last executing test programs: 3.882705585s ago: executing program 0 (id=2056): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 3.52296967s ago: executing program 0 (id=2063): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 3.362698647s ago: executing program 0 (id=2066): unshare(0x62040200) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, 0x0}, 0x138) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x0, 0x10000}) preadv(r2, &(0x7f0000000200), 0x1, 0x2, 0x9) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r3) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)=""/136, 0x88}], 0x2e}, 0xffffffff}], 0x1, 0x32, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x3b, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x4, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0xffffd000) r9 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x5, 0x11, r9, 0x487d0000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) 2.857427999s ago: executing program 3 (id=2072): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x2d}, 0x1}], 0x3, 0x2000, 0x0) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001440)=""/149, 0x95}, {&(0x7f0000001340)=""/62, 0x3e}], 0x3}, 0x5}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001380), 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000013c0)={0x0, @aes256, 0x0, @desc1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x44000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.838282608s ago: executing program 3 (id=2076): r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000880)={0x0, r0}, 0x8) 1.708573464s ago: executing program 4 (id=2077): socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @empty, @private}, &(0x7f0000000340)=0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000440)=""/38, 0x0, 0x26, 0x1, 0x7, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x10500, 0x0) 1.653583816s ago: executing program 0 (id=2078): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$kcm(0xa, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) sendmsg$kcm(r6, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r6) sendmsg$nl_route(r1, 0x0, 0x0) 1.525031948s ago: executing program 1 (id=2080): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000000), 0x10) 1.506667955s ago: executing program 3 (id=2081): syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 1.470510319s ago: executing program 4 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000100000000017000000440006803d00040067636d28616573290000000000000000000000000000000000000000000000001c"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 1.396868698s ago: executing program 1 (id=2084): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x363a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xffffffff}]}]}]}, 0x44}}, 0x0) 1.237018468s ago: executing program 1 (id=2085): write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f1114f9f407000901000000200000000001000000000800040001", 0x21) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000000a0000000002"], 0x24}}, 0x0) 1.2110292s ago: executing program 1 (id=2086): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x2d}, 0x1}], 0x3, 0x2000, 0x0) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001440)=""/149, 0x95}, {&(0x7f0000001340)=""/62, 0x3e}], 0x3}, 0x5}], 0x1, 0x100, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00'}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001380), 0x10) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000013c0)={0x0, @aes256, 0x0, @desc1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x44000) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.163246876s ago: executing program 4 (id=2087): r0 = socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r2, 0x0) write(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x34, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}, {0x6, 0x6, 0x1, 0xfffffff7}]}}]}}]}, 0x6c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r9, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'freezer'}, {0x2d, 'rdma'}]}, 0x47) 1.00041165s ago: executing program 3 (id=2088): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x7c2) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2, 0xa, 0xe, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8890) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x891d, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 999.736376ms ago: executing program 0 (id=2089): r0 = socket(0x2a, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) shutdown(r2, 0x0) write(r2, 0x0, 0x0) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x80000002, 0x12) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@deltaction={0x14, 0x31, 0x300, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x8004) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x6, 0x3, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4004) unshare(0x20000400) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001500)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x2}, {}, {0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xfff3}}, @TCA_U32_SEL={0x34, 0x5, {0xb, 0x0, 0x2, 0xffff, 0xfffc, 0x8, 0x1, 0x6, [{0xff, 0x40, 0x6, 0x9}, {0x6, 0x6, 0x1, 0xfffffff7}]}}]}}]}, 0x6c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r8, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'freezer'}, {0x2d, 'rdma'}]}, 0x47) 831.587449ms ago: executing program 3 (id=2090): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 682.104575ms ago: executing program 2 (id=2093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 638.816756ms ago: executing program 2 (id=2094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6, 0x4b, 0x2, 0x6}]}) 488.646449ms ago: executing program 2 (id=2095): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000001340)={0x2, 0x0, @local}, 0x10, 0x0}}], 0x2, 0xc800) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 463.309397ms ago: executing program 2 (id=2096): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x4c, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x0) 418.387649ms ago: executing program 2 (id=2097): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x7c2) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2, 0xa, 0xe, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8890) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r8, 0x891d, 0x0) r9 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 369.916191ms ago: executing program 2 (id=2098): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f00000002c0)=""/4096, 0x1000) 325.746956ms ago: executing program 1 (id=2099): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x6f}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x6}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x2) 236.949685ms ago: executing program 1 (id=2100): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x7c2) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x1f, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x2, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2, 0xa, 0xe, 0x3, 0x2, 0x0, 0x70bd27, 0x25dfdbff}, 0x10}}, 0x8890) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r7, 0x891d, 0x0) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 220.022957ms ago: executing program 3 (id=2101): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r4, 0xffffffffffffffff, {0x1, 0x0, 0x4}, 0xfd}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd27, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r7, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) r11 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) getsockopt$ax25_int(r11, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x100000}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x58}}, 0x8000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0400000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r14, &(0x7f0000000e00), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r13}, &(0x7f0000000040), &(0x7f0000000140)=r12}, 0x20) socket(0x2000000015, 0x80005, 0x0) 209.35353ms ago: executing program 4 (id=2102): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10002}, {{0x0, 0x0, 0x0}, 0xcfe}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f0000000400)=""/245, 0xf5}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000001940)=""/4104, 0x1008}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000040)=""/243, 0xf3}], 0x6}, 0xffffffd8}], 0x4, 0x60, 0x0) 72.967903ms ago: executing program 4 (id=2103): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x38, r1, 0x1, 0x70bdad, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x10) 7.004401ms ago: executing program 4 (id=2104): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0x1, 0x4) 0s ago: executing program 0 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c080}, 0x4000010) kernel console output (not intermixed with test programs): g to 1000 [ 271.860804][ T9936] netlink: 'syz.1.815': attribute type 4 has an invalid length. [ 271.901147][ T5883] lo speed is unknown, defaulting to 1000 [ 272.263436][ T9950] lo speed is unknown, defaulting to 1000 [ 272.286364][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.821'. [ 272.317681][ T9950] lo speed is unknown, defaulting to 1000 [ 272.317769][ T9951] lo speed is unknown, defaulting to 1000 [ 272.350630][ T9931] netlink: 88 bytes leftover after parsing attributes in process `syz.0.812'. [ 272.362182][ T9931] netlink: 24 bytes leftover after parsing attributes in process `syz.0.812'. [ 272.378513][ T9931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.812'. [ 272.396005][ T9931] netlink: 80 bytes leftover after parsing attributes in process `syz.0.812'. [ 272.470078][ T9962] netlink: 44 bytes leftover after parsing attributes in process `syz.3.822'. [ 272.513865][ T9954] tipc: Disabling bearer [ 272.522132][ T9956] openvswitch: netlink: Missing valid actions attribute. [ 272.529862][ T9956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.878796][ T9951] lo speed is unknown, defaulting to 1000 [ 273.093371][ T9966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 273.129634][ T9960] lo speed is unknown, defaulting to 1000 [ 273.129659][ T5914] lo speed is unknown, defaulting to 1000 [ 273.136693][ T9960] lo speed is unknown, defaulting to 1000 [ 273.226822][ T9968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.823'. [ 273.351557][ T9950] lo speed is unknown, defaulting to 1000 [ 273.517724][ T9971] lo speed is unknown, defaulting to 1000 [ 273.556040][ T9971] lo speed is unknown, defaulting to 1000 [ 273.558557][ T9976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'. [ 273.592116][ T9976] vlan0: entered promiscuous mode [ 273.597423][ T9976] dummy0: entered promiscuous mode [ 273.612045][ T9976] dummy0: left promiscuous mode [ 273.699310][ T9950] x_tables: duplicate entry at hook 2 [ 273.791802][ T9951] lo speed is unknown, defaulting to 1000 [ 274.188173][ T9960] lo speed is unknown, defaulting to 1000 [ 274.192161][ T9980] lo speed is unknown, defaulting to 1000 [ 274.589974][ T9971] lo speed is unknown, defaulting to 1000 [ 274.708847][ T9980] lo speed is unknown, defaulting to 1000 [ 274.911886][ T9997] netlink: 'syz.1.829': attribute type 4 has an invalid length. [ 274.966500][T10000] netlink: 'syz.1.829': attribute type 4 has an invalid length. [ 275.037626][ T5849] lo speed is unknown, defaulting to 1000 [ 275.043985][ T5884] lo speed is unknown, defaulting to 1000 [ 275.138810][ T9998] __nla_validate_parse: 2 callbacks suppressed [ 275.138832][ T9998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.826'. [ 275.430272][T10005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.484588][ T9980] lo speed is unknown, defaulting to 1000 [ 275.953915][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 276.294088][T10020] bond0: (slave geneve2): Releasing active interface [ 276.311692][T10020] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.332865][T10020] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.353218][T10020] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.376229][T10020] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.402945][T10020] team0: Port device gtp0 removed [ 276.895413][T10035] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 276.957795][T10035] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 277.211628][T10039] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.840'. [ 277.218911][T10034] lo speed is unknown, defaulting to 1000 [ 277.271574][T10034] lo speed is unknown, defaulting to 1000 [ 277.272053][T10035] tap0: tun_chr_ioctl cmd 1074025677 [ 277.315088][T10035] tap0: linktype set to 804 [ 277.610736][T10034] lo speed is unknown, defaulting to 1000 [ 277.890597][T10055] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 277.917815][T10055] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 278.028885][T10055] sch_fq: defrate 511 ignored. [ 278.649992][T10062] team0: left allmulticast mode [ 278.682577][T10062] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.691799][T10062] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.701754][T10062] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.713060][T10062] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.734064][T10067] lo speed is unknown, defaulting to 1000 [ 278.776738][T10072] lo speed is unknown, defaulting to 1000 [ 278.819922][T10067] lo speed is unknown, defaulting to 1000 [ 278.879090][T10072] lo speed is unknown, defaulting to 1000 [ 279.044233][T10079] netlink: 'syz.1.849': attribute type 5 has an invalid length. [ 279.142137][T10067] lo speed is unknown, defaulting to 1000 [ 279.225321][T10081] lo speed is unknown, defaulting to 1000 [ 279.261396][T10081] lo speed is unknown, defaulting to 1000 [ 279.462123][T10072] lo speed is unknown, defaulting to 1000 [ 279.764267][T10095] netlink: 160 bytes leftover after parsing attributes in process `syz.3.848'. [ 280.045164][T10081] lo speed is unknown, defaulting to 1000 [ 280.177725][T10096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.851'. [ 280.353145][T10101] lo speed is unknown, defaulting to 1000 [ 280.615378][T10101] lo speed is unknown, defaulting to 1000 [ 281.183480][T10101] lo speed is unknown, defaulting to 1000 [ 281.187354][T10128] batadv_slave_1: entered promiscuous mode [ 281.454302][T10127] batadv_slave_1: left promiscuous mode [ 281.499332][T10104] netlink: 24 bytes leftover after parsing attributes in process `syz.2.856'. [ 281.964183][T10145] lo speed is unknown, defaulting to 1000 [ 281.969618][T10142] netlink: 176 bytes leftover after parsing attributes in process `syz.1.866'. [ 281.992442][T10145] lo speed is unknown, defaulting to 1000 [ 282.254689][T10157] xt_hashlimit: size too large, truncated to 1048576 [ 282.785881][T10142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.132756][T10161] lo speed is unknown, defaulting to 1000 [ 283.149938][T10145] lo speed is unknown, defaulting to 1000 [ 283.158824][T10161] lo speed is unknown, defaulting to 1000 [ 283.660369][T10190] netlink: 188 bytes leftover after parsing attributes in process `syz.0.878'. [ 283.687306][T10161] lo speed is unknown, defaulting to 1000 [ 284.509438][T10206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 285.746970][T10217] lo speed is unknown, defaulting to 1000 [ 285.770804][T10217] lo speed is unknown, defaulting to 1000 [ 286.239423][T10217] lo speed is unknown, defaulting to 1000 [ 286.488257][T10237] netlink: 3 bytes leftover after parsing attributes in process `syz.4.888'. [ 286.531033][T10237] batadv1: entered promiscuous mode [ 286.536405][T10237] batadv1: entered allmulticast mode [ 286.542093][T10238] netlink: 'syz.0.890': attribute type 16 has an invalid length. [ 286.568150][T10238] netlink: 'syz.0.890': attribute type 17 has an invalid length. [ 286.708558][T10238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.716820][T10247] netlink: 48 bytes leftover after parsing attributes in process `syz.4.888'. [ 286.746975][T10238] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.799309][T10238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.944706][T10242] veth0_to_bridge: entered promiscuous mode [ 286.963157][ T5840] lo speed is unknown, defaulting to 1000 [ 287.104519][T10251] wg1: left promiscuous mode [ 287.110658][T10251] wg1: left allmulticast mode [ 287.129817][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.894'. [ 287.209621][T10251] veth0_vlan: left allmulticast mode [ 287.229013][T10259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.894'. [ 287.246652][T10251] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.257447][T10251] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.266721][T10251] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.275717][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.894'. [ 287.284979][T10251] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.338818][T10251] vlan2: left promiscuous mode [ 287.345388][T10251] ip6tnl1: left promiscuous mode [ 287.371187][T10235] veth0_to_bridge: left promiscuous mode [ 287.386168][ T5840] lo speed is unknown, defaulting to 1000 [ 287.455533][T10253] lo speed is unknown, defaulting to 1000 [ 287.722545][T10253] lo speed is unknown, defaulting to 1000 [ 288.040015][T10253] lo speed is unknown, defaulting to 1000 [ 288.485843][T10280] netlink: 40 bytes leftover after parsing attributes in process `syz.3.901'. [ 288.570562][T10280] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 289.359612][T10283] tipc: Enabling of bearer rejected, already enabled [ 289.758364][T10315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.909'. [ 289.849899][T10321] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.908'. [ 289.873105][T10318] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.908'. [ 289.962495][T10319] lo speed is unknown, defaulting to 1000 [ 290.066917][T10319] lo speed is unknown, defaulting to 1000 [ 290.201348][T10330] netlink: 'syz.0.911': attribute type 9 has an invalid length. [ 290.228419][T10330] netlink: 'syz.0.911': attribute type 6 has an invalid length. [ 290.599088][T10336] lo speed is unknown, defaulting to 1000 [ 290.606202][T10336] lo speed is unknown, defaulting to 1000 [ 290.716280][T10349] lo speed is unknown, defaulting to 1000 [ 290.744733][T10349] lo speed is unknown, defaulting to 1000 [ 290.779015][T10319] lo speed is unknown, defaulting to 1000 [ 291.334132][T10336] lo speed is unknown, defaulting to 1000 [ 291.758237][T10319] netlink: 64 bytes leftover after parsing attributes in process `syz.1.907'. [ 291.974763][T10384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.985890][T10350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.916'. [ 292.086039][T10390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.920'. [ 292.095026][T10349] lo speed is unknown, defaulting to 1000 [ 292.138497][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 292.173390][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.920'. [ 292.233516][T10394] Set syz1 is full, maxelem 65536 reached [ 293.046951][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 293.170989][T10376] tipc: Enabling of bearer rejected, already enabled [ 293.229356][T10418] netlink: 'syz.2.923': attribute type 12 has an invalid length. [ 293.657551][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'. [ 293.785483][T10435] lo speed is unknown, defaulting to 1000 [ 293.818027][T10438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.925'. [ 293.890327][T10435] lo speed is unknown, defaulting to 1000 [ 294.357383][T10435] lo speed is unknown, defaulting to 1000 [ 294.365214][T10440] rdma_rxe: rxe_newlink: failed to add lo [ 295.219013][T10454] lo speed is unknown, defaulting to 1000 [ 295.239111][T10454] lo speed is unknown, defaulting to 1000 [ 295.792625][T10454] lo speed is unknown, defaulting to 1000 [ 296.638170][T10480] lo speed is unknown, defaulting to 1000 [ 296.647516][T10480] lo speed is unknown, defaulting to 1000 [ 296.955555][T10499] netlink: 'syz.2.939': attribute type 10 has an invalid length. [ 297.080008][T10499] lo speed is unknown, defaulting to 1000 [ 297.087209][T10499] lo speed is unknown, defaulting to 1000 [ 297.121031][T10501] lo speed is unknown, defaulting to 1000 [ 297.171848][T10501] lo speed is unknown, defaulting to 1000 [ 297.256385][T10480] lo speed is unknown, defaulting to 1000 [ 297.372740][T10514] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 297.430597][T10514] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 297.470850][T10499] lo speed is unknown, defaulting to 1000 [ 297.620402][T10518] netlink: 44 bytes leftover after parsing attributes in process `syz.0.942'. [ 297.929547][ T5884] lo speed is unknown, defaulting to 1000 [ 297.987625][T10525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.996489][T10525] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.013489][T10525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.031802][ T5914] lo speed is unknown, defaulting to 1000 [ 298.051609][T10501] lo speed is unknown, defaulting to 1000 [ 298.093899][T10527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.943'. [ 298.221057][T10529] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 298.266115][T10529] CPU: 1 UID: 0 PID: 10529 Comm: syz.2.943 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 298.266150][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.266162][T10529] Call Trace: [ 298.266170][T10529] [ 298.266180][T10529] dump_stack_lvl+0x241/0x360 [ 298.266214][T10529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.266237][T10529] ? __pfx__printk+0x10/0x10 [ 298.266262][T10529] ? __kmalloc_cache_noprof+0x243/0x390 [ 298.266289][T10529] ? sysfs_warn_dup+0x51/0xa0 [ 298.266318][T10529] sysfs_warn_dup+0x8e/0xa0 [ 298.266343][T10529] sysfs_do_create_link_sd+0xbe/0x110 [ 298.266372][T10529] device_add_class_symlinks+0x1c5/0x250 [ 298.266397][T10529] device_add+0x553/0xbf0 [ 298.266424][T10529] wiphy_register+0x1922/0x2650 [ 298.266469][T10529] ? __pfx_wiphy_register+0x10/0x10 [ 298.266493][T10529] ? minstrel_ht_alloc+0x84b/0x940 [ 298.266532][T10529] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 298.266569][T10529] ieee80211_register_hw+0x35d9/0x42e0 [ 298.266607][T10529] ? ieee80211_register_hw+0x1681/0x42e0 [ 298.266639][T10529] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 298.266674][T10529] ? __asan_memset+0x23/0x50 [ 298.266696][T10529] ? __hrtimer_init+0x170/0x250 [ 298.266724][T10529] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 298.266791][T10529] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 298.266817][T10529] ? trace_kmalloc+0x1f/0xd0 [ 298.266841][T10529] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 298.266870][T10529] ? kstrndup+0xbb/0x150 [ 298.266912][T10529] hwsim_new_radio_nl+0xece/0x2290 [ 298.266957][T10529] ? __pfx___nla_validate_parse+0x10/0x10 [ 298.266997][T10529] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 298.267069][T10529] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 298.267104][T10529] genl_rcv_msg+0xb1f/0xec0 [ 298.267140][T10529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.267204][T10529] ? __pfx_lock_acquire+0x10/0x10 [ 298.267232][T10529] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 298.267261][T10529] ? __pfx___might_resched+0x10/0x10 [ 298.267302][T10529] netlink_rcv_skb+0x206/0x480 [ 298.267333][T10529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.267360][T10529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.267432][T10529] genl_rcv+0x28/0x40 [ 298.267453][T10529] netlink_unicast+0x7f6/0x990 [ 298.267492][T10529] ? __pfx_netlink_unicast+0x10/0x10 [ 298.267516][T10529] ? __virt_addr_valid+0x45f/0x530 [ 298.267537][T10529] ? __phys_addr_symbol+0x2f/0x70 [ 298.267553][T10529] ? __check_object_size+0x47a/0x730 [ 298.267588][T10529] netlink_sendmsg+0x8de/0xcb0 [ 298.267635][T10529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.267672][T10529] ? aa_sock_msg_perm+0x91/0x160 [ 298.267710][T10529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.267738][T10529] __sock_sendmsg+0x221/0x270 [ 298.267772][T10529] ____sys_sendmsg+0x53a/0x860 [ 298.267809][T10529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.267834][T10529] ? __fget_files+0x2a/0x410 [ 298.267864][T10529] ? __fget_files+0x2a/0x410 [ 298.267902][T10529] __sys_sendmsg+0x269/0x350 [ 298.267931][T10529] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.268018][T10529] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.268049][T10529] ? do_syscall_64+0x100/0x230 [ 298.268080][T10529] ? do_syscall_64+0xb6/0x230 [ 298.268110][T10529] do_syscall_64+0xf3/0x230 [ 298.268136][T10529] ? clear_bhb_loop+0x35/0x90 [ 298.268168][T10529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.268194][T10529] RIP: 0033:0x7faba158d169 [ 298.268213][T10529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.268229][T10529] RSP: 002b:00007faba2386038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.268252][T10529] RAX: ffffffffffffffda RBX: 00007faba17a6080 RCX: 00007faba158d169 [ 298.268268][T10529] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 298.268281][T10529] RBP: 00007faba160e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.268294][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.268306][T10529] R13: 0000000000000000 R14: 00007faba17a6080 R15: 00007ffff59d9d68 [ 298.268343][T10529] [ 299.007103][T10531] tipc: Enabling of bearer rejected, already enabled [ 299.309608][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 299.446501][T10555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.948'. [ 299.468415][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 299.477408][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 299.588545][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 299.597476][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 300.047045][T10572] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 300.100950][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.952'. [ 300.153160][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'. [ 300.586797][T10595] lo speed is unknown, defaulting to 1000 [ 300.612711][T10595] lo speed is unknown, defaulting to 1000 [ 300.951863][T10610] ip6t_srh: unknown srh invflags 4000 [ 300.977428][T10595] lo speed is unknown, defaulting to 1000 [ 301.073330][T10608] smc: net device bond0 applied user defined pnetid SYZ2 [ 301.108956][T10608] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 301.236469][T10614] macsec1: entered allmulticast mode [ 301.266177][T10614] dummy0: entered allmulticast mode [ 301.326231][T10614] dummy0: left allmulticast mode [ 301.487724][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a748000: rx timeout, send abort [ 301.508000][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a748000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 302.033543][T10613] tipc: Enabling of bearer rejected, already enabled [ 302.468734][T10627] lo speed is unknown, defaulting to 1000 [ 302.514489][T10627] lo speed is unknown, defaulting to 1000 [ 302.903314][T10643] __nla_validate_parse: 1 callbacks suppressed [ 302.903338][T10643] netlink: 36 bytes leftover after parsing attributes in process `syz.0.967'. [ 302.912914][T10646] netlink: 'syz.1.969': attribute type 2 has an invalid length. [ 302.942786][T10646] netlink: 'syz.1.969': attribute type 9 has an invalid length. [ 302.952651][T10646] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.969'. [ 303.089461][T10649] netlink: 'syz.4.970': attribute type 1 has an invalid length. [ 303.118336][T10649] netlink: 224 bytes leftover after parsing attributes in process `syz.4.970'. [ 303.343802][T10627] lo speed is unknown, defaulting to 1000 [ 303.396681][T10662] netlink: 88 bytes leftover after parsing attributes in process `syz.4.972'. [ 303.432036][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.972'. [ 303.432111][T10661] netlink: 52 bytes leftover after parsing attributes in process `syz.0.973'. [ 303.586310][T10661] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 303.608513][T10661] netlink: 2 bytes leftover after parsing attributes in process `syz.0.973'. [ 303.649222][T10661] team0: entered promiscuous mode [ 303.663349][T10661] team_slave_0: entered promiscuous mode [ 303.709036][T10661] team_slave_1: entered promiscuous mode [ 303.738765][T10670] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 303.766748][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.976'. [ 303.885729][T10678] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 303.944482][T10678] lo speed is unknown, defaulting to 1000 [ 303.972224][T10678] lo speed is unknown, defaulting to 1000 [ 303.995467][T10683] lo: entered promiscuous mode [ 304.019921][T10683] tunl0: entered promiscuous mode [ 304.036897][T10683] gre0: entered promiscuous mode [ 304.046717][T10683] gretap0: entered promiscuous mode [ 304.062893][T10683] erspan0: entered promiscuous mode [ 304.093819][T10683] ip_vti0: entered promiscuous mode [ 304.113399][T10683] ip6_vti0: entered promiscuous mode [ 304.142409][T10683] sit0: entered promiscuous mode [ 304.156804][T10683] ip6tnl0: entered promiscuous mode [ 304.178188][T10683] ip6gre0: entered promiscuous mode [ 304.186269][T10683] ip6gretap0: entered promiscuous mode [ 304.233872][T10683] vcan0: entered promiscuous mode [ 304.257208][T10683] bond0: entered promiscuous mode [ 304.281005][T10683] bond_slave_0: entered promiscuous mode [ 304.299242][T10683] bond_slave_1: entered promiscuous mode [ 304.323086][T10683] vxlan0: entered promiscuous mode [ 304.335314][T10683] dummy0: entered promiscuous mode [ 304.362140][T10683] nlmon0: entered promiscuous mode [ 304.377803][T10683] caif0: entered promiscuous mode [ 304.391240][T10683] batadv0: entered promiscuous mode [ 304.403724][T10683] vxcan0: entered promiscuous mode [ 304.415216][T10683] vxcan1: entered promiscuous mode [ 304.427644][T10683] veth0: entered promiscuous mode [ 304.440172][T10683] veth1: entered promiscuous mode [ 304.451101][T10683] wg0: entered promiscuous mode [ 304.456562][T10683] wg1: entered promiscuous mode [ 304.462519][T10683] wg2: entered promiscuous mode [ 304.468376][T10683] veth0_to_bridge: entered promiscuous mode [ 304.474650][T10683] bridge_slave_0: entered promiscuous mode [ 304.481547][T10683] veth1_to_bridge: entered promiscuous mode [ 304.488322][T10683] bridge_slave_1: entered promiscuous mode [ 304.494770][T10683] veth0_to_bond: entered promiscuous mode [ 304.501657][T10683] veth1_to_bond: entered promiscuous mode [ 304.508582][T10683] veth0_to_team: entered promiscuous mode [ 304.515103][T10683] veth1_to_team: entered promiscuous mode [ 304.521738][T10683] veth0_to_batadv: entered promiscuous mode [ 304.529762][T10683] batadv_slave_0: entered promiscuous mode [ 304.536155][T10683] veth1_to_batadv: entered promiscuous mode [ 304.543114][T10683] batadv_slave_1: entered promiscuous mode [ 304.550087][T10683] xfrm0: entered promiscuous mode [ 304.555687][T10683] veth0_to_hsr: entered promiscuous mode [ 304.562752][T10683] veth1_to_hsr: entered promiscuous mode [ 304.569259][T10683] hsr0: entered promiscuous mode [ 304.574953][T10683] veth1_virt_wifi: entered promiscuous mode [ 304.581705][T10683] veth0_virt_wifi: entered promiscuous mode [ 304.588604][T10683] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 304.596396][T10683] vlan0: entered promiscuous mode [ 304.614445][T10683] vlan1: entered promiscuous mode [ 304.620224][T10683] macvlan0: entered promiscuous mode [ 304.626012][T10683] macvlan1: entered promiscuous mode [ 304.632466][T10683] ipvlan0: entered promiscuous mode [ 304.639311][T10683] ipvlan1: entered promiscuous mode [ 304.645199][T10683] macsec0: entered promiscuous mode [ 304.651518][T10683] geneve0: entered promiscuous mode [ 304.657098][T10683] geneve1: entered promiscuous mode [ 304.664377][T10683] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 304.672670][T10683] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 304.680709][T10683] vlan4: entered promiscuous mode [ 304.686392][T10683] syztnl0: entered promiscuous mode [ 304.692608][T10683] bridge0: entered promiscuous mode [ 304.698662][T10683] syzkaller1: entered promiscuous mode [ 304.706771][T10683] bond1: entered promiscuous mode [ 304.718279][T10683] netdevsim netdevsim0 eth0: entered promiscuous mode [ 304.733419][T10683] netdevsim netdevsim0 eth1: entered promiscuous mode [ 304.750241][T10683] netdevsim netdevsim0 eth2: entered promiscuous mode [ 304.765377][T10683] netdevsim netdevsim0 eth3: entered promiscuous mode [ 304.773730][T10683] mac80211_hwsim hwsim33 wlan2: entered promiscuous mode [ 304.781615][T10683] mac80211_hwsim hwsim34 wlan3: entered promiscuous mode [ 304.789559][T10683] ip6tnl1: entered promiscuous mode [ 304.795168][ T5849] lo speed is unknown, defaulting to 1000 [ 304.806433][T10684] lo speed is unknown, defaulting to 1000 [ 304.814020][T10684] lo speed is unknown, defaulting to 1000 [ 305.009006][T10678] lo speed is unknown, defaulting to 1000 [ 305.412488][T10684] lo speed is unknown, defaulting to 1000 [ 305.541175][T10717] netlink: 830 bytes leftover after parsing attributes in process `syz.1.988'. [ 305.559335][T10720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.988'. [ 305.899032][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 306.341103][T10749] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 306.433836][ T5148] block nbd0: Receive control failed (result -32) [ 306.898124][T10775] wg1: left promiscuous mode [ 307.025090][T10779] team0: Mode changed to "broadcast" [ 307.156717][T10784] tipc: Enabling of bearer rejected, failed to enable media [ 308.099545][T10808] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 308.163673][T10810] __nla_validate_parse: 90 callbacks suppressed [ 308.163698][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1010'. [ 308.258221][T10804] lo speed is unknown, defaulting to 1000 [ 308.316668][T10804] lo speed is unknown, defaulting to 1000 [ 308.705111][T10827] syzkaller1: entered promiscuous mode [ 308.715171][T10827] syzkaller1: entered allmulticast mode [ 308.734714][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1015'. [ 309.058791][T10804] lo speed is unknown, defaulting to 1000 [ 309.112585][T10832] bpq0: entered promiscuous mode [ 309.128354][T10832] bpq0: entered allmulticast mode [ 309.383187][T10839] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1019'. [ 309.392777][T10839] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 309.494062][T10842] lo speed is unknown, defaulting to 1000 [ 309.519072][T10842] lo speed is unknown, defaulting to 1000 [ 309.605592][T10826] netlink: 'syz.1.1014': attribute type 2 has an invalid length. [ 309.644816][T10826] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1014'. [ 309.911069][T10846] lo speed is unknown, defaulting to 1000 [ 309.939682][T10846] lo speed is unknown, defaulting to 1000 [ 310.237428][T10842] lo speed is unknown, defaulting to 1000 [ 310.346522][T10867] lo speed is unknown, defaulting to 1000 [ 310.417594][T10867] lo speed is unknown, defaulting to 1000 [ 310.664407][T10871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1022'. [ 310.788689][T10846] lo speed is unknown, defaulting to 1000 [ 311.263361][T10867] lo speed is unknown, defaulting to 1000 [ 312.639026][T10929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.715988][T10929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.748044][T10932] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 313.636742][T10952] netlink: 'syz.0.1034': attribute type 4 has an invalid length. [ 313.673385][T10952] netlink: 'syz.0.1034': attribute type 4 has an invalid length. [ 313.712733][ T5849] lo speed is unknown, defaulting to 1000 [ 314.268095][T10976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1038'. [ 314.514753][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1041'. [ 314.709324][T10990] bond3: (slave gretap0): Releasing active interface [ 314.903760][T11003] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 315.015609][T10971] tipc: Enabling of bearer rejected, failed to enable media [ 315.171294][T11010] lo speed is unknown, defaulting to 1000 [ 315.179155][T11010] lo speed is unknown, defaulting to 1000 [ 315.533005][T11018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1048'. [ 315.566128][T11018] batman_adv: batadv0: Adding interface: dummy0 [ 315.572876][T11018] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.607508][T11018] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 315.655196][T11010] lo speed is unknown, defaulting to 1000 [ 315.805742][T11025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 316.061493][T11037] lo speed is unknown, defaulting to 1000 [ 316.080209][T11037] lo speed is unknown, defaulting to 1000 [ 316.505769][T11037] lo speed is unknown, defaulting to 1000 [ 316.535915][T11048] tap0: tun_chr_ioctl cmd 2147767506 [ 317.930662][T11053] tipc: Enabling of bearer rejected, already enabled [ 318.205204][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1064'. [ 318.215149][T11074] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1063'. [ 318.326174][T11074] pimreg: entered allmulticast mode [ 318.473163][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'. [ 318.483923][T11086] nbd: nbd0 already in use [ 318.491713][T11086] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1067'. [ 318.663922][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 318.842886][T11070] pimreg: left allmulticast mode [ 319.106789][T11111] netlink: 'syz.1.1074': attribute type 4 has an invalid length. [ 319.141406][T11111] netlink: 'syz.1.1074': attribute type 4 has an invalid length. [ 319.160802][ T5913] lo speed is unknown, defaulting to 1000 [ 319.270521][T11113] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 319.339912][T11115] netlink: 'syz.1.1076': attribute type 3 has an invalid length. [ 319.360807][T11115] macvlan2: entered promiscuous mode [ 319.366292][T11115] macvlan2: entered allmulticast mode [ 319.373803][T11115] bond0: entered allmulticast mode [ 319.379526][T11115] bond0: entered promiscuous mode [ 319.387027][T11115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 319.397701][T11115] team0: Port device macvlan2 added [ 319.598501][T11124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1078'. [ 319.812630][T11128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1083'. [ 319.937059][T11130] lo speed is unknown, defaulting to 1000 [ 319.952223][T11130] lo speed is unknown, defaulting to 1000 [ 319.971199][T11135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1084'. [ 320.105414][T11138] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 320.120225][T11132] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 320.156437][T11138] netlink: 'syz.1.1085': attribute type 4 has an invalid length. [ 320.180484][ T5914] lo speed is unknown, defaulting to 1000 [ 320.192545][T11132] lo speed is unknown, defaulting to 1000 [ 320.198664][ T5914] lo speed is unknown, defaulting to 1000 [ 320.246129][T11132] lo speed is unknown, defaulting to 1000 [ 320.262234][T11136] tap0: tun_chr_ioctl cmd 1074025677 [ 320.277238][T11136] tap0: linktype set to 804 [ 320.460112][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 320.526718][T11121] tipc: Enabling of bearer rejected, already enabled [ 320.577049][T11145] lo speed is unknown, defaulting to 1000 [ 320.585267][T11130] lo speed is unknown, defaulting to 1000 [ 320.640718][T11145] lo speed is unknown, defaulting to 1000 [ 320.938376][T11132] lo speed is unknown, defaulting to 1000 [ 321.180497][T11145] lo speed is unknown, defaulting to 1000 [ 322.094384][T11172] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1095'. [ 322.162821][T11176] netlink: 'syz.1.1096': attribute type 4 has an invalid length. [ 322.183024][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 322.210272][T11176] netlink: 'syz.1.1096': attribute type 4 has an invalid length. [ 322.227769][ T5914] lo speed is unknown, defaulting to 1000 [ 322.272391][ T5914] lo speed is unknown, defaulting to 1000 [ 322.458068][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 322.544645][T11180] lo speed is unknown, defaulting to 1000 [ 322.569256][T11178] tipc: Enabling of bearer rejected, already enabled [ 322.673005][T11180] lo speed is unknown, defaulting to 1000 [ 322.750520][T11188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1100'. [ 322.828332][T11188] ax25_connect(): syz.3.1100 uses autobind, please contact jreuter@yaina.de [ 323.110974][T11202] bond1: (slave ip6gretap1): Removing an active aggregator [ 323.130330][T11202] bond1: (slave ip6gretap1): Releasing backup interface [ 323.137506][T11202] bond1: (slave ip6gretap1): the permanent HWaddr of slave - ee:b2:f6:1f:4c:07 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 323.170663][T11202] bond1: (slave veth3): Releasing backup interface [ 323.185648][T11162] tipc: Enabling of bearer rejected, failed to enable media [ 323.209474][T11180] lo speed is unknown, defaulting to 1000 [ 323.271725][T11163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 323.453347][T11180] lo speed is unknown, defaulting to 1000 [ 323.470608][T11180] lo speed is unknown, defaulting to 1000 [ 323.561694][T11211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1106'. [ 323.650969][T11180] lo speed is unknown, defaulting to 1000 [ 323.749646][T11216] lo speed is unknown, defaulting to 1000 [ 323.756891][T11216] lo speed is unknown, defaulting to 1000 [ 323.895168][T11216] lo speed is unknown, defaulting to 1000 [ 324.329295][T11232] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 324.350453][T11233] can: request_module (can-proto-3) failed. [ 324.565523][T11232] lo speed is unknown, defaulting to 1000 [ 324.671416][T11232] lo speed is unknown, defaulting to 1000 [ 324.813990][T11227] tipc: Enabling of bearer rejected, already enabled [ 325.036221][T11232] lo speed is unknown, defaulting to 1000 [ 325.496844][T11254] lo speed is unknown, defaulting to 1000 [ 325.542017][T11254] lo speed is unknown, defaulting to 1000 [ 325.777387][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1123'. [ 326.217998][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 326.554068][T11254] lo speed is unknown, defaulting to 1000 [ 326.712627][T11281] netlink: 'syz.0.1127': attribute type 4 has an invalid length. [ 326.724721][ T5913] lo speed is unknown, defaulting to 1000 [ 326.736510][T11281] netlink: 'syz.0.1127': attribute type 4 has an invalid length. [ 326.749758][ T5840] lo speed is unknown, defaulting to 1000 [ 326.925259][T11287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1130'. [ 326.950840][T11287] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR' [ 326.961579][T11287] CPU: 1 UID: 0 PID: 11287 Comm: syz.1.1130 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 326.961609][T11287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.961621][T11287] Call Trace: [ 326.961628][T11287] [ 326.961635][T11287] dump_stack_lvl+0x241/0x360 [ 326.961667][T11287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.961689][T11287] ? __pfx__printk+0x10/0x10 [ 326.961716][T11287] ? __kmalloc_cache_noprof+0x243/0x390 [ 326.961741][T11287] ? sysfs_warn_dup+0x51/0xa0 [ 326.961771][T11287] sysfs_warn_dup+0x8e/0xa0 [ 326.961796][T11287] sysfs_do_create_link_sd+0xbe/0x110 [ 326.961824][T11287] device_add_class_symlinks+0x1c5/0x250 [ 326.961848][T11287] device_add+0x553/0xbf0 [ 326.961875][T11287] wiphy_register+0x1922/0x2650 [ 326.961918][T11287] ? __pfx_wiphy_register+0x10/0x10 [ 326.961955][T11287] ? minstrel_ht_alloc+0x84b/0x940 [ 326.961996][T11287] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 326.962034][T11287] ieee80211_register_hw+0x35d9/0x42e0 [ 326.962072][T11287] ? ieee80211_register_hw+0x1681/0x42e0 [ 326.962102][T11287] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 326.962136][T11287] ? __asan_memset+0x23/0x50 [ 326.962159][T11287] ? __hrtimer_init+0x170/0x250 [ 326.962186][T11287] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 326.962247][T11287] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 326.962274][T11287] ? trace_kmalloc+0x1f/0xd0 [ 326.962297][T11287] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 326.962325][T11287] ? kstrndup+0xbb/0x150 [ 326.962362][T11287] hwsim_new_radio_nl+0xece/0x2290 [ 326.962402][T11287] ? __pfx___nla_validate_parse+0x10/0x10 [ 326.962430][T11287] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 326.962498][T11287] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 326.962534][T11287] genl_rcv_msg+0xb1f/0xec0 [ 326.962567][T11287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.962647][T11287] ? __pfx_lock_acquire+0x10/0x10 [ 326.962675][T11287] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 326.962703][T11287] ? __pfx___might_resched+0x10/0x10 [ 326.962741][T11287] netlink_rcv_skb+0x206/0x480 [ 326.962770][T11287] ? __pfx_genl_rcv_msg+0x10/0x10 [ 326.962793][T11287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 326.962859][T11287] genl_rcv+0x28/0x40 [ 326.962880][T11287] netlink_unicast+0x7f6/0x990 [ 326.962916][T11287] ? __pfx_netlink_unicast+0x10/0x10 [ 326.962948][T11287] ? __virt_addr_valid+0x45f/0x530 [ 326.962983][T11287] ? __phys_addr_symbol+0x2f/0x70 [ 326.963002][T11287] ? __check_object_size+0x47a/0x730 [ 326.963036][T11287] netlink_sendmsg+0x8de/0xcb0 [ 326.963080][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.963116][T11287] ? aa_sock_msg_perm+0x91/0x160 [ 326.963153][T11287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.963179][T11287] __sock_sendmsg+0x221/0x270 [ 326.963212][T11287] ____sys_sendmsg+0x53a/0x860 [ 326.963246][T11287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.963267][T11287] ? __fget_files+0x2a/0x410 [ 326.963299][T11287] ? __fget_files+0x2a/0x410 [ 326.963338][T11287] __sys_sendmsg+0x269/0x350 [ 326.963370][T11287] ? __pfx___sys_sendmsg+0x10/0x10 [ 326.963447][T11287] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 326.963477][T11287] ? do_syscall_64+0x100/0x230 [ 326.963505][T11287] ? do_syscall_64+0xb6/0x230 [ 326.963531][T11287] do_syscall_64+0xf3/0x230 [ 326.963553][T11287] ? clear_bhb_loop+0x35/0x90 [ 326.963582][T11287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.963604][T11287] RIP: 0033:0x7fbd41f8d169 [ 326.963622][T11287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.963639][T11287] RSP: 002b:00007fbd42e8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.963661][T11287] RAX: ffffffffffffffda RBX: 00007fbd421a5fa0 RCX: 00007fbd41f8d169 [ 326.963675][T11287] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 326.963686][T11287] RBP: 00007fbd4200e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 326.963697][T11287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.963709][T11287] R13: 0000000000000000 R14: 00007fbd421a5fa0 R15: 00007fffe01fac98 [ 326.963742][T11287] [ 327.013910][T11288] syzkaller1: left promiscuous mode [ 328.298351][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 328.433883][T11298] tipc: Enabling of bearer rejected, already enabled [ 328.467452][T11322] lo: left promiscuous mode [ 328.534286][T11322] tunl0: left promiscuous mode [ 328.591492][T11322] gre0: left promiscuous mode [ 328.614811][T11322] gretap0: left promiscuous mode [ 328.628300][T11322] erspan0: left promiscuous mode [ 328.633519][T11322] ip_vti0: left promiscuous mode [ 328.678652][T11322] ip6_vti0: left promiscuous mode [ 328.684296][T11322] sit0: left promiscuous mode [ 328.764646][T11322] ip6tnl0: left promiscuous mode [ 328.774758][T11322] ip6gre0: left promiscuous mode [ 328.794334][T11322] ip6gretap0: left promiscuous mode [ 328.867328][T11322] vcan0: left promiscuous mode [ 328.945602][T11322] bond0: left promiscuous mode [ 328.956602][T11322] team0: left promiscuous mode [ 328.983275][T11322] dummy0: left promiscuous mode [ 328.994873][T11337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1139'. [ 329.008775][T11322] nlmon0: left promiscuous mode [ 329.034602][T11322] caif0: left promiscuous mode [ 329.068415][T11322] vxcan0: left promiscuous mode [ 329.073483][T11322] vxcan1: left promiscuous mode [ 329.128800][T11322] veth0: left promiscuous mode [ 329.218801][T11322] veth1: left promiscuous mode [ 329.223842][T11322] wg0: left promiscuous mode [ 329.422793][T11322] wg2: left promiscuous mode [ 329.451986][T11322] veth0_to_bridge: left promiscuous mode [ 329.482408][T11322] bridge_slave_0: left promiscuous mode [ 329.511861][T11322] veth1_to_bridge: left promiscuous mode [ 329.538232][T11322] bridge_slave_1: left promiscuous mode [ 329.547020][T11322] veth0_to_bond: left promiscuous mode [ 329.578244][T11322] bond_slave_0: left promiscuous mode [ 329.584058][T11322] veth1_to_bond: left promiscuous mode [ 329.635414][T11322] bond_slave_1: left promiscuous mode [ 329.661165][T11322] veth0_to_team: left promiscuous mode [ 329.671322][T11322] team_slave_0: left promiscuous mode [ 329.676928][T11322] veth1_to_team: left promiscuous mode [ 329.708244][T11322] team_slave_1: left promiscuous mode [ 329.713880][T11322] veth0_to_batadv: left promiscuous mode [ 329.743236][T11322] batadv_slave_0: left promiscuous mode [ 329.768095][T11322] veth1_to_batadv: left promiscuous mode [ 329.778198][T11322] batadv_slave_1: left promiscuous mode [ 329.783980][T11322] xfrm0: left promiscuous mode [ 329.809941][T11322] veth0_to_hsr: left promiscuous mode [ 329.815858][T11322] veth1_to_hsr: left promiscuous mode [ 329.838355][T11322] hsr0: left promiscuous mode [ 329.858155][T11322] veth1_virt_wifi: left promiscuous mode [ 329.869227][T11322] veth0_virt_wifi: left promiscuous mode [ 329.886158][T11322] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 329.894068][T11322] vlan0: left promiscuous mode [ 329.902297][T11322] vlan1: left promiscuous mode [ 329.907380][T11322] macvlan0: left promiscuous mode [ 329.914252][T11322] macvlan1: left promiscuous mode [ 329.919666][T11322] ipvlan0: left promiscuous mode [ 329.925064][T11322] ipvlan1: left promiscuous mode [ 329.930701][T11322] macsec0: left promiscuous mode [ 329.943922][T11322] geneve0: left promiscuous mode [ 329.950298][T11322] geneve1: left promiscuous mode [ 329.950356][T11356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 329.955897][T11322] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 329.974318][T11322] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 329.981398][T11322] vlan4: left promiscuous mode [ 329.986338][T11322] vxlan0: left promiscuous mode [ 329.991538][T11322] syztnl0: left promiscuous mode [ 329.996729][T11322] bridge0: left promiscuous mode [ 330.013410][T11322] bond1: left promiscuous mode [ 330.018543][T11322] netdevsim netdevsim0 eth0: left promiscuous mode [ 330.025260][T11322] netdevsim netdevsim0 eth1: left promiscuous mode [ 330.052826][T11322] netdevsim netdevsim0 eth2: left promiscuous mode [ 330.060348][T11322] netdevsim netdevsim0 eth3: left promiscuous mode [ 330.067252][T11322] mac80211_hwsim hwsim33 wlan2: left promiscuous mode [ 330.075065][T11322] mac80211_hwsim hwsim34 wlan3: left promiscuous mode [ 330.082485][T11322] ip6tnl1: left promiscuous mode [ 330.091787][ T5840] lo speed is unknown, defaulting to 1000 [ 330.102406][T11325] lo speed is unknown, defaulting to 1000 [ 330.108651][T11327] bridge0: port 1(gretap0) entered blocking state [ 330.115173][T11327] bridge0: port 1(gretap0) entered disabled state [ 330.128141][T11327] gretap0: entered allmulticast mode [ 330.134978][T11327] gretap0: entered promiscuous mode [ 330.153241][T11342] tipc: Enabling of bearer rejected, already enabled [ 330.169942][T11354] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1140'. [ 330.300153][T11325] lo speed is unknown, defaulting to 1000 [ 330.326065][T11331] gretap0: left allmulticast mode [ 330.354816][T11331] gretap0: left promiscuous mode [ 330.378628][T11331] bridge0: port 1(gretap0) entered disabled state [ 330.385605][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 330.748308][T11369] ipt_ECN: cannot use operation on non-tcp rule [ 330.751306][T11365] lo speed is unknown, defaulting to 1000 [ 330.840324][T11365] lo speed is unknown, defaulting to 1000 [ 330.847688][T11325] lo speed is unknown, defaulting to 1000 [ 331.132226][T11365] lo speed is unknown, defaulting to 1000 [ 332.782933][T11433] lo speed is unknown, defaulting to 1000 [ 332.790369][T11433] lo speed is unknown, defaulting to 1000 [ 332.952520][T11433] lo speed is unknown, defaulting to 1000 [ 332.962485][T11420] tipc: Enabling of bearer rejected, already enabled [ 333.425737][T11451] lo speed is unknown, defaulting to 1000 [ 333.436931][T11451] lo speed is unknown, defaulting to 1000 [ 333.611133][T11460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1159'. [ 334.907977][T11444] syzkaller1: left promiscuous mode [ 334.913293][T11444] syzkaller1: left allmulticast mode [ 334.955349][T11451] lo speed is unknown, defaulting to 1000 [ 334.987773][T11475] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 335.507938][T11490] lo speed is unknown, defaulting to 1000 [ 335.608518][T11490] lo speed is unknown, defaulting to 1000 [ 335.649308][T11493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1164'. [ 335.866938][T11490] lo speed is unknown, defaulting to 1000 [ 336.208613][T11520] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1168'. [ 336.218164][T11520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 336.334808][T11522] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 336.804420][T11534] lo speed is unknown, defaulting to 1000 [ 336.812352][T11534] lo speed is unknown, defaulting to 1000 [ 336.812352][T11528] lo speed is unknown, defaulting to 1000 [ 336.840894][T11528] lo speed is unknown, defaulting to 1000 [ 337.057637][T11522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 337.156948][T11534] lo speed is unknown, defaulting to 1000 [ 337.385123][T11552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1178'. [ 337.456363][T11552] rdma_op ffff88807eaf79f0 conn xmit_rdma 0000000000000000 [ 337.667228][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1179'. [ 337.982112][T11528] lo speed is unknown, defaulting to 1000 [ 338.006987][T11563] lo speed is unknown, defaulting to 1000 [ 338.031028][T11564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1180'. [ 338.082777][T11563] lo speed is unknown, defaulting to 1000 [ 338.206663][T11563] lo speed is unknown, defaulting to 1000 [ 338.242107][T11570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1181'. [ 338.602435][T11583] 8021q: VLANs not supported on sit0 [ 338.984771][T11593] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 338.993103][T11593] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1189'. [ 339.197521][T11596] lo speed is unknown, defaulting to 1000 [ 339.204864][T11596] lo speed is unknown, defaulting to 1000 [ 339.480314][T11596] lo speed is unknown, defaulting to 1000 [ 339.516422][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'. [ 339.537277][T11598] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.547688][T11600] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1192'. [ 339.567771][T11598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.943058][T11608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1194'. [ 340.222247][T11613] bond0: left allmulticast mode [ 340.227171][T11613] bond0: left promiscuous mode [ 340.261782][T11613] team0: Port device macvlan2 removed [ 340.410263][T11618] lo speed is unknown, defaulting to 1000 [ 340.417760][T11618] lo speed is unknown, defaulting to 1000 [ 340.514244][T11633] netlink: 'syz.2.1203': attribute type 4 has an invalid length. [ 340.576823][T11633] netlink: 'syz.2.1203': attribute type 4 has an invalid length. [ 340.663455][T11638] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1206'. [ 340.924551][T11618] lo speed is unknown, defaulting to 1000 [ 340.938653][T11645] netlink: 'syz.1.1209': attribute type 10 has an invalid length. [ 341.002554][T11649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 341.142344][T11643] lo speed is unknown, defaulting to 1000 [ 341.306808][T11659] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1211'. [ 341.318061][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1210'. [ 341.426307][T11648] lo speed is unknown, defaulting to 1000 [ 341.548835][T11652] lo speed is unknown, defaulting to 1000 [ 341.555476][T11648] lo speed is unknown, defaulting to 1000 [ 341.888175][T11671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 341.958713][T11666] lo speed is unknown, defaulting to 1000 [ 341.984273][T11643] lo speed is unknown, defaulting to 1000 [ 342.098798][T11652] lo speed is unknown, defaulting to 1000 [ 342.106328][T11666] lo speed is unknown, defaulting to 1000 [ 342.391343][T11675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1208'. [ 342.624169][T11675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.669817][T11675] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.698102][T11675] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.713759][ T5840] lo speed is unknown, defaulting to 1000 [ 342.728798][T11648] lo speed is unknown, defaulting to 1000 [ 342.753549][T11655] lo speed is unknown, defaulting to 1000 [ 343.144568][T11643] lo speed is unknown, defaulting to 1000 [ 343.151181][T11655] lo speed is unknown, defaulting to 1000 [ 343.165121][T11666] lo speed is unknown, defaulting to 1000 [ 343.200399][T11652] lo speed is unknown, defaulting to 1000 [ 343.426023][T11655] lo speed is unknown, defaulting to 1000 [ 344.213790][T11682] lo speed is unknown, defaulting to 1000 [ 344.223706][T11682] lo speed is unknown, defaulting to 1000 [ 344.420494][T11682] lo speed is unknown, defaulting to 1000 [ 344.743650][T11695] netlink: 'syz.1.1220': attribute type 4 has an invalid length. [ 344.761787][ T974] lo speed is unknown, defaulting to 1000 [ 344.773288][T11695] netlink: 'syz.1.1220': attribute type 4 has an invalid length. [ 344.785544][ T974] lo speed is unknown, defaulting to 1000 [ 345.000542][T11698] lo speed is unknown, defaulting to 1000 [ 345.234889][T11698] lo speed is unknown, defaulting to 1000 [ 345.385469][T11720] netlink: 'syz.1.1226': attribute type 7 has an invalid length. [ 345.394493][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1226'. [ 345.648542][T11727] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 346.114075][T11718] lo speed is unknown, defaulting to 1000 [ 346.134674][T11734] xt_CT: No such helper "snmp" [ 346.188323][T11698] lo speed is unknown, defaulting to 1000 [ 346.224810][T11718] lo speed is unknown, defaulting to 1000 [ 346.522953][T11742] IPVS: Scheduler module ip_vs_sip not found [ 346.536999][T11748] IPVS: length: 24 != 16106127384 [ 346.701352][T11754] wireguard0: entered promiscuous mode [ 346.707125][T11754] wireguard0: entered allmulticast mode [ 346.769765][T11718] lo speed is unknown, defaulting to 1000 [ 347.116676][T11763] IPVS: Error connecting to the multicast addr [ 347.494871][T11773] lo speed is unknown, defaulting to 1000 [ 347.502219][T11773] lo speed is unknown, defaulting to 1000 [ 347.678553][T11773] lo speed is unknown, defaulting to 1000 [ 348.069217][T11794] syz.4.1240: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 348.113056][T11794] CPU: 0 UID: 0 PID: 11794 Comm: syz.4.1240 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 348.113091][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.113103][T11794] Call Trace: [ 348.113111][T11794] [ 348.113120][T11794] dump_stack_lvl+0x241/0x360 [ 348.113151][T11794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.113173][T11794] ? __pfx__printk+0x10/0x10 [ 348.113199][T11794] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 348.113223][T11794] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 348.113250][T11794] warn_alloc+0x278/0x410 [ 348.113276][T11794] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 348.113299][T11794] ? __pfx_warn_alloc+0x10/0x10 [ 348.113320][T11794] ? kasan_save_track+0x3f/0x80 [ 348.113339][T11794] ? __kasan_kmalloc+0x98/0xb0 [ 348.113361][T11794] ? xsk_setsockopt+0x4aa/0x810 [ 348.113378][T11794] ? do_sock_setsockopt+0x3af/0x720 [ 348.113397][T11794] ? __x64_sys_setsockopt+0x1ee/0x280 [ 348.113418][T11794] ? do_syscall_64+0xf3/0x230 [ 348.113441][T11794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.113479][T11794] __vmalloc_node_range_noprof+0x126/0x1380 [ 348.113533][T11794] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 348.113560][T11794] ? __kasan_kmalloc+0x98/0xb0 [ 348.113588][T11794] vmalloc_user_noprof+0x74/0x80 [ 348.113609][T11794] ? xskq_create+0xb6/0x170 [ 348.113628][T11794] xskq_create+0xb6/0x170 [ 348.113665][T11794] xsk_init_queue+0xa1/0x100 [ 348.113688][T11794] xsk_setsockopt+0x4aa/0x810 [ 348.113710][T11794] ? __pfx_xsk_setsockopt+0x10/0x10 [ 348.113731][T11794] ? __pfx_aa_sk_perm+0x10/0x10 [ 348.113765][T11794] ? aa_sock_opt_perm+0x79/0x120 [ 348.113801][T11794] ? __pfx_xsk_setsockopt+0x10/0x10 [ 348.113819][T11794] do_sock_setsockopt+0x3af/0x720 [ 348.113848][T11794] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 348.113876][T11794] ? __fget_files+0x395/0x410 [ 348.113904][T11794] ? __fget_files+0x2a/0x410 [ 348.113943][T11794] __x64_sys_setsockopt+0x1ee/0x280 [ 348.113973][T11794] do_syscall_64+0xf3/0x230 [ 348.113999][T11794] ? clear_bhb_loop+0x35/0x90 [ 348.114033][T11794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.114056][T11794] RIP: 0033:0x7fb9bcf8d169 [ 348.114074][T11794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.114092][T11794] RSP: 002b:00007fb9bcdf9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 348.114115][T11794] RAX: ffffffffffffffda RBX: 00007fb9bd1a5fa0 RCX: 00007fb9bcf8d169 [ 348.114129][T11794] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 348.114142][T11794] RBP: 00007fb9bd00e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 348.114153][T11794] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.114166][T11794] R13: 0000000000000000 R14: 00007fb9bd1a5fa0 R15: 00007fff623bd308 [ 348.114196][T11794] [ 348.115440][T11794] Mem-Info: [ 348.472187][T11794] active_anon:13794 inactive_anon:0 isolated_anon:0 [ 348.472187][T11794] active_file:1470 inactive_file:38401 isolated_file:0 [ 348.472187][T11794] unevictable:768 dirty:411 writeback:0 [ 348.472187][T11794] slab_reclaimable:11446 slab_unreclaimable:111516 [ 348.472187][T11794] mapped:33660 shmem:5956 pagetables:953 [ 348.472187][T11794] sec_pagetables:0 bounce:0 [ 348.472187][T11794] kernel_misc_reclaimable:0 [ 348.472187][T11794] free:1308778 free_pcp:686 free_cma:0 [ 348.550229][T11794] Node 0 active_anon:56076kB inactive_anon:0kB active_file:5880kB inactive_file:153532kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134940kB dirty:1644kB writeback:0kB shmem:23188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11636kB pagetables:3812kB sec_pagetables:0kB all_unreclaimable? no [ 348.606300][T11796] lo speed is unknown, defaulting to 1000 [ 348.711559][T11794] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 348.748159][T11794] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.793834][T11794] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 348.806729][T11794] Node 0 DMA32 free:1299356kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:48040kB inactive_anon:0kB active_file:5880kB inactive_file:153204kB unevictable:1536kB writepending:1644kB present:3129332kB managed:2549708kB mlocked:0kB bounce:0kB free_pcp:12176kB local_pcp:11804kB free_cma:0kB [ 348.844883][T11794] lowmem_reserve[]: 0 0 0 0 0 [ 348.854335][T11794] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:328kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 348.917993][T11796] lo speed is unknown, defaulting to 1000 [ 348.919553][T11794] lowmem_reserve[]: 0 0 0 0 0 [ 349.098077][T11794] Node 1 Normal free:3905728kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 349.218268][T11794] lowmem_reserve[]: 0 0 0 0 0 [ 349.237221][T11794] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 349.310830][T11794] Node 0 DMA32: 627*4kB (UME) 510*8kB (UME) 827*16kB (UME) 849*32kB (UME) 1288*64kB (UME) 662*128kB (UME) 423*256kB (UM) 279*512kB (UME) 153*1024kB (UM) 8*2048kB (UME) 170*4096kB (UM) = 1334668kB [ 349.335831][T11794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 349.353743][T11794] Node 1 Normal: 180*4kB (UE) 68*8kB (UME) 43*16kB (UME) 211*32kB (UME) 101*64kB (UME) 33*128kB (UME) 15*256kB (UME) 7*512kB (UME) 6*1024kB (UME) 3*2048kB (U) 944*4096kB (M) = 3905728kB [ 349.374773][T11794] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.387074][T11794] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 349.399739][T11796] lo speed is unknown, defaulting to 1000 [ 349.402192][T11794] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 349.423695][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1245'. [ 349.437264][T11794] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 349.447174][T11794] 42335 total pagecache pages [ 349.452785][T11794] 0 pages in swap cache [ 349.459466][T11825] netlink: 'syz.1.1244': attribute type 16 has an invalid length. [ 349.467985][T11824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1245'. [ 349.477120][T11825] netlink: 'syz.1.1244': attribute type 17 has an invalid length. [ 349.495398][T11794] Free swap = 124996kB [ 349.502048][T11794] Total swap = 124996kB [ 349.506591][T11794] 2097051 pages RAM [ 349.520913][T11825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.523724][T11794] 0 pages HighMem/MovableOnly [ 349.545961][T11794] 427902 pages reserved [ 349.579817][T11827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1246'. [ 349.602603][T11794] 0 pages cma reserved [ 349.756946][T11829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 349.838793][T11833] rdma_rxe: rxe_newlink: failed to add lo [ 350.213408][T11835] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 350.273399][T11835] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 350.431159][T11848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1251'. [ 350.501021][T11848] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 350.736836][T11862] siw: device registration error -23 [ 350.832866][T11861] lo speed is unknown, defaulting to 1000 [ 350.839979][T11861] lo speed is unknown, defaulting to 1000 [ 351.146996][T11872] lo speed is unknown, defaulting to 1000 [ 351.176627][T11872] lo speed is unknown, defaulting to 1000 [ 351.466130][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1257'. [ 351.663613][T11861] lo speed is unknown, defaulting to 1000 [ 351.707788][T11885] tun0: tun_chr_ioctl cmd 1074025675 [ 351.713376][T11885] tun0: persist enabled [ 351.828405][T11885] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1260'. [ 352.062416][T11883] tun0: tun_chr_ioctl cmd 1074025675 [ 352.068110][T11883] tun0: persist disabled [ 352.103210][T11895] syzkaller1: entered promiscuous mode [ 352.116839][T11895] syzkaller1: entered allmulticast mode [ 352.202805][T11872] lo speed is unknown, defaulting to 1000 [ 353.684016][T11920] netlink: 'syz.1.1267': attribute type 7 has an invalid length. [ 353.692171][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 354.298809][T11943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1273'. [ 355.177544][T11932] lo speed is unknown, defaulting to 1000 [ 355.185359][T11932] lo speed is unknown, defaulting to 1000 [ 355.204029][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 355.303522][T11945] lo speed is unknown, defaulting to 1000 [ 355.324224][T11932] lo speed is unknown, defaulting to 1000 [ 355.373915][T11945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 355.690412][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 355.699924][T11954] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1274'. [ 355.767070][T11957] bond0: (slave bond_slave_0): Releasing backup interface [ 355.793602][T11954] rdma_rxe: rxe_newlink: failed to add lo [ 355.882925][T11957] bond0: (slave bond_slave_1): Releasing backup interface [ 355.916381][T11957] team0: Port device team_slave_0 removed [ 355.932629][T11957] team0: Port device team_slave_1 removed [ 355.956127][T11957] bond0: (slave vxlan0): Releasing backup interface [ 356.453444][T11975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1278'. [ 356.514152][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'. [ 356.542995][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1279'. [ 356.576804][T11972] netlink: 'syz.0.1279': attribute type 6 has an invalid length. [ 356.651980][T11974] lo speed is unknown, defaulting to 1000 [ 356.727011][T11974] lo speed is unknown, defaulting to 1000 [ 356.991455][T11989] No such timeout policy "syz0" [ 357.029451][T11974] lo speed is unknown, defaulting to 1000 [ 357.126048][T11992] siw: device registration error -23 [ 358.151652][T12008] lo speed is unknown, defaulting to 1000 [ 358.204026][T12008] lo speed is unknown, defaulting to 1000 [ 358.284224][T12014] IPv4: Oversized IP packet from 127.202.26.0 [ 358.297631][T12014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1287'. [ 358.317137][T12014] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1287'. [ 358.328843][T12014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1287'. [ 358.338364][T12014] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1287'. [ 358.423283][T12020] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 358.436389][T12020] team0: Port device wlan1 added [ 358.581518][T12008] lo speed is unknown, defaulting to 1000 [ 358.806026][T12026] lo speed is unknown, defaulting to 1000 [ 358.828747][T12026] lo speed is unknown, defaulting to 1000 [ 359.188371][T12030] lo speed is unknown, defaulting to 1000 [ 359.209497][T12030] lo speed is unknown, defaulting to 1000 [ 359.283391][T12037] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1295'. [ 359.310146][T12026] lo speed is unknown, defaulting to 1000 [ 359.359254][T12042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.894186][T12030] lo speed is unknown, defaulting to 1000 [ 360.305513][T12064] pimreg: entered allmulticast mode [ 360.885179][T12059] pimreg: left allmulticast mode [ 360.924604][T12076] __nla_validate_parse: 5 callbacks suppressed [ 360.924627][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1303'. [ 360.997101][T12076] netlink: 'syz.3.1303': attribute type 13 has an invalid length. [ 361.031370][T12076] gretap0: refused to change device tx_queue_len [ 361.038205][T12076] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 361.055114][ T974] lo speed is unknown, defaulting to 1000 [ 361.405285][T12092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1309'. [ 361.437986][T12092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1309'. [ 361.485735][T12095] lo speed is unknown, defaulting to 1000 [ 361.494842][T12095] lo speed is unknown, defaulting to 1000 [ 361.664456][T12095] lo speed is unknown, defaulting to 1000 [ 361.949803][T12105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.032416][T12109] lo speed is unknown, defaulting to 1000 [ 362.040106][T12109] lo speed is unknown, defaulting to 1000 [ 362.154584][T12109] lo speed is unknown, defaulting to 1000 [ 362.396290][T12109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1313'. [ 362.678485][ T30] audit: type=1800 audit(1742307407.977:6): pid=12122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1315" name="memory.events" dev="tmpfs" ino=1410 res=0 errno=0 [ 363.018047][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.069055][ T30] audit: type=1804 audit(1742307408.057:7): pid=12125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1315" name="/newroot/270/memory.events" dev="tmpfs" ino=1410 res=1 errno=0 [ 363.639772][T12138] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1318'. [ 364.020675][ T5849] lo speed is unknown, defaulting to 1000 [ 364.096036][T12138] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.110164][T12138] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 364.127315][ T5913] lo speed is unknown, defaulting to 1000 [ 364.368843][T12148] lo speed is unknown, defaulting to 1000 [ 364.379302][T12148] lo speed is unknown, defaulting to 1000 [ 364.520552][T12148] lo speed is unknown, defaulting to 1000 [ 364.766138][T12149] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.793123][T12148] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1321'. [ 364.799658][T12136] lo speed is unknown, defaulting to 1000 [ 364.818513][T12136] lo speed is unknown, defaulting to 1000 [ 365.013022][T12158] netlink: 'syz.4.1322': attribute type 3 has an invalid length. [ 365.312104][T12136] lo speed is unknown, defaulting to 1000 [ 365.391806][T12163] IPVS: length: 78 != 8 [ 365.713025][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 365.902053][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1328'. [ 365.911191][T12176] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1328'. [ 365.933542][T12176] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 365.944418][T12176] gretap1: entered promiscuous mode [ 365.967095][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 366.023841][T12180] netlink: 'syz.1.1328': attribute type 10 has an invalid length. [ 366.134507][T12180] macvlan0: entered allmulticast mode [ 366.195152][T12179] lo speed is unknown, defaulting to 1000 [ 366.224609][T12179] lo speed is unknown, defaulting to 1000 [ 366.562434][T12179] lo speed is unknown, defaulting to 1000 [ 367.168734][T12198] lo speed is unknown, defaulting to 1000 [ 367.211445][T12201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1334'. [ 367.328645][T12192] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1332'. [ 367.453666][T12192] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 367.506212][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1332'. [ 367.546115][T12198] lo speed is unknown, defaulting to 1000 [ 367.631148][T12192] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1332'. [ 367.854893][T12198] lo speed is unknown, defaulting to 1000 [ 367.866959][T12202] lo speed is unknown, defaulting to 1000 [ 367.877674][T12202] lo speed is unknown, defaulting to 1000 [ 368.421619][T12202] lo speed is unknown, defaulting to 1000 [ 369.196128][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.227537][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.462001][T12192] x_tables: duplicate entry at hook 2 [ 369.563275][T12247] bridge0: left promiscuous mode [ 369.592031][T12247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.601967][T12247] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.614611][T12247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.637179][T12251] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1347'. [ 369.655299][T12251] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 369.708594][T12249] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 369.802301][T12254] netlink: 'syz.0.1347': attribute type 2 has an invalid length. [ 370.979069][T12266] bridge0: port 1(30XD) entered blocking state [ 370.986119][T12266] bridge0: port 1(30XD) entered disabled state [ 370.994882][T12266] 0XD: entered allmulticast mode [ 371.001987][T12266] 0XD: entered promiscuous mode [ 371.098086][T12267] 0XD: left allmulticast mode [ 371.117388][T12267] 0XD: left promiscuous mode [ 371.130557][T12267] bridge0: port 1(30XD) entered disabled state [ 371.405289][T12307] netlink: 'syz.1.1361': attribute type 4 has an invalid length. [ 371.443223][T12307] netlink: 'syz.1.1361': attribute type 4 has an invalid length. [ 371.451202][ T5913] lo speed is unknown, defaulting to 1000 [ 371.461824][ T974] lo speed is unknown, defaulting to 1000 [ 371.513517][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1359'. [ 371.591418][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 371.753355][T12311] tipc: Disabling bearer [ 372.224698][T12333] lo speed is unknown, defaulting to 1000 [ 372.233803][T12333] lo speed is unknown, defaulting to 1000 [ 372.773167][T12358] lo speed is unknown, defaulting to 1000 [ 372.870105][T12358] lo speed is unknown, defaulting to 1000 [ 373.119818][T12333] lo speed is unknown, defaulting to 1000 [ 373.120555][T12369] lo speed is unknown, defaulting to 1000 [ 373.133408][T12369] lo speed is unknown, defaulting to 1000 [ 373.543050][T12381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1367'. [ 374.184307][ T1330] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 374.428664][T12413] netlink: 'syz.1.1374': attribute type 5 has an invalid length. [ 375.207213][T12358] lo speed is unknown, defaulting to 1000 [ 375.304282][T12369] lo speed is unknown, defaulting to 1000 [ 375.633177][T12446] lo speed is unknown, defaulting to 1000 [ 375.640602][T12446] lo speed is unknown, defaulting to 1000 [ 375.780511][T12446] lo speed is unknown, defaulting to 1000 [ 376.203964][T12455] syzkaller1: left promiscuous mode [ 376.227235][T12455] syzkaller1: left allmulticast mode [ 376.461693][T12464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 376.597382][T12464] lo speed is unknown, defaulting to 1000 [ 376.676910][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1379'. [ 376.936535][T12464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1379'. [ 377.351189][T12472] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 377.359174][T12472] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1383'. [ 377.451986][T12472] macvlan3: entered promiscuous mode [ 377.457468][T12472] bridge0: entered promiscuous mode [ 377.465611][T12472] bridge0: port 1(macvlan3) entered blocking state [ 377.473394][T12472] bridge0: port 1(macvlan3) entered disabled state [ 377.480486][T12472] macvlan3: entered allmulticast mode [ 377.485907][T12472] bridge0: entered allmulticast mode [ 377.520932][T12472] macvlan3: left allmulticast mode [ 377.526151][T12472] bridge0: left allmulticast mode [ 377.538500][T12472] bridge0: left promiscuous mode [ 377.591364][T12478] SET target dimension over the limit! [ 377.640210][T12475] netlink: 'syz.4.1382': attribute type 10 has an invalid length. [ 377.671084][T12475] bond0: (slave wlan1): refused to change device type [ 377.805201][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1382'. [ 378.075841][T12491] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1389'. [ 378.093307][T12491] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'. [ 378.332932][T12502] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1391'. [ 378.689758][T12512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1395'. [ 379.454904][T12529] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1400'. [ 379.743131][T12522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'. [ 380.053367][ T5884] lo speed is unknown, defaulting to 1000 [ 380.088800][T12529] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.099876][T12529] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.127248][T12547] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 380.168162][ T974] lo speed is unknown, defaulting to 1000 [ 380.446450][T12564] lo speed is unknown, defaulting to 1000 [ 380.453784][T12564] lo speed is unknown, defaulting to 1000 [ 380.498993][T12561] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 380.579510][T12564] lo speed is unknown, defaulting to 1000 [ 381.858710][T12583] __nla_validate_parse: 5 callbacks suppressed [ 381.858733][T12583] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1418'. [ 381.910477][T12580] netlink: 'syz.0.1414': attribute type 4 has an invalid length. [ 381.960336][ T974] lo speed is unknown, defaulting to 1000 [ 381.981865][T12580] netlink: 'syz.0.1414': attribute type 4 has an invalid length. [ 382.005532][ T974] lo speed is unknown, defaulting to 1000 [ 382.181394][T12591] lo speed is unknown, defaulting to 1000 [ 382.197342][T12591] lo speed is unknown, defaulting to 1000 [ 382.322130][T12591] lo speed is unknown, defaulting to 1000 [ 382.514203][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1421'. [ 382.740716][T12567] tipc: Enabling of bearer rejected, already enabled [ 383.141377][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 383.152490][T12615] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 383.165886][T12615] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 383.457046][T12625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1429'. [ 383.633238][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1432'. [ 384.518490][T12651] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 384.812759][T12659] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 384.969751][T12664] lo speed is unknown, defaulting to 1000 [ 384.976845][T12664] lo speed is unknown, defaulting to 1000 [ 385.080598][T12659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.098859][T12664] lo speed is unknown, defaulting to 1000 [ 385.293508][T12668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1441'. [ 386.075175][T12685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1449'. [ 386.090906][T12689] lo speed is unknown, defaulting to 1000 [ 386.098849][T12689] lo speed is unknown, defaulting to 1000 [ 386.105012][T12663] tipc: Enabling of bearer rejected, already enabled [ 386.868616][T12711] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1458'. [ 386.872375][T12689] lo speed is unknown, defaulting to 1000 [ 387.162150][T12714] tipc: Enabling of bearer rejected, already enabled [ 387.239204][T12717] Bluetooth: MGMT ver 1.23 [ 387.263821][T12709] lo speed is unknown, defaulting to 1000 [ 387.421461][T12728] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1461'. [ 387.501891][T12709] lo speed is unknown, defaulting to 1000 [ 387.914912][T12735] can: request_module (can-proto-0) failed. [ 388.010144][T12709] lo speed is unknown, defaulting to 1000 [ 388.487009][T12722] tipc: Enabling of bearer rejected, already enabled [ 388.865436][T12755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1471'. [ 389.314224][T12770] lo speed is unknown, defaulting to 1000 [ 389.345476][T12770] lo speed is unknown, defaulting to 1000 [ 389.462187][T12777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'. [ 389.532758][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1478'. [ 389.939187][T12770] lo speed is unknown, defaulting to 1000 [ 390.175472][T12784] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 390.747216][T12795] tipc: Enabling of bearer rejected, already enabled [ 390.768275][T12798] lo speed is unknown, defaulting to 1000 [ 390.775570][T12798] lo speed is unknown, defaulting to 1000 [ 390.981906][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 390.996499][T12806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1484'. [ 391.271946][T12798] lo speed is unknown, defaulting to 1000 [ 392.137923][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 392.286359][T12831] lo speed is unknown, defaulting to 1000 [ 392.341261][T12831] lo speed is unknown, defaulting to 1000 [ 392.863813][T12846] lo speed is unknown, defaulting to 1000 [ 392.871156][T12846] lo speed is unknown, defaulting to 1000 [ 392.954239][T12831] lo speed is unknown, defaulting to 1000 [ 393.174904][T12846] lo speed is unknown, defaulting to 1000 [ 393.574112][T12860] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1498'. [ 393.647749][T12843] tipc: Enabling of bearer rejected, already enabled [ 394.736487][T12902] netlink: 'syz.1.1508': attribute type 4 has an invalid length. [ 394.757674][ T974] lo speed is unknown, defaulting to 1000 [ 394.765780][T12899] netlink: 'syz.1.1508': attribute type 4 has an invalid length. [ 394.808428][ T974] lo speed is unknown, defaulting to 1000 [ 395.370548][T12918] lo speed is unknown, defaulting to 1000 [ 395.377507][T12918] lo speed is unknown, defaulting to 1000 [ 395.386539][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1510'. [ 395.520537][T12917] tipc: Enabling of bearer rejected, already enabled [ 395.847567][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.886162][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.326153][T12918] lo speed is unknown, defaulting to 1000 [ 396.394168][T12944] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 396.650003][T12947] lo speed is unknown, defaulting to 1000 [ 396.669999][T12947] lo speed is unknown, defaulting to 1000 [ 396.859891][T12947] lo speed is unknown, defaulting to 1000 [ 397.045972][T12961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1523'. [ 397.056386][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1523'. [ 397.059037][T12901] x_tables: duplicate entry at hook 2 [ 397.074985][T12961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 397.143530][T12961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 397.155203][T12961] netlink: 'syz.0.1523': attribute type 4 has an invalid length. [ 397.392469][T12969] lo speed is unknown, defaulting to 1000 [ 397.433995][T12969] lo speed is unknown, defaulting to 1000 [ 397.519125][T12973] Cannot find del_set index 2416 as target [ 397.764064][T12972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1525'. [ 397.786657][T12977] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1528'. [ 397.818364][T12969] lo speed is unknown, defaulting to 1000 [ 397.914065][T12972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.926669][T12972] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.951017][T12972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.028893][T12986] bpq0: left promiscuous mode [ 398.034646][T12986] bpq0: left allmulticast mode [ 398.115051][T12975] lo speed is unknown, defaulting to 1000 [ 398.207829][T12990] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1530'. [ 398.217375][T12975] lo speed is unknown, defaulting to 1000 [ 398.382535][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 399.077422][T13015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1536'. [ 399.114126][T13014] lo speed is unknown, defaulting to 1000 [ 399.159050][T13014] lo speed is unknown, defaulting to 1000 [ 399.278828][T13025] lo speed is unknown, defaulting to 1000 [ 399.286126][T13025] lo speed is unknown, defaulting to 1000 [ 399.302995][T12975] lo speed is unknown, defaulting to 1000 [ 399.801553][T13041] lo: entered promiscuous mode [ 399.807639][T13041] tunl0: entered promiscuous mode [ 399.814392][T13041] gre0: entered promiscuous mode [ 399.824555][T13041] gretap0: entered promiscuous mode [ 399.830484][T13041] erspan0: entered promiscuous mode [ 399.836875][T13041] ip_vti0: entered promiscuous mode [ 399.843194][T13041] ip6_vti0: entered promiscuous mode [ 399.849322][T13041] sit0: entered promiscuous mode [ 399.855269][T13041] ip6tnl0: entered promiscuous mode [ 399.864445][T13041] ip6gre0: entered promiscuous mode [ 399.870545][T13041] ip6gretap0: entered promiscuous mode [ 399.877345][T13041] vcan0: entered promiscuous mode [ 399.883827][T13041] team0: entered promiscuous mode [ 399.889868][T13041] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 399.901958][T13041] dummy0: entered promiscuous mode [ 399.907968][T13041] nlmon0: entered promiscuous mode [ 399.915283][T13041] caif0: entered promiscuous mode [ 399.920838][T13041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.136050][T13046] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 400.336038][T13027] lo speed is unknown, defaulting to 1000 [ 400.347350][T13014] lo speed is unknown, defaulting to 1000 [ 400.410129][T13025] lo speed is unknown, defaulting to 1000 [ 400.410145][T13027] lo speed is unknown, defaulting to 1000 [ 400.619645][T13027] lo speed is unknown, defaulting to 1000 [ 400.709467][T13059] netlink: 'syz.3.1542': attribute type 4 has an invalid length. [ 400.760627][T13055] netlink: 'syz.3.1542': attribute type 4 has an invalid length. [ 400.852874][ T5914] lo speed is unknown, defaulting to 1000 [ 402.091279][T13095] netlink: 'syz.3.1556': attribute type 4 has an invalid length. [ 402.104164][ T5914] lo speed is unknown, defaulting to 1000 [ 402.119636][T13095] netlink: 'syz.3.1556': attribute type 4 has an invalid length. [ 402.137246][ T5840] lo speed is unknown, defaulting to 1000 [ 402.510857][T13106] lo speed is unknown, defaulting to 1000 [ 402.519666][T13106] lo speed is unknown, defaulting to 1000 [ 402.595146][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1559'. [ 402.636927][T13108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 402.888551][T13106] lo speed is unknown, defaulting to 1000 [ 403.148514][T13123] lo speed is unknown, defaulting to 1000 [ 403.155962][T13123] lo speed is unknown, defaulting to 1000 [ 403.324210][T13123] lo speed is unknown, defaulting to 1000 [ 403.479269][T13123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1565'. [ 403.494302][T13123] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 404.224431][T13148] netlink: 'syz.0.1571': attribute type 4 has an invalid length. [ 404.263504][T13150] lo speed is unknown, defaulting to 1000 [ 404.273029][T13150] lo speed is unknown, defaulting to 1000 [ 404.299797][T13145] netlink: 'syz.0.1571': attribute type 4 has an invalid length. [ 404.373324][ T974] lo speed is unknown, defaulting to 1000 [ 404.382255][ T5914] lo speed is unknown, defaulting to 1000 [ 404.700344][T13160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1575'. [ 404.712702][T13150] lo speed is unknown, defaulting to 1000 [ 405.151802][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.165450][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.553399][T13182] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.1583'. [ 405.595858][T13182] openvswitch: netlink: Message has 8 unknown bytes. [ 405.682874][T13185] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 405.742782][T13185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.753376][T13188] tipc: New replicast peer: 0.0.0.0 [ 405.787433][T13188] tipc: Enabled bearer , priority 10 [ 405.891011][T13188] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 406.012745][T13198] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.022373][T13198] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.030853][T13198] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.039538][T13198] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.068264][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1588'. [ 406.265637][T13206] xt_hashlimit: size too large, truncated to 1048576 [ 406.315503][T13207] xt_hashlimit: size too large, truncated to 1048576 [ 406.367099][T13211] : renamed from bond0 [ 406.653375][T13223] IPVS: Error connecting to the multicast addr [ 407.089301][T13233] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 407.106184][T13233] team0 (unregistering): Port device wlan1 removed [ 407.318043][T13241] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1598'. [ 407.478895][T13248] ipt_ECN: cannot use operation on non-tcp rule [ 407.773992][T13258] syzkaller0: entered allmulticast mode [ 407.914299][T13258] syzkaller0 (unregistering): left allmulticast mode [ 408.346187][T13276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 408.352507][T13271] sctp: [Deprecated]: syz.3.1608 (pid 13271) Use of int in max_burst socket option deprecated. [ 408.352507][T13271] Use struct sctp_assoc_value instead [ 408.460745][T13281] lo speed is unknown, defaulting to 1000 [ 408.467381][T13281] lo speed is unknown, defaulting to 1000 [ 408.772055][T13281] lo speed is unknown, defaulting to 1000 [ 408.889140][T13285] netlink: 'syz.2.1612': attribute type 10 has an invalid length. [ 408.900211][T13285] netlink: 'syz.2.1612': attribute type 10 has an invalid length. [ 408.908385][T13285] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1612'. [ 409.058210][T13270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.082259][T13291] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1612'. [ 409.122609][T13290] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1613'. [ 409.943194][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.960412][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.088778][T13314] lo speed is unknown, defaulting to 1000 [ 410.097180][T13314] lo speed is unknown, defaulting to 1000 [ 410.147698][T13318] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1621'. [ 410.183351][T13318] batman_adv: batadv0: Interface activated: dummy0 [ 410.190824][T13318] batadv0: mtu less than device minimum [ 410.199128][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.212143][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.225029][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.237870][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.250614][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.263308][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.276189][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.289090][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.302004][T13318] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 410.364218][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1622'. [ 410.844218][T13314] lo speed is unknown, defaulting to 1000 [ 411.195826][T13339] lo speed is unknown, defaulting to 1000 [ 411.213709][T13339] lo speed is unknown, defaulting to 1000 [ 411.341570][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1627'. [ 411.528270][T13346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1627'. [ 412.009640][T13339] lo speed is unknown, defaulting to 1000 [ 412.226520][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 412.247157][T13367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 412.519291][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1635'. [ 412.545653][T13378] netlink: 'syz.0.1635': attribute type 2 has an invalid length. [ 412.900483][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1638'. [ 413.396560][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1642'. [ 413.421352][T13388] IPVS: length: 78 != 8 [ 413.503389][T13396] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1642'. [ 413.754870][T13399] bridge0: port 1(30XD) entered blocking state [ 413.762414][T13399] bridge0: port 1(30XD) entered disabled state [ 413.781900][T13399] 0XD: entered allmulticast mode [ 413.797428][T13399] 0XD: entered promiscuous mode [ 413.940237][T13402] 0XD: left allmulticast mode [ 413.948210][T13402] 0XD: left promiscuous mode [ 413.953824][T13402] bridge0: port 1(30XD) entered disabled state [ 414.397985][ T5148] Bluetooth: hci4: command 0x0405 tx timeout [ 415.000076][T13432] lo speed is unknown, defaulting to 1000 [ 415.042550][T13432] lo speed is unknown, defaulting to 1000 [ 415.584811][T13439] lo speed is unknown, defaulting to 1000 [ 415.695793][T13439] lo speed is unknown, defaulting to 1000 [ 415.798702][T13442] lo speed is unknown, defaulting to 1000 [ 415.879348][T13442] lo speed is unknown, defaulting to 1000 [ 416.155207][T13448] __nla_validate_parse: 1 callbacks suppressed [ 416.155231][T13448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1655'. [ 416.728269][T13453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 416.993516][T13432] lo speed is unknown, defaulting to 1000 [ 417.041591][T13453] lo: left promiscuous mode [ 417.046712][T13453] tunl0: left promiscuous mode [ 417.068428][T13453] gre0: left promiscuous mode [ 417.073802][T13453] gretap0: left promiscuous mode [ 417.082103][T13431] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1652'. [ 417.088285][T13453] erspan0: left promiscuous mode [ 417.106797][T13453] ip_vti0: left promiscuous mode [ 417.127195][T13453] ip6_vti0: left promiscuous mode [ 417.132886][T13453] sit0: left promiscuous mode [ 417.138617][T13453] ip6tnl0: left promiscuous mode [ 417.158470][T13453] ip6gre0: left promiscuous mode [ 417.163917][T13453] ip6gretap0: left promiscuous mode [ 417.173208][T13453] vcan0: left promiscuous mode [ 417.178575][T13453] dummy0: left promiscuous mode [ 417.184279][T13453] nlmon0: left promiscuous mode [ 417.214321][T13453] caif0: left promiscuous mode [ 417.220493][T13453] net_ratelimit: 11 callbacks suppressed [ 417.220512][T13453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.248299][T13446] tipc: Bearer : already 2 bearers with priority 10 [ 417.260741][T13446] tipc: Bearer : trying with adjusted priority [ 417.270813][T13446] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 417.287911][T13452] lo speed is unknown, defaulting to 1000 [ 417.316719][T13444] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 417.348528][T13444] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1654'. [ 417.398306][T13431] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 417.468172][T13452] lo speed is unknown, defaulting to 1000 [ 417.473251][T13435] lo speed is unknown, defaulting to 1000 [ 417.621642][T13458] lo speed is unknown, defaulting to 1000 [ 417.627970][T13435] lo speed is unknown, defaulting to 1000 [ 417.644294][T13439] lo speed is unknown, defaulting to 1000 [ 417.644956][T13458] lo speed is unknown, defaulting to 1000 [ 417.779368][T13468] sctp: [Deprecated]: syz.4.1658 (pid 13468) Use of int in max_burst socket option. [ 417.779368][T13468] Use struct sctp_assoc_value instead [ 417.800693][T13468] netlink: 'syz.4.1658': attribute type 10 has an invalid length. [ 418.270485][T13452] lo speed is unknown, defaulting to 1000 [ 418.283302][T13442] lo speed is unknown, defaulting to 1000 [ 418.305112][T13435] lo speed is unknown, defaulting to 1000 [ 418.552344][T13458] lo speed is unknown, defaulting to 1000 [ 419.633291][T13482] tipc: Enabled bearer , priority 0 [ 419.784976][T13484] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1662'. [ 419.829172][T13482] syzkaller0: entered promiscuous mode [ 419.844911][T13482] syzkaller0: entered allmulticast mode [ 419.859914][T13482] tipc: Resetting bearer [ 420.024666][T13482] sch_fq: defrate 511 ignored. [ 420.340189][T13497] xt_CT: No such helper "snmp" [ 420.958456][T13479] tipc: Resetting bearer [ 424.444181][T13479] tipc: Disabling bearer [ 424.489402][T13515] tipc: Bearer : already 2 bearers with priority 10 [ 424.497305][T13515] tipc: Bearer : trying with adjusted priority [ 424.518875][T13515] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 424.659869][T13528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1671'. [ 424.689819][T13529] netlink: 'syz.3.1672': attribute type 12 has an invalid length. [ 424.769416][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1671'. [ 424.846522][T13531] lo speed is unknown, defaulting to 1000 [ 424.857200][T13531] lo speed is unknown, defaulting to 1000 [ 424.863729][T13531] lo speed is unknown, defaulting to 1000 [ 424.941010][T13534] netlink: 'syz.0.1674': attribute type 2 has an invalid length. [ 425.053384][T13534] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1674'. [ 425.124305][T13531] infiniband syz0: set active [ 425.129535][ T5840] lo speed is unknown, defaulting to 1000 [ 425.136114][T13531] infiniband syz0: added lo [ 425.193349][T13531] RDS/IB: syz0: added [ 425.210966][T13531] smc: adding ib device syz0 with port count 1 [ 425.258873][T13531] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 425.279892][T13531] lo speed is unknown, defaulting to 1000 [ 425.300894][ T5914] lo speed is unknown, defaulting to 1000 [ 425.700447][T13550] lo speed is unknown, defaulting to 1000 [ 425.745096][T13550] lo speed is unknown, defaulting to 1000 [ 425.787214][T13531] lo speed is unknown, defaulting to 1000 [ 426.170446][T13531] lo speed is unknown, defaulting to 1000 [ 426.284068][T13550] lo speed is unknown, defaulting to 1000 [ 426.561515][T13553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1677'. [ 426.614139][T13531] lo speed is unknown, defaulting to 1000 [ 426.696382][T13558] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1677'. [ 426.746343][T13565] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1681'. [ 427.309488][T13550] lo speed is unknown, defaulting to 1000 [ 427.753314][T13531] lo speed is unknown, defaulting to 1000 [ 427.844337][ T30] audit: type=1800 audit(1742307473.177:8): pid=13576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1684" name="memory.events" dev="tmpfs" ino=1708 res=0 errno=0 [ 427.962996][ T30] audit: type=1804 audit(1742307473.217:9): pid=13576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1684" name="memory.events" dev="tmpfs" ino=1708 res=1 errno=0 [ 428.971096][T13598] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 429.137353][T13600] lo speed is unknown, defaulting to 1000 [ 429.145811][T13600] lo speed is unknown, defaulting to 1000 [ 429.234924][T13603] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1693'. [ 429.305035][T13600] lo speed is unknown, defaulting to 1000 [ 429.312572][T13600] lo speed is unknown, defaulting to 1000 [ 429.444450][T13607] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 429.463590][T13607] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 429.560143][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1694'. [ 429.596448][T13612] lo speed is unknown, defaulting to 1000 [ 429.607036][T13612] lo speed is unknown, defaulting to 1000 [ 429.719248][T13612] lo speed is unknown, defaulting to 1000 [ 429.728363][T13612] lo speed is unknown, defaulting to 1000 [ 430.494564][T13633] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1701'. [ 430.938037][ T5843] Bluetooth: hci4: command 0x0405 tx timeout [ 431.204123][T13650] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1705'. [ 431.432941][T13653] netlink: 'syz.1.1707': attribute type 21 has an invalid length. [ 431.440921][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1707'. [ 431.658583][T13656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 431.743681][T13656] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 432.339882][T13675] netlink: 'syz.3.1712': attribute type 4 has an invalid length. [ 432.423453][ T5914] lo speed is unknown, defaulting to 1000 [ 432.448255][T13675] netlink: 'syz.3.1712': attribute type 4 has an invalid length. [ 432.585044][ T5914] lo speed is unknown, defaulting to 1000 [ 433.733973][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 433.756861][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1722'. [ 433.758556][T13702] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1719'. [ 433.795937][T13700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1721'. [ 434.004060][T13714] lo speed is unknown, defaulting to 1000 [ 434.015769][T13714] lo speed is unknown, defaulting to 1000 [ 434.156408][T13714] lo speed is unknown, defaulting to 1000 [ 434.167243][T13714] lo speed is unknown, defaulting to 1000 [ 434.234434][T13718] lo speed is unknown, defaulting to 1000 [ 434.272605][T13718] lo speed is unknown, defaulting to 1000 [ 434.444098][T13724] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 434.598069][T13718] lo speed is unknown, defaulting to 1000 [ 434.605192][T13718] lo speed is unknown, defaulting to 1000 [ 434.790143][T13731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1726'. [ 434.882451][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'. [ 434.924067][ T5840] lo speed is unknown, defaulting to 1000 [ 435.842546][T13746] macvlan0: left allmulticast mode [ 435.853983][T13746] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.864064][T13746] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.875523][T13746] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.884449][T13746] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.923200][T13746] macvlan2: left promiscuous mode [ 435.928670][T13746] macvlan2: left allmulticast mode [ 435.934955][T13746] gretap1: left promiscuous mode [ 436.058253][ T5840] lo speed is unknown, defaulting to 1000 [ 437.624463][T13777] tipc: Bearer : already 2 bearers with priority 10 [ 437.645264][T13777] tipc: Bearer : trying with adjusted priority [ 437.688152][T13777] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 437.855937][T13792] lo speed is unknown, defaulting to 1000 [ 437.865022][T13792] lo speed is unknown, defaulting to 1000 [ 438.056644][T13792] lo speed is unknown, defaulting to 1000 [ 438.079099][T13792] lo speed is unknown, defaulting to 1000 [ 438.122103][T13796] __nla_validate_parse: 68 callbacks suppressed [ 438.122127][T13796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1744'. [ 439.448788][T13814] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1749'. [ 439.564591][T13815] lo speed is unknown, defaulting to 1000 [ 439.578476][T13815] lo speed is unknown, defaulting to 1000 [ 439.849623][T13824] netlink: 'syz.2.1751': attribute type 10 has an invalid length. [ 439.923469][T13823] netlink: 'syz.3.1750': attribute type 12 has an invalid length. [ 440.171109][ T5849] IPVS: starting estimator thread 0... [ 440.224015][T13815] lo speed is unknown, defaulting to 1000 [ 440.240744][T13815] lo speed is unknown, defaulting to 1000 [ 440.278542][T13831] IPVS: using max 18 ests per chain, 43200 per kthread [ 440.568920][T13834] lo speed is unknown, defaulting to 1000 [ 440.656124][T13834] lo speed is unknown, defaulting to 1000 [ 441.081685][T13842] lo speed is unknown, defaulting to 1000 [ 441.090810][T13842] lo speed is unknown, defaulting to 1000 [ 441.451976][T13850] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1756'. [ 442.361955][T13842] lo speed is unknown, defaulting to 1000 [ 442.370850][T13842] lo speed is unknown, defaulting to 1000 [ 442.426341][T13834] lo speed is unknown, defaulting to 1000 [ 442.467103][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.486446][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.735968][T13834] lo speed is unknown, defaulting to 1000 [ 442.832821][T13862] lo speed is unknown, defaulting to 1000 [ 442.890752][T13867] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 442.958178][T13862] lo speed is unknown, defaulting to 1000 [ 442.975994][T13869] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1761'. [ 443.156973][T13867] bond0: entered promiscuous mode [ 443.164877][T13871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1761'. [ 443.173086][T13867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.194024][T13859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1759'. [ 443.210420][T13859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.245004][T13869] batadv1: entered promiscuous mode [ 443.255045][T13869] batadv1: entered allmulticast mode [ 443.265919][T13869] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 443.276020][T13869] bond0: (slave batadv1): making interface the new active one [ 443.287276][T13869] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 443.592424][T13859] lo speed is unknown, defaulting to 1000 [ 443.613231][T13859] lo speed is unknown, defaulting to 1000 [ 443.645619][T13862] lo speed is unknown, defaulting to 1000 [ 443.722829][T13862] lo speed is unknown, defaulting to 1000 [ 443.865911][T13875] lo speed is unknown, defaulting to 1000 [ 443.886122][T13875] lo speed is unknown, defaulting to 1000 [ 444.231284][T13859] lo speed is unknown, defaulting to 1000 [ 444.372330][T13859] lo speed is unknown, defaulting to 1000 [ 444.663063][T13875] lo speed is unknown, defaulting to 1000 [ 444.886571][T13875] lo speed is unknown, defaulting to 1000 [ 445.649208][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1770'. [ 445.763590][T13900] lo speed is unknown, defaulting to 1000 [ 445.818415][T13901] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 445.868484][T13902] lo speed is unknown, defaulting to 1000 [ 445.875177][T13900] lo speed is unknown, defaulting to 1000 [ 445.915791][ T5914] lo speed is unknown, defaulting to 1000 [ 446.015936][T13902] lo speed is unknown, defaulting to 1000 [ 446.197683][T13900] lo speed is unknown, defaulting to 1000 [ 446.201954][T13909] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1772'. [ 446.213162][T13904] lo speed is unknown, defaulting to 1000 [ 446.309355][T13909] block nbd0: NBD_DISCONNECT [ 446.375742][T13909] block nbd0: Send disconnect failed -32 [ 446.389065][T13909] block nbd0: shutting down sockets [ 446.394818][T13900] lo speed is unknown, defaulting to 1000 [ 446.464372][T13904] lo speed is unknown, defaulting to 1000 [ 446.508407][T13911] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1772'. [ 446.538887][T13912] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1771'. [ 446.796304][T13902] lo speed is unknown, defaulting to 1000 [ 447.087344][T13902] lo speed is unknown, defaulting to 1000 [ 447.795512][T13904] lo speed is unknown, defaulting to 1000 [ 447.828669][T13904] lo speed is unknown, defaulting to 1000 [ 447.871018][T13923] lo speed is unknown, defaulting to 1000 [ 447.915831][T13923] lo speed is unknown, defaulting to 1000 [ 448.216430][T13923] lo speed is unknown, defaulting to 1000 [ 448.476994][T13923] lo speed is unknown, defaulting to 1000 [ 449.187081][T13947] sctp: [Deprecated]: syz.0.1781 (pid 13947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 449.187081][T13947] Use struct sctp_sack_info instead [ 449.313548][T13944] lo speed is unknown, defaulting to 1000 [ 449.355392][T13944] lo speed is unknown, defaulting to 1000 [ 449.448063][T13945] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1782'. [ 449.606305][T13944] lo speed is unknown, defaulting to 1000 [ 449.632525][T13944] lo speed is unknown, defaulting to 1000 [ 449.746159][T13954] batadv_slave_1: entered promiscuous mode [ 449.792073][T13954] batadv_slave_1: entered allmulticast mode [ 449.853852][T13954] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 451.101242][T13970] lo speed is unknown, defaulting to 1000 [ 451.153017][T13970] lo speed is unknown, defaulting to 1000 [ 451.784312][T13970] lo speed is unknown, defaulting to 1000 [ 451.832954][T13970] lo speed is unknown, defaulting to 1000 [ 452.053124][T13968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1788'. [ 452.220381][T13968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.299590][T13973] lo speed is unknown, defaulting to 1000 [ 452.344217][T13973] lo speed is unknown, defaulting to 1000 [ 452.859499][T14009] lo speed is unknown, defaulting to 1000 [ 452.885538][T14009] lo speed is unknown, defaulting to 1000 [ 452.943178][T13973] lo speed is unknown, defaulting to 1000 [ 452.950897][T13973] lo speed is unknown, defaulting to 1000 [ 453.216467][T14009] lo speed is unknown, defaulting to 1000 [ 453.243379][T14020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1799'. [ 453.806025][T14009] lo speed is unknown, defaulting to 1000 [ 455.165126][T14060] SET target dimension over the limit! [ 455.817279][T14064] lo speed is unknown, defaulting to 1000 [ 455.825489][T14064] lo speed is unknown, defaulting to 1000 [ 456.001213][T14064] lo speed is unknown, defaulting to 1000 [ 456.008617][T14064] lo speed is unknown, defaulting to 1000 [ 457.882985][T14105] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.1819'. [ 457.901375][T14105] openvswitch: netlink: Message has 8 unknown bytes. [ 457.979680][T14109] tipc: New replicast peer: 0.0.0.0 [ 457.993645][T14109] tipc: Enabled bearer , priority 10 [ 458.007697][T14109] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 458.080639][T14108] lo speed is unknown, defaulting to 1000 [ 458.099103][T14108] lo speed is unknown, defaulting to 1000 [ 458.290356][T14116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1821'. [ 458.676593][T14108] lo speed is unknown, defaulting to 1000 [ 458.719121][T14108] lo speed is unknown, defaulting to 1000 [ 458.964848][T14131] netlink: 'syz.2.1829': attribute type 4 has an invalid length. [ 459.062789][ T5884] lo speed is unknown, defaulting to 1000 [ 459.071194][T14131] netlink: 'syz.2.1829': attribute type 4 has an invalid length. [ 459.093636][ T5884] lo speed is unknown, defaulting to 1000 [ 459.280077][ T5884] lo speed is unknown, defaulting to 1000 [ 461.796719][T14198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1853'. [ 462.224362][T14213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1858'. [ 463.096624][T14248] lo speed is unknown, defaulting to 1000 [ 463.105513][T14248] lo speed is unknown, defaulting to 1000 [ 463.257141][T14248] lo speed is unknown, defaulting to 1000 [ 463.268935][T14248] lo speed is unknown, defaulting to 1000 [ 463.472662][T14249] lo speed is unknown, defaulting to 1000 [ 463.479957][T14249] lo speed is unknown, defaulting to 1000 [ 463.629779][T14249] lo speed is unknown, defaulting to 1000 [ 463.651459][T14248] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 463.660134][T14248] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1869'. [ 463.681793][T14249] lo speed is unknown, defaulting to 1000 [ 463.682438][T14253] lo speed is unknown, defaulting to 1000 [ 463.718367][T14253] lo speed is unknown, defaulting to 1000 [ 463.918062][T14261] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1872'. [ 463.961289][T14261] caif0: entered allmulticast mode [ 464.110991][T14266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1874'. [ 464.437278][T14269] lo speed is unknown, defaulting to 1000 [ 464.605142][T14253] lo speed is unknown, defaulting to 1000 [ 464.653254][T14253] lo speed is unknown, defaulting to 1000 [ 464.660416][T14269] lo speed is unknown, defaulting to 1000 [ 464.990689][T14286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1876'. [ 465.086847][T14254] lo speed is unknown, defaulting to 1000 [ 465.097306][T14254] lo speed is unknown, defaulting to 1000 [ 465.209784][T14269] lo speed is unknown, defaulting to 1000 [ 465.243431][T14269] lo speed is unknown, defaulting to 1000 [ 465.300947][T14288] lo: entered promiscuous mode [ 465.306535][T14288] tunl0: entered promiscuous mode [ 465.313303][T14288] gre0: entered promiscuous mode [ 465.319361][T14288] gretap0: entered promiscuous mode [ 465.334136][T14288] erspan0: entered promiscuous mode [ 465.342858][T14288] ip_vti0: entered promiscuous mode [ 465.348984][T14288] ip6_vti0: entered promiscuous mode [ 465.355243][T14288] sit0: entered promiscuous mode [ 465.362968][T14288] ip6tnl0: entered promiscuous mode [ 465.371457][T14288] ip6gre0: entered promiscuous mode [ 465.432843][T14288] ip6gretap0: entered promiscuous mode [ 465.472288][T14288] vcan0: entered promiscuous mode [ 465.511229][T14288] bond0: entered promiscuous mode [ 465.527555][T14288] team0: entered promiscuous mode [ 465.618831][T14288] dummy0: entered promiscuous mode [ 465.634950][T14288] nlmon0: entered promiscuous mode [ 465.678156][T14288] caif0: entered promiscuous mode [ 465.701607][T14288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.793131][T14254] lo speed is unknown, defaulting to 1000 [ 465.912472][T14254] lo speed is unknown, defaulting to 1000 [ 466.778923][T14302] IPVS: length: 78 != 8 [ 466.832218][T14327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1892'. [ 467.316247][T14340] netlink: 'syz.2.1899': attribute type 4 has an invalid length. [ 467.353246][ T5914] lo speed is unknown, defaulting to 1000 [ 467.363397][T14340] netlink: 'syz.2.1899': attribute type 4 has an invalid length. [ 467.373751][ T5914] lo speed is unknown, defaulting to 1000 [ 467.386123][ T5914] lo speed is unknown, defaulting to 1000 [ 467.871543][T14352] batman_adv: batadv0: Interface deactivated: dummy0 [ 467.884048][T14352] batman_adv: batadv0: Removing interface: dummy0 [ 468.086677][T14358] netlink: 'syz.1.1906': attribute type 4 has an invalid length. [ 468.109372][T14358] netlink: 'syz.1.1906': attribute type 4 has an invalid length. [ 468.117359][ T5849] lo speed is unknown, defaulting to 1000 [ 468.194247][ T5849] lo speed is unknown, defaulting to 1000 [ 468.221969][T14362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1908'. [ 468.228732][T14361] IPVS: Error joining to the multicast group [ 468.481096][T14367] netlink: 'syz.2.1910': attribute type 21 has an invalid length. [ 468.490094][T14367] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1910'. [ 468.509647][T14367] netlink: 'syz.2.1910': attribute type 4 has an invalid length. [ 468.517570][T14367] netlink: 'syz.2.1910': attribute type 3 has an invalid length. [ 468.546933][T14367] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1910'. [ 468.939789][T14385] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 468.967391][ T5849] lo speed is unknown, defaulting to 1000 [ 468.976498][T14385] netlink: 'syz.3.1918': attribute type 4 has an invalid length. [ 469.010285][ T5849] lo speed is unknown, defaulting to 1000 [ 469.248964][T14390] lo speed is unknown, defaulting to 1000 [ 469.256131][T14390] lo speed is unknown, defaulting to 1000 [ 469.366026][T14390] lo speed is unknown, defaulting to 1000 [ 469.373152][T14390] lo speed is unknown, defaulting to 1000 [ 469.621244][T14390] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1921'. [ 469.667469][T14396] SET target dimension over the limit! [ 469.886232][T14398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 470.175708][T14405] lo speed is unknown, defaulting to 1000 [ 470.282767][T14405] lo speed is unknown, defaulting to 1000 [ 470.523068][T14405] lo speed is unknown, defaulting to 1000 [ 470.537307][T14405] lo speed is unknown, defaulting to 1000 [ 470.895416][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.916456][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.121822][T14405] lo speed is unknown, defaulting to 1000 [ 471.149439][T14405] lo speed is unknown, defaulting to 1000 [ 471.304260][T14433] lo: entered promiscuous mode [ 471.347709][T14433] tunl0: entered promiscuous mode [ 471.419923][T14433] gre0: entered promiscuous mode [ 471.450477][T14437] netlink: 'syz.4.1935': attribute type 2 has an invalid length. [ 471.504394][T14437] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1935'. [ 471.534003][T14433] gretap0: entered promiscuous mode [ 471.553234][T14433] erspan0: entered promiscuous mode [ 471.574412][T14433] ip_vti0: entered promiscuous mode [ 471.602788][T14433] ip6_vti0: entered promiscuous mode [ 471.628461][T14433] sit0: entered promiscuous mode [ 471.633968][T14433] ip6tnl0: entered promiscuous mode [ 471.682498][T14433] ip6gre0: entered promiscuous mode [ 471.693280][T14433] ip6gretap0: entered promiscuous mode [ 471.700990][T14433] vcan0: entered promiscuous mode [ 471.706731][T14433] dummy0: entered promiscuous mode [ 471.712648][T14433] nlmon0: entered promiscuous mode [ 471.718863][T14433] caif0: entered promiscuous mode [ 471.724186][T14433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 471.742687][T14405] lo speed is unknown, defaulting to 1000 [ 471.761375][T14405] lo speed is unknown, defaulting to 1000 [ 472.136217][T14457] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 472.830793][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1948'. [ 473.068855][T14474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1950'. [ 473.093776][T14474] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1950'. [ 473.110227][T14474] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1950'. [ 473.121786][T14474] xt_bpf: check failed: parse error [ 473.193619][T14484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1952'. [ 473.270567][T14484] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1952'. [ 473.363114][T14480] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1952'. [ 473.427047][T14484] xt_bpf: check failed: parse error [ 474.090210][T14492] lo speed is unknown, defaulting to 1000 [ 474.097170][T14492] lo speed is unknown, defaulting to 1000 [ 474.216650][T14492] lo speed is unknown, defaulting to 1000 [ 474.223788][T14492] lo speed is unknown, defaulting to 1000 [ 474.347040][T14491] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.426421][T14495] lo speed is unknown, defaulting to 1000 [ 474.441320][T14495] lo speed is unknown, defaulting to 1000 [ 474.586245][T14495] lo speed is unknown, defaulting to 1000 [ 474.599099][T14495] lo speed is unknown, defaulting to 1000 [ 474.959578][T14508] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 475.252854][T14522] __nla_validate_parse: 1 callbacks suppressed [ 475.252892][T14522] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1964'. [ 475.324699][T14522] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1964'. [ 475.392480][T14525] lo speed is unknown, defaulting to 1000 [ 475.399523][T14525] lo speed is unknown, defaulting to 1000 [ 475.402162][T14517] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1964'. [ 475.426877][T14517] xt_bpf: check failed: parse error [ 475.516654][T14525] lo speed is unknown, defaulting to 1000 [ 475.524303][T14525] lo speed is unknown, defaulting to 1000 [ 475.753347][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1965'. [ 476.066950][T14538] netlink: 'syz.0.1967': attribute type 21 has an invalid length. [ 476.120273][T14538] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1967'. [ 477.540404][T14579] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1979'. [ 477.696829][T14579] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1979'. [ 477.779423][T14572] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1979'. [ 477.801308][T14572] xt_bpf: check failed: parse error [ 477.956989][T14575] lo speed is unknown, defaulting to 1000 [ 477.979745][T14588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1980'. [ 478.006566][T14588] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1980'. [ 478.046836][T14586] xt_bpf: check failed: parse error [ 478.659428][T14575] lo speed is unknown, defaulting to 1000 [ 479.032823][T14575] lo speed is unknown, defaulting to 1000 [ 479.057029][T14575] lo speed is unknown, defaulting to 1000 [ 479.140929][T14610] IPv6: Can't replace route, no match found [ 480.722233][T14647] __nla_validate_parse: 1 callbacks suppressed [ 480.722255][T14647] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2005'. [ 480.797208][ T1089] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 481.762199][T14677] netlink: 'syz.1.2014': attribute type 4 has an invalid length. [ 481.782924][ T5914] lo speed is unknown, defaulting to 1000 [ 481.789694][T14678] netlink: 'syz.3.2013': attribute type 8 has an invalid length. [ 481.811926][T14677] netlink: 'syz.1.2014': attribute type 4 has an invalid length. [ 481.823733][ T5914] lo speed is unknown, defaulting to 1000 [ 482.612478][T14691] IPVS: length: 78 != 8 [ 483.125089][T14713] netlink: 'syz.4.2026': attribute type 4 has an invalid length. [ 483.136334][T14713] netlink: 'syz.4.2026': attribute type 4 has an invalid length. [ 483.177082][T14715] lo speed is unknown, defaulting to 1000 [ 483.207529][T14715] lo speed is unknown, defaulting to 1000 [ 483.454748][T14723] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2025'. [ 484.240156][T14715] lo speed is unknown, defaulting to 1000 [ 484.247346][T14715] lo speed is unknown, defaulting to 1000 [ 484.297711][T14750] netlink: 'syz.1.2037': attribute type 4 has an invalid length. [ 484.339523][ T5914] lo speed is unknown, defaulting to 1000 [ 484.356208][T14750] netlink: 'syz.1.2037': attribute type 4 has an invalid length. [ 484.366864][ T5914] lo speed is unknown, defaulting to 1000 [ 485.121289][T14776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2044'. [ 485.143471][T14776] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2044'. [ 485.180702][T14772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2044'. [ 485.196126][T14772] xt_bpf: check failed: parse error [ 485.677670][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.691357][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.527620][T14824] lo speed is unknown, defaulting to 1000 [ 486.588024][T14824] lo speed is unknown, defaulting to 1000 [ 486.855349][T14842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2066'. [ 486.966137][T14824] lo speed is unknown, defaulting to 1000 [ 487.017439][T14824] lo speed is unknown, defaulting to 1000 [ 487.818322][T14839] IPVS: length: 78 != 8 [ 488.530846][T14868] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2081'. [ 488.625944][T14868] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 489.581533][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.591195][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.876592][T14931] ------------[ cut here ]------------ [ 489.883014][T14931] WARNING: CPU: 0 PID: 14931 at net/ipv4/udp_offload.c:118 udp_tunnel_update_gro_rcv+0x31d/0x670 [ 489.893906][T14931] Modules linked in: [ 489.898251][T14931] CPU: 0 UID: 0 PID: 14931 Comm: syz.4.2104 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 489.909611][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 489.919992][T14931] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 489.926476][T14931] Code: 23 48 89 eb e8 14 47 4f f7 c7 05 ca a9 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 fb 46 4f f7 eb 40 e8 f4 46 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 e6 46 4f f7 eb 2b e8 df 46 4f f7 eb 24 [ 489.947412][T14931] RSP: 0018:ffffc9000488fc40 EFLAGS: 00010293 [ 489.953602][T14931] RAX: ffffffff8a72a88c RBX: 0000000000000000 RCX: ffff888039835a00 [ 489.961822][T14931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 489.969993][T14931] RBP: 1ffff11006072a7f R08: ffffffff8a72a5d9 R09: 1ffffffff207a2ee [ 489.978201][T14931] R10: dffffc0000000000 R11: fffffbfff207a2ef R12: dffffc0000000000 [ 489.986247][T14931] R13: ffff888030394d80 R14: ffff8880303953f8 R15: 0000000000000000 [ 489.994364][T14931] FS: 00005555698f9500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 490.003430][T14931] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 490.010196][T14931] CR2: 000000110c25276c CR3: 0000000037ff2000 CR4: 00000000003526f0 [ 490.018874][T14931] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 490.026882][T14931] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 490.034949][T14931] Call Trace: [ 490.038347][T14931] [ 490.041300][T14931] ? __warn+0x165/0x4d0 [ 490.045476][T14931] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 490.051498][T14931] ? report_bug+0x2b3/0x500 [ 490.056033][T14931] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 490.061962][T14931] ? handle_bug+0x60/0x90 [ 490.066301][T14931] ? exc_invalid_op+0x1a/0x50 [ 490.071126][T14931] ? asm_exc_invalid_op+0x1a/0x20 [ 490.076199][T14931] ? udp_tunnel_update_gro_rcv+0x69/0x670 [ 490.082148][T14931] ? udp_tunnel_update_gro_rcv+0x31c/0x670 [ 490.088162][T14931] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 490.094036][T14931] ? sk_common_release+0x71/0x2e0 [ 490.099224][T14931] udp_destroy_sock+0x2c9/0x340 [ 490.104119][T14931] ? __pfx_udp_destroy_sock+0x10/0x10 [ 490.109638][T14931] sk_common_release+0x71/0x2e0 [ 490.114517][T14931] inet_release+0x17d/0x200 [ 490.119299][T14931] sock_close+0xbc/0x240 [ 490.123595][T14931] ? __pfx_sock_close+0x10/0x10 [ 490.128779][T14931] __fput+0x3e9/0x9f0 [ 490.132959][T14931] task_work_run+0x24f/0x310 [ 490.137665][T14931] ? _raw_spin_unlock+0x28/0x50 [ 490.142673][T14931] ? __pfx_task_work_run+0x10/0x10 [ 490.147889][T14931] ? syscall_exit_to_user_mode+0xa3/0x340 [ 490.153672][T14931] syscall_exit_to_user_mode+0x13f/0x340 [ 490.159573][T14931] do_syscall_64+0x100/0x230 [ 490.164240][T14931] ? clear_bhb_loop+0x35/0x90 [ 490.169146][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.175080][T14931] RIP: 0033:0x7fb9bcf8d169 [ 490.179740][T14931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.199710][T14931] RSP: 002b:00007fff623bd468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 490.208238][T14931] RAX: 0000000000000000 RBX: 0000000000077953 RCX: 00007fb9bcf8d169 [ 490.216256][T14931] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 490.224391][T14931] RBP: 00007fb9bd1a7ba0 R08: 0000000000000001 R09: 00000003623bd75f [ 490.232564][T14931] R10: 00007fb9bcc00000 R11: 0000000000000246 R12: 00007fb9bd1a5fac [ 490.240757][T14931] R13: 00007fb9bd1a5fa0 R14: ffffffffffffffff R15: 00007fff623bd580 [ 490.249049][T14931] [ 490.252117][T14931] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 490.259417][T14931] CPU: 0 UID: 0 PID: 14931 Comm: syz.4.2104 Not tainted 6.14.0-rc6-syzkaller-01279-gaedfbe251e1c #0 [ 490.270284][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 490.280359][T14931] Call Trace: [ 490.283672][T14931] [ 490.286622][T14931] dump_stack_lvl+0x241/0x360 [ 490.291324][T14931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.296563][T14931] ? __pfx__printk+0x10/0x10 [ 490.301217][T14931] ? _printk+0xd5/0x120 [ 490.305396][T14931] ? __init_begin+0x41000/0x41000 [ 490.310457][T14931] ? vscnprintf+0x5d/0x90 [ 490.314833][T14931] panic+0x349/0x880 [ 490.318829][T14931] ? __warn+0x174/0x4d0 [ 490.323033][T14931] ? __pfx_panic+0x10/0x10 [ 490.327593][T14931] __warn+0x344/0x4d0 [ 490.332077][T14931] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 490.337967][T14931] report_bug+0x2b3/0x500 [ 490.342730][T14931] ? udp_tunnel_update_gro_rcv+0x31d/0x670 [ 490.348563][T14931] handle_bug+0x60/0x90 [ 490.352735][T14931] exc_invalid_op+0x1a/0x50 [ 490.357439][T14931] asm_exc_invalid_op+0x1a/0x20 [ 490.362418][T14931] RIP: 0010:udp_tunnel_update_gro_rcv+0x31d/0x670 [ 490.368964][T14931] Code: 23 48 89 eb e8 14 47 4f f7 c7 05 ca a9 32 10 01 00 00 00 31 ed 45 31 ed e9 80 01 00 00 e8 fb 46 4f f7 eb 40 e8 f4 46 4f f7 90 <0f> 0b 90 e9 5a 02 00 00 e8 e6 46 4f f7 eb 2b e8 df 46 4f f7 eb 24 [ 490.389018][T14931] RSP: 0018:ffffc9000488fc40 EFLAGS: 00010293 [ 490.395194][T14931] RAX: ffffffff8a72a88c RBX: 0000000000000000 RCX: ffff888039835a00 [ 490.403270][T14931] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 490.411249][T14931] RBP: 1ffff11006072a7f R08: ffffffff8a72a5d9 R09: 1ffffffff207a2ee [ 490.419262][T14931] R10: dffffc0000000000 R11: fffffbfff207a2ef R12: dffffc0000000000 [ 490.427239][T14931] R13: ffff888030394d80 R14: ffff8880303953f8 R15: 0000000000000000 [ 490.435255][T14931] ? udp_tunnel_update_gro_rcv+0x69/0x670 [ 490.441000][T14931] ? udp_tunnel_update_gro_rcv+0x31c/0x670 [ 490.446829][T14931] ? sk_common_release+0x71/0x2e0 [ 490.451954][T14931] udp_destroy_sock+0x2c9/0x340 [ 490.456831][T14931] ? __pfx_udp_destroy_sock+0x10/0x10 [ 490.462653][T14931] sk_common_release+0x71/0x2e0 [ 490.468062][T14931] inet_release+0x17d/0x200 [ 490.472581][T14931] sock_close+0xbc/0x240 [ 490.476839][T14931] ? __pfx_sock_close+0x10/0x10 [ 490.481747][T14931] __fput+0x3e9/0x9f0 [ 490.485808][T14931] task_work_run+0x24f/0x310 [ 490.490584][T14931] ? _raw_spin_unlock+0x28/0x50 [ 490.495655][T14931] ? __pfx_task_work_run+0x10/0x10 [ 490.500994][T14931] ? syscall_exit_to_user_mode+0xa3/0x340 [ 490.506898][T14931] syscall_exit_to_user_mode+0x13f/0x340 [ 490.512561][T14931] do_syscall_64+0x100/0x230 [ 490.517165][T14931] ? clear_bhb_loop+0x35/0x90 [ 490.521857][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.527765][T14931] RIP: 0033:0x7fb9bcf8d169 [ 490.532198][T14931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.551905][T14931] RSP: 002b:00007fff623bd468 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 490.560347][T14931] RAX: 0000000000000000 RBX: 0000000000077953 RCX: 00007fb9bcf8d169 [ 490.568431][T14931] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 490.576524][T14931] RBP: 00007fb9bd1a7ba0 R08: 0000000000000001 R09: 00000003623bd75f [ 490.584604][T14931] R10: 00007fb9bcc00000 R11: 0000000000000246 R12: 00007fb9bd1a5fac [ 490.592684][T14931] R13: 00007fb9bd1a5fa0 R14: ffffffffffffffff R15: 00007fff623bd580 [ 490.600700][T14931] [ 490.604115][T14931] Kernel Offset: disabled [ 490.608557][T14931] Rebooting in 86400 seconds..