last executing test programs: 8.422163544s ago: executing program 2 (id=4341): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05082500000000000300"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000240), &(0x7f0000000300)}, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090725bd70000000000007020000", @ANYRES32=0x0, @ANYBLOB="e90d00"/12], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x48002}, 0x4000) (async) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x496}, 0x8) (async) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0xff, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000000002907800000000e000030004009078000000004542000400640002054b00a77f000001ac14143510b545b4d8825a61253f99e64465616a9c7651d9c19e0352579067b48d074c3f84fcaf51b7d7849dfbc4b2617e02c0071575a73919cbb7a4d3f39ce86f0a4756a236693d4264e32d2e4f6dcb170f94e5fd70f0f911ae7ff66cf249a689b49a8a87b061f35cc389eb24279fc6e5a218f9249d8d2086162e039c"], 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) (async) socket$inet(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/269], 0x88}}, 0x20000000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c00000010000108000000000000008000000000925fea62aa432957bbb01f2b4c20a4940899032852e1a5bb733e67cca0ef5d9ac8df71d1e96bd05fc668a1f006407c5f87119fb46b241b132bd9c01fe7cb07507065a921754b95b00000ea3685d438ca6a94f4d61d5f9eb40e4e3dfcc4e3995ec2d59f73f676b6c8c67161c8080b8dcfab9d26d1e036ecacdd53e6b65c501ffce4c9d0d183c890ce49aa27f9c08216fc0f3034712075a618c7be245215bc1fcd727e10c1a036c3f8cb7a22e247e554b7807d02a6322b44f652a6a9d166b24ad006f499cc43664f", @ANYRES32=0x0, @ANYBLOB="236000000000000004002b8008000f00271c634f"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000100), &(0x7f0000000380)=0x4) (async) socket$inet6(0xa, 0x80000, 0x6) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.367829307s ago: executing program 3 (id=4342): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x8, 0x2, 0x4}, 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fccbdf250900000005000700000000000800010001000000050008"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20010) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080001000000"], 0x2c}}, 0x0) 8.289435969s ago: executing program 3 (id=4345): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x4, 0xd, 0x20, @private2, @empty, 0x7, 0x8, 0xbf, 0xa}}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={0x0, @xdp={0x2c, 0x0, r1, 0x1}, @in={0x2, 0x4e20, @multicast1}, @xdp={0x2c, 0x5, 0x0, 0x14}, 0x4, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)='ip_vti0\x00', 0xfffffffffffffe4f, 0x3, 0x2}) 8.23741404s ago: executing program 2 (id=4346): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)="f5", 0x1}], 0x1}}], 0x2, 0x2000c044) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e23, @empty}}, 0x4, 0x3}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={r5, 0xfc01, 0x3, [0xf1e, 0x1000, 0x100]}, &(0x7f0000000180)=0xe) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_ethernet(0xfffffc69, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x128}, 0x4044080) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b70200000800"], 0x0}, 0x94) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e21, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8}, 0x1c) getsockopt$sock_buf(r9, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000030c0)=""/4096, 0x1000}, 0x40010123) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\b\x00'/28], 0x50) 7.280582716s ago: executing program 2 (id=4352): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2dee657420"], 0x5) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'irc-20000\x00'}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x50}}, 0x40088c8) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)={0x44, r3, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x44}}, 0x4000) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x44, r3, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5e}]}, 0x44}, 0x1, 0x0, 0x0, 0x811}, 0x10) 7.006482114s ago: executing program 2 (id=4356): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2}, 0x18) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a0005"], 0x24}}, 0x0) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) tee(r2, r3, 0x7, 0x3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) 6.815297712s ago: executing program 2 (id=4359): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r2 = socket(0x2a, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) bind$tipc(r4, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x18) shutdown(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, 0x0, 0x0) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r8, 0x1) recvmmsg(r8, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)) socket(0x2, 0x80805, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x3, 0x4, @empty, 0xffffffff}}}, &(0x7f0000000040)=0x84) 5.895327752s ago: executing program 1 (id=4367): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.906587718s ago: executing program 1 (id=4371): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xffff36bf}], 0x1, 0x0, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40002000) close(0x3) 4.71614272s ago: executing program 4 (id=4373): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x68040200) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000971bac5544ad77590779467f", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0000000001"], 0x80}}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffac14143c0000000001000000ffffffdf"], 0x14) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000) r3 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000001980)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @loopback}, 0x364, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x3b3}) 3.938489944s ago: executing program 1 (id=4375): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x8000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.572247515s ago: executing program 1 (id=4376): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'ip_vti0\x00', {}, 0x3}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYRES16=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@tcp=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000017c0)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008100310081024509000002029078ff0f0000000000001f05907800000000a36ba440752a968f8e3747273c75eb1b57388ffe6f94b48f54bd07ac87ef8e8084f92efaaf54d818e26637fcb1a407de3c3ce5c07ce0b29c7a2fe43a0035edff580633a944daaa69fd56c90d51f18d8ed10c5ef7f9cc2440e5a0751007a778b8270711e9cc3fad5e6be321318222fdf2685b65cc85d7f00d83d31a2df94c532c37e40214f3566d5e22ed49af9a4209bc4400ef7e940355efe32e22ce5e0d565deb274630782a6e1b132fe8cb7b7c"], 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000002c0)={'nat\x00', 0x0, 0x0, 0x0, [0x6, 0x3, 0x7, 0x56226ea, 0x1, 0x1f]}, &(0x7f0000000040)=0x78) 3.359259935s ago: executing program 1 (id=4378): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18080000d0ff0000000000000000009500000000000000ba7ecac129ea853e5dda0da9e3e5cdd2d827c3c6a8ff04a5993e453b84cfdeae8fdd391869fefdd48de33bc75669db56a136c8d86c487b8ef2f0916ebaa9376ef6a38e8fa9a5173669fe2d09d0987a774387592b4bbc1e34b02ede"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x0, 0x27}, 0x9c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$unix(0x1, 0x1, 0x0) r9 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80, 0x80800) r11 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x4, 0x6, 0x5, 0x80000001, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast1, 0x1, 0x1, 0x8, 0x8}}) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x4, [@union={0xb, 0x3, 0x0, 0x5, 0x0, 0x2, [{0xf, 0x2}, {0xa, 0x1, 0x4}, {0x1, 0x0, 0xb}]}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x26}, @var={0x1, 0x0, 0x0, 0xe, 0x3, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @const={0xc, 0x0, 0x0, 0xa, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x5, 0x1}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x3}, @func={0xd, 0x0, 0x0, 0xc, 0x4}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000500)=""/90, 0xb8, 0x5a, 0x1, 0xc61, 0x10000}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10, '\x00', r12, r13, 0x3, 0x3, 0x4}, 0x50) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r16 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r16, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r16, 0xc008744c, 0x0) tee(r15, r14, 0x80000001, 0x0) sendmsg$GTP_CMD_ECHOREQ(r10, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r11, 0x224, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0x92167f213e8b26b9}, @GTPA_NET_NS_FD={0x8, 0x7, r15}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010102}, @GTPA_VERSION={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}]}, 0x74}}, 0x20000040) 3.081932342s ago: executing program 4 (id=4380): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.773119473s ago: executing program 4 (id=4382): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@ptr, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x32}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000380)="0099d885", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 2.531070553s ago: executing program 4 (id=4383): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x50) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x15, 0x4006}, 0x20) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x3b, &(0x7f00000014c0)=""/145, &(0x7f0000000000)=0x91) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x408c0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r6}, 0x18) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, &(0x7f0000000100)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xdf505db1a3d84e25}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3}, 0x4) 2.295004357s ago: executing program 1 (id=4384): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB="60001000", @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400080000000800070000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) (async) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000076000d0b004000000800010002000000"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) unshare(0x68040200) (async) socket$inet(0x2, 0x3, 0x7) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) epoll_create1(0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32=0xffffffffffffffff], 0x6c}}, 0x40) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00"/14, @ANYRES8=r0, @ANYRES64=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac1414", @ANYRES8=r7, @ANYRESOCT=r6, @ANYRES8=r5], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r9 = socket(0x1e, 0x4, 0x0) r10 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r10, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) (async) recvmmsg$unix(r9, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) (async) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r10, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x2, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x4}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x3}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0xc0) (async) close(0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.097369907s ago: executing program 0 (id=4386): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0xff600000, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 1.796127126s ago: executing program 0 (id=4387): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @qdisc_kind_options=@q_hhf={{0x8}, {0x2c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xfffffff7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x1}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x39}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xfffffff9}]}}, @qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x68}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'bond0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000004088eb0200000008000300", @ANYRES32=r4, @ANYBLOB="0800a0009e090000080027000200000008002600a809"], 0x3c}}, 0x80) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0xe8, r7, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x6e}}}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1, 0x1, 0x7, 0x0, {0xb, 0xa, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x6, 0x4}}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x140}, @NL80211_ATTR_KEYS={0x94, 0x51, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_SEQ={0x11, 0x4, "6f3ba5886c52183b99db7acd17"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7a7784b6b4"}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "11a336ed98"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0xb, 0x4, "3567b9db3c7e10"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x820}, 0x40) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) connect$unix(r2, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)={r9, 0xffff, 0x3}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x18}}, 0x48041) 1.632953667s ago: executing program 4 (id=4388): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x6) bind$ax25(r0, &(0x7f0000000480)={{0x3, @default, 0x21}, [@null, @default, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xe}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x8, 0x0, 0xa, 0x4400047, r4}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r6, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r5], 0x68}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, @remote}}}}, 0x0) close(r2) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$inet(r8, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="ffc74af594d2923d81be3bc3bd24e36e0159e3d59c35681d3ed9ed59684a2a2d84a1d60585b888797600eaa4911052cee7c5f5f210392fdb3bec0d84d4102116ae7567153b29c4e03a6b9f2a9bada2af53c028694e069e7ebd7ffbfdabd1bd39ea410c1cb0440f72e5f580180284251b248b43d463d3aab93088a7a42a3d54efeb7b46b6568ab76a9df9f97930dcd6070861ce8cf8eb", 0x96}], 0x1}}], 0x1, 0x40004090) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) 1.570243394s ago: executing program 0 (id=4389): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23311, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.392300557s ago: executing program 3 (id=4390): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)="903e3b6c44e0f48447a9155110b4266484924349a8906ac47cadffe4d9e5a11b205c0475", 0x0, 0xfffffffb}, 0x38) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x60) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c7643600e0000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.391663626s ago: executing program 0 (id=4391): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0)={0x5}, 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r1, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) sendto$inet6(r0, &(0x7f0000000180)="b8", 0x1, 0x40, &(0x7f0000000140)={0xa, 0x4e23, 0x800, @loopback, 0xffffffff}, 0x1c) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000500)=""/208, &(0x7f00000001c0)=0xd0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002940)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1f84}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x0, 0x4aa3, 0x80, 0x5, 0x1}, {0x2, 0x2, 0x3ff, 0x3ff, 0x6f09, 0xa8c}, 0x0, 0x0, 0x149f}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x44080) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a80080002800800e500080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000)=@srh={0x2b, 0x10, 0x4, 0x8, 0xb9, 0x8, 0x8, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x22}, @mcast2, @private2, @private2, @mcast2, @mcast1, @empty]}, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0xe, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0xa}, 0x50) unshare(0xc040400) close(0x3) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', r4, 0x4, 0x56, 0x3, 0xb97b, 0x10, @loopback, @remote, 0x20, 0x80, 0x7, 0x101}}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r10, &(0x7f0000000000)=ANY=[], 0x38) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1ff, 0x4, 0x8921, 0x1002, r8, 0x80000001, '\x00', r9, r10, 0x5, 0x0, 0x0, 0x4}, 0x50) socket$inet6(0xa, 0x800, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r13, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 442.976146ms ago: executing program 3 (id=4392): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000001800010003000000000000000214b408ff01fe020000000006001500020000001400168004000880"], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) 293.595763ms ago: executing program 0 (id=4393): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000380)={0x80, 0x7, 0x4, 0xdcab, 0x1, 0x0, [{0x0, 0x0, 0x6, '\x00', 0x204}]}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a0080000002000800000000040008"], 0x20}, 0x1, 0x0, 0x0, 0x44845}, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x10f0, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x31}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x40, 0x0, 0x1, [@typed={0x4, 0x14e}]}]}, @nested={0x9a, 0x13d, 0x0, 0x1, [@generic="aeaa0731b5af098564987f43416af6f9e21ddbae9e9de5d74b6e83d4b48a71e83f79730ab292b778c8abfde921561c121d55e934f1600f5971dd5d6eba80b5c84550c5b3c4c1de5260dbeaedf862c464932c9a4c752008c233f0c44a9df0ad1b5924e2b47072c759ced44fdc6cfc67a9a48ae1468f9b7469957d5a9abb3fab983f1bf33b07ab1ae8ec362bdc2245594669426d00dadd"]}, @typed={0x5, 0xb1, 0x0, 0x0, @str='\x00'}, @generic="ff3d5c44d5ee6ecd6ff22211598ba4e5f427a7256f180bf15cf81690233d80d9950ec7045c", @generic="a422a48760199330f7a81cc586e1f548ff36db83cebdbea7d7f77067850f625d7907405c40db33b2287fe003efbcd044ad477884ccd100a44a64b569c6958832a1aa474c8f0f4abcb1431a09635b2e25cdaccfdbe9c9c4ab52b6f619d58826c02daec4624ceac18352aaf29584aaded841142a092fae38bafce3a434015a2421b4c972123965248ca03e824e3d10a9db1df5abe61342f5c5b1f9cf1feba9bd28800113e0f07885f564bff4c26d367d23d23e9a8180d17b56587bc319ffa31595d9766492debeae47c631739b982cedfe3e3df9d1d15024c700ca1397b99550d008131f23af6c917b73e6ee7f22125878470d58f81e30c4ae6c170ecb9d84439593fb1fe348cb4ba804b6e81559e88235a20f48a3c195a5d2dbcbf1e8c3feeecc367a03dc531200894d53c3545b325b5f36aee9481a60b2f785fe86fffa71bdc8d684fcb0face520bd5ef926eaa45711584c40198df28cfb1d201b46d39caba7b945f2bfbcb76e5bbec86de0e40523c0cd26129b9880f59d0de6dec328d89f9a577355294b95ef5a15de9a099899708cf29e67f221bbfcabc0ce380ed4536f2c7b6cc9448cbeb8d644985ae5a91d4e9369b8ab4a598684130f24de14bdf7f54d20d072ffa91da4259b4c73544cfc7e8665b8d3b2570311f8931b42ad660fdc019998bb31ad99383158c4a670344d5ef74b3bc8492ea083a66ca4f53ebe7ccb6e3598d9df36c88c5420807d24e7735c35e89cf02cbfd30b782d4e0d92e6f9f52c5a3a3ea255a6148a56f851e7f9dac07ad9f5bab15a99838ffc7a9989942c900cb5259c042d4bf46a71f2d23f517066219c1ec151fee7aa8e7199cf3ee43a85e1637284b61b27258c659efc63a4e2f13bab16fe3fab8891ebcb35ced641ea3afb61413bd6a94bcc28150bf71dcef5dcda6ecf0ba1f65ba0340061353672e11caaa7a70320e31657b7bff26ede449735cbf7386a77d119096df1a3f9f84e2b89517e560ec01905aec93dbe4e265f6bd5795e738105fa8c9953f3d58fc379ff4e99d30cea0748b95bebfc7b40267e60ad8de0f4472c65dcf59340f5b6a53ad01fd6f76c69d740a6ffd9e26be12c02264f08821f30f1dc4e8de1ebdcc21d2f28ccb9dd5ed61e189ac777eb3487c715a5c9d91039d74bc757f29496f821cd815ed7d0fc1bf7e5a823b14abe6b529bbab9b4147d9aa52de73996db2be2ef9c1795a9bf614e0cf5dea3923ad9e02b24cd7c6de00267fcb0df7574533924ad789383dfc4934b54c360db8126b1076b048977903e664fd5bd8ca47b4487fd6be6b4dac26a32be8a1b4eeb7c5d82f9981feada0274e6e7b09113601164e7cb49427ae04eef01f9f8172f4f74b8365f94ee0d61ec567780e197511ea2acb01c71770eeef62cfcb39cccabe9e6bf229def185cea7c31383aff0bb345551caa347a2489dd9d28faaa38c3eb1ea33a2babdb5fc27963899fa2b6c36dc4ba0f0ec070af1407637fd9051eea0f7074193e5f311f09adaf3272b1013d213a835a932dd1edc6e1b76371cb6b84d4ff894b594d78560ad056231cc45516962bca2defb39a01088617e9bd5769dbe6638db75ba917d70f63cb925c517accd8ea2bbf88d773021ec298b81a311a4266f40fcb4b8b0c9743640eb9ba5dfcbf5cf46b8d915a80ff3129745554024402f9710eed476a3cbd571afc5e79040088f2e969fdf752288c5a60bb75e77baddbb848fc86f3d43efe256c2bea05f029a3afc12b3fee0535d6c8486d5d97a3678ae32d46c7a8a72a306cdbc964fbf85593185c1df72057c45209799523d84b5bd2221b0d151f1912bebbbf999461652219ece48ca4ee1594297b4bdad1df9e72cfd90c9df7bd4ce6d00af980b1e35a0b1976a8c467eebe12bb0e4837823f5cb859e67d168fc5d354505e647f9867b8e7c151ca82da310fe2a3362aa74d9f86aba5cd9605bc89d0df9c27578ea9f8fe49361a645579942db636ffdc2da8e1226f9357906206f4009e88b7e8aba8e1f17cd1aa698896c36d588de62b450ac5a24394d31e3f29e8f3e64bb8e54df1eff9203b3c904c3ad026f6444300da5dac85f9ef2c952433de1276f5f8b840cddde43c8d412c9c25aba15cd2820520bf355ac39a7f20e7ec375909bf4e6876d39d7d50e43f5e61cec5149def0b2f360c138603947e94a9a0e0b877af2c1bee8c0b98dc7f42338fe4e0685b8daefaaeab9e597c5159519cb3047303a18b67924262b135c3de7ba94e142eb3f5cef1267d758026b6f35d57f6f5cdd67fa57a796fcd2e587b9f4b99b0b44ff7de2deb8d7a32908cc2eff504be861c5fb52c99a446f0564a097a8795047d0a7fe3a38ac767bf17e848b69e8d83c8d53ccfd4af0e9069e25f90cdeaeaf524d5ee657a6f4c1d744d7651c133a4d1d43bc3636e4c5e51cf2ac8e9c0ad3c2edd72f4fec1d0df0b4949d5169eca47a7d3f80df5b81e9326af1742d2c94854ad1b412495b881706b0ee836a37140f7e7b0b848903680bedb1d220a109edabe8936c8484ae8b2bdcae5e1805a653e4bb938f1c1f50a078dbf00141ef68dd882a0f31934c21fd781c5f7b96484c83eca83c91f5680e9cae4a49bb80d1c1274818ab83a49cbe9f8b539e5ca4c18f1153351f53e6f20c188661265cb133f031154884eba1fefe93a9e51bb29007a969c50b8d9c70eb39dc78ffedf54aa69b76ca9f2d42a35daf0f77b73d563162306087f524163da8add244cbac1ba215ee18af66c41eb803b081c213dfd223c361de46ab0d879264cd9f9f7a3c66c1ec82c541de5d1c6def98e1589fde87ac0867fc659c60fad1f2c46407ac7f9828fff8ae433dbd59a3efdd1e5c774591ebaaa632b5f48ada9d9dc7e643a525c7bc9d10cf9d7bb4519463ecb8b8b848d60c6dd3ede04a77d1d03f13036b49dc4161ccceab1692be02f4604f5e4653a350a033b8ba21c60c37a1f2d8a50a56fba2446a5b15464762515e1e8861a8a1a0f5f527c4cfa60c8d3c1f9982450dc52b746be8b7762e3f876932d7a40079479a8796f91d3bcb23530c6694bfbc7b6a9ea879852be168131212554bdbe3c631e485ba603bb442fae65d7cbc1329349ee351b36f49ebf4683710569a98c0391c24ae87124bc4971ec3a285b25b5818bee6c45adcb81b7a51f00d057543857643a44433efecd210293f2317c0b93325c8a4432743b0e14cad6c07f80b2b71db829efd1db468e08780cb1025a139cd0762156a8bf88855e20842e9c1f443bca71aeafc2dd9b04b1dbbbf7187ca47b19dd5aaf464a977a6b0cd22a720bd5c20f31fde7993cbb8732694d23ee24fe13891b144187dccc83d05f27b1e80fd7befabba447e0d7b7e6a94c252e6db6286934f5a74c097ff1570b8397812c1cd25ae22bb24437a123b9b31c1cfa38882771ddb6949db76fed7a665db55e658879138d9dbe634f1c6091789a4a5087a63e7892e10ed64567b8884cdee7d8bfa3b5b9e7dd3fb881242819d2114bc1e0262b31e226078d6e27744600c1c0a64a08346053d337077cb03467d2707ee60f83e52bb856438efebce66b6713d6ce380c6cf31eb631fd5a557a338d671c4aab0a6de703c879e41130bcd17474b9e8414d523fce1e634382eecd6cf00ef90d54d8e94e337e480abe9af9ef1297ad72d6020aba0507c5c57fccba5dd4210c7f39ae52264cd73b707798b79fbb1e3ed752dbf6d3dafd64330c323ff7e3290cd18bb47e3bf95d182011b1d4b1ce64813e649c71a3f4b9730812e6becf5ba2f0b4952d4d090f8fefd850f49bd522eefc3c303d8e0be707fb9e90f2fb9f86c7112f6d9312d9c8ed47e2a9e4cdc4f5febf5042602c5902bce06e38c1b4b2e915a2b9d247d806964a8476670c9b9afdda87deef5a7632c65bce70fcfffb21084602871f85f40c170dcdceafdf7e4ae91391943abd42119ed69e9f3502783a9b1589be89f93f003cfcfb4d245ef4398a00e821a444866188c613525545ed064360aed2436702e3bbbc8ab8f15e6075020f1fc954a90140a26db29b49bd682af1b699eeeed1a53d068f5bf849aadadf28baf18c0ffc556fde76b71d5bbe16c007c7cf41217678d75a0c540ce284b79e18674798e0dff048ada7fceafdacb6868d7a5b99ab19079b814f68c942aa6119dc3dcd72c06aff5c3afd6789050c8bce3e6002da612e511716fb59836b6d86dbeebe88f92f35521d856d3528ba61db77012b1d2d166ad9614eb9f8f9ee2a28b03670a6dec6a492ba22588ecc278ac65ea71ac4b06716dc53f95af985e0ea6a618ebd94681f88a97199c5610cdb1060f6e52374294a7935d5029dace406fd8ac50982fe39524fb326dd6ca57c715c68d64ac5d2c857df76689780537179d98bedd81416f8da87d756c6f2c4077925b642f580f51f5d39d4c996f5fcb1482028df3ed874c1eb4bd4b3e3487cb64dc3ee583644f5ac867dd36938486ad84e088f9b34b1a0008e83a646e5cd5fe6fbbfe1a7ad0164ac71da1e33b6f5b2bb75e78bd92e3aed21aba5c30ca34714d8960d08354ad8ad071112814c23667def11bcac46ec6d3755b658023c147b3e55b5ab5569f4fb9004bdad715b6aad8d46da8f13a9db826981c9881ece2ac1b20bd09cf9846327353bfc13bd923a1220efc0c36fe93da356f4fde512b36bf4f98a88dc79f1289fdd020b3252626ed1a81af198d566e5a483b68966c24881e30be5b5cba063daac3cc0712a46497161e31c891cf766a0d2a4c212de024cc456014071750a8423daab268ede83fe5484b173d6e7709f5687152fcc9f5b6390358531b3b05ac3e4b8870ebb2a5c11a0de85a10541fd78691e6699f10cef5c2f4b9ac01e2b1ed2fbd393f377916761f3707641356c24f3b6bcdac945831ac0917980fc78ee028d8fb819cc0340e2d99bff4f5e7360dc20e04c54bcf376825fc2ea73c99d388ca40ebbbe68cc3f2f6c38688810ea7d396dc14c9480e4bde62ef367888ae391159114372c049ad123901d839b04b631b6c5b22099f5a6fb6ff88fa19b25ec4c819e49408db8235efc39beb57864e80fa868bfb1990c476d4fe7df940a627cdd0fd681f2c19a2162d810f28adcfa1fde7be6e4718b037503d47891f02e1a974f6b9e7175930bd8ff220ba7bdebe22adbd68931c842cabf28502dc3c5918c8437de55c2caa06fa902746e014d199c2f4e855446e2f1d94e7e51398e465b070d6e18484e4bd6ce79777576ec82cd14999a18e6f712dc7e7b5ee82e64c777ff76fbaf2a84bbcc37f32a4ca1c69e3ad91c91bd4156048a0517e804d62208a59d2261c91275e5f8db3ac6dfbaa82db2c1d22cc3b165becc4cec72761529984f83c0dc24e67f35e9065b02e1ad14b6130e727f6a33dbf168d7ba6dedd6e7325c2111be7701ae6f37bb083837936f0d80bce298837e0b80963410359b00b4fd1b2e104d69ad544fb656a9b8c8ba856cdad4e18076eb68eb848b223030f2e2a496bd971952ef1e19bd771722a61e9ac2dffede0728a941c86a80e0fbb28df0913864ce94dd0f291eda4dfd119abf0f6bd09325599ec3fa568139c67b4b06410d22df57dfb2500073a3630394c7c29b7152d413f4c4b91ae30df99c8bb439dcedc33e89a42e3cb1a2395b4d0f4d4cb3163b4ed6e79af5a1a9eb98d75e8decd74bcffe996755a209ed03453f63f9a5b4a7b9badf1fea2220ec8fe9e81a230f0632fdc0ece10fcf9509a233de53d46985afd984eff5dfeb9359ff3e9965c38326a5a28bec850cf9fbe5cd7c28ad4779c62690df91edef675df32c2b219a97fa7de2c72"]}, 0x10f0}}, 0x4010) 196.125125ms ago: executing program 3 (id=4394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r1, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x114, 0x2}], 0x10}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe45}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x4044004}, 0x0) 195.610525ms ago: executing program 4 (id=4395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x312) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x208900, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000200)={r1, r2, 0x3, 0x4d, &(0x7f0000000040)="51fbf1689dc5ddc9e5a23401bacd475c810301f7a820abe21789bf856cf74c72ad3384fd6f6388a20bfa4c25ae35b104f878eca7948cfe0229b663a5bbc1677e8bde7ac02ff0aeab7da7fc9aa0", 0x4f, 0x7, 0x1, 0x8, 0x6, 0x0, 0x2054, 'syz1\x00'}) socket$kcm(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x448b0) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000042c0)="86", 0x1}, {&(0x7f00000002c0)="794ab6f05259d1b3bd29a47757ca01b92304ad7ac7dece9d204c4b1eea2feb32c12013dc3fdf2ae40958dc", 0x2b}, {&(0x7f0000000340)="d94469a91874fde3d54cf0261ed019a1743de9ea6aeb3a48c84fe243355bc50d49c475f6d7a83e162ee4ce52ba34872f5e0b62e54f0a669d25e869930f3f5858fc7ac5b45884996460645187518e98e83d588712c97a64a4806cdc8053118fbd297dd87bfb7675df60e9c6bb3ad691f5e2408ab0f83f31ebcbffcefdc4a23f8d01de480e6fccdb0000918a967f67c55799ecf0f6aaccbb9227f45ef8977a0a5b", 0xa0}], 0x3}, 0x4000005) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f00000000c0), 0x4) close(r5) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(0x4) close(r0) 80.390947ms ago: executing program 3 (id=4396): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3}], 0x1, 0x40800) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffcf61}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x40000040) close(0x4) 71.455848ms ago: executing program 2 (id=4397): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffe6, 0xb}, {0xfff2, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6600, 0x8, 0x80000000, 0x2, 0xd, 0xc}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_RATE={0x14, 0x6, {0x9, 0x7, 0x9, 0xc4}}, @TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 0 (id=4398): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x8}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x0) getpid() sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x114, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}, {0x0}], 0x2}, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000040601040000000000000000070000050500010007000000050001000700000005000100070000000900020073797a32000000cb0900020073797a3100000000"], 0x44}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) kernel console output (not intermixed with test programs): dump_action: action bad kind [ 547.432248][T16637] syzkaller0: entered promiscuous mode [ 547.439688][T16637] syzkaller0: entered allmulticast mode [ 547.472299][T16633] netlink: 'syz.4.2899': attribute type 4 has an invalid length. [ 547.491013][T16633] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2899'. [ 547.661874][T16646] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2902'. [ 547.814783][T16610] wg1 speed is unknown, defaulting to 1000 [ 547.824875][T16610] lo speed is unknown, defaulting to 1000 [ 548.071434][T16659] FAULT_INJECTION: forcing a failure. [ 548.071434][T16659] name failslab, interval 1, probability 0, space 0, times 0 [ 548.090260][T16659] CPU: 0 UID: 0 PID: 16659 Comm: syz.4.2907 Not tainted syzkaller #0 PREEMPT(full) [ 548.090290][T16659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.090303][T16659] Call Trace: [ 548.090311][T16659] [ 548.090319][T16659] dump_stack_lvl+0x189/0x250 [ 548.090349][T16659] ? __pfx____ratelimit+0x10/0x10 [ 548.090371][T16659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.090404][T16659] ? __pfx__printk+0x10/0x10 [ 548.090436][T16659] ? __pfx___might_resched+0x10/0x10 [ 548.090457][T16659] ? fs_reclaim_acquire+0x7d/0x100 [ 548.090481][T16659] should_fail_ex+0x414/0x560 [ 548.090519][T16659] should_failslab+0xa8/0x100 [ 548.090551][T16659] __kmalloc_noprof+0xcb/0x4f0 [ 548.090577][T16659] ? tomoyo_encode+0x28b/0x550 [ 548.090605][T16659] tomoyo_encode+0x28b/0x550 [ 548.090633][T16659] tomoyo_realpath_from_path+0x58d/0x5d0 [ 548.090673][T16659] tomoyo_check_open_permission+0x1c1/0x3b0 [ 548.090705][T16659] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 548.090734][T16659] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 548.090803][T16659] ? lockref_get+0x15/0x60 [ 548.090835][T16659] ? tomoyo_file_open+0x165/0x220 [ 548.090865][T16659] security_file_open+0xb1/0x270 [ 548.090894][T16659] do_dentry_open+0x384/0x13f0 [ 548.090925][T16659] ? vfs_open+0x31/0x340 [ 548.090951][T16659] vfs_open+0x3b/0x340 [ 548.090968][T16659] ? path_openat+0x2ecd/0x3830 [ 548.090994][T16659] path_openat+0x2ee5/0x3830 [ 548.091015][T16659] ? arch_stack_walk+0xfc/0x150 [ 548.091059][T16659] ? stack_depot_save_flags+0x40/0x860 [ 548.091105][T16659] ? __pfx_path_openat+0x10/0x10 [ 548.091126][T16659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.091170][T16659] do_filp_open+0x1fa/0x410 [ 548.091192][T16659] ? __lock_acquire+0xab9/0xd20 [ 548.091223][T16659] ? __pfx_do_filp_open+0x10/0x10 [ 548.091275][T16659] ? _raw_spin_unlock+0x28/0x50 [ 548.091303][T16659] ? alloc_fd+0x64c/0x6c0 [ 548.091346][T16659] do_sys_openat2+0x121/0x1c0 [ 548.091368][T16659] ? __pfx_bpf_trace_run2+0x10/0x10 [ 548.091402][T16659] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.091441][T16659] __x64_sys_openat+0x138/0x170 [ 548.091470][T16659] do_syscall_64+0xfa/0x3b0 [ 548.091490][T16659] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.091508][T16659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.091528][T16659] ? clear_bhb_loop+0x60/0xb0 [ 548.091554][T16659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.091573][T16659] RIP: 0033:0x7f283ad8d510 [ 548.091592][T16659] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 548.091609][T16659] RSP: 002b:00007f283bc60f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 548.091631][T16659] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f283ad8d510 [ 548.091644][T16659] RDX: 0000000000000000 RSI: 00007f283bc60fa0 RDI: 00000000ffffff9c [ 548.091657][T16659] RBP: 00007f283bc60fa0 R08: 0000000000000000 R09: 0000000000000000 [ 548.091669][T16659] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 548.091681][T16659] R13: 00007f283afd6038 R14: 00007f283afd5fa0 R15: 00007ffd5555e4a8 [ 548.091716][T16659] [ 548.091746][T16659] ERROR: Out of memory at tomoyo_realpath_from_path. [ 548.124279][T16610] chnl_net:caif_netlink_parms(): no params data found [ 548.585562][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2913'. [ 548.624770][T16676] veth1: entered promiscuous mode [ 548.630192][T16676] netlink: 'syz.0.2913': attribute type 8 has an invalid length. [ 548.660597][T16676] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 548.757913][T16610] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.765761][T16610] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.778644][T16610] bridge_slave_0: entered allmulticast mode [ 548.787926][T16610] bridge_slave_0: entered promiscuous mode [ 548.825248][T16610] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.840926][T16610] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.855846][T16610] bridge_slave_1: entered allmulticast mode [ 548.873095][T16610] bridge_slave_1: entered promiscuous mode [ 548.877985][T16688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2916'. [ 548.977074][T16610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.003817][T16610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.089456][T16695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2917'. [ 549.100478][T16695] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2917'. [ 549.124470][T16610] team0: Port device team_slave_0 added [ 549.144754][T16695] netlink: 'syz.0.2917': attribute type 10 has an invalid length. [ 549.145905][T16610] team0: Port device team_slave_1 added [ 549.231446][T11223] syz1: Port: 1 Link DOWN [ 549.273433][T16610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.289392][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.339920][T16697] FAULT_INJECTION: forcing a failure. [ 549.339920][T16697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 549.340892][T16610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.369196][T16697] CPU: 0 UID: 0 PID: 16697 Comm: syz.0.2918 Not tainted syzkaller #0 PREEMPT(full) [ 549.369227][T16697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 549.369240][T16697] Call Trace: [ 549.369249][T16697] [ 549.369258][T16697] dump_stack_lvl+0x189/0x250 [ 549.369291][T16697] ? __pfx____ratelimit+0x10/0x10 [ 549.369313][T16697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 549.369345][T16697] ? __pfx__printk+0x10/0x10 [ 549.369390][T16697] should_fail_ex+0x414/0x560 [ 549.369427][T16697] _copy_to_user+0x31/0xb0 [ 549.369458][T16697] simple_read_from_buffer+0xe1/0x170 [ 549.369495][T16697] proc_fail_nth_read+0x1b3/0x220 [ 549.369523][T16697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.369551][T16697] ? rw_verify_area+0x2a6/0x4d0 [ 549.369576][T16697] ? __lock_acquire+0xab9/0xd20 [ 549.369602][T16697] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 549.369628][T16697] vfs_read+0x200/0xa30 [ 549.369654][T16697] ? fdget_pos+0x247/0x320 [ 549.369678][T16697] ? __pfx___mutex_lock+0x10/0x10 [ 549.369702][T16697] ? __pfx_vfs_read+0x10/0x10 [ 549.369730][T16697] ? __fget_files+0x2a/0x420 [ 549.369754][T16697] ? __fget_files+0x3a0/0x420 [ 549.369771][T16697] ? __fget_files+0x2a/0x420 [ 549.369801][T16697] ksys_read+0x145/0x250 [ 549.369831][T16697] ? __pfx_ksys_read+0x10/0x10 [ 549.369857][T16697] ? rcu_is_watching+0x15/0xb0 [ 549.369880][T16697] ? trace_sys_enter+0x25/0x100 [ 549.369918][T16697] do_syscall_64+0xfa/0x3b0 [ 549.369939][T16697] ? lockdep_hardirqs_on+0x9c/0x150 [ 549.369959][T16697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.369980][T16697] ? clear_bhb_loop+0x60/0xb0 [ 549.370007][T16697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.370026][T16697] RIP: 0033:0x7f0519d8d5bc [ 549.370047][T16697] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 549.370065][T16697] RSP: 002b:00007f051ac23030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 549.370089][T16697] RAX: ffffffffffffffda RBX: 00007f0519fd5fa0 RCX: 00007f0519d8d5bc [ 549.370103][T16697] RDX: 000000000000000f RSI: 00007f051ac230a0 RDI: 0000000000000007 [ 549.370116][T16697] RBP: 00007f051ac23090 R08: 0000000000000000 R09: 0000000000000000 [ 549.370128][T16697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 549.370141][T16697] R13: 00007f0519fd6038 R14: 00007f0519fd5fa0 R15: 00007fff3e9423f8 [ 549.370183][T16697] [ 549.395577][T16610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.622989][T16610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 549.648961][T16610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.708385][T16679] wg1 speed is unknown, defaulting to 1000 [ 549.721894][T16701] delete_channel: no stack [ 549.752484][T16679] lo speed is unknown, defaulting to 1000 [ 549.849059][T16610] hsr_slave_0: entered promiscuous mode [ 549.859719][T16610] hsr_slave_1: entered promiscuous mode [ 549.870372][T16610] debugfs: 'hsr0' already exists in 'hsr' [ 549.876475][T16610] Cannot create hsr debugfs directory [ 550.363078][T16720] bond7: entered promiscuous mode [ 550.368381][T16720] bond7: entered allmulticast mode [ 550.374480][T16720] 8021q: adding VLAN 0 to HW filter on device bond7 [ 550.665042][T16739] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 550.962641][T16752] netlink: 'syz.4.2936': attribute type 1 has an invalid length. [ 551.158496][T16610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 551.196577][T16758] tipc: Enabled bearer , priority 0 [ 551.221978][T16610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 551.244280][T16610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 551.269089][T16758] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 551.280273][T16758] tipc: Resetting bearer [ 551.310072][T16757] tipc: Disabling bearer [ 551.384381][T16610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.464731][T16777] __nla_validate_parse: 3 callbacks suppressed [ 551.464754][T16777] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2941'. [ 551.482271][T16785] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.709817][T16796] syzkaller0: entered promiscuous mode [ 551.716661][T16796] syzkaller0: entered allmulticast mode [ 551.879356][T16610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.949172][T16610] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.989229][T14816] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.996517][T14816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.056916][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.064217][T13652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.152772][T16813] tipc: Enabled bearer , priority 0 [ 552.175951][T16813] syzkaller0: entered promiscuous mode [ 552.182227][T16813] syzkaller0: entered allmulticast mode [ 552.206828][T16813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2948'. [ 552.239731][T16813] tipc: Resetting bearer [ 552.262053][T16812] tipc: Resetting bearer [ 552.289596][T16812] tipc: Disabling bearer [ 552.440885][T16826] netlink: 'syz.3.2953': attribute type 1 has an invalid length. [ 552.553863][T16834] netlink: 'syz.4.2952': attribute type 3 has an invalid length. [ 552.562014][T16834] netlink: 'syz.4.2952': attribute type 3 has an invalid length. [ 552.678499][T16834] bond8: entered promiscuous mode [ 552.695214][ T5870] Bluetooth: hci0: command tx timeout [ 552.711342][T16833] IPVS: persistence engine module ip_vs_pe_ not found [ 552.799192][T16842] veth7: entered promiscuous mode [ 553.018986][T16610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.133959][T16833] wg1 speed is unknown, defaulting to 1000 [ 553.161428][T16833] lo speed is unknown, defaulting to 1000 [ 553.170805][T16848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2957'. [ 553.573955][T16853] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2958'. [ 553.593380][T16855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2958'. [ 553.745371][T16610] veth0_vlan: entered promiscuous mode [ 553.780066][T16610] veth1_vlan: entered promiscuous mode [ 553.898667][T16863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2961'. [ 553.917245][T16865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2962'. [ 553.944881][T16610] veth0_macvtap: entered promiscuous mode [ 553.975300][T16610] veth1_macvtap: entered promiscuous mode [ 554.116003][T16610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.152178][T16610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.180179][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2965'. [ 554.229659][T14817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.259053][T14817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.281682][T14817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.305469][T14817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.745720][T14817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.754253][T14817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.933173][T16899] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 555.091970][T14817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.113997][T16906] syzkaller0: entered promiscuous mode [ 555.119498][T16906] syzkaller0: entered allmulticast mode [ 555.166887][T16909] Bluetooth: MGMT ver 1.23 [ 555.189765][T14817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.313962][T16915] netlink: 'syz.2.2973': attribute type 3 has an invalid length. [ 555.322006][T16915] netlink: 'syz.2.2973': attribute type 3 has an invalid length. [ 555.336718][T16915] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2973'. [ 555.356654][T16918] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2889'. [ 555.962528][T16936] can: request_module (can-proto-4) failed. [ 556.421336][T13657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.495254][T16958] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.509109][T16958] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.517554][T16958] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.527120][T16958] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 556.538251][T16958] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 556.590495][T13657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.703740][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 556.718135][T13657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.940971][T16965] veth0_vlan: left promiscuous mode [ 556.948046][T16965] veth0_vlan: left allmulticast mode [ 556.980254][T16965] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 557.030601][T16965] bridge3: left allmulticast mode [ 557.072165][T13657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 557.092334][T16973] 8021q: VLANs not supported on wg1 [ 557.250759][T16956] wg1 speed is unknown, defaulting to 1000 [ 557.273542][ T5870] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 557.316585][T16956] lo speed is unknown, defaulting to 1000 [ 557.371972][ T6019] IPVS: starting estimator thread 0... [ 557.463839][T16994] IPVS: using max 27 ests per chain, 64800 per kthread [ 558.144336][T13657] bond0 (unregistering): (slave bridge0): Releasing active interface [ 558.288719][T13657] bond1 (unregistering): Released all slaves [ 558.406877][T13657] bond2 (unregistering): Released all slaves [ 558.525503][T13657] bond3 (unregistering): (slave vlan0): Releasing active interface [ 558.535307][T13657] bond3 (unregistering): Released all slaves [ 558.549534][T13657] bond4 (unregistering): Released all slaves [ 558.567061][T13657] bond0 (unregistering): Released all slaves [ 558.580910][T13657] bond5 (unregistering): Released all slaves [ 558.614689][ T5870] Bluetooth: hci3: command tx timeout [ 558.706478][T13657] bond6 (unregistering): Released all slaves [ 558.817246][T13657] bond7 (unregistering): Released all slaves [ 558.864935][T17011] pim6reg: entered allmulticast mode [ 558.871500][T17012] pim6reg: left allmulticast mode [ 559.053371][T13657] tipc: Left network mode [ 559.431007][T17036] 8021q: VLANs not supported on gre0 [ 559.601552][T16956] chnl_net:caif_netlink_parms(): no params data found [ 559.631024][T17039] netlink: 'syz.4.2998': attribute type 1 has an invalid length. [ 559.640164][T17039] netlink: 'syz.4.2998': attribute type 1 has an invalid length. [ 559.649578][T17039] __nla_validate_parse: 5 callbacks suppressed [ 559.649597][T17039] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2998'. [ 559.674822][T17021] wg1 speed is unknown, defaulting to 1000 [ 559.726159][T17021] lo speed is unknown, defaulting to 1000 [ 559.944875][T17042] dvmrp8: entered allmulticast mode [ 559.952586][T17044] syz_tun: entered allmulticast mode [ 560.107194][T16956] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.122287][T16956] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.129843][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3003'. [ 560.140185][T16956] bridge_slave_0: entered allmulticast mode [ 560.150940][T16956] bridge_slave_0: entered promiscuous mode [ 560.169798][T17042] syz_tun: left allmulticast mode [ 560.177277][T17042] dvmrp8: left allmulticast mode [ 560.335519][T17065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3006'. [ 560.412698][T16956] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.421090][T16956] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.430345][T16956] bridge_slave_1: entered allmulticast mode [ 560.440642][T16956] bridge_slave_1: entered promiscuous mode [ 560.704169][ T5870] Bluetooth: hci3: command tx timeout [ 560.841122][T16956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.954563][T16956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.970444][T13657] hsr_slave_0: left promiscuous mode [ 560.989152][T13657] hsr_slave_1: left promiscuous mode [ 561.726820][T16956] team0: Port device team_slave_0 added [ 561.757776][T16956] team0: Port device team_slave_1 added [ 561.899665][T16956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.911275][T16956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.007855][T16956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.031178][T16956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.051384][T16956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 562.086105][T16956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.112734][T17103] tipc: Enabling of bearer rejected, already enabled [ 562.139361][T17111] !: renamed from dummy0 (while UP) [ 562.408861][T17118] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3018'. [ 562.528000][T16956] hsr_slave_0: entered promiscuous mode [ 562.542954][T16956] hsr_slave_1: entered promiscuous mode [ 562.679663][T16956] debugfs: 'hsr0' already exists in 'hsr' [ 562.685531][T16956] Cannot create hsr debugfs directory [ 562.768935][T13657] IPVS: stop unused estimator thread 0... [ 562.773689][ T5870] Bluetooth: hci3: command tx timeout [ 562.797811][T17124] netlink: 'syz.4.3020': attribute type 2 has an invalid length. [ 562.808467][T17124] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.3020'. [ 563.531358][T17145] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 563.539986][T17145] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3025'. [ 563.584355][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 563.633587][T17145] netlink: 'syz.0.3025': attribute type 5 has an invalid length. [ 563.659245][T17113] wg1 speed is unknown, defaulting to 1000 [ 563.689615][T17113] lo speed is unknown, defaulting to 1000 [ 563.938656][T17159] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3031'. [ 564.103820][T17165] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3032'. [ 564.235712][T16956] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 564.301509][T16956] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 564.339861][T16956] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 564.409351][T16956] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 564.420906][T17179] netlink: 'syz.2.3036': attribute type 1 has an invalid length. [ 564.853440][ T5870] Bluetooth: hci3: command tx timeout [ 564.899547][T17192] tap0: tun_chr_ioctl cmd 1074025677 [ 564.923555][T17192] tap0: linktype set to 270 [ 564.949740][T16956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.043767][T17174] wg1 speed is unknown, defaulting to 1000 [ 565.050716][T16956] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.087649][T14816] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.094934][T14816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.106155][T17174] lo speed is unknown, defaulting to 1000 [ 565.128309][ T30] audit: type=1800 audit(1758146488.473:3): pid=17201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3041" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=3100 res=0 errno=0 [ 565.183270][T14816] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.190477][T14816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.222342][T17203] syzkaller1: entered promiscuous mode [ 565.228066][T17203] syzkaller1: entered allmulticast mode [ 565.292738][T17208] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3044'. [ 565.304108][ T5870] block nbd0: Receive control failed (result -32) [ 565.637193][T17225] tipc: Enabled bearer , priority 0 [ 565.661534][T17225] syzkaller0: entered promiscuous mode [ 565.693420][T17225] syzkaller0: entered allmulticast mode [ 565.748639][T17225] tipc: Resetting bearer [ 565.756629][T17228] can: request_module (can-proto-5) failed. [ 565.911530][T17225] tipc: Resetting bearer [ 566.010069][T17225] tipc: Disabling bearer [ 566.122149][T16956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.172284][T17254] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 566.199100][T17254] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.222687][ T5905] lo speed is unknown, defaulting to 1000 [ 566.253020][T16956] veth0_vlan: entered promiscuous mode [ 566.270879][T16956] veth1_vlan: entered promiscuous mode [ 566.334066][T16956] veth0_macvtap: entered promiscuous mode [ 566.346865][T16956] veth1_macvtap: entered promiscuous mode [ 566.381788][T16956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.402453][T16956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.419442][T13657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.430786][T13657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.441912][T13657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.451798][T13657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.925174][T17279] netlink: 'syz.1.3060': attribute type 10 has an invalid length. [ 566.933183][T14817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.942318][T14817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.965496][T17278] tc_dump_action: action bad kind [ 567.002313][T17279] macvlan0: entered allmulticast mode [ 567.049555][T17283] netlink: 'syz.2.3061': attribute type 1 has an invalid length. [ 567.061007][T17279] veth1_vlan: entered allmulticast mode [ 567.077324][T17279] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 567.087038][T17278] netlink: 'syz.4.3059': attribute type 4 has an invalid length. [ 567.159077][T14817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.168678][T14817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.352674][T17286] netlink: 'syz.3.2976': attribute type 3 has an invalid length. [ 567.421744][T17274] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 567.800665][T17283] wg1 speed is unknown, defaulting to 1000 [ 567.875235][T17283] lo speed is unknown, defaulting to 1000 [ 568.284344][T17302] netlink: 'syz.1.3065': attribute type 13 has an invalid length. [ 568.297333][T17302] netlink: 'syz.1.3065': attribute type 17 has an invalid length. [ 568.612509][T17302] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 568.715755][T17310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.745741][T16611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 568.759893][T16611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 568.768773][T16611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 568.783004][T16611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 568.791233][T13662] smc: removing ib device syz1 [ 568.805820][T16611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 568.843802][T17308] wg1 speed is unknown, defaulting to 1000 [ 568.867552][T17308] lo speed is unknown, defaulting to 1000 [ 568.942547][T17322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3069'. [ 569.102692][T17317] wg1 speed is unknown, defaulting to 1000 [ 569.199160][T17331] tipc: Started in network mode [ 569.213338][T17331] tipc: Node identity ea1873cd3faa, cluster identity 4711 [ 569.221088][T17331] tipc: Enabled bearer , priority 0 [ 569.262945][T17329] tipc: Resetting bearer [ 569.269980][T17317] lo speed is unknown, defaulting to 1000 [ 569.327313][T17323] tipc: Disabling bearer [ 570.303415][T17354] netlink: 'syz.4.3075': attribute type 1 has an invalid length. [ 570.516367][T17317] chnl_net:caif_netlink_parms(): no params data found [ 570.747886][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3077'. [ 570.854200][T16611] Bluetooth: hci1: command tx timeout [ 571.029746][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3078'. [ 571.200143][T17372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3079'. [ 571.386924][T17369] veth1_vlan (unregistering): left allmulticast mode [ 571.444448][T17369] bond0: (slave macvlan0): Releasing backup interface [ 571.530706][T17317] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.550399][T17317] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.570723][T17317] bridge_slave_0: entered allmulticast mode [ 571.582334][T17317] bridge_slave_0: entered promiscuous mode [ 571.628130][T17317] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.645991][T17317] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.663576][T17317] bridge_slave_1: entered allmulticast mode [ 571.673108][T17317] bridge_slave_1: entered promiscuous mode [ 571.879704][T17386] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.935963][T17389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3085'. [ 571.960571][T17317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.025692][T17317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.180998][T17317] team0: Port device team_slave_0 added [ 572.181969][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3089'. [ 572.206979][T17317] team0: Port device team_slave_1 added [ 572.348591][T17317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.364935][T17317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.394287][T17317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.468301][T17317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.499712][T17317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.644633][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3090'. [ 572.702072][T17317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.934541][T16611] Bluetooth: hci1: command tx timeout [ 572.982211][T17317] hsr_slave_0: entered promiscuous mode [ 572.995935][T17317] hsr_slave_1: entered promiscuous mode [ 573.002560][T17317] debugfs: 'hsr0' already exists in 'hsr' [ 573.009769][T17317] Cannot create hsr debugfs directory [ 573.277498][T17428] netlink: 'syz.1.3097': attribute type 9 has an invalid length. [ 573.482618][T17430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3099'. [ 573.499020][T17420] wg1 speed is unknown, defaulting to 1000 [ 573.542122][T17430] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3099'. [ 573.573983][T17420] lo speed is unknown, defaulting to 1000 [ 573.811856][T17317] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 573.905401][T17448] tipc: Started in network mode [ 573.913434][T17448] tipc: Node identity 62fc23901ea9, cluster identity 4711 [ 573.927808][T17448] tipc: Enabled bearer , priority 0 [ 573.982729][T17450] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3103'. [ 574.150760][T17447] tipc: Resetting bearer [ 574.172883][T17443] tipc: Resetting bearer [ 574.296560][T17463] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3106'. [ 575.015372][ T24] tipc: Node number set to 2085954448 [ 575.020997][T16611] Bluetooth: hci1: command tx timeout [ 575.058227][T17480] xt_l2tp: wrong L2TP version: 1 [ 576.144549][T17443] tipc: Disabling bearer [ 576.155439][T17317] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.257761][T17317] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.441642][T17317] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 576.500212][T17493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3115'. [ 576.509693][T17493] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3115'. [ 576.533960][T17493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3115'. [ 576.688304][T17501] vxcan1: entered allmulticast mode [ 576.710033][T17505] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3116'. [ 576.898003][T17500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3116'. [ 576.915616][T17317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 576.948103][T17500] bridge0: entered promiscuous mode [ 576.958440][T17500] bridge0: left promiscuous mode [ 576.988973][T17317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 577.000903][T17317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 577.046955][T17518] dummy0: entered promiscuous mode [ 577.069230][T17317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 577.091981][T17516] tipc: Enabled bearer , priority 0 [ 577.099977][T16611] Bluetooth: hci1: command tx timeout [ 577.111169][T17516] syzkaller0: entered promiscuous mode [ 577.117322][T17516] syzkaller0: entered allmulticast mode [ 577.141151][T17516] tipc: Resetting bearer [ 577.149101][T17515] tipc: Resetting bearer [ 577.166164][T17515] tipc: Disabling bearer [ 577.276056][T17530] netlink: 'syz.1.3124': attribute type 9 has an invalid length. [ 577.297058][T17317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.345000][T17317] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.372629][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.379892][ T8297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.420460][T17533] wg1 speed is unknown, defaulting to 1000 [ 577.432958][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.440207][ T8297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.449853][T17533] lo speed is unknown, defaulting to 1000 [ 578.028561][T17546] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.066059][T17547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 578.154473][T17317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.187873][T17547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.216476][T17546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.275105][T17317] veth0_vlan: entered promiscuous mode [ 578.325663][T17317] veth1_vlan: entered promiscuous mode [ 578.408943][T17558] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20001 [ 578.421002][T17317] veth0_macvtap: entered promiscuous mode [ 578.492053][T17317] veth1_macvtap: entered promiscuous mode [ 578.629059][T17317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.695538][T17317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.740938][T13657] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.756975][T13657] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.836356][T13657] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 578.871454][T13657] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.348636][T13657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.364061][T13657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.471074][T13662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.480699][T13662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.730117][T17602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3142'. [ 579.773733][T17603] openvswitch: netlink: VXLAN extension 226 out of range max 1 [ 579.859205][T17604] openvswitch: netlink: VXLAN extension 226 out of range max 1 [ 580.028391][T17610] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 580.605541][T17622] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 580.766769][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 580.865944][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 580.876615][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 580.886149][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 580.896894][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 580.908176][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 581.261818][T17636] bridge_slave_0: left allmulticast mode [ 581.268199][T17636] bridge_slave_0: left promiscuous mode [ 581.294163][T17636] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.327534][T17636] bridge_slave_1: left allmulticast mode [ 581.330976][T17640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3153'. [ 581.336312][T17636] bridge_slave_1: left promiscuous mode [ 581.362494][T17636] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.370614][T17644] netlink: 'syz.4.3151': attribute type 27 has an invalid length. [ 581.395629][T17636] bond0: (slave bond_slave_0): Releasing backup interface [ 581.411665][T17636] bond0: (slave bond_slave_1): Releasing backup interface [ 581.433077][T17636] team0: Port device team_slave_0 removed [ 581.446642][T17636] team0: Port device team_slave_1 removed [ 581.450988][T17648] netlink: 'syz.3.3155': attribute type 1 has an invalid length. [ 581.455517][T17636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.470579][T17636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.479613][T17636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 581.487468][T17636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.498103][T17636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 581.515032][T17632] wg1 speed is unknown, defaulting to 1000 [ 581.561846][T17644] tipc: Resetting bearer [ 581.584946][T17644] dummy0: left promiscuous mode [ 581.597903][T17644] 0X: left allmulticast mode [ 581.604886][T17644] bridge_slave_1: left allmulticast mode [ 581.612875][T17644] xfrm0: left promiscuous mode [ 581.618223][T17644] xfrm0: left allmulticast mode [ 581.626711][T17644] vlan0: left promiscuous mode [ 581.632038][T17644] vlan1: left promiscuous mode [ 581.637386][T17644] vlan1: left allmulticast mode [ 581.642396][T17644] veth0_vlan: left allmulticast mode [ 581.649605][T17644] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 581.660928][T17644] geneve2: left promiscuous mode [ 581.666372][T17644] gretap1: left allmulticast mode [ 581.672400][T17644] veth3: left promiscuous mode [ 581.677685][T17644] sit1: left promiscuous mode [ 581.682609][T17644] bond5: left promiscuous mode [ 581.687672][T17644] bond5: left allmulticast mode [ 581.692867][T17644] bridge3: left promiscuous mode [ 581.698978][T17644] gretap2: left promiscuous mode [ 581.732750][T17644] bond7: left promiscuous mode [ 581.738378][T17644] bond7: left allmulticast mode [ 581.745483][T17644] bond8: left promiscuous mode [ 581.848450][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 581.848577][T17632] lo speed is unknown, defaulting to 1000 [ 581.858157][T17626] wg1 speed is unknown, defaulting to 1000 [ 581.872641][ T24] lo speed is unknown, defaulting to 1000 [ 581.878914][ T24] syz2: Port: 1 Link DOWN [ 581.889440][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 581.935917][T14817] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.952508][T14817] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.974000][T17626] lo speed is unknown, defaulting to 1000 [ 581.984971][T14817] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 581.993819][T14817] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 582.011747][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'. [ 582.397435][T17672] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3161'. [ 582.572334][T17681] openvswitch: netlink: Message has 4 unknown bytes. [ 582.678868][T17688] 8021q: VLANs not supported on nlmon0 [ 582.752640][T17626] chnl_net:caif_netlink_parms(): no params data found [ 582.871633][T17693] netlink: 'syz.0.3167': attribute type 8 has an invalid length. [ 582.883487][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3167'. [ 582.950314][ T5870] Bluetooth: hci4: command tx timeout [ 583.044602][T17705] netlink: 'syz.4.3170': attribute type 7 has an invalid length. [ 583.046622][ T30] audit: type=1107 audit(1758146506.393:4): pid=17703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='iӗFЦ8} y rTһ8,y՗#=?vCʻ6Uˠ@{ Ks{Q- >hg =M6ZY>QE֕99I' ߙB>Bq=ڃ1n32YsXX|Wd' [ 583.095016][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3170'. [ 583.525276][T17713] netlink: 'syz.1.3169': attribute type 1 has an invalid length. [ 583.534508][T17713] netlink: 'syz.1.3169': attribute type 1 has an invalid length. [ 583.542610][T17713] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3169'. [ 584.149047][T13662] bond0 (unregistering): Released all slaves [ 584.267022][T13662] bond1 (unregistering): Released all slaves [ 584.377332][T13662] bond2 (unregistering): (slave veth5): Releasing active interface [ 584.386574][T13662] bond2 (unregistering): Released all slaves [ 584.496197][T13662] bond3 (unregistering): (slave veth7): Releasing active interface [ 584.505753][T13662] bond3 (unregistering): (slave macvlan2): Releasing active interface [ 584.514692][T13662] bond3 (unregistering): Released all slaves [ 584.630090][T13662] bond4 (unregistering): Released all slaves [ 584.741024][T13662] bond5 (unregistering): Released all slaves [ 584.972717][T13662] : left promiscuous mode [ 585.014368][ T5870] Bluetooth: hci4: command tx timeout [ 585.031522][T17725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3175'. [ 585.048538][T17721] dvmrp1: entered allmulticast mode [ 585.088302][T17725] 8021q: VLANs not supported on ipvlan1 [ 585.112159][T13662] tipc: Left network mode [ 585.134526][T17731] macsec1: entered promiscuous mode [ 585.140973][T17731] macsec1: entered allmulticast mode [ 585.348993][T17752] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3180'. [ 585.360904][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.373170][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.384789][T17626] bridge_slave_0: entered allmulticast mode [ 585.393829][T17626] bridge_slave_0: entered promiscuous mode [ 585.448552][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.464696][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.472085][T17626] bridge_slave_1: entered allmulticast mode [ 585.480668][T17626] bridge_slave_1: entered promiscuous mode [ 585.608305][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.661525][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.684457][T17757] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3182'. [ 585.778190][T17626] team0: Port device team_slave_0 added [ 585.797243][T17626] team0: Port device team_slave_1 added [ 586.082343][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.110467][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.159421][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.227839][T14817] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.248781][T14817] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.286355][T14817] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.311452][T14817] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 586.336874][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.354994][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.409151][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.430795][T17771] tipc: Enabled bearer , priority 0 [ 586.445435][T13662] hsr_slave_0: left promiscuous mode [ 586.452069][T13662] hsr_slave_1: left promiscuous mode [ 586.773533][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 587.094883][ T5870] Bluetooth: hci4: command tx timeout [ 587.775697][T17768] syzkaller0: entered promiscuous mode [ 587.781235][T17768] syzkaller0: entered allmulticast mode [ 587.850422][T17776] tipc: Resetting bearer [ 587.864973][T17763] tipc: Resetting bearer [ 587.897785][T17763] tipc: Disabling bearer [ 588.083932][T17790] __nla_validate_parse: 4 callbacks suppressed [ 588.083953][T17790] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3187'. [ 588.125033][T17626] hsr_slave_0: entered promiscuous mode [ 588.142317][T17626] hsr_slave_1: entered promiscuous mode [ 588.160865][T17626] debugfs: 'hsr0' already exists in 'hsr' [ 588.166961][T17626] Cannot create hsr debugfs directory [ 588.405338][T17801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3189'. [ 588.432594][T17805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3191'. [ 588.443142][T17805] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 588.542805][T13662] IPVS: stop unused estimator thread 0... [ 589.102532][T17840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 589.174580][ T5870] Bluetooth: hci4: command tx timeout [ 589.204494][T17838] lo speed is unknown, defaulting to 1000 [ 589.434144][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3195'. [ 589.716606][T17626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.763617][T17626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 590.006725][T17626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 590.052092][T17626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 590.058106][T17872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3208'. [ 590.092842][T17872] netlink: 'syz.4.3208': attribute type 5 has an invalid length. [ 590.301587][T17626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.351976][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 590.365850][T17886] (unnamed net_device) (uninitialized): option broadcast_neighbor: invalid value (5) [ 590.389489][T17626] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.421068][T13657] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.428325][T13657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.447826][T17891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3212'. [ 590.472491][T13657] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.479753][T13657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.739996][T17897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.762139][T17904] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3215'. [ 590.957848][T17897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.996151][T17908] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3217'. [ 591.077060][T17897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.204709][T17897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.356705][T17626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.469886][T13662] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.517832][T13662] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.568759][T14817] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.641918][T13656] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.661819][T17626] veth0_vlan: entered promiscuous mode [ 591.773015][T17626] veth1_vlan: entered promiscuous mode [ 591.865811][T17626] veth0_macvtap: entered promiscuous mode [ 591.882220][T17626] veth1_macvtap: entered promiscuous mode [ 591.914232][T17626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.947832][T17626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.995658][T17942] batadv1: entered allmulticast mode [ 592.015156][T17942] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 592.034550][T13656] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.056726][T13656] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.096492][T13656] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.116690][T13656] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.284641][T17974] netlink: 'syz.3.3228': attribute type 1 has an invalid length. [ 592.292776][T13657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.324513][T13657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.414553][T14816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.426564][T14816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.728704][T17982] lo speed is unknown, defaulting to 1000 [ 592.785638][T17985] veth0: entered promiscuous mode [ 592.997475][T17987] netlink: 'syz.2.3143': attribute type 16 has an invalid length. [ 593.267065][T17995] __nla_validate_parse: 6 callbacks suppressed [ 593.267088][T17995] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3233'. [ 593.316295][T17980] netlink: 'syz.0.3230': attribute type 1 has an invalid length. [ 593.340549][T17995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3233'. [ 593.360589][T17980] netlink: 'syz.0.3230': attribute type 1 has an invalid length. [ 593.391631][T17980] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3230'. [ 593.410390][T16611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 593.420806][T16611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 593.430657][T16611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 593.444912][T16611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 593.453068][T16611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 593.707705][T17985] veth0: left promiscuous mode [ 593.764310][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3236'. [ 593.803026][T18007] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 593.821410][T18007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.978794][T18000] lo speed is unknown, defaulting to 1000 [ 594.421495][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3246'. [ 594.427690][T18034] lo speed is unknown, defaulting to 1000 [ 594.541762][T18000] chnl_net:caif_netlink_parms(): no params data found [ 594.833484][T18000] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.851444][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.871759][T18000] bridge_slave_0: entered allmulticast mode [ 594.884467][T18000] bridge_slave_0: entered promiscuous mode [ 594.907396][T18000] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.938870][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.955421][T18000] bridge_slave_1: entered allmulticast mode [ 594.979294][T18000] bridge_slave_1: entered promiscuous mode [ 595.014233][T18063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3251'. [ 595.040846][T18063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3251'. [ 595.239393][T18063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3251'. [ 595.272417][T18063] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 595.495932][ T5870] Bluetooth: hci5: command tx timeout [ 595.590942][T14817] veth7: left allmulticast mode [ 595.608209][T14817] veth7: left promiscuous mode [ 595.620985][T14817] bridge5: port 1(veth7) entered disabled state [ 595.864502][T14817] bond2 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 595.881374][T14817] bond2 (unregistering): (slave ip6gretap2): Releasing backup interface [ 595.907469][T14817] bond2 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - b6:76:d7:89:02:a2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 596.146052][T14817] bond1 (unregistering): (slave gretap1): Releasing active interface [ 596.238163][T14817] dvmrp1 (unregistering): left allmulticast mode [ 596.258871][T14817] bond6 (unregistering): (slave geneve3): Releasing active interface [ 596.879445][T14817] bond0 (unregistering): Released all slaves [ 596.894379][T14817] bond1 (unregistering): Released all slaves [ 597.008766][T14817] bond2 (unregistering): (slave veth3): Releasing backup interface [ 597.026326][T14817] bond2 (unregistering): Released all slaves [ 597.139214][T14817] bond3 (unregistering): Released all slaves [ 597.246436][T14817] bond4 (unregistering): Released all slaves [ 597.260209][T14817] bond5 (unregistering): Released all slaves [ 597.369580][T14817] bond6 (unregistering): Released all slaves [ 597.478590][T14817] bond7 (unregistering): Released all slaves [ 597.492023][T14817] bond8 (unregistering): Released all slaves [ 597.519776][T18000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.558092][T18000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.573680][ T5870] Bluetooth: hci5: command tx timeout [ 597.712761][T18073] lo speed is unknown, defaulting to 1000 [ 597.716478][T18000] team0: Port device team_slave_0 added [ 597.743978][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3258'. [ 597.744713][T14817] : left promiscuous mode [ 597.771413][T18095] openvswitch: netlink: Flow key attr not present in new flow. [ 597.808968][T18093] netlink: 'syz.2.3256': attribute type 1 has an invalid length. [ 597.845801][T18000] team0: Port device team_slave_1 added [ 597.853039][T18095] x9: renamed from bridge_slave_0 (while UP) [ 597.954672][T14817] tipc: Disabling bearer [ 597.965050][T14817] tipc: Disabling bearer [ 597.980784][T14817] tipc: Left network mode [ 598.049202][T18000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.070236][T18000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.106335][T18000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.226184][T18000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.233507][T18000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.279588][T18000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.481188][T18000] hsr_slave_0: entered promiscuous mode [ 598.498469][T18000] hsr_slave_1: entered promiscuous mode [ 598.506177][T18000] debugfs: 'hsr0' already exists in 'hsr' [ 598.512020][T18000] Cannot create hsr debugfs directory [ 598.880996][T18122] lo speed is unknown, defaulting to 1000 [ 599.051373][T14817] hsr_slave_0: left promiscuous mode [ 599.127738][T14817] hsr_slave_1: left promiscuous mode [ 599.158921][T14817] pimreg (unregistering): left allmulticast mode [ 599.214953][T18147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3269'. [ 599.248317][T14817] team0 (unregistering): Port device batadv1 removed [ 599.653666][ T5870] Bluetooth: hci5: command tx timeout [ 600.186820][T18146] netlink: 'syz.3.3269': attribute type 2 has an invalid length. [ 600.427964][T18161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3273'. [ 600.631691][T18168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3277'. [ 600.819719][T14817] IPVS: stop unused estimator thread 0... [ 601.081769][T18190] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3281'. [ 601.571667][T18000] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 601.637574][T18000] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 601.685516][T18000] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 601.720380][T18000] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 601.733645][ T5870] Bluetooth: hci5: command tx timeout [ 601.794760][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3292'. [ 601.795175][T18224] netlink: 'syz.1.3291': attribute type 13 has an invalid length. [ 601.833589][T18225] netlink: 'syz.1.3291': attribute type 13 has an invalid length. [ 601.853066][T18225] netlink: 'syz.1.3291': attribute type 17 has an invalid length. [ 601.859733][T18231] dummy0: entered promiscuous mode [ 601.867062][T18231] macsec2: entered promiscuous mode [ 601.872585][T18224] netlink: 'syz.1.3291': attribute type 17 has an invalid length. [ 601.882263][T18231] macsec2: entered allmulticast mode [ 601.887987][T18231] dummy0: entered allmulticast mode [ 601.904367][T18231] dummy0: left allmulticast mode [ 601.909628][T18231] dummy0: left promiscuous mode [ 601.936390][T18225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 601.962166][T18224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 602.185622][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'. [ 602.241491][T18000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.280494][T18000] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.304136][ T8297] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.311370][ T8297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.362701][ T8297] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.369946][ T8297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.441383][T18252] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3299'. [ 602.526204][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3299'. [ 603.052450][T18268] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 603.086218][T18268] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 603.154055][T18268] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 603.518313][T18000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.886993][T18287] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 604.070244][T18299] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.3310'. [ 604.112468][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.142801][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.189354][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.254921][T18299] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 604.319548][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.328861][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.337337][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.351794][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.360630][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.369452][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.378284][T18299] wg1 speed is unknown, defaulting to 1000 [ 604.500490][T18313] wg1 speed is unknown, defaulting to 1000 [ 604.668538][T18000] veth0_vlan: entered promiscuous mode [ 604.717608][T18000] veth1_vlan: entered promiscuous mode [ 604.854150][T18000] veth0_macvtap: entered promiscuous mode [ 604.866791][T18000] veth1_macvtap: entered promiscuous mode [ 604.970642][T18000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.991855][T18000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.028224][T14817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.040702][T14817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.056544][T14817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.067915][T14817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.363004][ T8297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.371058][ T8297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.500330][T13655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.510485][T13655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.531866][T18341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 605.874879][T18357] netlink: 'syz.4.3323': attribute type 27 has an invalid length. [ 606.055530][T18357] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.063622][T18357] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.266732][T18357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.282896][T18357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.477288][T13660] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.493998][T13660] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.507515][T13660] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.559778][T13660] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.598302][T18366] wg1 speed is unknown, defaulting to 1000 [ 607.047233][T18393] tipc: Can't bind to reserved service type 0 [ 607.108577][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 607.136092][T18395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3334'. [ 607.199201][T18397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'. [ 607.266112][T18395] geneve2: entered promiscuous mode [ 607.281634][T18395] geneve2: entered allmulticast mode [ 607.292784][T13660] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.323732][T13660] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.332497][T13660] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.369197][T18404] netem: change failed [ 607.419809][T13660] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.480962][T18413] !: renamed from dummy0 [ 607.733799][T16611] Bluetooth: hci5: command 0x0405 tx timeout [ 607.870719][T18423] wg1 speed is unknown, defaulting to 1000 [ 608.063307][T18432] tipc: Started in network mode [ 608.075212][T18432] tipc: Node identity ff, cluster identity 4711 [ 608.093912][T18432] tipc: Enabling of bearer rejected, failed to enable media [ 608.657835][T18450] netlink: 'syz.0.3350': attribute type 9 has an invalid length. [ 608.990610][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3357'. [ 608.994198][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3358'. [ 609.210797][T18464] wg1 speed is unknown, defaulting to 1000 [ 609.558692][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 609.625540][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3363'. [ 609.639882][T18500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3365'. [ 609.639883][ T8297] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.639929][ T8297] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.679841][ T8297] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.694019][ T8297] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 609.801098][T18504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3366'. [ 609.825397][T16611] Bluetooth: hci5: command 0x0405 tx timeout [ 609.892497][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3368'. [ 609.976349][T18507] geneve3: entered promiscuous mode [ 609.993411][T18507] geneve3: entered allmulticast mode [ 610.057575][ T30] audit: type=1800 audit(1758146533.403:5): pid=18515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3370" name="blkio.bfq.time_recursive" dev="tmpfs" ino=414 res=0 errno=0 [ 610.126926][ T30] audit: type=1800 audit(1758146533.403:6): pid=18515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3370" name="blkio.bfq.time_recursive" dev="tmpfs" ino=414 res=0 errno=0 [ 610.220252][T18525] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.336814][T18525] bridge_slave_0: left allmulticast mode [ 610.388891][T18525] bridge_slave_0: left promiscuous mode [ 610.402694][T18525] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.438990][T18525] bridge_slave_1: left allmulticast mode [ 610.469195][T18525] bridge_slave_1: left promiscuous mode [ 610.486138][T18525] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.535944][T18525] bond0: (slave bond_slave_0): Releasing backup interface [ 610.612555][T18525] bond0: (slave bond_slave_1): Releasing backup interface [ 610.740140][T18525] team0: Port device team_slave_0 removed [ 610.768435][T18525] team0: Port device team_slave_1 removed [ 610.789416][T18525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.797773][T18525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.809678][T18525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.818064][T18525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.836182][T18525] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 610.886706][T18533] wg1 speed is unknown, defaulting to 1000 [ 610.923855][T18548] netdevsim netdevsim4: Direct firmware load for . [ 610.923855][T18548] failed with error -2 [ 610.941467][T18548] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 610.941467][T18548] [ 611.457246][T18558] wg1 speed is unknown, defaulting to 1000 [ 611.527443][T18579] dvmrp0: entered allmulticast mode [ 611.555650][T18574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.635263][T18582] bridge_slave_0: left allmulticast mode [ 611.684358][T18582] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.720552][T18582] bridge_slave_1: left allmulticast mode [ 611.732796][T18582] bridge_slave_1: left promiscuous mode [ 611.748957][T18582] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.771796][T18582] bond0: (slave bond_slave_0): Releasing backup interface [ 611.787861][T18582] bond0: (slave bond_slave_1): Releasing backup interface [ 611.807316][T18582] team0: Port device team_slave_0 removed [ 611.819326][T18582] team0: Port device team_slave_1 removed [ 611.826268][T18582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.834374][T18582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.842847][T18582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.850686][T18582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.859792][T18582] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 611.942625][T11236] wg1 speed is unknown, defaulting to 1000 [ 612.182711][T18599] erspan0: entered promiscuous mode [ 612.197958][T18599] erspan0: left promiscuous mode [ 612.305219][T18596] __nla_validate_parse: 2 callbacks suppressed [ 612.305235][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3392'. [ 612.329323][T18602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3393'. [ 612.559710][T18606] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3395'. [ 612.566147][T18591] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 612.758359][T18616] wg1 speed is unknown, defaulting to 1000 [ 612.766515][T18613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3398'. [ 612.786504][T18613] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3398'. [ 612.829424][T18619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3400'. [ 612.871308][T18622] netlink: 'syz.2.3401': attribute type 1 has an invalid length. [ 612.915935][T18622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.930897][T18619] policy can only be matched on NF_INET_PRE_ROUTING [ 612.930918][T18619] unable to load match [ 612.975428][T18622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.983894][T18622] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 612.998572][T18628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3401'. [ 612.999964][T18622] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 613.027886][T18630] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3403'. [ 613.347752][T18649] vlan0: entered promiscuous mode [ 613.353554][T18649] vlan0: entered allmulticast mode [ 613.359221][T18649] hsr_slave_1: entered allmulticast mode [ 613.381738][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3408'. [ 613.388865][T18651] wg1 speed is unknown, defaulting to 1000 [ 613.420435][T18652] netlink: 'syz.4.3409': attribute type 1 has an invalid length. [ 613.429824][T18652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3409'. [ 613.770875][T18655] wg1 speed is unknown, defaulting to 1000 [ 613.813780][ T5870] Bluetooth: hci4: command 0x0401 tx timeout [ 614.804653][T18718] netlink: 'syz.4.3426': attribute type 29 has an invalid length. [ 614.841486][T18718] netlink: 'syz.4.3426': attribute type 29 has an invalid length. [ 615.084601][T18725] wg1 speed is unknown, defaulting to 1000 [ 616.980769][T18746] erspan0: entered promiscuous mode [ 617.001576][T18746] netlink: 'syz.2.3436': attribute type 2 has an invalid length. [ 617.030152][T13655] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.053349][T13655] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.112556][T18756] vxcan1: tx address claim with dlc 0 [ 617.145684][T18756] netlink: 'syz.2.3437': attribute type 1 has an invalid length. [ 617.185127][T13655] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.200955][T13655] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.220305][T13655] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.262141][T13655] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.282844][T13655] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.312118][T13655] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.359176][T18763] __nla_validate_parse: 5 callbacks suppressed [ 617.359198][T18763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3440'. [ 617.388097][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3440'. [ 617.650844][T18779] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3444'. [ 617.765202][T18788] wg1 speed is unknown, defaulting to 1000 [ 618.579521][T18817] !: renamed from dummy0 (while UP) [ 618.834916][T18828] bridge2: entered promiscuous mode [ 619.029226][T18837] netlink: 'syz.1.3462': attribute type 3 has an invalid length. [ 619.118038][T18838] syzkaller0: entered promiscuous mode [ 619.126012][T18838] syzkaller0: entered allmulticast mode [ 619.243957][T18844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3464'. [ 619.267176][T18838] tun0: tun_chr_ioctl cmd 1074025675 [ 619.283322][T18838] tun0: persist enabled [ 619.882058][T18861] netlink: 'syz.3.3471': attribute type 1 has an invalid length. [ 619.890145][T18861] netlink: 'syz.3.3471': attribute type 1 has an invalid length. [ 619.898624][T18861] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3471'. [ 621.395973][T18884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3474'. [ 621.488252][T18885] netlink: 'syz.1.3474': attribute type 1 has an invalid length. [ 621.510590][T18884] netlink: 'syz.1.3474': attribute type 1 has an invalid length. [ 621.542585][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'. [ 621.577529][T18896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3477'. [ 622.062690][T18916] netlink: 'syz.0.3482': attribute type 1 has an invalid length. [ 622.150536][T18916] netlink: 'syz.0.3482': attribute type 1 has an invalid length. [ 622.165305][T18916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3482'. [ 622.347872][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 622.845897][T18940] wg1 speed is unknown, defaulting to 1000 [ 623.030036][T18960] FAULT_INJECTION: forcing a failure. [ 623.030036][T18960] name failslab, interval 1, probability 0, space 0, times 0 [ 623.063752][T18960] CPU: 1 UID: 0 PID: 18960 Comm: syz.4.3495 Not tainted syzkaller #0 PREEMPT(full) [ 623.063783][T18960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 623.063795][T18960] Call Trace: [ 623.063803][T18960] [ 623.063812][T18960] dump_stack_lvl+0x189/0x250 [ 623.063846][T18960] ? __pfx____ratelimit+0x10/0x10 [ 623.063870][T18960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 623.063895][T18960] ? __pfx__printk+0x10/0x10 [ 623.063933][T18960] ? __pfx___might_resched+0x10/0x10 [ 623.063954][T18960] ? fs_reclaim_acquire+0x7d/0x100 [ 623.063981][T18960] should_fail_ex+0x414/0x560 [ 623.064019][T18960] should_failslab+0xa8/0x100 [ 623.064053][T18960] __kmalloc_noprof+0xcb/0x4f0 [ 623.064078][T18960] ? kfree+0x4d/0x440 [ 623.064100][T18960] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 623.064130][T18960] tomoyo_realpath_from_path+0xe3/0x5d0 [ 623.064157][T18960] ? tomoyo_domain+0xd9/0x130 [ 623.064188][T18960] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 623.064218][T18960] tomoyo_path_number_perm+0x1e8/0x5a0 [ 623.064252][T18960] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 623.064303][T18960] ? __lock_acquire+0xab9/0xd20 [ 623.064360][T18960] ? __fget_files+0x2a/0x420 [ 623.064384][T18960] ? __fget_files+0x2a/0x420 [ 623.064402][T18960] ? __fget_files+0x3a0/0x420 [ 623.064420][T18960] ? __fget_files+0x2a/0x420 [ 623.064446][T18960] security_file_ioctl+0xcb/0x2d0 [ 623.064488][T18960] __se_sys_ioctl+0x47/0x170 [ 623.064519][T18960] do_syscall_64+0xfa/0x3b0 [ 623.064540][T18960] ? lockdep_hardirqs_on+0x9c/0x150 [ 623.064562][T18960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.064584][T18960] ? clear_bhb_loop+0x60/0xb0 [ 623.064610][T18960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.064631][T18960] RIP: 0033:0x7f042178eba9 [ 623.064651][T18960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.064670][T18960] RSP: 002b:00007f0422611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.064694][T18960] RAX: ffffffffffffffda RBX: 00007f04219d5fa0 RCX: 00007f042178eba9 [ 623.064709][T18960] RDX: 0000200000000040 RSI: 00000000000089f1 RDI: 0000000000000003 [ 623.064723][T18960] RBP: 00007f0422611090 R08: 0000000000000000 R09: 0000000000000000 [ 623.064736][T18960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.064749][T18960] R13: 00007f04219d6038 R14: 00007f04219d5fa0 R15: 00007ffea2487148 [ 623.064786][T18960] [ 623.064795][T18960] ERROR: Out of memory at tomoyo_realpath_from_path. [ 623.178972][T18964] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 623.552518][T18977] netlink: 'syz.3.3497': attribute type 1 has an invalid length. [ 623.613730][T18977] netlink: 'syz.3.3497': attribute type 1 has an invalid length. [ 623.681620][T18977] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3497'. [ 623.975771][T18998] bond0: Device is already in use. [ 623.987816][T18995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'. [ 624.054721][T18995] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 624.072657][T18995] team0: Device ipvlan2 is already an upper device of the team interface [ 624.191693][T19000] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3508'. [ 624.217911][T19000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3508'. [ 624.288787][T19007] vlan2: entered promiscuous mode [ 624.307370][T19007] bond0: entered promiscuous mode [ 624.346207][T19009] vxcan1: entered allmulticast mode [ 624.485374][T19011] vxcan1: left allmulticast mode [ 624.733070][T19016] wg1 speed is unknown, defaulting to 1000 [ 625.027526][T13660] batman_adv: batadv0: Removing interface: macvlan0 [ 625.119078][T13660] bond1 (unregistering): (slave ip6gretap2): Releasing backup interface [ 625.410283][T13660] bond4 (unregistering): (slave gretap2): Releasing active interface [ 625.447843][T13660] bond8 (unregistering): (slave gretap3): Releasing active interface [ 625.467279][T19045] netlink: 'syz.3.3514': attribute type 1 has an invalid length. [ 625.482767][T13660] tipc: Disabling bearer [ 625.486887][T19045] netlink: 'syz.3.3514': attribute type 1 has an invalid length. [ 625.497952][T19045] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3514'. [ 625.787248][T13660] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 625.795851][T13660] bond1 (unregistering): (slave macvlan2): the permanent HWaddr of slave - 2e:65:ab:62:5c:da - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 625.821920][T13660] bond0 (unregistering): Released all slaves [ 625.934335][T13660] bond1 (unregistering): (slave veth7): Releasing backup interface [ 625.944006][T13660] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 625.953067][T13660] bond1 (unregistering): Released all slaves [ 626.070904][T13660] bond2 (unregistering): Released all slaves [ 626.183910][T13660] bond3 (unregistering): Released all slaves [ 626.199587][T13660] bond4 (unregistering): Released all slaves [ 626.317382][T13660] bond5 (unregistering): Released all slaves [ 626.331027][T13660] bond6 (unregistering): Released all slaves [ 626.352595][T13660] bond7 (unregistering): Released all slaves [ 626.465548][T13660] bond8 (unregistering): Released all slaves [ 626.618812][T13660] bond9 (unregistering): Released all slaves [ 626.661223][T19023] wg1 speed is unknown, defaulting to 1000 [ 626.847770][T13660] tipc: Left network mode [ 626.875409][T19057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3517'. [ 626.896645][T19057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3517'. [ 627.722882][T19087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3523'. [ 627.758487][T19088] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 627.767165][T19088] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3522'. [ 627.792475][T19092] netlink: 'syz.4.3522': attribute type 1 has an invalid length. [ 627.821644][T19092] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3522'. [ 628.080084][T19102] netlink: 'syz.1.3527': attribute type 12 has an invalid length. [ 628.486645][T19123] sctp: [Deprecated]: syz.0.3531 (pid 19123) Use of struct sctp_assoc_value in delayed_ack socket option. [ 628.486645][T19123] Use struct sctp_sack_info instead [ 628.707402][T19128] __nla_validate_parse: 4 callbacks suppressed [ 628.707422][T19128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3535'. [ 629.543820][T19121] netlink: 'syz.2.3533': attribute type 1 has an invalid length. [ 629.557017][T19121] netlink: 'syz.2.3533': attribute type 2 has an invalid length. [ 629.598008][T19137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3536'. [ 629.695861][T19152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3539'. [ 630.234680][T13660] tipc: Resetting bearer [ 630.496120][T13660] ip6gretap0 (unregistering): left promiscuous mode [ 630.678911][T19162] infiniband syz2: set down [ 630.683774][T19162] infiniband syz2: added bond0 [ 630.746727][T19192] netlink: 'syz.1.3550': attribute type 4 has an invalid length. [ 630.765464][T19162] RDS/IB: syz2: added [ 630.769946][T19162] smc: adding ib device syz2 with port count 1 [ 630.776924][T19162] smc: ib device syz2 port 1 has no pnetid [ 630.982433][T19197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3552'. [ 631.059309][T19199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3552'. [ 631.595353][T13660] tipc: Disabling bearer [ 631.758324][T13660] bond2 (unregistering): (slave macvlan4): Removing an active aggregator [ 631.768836][T13660] bond2 (unregistering): (slave macvlan4): Releasing backup interface [ 631.842503][T13660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.852650][T13660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.862621][T13660] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 631.873721][T13660] bond0 (unregistering): (slave 0!): Releasing backup interface [ 631.885432][T13660] bond0 (unregistering): Released all slaves [ 631.993934][T13660] bond1 (unregistering): Released all slaves [ 632.099958][T13660] bond2 (unregistering): Released all slaves [ 632.212552][T13660] bond3 (unregistering): (slave veth3): Releasing active interface [ 632.222214][T13660] bond3 (unregistering): Released all slaves [ 632.238842][T13660] bond4 (unregistering): Released all slaves [ 632.348885][T13660] bond5 (unregistering): (slave bond6): Releasing backup interface [ 632.357646][T13660] bond5 (unregistering): Released all slaves [ 632.468509][T13660] bond6 (unregistering): Released all slaves [ 632.576686][T13660] bond7 (unregistering): (slave veth7): Releasing active interface [ 632.585384][T13660] bond7 (unregistering): Released all slaves [ 632.695723][T13660] bond8 (unregistering): Released all slaves [ 632.730170][T19185] wg1 speed is unknown, defaulting to 1000 [ 632.905784][T13660] tipc: Disabling bearer [ 632.925347][T13660] tipc: Left network mode [ 632.942194][T13660] IPVS: stopping backup sync thread 15524 ... [ 632.996025][T19207] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3555'. [ 633.030012][T19207] batadv1: entered promiscuous mode [ 633.042450][T19207] batadv1: entered allmulticast mode [ 633.049457][T19209] sctp: [Deprecated]: syz.0.3556 (pid 19209) Use of int in maxseg socket option. [ 633.049457][T19209] Use struct sctp_assoc_value instead [ 633.459598][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3558'. [ 633.763407][T19220] nbd1: detected capacity change from 0 to 127 [ 633.908657][T19221] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 633.929175][T19228] netlink: 'syz.1.3557': attribute type 1 has an invalid length. [ 633.937539][T19228] netlink: 'syz.1.3557': attribute type 1 has an invalid length. [ 633.945912][T19228] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3557'. [ 633.959378][T19220] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 634.169415][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'. [ 634.185489][T19232] bridge_slave_1: left allmulticast mode [ 634.198794][T19232] bridge_slave_1: left promiscuous mode [ 634.232831][T19232] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.255186][ T5870] block nbd1: Receive control failed (result -32) [ 634.321078][T19232] bridge_slave_0: left allmulticast mode [ 634.326969][T19232] bridge_slave_0: left promiscuous mode [ 634.336987][T19232] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.568298][T19250] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3565'. [ 634.593895][T19250] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3565'. [ 634.799415][T19258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3567'. [ 635.099419][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 635.123863][T19267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3570'. [ 635.302912][T19271] macsec1: entered promiscuous mode [ 635.318681][T19271] mac80211_hwsim hwsim49 wlan1: entered promiscuous mode [ 635.340660][T19271] mac80211_hwsim hwsim49 wlan1: left promiscuous mode [ 635.430329][T19279] netlink: 'syz.1.3572': attribute type 10 has an invalid length. [ 635.442396][T19279] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 635.670768][ T5954] IPVS: starting estimator thread 0... [ 635.763555][T19292] IPVS: using max 23 ests per chain, 55200 per kthread [ 635.771072][T19294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3579'. [ 635.911161][T19298] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 636.032144][T19300] netlink: 'syz.4.3580': attribute type 1 has an invalid length. [ 636.051709][T19300] netlink: 'syz.4.3580': attribute type 3 has an invalid length. [ 636.073747][T19300] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3580'. [ 636.457991][T19309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3581'. [ 636.477858][T19309] netlink: 'syz.4.3581': attribute type 1 has an invalid length. [ 637.349880][T13660] hsr_slave_0: left promiscuous mode [ 637.364715][T13660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.384317][T13660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.466637][T13660] pimreg3 (unregistering): left allmulticast mode [ 637.550414][T19343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 637.557779][T19343] IPv6: NLM_F_CREATE should be set when creating new route [ 637.565064][T19343] IPv6: NLM_F_CREATE should be set when creating new route [ 638.206855][T13660] team0 (unregistering): Port device team_slave_1 removed [ 638.252056][T13660] team0 (unregistering): Port device team_slave_0 removed [ 638.649943][T19334] tipc: Enabled bearer , priority 0 [ 638.659219][T19338] syzkaller0: entered promiscuous mode [ 638.676233][T19338] syzkaller0: entered allmulticast mode [ 638.719307][T19344] tipc: Resetting bearer [ 638.755565][T19350] syz.4.3591: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 638.774991][T19350] CPU: 1 UID: 0 PID: 19350 Comm: syz.4.3591 Not tainted syzkaller #0 PREEMPT(full) [ 638.775020][T19350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 638.775031][T19350] Call Trace: [ 638.775040][T19350] [ 638.775049][T19350] dump_stack_lvl+0x189/0x250 [ 638.775081][T19350] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 638.775112][T19350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.775136][T19350] ? __pfx__printk+0x10/0x10 [ 638.775164][T19350] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 638.775188][T19350] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 638.775222][T19350] warn_alloc+0x214/0x310 [ 638.775260][T19350] ? __pfx_warn_alloc+0x10/0x10 [ 638.775301][T19350] ? __get_vm_area_node+0x28f/0x300 [ 638.775331][T19350] ? fq_pie_init+0x430/0x840 [ 638.775356][T19350] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 638.775418][T19350] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 638.775456][T19350] ? rcu_is_watching+0x15/0xb0 [ 638.775480][T19350] ? fq_pie_init+0x430/0x840 [ 638.775499][T19350] ? fq_pie_init+0x430/0x840 [ 638.775527][T19350] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 638.775557][T19350] ? fq_pie_init+0x430/0x840 [ 638.775576][T19350] ? tcf_block_get+0x67/0xa0 [ 638.775598][T19350] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 638.775626][T19350] fq_pie_init+0x430/0x840 [ 638.775649][T19350] ? __pfx_fq_pie_init+0x10/0x10 [ 638.775669][T19350] qdisc_create+0x7ac/0xea0 [ 638.775699][T19350] tc_modify_qdisc+0x1538/0x20e0 [ 638.775749][T19350] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 638.775815][T19350] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 638.775844][T19350] rtnetlink_rcv_msg+0x77c/0xb70 [ 638.775868][T19350] ? __lock_acquire+0xab9/0xd20 [ 638.775901][T19350] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 638.775924][T19350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.775974][T19350] netlink_rcv_skb+0x208/0x470 [ 638.775995][T19350] ? __lock_acquire+0xab9/0xd20 [ 638.776022][T19350] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 638.776046][T19350] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 638.776081][T19350] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.776117][T19350] netlink_unicast+0x82c/0x9e0 [ 638.776152][T19350] ? __pfx_netlink_unicast+0x10/0x10 [ 638.776177][T19350] ? netlink_sendmsg+0x642/0xb30 [ 638.776201][T19350] ? skb_put+0x11b/0x210 [ 638.776229][T19350] netlink_sendmsg+0x805/0xb30 [ 638.776265][T19350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.776289][T19350] ? aa_sock_msg_perm+0xf1/0x1d0 [ 638.776311][T19350] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.776332][T19350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.776357][T19350] __sock_sendmsg+0x219/0x270 [ 638.776379][T19350] ____sys_sendmsg+0x505/0x830 [ 638.776411][T19350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.776450][T19350] ? import_iovec+0x74/0xa0 [ 638.776479][T19350] ___sys_sendmsg+0x21f/0x2a0 [ 638.776506][T19350] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.776587][T19350] ? __fget_files+0x2a/0x420 [ 638.776604][T19350] ? __fget_files+0x3a0/0x420 [ 638.776632][T19350] __x64_sys_sendmsg+0x19b/0x260 [ 638.776661][T19350] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.776701][T19350] ? rcu_is_watching+0x15/0xb0 [ 638.776728][T19350] ? do_syscall_64+0xbe/0x3b0 [ 638.776755][T19350] do_syscall_64+0xfa/0x3b0 [ 638.776774][T19350] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.776793][T19350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.776811][T19350] ? clear_bhb_loop+0x60/0xb0 [ 638.776835][T19350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.776851][T19350] RIP: 0033:0x7f042178eba9 [ 638.776869][T19350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.776885][T19350] RSP: 002b:00007f04225ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.776907][T19350] RAX: ffffffffffffffda RBX: 00007f04219d6270 RCX: 00007f042178eba9 [ 638.776921][T19350] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000006 [ 638.776935][T19350] RBP: 00007f0421811e19 R08: 0000000000000000 R09: 0000000000000000 [ 638.776947][T19350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.776958][T19350] R13: 00007f04219d6308 R14: 00007f04219d6270 R15: 00007ffea2487148 [ 638.776992][T19350] [ 638.777079][T19350] Mem-Info: [ 639.194817][T19350] active_anon:7079 inactive_anon:0 isolated_anon:0 [ 639.194817][T19350] active_file:3402 inactive_file:40083 isolated_file:0 [ 639.194817][T19350] unevictable:768 dirty:216 writeback:0 [ 639.194817][T19350] slab_reclaimable:12492 slab_unreclaimable:119343 [ 639.194817][T19350] mapped:37645 shmem:1355 pagetables:1087 [ 639.194817][T19350] sec_pagetables:0 bounce:0 [ 639.194817][T19350] kernel_misc_reclaimable:0 [ 639.194817][T19350] free:1299036 free_pcp:13981 free_cma:0 [ 639.241328][T19350] Node 0 active_anon:28316kB inactive_anon:0kB active_file:13608kB inactive_file:160124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150580kB dirty:860kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13424kB pagetables:4220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 639.292017][T19350] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 639.323310][T19350] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 639.352410][T19350] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 639.358865][T19350] Node 0 DMA32 free:1281960kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28268kB inactive_anon:0kB active_file:13608kB inactive_file:158548kB unevictable:1536kB writepending:760kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:43112kB local_pcp:27828kB free_cma:0kB [ 639.391655][T19350] lowmem_reserve[]: 0 0 1 1 1 [ 639.396584][T19350] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 639.426219][T19350] lowmem_reserve[]: 0 0 0 0 0 [ 639.430987][T19350] Node 1 Normal free:3902708kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9888kB local_pcp:1280kB free_cma:0kB [ 639.462819][T19350] lowmem_reserve[]: 0 0 0 0 0 [ 639.467808][T19350] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 639.480942][T19350] Node 0 DMA32: 963*4kB (UM) 219*8kB (UME) 285*16kB (UME) 351*32kB (UME) 80*64kB (UME) 48*128kB (UME) 122*256kB (UM) 51*512kB (UM) 18*1024kB (UME) 3*2048kB (UM) 285*4096kB (UM) = 1281940kB [ 639.492464][T19367] __nla_validate_parse: 11 callbacks suppressed [ 639.492494][T19367] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.3595'. [ 639.500434][T19350] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 639.528775][T19350] Node 1 Normal: 189*4kB (UE) 64*8kB (UME) 46*16kB (UME) 201*32kB (UME) 66*64kB (UME) 17*128kB (UME) 3*256kB (UM) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3902708kB [ 639.547251][T19350] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 639.556832][T19350] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 639.566528][T19350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 639.576515][T19350] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 639.586153][T19350] 44837 total pagecache pages [ 639.590844][T19350] 0 pages in swap cache [ 639.595037][T19350] Free swap = 124996kB [ 639.599184][T19350] Total swap = 124996kB [ 639.603602][T19350] 2097051 pages RAM [ 639.607417][T19350] 0 pages HighMem/MovableOnly [ 639.612077][T19350] 425671 pages reserved [ 639.616631][T19350] 0 pages cma reserved [ 639.657115][T19333] tipc: Resetting bearer [ 639.734364][T19333] tipc: Disabling bearer [ 640.382123][T19381] wg1 speed is unknown, defaulting to 1000 [ 640.400688][T13660] IPVS: stop unused estimator thread 0... [ 641.231419][T19409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3604'. [ 641.488652][T19413] netlink: 'syz.3.3609': attribute type 4 has an invalid length. [ 641.541609][T19420] netlink: 'syz.1.3606': attribute type 1 has an invalid length. [ 641.550677][T19420] netlink: 'syz.1.3606': attribute type 1 has an invalid length. [ 641.573736][T19422] netlink: 'syz.0.3611': attribute type 1 has an invalid length. [ 641.574276][T19420] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3606'. [ 641.894563][T19425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3612'. [ 642.684108][T19443] veth0_to_bridge: entered promiscuous mode [ 642.696971][T19443] netlink: 'syz.4.3616': attribute type 12 has an invalid length. [ 642.705556][T19443] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3616'. [ 642.860259][T19442] veth0_to_bridge: left promiscuous mode [ 643.072462][T19451] wg1 speed is unknown, defaulting to 1000 [ 643.385225][T19462] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 643.409441][T19471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3623'. [ 643.473549][T13655] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.482500][T13655] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.543540][T13655] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.552482][T13655] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.633590][T19478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3625'. [ 643.776425][T19487] netlink: 'syz.4.3628': attribute type 4 has an invalid length. [ 643.791030][T19487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3628'. [ 643.819159][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 643.840580][T19487] netlink: 'syz.4.3628': attribute type 18 has an invalid length. [ 643.881066][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3630'. [ 643.902084][T19492] wg1 speed is unknown, defaulting to 1000 [ 644.172792][T19504] netlink: 'syz.2.3632': attribute type 13 has an invalid length. [ 644.181779][T19504] netlink: 'syz.2.3632': attribute type 17 has an invalid length. [ 644.194950][T19500] bridge3: port 1(ipvlan2) entered blocking state [ 644.201713][T19500] bridge3: port 1(ipvlan2) entered disabled state [ 644.214424][T19500] ipvlan2: entered allmulticast mode [ 644.220555][T19500] macvlan1: entered allmulticast mode [ 644.232259][T19500] veth1_vlan: entered allmulticast mode [ 644.252720][T19500] ipvlan2: left allmulticast mode [ 644.258728][T19500] macvlan1: left allmulticast mode [ 644.264700][T19500] veth1_vlan: left allmulticast mode [ 644.331249][T19504] erspan0: left promiscuous mode [ 644.503532][T19513] __nla_validate_parse: 1 callbacks suppressed [ 644.503555][T19513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3633'. [ 644.647442][T19504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 644.682531][T19512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 645.073155][T19526] tipc: Enabling of bearer rejected, failed to enable media [ 645.139496][T19534] IPVS: stopping backup sync thread 19536 ... [ 645.139502][T19536] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 645.172308][T19509] wg1 speed is unknown, defaulting to 1000 [ 645.536885][T19546] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3640'. [ 645.553974][T19546] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3640'. [ 645.907223][T19553] netlink: 'syz.0.3644': attribute type 1 has an invalid length. [ 646.016050][T19565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3646'. [ 646.039745][T19565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3646'. [ 646.167375][T19558] wg1 speed is unknown, defaulting to 1000 [ 646.216563][T19553] wg1 speed is unknown, defaulting to 1000 [ 647.109912][T19585] tipc: Enabling of bearer rejected, failed to enable media [ 647.384508][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3650'. [ 647.877084][T19611] netlink: 'syz.4.3654': attribute type 1 has an invalid length. [ 647.886903][T19611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3654'. [ 647.997359][T19611] tipc: Started in network mode [ 648.002287][T19611] tipc: Node identity f20bde734ac8, cluster identity 4711 [ 648.011952][T19611] tipc: Enabled bearer , priority 0 [ 648.043764][T19620] syzkaller0: entered promiscuous mode [ 648.049668][T19620] syzkaller0: entered allmulticast mode [ 648.066152][T19614] wg1 speed is unknown, defaulting to 1000 [ 648.071616][T19611] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3654'. [ 648.142534][T19625] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3655'. [ 648.536452][T19629] tipc: Resetting bearer [ 648.618839][T19608] tipc: Resetting bearer [ 648.662338][T19608] tipc: Disabling bearer [ 648.811186][T19627] wg1 speed is unknown, defaulting to 1000 [ 649.184220][T19646] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3660'. [ 649.198520][T19646] netlink: 'syz.2.3660': attribute type 6 has an invalid length. [ 649.221825][T19646] netlink: 'syz.2.3660': attribute type 4 has an invalid length. [ 649.946000][T19670] netlink: 'syz.0.3665': attribute type 1 has an invalid length. [ 650.045030][T19674] __nla_validate_parse: 3 callbacks suppressed [ 650.045054][T19674] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3665'. [ 650.383693][T19677] wg1 speed is unknown, defaulting to 1000 [ 651.141575][T19712] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3677'. [ 651.282036][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3679'. [ 651.979332][T19740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3680'. [ 652.727626][T19782] netlink: 'syz.3.3693': attribute type 5 has an invalid length. [ 652.803083][T19765] wg1 speed is unknown, defaulting to 1000 [ 652.956186][T19792] netlink: 'syz.0.3697': attribute type 10 has an invalid length. [ 652.982323][T19796] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3699'. [ 653.014109][T19792] bridge0: port 1(macsec0) entered blocking state [ 653.035254][T19792] bridge0: port 1(macsec0) entered disabled state [ 653.059950][T19792] macsec0: entered allmulticast mode [ 653.080381][T19792] veth1_macvtap: entered allmulticast mode [ 653.097006][T19792] macsec0: entered promiscuous mode [ 653.118058][T19792] bridge0: port 1(macsec0) entered blocking state [ 653.124740][T19792] bridge0: port 1(macsec0) entered forwarding state [ 653.175284][T19798] tipc: Enabled bearer , priority 0 [ 653.183782][T19798] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 653.191594][T19798] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 653.592970][T19815] netlink: 'syz.3.3705': attribute type 1 has an invalid length. [ 653.612619][T19817] netlink: 'syz.2.3706': attribute type 21 has an invalid length. [ 653.620876][T19817] netlink: 'syz.2.3706': attribute type 22 has an invalid length. [ 653.628824][T19817] netlink: 'syz.2.3706': attribute type 23 has an invalid length. [ 653.637093][T19817] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3706'. [ 653.955987][T19827] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3709'. [ 654.081025][T19832] tipc: Enabling of bearer rejected, already enabled [ 654.136872][T19832] tipc: Resetting bearer [ 654.145573][T19833] netlink: 'syz.0.3710': attribute type 23 has an invalid length. [ 654.172921][T19833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3710'. [ 654.275358][T19837] tipc: Enabling of bearer rejected, already enabled [ 654.614194][ T5870] Bluetooth: hci5: command 0x0405 tx timeout [ 654.699062][T19866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3720'. [ 654.741921][T19864] Bluetooth: MGMT ver 1.23 [ 654.892251][T19872] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 654.900768][T19872] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3723'. [ 654.941190][T19881] netlink: 'syz.3.3725': attribute type 10 has an invalid length. [ 655.075918][T19881] team0: Device veth0_macvtap failed to register rx_handler [ 655.109609][T19889] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3726'. [ 655.271799][T19895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3728'. [ 655.284640][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3729'. [ 655.299502][T19896] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3729'. [ 655.312417][T19894] gtp0: entered promiscuous mode [ 655.330560][T19898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3730'. [ 655.435522][T19896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3729'. [ 655.745570][T19912] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3733'. [ 655.761711][T19909] xfrm0: entered promiscuous mode [ 655.770232][T19909] xfrm0: entered allmulticast mode [ 655.839020][T19911] wg1 speed is unknown, defaulting to 1000 [ 655.868096][T19907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3732'. [ 655.930375][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3732'. [ 655.949271][T19909] wg1 speed is unknown, defaulting to 1000 [ 656.505880][T19908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.581715][T19926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3737'. [ 656.853921][T19930] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 656.881491][T19930] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 657.120281][T19944] syzkaller1: entered allmulticast mode [ 657.926847][T19979] netlink: 'syz.1.3750': attribute type 46 has an invalid length. [ 657.958103][T19979] netlink: 'syz.1.3750': attribute type 19 has an invalid length. [ 658.323786][T19983] wg1 speed is unknown, defaulting to 1000 [ 658.495588][T20005] netlink: 'syz.3.3758': attribute type 1 has an invalid length. [ 659.394435][T20033] wg1 speed is unknown, defaulting to 1000 [ 659.807479][T20059] can: request_module (can-proto-4) failed. [ 660.036088][T20067] netlink: 'syz.0.3766': attribute type 11 has an invalid length. [ 660.160860][T20070] __nla_validate_parse: 9 callbacks suppressed [ 660.160881][T20070] netlink: 364 bytes leftover after parsing attributes in process `syz.1.3768'. [ 660.168415][T20065] wg1 speed is unknown, defaulting to 1000 [ 660.217845][T20070] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 660.324657][T20070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3768'. [ 660.347469][T20070] tipc: Enabling of bearer rejected, already enabled [ 660.374140][T20070] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 660.392034][T20070] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 660.533147][T20074] netlink: 'syz.2.3767': attribute type 1 has an invalid length. [ 660.567175][T20074] netlink: 'syz.2.3767': attribute type 1 has an invalid length. [ 660.595220][T20074] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3767'. [ 661.305633][T20095] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 661.376131][T20095] bond1: (slave macvlan1): Enslaving as a backup interface with an up link [ 661.462902][T20097] bridge0: port 1(syz_tun) entered blocking state [ 661.485636][T20097] bridge0: port 1(syz_tun) entered disabled state [ 661.499821][T20097] syz_tun: entered allmulticast mode [ 661.552639][T20097] syz_tun: entered promiscuous mode [ 661.808855][T20107] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 662.257073][T20127] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3783'. [ 662.271500][T20131] netlink: 'syz.1.3780': attribute type 3 has an invalid length. [ 662.279706][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3780'. [ 662.924748][T20139] syzkaller0: entered promiscuous mode [ 662.941881][T20139] syzkaller0: entered allmulticast mode [ 663.229070][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 665.007011][T20170] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 665.069669][T20170] bond2: entered promiscuous mode [ 665.081097][T20170] bond2: entered allmulticast mode [ 665.087292][T20170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 665.121241][T20154] wg1 speed is unknown, defaulting to 1000 [ 665.215564][T20182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 665.231704][T20182] bridge0: port 3(bond1) entered blocking state [ 665.238800][T20182] bridge0: port 3(bond1) entered disabled state [ 665.249001][T20182] bond1: entered allmulticast mode [ 665.257464][T20182] bond1: entered promiscuous mode [ 665.263733][T20182] bridge0: port 3(bond1) entered blocking state [ 665.270489][T20182] bridge0: port 3(bond1) entered forwarding state [ 665.298852][T20190] tipc: Enabling of bearer rejected, failed to enable media [ 665.428991][T20195] warn_alloc: 1 callbacks suppressed [ 665.429013][T20195] syz.0.3798: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 665.484395][T20202] tipc: Enabled bearer , priority 0 [ 665.493261][T20195] CPU: 0 UID: 0 PID: 20195 Comm: syz.0.3798 Not tainted syzkaller #0 PREEMPT(full) [ 665.493291][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 665.493303][T20195] Call Trace: [ 665.493311][T20195] [ 665.493319][T20195] dump_stack_lvl+0x189/0x250 [ 665.493353][T20195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.493377][T20195] ? __pfx__printk+0x10/0x10 [ 665.493404][T20195] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 665.493427][T20195] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 665.493452][T20195] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 665.493478][T20195] warn_alloc+0x214/0x310 [ 665.493516][T20195] ? __pfx_warn_alloc+0x10/0x10 [ 665.493557][T20195] ? __get_vm_area_node+0x28f/0x300 [ 665.493586][T20195] ? xskq_create+0xbf/0x170 [ 665.493609][T20195] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 665.493675][T20195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 665.493714][T20195] ? __kasan_kmalloc+0x93/0xb0 [ 665.493746][T20195] vmalloc_user_noprof+0xad/0xf0 [ 665.493776][T20195] ? xskq_create+0xbf/0x170 [ 665.493797][T20195] xskq_create+0xbf/0x170 [ 665.493819][T20195] xsk_init_queue+0xb0/0x110 [ 665.493854][T20195] xsk_setsockopt+0x57b/0x8d0 [ 665.493887][T20195] ? __pfx_xsk_setsockopt+0x10/0x10 [ 665.493917][T20195] ? __pfx_aa_sk_perm+0x10/0x10 [ 665.493962][T20195] ? __fget_files+0x2a/0x420 [ 665.493979][T20195] ? aa_sock_opt_perm+0xff/0x1b0 [ 665.494004][T20195] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 665.494025][T20195] ? __pfx_xsk_setsockopt+0x10/0x10 [ 665.494055][T20195] do_sock_setsockopt+0x179/0x1b0 [ 665.494089][T20195] __x64_sys_setsockopt+0x13f/0x1b0 [ 665.494123][T20195] do_syscall_64+0xfa/0x3b0 [ 665.494144][T20195] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.494164][T20195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.494184][T20195] ? clear_bhb_loop+0x60/0xb0 [ 665.494209][T20195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.494228][T20195] RIP: 0033:0x7f1f18b8eba9 [ 665.494246][T20195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.494263][T20195] RSP: 002b:00007f1f199f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 665.494285][T20195] RAX: ffffffffffffffda RBX: 00007f1f18dd6090 RCX: 00007f1f18b8eba9 [ 665.494299][T20195] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 665.494311][T20195] RBP: 00007f1f18c11e19 R08: 0000000000000004 R09: 0000000000000000 [ 665.494323][T20195] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 665.494334][T20195] R13: 00007f1f18dd6128 R14: 00007f1f18dd6090 R15: 00007fffcfc53908 [ 665.494370][T20195] [ 665.494378][T20195] Mem-Info: [ 665.503959][T20202] syzkaller0: entered promiscuous mode [ 665.503982][T20202] syzkaller0: entered allmulticast mode [ 665.507485][T20202] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 665.593274][T20195] active_anon:6996 inactive_anon:0 isolated_anon:0 [ 665.593274][T20195] active_file:3402 inactive_file:40093 isolated_file:0 [ 665.593274][T20195] unevictable:768 dirty:259 writeback:0 [ 665.593274][T20195] slab_reclaimable:12515 slab_unreclaimable:134029 [ 665.593274][T20195] mapped:30478 shmem:1355 pagetables:1001 [ 665.593274][T20195] sec_pagetables:0 bounce:0 [ 665.593274][T20195] kernel_misc_reclaimable:0 [ 665.593274][T20195] free:1286501 free_pcp:11574 free_cma:0 [ 665.843425][T20195] Node 0 active_anon:28284kB inactive_anon:0kB active_file:13608kB inactive_file:160164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130112kB dirty:1032kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13248kB pagetables:3876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 665.881350][T20195] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 665.925543][T20195] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 665.925833][T20207] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3799'. [ 665.976568][T20195] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 665.986469][T20195] Node 0 DMA32 free:1227140kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28236kB inactive_anon:0kB active_file:13608kB inactive_file:158588kB unevictable:1536kB writepending:1032kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:36456kB local_pcp:15412kB free_cma:0kB [ 666.031099][T20209] tipc: Resetting bearer [ 666.031144][T20195] lowmem_reserve[]: 0 0 1 1 1 [ 666.042017][T20195] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 666.079896][T20195] lowmem_reserve[]: 0 0 0 0 0 [ 666.081440][T20208] batadv0: entered promiscuous mode [ 666.087656][T20195] Node 1 Normal free:3903492kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9120kB local_pcp:512kB free_cma:0kB [ 666.093546][T20208] batadv0: entered allmulticast mode [ 666.130802][T20195] lowmem_reserve[]: 0 0 0 0 0 [ 666.153853][T20195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 666.155663][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 666.167815][T20195] Node 0 DMA32: 1197*4kB (ME) 280*8kB (UME) 569*16kB (UME) 576*32kB (UME) 114*64kB (UME) 66*128kB (UME) 127*256kB (UM) 51*512kB (UM) 22*1024kB (UME) 5*2048kB (UM) 265*4096kB (UM) = 1227140kB [ 666.179501][T20212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 666.198593][T20195] Node 0 [ 666.209961][ T13] bridge0: port 3(bond1) entered disabled state [ 666.214675][T20195] Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 666.231527][T20195] Node 1 Normal: 189*4kB (UE) 64*8kB (UME) 47*16kB (UME) 207*32kB (UME) 65*64kB (UME) 18*128kB (UME) 3*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 947*4096kB (M) = 3903492kB [ 666.259500][T20195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 666.269342][T20200] tipc: Resetting bearer [ 666.275803][T20195] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 666.285338][T20195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 666.304621][T20195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 666.315649][T20195] 44849 total pagecache pages [ 666.329642][T20195] 0 pages in swap cache [ 666.330295][T20200] tipc: Disabling bearer [ 666.333972][T20195] Free swap = 124996kB [ 666.333984][T20195] Total swap = 124996kB [ 666.333996][T20195] 2097051 pages RAM [ 666.334004][T20195] 0 pages HighMem/MovableOnly [ 666.334013][T20195] 425671 pages reserved [ 666.334022][T20195] 0 pages cma reserved [ 666.425210][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3802'. [ 667.029695][T20229] wg1 speed is unknown, defaulting to 1000 [ 667.212398][T20247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3810'. [ 667.280302][T20252] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 667.793962][T20267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3816'. [ 667.861178][T20275] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3815'. [ 667.919789][T20274] netlink: zone id is out of range [ 667.933887][T20274] netlink: del zone limit has 8 unknown bytes [ 667.956926][T11223] IPVS: starting estimator thread 0... [ 667.966929][T20274] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 668.063563][T20279] IPVS: using max 24 ests per chain, 57600 per kthread [ 668.515068][T20302] netlink: 'syz.0.3821': attribute type 1 has an invalid length. [ 668.582991][T20301] wg1 speed is unknown, defaulting to 1000 [ 668.603414][T20296] wg1 speed is unknown, defaulting to 1000 [ 668.756105][T20312] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 668.801516][T20312] netlink: 'syz.3.3819': attribute type 1 has an invalid length. [ 668.859885][T20312] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3819'. [ 669.281234][T20329] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3830'. [ 669.326822][T20329] netlink: 360 bytes leftover after parsing attributes in process `syz.1.3830'. [ 670.120186][T20345] wg1 speed is unknown, defaulting to 1000 [ 670.305659][T20358] netlink: 'syz.3.3838': attribute type 1 has an invalid length. [ 670.585504][T20365] netlink: 'syz.1.3839': attribute type 12 has an invalid length. [ 670.635793][T20358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 671.344575][T20387] __nla_validate_parse: 4 callbacks suppressed [ 671.344598][T20387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3847'. [ 671.428402][T20390] team0: No ports can be present during mode change [ 671.451343][T20387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3847'. [ 671.458644][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3846'. [ 671.476050][T20387] tipc: Enabled bearer , priority 0 [ 671.772677][T20393] netlink: 'syz.1.3845': attribute type 1 has an invalid length. [ 671.794035][T20393] netlink: 'syz.1.3845': attribute type 1 has an invalid length. [ 671.817445][T20394] wg1 speed is unknown, defaulting to 1000 [ 671.846844][T20393] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3845'. [ 672.032373][T20395] wg1 speed is unknown, defaulting to 1000 [ 672.066854][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3850'. [ 672.103713][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3850'. [ 672.128736][T20402] netlink: 58 bytes leftover after parsing attributes in process `syz.2.3850'. [ 672.138333][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3850'. [ 672.173317][T20402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3850'. [ 672.200656][T20402] netlink: 58 bytes leftover after parsing attributes in process `syz.2.3850'. [ 672.603303][T11226] tipc: Node number set to 3585242061 [ 672.805328][T20430] netlink: 'syz.3.3859': attribute type 10 has an invalid length. [ 672.877655][T20430] team0: Port device 0! added [ 672.885447][T20437] netlink: 'syz.3.3859': attribute type 10 has an invalid length. [ 673.148544][T20437] team0: Port device 0! removed [ 673.175305][T20442] netlink: 'syz.2.3863': attribute type 1 has an invalid length. [ 673.192329][T20437] bond0: (slave 0!): Enslaving as an active interface with an up link [ 673.406406][T20446] !: renamed from dummy0 (while UP) [ 673.706008][T20448] macvlan1: Device is already in use. [ 673.899013][T20461] netlink: 'syz.1.3867': attribute type 21 has an invalid length. [ 674.855947][T20493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.105957][T20495] wg1 speed is unknown, defaulting to 1000 [ 675.141571][T20500] syzkaller1: entered promiscuous mode [ 675.189241][T20500] syzkaller1: entered allmulticast mode [ 675.318748][T20512] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 675.353543][T20512] netlink: 'syz.3.3879': attribute type 1 has an invalid length. [ 676.299892][T20537] syzkaller0: entered promiscuous mode [ 676.311264][T20537] syzkaller0: entered allmulticast mode [ 676.367378][T13657] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.385975][T13657] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.394172][T11227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.563517][T11227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.578273][T20544] tipc: Enabled bearer , priority 0 [ 676.588155][T20544] syzkaller0: entered promiscuous mode [ 676.595250][T20544] syzkaller0: entered allmulticast mode [ 676.686188][T20544] tipc: Resetting bearer [ 676.750149][T20543] tipc: Resetting bearer [ 676.837892][T11227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 676.857221][T20560] __nla_validate_parse: 106 callbacks suppressed [ 676.857244][T20560] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3892'. [ 676.864302][T20543] tipc: Disabling bearer [ 677.072510][T20568] netlink: 'syz.2.3889': attribute type 1 has an invalid length. [ 677.080564][T20568] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3889'. [ 677.090156][T20568] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3889'. [ 677.118846][T20574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3897'. [ 677.173652][T20580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3895'. [ 677.450156][T20597] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 677.469470][T20597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3902'. [ 677.478501][T20597] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3902'. [ 677.487731][T20597] tipc: Invalid UDP bearer configuration [ 677.487772][T20597] tipc: Enabling of bearer rejected, failed to enable media [ 678.581151][T20631] ip6tnl1: entered promiscuous mode [ 678.684914][T20639] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3915'. [ 678.717933][T20641] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 678.725251][T20639] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3915'. [ 678.739599][T20641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3916'. [ 679.491867][T20681] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 679.521423][T20680] mac80211_hwsim hwsim47 wlan1: entered allmulticast mode [ 679.560747][T20680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 679.632028][T20680] netlink: 'syz.2.3926': attribute type 10 has an invalid length. [ 679.663577][T20680] mac80211_hwsim hwsim47 wlan1: left allmulticast mode [ 679.734942][T20680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.053377][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 680.794869][T20704] netlink: 'syz.3.3931': attribute type 1 has an invalid length. [ 680.885400][T20701] netem: incorrect ge model size [ 680.903827][T20701] netem: change failed [ 681.696270][T20750] wg1 speed is unknown, defaulting to 1000 [ 681.865875][T20760] __nla_validate_parse: 15 callbacks suppressed [ 681.865897][T20760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3944'. [ 682.749448][T20807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3952'. [ 682.904752][T20810] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3954'. [ 682.939562][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 682.962033][T20810] netlink: 'syz.1.3954': attribute type 1 has an invalid length. [ 683.087762][T20819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3957'. [ 683.107850][T20807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.118177][T20821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3956'. [ 683.127601][T20807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.333054][T20826] tipc: Started in network mode [ 683.338701][T20826] tipc: Node identity 3a51afe26977, cluster identity 4711 [ 683.368821][T20826] tipc: Enabled bearer , priority 0 [ 683.546482][T20832] syzkaller0: entered promiscuous mode [ 683.561124][T20832] syzkaller0: entered allmulticast mode [ 683.580194][T20832] tipc: Resetting bearer [ 683.604076][T20838] netlink: 'syz.4.3961': attribute type 1 has an invalid length. [ 683.679934][T20825] tipc: Resetting bearer [ 683.711525][T20855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3965'. [ 683.723967][T20855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3965'. [ 684.403552][T11223] tipc: Node number set to 1395044322 [ 685.395669][T20825] tipc: Disabling bearer [ 685.404867][T20853] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 685.424347][T20838] gretap1: entered allmulticast mode [ 685.484372][T20846] wg1 speed is unknown, defaulting to 1000 [ 685.520901][T20861] wg1 speed is unknown, defaulting to 1000 [ 685.591040][T20871] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.662283][T20871] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.776577][T20871] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.834590][T20880] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3971'. [ 685.845712][T20880] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3971'. [ 685.866319][T20871] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.912022][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3972'. [ 685.928620][T20882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 686.089202][T13655] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.135123][T20885] batadv_slave_0: entered promiscuous mode [ 686.258164][T13655] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.320055][ T8310] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.329176][T20890] syzkaller0: entered promiscuous mode [ 686.336324][T20890] syzkaller0: entered allmulticast mode [ 686.449576][ T8310] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.709454][T20898] !: renamed from dummy0 (while UP) [ 686.759343][T20903] xt_HMARK: spi-set and port-set can't be combined [ 686.857284][T20898] wg1 speed is unknown, defaulting to 1000 [ 687.358661][T20913] wg1 speed is unknown, defaulting to 1000 [ 687.893395][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 688.078209][T20942] netlink: 'syz.2.3992': attribute type 2 has an invalid length. [ 688.092372][T20942] netlink: 'syz.2.3992': attribute type 2 has an invalid length. [ 688.195335][T20945] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3991'. [ 688.932515][T20968] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 689.380383][T20986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 689.631809][ T30] audit: type=1800 audit(1758146612.973:7): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4005" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1015 res=0 errno=0 [ 689.784694][T20992] wg1 speed is unknown, defaulting to 1000 [ 690.278776][T21005] netlink: 'syz.0.4009': attribute type 1 has an invalid length. [ 690.415796][T21012] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4009'. [ 690.529152][T21009] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 690.558807][T21009] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 690.750842][T21025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4015'. [ 690.797624][T21027] vcan0: tx drop: invalid sa for name 0x0000000001000000 [ 690.939540][T21036] netlink: 'syz.0.4017': attribute type 5 has an invalid length. [ 690.969037][T21035] netlink: 'syz.1.4019': attribute type 13 has an invalid length. [ 690.977099][T21036] : entered promiscuous mode [ 691.494802][T21064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4028'. [ 691.511433][T21067] netlink: 'syz.1.4027': attribute type 13 has an invalid length. [ 691.534358][T21067] netlink: 'syz.1.4027': attribute type 17 has an invalid length. [ 691.566130][T21068] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4027'. [ 691.807809][T21071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.896437][T21067] bridge0: port 1(syz_tun) entered blocking state [ 691.903081][T21067] bridge0: port 1(syz_tun) entered forwarding state [ 691.914915][T21067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.925673][T21067] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.939276][T21076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4030'. [ 691.990788][T21067] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 692.205417][T21068] wg1 speed is unknown, defaulting to 1000 [ 692.300724][T21078] wg1 speed is unknown, defaulting to 1000 [ 692.327464][T21086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4032'. [ 692.898891][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4036'. [ 692.956119][T21088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4033'. [ 693.163603][T21101] team0: No ports can be present during mode change [ 693.580073][T21121] netlink: 'syz.4.4042': attribute type 21 has an invalid length. [ 693.618571][T21121] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4042'. [ 693.692269][T21121] netlink: 'syz.4.4042': attribute type 4 has an invalid length. [ 693.714282][T21121] netlink: 'syz.4.4042': attribute type 5 has an invalid length. [ 693.727829][T21121] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4042'. [ 694.243011][T21140] wg1 speed is unknown, defaulting to 1000 [ 694.676578][T21160] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4053'. [ 694.716087][T21160] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 694.778189][T21163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4054'. [ 695.356590][T21187] lo: entered allmulticast mode [ 695.382165][T21186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 695.432270][T21187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4061'. [ 695.503854][T21187] unsupported nlmsg_type 40 [ 695.534551][T21187] netlink: 948 bytes leftover after parsing attributes in process `syz.2.4061'. [ 695.868196][T21208] sctp: [Deprecated]: syz.2.4067 (pid 21208) Use of int in max_burst socket option. [ 695.868196][T21208] Use struct sctp_assoc_value instead [ 695.898613][T21210] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4068'. [ 697.175624][T16611] Bluetooth: hci1: command tx timeout [ 697.830085][T21229] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4071'. [ 697.847106][T21231] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4073'. [ 697.865229][T21229] vlan0: entered promiscuous mode [ 697.871297][T21231] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4073'. [ 697.900439][T21231] lo: left allmulticast mode [ 698.358126][T21271] macvlan1: Device is already in use. [ 698.959708][T21295] __nla_validate_parse: 6 callbacks suppressed [ 698.959729][T21295] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4093'. [ 698.967051][T21297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4094'. [ 699.363114][T21315] netlink: 'syz.3.4101': attribute type 1 has an invalid length. [ 699.372258][T21315] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4101'. [ 699.383575][T21313] netlink: 'syz.2.4100': attribute type 1 has an invalid length. [ 699.391336][T21313] netlink: 'syz.2.4100': attribute type 1 has an invalid length. [ 699.424533][T21313] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4100'. [ 700.032078][T21342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4106'. [ 700.179176][T21342] macsec0: left allmulticast mode [ 700.185295][T21348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4107'. [ 700.207202][T21342] veth1_macvtap: left allmulticast mode [ 700.215031][T21342] macsec0: left promiscuous mode [ 700.220512][T21342] bridge0: port 1(macsec0) entered disabled state [ 701.146504][T21384] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4118'. [ 701.194072][T21388] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4120'. [ 701.204165][T21384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4118'. [ 701.206709][T21389] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4118'. [ 701.580363][T21399] Bluetooth: hci5: command 0x0405 tx timeout [ 701.649608][T21413] netlink: 'syz.2.4117': attribute type 1 has an invalid length. [ 701.659394][T21415] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 701.679309][T21413] netlink: 'syz.2.4117': attribute type 1 has an invalid length. [ 701.693829][T21415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 701.702705][T21418] gretap1: entered promiscuous mode [ 701.779340][T21417] gretap1: entered promiscuous mode [ 702.613426][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 702.646819][T21463] openvswitch: netlink: EtherType 0 is less than min 600 [ 702.761366][T21464] wg1 speed is unknown, defaulting to 1000 [ 703.049867][T21473] netlink: 'syz.2.4142': attribute type 1 has an invalid length. [ 703.180952][T21466] wg1 speed is unknown, defaulting to 1000 [ 703.219543][T21473] netlink: 'syz.2.4142': attribute type 5 has an invalid length. [ 703.272708][T21484] bridge4: port 1(ipvlan2) entered blocking state [ 703.303626][T21484] bridge4: port 1(ipvlan2) entered disabled state [ 703.314464][T21484] ipvlan2: entered allmulticast mode [ 703.319814][T21484] macvlan1: entered allmulticast mode [ 703.362336][T21484] ipvlan2: left allmulticast mode [ 703.378851][T21484] macvlan1: left allmulticast mode [ 703.427075][T16611] Bluetooth: hci1: command 0x0406 tx timeout [ 703.427143][T21399] Bluetooth: hci4: command 0x0401 tx timeout [ 703.662265][T21498] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 703.896525][T21504] netlink: 'syz.3.4146': attribute type 1 has an invalid length. [ 703.923366][T21504] netlink: 'syz.3.4146': attribute type 1 has an invalid length. [ 703.990807][T21497] ..0: renamed from hsr0 (while UP) [ 704.005284][T21497] ..0: entered allmulticast mode [ 704.010363][T21497] hsr_slave_0: entered allmulticast mode [ 704.035712][T21497] hsr_slave_1: entered allmulticast mode [ 704.041940][T21497] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check. [ 704.085065][T21498] wg1 speed is unknown, defaulting to 1000 [ 704.111454][T21508] __nla_validate_parse: 11 callbacks suppressed [ 704.111478][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4152'. [ 704.786077][T21521] 8021q: adding VLAN 0 to HW filter on device bond3 [ 704.796484][T21521] bond0: (slave bond3): Enslaving as an active interface with an up link [ 704.924801][T21539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4160'. [ 705.261955][T21545] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4162'. [ 705.436196][T21543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 705.627943][T21556] netlink: 124 bytes leftover after parsing attributes in process `syz.4.4164'. [ 705.795119][T21556] nbd4: detected capacity change from 0 to 63 [ 705.807185][T21561] block nbd4: NBD_DISCONNECT [ 705.812110][T21561] block nbd4: Disconnected due to user request. [ 705.826783][T21561] block nbd4: shutting down sockets [ 705.936191][T21556] bridge0: port 1(bond3) entered blocking state [ 705.942984][T21556] bridge0: port 1(bond3) entered disabled state [ 705.949912][T21556] bond3: entered allmulticast mode [ 705.960212][T21556] bond3: entered promiscuous mode [ 706.167603][T21565] netlink: 'syz.0.4165': attribute type 1 has an invalid length. [ 706.190459][T21565] netlink: 'syz.0.4165': attribute type 1 has an invalid length. [ 706.207443][T21565] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4165'. [ 706.506412][T21583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4170'. [ 706.524345][T21586] netlink: 20824 bytes leftover after parsing attributes in process `syz.0.4172'. [ 706.562822][T21586] netlink: 'syz.0.4172': attribute type 10 has an invalid length. [ 706.779100][T21588] netlink: 'syz.3.4170': attribute type 1 has an invalid length. [ 706.844015][T21588] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.4170'. [ 706.947287][T21586] !: entered promiscuous mode [ 706.996121][T21586] bond0: (slave 0!): Enslaving as an active interface with an up link [ 707.148550][T21601] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 707.185435][T21584] syzkaller1: entered promiscuous mode [ 707.194702][T21584] syzkaller1: entered allmulticast mode [ 707.313464][T21609] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4173'. [ 707.334613][T21399] Bluetooth: hci5: command 0x0405 tx timeout [ 707.679595][T21629] netlink: 'syz.0.4180': attribute type 10 has an invalid length. [ 707.709543][T21629] bond0: (slave 0!): Releasing backup interface [ 707.731749][T21629] !: left promiscuous mode [ 707.744506][T21633] netlink: 'syz.0.4180': attribute type 10 has an invalid length. [ 707.785979][T21629] team0: Failed to send port change of device 0! via netlink (err -105) [ 707.800827][T21629] team0: Failed to send options change via netlink (err -105) [ 707.808790][T21629] team0: Port device 0! added [ 707.829371][T21633] team0: Failed to send port change of device 0! via netlink (err -105) [ 707.893795][T21633] team0: Failed to send options change via netlink (err -105) [ 707.901574][T21633] team0: Failed to send port change of device 0! via netlink (err -105) [ 707.931081][T21633] team0: Port device 0! removed [ 707.957432][T21633] !: entered promiscuous mode [ 707.975555][T21633] bond0: (slave 0!): Enslaving as an active interface with an up link [ 708.224260][T21644] wg0: Master is either lo or non-ether device [ 708.233594][T21645] wg0: Master is either lo or non-ether device [ 708.319062][T21646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4183'. [ 708.366495][T21659] netlink: 'syz.3.4182': attribute type 1 has an invalid length. [ 708.375269][T21659] netlink: 'syz.3.4182': attribute type 1 has an invalid length. [ 708.701867][T21668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.724955][T21668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.805315][T21676] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.839744][T21676] dvmrp8: entered allmulticast mode [ 708.858807][T21676] dvmrp8: left allmulticast mode [ 709.023855][T21683] netlink: 'syz.2.4192': attribute type 1 has an invalid length. [ 709.041759][T21683] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 709.077881][T21681] tipc: Enabled bearer , priority 0 [ 709.092964][T21681] syzkaller0: entered promiscuous mode [ 709.116901][T21681] syzkaller0: entered allmulticast mode [ 709.172019][T21681] netdevsim0: mtu less than device minimum [ 709.200988][T21681] __nla_validate_parse: 8 callbacks suppressed [ 709.201009][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4193'. [ 709.217926][T21681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 709.276633][T21680] tipc: Resetting bearer [ 709.333653][T21680] tipc: Disabling bearer [ 709.895395][T21707] netlink: 'syz.2.4199': attribute type 1 has an invalid length. [ 709.919594][T21707] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4199'. [ 710.770442][T21731] geneve2: entered promiscuous mode [ 710.798188][T21737] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4209'. [ 710.800335][T21739] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4207'. [ 710.958867][T21740] wg1 speed is unknown, defaulting to 1000 [ 711.093951][T21748] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma? [ 711.465828][T21765] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4217'. [ 711.526105][T21759] netdevsim netdevsim3: Direct firmware load for . [ 711.526105][T21759] failed with error -2 [ 711.560112][T21763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'. [ 711.587719][T21763] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 711.595680][T21759] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 711.595680][T21759] [ 711.662367][T21763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 711.772496][T21786] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 712.014210][T21796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4223'. [ 712.272413][T21803] tipc: Enabling of bearer rejected, failed to enable media [ 712.292745][T21803] syzkaller0: entered promiscuous mode [ 712.305209][T21803] syzkaller0: entered allmulticast mode [ 712.382624][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4229'. [ 712.558122][T21815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 712.587440][T21815] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 712.607546][T21818] syz_tun: left allmulticast mode [ 712.612800][T21818] syz_tun: left promiscuous mode [ 712.625692][T21818] bridge0: port 1(syz_tun) entered disabled state [ 712.649623][T21818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 712.681044][T21815] openvswitch: netlink: IP tunnel dst address not specified [ 712.855441][T21826] wg1 speed is unknown, defaulting to 1000 [ 712.875769][T21828] validate_nla: 2 callbacks suppressed [ 712.875790][T21828] netlink: 'syz.4.4233': attribute type 10 has an invalid length. [ 712.916489][T21828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.927763][T21828] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 712.972810][T21827] bridge0: entered promiscuous mode [ 713.006136][T21827] bridge0: entered allmulticast mode [ 713.037853][T21831] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4233'. [ 713.176513][T21833] xfrm0: entered promiscuous mode [ 713.181692][T21833] xfrm0: entered allmulticast mode [ 713.292234][T21833] wg1 speed is unknown, defaulting to 1000 [ 713.887755][T21849] tipc: Enabling of bearer rejected, failed to enable media [ 713.898600][T21849] syzkaller0: entered promiscuous mode [ 713.923253][T21849] syzkaller0: entered allmulticast mode [ 713.939231][T21832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.327518][T21859] __nla_validate_parse: 2 callbacks suppressed [ 714.327539][T21859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4243'. [ 714.475729][T21862] syzkaller0: entered promiscuous mode [ 714.481824][T21862] syzkaller0: entered allmulticast mode [ 714.662384][T21869] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4245'. [ 714.714223][T21871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4245'. [ 714.877427][T21866] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4245'. [ 715.035694][T21869] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 715.090713][T21869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4245'. [ 716.734614][T21886] wg1 speed is unknown, defaulting to 1000 [ 716.827082][T21892] netlink: 'syz.2.4249': attribute type 13 has an invalid length. [ 716.849005][T21892] netlink: 'syz.2.4249': attribute type 17 has an invalid length. [ 716.914098][T21892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 716.938625][T21896] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4248'. [ 717.175257][T21905] openvswitch: netlink: Key type 16144 is out of range max 32 [ 717.715424][T21926] batadv1: entered promiscuous mode [ 717.732293][T21926] batadv1: entered allmulticast mode [ 717.756199][T21927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4256'. [ 717.970151][T21928] netlink: 'syz.1.4257': attribute type 1 has an invalid length. [ 717.996773][T21928] netlink: 'syz.1.4257': attribute type 1 has an invalid length. [ 718.027652][T21928] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4257'. [ 718.336089][T21940] xt_bpf: check failed: parse error [ 721.396374][T21981] erspan0: entered promiscuous mode [ 721.422318][T21981] netlink: 'syz.3.4268': attribute type 2 has an invalid length. [ 721.442637][T21987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4270'. [ 721.852173][T22015] netlink: 'syz.2.4277': attribute type 10 has an invalid length. [ 721.898400][T22015] bond0: (slave 0!): Enslaving as an active interface with an up link [ 721.940155][T22027] netlink: 'syz.1.4281': attribute type 1 has an invalid length. [ 722.016885][T22027] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 722.186471][T22043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4284'. [ 722.236025][T22045] team0: Device gtp0 is of different type [ 722.317587][T22047] tipc: Enabling of bearer rejected, failed to enable media [ 722.468917][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4290'. [ 722.478053][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4290'. [ 722.506227][T22058] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4290'. [ 722.588039][T22067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4293'. [ 722.593935][T22066] wg1 speed is unknown, defaulting to 1000 [ 722.748366][T22073] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4294'. [ 722.774188][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4295'. [ 722.980293][T22080] syzkaller1: entered promiscuous mode [ 723.072460][T22080] syzkaller1: entered allmulticast mode [ 723.138887][T22084] netlink: 'syz.0.4298': attribute type 4 has an invalid length. [ 723.240375][T22089] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4300'. [ 723.417957][T22095] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4302'. [ 724.167253][T22120] netlink: 'syz.3.4310': attribute type 25 has an invalid length. [ 724.269196][T22130] netlink: 'syz.3.4314': attribute type 1 has an invalid length. [ 724.345749][T22134] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 724.356124][T22134] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 724.370504][T22134] bond4: (slave vti1): making interface the new active one [ 724.380167][T22134] bond4: (slave vti1): Enslaving as an active interface with an up link [ 724.856727][T22167] batadv2: entered promiscuous mode [ 724.871445][T22167] batadv2: entered allmulticast mode [ 725.003887][T22173] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20000 [ 725.127616][T22182] syzkaller0: entered promiscuous mode [ 725.139480][T22182] syzkaller0: entered allmulticast mode [ 725.698624][T22216] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6) [ 726.180178][T22235] syzkaller0: entered promiscuous mode [ 726.186318][T22235] syzkaller0: entered allmulticast mode [ 726.710297][T22250] netlink: 'syz.0.4347': attribute type 1 has an invalid length. [ 726.723600][T22250] netlink: 'syz.0.4347': attribute type 1 has an invalid length. [ 726.740423][T22250] __nla_validate_parse: 15 callbacks suppressed [ 726.740443][T22250] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4347'. [ 726.832774][T22253] veth0_to_bridge: entered promiscuous mode [ 726.897271][T22256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4349'. [ 727.180639][T22270] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4350'. [ 727.386055][T22276] openvswitch: netlink: Multiple metadata blocks provided [ 727.582812][T22286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4358'. [ 727.946489][T22295] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4361'. [ 728.112891][T22294] netlink: 248 bytes leftover after parsing attributes in process `syz.4.4361'. [ 728.230558][T22306] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4364'. [ 728.487480][T22311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4365'. [ 728.998143][T22328] wg1 speed is unknown, defaulting to 1000 [ 729.016632][T22329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4370'. [ 729.094904][T22329] netlink: 'syz.0.4370': attribute type 1 has an invalid length. [ 729.112900][T22329] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4370'. [ 729.812377][T22338] wg1 speed is unknown, defaulting to 1000 [ 729.994157][T22341] ..1: renamed from ..0 (while UP) [ 730.077884][T22341] A link change request failed with some changes committed already. Interface ..1 may have been left with an inconsistent configuration, please check. [ 730.861120][T22351] 8021q: VLANs not supported on ip_vti0 [ 732.053601][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 732.183759][T22377] __nla_validate_parse: 1 callbacks suppressed [ 732.183780][T22377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4384'. [ 732.297573][T22375] wg1 speed is unknown, defaulting to 1000 [ 732.702106][T22386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4387'. [ 733.010781][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4388'. [ 733.980607][T22392] sch_tbf: burst 5 is lower than device lo mtu (18) ! [ 734.188964][T22409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 734.219401][T22409] IPv6: Can't replace route, no match found [ 734.220261][T22410] pim6reg1: entered promiscuous mode [ 734.233589][T22410] pim6reg1: entered allmulticast mode [ 734.460331][T22417] netlink: 'syz.0.4398': attribute type 1 has an invalid length. [ 734.468570][T22417] netlink: 'syz.0.4398': attribute type 1 has an invalid length. [ 734.477282][T22417] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4398'. [ 734.567294][T22416] syzkaller0: entered promiscuous mode [ 734.587119][T22416] syzkaller0: entered allmulticast mode [ 735.785545][T14816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.796871][T14816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.918031][T14816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.928751][T14816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.989250][T14816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 735.999587][T14816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.058912][T14816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 736.069461][T14816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.138762][T14816] bond1: left allmulticast mode [ 736.144382][T14816] bond1: left promiscuous mode [ 736.149363][T14816] bridge0: port 3(bond1) entered disabled state [ 736.158432][T14816] bridge_slave_1: left allmulticast mode [ 736.164513][T14816] bridge_slave_1: left promiscuous mode [ 736.170221][T14816] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.181298][T14816] x9: left allmulticast mode [ 736.186380][T14816] x9: left promiscuous mode [ 736.191196][T14816] bridge0: port 1(1x9) entered disabled state [ 736.370189][T14816] bond4 (unregistering): (slave vti1): Releasing backup interface [ 736.443082][T14816] dvmrp0 (unregistering): left allmulticast mode [ 736.775681][T14816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.786683][T14816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.797827][T14816] bond0 (unregistering): (slave 0!): Releasing backup interface [ 736.807950][T14816] bond0 (unregistering): (slave bond3): Releasing backup interface [ 736.816806][T14816] bond0 (unregistering): Released all slaves [ 736.931167][T14816] bond1 (unregistering): Released all slaves [ 737.043862][T14816] bond2 (unregistering): Released all slaves [ 737.153958][T14816] bond3 (unregistering): Released all slaves [ 737.167254][T14816] bond4 (unregistering): Released all slaves [ 737.298381][T14816] tipc: Disabling bearer [ 737.304857][T14816] tipc: Left network mode [ 737.540830][T14816] hsr_slave_0: left promiscuous mode [ 737.552733][T14816] hsr_slave_1: left promiscuous mode [ 737.560315][T14816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.568614][T14816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.577390][T14816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.585128][T14816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.596870][T14816] veth1_macvtap: left promiscuous mode [ 737.602650][T14816] veth1_vlan: left promiscuous mode [ 737.608065][T14816] veth0_vlan: left promiscuous mode [ 738.017032][T14816] team0 (unregistering): Port device team_slave_1 removed [ 738.058455][T14816] team0 (unregistering): Port device team_slave_0 removed [ 738.775061][T14816] IPVS: stop unused estimator thread 0... [ 738.848578][T14816] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 738.945487][T14816] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.000973][T14816] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.059978][T14816] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.705043][T13657] smc: removing ib device syz2 [ 739.710291][T14816] bond0 (unregistering): (slave 0!): Releasing backup interface [ 739.721898][T14816] bond0 (unregistering): Released all slaves [ 739.831920][T14816] bond1 (unregistering): Released all slaves [ 739.847044][ T5954] wg1 speed is unknown, defaulting to 1000 [ 739.852906][ T5954] syz0: Port: 1 Link DOWN [ 740.405021][T14816] tipc: Left network mode [ 740.652079][T14816] hsr_slave_0: left promiscuous mode [ 740.658004][T14816] hsr_slave_1: left promiscuous mode [ 740.669814][T14816] veth1_macvtap: left promiscuous mode [ 740.676481][T14816] veth0_macvtap: left promiscuous mode [ 740.682475][T14816] veth1_vlan: left promiscuous mode [ 740.688308][T14816] veth0_vlan: left promiscuous mode