ 240.850784][ T9402] ? __pfx_aa_file_perm+0x10/0x10 [ 240.850820][ T9402] do_iter_readv_writev+0x56e/0x7f0 [ 240.850855][ T9402] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 240.850890][ T9402] ? bpf_lsm_file_permission+0x9/0x20 [ 240.850914][ T9402] ? security_file_permission+0x75/0x290 [ 240.850937][ T9402] ? rw_verify_area+0x258/0x650 [ 240.850969][ T9402] vfs_writev+0x31a/0x960 [ 240.850994][ T9402] ? __lock_acquire+0xab9/0xd20 [ 240.851025][ T9402] ? __pfx_vfs_writev+0x10/0x10 [ 240.851069][ T9402] ? __fget_files+0x2a/0x420 [ 240.851093][ T9402] ? __fget_files+0x3a0/0x420 [ 240.851111][ T9402] ? __fget_files+0x2a/0x420 [ 240.851138][ T9402] do_writev+0x14d/0x2d0 [ 240.851162][ T9402] ? __pfx_do_writev+0x10/0x10 [ 240.851181][ T9402] ? rcu_is_watching+0x15/0xb0 [ 240.851216][ T9402] ? do_syscall_64+0xbe/0x3b0 [ 240.851249][ T9402] do_syscall_64+0xfa/0x3b0 [ 240.851276][ T9402] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.851303][ T9402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.851322][ T9402] ? clear_bhb_loop+0x60/0xb0 [ 240.851345][ T9402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.851363][ T9402] RIP: 0033:0x7f376338eb69 [ 240.851381][ T9402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.851397][ T9402] RSP: 002b:00007f37641d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 240.851419][ T9402] RAX: ffffffffffffffda RBX: 00007f37635b6160 RCX: 00007f376338eb69 [ 240.851433][ T9402] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 240.851445][ T9402] RBP: 00007f37641d6090 R08: 0000000000000000 R09: 0000000000000000 [ 240.851456][ T9402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.851467][ T9402] R13: 0000000000000000 R14: 00007f37635b6160 R15: 00007ffdef8c5c58 [ 240.851498][ T9402] [ 240.880097][ T9406] __nla_validate_parse: 1 callbacks suppressed [ 240.880117][ T9406] netlink: 88 bytes leftover after parsing attributes in process `syz.1.891'. [ 241.427350][ T9421] netlink: 248 bytes leftover after parsing attributes in process `syz.4.894'. [ 241.680942][ T9435] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 241.700178][ T9435] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 241.958502][ T9448] netlink: 724 bytes leftover after parsing attributes in process `syz.4.901'. [ 241.970420][ T9448] netlink: 83 bytes leftover after parsing attributes in process `syz.4.901'. [ 242.107914][ T9454] hsr0 speed is unknown, defaulting to 1000 [ 242.117307][ T9454] lo speed is unknown, defaulting to 1000 [ 242.251856][ T9463] netlink: 'syz.2.905': attribute type 5 has an invalid length. [ 242.787253][ T9490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 242.818276][ T9489] netlink: 196 bytes leftover after parsing attributes in process `syz.1.911'. [ 243.051017][ T9502] netlink: 248 bytes leftover after parsing attributes in process `syz.0.914'. [ 243.399782][ T9519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.918'. [ 243.559414][ T9526] netlink: 'syz.3.921': attribute type 9 has an invalid length. [ 243.570870][ T9526] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.921'. [ 243.639349][ T9519] team0 (unregistering): Port device team_slave_0 removed [ 243.652523][ T9519] team0 (unregistering): Port device team_slave_1 removed [ 243.668523][ T9519] team0 (unregistering): Port device netdevsim0 removed [ 245.209456][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.930'. [ 245.250131][ T9570] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 245.330389][ T9573] can: request_module (can-proto-3) failed. [ 245.680889][ T9591] netlink: 'syz.0.937': attribute type 10 has an invalid length. [ 245.695392][ T9598] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 245.738403][ T9591] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 245.926347][ T9607] __nla_validate_parse: 3 callbacks suppressed [ 245.926366][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 245.996776][ T9613] batman_adv: batadv0: Interface deactivated: macvlan2 [ 246.040554][ T9613] batman_adv: batadv0: Removing interface: macvlan2 [ 246.411669][ T9634] tipc: Enabling of bearer rejected, failed to enable media [ 247.093951][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 247.125612][ T9663] tipc: Enabled bearer , priority 0 [ 247.134940][ T9664] syzkaller0: entered promiscuous mode [ 247.140449][ T9664] syzkaller0: entered allmulticast mode [ 247.169429][ T9672] tipc: Resetting bearer [ 247.180751][ T9662] tipc: Resetting bearer [ 247.230725][ T9660] delete_channel: no stack [ 247.292195][ T9662] tipc: Disabling bearer [ 247.724650][ T9691] syz.0.969: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 247.777776][ T9691] CPU: 1 UID: 0 PID: 9691 Comm: syz.0.969 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 247.777808][ T9691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.777830][ T9691] Call Trace: [ 247.777839][ T9691] [ 247.777848][ T9691] dump_stack_lvl+0x189/0x250 [ 247.777880][ T9691] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.777903][ T9691] ? __pfx__printk+0x10/0x10 [ 247.777930][ T9691] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 247.777954][ T9691] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 247.777981][ T9691] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 247.778008][ T9691] warn_alloc+0x214/0x310 [ 247.778037][ T9691] ? __pfx_warn_alloc+0x10/0x10 [ 247.778069][ T9691] ? __get_vm_area_node+0x28f/0x300 [ 247.778102][ T9691] ? packet_set_ring+0x6f4/0x2380 [ 247.778132][ T9691] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 247.778186][ T9691] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.778209][ T9691] ? alloc_pages_mpol+0x3cd/0x4a0 [ 247.778245][ T9691] ? packet_set_ring+0x6f4/0x2380 [ 247.778270][ T9691] vzalloc_noprof+0xb2/0xf0 [ 247.778290][ T9691] ? packet_set_ring+0x6f4/0x2380 [ 247.778317][ T9691] packet_set_ring+0x6f4/0x2380 [ 247.778367][ T9691] ? __pfx_packet_set_ring+0x10/0x10 [ 247.778414][ T9691] ? _copy_from_user+0x94/0xb0 [ 247.778449][ T9691] packet_setsockopt+0xc5a/0x12c0 [ 247.778478][ T9691] ? __pfx_packet_setsockopt+0x10/0x10 [ 247.778510][ T9691] ? __lock_acquire+0xab9/0xd20 [ 247.778545][ T9691] ? aa_sk_perm+0x81e/0x950 [ 247.778577][ T9691] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.778605][ T9691] ? __fget_files+0x2a/0x420 [ 247.778624][ T9691] ? aa_sock_opt_perm+0x74/0x110 [ 247.778663][ T9691] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 247.778687][ T9691] ? __pfx_packet_setsockopt+0x10/0x10 [ 247.778713][ T9691] do_sock_setsockopt+0x17c/0x1b0 [ 247.778740][ T9691] __x64_sys_setsockopt+0x13f/0x1b0 [ 247.778766][ T9691] do_syscall_64+0xfa/0x3b0 [ 247.778800][ T9691] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.778829][ T9691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.778850][ T9691] ? clear_bhb_loop+0x60/0xb0 [ 247.778875][ T9691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.778894][ T9691] RIP: 0033:0x7f376338eb69 [ 247.778913][ T9691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.778931][ T9691] RSP: 002b:00007f37641f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.778954][ T9691] RAX: ffffffffffffffda RBX: 00007f37635b6080 RCX: 00007f376338eb69 [ 247.778969][ T9691] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000009 [ 247.778981][ T9691] RBP: 00007f3763411df1 R08: 000000000000001c R09: 0000000000000000 [ 247.778994][ T9691] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 247.779006][ T9691] R13: 0000000000000000 R14: 00007f37635b6080 R15: 00007ffdef8c5c58 [ 247.779039][ T9691] [ 248.301210][ T9710] netlink: 'syz.4.967': attribute type 16 has an invalid length. [ 248.313555][ T9710] netlink: 'syz.4.967': attribute type 17 has an invalid length. [ 248.343537][ T9691] Mem-Info: [ 248.346810][ T9691] active_anon:13147 inactive_anon:0 isolated_anon:0 [ 248.346810][ T9691] active_file:1520 inactive_file:39892 isolated_file:0 [ 248.346810][ T9691] unevictable:768 dirty:287 writeback:0 [ 248.346810][ T9691] slab_reclaimable:12021 slab_unreclaimable:110516 [ 248.346810][ T9691] mapped:34387 shmem:5457 pagetables:1126 [ 248.346810][ T9691] sec_pagetables:0 bounce:0 [ 248.346810][ T9691] kernel_misc_reclaimable:0 [ 248.346810][ T9691] free:1295089 free_pcp:18588 free_cma:0 [ 248.462257][ T9691] Node 0 active_anon:44432kB inactive_anon:0kB active_file:6080kB inactive_file:159368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145676kB dirty:1196kB writeback:0kB shmem:12132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12948kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 248.501965][ T9691] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 248.535988][ T9691] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 248.567387][ T9691] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 248.578775][ T9691] Node 0 DMA32 free:1277456kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41784kB inactive_anon:0kB active_file:6080kB inactive_file:157540kB unevictable:1536kB writepending:1196kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:59104kB local_pcp:26572kB free_cma:0kB [ 248.586878][ T9710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.625705][ T9691] lowmem_reserve[]: 0 0 1 1 1 [ 248.630688][ T9691] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 248.665589][ T9691] lowmem_reserve[]: 0 0 0 0 0 [ 248.670366][ T9691] Node 1 Normal free:3893688kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22272kB local_pcp:10624kB free_cma:0kB [ 248.694920][ T9710] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.704917][ T9691] lowmem_reserve[]: 0 0 0 0 0 [ 248.743612][ T9691] Node 0 [ 248.743626][ T9691] DMA: 0*4kB [ 248.746624][ T9710] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.779216][ T9691] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 248.791780][ T9691] Node 0 DMA32: 1807*4kB (UME) 248*8kB (UME) 89*16kB (UME) 621*32kB (UE) 51*64kB (UE) 6*128kB (UME) 15*256kB (UME) 6*512kB (ME) 7*1024kB (UME) 2*2048kB (UE) 299*4096kB (M) = 1277420kB [ 248.813324][ T9691] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 248.826938][ T9691] Node 1 Normal: 218*4kB (UE) 50*8kB (UME) 42*16kB (UME) 87*32kB (UME) 23*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893688kB [ 248.851898][ T9691] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.882102][ T9691] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.898197][ T9691] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 248.909654][ T9691] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 248.924167][ T9691] 42800 total pagecache pages [ 248.928863][ T9691] 0 pages in swap cache [ 248.936758][ T9691] Free swap = 124996kB [ 248.940936][ T9691] Total swap = 124996kB [ 248.947307][ T9691] 2097051 pages RAM [ 248.951221][ T9691] 0 pages HighMem/MovableOnly [ 249.044000][ T9691] 424872 pages reserved [ 249.063923][ T9691] 0 pages cma reserved [ 249.207010][ T9731] rdma_op ffff8880285289f0 conn xmit_rdma 0000000000000000 [ 249.232205][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.977'. [ 249.272777][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.977'. [ 249.313799][ T9734] netlink: 'syz.2.978': attribute type 2 has an invalid length. [ 249.321493][ T9734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.978'. [ 249.350745][ T9740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.379017][ T9739] netlink: 'syz.3.979': attribute type 10 has an invalid length. [ 249.635016][ T9755] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 249.666695][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.983'. [ 249.725195][ T9756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.983'. [ 249.751379][ T9760] netlink: 88 bytes leftover after parsing attributes in process `syz.2.984'. [ 249.760029][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.983'. [ 249.979880][ T9766] hsr0 speed is unknown, defaulting to 1000 [ 250.038045][ T9766] lo speed is unknown, defaulting to 1000 [ 250.329745][ T9780] batadv_slave_0: entered promiscuous mode [ 250.374007][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.991'. [ 250.435478][ T9784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.551350][ T9784] batadv_slave_0 (unregistering): left promiscuous mode [ 250.564105][ T9784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.667103][ T9790] hsr0 speed is unknown, defaulting to 1000 [ 250.705214][ T9790] lo speed is unknown, defaulting to 1000 [ 250.993522][ T9798] netlink: 'syz.1.996': attribute type 28 has an invalid length. [ 251.018920][ T9798] __nla_validate_parse: 3 callbacks suppressed [ 251.018935][ T9798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.996'. [ 251.064042][ T9798] netlink: 24 bytes leftover after parsing attributes in process `syz.1.996'. [ 251.957512][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'. [ 251.990046][ T9789] netlink: 156 bytes leftover after parsing attributes in process `syz.0.993'. [ 252.020974][ T9829] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 252.235413][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1005'. [ 252.556582][ T9851] netlink: 'syz.3.1008': attribute type 12 has an invalid length. [ 252.610397][ T9851] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.106284][ T9871] hsr0 speed is unknown, defaulting to 1000 [ 253.125072][ T9871] lo speed is unknown, defaulting to 1000 [ 253.380595][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 253.400185][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1017'. [ 253.482602][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1017'. [ 253.559368][ T9898] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1017'. [ 253.747970][ T9887] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 254.232547][ T9885] hsr0 speed is unknown, defaulting to 1000 [ 254.381452][ T9908] netlink: 'syz.0.1019': attribute type 29 has an invalid length. [ 254.406224][ T9913] netlink: 'syz.0.1019': attribute type 29 has an invalid length. [ 254.442363][ T9885] lo speed is unknown, defaulting to 1000 [ 254.550822][ T9934] openvswitch: netlink: Key type 16144 is out of range max 32 [ 255.345675][ T9941] @ÿ: renamed from bond_slave_0 [ 255.542604][ T9952] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 255.585272][ T9958] sctp: [Deprecated]: syz.3.1030 (pid 9958) Use of int in max_burst socket option. [ 255.585272][ T9958] Use struct sctp_assoc_value instead [ 255.693510][ T9956] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 255.716297][ T9956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.744101][ T9956] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 255.769014][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.790319][ T9956] bond0 (unregistering): Released all slaves [ 255.970857][ T9966] bridge0: port 3(erspan0) entered blocking state [ 255.980705][ T9966] bridge0: port 3(erspan0) entered disabled state [ 255.992432][ T9966] erspan0: entered allmulticast mode [ 256.032071][ T9966] erspan0: entered promiscuous mode [ 256.157921][ T9967] erspan0: left allmulticast mode [ 256.205881][ T9967] erspan0: left promiscuous mode [ 256.211226][ T9967] bridge0: port 3(erspan0) entered disabled state [ 256.300314][ T9986] __nla_validate_parse: 3 callbacks suppressed [ 256.300333][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 256.322171][ T9988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1034'. [ 256.327782][ T9986] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1034'. [ 256.362856][ T9988] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1034'. [ 256.640621][T10010] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1039'. [ 256.691953][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 256.693297][T10010] netlink: 'syz.4.1039': attribute type 10 has an invalid length. [ 256.717202][T10017] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.742025][T10016] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1041'. [ 256.821894][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1038'. [ 256.871282][T10010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.961034][T10011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.052587][T10032] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 257.105791][T10035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1044'. [ 257.231621][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1045'. [ 257.597053][T10053] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 257.607077][ T5157] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 258.247099][T10080] syzkaller0: entered promiscuous mode [ 258.273691][T10080] syzkaller0: entered allmulticast mode [ 258.301294][T10085] veth1_to_bond: entered allmulticast mode [ 258.309297][T10084] veth1_to_bond: left allmulticast mode [ 259.994006][T10106] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 260.004803][T10106] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 260.279978][T10143] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 260.461952][T10153] tipc: Enabled bearer , priority 26 [ 260.509563][T10152] pim6reg: entered allmulticast mode [ 260.530854][T10152] pim6reg: left allmulticast mode [ 260.696685][T10164] netlink: 'syz.2.1074': attribute type 23 has an invalid length. [ 260.792276][T10161] pim6reg1: entered promiscuous mode [ 260.807209][T10161] pim6reg1: entered allmulticast mode [ 261.057729][T10180] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 261.119799][T10186] sock: sock_timestamping_bind_phc: sock not bind to device [ 261.141976][T10186] sctp: [Deprecated]: syz.0.1081 (pid 10186) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.141976][T10186] Use struct sctp_sack_info instead [ 261.181919][T10184] bond1: (slave gretap1): making interface the new active one [ 261.192332][T10184] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 261.245927][T10187] sctp: [Deprecated]: syz.0.1081 (pid 10187) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.245927][T10187] Use struct sctp_sack_info instead [ 261.452770][ T7456] tipc: Node number set to 2255229789 [ 261.480356][T10192] __nla_validate_parse: 4 callbacks suppressed [ 261.480377][T10192] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1082'. [ 261.602343][T10197] hsr0 speed is unknown, defaulting to 1000 [ 261.618969][T10197] lo speed is unknown, defaulting to 1000 [ 261.694622][T10211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'. [ 261.733498][T10211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'. [ 261.813203][T10212] hsr0 speed is unknown, defaulting to 1000 [ 261.823074][T10214] syzkaller0: entered promiscuous mode [ 261.828714][T10214] syzkaller0: entered allmulticast mode [ 261.829168][T10211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'. [ 261.857713][T10211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'. [ 261.926533][T10212] lo speed is unknown, defaulting to 1000 [ 262.040871][T10211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'. [ 262.051497][T10211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1086'. [ 262.471285][T10197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1084'. [ 262.986350][T10271] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 262.999127][T10271] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 263.597447][T10301] openvswitch: netlink: Message has 8 unknown bytes. [ 263.658825][T10299] dvmrp1: entered allmulticast mode [ 264.097822][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 264.132735][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1115'. [ 264.152192][T10320] netlink: 'syz.4.1115': attribute type 5 has an invalid length. [ 264.241869][T10325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.256769][T10325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.293743][ T1146] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.311589][ T1146] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.321719][ T1146] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.338515][ T1146] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.427818][T10325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.445008][T10325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.463477][T10328] netlink: 'syz.2.1118': attribute type 1 has an invalid length. [ 264.585429][T10325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.607423][T10325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.812195][T10342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.858443][T10342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.884733][T10342] batadv_slave_1: left promiscuous mode [ 265.049576][T10342] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 265.078930][T10342] bond1: left promiscuous mode [ 265.085012][T10342] geneve2: left promiscuous mode [ 265.193264][ T7460] lo speed is unknown, defaulting to 1000 [ 265.203451][ T7460] syz2: Port: 1 Link DOWN [ 265.240976][ T78] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.269005][ T78] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.298724][ T78] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.318268][ T78] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.334599][ T78] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.352928][ T78] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.361666][ T78] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 265.370528][ T78] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.484367][T10366] netlink: 'syz.1.1129': attribute type 30 has an invalid length. [ 265.544420][ T6320] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.559954][ T5836] IPVS: starting estimator thread 0... [ 265.568595][ T6320] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.611202][ T78] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.648576][ T78] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.673317][T10371] IPVS: using max 26 ests per chain, 62400 per kthread [ 265.706607][ T78] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.728194][ T78] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.763256][ T1001] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.784154][ T1001] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.078360][T10405] bridge0: port 3(veth0_to_bridge) entered blocking state [ 266.113288][T10405] bridge0: port 3(veth0_to_bridge) entered disabled state [ 266.131928][T10405] veth0_to_bridge: entered allmulticast mode [ 266.151827][T10405] veth0_to_bridge: entered promiscuous mode [ 266.379097][T10423] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 266.607022][T10433] nbd: must specify at least one socket [ 267.018501][T10456] __nla_validate_parse: 8 callbacks suppressed [ 267.018524][T10456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1156'. [ 267.128755][T10458] openvswitch: netlink: Duplicate or invalid key (type 0). [ 267.151183][T10458] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.330935][T10471] netlink: 'syz.2.1162': attribute type 4 has an invalid length. [ 267.340951][T10472] netlink: 'syz.2.1162': attribute type 4 has an invalid length. [ 267.532096][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 267.550537][T10482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'. [ 267.561922][T10482] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1166'. [ 267.808166][T10492] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1170'. [ 267.988337][T10502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1172'. [ 268.001640][T10502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1172'. [ 268.241663][T10511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1175'. [ 268.258823][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 268.284272][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.292078][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.312897][T10513] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 268.685626][T10490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.903723][ T37] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.912136][ T37] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.009385][ T37] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.052778][ T37] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.076412][ T37] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.120465][ T37] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.151573][ T37] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.170469][ T37] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.173900][T10525] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1179'. [ 269.205995][ T30] audit: type=1107 audit(1754179171.860:12): pid=10516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB¡' [ 269.563009][T10544] hsr0 speed is unknown, defaulting to 1000 [ 269.571826][T10544] lo speed is unknown, defaulting to 1000 [ 270.287718][T10566] dvmrp1: entered allmulticast mode [ 270.400596][T10572] netlink: 'syz.0.1194': attribute type 10 has an invalid length. [ 270.547486][T10578] hsr0 speed is unknown, defaulting to 1000 [ 270.560091][T10578] lo speed is unknown, defaulting to 1000 [ 270.648918][T10582] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 270.658284][T10583] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 270.671250][T10583] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 270.697792][T10582] netlink: 'syz.0.1196': attribute type 49 has an invalid length. [ 271.697922][ T5157] Bluetooth: hci4: link tx timeout [ 271.708258][ T5157] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 271.846204][T10633] netlink: 'syz.2.1208': attribute type 11 has an invalid length. [ 272.127454][ T1001] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.136253][ T1001] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.149918][ T1001] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.235366][T10645] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 272.235724][ T1001] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.961752][T10673] __nla_validate_parse: 15 callbacks suppressed [ 272.961773][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 273.232982][T10683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.292206][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 273.387837][T10683] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 273.420342][T10696] netlink: 'syz.3.1220': attribute type 1 has an invalid length. [ 273.460578][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 273.474484][T10699] syzkaller1: entered promiscuous mode [ 273.497135][T10699] syzkaller1: entered allmulticast mode [ 273.744821][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 273.767928][ T8371] Bluetooth: hci4: command 0x0405 tx timeout [ 273.789981][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 274.541216][T10736] warn_alloc: 1 callbacks suppressed [ 274.541235][T10736] syz.3.1231: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 274.577917][T10736] CPU: 1 UID: 0 PID: 10736 Comm: syz.3.1231 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 274.577947][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.577961][T10736] Call Trace: [ 274.577969][T10736] [ 274.577978][T10736] dump_stack_lvl+0x189/0x250 [ 274.578010][T10736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.578034][T10736] ? __pfx__printk+0x10/0x10 [ 274.578061][T10736] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 274.578087][T10736] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 274.578115][T10736] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 274.578143][T10736] warn_alloc+0x214/0x310 [ 274.578173][T10736] ? __pfx_warn_alloc+0x10/0x10 [ 274.578207][T10736] ? __get_vm_area_node+0x28f/0x300 [ 274.578242][T10736] ? xskq_create+0xbf/0x170 [ 274.578283][T10736] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 274.578340][T10736] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 274.578363][T10736] ? xskq_create+0x56/0x170 [ 274.578395][T10736] ? __kasan_kmalloc+0x93/0xb0 [ 274.578432][T10736] vmalloc_user_noprof+0xad/0xf0 [ 274.578454][T10736] ? xskq_create+0xbf/0x170 [ 274.578484][T10736] xskq_create+0xbf/0x170 [ 274.578517][T10736] xsk_init_queue+0xb0/0x110 [ 274.578549][T10736] xsk_setsockopt+0x57b/0x8d0 [ 274.578581][T10736] ? __pfx_xsk_setsockopt+0x10/0x10 [ 274.578608][T10736] ? __pfx_aa_sk_perm+0x10/0x10 [ 274.578638][T10736] ? __fget_files+0x2a/0x420 [ 274.578659][T10736] ? aa_sock_opt_perm+0x74/0x110 [ 274.578690][T10736] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 274.578715][T10736] ? __pfx_xsk_setsockopt+0x10/0x10 [ 274.578744][T10736] do_sock_setsockopt+0x17c/0x1b0 [ 274.578772][T10736] __x64_sys_setsockopt+0x13f/0x1b0 [ 274.578801][T10736] do_syscall_64+0xfa/0x3b0 [ 274.578832][T10736] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.578862][T10736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.578883][T10736] ? clear_bhb_loop+0x60/0xb0 [ 274.578910][T10736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.578931][T10736] RIP: 0033:0x7fe513f8eb69 [ 274.578950][T10736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.578969][T10736] RSP: 002b:00007fe514e49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 274.578993][T10736] RAX: ffffffffffffffda RBX: 00007fe5141b5fa0 RCX: 00007fe513f8eb69 [ 274.579008][T10736] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 274.579020][T10736] RBP: 00007fe514011df1 R08: 0000000000000004 R09: 0000000000000000 [ 274.579034][T10736] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.579047][T10736] R13: 0000000000000000 R14: 00007fe5141b5fa0 R15: 00007fff6adf1d98 [ 274.579076][T10736] [ 274.579083][T10736] Mem-Info: [ 274.784628][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1235'. [ 274.832732][T10736] active_anon:11451 inactive_anon:0 isolated_anon:0 [ 274.832732][T10736] active_file:1584 inactive_file:39903 isolated_file:0 [ 274.832732][T10736] unevictable:768 dirty:261 writeback:0 [ 274.832732][T10736] slab_reclaimable:11875 slab_unreclaimable:111689 [ 274.832732][T10736] mapped:32492 shmem:4391 pagetables:1210 [ 274.832732][T10736] sec_pagetables:0 bounce:0 [ 274.832732][T10736] kernel_misc_reclaimable:0 [ 274.832732][T10736] free:1290711 free_pcp:14394 free_cma:0 [ 274.933913][T10755] netlink: 'syz.1.1235': attribute type 7 has an invalid length. [ 274.941699][T10755] netlink: 'syz.1.1235': attribute type 8 has an invalid length. [ 274.965954][T10736] Node 0 active_anon:46784kB inactive_anon:0kB active_file:6336kB inactive_file:159412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130688kB dirty:1044kB writeback:0kB shmem:16772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13104kB pagetables:4580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 275.000918][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1235'. [ 275.022865][T10736] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 275.102524][T10736] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.135961][T10736] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 275.142581][T10736] Node 0 DMA32 free:1250260kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49436kB inactive_anon:0kB active_file:6336kB inactive_file:157584kB unevictable:1536kB writepending:1044kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:35012kB local_pcp:18524kB free_cma:0kB [ 275.176871][T10736] lowmem_reserve[]: 0 0 1 1 1 [ 275.181735][T10736] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 275.217713][T10736] lowmem_reserve[]: 0 0 0 0 0 [ 275.294604][T10736] Node 1 Normal free:3893688kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22276kB local_pcp:11652kB free_cma:0kB [ 275.345624][T10736] lowmem_reserve[]: 0 0 0 0 0 [ 275.350444][T10736] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 275.391818][T10736] Node 0 DMA32: 2*4kB (UE) 1*8kB (U) 4*16kB (UE) 1*32kB (E) 73*64kB (UE) 40*128kB (UME) 36*256kB (UME) 10*512kB (ME) 4*1024kB (UM) 4*2048kB (ME) 295*4096kB (UM) = 1244848kB [ 275.422731][T10736] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 275.452754][T10736] Node 1 Normal: 218*4kB (UE) 50*8kB (UME) 42*16kB (UME) 87*32kB (UME) 23*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3893688kB [ 275.501697][T10736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.588192][T10736] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.611703][T10736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 275.635850][T10736] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 275.657166][T10736] 45760 total pagecache pages [ 275.724175][T10736] 0 pages in swap cache [ 275.728401][T10736] Free swap = 124996kB [ 275.732575][T10736] Total swap = 124996kB [ 275.777416][T10736] 2097051 pages RAM [ 275.800991][T10736] 0 pages HighMem/MovableOnly [ 275.805848][T10736] 424872 pages reserved [ 275.810025][T10736] 0 pages cma reserved [ 276.027712][T10792] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 276.669886][T10825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1249'. [ 277.095301][T10849] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 277.115507][T10849] netlink: 'syz.0.1255': attribute type 13 has an invalid length. [ 277.161611][T10849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.217435][T10849] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.238540][T10849] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.254375][ T7449] lo speed is unknown, defaulting to 1000 [ 277.260227][ T7449] syz2: Port: 1 Link ACTIVE [ 277.270298][T10859] macsec1: entered promiscuous mode [ 277.335539][ T6320] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 277.340685][T10865] netlink: 'syz.0.1259': attribute type 11 has an invalid length. [ 277.352489][ T6320] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 277.355663][T10865] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1259'. [ 277.394565][ T6320] bond0: (slave geneve1): link status definitely down, disabling slave [ 277.422934][ T6320] bond0: (slave wlan1): link status definitely down, disabling slave [ 277.440538][ T6320] bond0: now running without any active interface! [ 277.626016][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1264'. [ 277.974403][T10898] __nla_validate_parse: 1 callbacks suppressed [ 277.974425][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 278.010017][T10902] netlink: 34 bytes leftover after parsing attributes in process `syz.4.1272'. [ 278.022014][T10899] netlink: 'syz.3.1271': attribute type 4 has an invalid length. [ 278.033698][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1272'. [ 278.049450][T10899] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1271'. [ 278.060341][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 278.061346][T10902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1272'. [ 278.194264][T10912] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1273'. [ 278.278640][T10923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1274'. [ 278.371339][T10926] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1276'. [ 278.511737][T10937] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1278'. [ 278.970146][T10957] hsr0 speed is unknown, defaulting to 1000 [ 279.014438][T10955] netlink: 'syz.3.1284': attribute type 10 has an invalid length. [ 279.028568][T10962] hsr0 speed is unknown, defaulting to 1000 [ 279.036625][T10957] lo speed is unknown, defaulting to 1000 [ 279.102417][T10962] lo speed is unknown, defaulting to 1000 [ 279.409076][T10967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.476925][T10967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.818133][T10977] hsr0 speed is unknown, defaulting to 1000 [ 279.859504][T10977] lo speed is unknown, defaulting to 1000 [ 280.902182][T11022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.929596][T11022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.944422][T11022] bond0 (unregistering): Released all slaves [ 282.229183][T11113] tipc: Enabled bearer , priority 0 [ 282.241836][T11113] syzkaller0: entered promiscuous mode [ 282.250355][T11113] syzkaller0: entered allmulticast mode [ 282.291835][ T6317] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 282.310984][ T6317] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 282.333892][T11113] tipc: Resetting bearer [ 282.341234][ T6317] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 282.357072][ T6317] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 282.375096][T11114] tipc: Enabled bearer , priority 0 [ 282.389142][T11117] netlink: 'syz.0.1329': attribute type 10 has an invalid length. [ 282.402262][T11117] team0: Port device geneve0 added [ 282.424407][ T1001] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.452318][ T1001] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.478786][T11118] syzkaller0: entered promiscuous mode [ 282.499194][T11118] syzkaller0: entered allmulticast mode [ 282.528562][ T1001] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.564514][ T1001] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.585371][T11112] tipc: Resetting bearer [ 282.647993][T11112] tipc: Disabling bearer [ 282.689688][T11110] tipc: Resetting bearer [ 282.711492][T11110] tipc: Disabling bearer [ 282.867882][T11139] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 282.926415][T11139] bond0: entered promiscuous mode [ 282.932092][T11139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.164713][T11158] siw: device registration error -23 [ 283.337399][T11164] __nla_validate_parse: 6 callbacks suppressed [ 283.337418][T11164] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1341'. [ 283.450015][T11168] hsr0 speed is unknown, defaulting to 1000 [ 283.516624][T11168] lo speed is unknown, defaulting to 1000 [ 283.554315][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 283.656229][T11179] netlink: 'syz.4.1346': attribute type 32 has an invalid length. [ 283.835255][T11186] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1348'. [ 283.850990][T11179] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.011214][T11196] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1351'. [ 284.031121][T11193] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1349'. [ 284.078860][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1352'. [ 284.115679][T11179] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.173414][T11193] bond0: entered promiscuous mode [ 284.178797][T11193] bond_slave_0: entered promiscuous mode [ 284.185584][T11193] bond_slave_1: entered promiscuous mode [ 284.191686][T11193] geneve1: entered promiscuous mode [ 284.198370][T11193] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 284.210737][T11193] bond0: left promiscuous mode [ 284.219457][T11193] bond_slave_0: left promiscuous mode [ 284.229770][T11193] bond_slave_1: left promiscuous mode [ 284.238584][T11193] geneve1: left promiscuous mode [ 284.247622][T11193] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 284.296638][T11179] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.415796][T11179] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 284.498727][T11212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 284.605612][ T6320] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.625190][T11214] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1356'. [ 284.665461][ T1146] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.700318][ T1146] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.742107][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 284.776752][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1358'. [ 284.899802][T11225] hsr0 speed is unknown, defaulting to 1000 [ 284.909891][T11219] netlink: 'syz.0.1357': attribute type 1 has an invalid length. [ 284.947538][T11225] lo speed is unknown, defaulting to 1000 [ 284.971596][T11219] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1357'. [ 285.154798][T11235] netlink: 'syz.3.1361': attribute type 1 has an invalid length. [ 285.245922][T11235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.377720][T11245] bond0: (slave ip6gretap0): making interface the new active one [ 285.388318][T11245] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 285.413005][T11238] hsr0 speed is unknown, defaulting to 1000 [ 285.421301][T11238] lo speed is unknown, defaulting to 1000 [ 285.676873][T11232] erspan0: entered allmulticast mode [ 285.697952][T11232] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 286.928194][T11302] tipc: Enabled bearer , priority 0 [ 286.936697][T11302] syzkaller0: entered promiscuous mode [ 286.942197][T11302] syzkaller0: entered allmulticast mode [ 286.969140][T11302] tipc: Resetting bearer [ 286.995990][T11302] IPv6: sit2: Disabled Multicast RS [ 287.012446][T11302] sit2: entered allmulticast mode [ 287.076783][T11305] pim6reg1: entered promiscuous mode [ 287.082198][T11305] pim6reg1: entered allmulticast mode [ 287.150160][T11301] tipc: Resetting bearer [ 287.206842][T11301] tipc: Disabling bearer [ 287.600726][T11320] hsr0 speed is unknown, defaulting to 1000 [ 287.664935][T11320] lo speed is unknown, defaulting to 1000 [ 287.909308][T11344] vlan2: entered promiscuous mode [ 287.915457][T11344] vlan2: entered allmulticast mode [ 287.920702][T11344] hsr_slave_1: entered allmulticast mode [ 288.149018][T11352] netlink: 'syz.0.1392': attribute type 13 has an invalid length. [ 288.259941][ T7459] lo speed is unknown, defaulting to 1000 [ 288.268937][ T78] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.277891][ T7459] syz2: Port: 1 Link DOWN [ 288.292502][ T78] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.309143][ T78] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.319841][ T78] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.461242][T11361] __nla_validate_parse: 8 callbacks suppressed [ 288.461265][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 288.924068][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 289.959631][T11378] batman_adv: batadv0: Adding interface: macvlan2 [ 289.966241][T11378] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.996487][T11378] batman_adv: batadv0: Interface activated: macvlan2 [ 290.171028][T11390] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1403'. [ 290.195457][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1403'. [ 290.209022][T11383] hsr0 speed is unknown, defaulting to 1000 [ 290.221440][T11390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1403'. [ 290.253205][T11383] lo speed is unknown, defaulting to 1000 [ 290.293596][T11395] veth1_to_bond: entered allmulticast mode [ 290.317673][T11395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1402'. [ 290.326573][T11397] netlink: 'syz.2.1404': attribute type 3 has an invalid length. [ 290.328531][T11397] netlink: 'syz.2.1404': attribute type 1 has an invalid length. [ 290.379138][T11399] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1405'. [ 290.509266][T11395] veth1_to_bond (unregistering): left allmulticast mode [ 291.283940][T11437] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1414'. [ 292.330638][T11471] netlink: 'syz.2.1423': attribute type 15 has an invalid length. [ 292.373523][T11471] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1423'. [ 292.526253][T11484] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1427'. [ 292.668990][T11490] netlink: 'syz.0.1430': attribute type 1 has an invalid length. [ 292.677937][T11490] netlink: 'syz.0.1430': attribute type 2 has an invalid length. [ 292.696044][T11486] netem: unknown loss type 0 [ 292.701121][T11486] netem: change failed [ 292.938439][T11504] netlink: 'syz.2.1436': attribute type 21 has an invalid length. [ 293.083071][T11502] netlink: 'syz.4.1435': attribute type 10 has an invalid length. [ 293.125744][T11502] team0: Port device dummy0 added [ 293.531602][T11522] __nla_validate_parse: 6 callbacks suppressed [ 293.531622][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1443'. [ 293.686277][T11539] batadv_slave_0: entered promiscuous mode [ 293.765429][T11524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1442'. [ 293.952024][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1451'. [ 293.962072][T11555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1451'. [ 294.014835][T11555] pim6reg: entered allmulticast mode [ 294.042291][T11523] batadv_slave_0: left promiscuous mode [ 294.086155][T11557] netlink: 4976 bytes leftover after parsing attributes in process `syz.0.1453'. [ 294.377585][T11581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1459'. [ 294.458785][T11586] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 294.470794][T11585] hsr0 speed is unknown, defaulting to 1000 [ 294.503943][T11585] lo speed is unknown, defaulting to 1000 [ 294.922097][T11603] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1464'. [ 294.986990][T11604] hsr0 speed is unknown, defaulting to 1000 [ 294.995453][T11604] lo speed is unknown, defaulting to 1000 [ 295.240708][T11624] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 295.273355][T11625] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 295.419520][T11624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.717734][T11644] hsr0 speed is unknown, defaulting to 1000 [ 295.731263][T11644] lo speed is unknown, defaulting to 1000 [ 295.776958][T11645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1475'. [ 296.090850][T11661] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1477'. [ 296.726153][T11692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 296.746677][T11689] netlink: 'syz.0.1483': attribute type 19 has an invalid length. [ 297.402265][T11711] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 297.782139][T11736] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 298.334914][T11765] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.342261][T11765] IPv6: NLM_F_CREATE should be set when creating new route [ 298.349766][T11765] IPv6: NLM_F_CREATE should be set when creating new route [ 298.395000][T11767] tipc: Enabling of bearer rejected, already enabled [ 298.411452][T11767] syzkaller0: entered promiscuous mode [ 298.420407][T11767] syzkaller0: entered allmulticast mode [ 298.702197][T11783] tipc: Resetting bearer [ 298.723849][T11786] __nla_validate_parse: 9 callbacks suppressed [ 298.723869][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 298.752054][T11783] syzkaller0: left promiscuous mode [ 298.757529][T11783] syzkaller0: left allmulticast mode [ 298.817219][T11783] batman_adv: batadv0: Interface deactivated: macvlan2 [ 298.852108][ T6317] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 298.889440][ T6317] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 298.918432][ T6317] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 298.937457][T11792] netlink: 'syz.0.1507': attribute type 10 has an invalid length. [ 298.957789][ T6317] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 299.017825][T11802] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20002 [ 299.117811][T11807] netlink: 'syz.2.1511': attribute type 3 has an invalid length. [ 299.178507][T11807] netlink: 'syz.2.1511': attribute type 3 has an invalid length. [ 299.310796][T11824] bond0: option all_slaves_active: invalid value (3) [ 299.319410][T11824] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 299.327981][T11824] netlink: 'syz.0.1517': attribute type 10 has an invalid length. [ 299.356604][T11824] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 299.515654][T11840] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1519'. [ 299.525063][T11840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 299.746300][T11853] tipc: Enabling of bearer rejected, already enabled [ 300.499187][T11864] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1527'. [ 300.574856][T11902] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1538'. [ 300.637800][T11905] pimreg: entered allmulticast mode [ 300.918392][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1544'. [ 301.300455][T11941] bond4: entered promiscuous mode [ 301.306430][T11941] bond4: entered allmulticast mode [ 301.317614][T11941] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.531490][T11955] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1551'. [ 301.541547][T11956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1550'. [ 301.817838][T11970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1556'. [ 301.901273][T11972] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1557'. [ 302.114557][T11988] netlink: 'syz.1.1562': attribute type 1 has an invalid length. [ 302.124353][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1562'. [ 302.156699][T11987] netlink: 'syz.0.1563': attribute type 29 has an invalid length. [ 302.166620][T11987] netlink: 'syz.0.1563': attribute type 29 has an invalid length. [ 302.409421][T12000] tipc: Enabling of bearer rejected, already enabled [ 302.461616][T12003] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 302.544724][ T30] audit: type=1800 audit(1754179205.200:13): pid=11978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1554" name="cgroup.controllers" dev="tmpfs" ino=1633 res=0 errno=0 [ 305.730376][T12023] __nla_validate_parse: 1 callbacks suppressed [ 305.730397][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1572'. [ 305.788184][T12026] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1574'. [ 306.312157][T12043] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1580'. [ 307.274116][T12054] netlink: 'syz.3.1581': attribute type 3 has an invalid length. [ 310.512211][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1586'. [ 310.611139][T12078] netlink: 'syz.4.1585': attribute type 1 has an invalid length. [ 310.621454][T12078] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1585'. [ 310.766588][T12093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1592'. [ 311.158616][T12114] ipvlan2: entered promiscuous mode [ 311.166012][T12114] bridge0: port 1(ipvlan2) entered blocking state [ 311.172578][T12114] bridge0: port 1(ipvlan2) entered disabled state [ 311.182013][T12114] ipvlan2: entered allmulticast mode [ 311.193216][T12108] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1598'. [ 311.283297][T12114] ip6gretap0: entered allmulticast mode [ 311.295009][T12114] ipvlan2: left allmulticast mode [ 311.308025][T12114] ip6gretap0: left allmulticast mode [ 311.538693][ T30] audit: type=1804 audit(1754179214.170:14): pid=12117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1600" name="memory.events" dev="tmpfs" ino=1698 res=1 errno=0 [ 311.571465][ T30] audit: type=1800 audit(1754179214.170:15): pid=12117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1600" name="memory.events" dev="tmpfs" ino=1698 res=0 errno=0 [ 311.698729][T12126] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 311.909770][T12140] hsr0 speed is unknown, defaulting to 1000 [ 311.920977][T12140] lo speed is unknown, defaulting to 1000 [ 312.028894][T12146] veth0_to_bond: entered allmulticast mode [ 312.104834][T12154] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1608'. [ 312.168457][T12157] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 312.194195][T12157] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 312.224479][T12159] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1613'. [ 312.297510][T12163] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1615'. [ 312.316209][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 312.328417][T12165] netlink: 'syz.2.1616': attribute type 30 has an invalid length. [ 312.346663][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1616'. [ 312.346953][ T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.356032][T12165] netlink: 'syz.2.1616': attribute type 30 has an invalid length. [ 312.393515][ T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.422226][ T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.452579][T12169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1617'. [ 312.473858][T12169] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1617'. [ 312.499592][ T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.603443][T12180] netlink: 'syz.1.1620': attribute type 2 has an invalid length. [ 312.766095][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1621'. [ 312.921441][T12187] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.954304][T12191] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 312.978640][T12191] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 312.993275][T12193] IPv6: syztnl1: Disabled Multicast RS [ 313.007744][T12203] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 313.389884][T12215] tipc: Enabling of bearer rejected, failed to enable media [ 313.817523][T12232] siw: device registration error -23 [ 314.467059][T12267] gretap0: left promiscuous mode [ 314.485582][T12267] gretap0: left allmulticast mode [ 314.499548][T12267] veth0_vlan: left allmulticast mode [ 314.539727][T12267] geneve2: left promiscuous mode [ 314.600930][T12267] gtp0: left promiscuous mode [ 314.705206][T12281] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 314.713611][T12281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.788738][ T1001] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.826104][T12268] hsr0 speed is unknown, defaulting to 1000 [ 314.832216][ T1001] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.855320][T12268] lo speed is unknown, defaulting to 1000 [ 314.862836][ T1001] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.884132][ T1001] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.979028][T12283] netlink: 'syz.0.1646': attribute type 4 has an invalid length. [ 315.600788][T12320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 315.608145][T12320] IPv6: NLM_F_CREATE should be set when creating new route [ 315.867143][T12328] __nla_validate_parse: 7 callbacks suppressed [ 315.867163][T12328] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1655'. [ 316.094220][T12344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1660'. [ 316.146522][T12345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'. [ 316.196363][T12355] netlink: 'syz.0.1662': attribute type 13 has an invalid length. [ 316.227960][T12355] netlink: 'syz.0.1662': attribute type 17 has an invalid length. [ 316.476258][T12369] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1666'. [ 316.480556][T12355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.497097][T12370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1667'. [ 316.508518][T12370] netlink: 'syz.4.1667': attribute type 7 has an invalid length. [ 316.520141][T12355] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.528686][T12370] netlink: 'syz.4.1667': attribute type 8 has an invalid length. [ 316.541778][T12355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.542952][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1667'. [ 316.566303][ T7441] lo speed is unknown, defaulting to 1000 [ 316.569258][T12373] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1666'. [ 316.572057][ T7441] syz2: Port: 1 Link ACTIVE [ 316.749025][T12378] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1669'. [ 316.825371][T12386] netlink: 1360 bytes leftover after parsing attributes in process `syz.3.1672'. [ 316.856942][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1672'. [ 317.086965][T12397] hsr0 speed is unknown, defaulting to 1000 [ 317.115970][T12397] lo speed is unknown, defaulting to 1000 [ 317.426172][T12411] macvlan3: entered promiscuous mode [ 317.446227][T12411] macvlan3: entered allmulticast mode [ 318.069018][T12452] netlink: 'syz.4.1689': attribute type 9 has an invalid length. [ 318.103479][T12452] netlink: 'syz.4.1689': attribute type 7 has an invalid length. [ 318.126721][T12452] netlink: 'syz.4.1689': attribute type 8 has an invalid length. [ 318.408398][T12467] hsr0 speed is unknown, defaulting to 1000 [ 318.452316][T12467] lo speed is unknown, defaulting to 1000 [ 318.954215][ T30] audit: type=1800 audit(1754179221.600:16): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1698" name="blkio.bfq.io_queued_recursive" dev="tmpfs" ino=1762 res=0 errno=0 [ 319.017704][T12492] ipvlan2: entered promiscuous mode [ 319.187562][T12496] tipc: Enabled bearer , priority 0 [ 319.196284][T12497] tipc: Enabling of bearer rejected, already enabled [ 319.206692][T12496] syzkaller0: entered promiscuous mode [ 319.212286][T12496] syzkaller0: entered allmulticast mode [ 319.341248][T12496] tipc: Resetting bearer [ 319.364977][T12495] tipc: Resetting bearer [ 319.398951][T12495] tipc: Disabling bearer [ 319.967253][T12535] netlink: 'syz.1.1715': attribute type 1 has an invalid length. [ 320.002239][T12532] 8021q: adding VLAN 0 to HW filter on device bond4 [ 320.090884][T12535] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 320.371137][T12568] tipc: Enabled bearer , priority 0 [ 320.405993][T12568] syzkaller0: entered promiscuous mode [ 320.448621][T12568] syzkaller0: entered allmulticast mode [ 320.481111][T12571] tipc: New replicast peer: 255.255.255.255 [ 320.503546][T12571] tipc: Enabled bearer , priority 26 [ 320.539187][T12564] tipc: Resetting bearer [ 320.596267][T12564] tipc: Disabling bearer [ 323.526806][T12590] __nla_validate_parse: 13 callbacks suppressed [ 323.526827][T12590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1727'. [ 323.621361][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'. [ 323.766209][T12589] hsr0 speed is unknown, defaulting to 1000 [ 323.814721][T12589] lo speed is unknown, defaulting to 1000 [ 323.876842][T12606] netlink: 'syz.3.1730': attribute type 21 has an invalid length. [ 324.309963][T12619] macvlan1: entered promiscuous mode [ 324.327535][T12619] macvlan1: left promiscuous mode [ 324.868148][T12659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1743'. [ 325.135352][T12662] hsr0 speed is unknown, defaulting to 1000 [ 325.159898][T12662] lo speed is unknown, defaulting to 1000 [ 325.228724][T12672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.684508][T12679] block nbd1: server does not support multiple connections per device. [ 325.694902][T12679] block nbd1: shutting down sockets [ 325.737192][T12688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.850245][T12696] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1750'. [ 325.907451][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 325.937182][T12701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1752'. [ 326.033973][T12701] geneve3: entered promiscuous mode [ 326.042368][T12701] geneve3: entered allmulticast mode [ 326.062256][ T78] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.112701][ T78] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.121655][ T78] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.160370][ T78] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.184982][T12704] hsr0 speed is unknown, defaulting to 1000 [ 326.197592][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 326.213774][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1754'. [ 326.223654][T12704] lo speed is unknown, defaulting to 1000 [ 326.313302][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1757'. [ 326.344619][T12721] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 326.560826][T12734] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1759'. [ 326.659503][T12738] netlink: 'syz.3.1761': attribute type 13 has an invalid length. [ 327.060360][T12751] syzkaller0: entered promiscuous mode [ 327.085463][T12751] syzkaller0: entered allmulticast mode [ 327.524806][T12777] netlink: 'syz.3.1769': attribute type 9 has an invalid length. [ 327.534356][T12777] netlink: 'syz.3.1769': attribute type 7 has an invalid length. [ 327.542139][T12777] netlink: 'syz.3.1769': attribute type 8 has an invalid length. [ 328.791438][T12769] sch_fq: defrate 2 ignored. [ 328.798590][T12774] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 329.114299][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 329.167235][T12800] netlink: 'syz.4.1775': attribute type 5 has an invalid length. [ 329.213907][T12800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1775'. [ 329.367657][T12800] geneve4: entered promiscuous mode [ 329.373669][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1783'. [ 329.396395][T12800] geneve4: entered allmulticast mode [ 329.457685][ T1165] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 329.494745][ T1165] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 329.568543][ T1096] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 329.597708][ T1096] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 329.766609][T12832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1786'. [ 329.782489][T12832] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1786'. [ 330.501842][T12831] netlink: 'syz.0.1786': attribute type 7 has an invalid length. [ 330.555010][T12843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1788'. [ 330.603837][T12831] netlink: 'syz.0.1786': attribute type 8 has an invalid length. [ 330.800423][T12845] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 331.112286][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1794'. [ 331.242119][T12869] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.304788][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 331.315698][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1796'. [ 331.612297][T12886] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 331.666219][T12888] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1800'. [ 332.388096][T12917] hsr0 speed is unknown, defaulting to 1000 [ 332.404824][T12917] lo speed is unknown, defaulting to 1000 [ 332.505327][T12921] hsr0 speed is unknown, defaulting to 1000 [ 332.763432][T12921] lo speed is unknown, defaulting to 1000 [ 332.885355][ T5157] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 333.088464][T12932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.666330][T12942] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 333.911711][T12963] atomic_op ffff88805761a198 conn xmit_atomic 0000000000000000 [ 333.934513][T12954] hsr0 speed is unknown, defaulting to 1000 [ 334.051872][T12964] hsr0 speed is unknown, defaulting to 1000 [ 334.080184][T12954] lo speed is unknown, defaulting to 1000 [ 334.291253][T12964] lo speed is unknown, defaulting to 1000 [ 334.451825][T12992] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 334.711759][T12997] dvmrp8: entered allmulticast mode [ 334.743925][T12995] dvmrp8: left allmulticast mode [ 334.862242][T13005] __nla_validate_parse: 6 callbacks suppressed [ 334.862261][T13005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1833'. [ 335.104559][T13014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1835'. [ 335.246323][T13030] batadv_slave_1: entered promiscuous mode [ 335.277051][T13028] batadv_slave_1: left promiscuous mode [ 335.404976][T13037] tipc: Enabled bearer , priority 0 [ 335.476903][T13045] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1843'. [ 335.498270][T13049] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1840'. [ 335.515334][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1843'. [ 335.533616][T13049] syzkaller0: entered promiscuous mode [ 335.539129][T13049] syzkaller0: entered allmulticast mode [ 335.585077][T13049] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 335.665472][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 335.693697][ T5157] Bluetooth: hci4: command 0x0405 tx timeout [ 335.702251][T13049] tipc: Resetting bearer [ 335.746521][T13034] tipc: Resetting bearer [ 335.835663][T13058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 335.879472][T13034] tipc: Disabling bearer [ 335.914517][T13060] netlink: 'syz.3.1847': attribute type 6 has an invalid length. [ 336.370054][T13092] netlink: 410 bytes leftover after parsing attributes in process `syz.1.1856'. [ 336.869538][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1864'. [ 337.041813][T13129] bond0: (slave erspan0): Releasing active interface [ 337.056279][T13129] ip6gretap0: entered promiscuous mode [ 337.067563][T13129] bridge_slave_0: left allmulticast mode [ 337.076512][T13129] bridge_slave_0: left promiscuous mode [ 337.082432][T13129] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.100415][T13129] bridge_slave_1: left allmulticast mode [ 337.108453][T13129] bridge_slave_1: left promiscuous mode [ 337.119248][T13129] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.138591][T13129] team0: Port device team_slave_0 removed [ 337.150238][T13129] team0: Port device team_slave_1 removed [ 337.160642][T13129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.193921][T13129] team0: Port device macvlan0 removed [ 337.201183][T13129] bond3: (slave veth9): Releasing active interface [ 337.228486][T13129] bond0: (slave ip6gretap0): Releasing active interface [ 337.251791][T13139] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1870'. [ 337.262578][T13129] ip6gretap0: left promiscuous mode [ 337.272181][T13136] netlink: 'syz.3.1867': attribute type 13 has an invalid length. [ 337.300154][ T1096] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.313061][ T1096] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.323086][ T7459] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.339987][T13136] netlink: 'syz.3.1867': attribute type 13 has an invalid length. [ 337.981869][T13179] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 338.003827][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 338.018160][T13179] netlink: 'syz.3.1884': attribute type 13 has an invalid length. [ 338.083317][ T5891] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 338.541811][T13214] netlink: 'syz.4.1894': attribute type 10 has an invalid length. [ 338.651935][T13216] hsr0 speed is unknown, defaulting to 1000 [ 338.659861][T13216] lo speed is unknown, defaulting to 1000 [ 339.264564][T13240] hsr0 speed is unknown, defaulting to 1000 [ 339.325984][T13240] lo speed is unknown, defaulting to 1000 [ 339.439314][T13243] hsr0 speed is unknown, defaulting to 1000 [ 339.525753][T13251] netlink: 'syz.1.1902': attribute type 1 has an invalid length. [ 339.607611][T13243] lo speed is unknown, defaulting to 1000 [ 340.111408][T13246] __nla_validate_parse: 11 callbacks suppressed [ 340.111428][T13246] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1900'. [ 340.222018][T13271] hsr0 speed is unknown, defaulting to 1000 [ 340.307226][T13271] lo speed is unknown, defaulting to 1000 [ 340.596228][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1909'. [ 340.643696][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 340.892102][T13296] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1911'. [ 340.905777][T13296] syzkaller0: entered promiscuous mode [ 340.911287][T13296] syzkaller0: entered allmulticast mode [ 341.055363][T13298] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 341.128161][T13304] pimreg3: entered allmulticast mode [ 341.682939][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 341.829323][T13335] hsr0 speed is unknown, defaulting to 1000 [ 341.858211][T13335] lo speed is unknown, defaulting to 1000 [ 342.241891][T13347] netlink: 'syz.4.1925': attribute type 10 has an invalid length. [ 342.690119][T13352] netlink: 'syz.1.1927': attribute type 12 has an invalid length. [ 342.741207][T13352] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1927'. [ 343.086114][T13335] netlink: 'syz.3.1922': attribute type 6 has an invalid length. [ 343.180459][T13339] hsr0 speed is unknown, defaulting to 1000 [ 343.279554][T13339] lo speed is unknown, defaulting to 1000 [ 343.825383][T13373] sctp: [Deprecated]: syz.4.1931 (pid 13373) Use of int in maxseg socket option. [ 343.825383][T13373] Use struct sctp_assoc_value instead [ 343.937941][T13375] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1932'. [ 344.088882][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 344.119698][T13379] veth0_to_bridge: left allmulticast mode [ 344.138801][T13379] veth0_to_bridge: left promiscuous mode [ 344.147839][T13379] bridge0: port 3(veth0_to_bridge) entered disabled state [ 344.167377][T13379] bridge_slave_1: left allmulticast mode [ 344.177940][T13379] bridge_slave_1: left promiscuous mode [ 344.186451][T13379] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.200543][T13379] bridge_slave_0: left allmulticast mode [ 344.209337][T13379] bridge_slave_0: left promiscuous mode [ 344.220090][T13379] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.590536][T13393] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1935'. [ 344.600627][T13387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1935'. [ 344.776557][T13401] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 344.778437][T13404] netlink: 'syz.4.1941': attribute type 8 has an invalid length. [ 344.832851][T13406] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1941'. [ 344.842290][T13406] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 344.855143][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 345.065796][T13417] netlink: 'syz.1.1945': attribute type 2 has an invalid length. [ 346.391562][T13458] hsr0 speed is unknown, defaulting to 1000 [ 346.414705][T13458] lo speed is unknown, defaulting to 1000 [ 346.845496][T13476] openvswitch: netlink: Message has 4 unknown bytes. [ 346.884296][T13476] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1959'. [ 347.362781][ T8371] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 347.651025][T13499] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1968'. [ 347.697465][T13499] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1968'. [ 347.706929][T13499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1968'. [ 347.777127][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1968'. [ 347.811866][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1968'. [ 347.822450][T13507] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1967'. [ 347.867838][T13506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1969'. [ 348.199218][T13520] sctp: [Deprecated]: syz.0.1973 (pid 13520) Use of int in max_burst socket option. [ 348.199218][T13520] Use struct sctp_assoc_value instead [ 348.214773][T13521] sctp: [Deprecated]: syz.0.1973 (pid 13521) Use of int in max_burst socket option. [ 348.214773][T13521] Use struct sctp_assoc_value instead [ 348.237216][T13520] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (3) [ 348.568660][T13528] netlink: 'syz.4.1976': attribute type 15 has an invalid length. [ 348.682278][T13541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1980'. [ 348.700911][T13541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1980'. [ 348.716568][T13541] !: entered promiscuous mode [ 348.722562][T13541] team0: entered promiscuous mode [ 348.729028][T13541] team_slave_0: entered promiscuous mode [ 348.736275][T13541] team_slave_1: entered promiscuous mode [ 348.742399][T13541] geneve0: entered promiscuous mode [ 348.749690][T13541] hsr1: Slave A (0!) is not up; please bring it up to get a fully working HSR network [ 348.760024][T13541] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 349.331638][T13565] geneve2: entered promiscuous mode [ 349.340179][ T1146] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.371532][ T1146] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.393068][ T1146] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.401325][ T1146] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.466479][T13574] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 349.509036][T13574] netlink: 'syz.1.1992': attribute type 1 has an invalid length. [ 349.731032][T13592] netlink: 'syz.0.1999': attribute type 4 has an invalid length. [ 349.755670][ T7441] lo speed is unknown, defaulting to 1000 [ 349.773148][T13592] netlink: 'syz.0.1999': attribute type 4 has an invalid length. [ 349.784905][ T7441] syz2: Port: 1 Link DOWN [ 349.808225][ T7441] lo speed is unknown, defaulting to 1000 [ 349.831312][ T7441] syz2: Port: 1 Link ACTIVE [ 349.845705][ T8332] ------------[ cut here ]------------ [ 349.851643][ T8332] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 349.878664][ T8332] WARNING: CPU: 1 PID: 8332 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 349.889226][ T8332] Modules linked in: [ 349.893766][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: kworker/u8:12 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 349.905540][T13603] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 349.905830][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.923986][ T8332] Workqueue: bond0 bond_mii_monitor [ 349.929248][ T8332] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 349.935552][ T8332] Code: 7c fe ff ff e8 de d8 5d f8 c6 05 d7 a6 28 06 01 90 48 c7 c7 e0 11 92 8c 48 c7 c6 d2 0c 9c 8d ba 48 00 00 00 e8 6e 7c 21 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 349.940233][T13603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 349.955220][ T8332] RSP: 0018:ffffc90002f27670 EFLAGS: 00010246 [ 349.955249][ T8332] RAX: 77a7acf9a3605300 RBX: ffff8880240f8000 RCX: ffff8880273cda00 [ 349.955269][ T8332] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 349.955291][ T8332] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 349.955305][ T8332] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: 1ffff1100481f05d [ 349.955324][ T8332] R13: dffffc0000000000 R14: ffffffff8ca08b48 R15: 0000000000000000 [ 349.955341][ T8332] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 349.955361][ T8332] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.955378][ T8332] CR2: 0000555577826808 CR3: 0000000076d30000 CR4: 00000000003526f0 [ 349.955402][ T8332] Call Trace: [ 349.955413][ T8332] [ 349.955423][ T8332] ? ethtool_op_get_link+0xd/0x70 [ 349.955456][ T8332] ethtool_op_get_link+0x15/0x70 [ 349.955479][ T8332] bond_check_dev_link+0x447/0x6c0 [ 349.955520][ T8332] ? __pfx_bond_check_dev_link+0x10/0x10 [ 349.955567][ T8332] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 349.955607][ T8332] bond_mii_monitor+0x428/0x2e00 [ 349.955650][ T8332] ? bond_mii_monitor+0x153/0x2e00 [ 349.955699][ T8332] ? __pfx_bond_mii_monitor+0x10/0x10 [ 349.955733][ T8332] ? register_lock_class+0x51/0x320 [ 349.955772][ T8332] ? __lock_acquire+0xab9/0xd20 [ 349.955816][ T8332] ? process_scheduled_works+0x9ef/0x17b0 [ 350.100167][ T8332] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.105457][ T8332] ? process_scheduled_works+0x9ef/0x17b0 [ 350.111220][ T8332] ? process_scheduled_works+0x9ef/0x17b0 [ 350.117026][ T8332] process_scheduled_works+0xae1/0x17b0 [ 350.122704][ T8332] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.128751][ T8332] worker_thread+0x8a0/0xda0 [ 350.133453][ T8332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 350.139839][ T8332] ? __kthread_parkme+0x7b/0x200 [ 350.144886][ T8332] kthread+0x70e/0x8a0 [ 350.148999][ T8332] ? __pfx_worker_thread+0x10/0x10 [ 350.154210][ T8332] ? __pfx_kthread+0x10/0x10 [ 350.158843][ T8332] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.164158][ T8332] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.169410][ T8332] ? __pfx_kthread+0x10/0x10 [ 350.174079][ T8332] ret_from_fork+0x3fc/0x770 [ 350.178718][ T8332] ? __pfx_ret_from_fork+0x10/0x10 [ 350.183932][ T8332] ? __switch_to_asm+0x39/0x70 [ 350.188819][ T8332] ? __switch_to_asm+0x33/0x70 [ 350.193871][ T8332] ? __pfx_kthread+0x10/0x10 [ 350.198500][ T8332] ret_from_fork_asm+0x1a/0x30 [ 350.203363][ T8332] [ 350.206443][ T8332] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 350.213756][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: kworker/u8:12 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 350.225723][ T8332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.235804][ T8332] Workqueue: bond0 bond_mii_monitor [ 350.241054][ T8332] Call Trace: [ 350.244370][ T8332] [ 350.247327][ T8332] dump_stack_lvl+0x99/0x250 [ 350.251963][ T8332] ? __asan_memcpy+0x40/0x70 [ 350.256584][ T8332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.261803][ T8332] ? __pfx__printk+0x10/0x10 [ 350.266422][ T8332] panic+0x2db/0x790 [ 350.270347][ T8332] ? __pfx_panic+0x10/0x10 [ 350.274793][ T8332] ? ret_from_fork_asm+0x1a/0x30 [ 350.279751][ T8332] __warn+0x31b/0x4b0 [ 350.283752][ T8332] ? __linkwatch_sync_dev+0x303/0x350 [ 350.289142][ T8332] ? __linkwatch_sync_dev+0x303/0x350 [ 350.294529][ T8332] report_bug+0x2be/0x4f0 [ 350.298876][ T8332] ? __linkwatch_sync_dev+0x303/0x350 [ 350.304281][ T8332] ? __linkwatch_sync_dev+0x303/0x350 [ 350.309681][ T8332] ? __linkwatch_sync_dev+0x305/0x350 [ 350.315063][ T8332] handle_bug+0x84/0x160 [ 350.319330][ T8332] exc_invalid_op+0x1a/0x50 [ 350.323840][ T8332] asm_exc_invalid_op+0x1a/0x20 [ 350.328709][ T8332] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 350.334712][ T8332] Code: 7c fe ff ff e8 de d8 5d f8 c6 05 d7 a6 28 06 01 90 48 c7 c7 e0 11 92 8c 48 c7 c6 d2 0c 9c 8d ba 48 00 00 00 e8 6e 7c 21 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 350.354360][ T8332] RSP: 0018:ffffc90002f27670 EFLAGS: 00010246 [ 350.360445][ T8332] RAX: 77a7acf9a3605300 RBX: ffff8880240f8000 RCX: ffff8880273cda00 [ 350.368441][ T8332] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 350.376420][ T8332] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 350.384399][ T8332] R10: dffffc0000000000 R11: fffffbfff1bfa5cc R12: 1ffff1100481f05d [ 350.392381][ T8332] R13: dffffc0000000000 R14: ffffffff8ca08b48 R15: 0000000000000000 [ 350.400375][ T8332] ? ethtool_op_get_link+0xd/0x70 [ 350.405443][ T8332] ethtool_op_get_link+0x15/0x70 [ 350.410393][ T8332] bond_check_dev_link+0x447/0x6c0 [ 350.415529][ T8332] ? __pfx_bond_check_dev_link+0x10/0x10 [ 350.421196][ T8332] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 350.427636][ T8332] bond_mii_monitor+0x428/0x2e00 [ 350.432609][ T8332] ? bond_mii_monitor+0x153/0x2e00 [ 350.437764][ T8332] ? __pfx_bond_mii_monitor+0x10/0x10 [ 350.443152][ T8332] ? register_lock_class+0x51/0x320 [ 350.448370][ T8332] ? __lock_acquire+0xab9/0xd20 [ 350.453276][ T8332] ? process_scheduled_works+0x9ef/0x17b0 [ 350.459024][ T8332] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.464243][ T8332] ? process_scheduled_works+0x9ef/0x17b0 [ 350.469979][ T8332] ? process_scheduled_works+0x9ef/0x17b0 [ 350.475729][ T8332] process_scheduled_works+0xae1/0x17b0 [ 350.481325][ T8332] ? __pfx_process_scheduled_works+0x10/0x10 [ 350.487347][ T8332] worker_thread+0x8a0/0xda0 [ 350.491960][ T8332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 350.498309][ T8332] ? __kthread_parkme+0x7b/0x200 [ 350.503264][ T8332] kthread+0x70e/0x8a0 [ 350.507345][ T8332] ? __pfx_worker_thread+0x10/0x10 [ 350.512475][ T8332] ? __pfx_kthread+0x10/0x10 [ 350.517076][ T8332] ? _raw_spin_unlock_irq+0x23/0x50 [ 350.522286][ T8332] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.527507][ T8332] ? __pfx_kthread+0x10/0x10 [ 350.532110][ T8332] ret_from_fork+0x3fc/0x770 [ 350.536717][ T8332] ? __pfx_ret_from_fork+0x10/0x10 [ 350.541853][ T8332] ? __switch_to_asm+0x39/0x70 [ 350.546628][ T8332] ? __switch_to_asm+0x33/0x70 [ 350.551397][ T8332] ? __pfx_kthread+0x10/0x10 [ 350.556003][ T8332] ret_from_fork_asm+0x1a/0x30 [ 350.560877][ T8332] [ 350.564291][ T8332] Kernel Offset: disabled [ 350.568647][ T8332] Rebooting in 86400 seconds..