last executing test programs: 2.922508337s ago: executing program 1 (id=4294): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0xc00e, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r4) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01f428bd7000000000002800000005002e007f0000000a0001007770616e3000000005002b0001000000be482d9e42d4b5d92d695284728d84b80d18e94449dea95ffe754def615ad57d6adb545d3cef010000804edca8457c1d054d14a67049aa4c6810738e7558dddba42104aaebfec6829567c4957d7c83ded7d72952eab9b9b009f3065a92dd2ec9de00000000"], 0x30}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x4, 0xe}) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0xb, 0xd, 0x4, 0x4, 0xc, 0x9, 0x5, 0x7, 0x4, 0xfffffffffffff265, 0x3ff, 0x64, 0xb7bb, 0x5, 0x9e7]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000003c0)={r7, 0x95, "59707c3da35b9bca6face0e823617307488e3fe39ea2ec4433d34fcb9bb6c79bf1eb95f84955c727d1424d3d294f672b8dd17376e730f77b15c98b4dfe213efd8c21a1bae02c176d5ce9fcc56c22956b56fa12117ffc464490b26ca499438e041560419740528b76d696fe055a040e79ed737f46081dd50fc17e5e489c6d39e55258af5768ba82b8561e595e5d643f59e79d27bb3a"}, &(0x7f00000000c0)=0x9d) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1f, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200ebfb}, 0x94) (async) bind$inet6(r8, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_int(r8, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) (async) recvmmsg(r8, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (async) setsockopt$inet6_int(r8, 0x29, 0x8, &(0x7f00000001c0)=0xc0, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.851903809s ago: executing program 2 (id=4295): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000020000000100000f0300090000000000000000000000000044942a000000000000000f01003e008400002e"], 0x0, 0x45, 0x0, 0x1}, 0x28) r2 = socket(0x1, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0xbe, 0xb, 0x2, 0x52, @remote, @private1, 0x8, 0x80, 0x3, 0x2}}) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x42000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@mpls_delroute={0x50, 0x19, 0x400, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x10, 0x7, 0xfc, 0x2, 0xfe, 0xa, 0x2000}, [@RTA_DST={0x8, 0x1, {0x6, 0x0, 0x1}}, @RTA_DST={0x8, 0x1, {0x6}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7f}, @RTA_MULTIPATH={0xc, 0x9, {0x1d, 0x24, 0x2, r3}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xc}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x800) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r4 = socket(0x8, 0x3, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xa7}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c0e0}, 0x40810) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000110f0000000000dcdf2500000000", @ANYRES32=0x0, @ANYBLOB="04010000000000002400128009000100766c616e000000001400028006000100000000000600050088a8000008000500", @ANYRES32=r8, @ANYBLOB="08001f00", @ANYRES32=r8], 0x54}}, 0x0) 2.676268607s ago: executing program 0 (id=4297): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x44, r0, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 2.604014684s ago: executing program 1 (id=4298): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r1 = socket(0xa, 0x2, 0x3a) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fddbdf252100000008000300", @ANYRES32, @ANYBLOB="14002f80fc106a5efa69034e84503fe8f758e048f0e391a45f612bd7416093f4b64dccc0ab76171886289e70a0e6555577a5daab15b381fc05e0d9c2e3d9ebc4a59a1b4e3af6bae0"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x814) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="7961fdffffff000000007e0000000c"], 0x20}}, 0x4000054) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000000506010200000000000000000a000001"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001007b07c8e7beec20a00100000a54120004060a090400000000000d0000020000000900020073797a32000000000900010073797a3000000000200004801c00018011000100666c6f775f6f66666c6f61640000004349cf81e1f50b985528e90000001100010000000000200000000100000a00"/135], 0x7c}}, 0x0) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000140)=""/77, &(0x7f0000000000)=0x4d) 2.430999121s ago: executing program 0 (id=4300): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) (async) connect$bt_l2cap(r0, &(0x7f0000000240)={0x1f, 0x0, @any, 0x2, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r4, 0x8919, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x80, 0x8001, 0x5, {{0xf, 0x4, 0x0, 0x3a, 0x3c, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x75, 0x1, 0x7}, @rr={0x7, 0x7, 0xe4, [@multicast2]}, @noop, @timestamp_addr={0x44, 0x4, 0x8b, 0x1, 0xc}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @noop]}}}}}) (async) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x46, '\x00', r5, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r7, r2, 0x0, &(0x7f0000000780), 0x0, 0x10, 0x48}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="85100000fbffffff95000000000000774e823184a182e3106722af1c00184500000400f8ff00000000fc000000186800000e0000724828dd8384ead10e8e4ff2bf372203ba6c", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0xc, &(0x7f0000000340)=""/12, 0x41000, 0x1, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0x5, 0x417, 0xcab3}, 0x10, r7, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x200}, 0x94) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100001042dbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800800010067726500100002800400120008000700ac14142308000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="9cb86100b8cd9a"], 0x4c}}, 0x0) (async) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1, 0x4}, 0x50) (async) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000fbfffffffffffffffdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000001000000000c00150007000000217d976d"], 0xc4}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x5, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) (async) r14 = socket$inet(0x2, 0x2, 0x0) bind$inet(r14, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) 1.995615233s ago: executing program 0 (id=4303): r0 = socket$inet6(0xa, 0x4, 0x7) (async) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r2, 0x8, 0x6, 0xfb}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x0, 0x5, 0x8, 0x200, 0x3, 0x9, 0x3a9, {r2, @in6={{0xa, 0x4e22, 0x60, @empty, 0x11000000}}, 0x6, 0x5, 0x0, 0x1, 0xfffffffc}}, &(0x7f0000000280)=0xb0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x35b}]}, 0x10) (async) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) (async) getsockopt$inet_int(r5, 0x0, 0x6, &(0x7f00000000c0), 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000", 0x48}], 0x1) socket$netlink(0x10, 0x3, 0x10) (async) r7 = socket$netlink(0x10, 0x3, 0x10) (async) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, 0x0, 0x0) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000002c0)={0x14, r9, 0x1, 0xffffffff, 0x25dfdbfb, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x8001) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x7, 0x0, 0x15, @mcast1, @mcast1, 0x0, 0x0, 0x62fc, 0xffffffff}}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 1.927734227s ago: executing program 1 (id=4304): r0 = socket(0x40000000015, 0x805, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r1 = socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r4}, &(0x7f0000000500), &(0x7f0000001680)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r4}, &(0x7f0000000500), &(0x7f0000001680)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) socketpair(0x6, 0x2, 0x1, &(0x7f0000000600)={0xffffffffffffffff}) sendmmsg$alg(r6, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)="ed3018f622f529def38fc46ac4fca6f2880f5f28064505635ef356c2102428ed55feb66f19c1183a767003e45e11001a792ba7a352ffc1c987c9955000", 0x3d}, {&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000680)="730e5b6d3346a9d1a98b5375e9a36b3dcabf3ed07e0ac17b7f02320125e732c629a769d8da775084fc1db3e0b5385ade0cc227", 0x33}, {&(0x7f00000006c0)="47ee3f12d481fb89879e9f9f6f798111e7b853f611449e20335aa9894cbf82653b39ad253204f4dce54f22166623fb2639ca6292102d17f27eba146822ff698326f29d77c60516f4ee4be0e8e057262803dfec64f1b9a180cf193bf1f87d15fff650c579dc982065de7e63958303c633362bd102b23184c4ada7e2b9379247b34d36ff18a4c8", 0x86}], 0x4, &(0x7f00000007c0)=[@iv={0x70, 0x117, 0x2, 0x57, "ea19fc5d54f121a8985fc89c82c2ecaf64a56f4a7c7c6d8180f2ddc2a4f80c493424ada8a1fbf1e7c96e121d68579cf135d4f740480fdd319e330b226a23c9da0e516734056e803c9bad5bbb877f76ca091b1465a8877c"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x58, 0x117, 0x2, 0x44, "cadd4bc853d4c6c46a804e816532a79191d07e71be0b840c995e15d4a867f776dce55783d77a179b23665399cd5aa534fa1c08a7a09198b97eda3489599a826132963975"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x98}, @iv={0x60, 0x117, 0x2, 0x4a, "edf1e2272529b043a9e1ab4e999049e22cb03c6fad2073a1b40bcff49fa60c4447d8661f5d5f98da4c189aca0a5c83a858838a8d2522c742189bb164383501b5f1d4ff91656fd4896742"}], 0x188, 0x40801}, {0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000980)="29e66260199b38b819c2a7d5ee2194a92bbc73db1c42838c32b40c60c3e88e2da2b2427c963182f92cd434ae", 0x2c}, {&(0x7f0000002700)="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", 0x1000}, {&(0x7f00000009c0)="c26c8ae4759ccca32688f21e4df399e54f1ae835fc3c29af5afaef7017965d8cca4123f105f80949d1545da56069610024a33d59ea7527367c59badb6f6a3852013bd6b63861dee710a093ecc41d54f164b0", 0x52}, {&(0x7f0000000a40)="0bbbdeddb620fc6914ddd01393812a2925d084e73acefa4fa3b907c6d27ed67419a2122cd1b55a2de33991cc4bbd4906b4c7cbb48ea868a48a2e138fa5e93fb249c9a5cb3c3849be96d8bdd8c8ad4dc7f38c19ab4e003ddb0b3c67dd474c021c403621657bbf4a7fe9caf47588", 0x6d}, {&(0x7f0000000ac0)="159017e70e0a3e42bb8a85028f4cf365233cda0b3926da2caea518c2ee77f112811bbe3b5d2096b615e1d172cca014ad58c5e347b9d07bb76d22ce845254357c219d26bcd35a4fc741e5ef94495d546ddfa445cc3c2905e86c8ea7ecbf496d7bdcbbded3811d0970a05baebd4501c540b47b1a48af14e73e58f4e6902fb046dc2567281fd5f700be01ee0776fc8fff1f5a2e6fa28dc1c8847f207665c1ec3a1f8d0f7a571ecc2d65974cb62643289c9c6f251ec92725755b7fa398f5a67481823e70c2c523ad04c0e5f2952a391ab7182cca0874e643291a0b497df7d9b22ee1df8640499eda61e2076abeca5ebef8", 0xef}, {&(0x7f0000000bc0)="54e5c729bd61137a835d3c057d7bfc54e37359ead047660b0cef0ebefc5f9f5de05f9a7d01f5545c949a053b60d7246f0d23cc287f5034f6e12d199bba3cb7fb316bb6003d663a2c317dfdcaac4408a11f077c11cb20e2ef3e7b145a307945f17d1c92574643148015f9a171fc2fb26b7da8533cc509a3a44495f9699452474838b6b1d4f15febb6a4bb922489a6cf7ba998b3c885f534ac9da4b9047e1df136e462347ed0de3e53b17400e0059bebfd54f895ac0fbb1d6470904ef6e876483d6975468fe4c3c32316f74a342d94a6b8f77326cc85dfbd7fc7", 0xd9}], 0x6, &(0x7f0000000dc0)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x118, 0x117, 0x2, 0xff, "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"}, @op={0x18}], 0x148, 0x40000}], 0x2, 0x20000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac-aes-neon\x00'}, 0x58) sendmsg$rds(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, &(0x7f0000000380)=[@mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x8000000}, &(0x7f0000000100)=0x7fff, &(0x7f0000000140)=0x85, 0x9, 0x97a, 0x833, 0x7, 0x64, 0x275}}, @fadd={0x58, 0x114, 0x6, {{0x79, 0x1e800}, &(0x7f0000000180)=0xe2, &(0x7f00000001c0)=0x6, 0x3, 0x1, 0xc1, 0x5, 0x1, 0x200}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffff7, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x54c7, 0xee}, &(0x7f0000000200), &(0x7f0000000240)=0x337d, 0x5, 0x2, 0x1e7, 0x100, 0x1c, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000280)=""/185, 0xb9}, &(0x7f0000000340), 0x5}}], 0x150, 0x4004010}, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/90, 0x5a}], 0x1, &(0x7f0000000380)=[@mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x8000000}, &(0x7f0000000100)=0x7fff, &(0x7f0000000140)=0x85, 0x9, 0x97a, 0x833, 0x7, 0x64, 0x275}}, @fadd={0x58, 0x114, 0x6, {{0x79, 0x1e800}, &(0x7f0000000180)=0xe2, &(0x7f00000001c0)=0x6, 0x3, 0x1, 0xc1, 0x5, 0x1, 0x200}}, @rdma_dest={0x18, 0x114, 0x2, {0xfffffff7, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x54c7, 0xee}, &(0x7f0000000200), &(0x7f0000000240)=0x337d, 0x5, 0x2, 0x1e7, 0x100, 0x1c, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000280)=""/185, 0xb9}, &(0x7f0000000340), 0x5}}], 0x150, 0x4004010}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@bridge_dellink={0x20, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r11}}, 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r10) 1.892316288s ago: executing program 2 (id=4305): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f00000000c0)={0xa, 0x2, 0x0, @loopback={0xff00}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000040)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[], 0x30}}], 0x1, 0x4c0c0) socket(0x10, 0x3, 0x4) 1.87646003s ago: executing program 4 (id=4306): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) r5 = accept4(r3, 0x0, 0x0, 0x80000) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000d80)=""/157, 0x9d}], 0x2}, 0x10}], 0x2, 0x10002, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000006c0)={0x7, {{0x2, 0x4e21, @multicast1}}, 0x1, 0x2, [{{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}]}, 0x190) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) socket(0x0, 0x800, 0xd) openat$cgroup_ro(r8, 0x0, 0x0, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x50}}, 0x2) 1.683867578s ago: executing program 2 (id=4307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x20, 0x0, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) getsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, &(0x7f0000000100)) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x240008c8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x1c}}, 0x80) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000140)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000040)={{0x5c, @private=0xa010101, 0x4e24, 0x1, 'nq\x00', 0x0, 0xffffffee, 0xe}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x4e20, 0x2, 0x3, 0x7, 0x2}}, 0x44) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000000000)={0x7, [0x5, 0x4, 0x2, 0x1ba6, 0xfff, 0x7, 0xfb1f]}, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x9b2987a6, 0x10000}, 0x28) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r11) 1.651705614s ago: executing program 0 (id=4308): r0 = socket(0x1e, 0x2, 0x20001) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000680)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @loopback, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@remote, @multicast2, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}, 0x1, [0x10001]}}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x7fffffff}, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='freezer.self_freezing\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x110a) r7 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt(r7, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)=""/94, 0x5e}], 0x1}, 0x5076}], 0x1, 0x20, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x40, 0x8, 0x7, 0x7, {{0x18, 0x4, 0x1, 0x1, 0x60, 0x64, 0x0, 0x1, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, {[@lsrr={0x83, 0x23, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast2]}, @lsrr={0x83, 0x7, 0x32, [@loopback]}, @ssrr={0x89, 0x13, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback]}, @rr={0x7, 0xb, 0x78, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @local}, {0x306, @remote}, 0x14, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'sit0\x00'}) unshare(0x62040200) mmap(&(0x7f000083b000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000200)=0x4, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x390, 0x1d0, 0x5802, 0x294, 0x0, 0x294, 0x310, 0x378, 0x378, 0x310, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff, 0xff000000], 'veth0_to_hsr\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x2, 0x80}, 0x0, 0xa8, 0x1d0, 0x52020000}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xe5f6, 'system_u:object_r:etc_aliases_t:s0\x00'}}}, {{@ipv6={@loopback, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x81}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x1, 0x0, 'netbios-ns\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='fi'], &(0x7f0000000100)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) 1.415972968s ago: executing program 1 (id=4310): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x44, r1, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 1.404723292s ago: executing program 2 (id=4311): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x4d) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_addr=@private=0xa010100, @remote}, 0x10) bind$bt_sco(r3, &(0x7f0000000400), 0x8) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r6, 0x0) listen(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x30}}, 0x0) socket(0x1e, 0x80f, 0x1b4f46a9) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b000100627269646765000048000280050019000200000005"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.303708416s ago: executing program 1 (id=4312): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x10e, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1a4, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4000}, 0x11) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f20008"], 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xe7, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) socketpair(0x28, 0x6, 0xfff, &(0x7f0000000740)) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0xe4, r2, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x280000, 0x0) ioctl$PPPIOCSACTIVE(r4, 0x40107446, &(0x7f0000000700)={0x3, &(0x7f00000006c0)=[{0x3, 0x3, 0x4}, {0xe9f, 0x5, 0x5, 0xffff}, {0x0, 0x0, 0x3, 0x7}]}) 1.248038474s ago: executing program 3 (id=4313): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.070566075s ago: executing program 4 (id=4314): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x5, 0x40, {{0x9, 0x4, 0x2, 0x3f, 0x24, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}, {[@timestamp={0x44, 0x10, 0x63, 0x0, 0x2, [0x9, 0x101, 0x1]}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f00000004c0)}, {&(0x7f0000000700)="27d5f35f314a3c9585a0ba40553b7881fee61c3f9467f6b4ac8511462e66835d7406615979e8daad2e30f3ba10c35477ec6b4d80c7476fe75349af3a5be065b16b80db0580c9fb08258321b088212847e39f988b54f3b2fcdcca8e467426b546c3b16e9f75f7b81e91d136a27a59816c60d1ef316940faf9828b29f296a48f6e413eab2dc3ba602a40287a981383dd6308061f4f798cd56b0c581654e74839515207ee30dcb66fc201c54f21883f7ea19413a259ad2f0000a638178eb9683aec7d8d44602045e35fb7fd4c58852692e6d4b8ed5f142770e3340a0aff8586a102efd99541f753db75d8d6788d7c144154576ee400", 0xf4}, {0x0}, {0x0}, {&(0x7f0000000ac0)="2c59ec2582ec1e39d060fd247087527b19bcd5e2ace8e2f4f076816cc02dec65eb389e16019e7d194132bdb22061ec493abeb706398cd3ac5d694b724cbd5c91cc580c77dd1777b9c5e20aa948957572efd69f96cbe750d5e76fb3d02d60c6782e9fc2bf15e71d4f738e3cabb842e4d7b98be1ca6523f661269403341ec28c8ed06fa138e0357171e78ec77c5da559aab13db1897fde81", 0x97}, {&(0x7f0000000800)}], 0x6, 0x5, 0x7) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) (async) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r2, 0x0, 0x40000000}, 0x18) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$alg(0x26, 0x5, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000020000050900010073797a300000000014000020d200010000000000000000000500000ab7c9f818989a1345dfc0d15c288e72210bc790e7a28958f812f89e538e5337"], 0x48}, 0x1, 0x0, 0x0, 0x2000c045}, 0x0) (async) bind$alg(r7, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x2) (async) bind$inet(r6, 0x0, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 1.049953794s ago: executing program 2 (id=4315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2000128008000100677470001400028008000100", @ANYRES32=r3], 0x48}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x400) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, 0x0, 0x1000f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.004010379s ago: executing program 3 (id=4316): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_buf(r0, 0x1, 0x13, &(0x7f0000000780)=""/16, &(0x7f00000007c0)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x10) unshare(0x24040400) r2 = socket$kcm(0x29, 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0xe, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10}, 0x10}, 0x94) 886.62459ms ago: executing program 4 (id=4317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x17, 0x0, 0x30000, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28d, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x62}, 0x94) 847.544589ms ago: executing program 3 (id=4318): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x1ee, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1b8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\t\x00', 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x2f, '\x00', [@generic={0xf, 0x25, "c9bd942c73856184f927b7e4e553c7f46b4f930d2f1c30ca13154ac498c3eaf13ab58393d7"}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0xe, "8b168e4b48529453d91cea424030"}, @calipso={0x7, 0x8}]}]}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x50) 795.821273ms ago: executing program 2 (id=4319): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000140)={@random, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "af8631e1ecda8645041961660fd88afe7ee224dfeff56dc4", "2b0c31535253123f1d6e7148622946835d8ad3575623e2f9fb5dbc4c18e4f987"}}}}}}, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x7820f1bf566cf6e2}, 0x80) 741.753734ms ago: executing program 3 (id=4320): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x6e6bb4}}, [@policy_type={0xa}, @mark={0xc}]}, 0xd8}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}]}]}, 0x70}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) listen(r2, 0x4) (async) sendmmsg$inet_sctp(r2, &(0x7f0000007300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x20, 0x5024ea244a41da67}], 0x1, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c00018006000600655800000800028004"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 664.558301ms ago: executing program 0 (id=4321): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000002000000e1"], 0x28}}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ff8826bd7000fddbdf254b0000000500a800000000000ee700006e657464657673696d0000000f0002006e657464657673696d300000"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048844) 547.944077ms ago: executing program 4 (id=4322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)={0x44, r1, 0x21, 0x8d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) 543.800585ms ago: executing program 3 (id=4323): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="b100040e", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf25250000000800030002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wlan1\x00', &(0x7f0000000080)=@ethtool_stats}) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) (async) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x40, 0x8, 0xfe, 0xff7ffeff}, {0x6, 0xa, 0xfe, 0x8001}]}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x4, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r5}, 0x18) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000000580)=""/54, 0x36}, {&(0x7f0000000600)=""/123, 0x7b}, {&(0x7f0000000700)=""/113, 0x71}, {&(0x7f0000000800)=""/133, 0x85}], 0x5, 0x0, 0x4}}], 0x48}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x4000010, 0xffffffffffffffff, 0x54099000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a27f200022c00fe8000000000000000000000000000bbfe8000000000000000000000000000aaff0001080000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500000009078080050e439cc1c50f9e8f0e11a069a10956846f9b94ac998f72d61715c8c4129345ff7afa956de43ce83b4c1b2fd7eafbe4262b2a5cceb924593f577cf04736141ea2ae5370d3f14c75cba771a9ee982efac6d632b944c8a90dcdae68109c259f0bfba1973a8b12f4d11dabc5d60ae87f6b6c78d6b2a01b5e1bda3afbb5fd61a2267026b611444954d06525cf062794471ed32d643f610ddbbfe8148fd2aa4a46e3e"], 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 521.413ms ago: executing program 1 (id=4324): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8905, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0xfffffffb, 0x0}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0xa, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xdac}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @ldst={0x0, 0x1, 0x2, 0x4, 0x4, 0x100, 0xffffffffffffffff}, @generic={0x8, 0x8, 0x4, 0x7ff, 0xc}, @call={0x85, 0x0, 0x0, 0x66}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f0000000440)='GPL\x00', 0xffffff00, 0x28, &(0x7f0000000480)=""/40, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0x100, 0xfffffff7}, 0x10, 0x2685e, 0xffffffffffffffff, 0x7, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x3, 0x0, 0x2}, {0x4, 0x1, 0x5, 0x7}, {0x0, 0x2, 0x3, 0xa}, {0x5, 0x2, 0xc, 0x8}, {0x2, 0x1, 0x7, 0x1}, {0x3, 0x1, 0x10, 0x5}, {0x1, 0x2, 0x1, 0x2}], 0x10, 0x6}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x9f8e, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000980)={0x0, r4}, 0x8) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x16, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@ldst={0x3, 0x2, 0x6, 0x2, 0x9, 0x10, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x4, 0xa, 0xfffffffffffffff4, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xfffffff9, 0xd7, &(0x7f0000000200)=""/215, 0x41100, 0x2, '\x00', r2, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xf, 0x80, 0x800}, 0x10, r3, r4, 0x9, &(0x7f00000007c0)=[r5, r6], &(0x7f0000000800)=[{0x5, 0x4, 0x5, 0xb}, {0x5, 0x4, 0x3, 0x8}, {0x1, 0x1, 0xb, 0x2}, {0x3, 0x5, 0xd, 0x7}, {0x4, 0x5, 0xb, 0x3}, {0x0, 0x5, 0x6, 0x6}, {0x0, 0x4, 0xb, 0x8}, {0x3, 0x5, 0xf}, {0x4, 0x5, 0x4, 0x5}], 0x10, 0x80}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) 400.066072ms ago: executing program 0 (id=4325): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x0, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001680), &(0x7f0000001340), 0xede8, r0}, 0x38) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) (async, rerun: 64) setsockopt$packet_int(r2, 0x107, 0x10, &(0x7f0000000000), 0x4) (async, rerun: 64) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) close(0xffffffffffffffff) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) (async) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001940)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r5, @ANYBLOB="8b000400000000004800128008000100736974003c0002800500090029000000060010000b00000008000c000000008006000d000900000006000f0003040000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 392.546056ms ago: executing program 4 (id=4326): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0xfffffffc}}, 0x2e) writev(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000280)="8577c28b54", 0x5}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111840000000000851000000200000085000000a0000000950000000000007171ce5d009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6gre0\x00', 0x0, 0x4, 0x87, 0x4, 0xdcd3, 0x20, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x8}}) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0xc, r3, 0x2c}, 0x10) 172.98618ms ago: executing program 4 (id=4327): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x8040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000001001000090000000500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000100"/28], 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000100)={0x20, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x20040000) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYRES16=r3], 0xfdef) 0s ago: executing program 3 (id=4328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080), 0x50) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket(0x22, 0x2, 0x4) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x46, &(0x7f0000000380), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000380)}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) kernel console output (not intermixed with test programs): [T16993] netlink: 'syz.0.2975': attribute type 3 has an invalid length. [ 424.709774][T16989] syzkaller0: tun_chr_ioctl cmd 1076389384 [ 424.709779][T16993] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2975'. [ 424.714851][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 424.757598][T16993] netlink: 'syz.0.2975': attribute type 3 has an invalid length. [ 424.790653][T16993] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2975'. [ 425.032785][T17004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2978'. [ 425.822457][ T5855] Bluetooth: hci1: command tx timeout [ 426.403848][T16989] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 426.409830][T16989] syzkaller0: linktype set to 1 [ 426.725070][T17013] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2980'. [ 426.760547][T17015] netlink: 'syz.0.2981': attribute type 5 has an invalid length. [ 426.808651][T16906] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 426.840499][T16906] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.863249][T16906] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 426.903517][T17021] bridge0: port 3(veth0_to_bridge) entered blocking state [ 426.927724][T17021] bridge0: port 3(veth0_to_bridge) entered disabled state [ 427.001372][T17021] veth0_to_bridge: entered allmulticast mode [ 427.042578][T17021] veth0_to_bridge: entered promiscuous mode [ 427.068423][T17021] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 427.139264][T17021] bridge0: port 3(veth0_to_bridge) entered blocking state [ 427.146600][T17021] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 427.165018][T17033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2986'. [ 427.185184][T16906] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.233112][T16906] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.257103][T16906] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.382363][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.393479][T17042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2987'. [ 427.402909][T17038] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2987'. [ 427.419491][T17039] tipc: Enabling of bearer rejected, already enabled [ 427.445426][T16906] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.456371][T16906] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.466934][T16906] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.509336][T17039] syzkaller0: entered promiscuous mode [ 427.517759][T17039] syzkaller0: entered allmulticast mode [ 427.544923][T17039] netem: change failed [ 427.586057][T16906] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 427.596752][T16906] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.609423][T16906] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 427.643862][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.722238][T17051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2992'. [ 427.752035][ T3542] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.862677][ T3542] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 427.902489][ T5855] Bluetooth: hci1: command tx timeout [ 428.021007][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.041224][T16906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 428.096775][T16906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 428.166621][T16906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 428.274076][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.281960][T16906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 428.394386][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.522450][ T8176] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 428.580544][T16906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.617678][T16906] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.669105][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.676390][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.720612][ T8176] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.727869][ T8176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.222295][ T5936] net_ratelimit: 4 callbacks suppressed [ 429.222314][ T5936] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 429.406208][T14450] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 429.562985][ T5936] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 429.647741][T16906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.683844][ T5936] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 429.905674][T17166] Unsupported ieee802154 address type: 0 [ 429.918579][T16906] veth0_vlan: entered promiscuous mode [ 429.957494][T16906] veth1_vlan: entered promiscuous mode [ 429.983073][ T5852] Bluetooth: hci1: command tx timeout [ 430.023476][ T8182] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.090470][T16906] veth0_macvtap: entered promiscuous mode [ 430.125918][T16906] veth1_macvtap: entered promiscuous mode [ 430.188375][T16906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.216763][T16906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.232852][ T8182] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.259434][ T8182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.274831][ T8182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.296231][ T8182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.338815][ T8182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.443556][ T8182] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.469417][T17191] netlink: 'syz.4.3031': attribute type 9 has an invalid length. [ 430.479092][T17191] __nla_validate_parse: 5 callbacks suppressed [ 430.479113][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 430.536509][T17191] netlink: 'syz.4.3031': attribute type 9 has an invalid length. [ 430.555697][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3031'. [ 430.566509][T14453] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.662499][ T5936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.688463][ T5936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.805141][T14450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.822578][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 430.832698][T14450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.992934][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 431.228349][T17225] tipc: Enabling of bearer rejected, already enabled [ 431.272927][T17225] netem: change failed [ 432.043019][T17262] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3050'. [ 432.077643][T17262] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3050'. [ 432.081987][ T5852] Bluetooth: hci1: command 0x0405 tx timeout [ 432.102310][T17262] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3050'. [ 432.125112][T17265] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3049'. [ 432.191274][ T5158] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 432.205166][ T5158] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.224484][T17269] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3050'. [ 432.229943][ T5158] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.253299][ T5158] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.262920][ T5158] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 432.376663][T17266] wg1 speed is unknown, defaulting to 1000 [ 432.403452][T17266] lo speed is unknown, defaulting to 1000 [ 432.419039][T17266] wg1 speed is unknown, defaulting to 1000 [ 432.646292][T17282] netlink: 'syz.2.3055': attribute type 1 has an invalid length. [ 432.658636][T17283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3054'. [ 433.108044][T17295] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 433.238959][T17266] chnl_net:caif_netlink_parms(): no params data found [ 433.347755][T17300] dummy0: entered promiscuous mode [ 433.359271][T17300] dummy0: entered allmulticast mode [ 433.646826][T17305] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 433.720017][T17305] netlink: 'syz.0.3060': attribute type 10 has an invalid length. [ 433.750879][T17309] veth0_to_bridge: left allmulticast mode [ 433.754394][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3063'. [ 433.763562][T17309] veth0_to_bridge: left promiscuous mode [ 433.781987][T17309] bridge0: port 3(veth0_to_bridge) entered disabled state [ 433.790374][T17319] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3063'. [ 433.805621][T17309] bridge_slave_0: left allmulticast mode [ 433.811602][T17309] bridge_slave_0: left promiscuous mode [ 433.817679][T17309] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.830154][T17309] bridge_slave_1: left allmulticast mode [ 433.844437][T17309] bridge_slave_1: left promiscuous mode [ 433.850364][T17309] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.873524][T17309] bond0: (slave bond_slave_0): Releasing backup interface [ 433.897690][T17309] bond0: (slave bond_slave_1): Releasing backup interface [ 433.930531][T17309] team0: Port device team_slave_0 removed [ 433.955740][T17309] team0: Port device team_slave_1 removed [ 433.963296][T17309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.970784][T17309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.988152][T17309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.998177][T17309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.023749][T17266] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.031094][T17266] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.066416][T17266] bridge_slave_0: entered allmulticast mode [ 434.084593][T17266] bridge_slave_0: entered promiscuous mode [ 434.094363][T17266] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.108286][T17266] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.115988][T17266] bridge_slave_1: entered allmulticast mode [ 434.124814][T17266] bridge_slave_1: entered promiscuous mode [ 434.142667][ T5852] Bluetooth: hci1: command 0x0405 tx timeout [ 434.152478][T17305] mac80211_hwsim hwsim37 wlan1: left allmulticast mode [ 434.180615][T17305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.203152][T17305] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 434.233087][ T5936] net_ratelimit: 14 callbacks suppressed [ 434.233109][ T5936] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 434.383521][ T5855] Bluetooth: hci5: command tx timeout [ 434.455203][T17266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.483561][ T5936] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 434.507454][T17266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.638486][T17266] team0: Port device team_slave_0 added [ 434.657084][T17266] team0: Port device team_slave_1 added [ 434.735286][T17266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.747673][T17266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.781222][T17266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.801150][T17330] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 434.808920][T17266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.827620][T17266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.865317][T17266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.884964][T17336] netlink: 'syz.4.3069': attribute type 10 has an invalid length. [ 434.949213][T17336] netlink: 'syz.4.3069': attribute type 10 has an invalid length. [ 435.071131][T17266] hsr_slave_0: entered promiscuous mode [ 435.079071][T17266] hsr_slave_1: entered promiscuous mode [ 435.085803][T17266] debugfs: 'hsr0' already exists in 'hsr' [ 435.091774][T17266] Cannot create hsr debugfs directory [ 435.304751][ T5936] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 435.514490][T17351] __nla_validate_parse: 1 callbacks suppressed [ 435.514510][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3074'. [ 435.643146][ T6040] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 435.795500][T14450] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 435.796477][T17359] netlink: 'syz.2.3078': attribute type 1 has an invalid length. [ 435.906751][T17359] 8021q: adding VLAN 0 to HW filter on device bond7 [ 435.919916][T17369] ksmbd: Unknown IPC event: 3, ignore. [ 435.964974][T17367] 8021q: adding VLAN 0 to HW filter on device bond7 [ 435.977549][T17367] bond7: (slave vxcan5): The slave device specified does not support setting the MAC address [ 435.991169][T17367] bond7: (slave vxcan5): Error -95 calling set_mac_address [ 436.001185][T17373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3078'. [ 436.045652][T17359] batadv_slave_1: entered promiscuous mode [ 436.059086][T17359] bond7: (slave batadv_slave_1): Enslaving as an active interface with a down link [ 436.098094][T17373] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.259186][T17379] netlink: 'syz.2.3085': attribute type 1 has an invalid length. [ 436.297601][T17379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3085'. [ 436.311560][T17380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3085'. [ 436.462474][ T5855] Bluetooth: hci5: command tx timeout [ 436.547658][T17372] veth1_vlan: left allmulticast mode [ 436.763760][T17372] hsr0: left allmulticast mode [ 436.768594][T17372] hsr_slave_0: left allmulticast mode [ 436.775894][T17372] hsr_slave_1: left allmulticast mode [ 436.781555][T17372] hsr0: left promiscuous mode [ 437.165020][ T6040] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.197437][ T6040] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.219202][T17382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3086'. [ 437.230180][ T6040] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.265809][ T6040] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 437.308605][T17385] tipc: Enabling of bearer rejected, failed to enable media [ 437.468997][T17387] wg1 speed is unknown, defaulting to 1000 [ 437.522804][T17387] lo speed is unknown, defaulting to 1000 [ 437.586691][T17387] wg1 speed is unknown, defaulting to 1000 [ 437.586764][T17266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 437.673862][T17401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3090'. [ 437.715707][T17401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3090'. [ 437.805220][T17266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 437.881478][T17405] syz_tun: entered promiscuous mode [ 437.901486][T17405] batadv_slave_0: entered promiscuous mode [ 437.929568][T17405] hsr1: entered allmulticast mode [ 437.945004][T17405] syz_tun: entered allmulticast mode [ 437.960415][T17405] batadv_slave_0: entered allmulticast mode [ 438.009797][T17266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 438.147614][T17266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 438.175626][T17410] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3092'. [ 438.392555][T17410] wg1 speed is unknown, defaulting to 1000 [ 438.400406][T17410] lo speed is unknown, defaulting to 1000 [ 438.408900][T17410] wg1 speed is unknown, defaulting to 1000 [ 438.542562][ T5855] Bluetooth: hci5: command tx timeout [ 438.935800][T17429] netlink: 'syz.3.3093': attribute type 3 has an invalid length. [ 439.029261][T17266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.141577][T17266] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.178976][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.186289][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.243388][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.250633][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.592227][T17443] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3095'. [ 439.624815][T17442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3095'. [ 439.669905][T17442] netlink: 'syz.2.3095': attribute type 4 has an invalid length. [ 439.740036][T17441] tipc: Enabled bearer , priority 26 [ 440.145565][T17452] hsr0: entered allmulticast mode [ 440.150712][T17452] hsr_slave_0: entered allmulticast mode [ 440.156853][T17452] hsr_slave_1: entered allmulticast mode [ 440.622552][ T5855] Bluetooth: hci5: command tx timeout [ 440.830153][T17266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.872998][ T5988] tipc: Node number set to 3702444485 [ 440.988006][T17266] veth0_vlan: entered promiscuous mode [ 441.009928][T17266] veth1_vlan: entered promiscuous mode [ 441.133407][T17266] veth0_macvtap: entered promiscuous mode [ 441.179670][T17266] veth1_macvtap: entered promiscuous mode [ 441.260838][T17266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.271442][ T5988] page_pool_release_retry() stalled pool shutdown: id 39, 3329 inflight 181 sec [ 441.308607][T17266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.326428][ T8176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.351144][ T8176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.362076][ T8176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.399934][ T8176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.420673][T17493] __nla_validate_parse: 2 callbacks suppressed [ 441.420714][T17493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'. [ 441.427955][T17495] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3111'. [ 441.455283][T17495] IPv6: addrconf: prefix option has invalid lifetime [ 441.594750][ T8176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.636820][ T8176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.707581][T17506] netlink: 'syz.4.3113': attribute type 16 has an invalid length. [ 441.720004][T17501] netlink: 'syz.4.3113': attribute type 16 has an invalid length. [ 441.744825][T17506] netlink: 'syz.4.3113': attribute type 17 has an invalid length. [ 441.746236][T17508] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 441.763137][T17501] netlink: 'syz.4.3113': attribute type 17 has an invalid length. [ 441.765897][T17509] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3114'. [ 441.800552][ T8176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.817943][ T8176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.043944][T17518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3040'. [ 442.092362][T17518] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3040'. [ 443.321297][ T10] IPVS: starting estimator thread 0... [ 443.503612][T17561] IPVS: using max 24 ests per chain, 57600 per kthread [ 443.915208][T17576] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3132'. [ 443.948682][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 443.964785][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 443.976705][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 443.998118][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.000032][T17581] netlink: 'syz.3.3134': attribute type 2 has an invalid length. [ 444.022463][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.060347][T17581] netlink: 'syz.3.3134': attribute type 1 has an invalid length. [ 444.108065][T17581] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3134'. [ 444.192032][T17580] wg1 speed is unknown, defaulting to 1000 [ 444.199725][T17580] lo speed is unknown, defaulting to 1000 [ 444.238832][T17580] wg1 speed is unknown, defaulting to 1000 [ 444.365823][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 444.390968][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 444.406065][T17595] netlink: 'syz.0.3138': attribute type 13 has an invalid length. [ 444.425517][T17593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3137'. [ 444.444791][T17595] netlink: 'syz.0.3138': attribute type 17 has an invalid length. [ 444.615451][T17613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.641362][T17613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.665001][T17595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 444.750121][T17599] syzkaller1: entered allmulticast mode [ 444.932014][T17623] netlink: 'syz.1.3142': attribute type 9 has an invalid length. [ 445.065034][T17627] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 445.083545][T17580] chnl_net:caif_netlink_parms(): no params data found [ 445.102453][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.126887][T17631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.225308][T17633] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 445.372876][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.380493][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.388318][T17580] bridge_slave_0: entered allmulticast mode [ 445.396670][T17580] bridge_slave_0: entered promiscuous mode [ 445.410035][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.418423][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.432320][T17580] bridge_slave_1: entered allmulticast mode [ 445.447623][T17580] bridge_slave_1: entered promiscuous mode [ 445.547489][T17639] wg1 speed is unknown, defaulting to 1000 [ 445.569480][T17639] lo speed is unknown, defaulting to 1000 [ 445.575567][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.580469][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.630621][T17639] wg1 speed is unknown, defaulting to 1000 [ 445.685594][T17580] team0: Port device team_slave_0 added [ 445.711749][T17580] team0: Port device team_slave_1 added [ 445.799307][T17655] netlink: 'syz.1.3152': attribute type 1 has an invalid length. [ 445.848877][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.856979][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.884515][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.938612][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.946128][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.975116][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.073429][ T5855] Bluetooth: hci2: command tx timeout [ 446.143586][T17580] hsr_slave_0: entered promiscuous mode [ 446.151206][T17580] hsr_slave_1: entered promiscuous mode [ 446.158032][T17580] debugfs: 'hsr0' already exists in 'hsr' [ 446.164415][T17580] Cannot create hsr debugfs directory [ 446.577546][T17684] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 447.082658][T17708] __nla_validate_parse: 2 callbacks suppressed [ 447.082678][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3163'. [ 447.109547][T17708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'. [ 447.269540][T17710] macsec1: entered promiscuous mode [ 447.287202][T17710] bridge0: entered promiscuous mode [ 447.297805][T17710] bridge0: port 1(macsec1) entered blocking state [ 447.304768][T17710] bridge0: port 1(macsec1) entered disabled state [ 447.313026][T17710] macsec1: entered allmulticast mode [ 447.318438][T17710] bridge0: entered allmulticast mode [ 447.819288][T17710] macsec1: left allmulticast mode [ 447.847867][T17710] bridge0: left allmulticast mode [ 447.869473][T17710] bridge0: left promiscuous mode [ 448.056564][T17711] wg1 speed is unknown, defaulting to 1000 [ 448.090625][T17711] lo speed is unknown, defaulting to 1000 [ 448.139271][T17711] wg1 speed is unknown, defaulting to 1000 [ 448.139289][T17728] bond_slave_1: mtu greater than device maximum [ 448.152115][ T5855] Bluetooth: hci2: command tx timeout [ 448.191477][T17729] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3170'. [ 448.201476][T17730] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 448.359609][T17733] Bluetooth: MGMT ver 1.23 [ 448.408713][T17733] geneve4: entered promiscuous mode [ 448.430400][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3172'. [ 448.452422][T17740] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3174'. [ 448.463460][T17740] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3174'. [ 448.476456][ T3542] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.594788][T17746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.629842][ T3542] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.648656][ T3542] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.657752][ T3542] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.849064][T17580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.877768][T17580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.910901][T17580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.950480][T17580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.258133][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.304909][T17772] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3181'. [ 449.326464][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.383295][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.390486][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.423997][T14453] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.431268][T14453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.664618][T17786] 8021q: VLANs not supported on wg0 [ 449.701176][T17787] netlink: 'syz.1.3187': attribute type 15 has an invalid length. [ 450.196515][T17802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.234780][ T5855] Bluetooth: hci2: command tx timeout [ 450.295678][T17580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.931744][T17580] veth0_vlan: entered promiscuous mode [ 450.964157][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'. [ 450.980613][T17580] veth1_vlan: entered promiscuous mode [ 451.116025][T17580] veth0_macvtap: entered promiscuous mode [ 451.157454][T17580] veth1_macvtap: entered promiscuous mode [ 451.233678][T17580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.308115][T17580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.386693][ T8182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.421864][ T8182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.509319][ T8182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.523820][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 451.531838][ T8182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.650538][T17840] netlink: 424 bytes leftover after parsing attributes in process `syz.2.3200'. [ 451.858862][T17841] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.903672][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.916316][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.058914][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.080750][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.235342][T17857] __nla_validate_parse: 2 callbacks suppressed [ 452.235364][T17857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3203'. [ 452.288072][T17858] netlink: 'syz.0.3202': attribute type 16 has an invalid length. [ 452.296464][T17858] netlink: 'syz.0.3202': attribute type 17 has an invalid length. [ 452.318838][ T5855] Bluetooth: hci2: command tx timeout [ 452.445825][T17858] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 452.481805][ T30] audit: type=1107 audit(1754018610.028:8): pid=17861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='LQiîiZ±NE—EGC2Þ>rÐhø‚­â3—üÝJ™'}C‰¦te¨ò iËæ&q÷_' [ 452.606782][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 452.683394][T17867] geneve2: entered promiscuous mode [ 452.699643][T17868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3205'. [ 452.732337][T17867] geneve2: entered allmulticast mode [ 452.762961][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 453.123140][T17876] wg1 speed is unknown, defaulting to 1000 [ 453.163251][T17876] lo speed is unknown, defaulting to 1000 [ 453.170855][T17876] wg1 speed is unknown, defaulting to 1000 [ 453.787096][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.804478][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.813002][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.822728][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.874756][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 454.084080][T17892] wg1 speed is unknown, defaulting to 1000 [ 454.123828][T17892] lo speed is unknown, defaulting to 1000 [ 454.131369][T17892] wg1 speed is unknown, defaulting to 1000 [ 454.304649][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 454.434648][T17904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 454.847294][T17926] netlink: 'syz.0.3222': attribute type 10 has an invalid length. [ 454.856609][T17926] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3222'. [ 454.881709][T17926] team0: entered promiscuous mode [ 454.887448][T17926] bridge0: port 1(team0) entered blocking state [ 454.894310][T17926] bridge0: port 1(team0) entered disabled state [ 454.900822][T17926] team0: entered allmulticast mode [ 454.988835][T17892] chnl_net:caif_netlink_parms(): no params data found [ 455.318171][T17940] mac80211_hwsim hwsim42 wlan1: entered allmulticast mode [ 456.002040][ T5852] Bluetooth: hci0: command tx timeout [ 456.028396][T17956] netlink: 'syz.1.3224': attribute type 10 has an invalid length. [ 456.186123][T17940] bridge_slave_0: left allmulticast mode [ 456.191848][T17940] bridge_slave_0: left promiscuous mode [ 456.399880][T17940] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.477607][T17940] bridge_slave_1: left allmulticast mode [ 456.484118][T17940] bridge_slave_1: left promiscuous mode [ 456.489954][T17940] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.606201][T17940] bond0: (slave bond_slave_0): Releasing backup interface [ 456.653444][T17940] bond0: (slave bond_slave_1): Releasing backup interface [ 456.723122][T17940] team0: Port device team_slave_0 removed [ 456.755678][T17940] team0: Port device team_slave_1 removed [ 456.799922][T17940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.831944][T17940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.907886][T17940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.925923][T17940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.004591][T17956] mac80211_hwsim hwsim42 wlan1: left allmulticast mode [ 457.036824][T17956] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 457.072640][T17892] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.093369][T17892] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.123163][T17892] bridge_slave_0: entered allmulticast mode [ 457.131197][T17892] bridge_slave_0: entered promiscuous mode [ 457.271371][T17892] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.292358][T17892] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.309954][T17892] bridge_slave_1: entered allmulticast mode [ 457.340635][T17892] bridge_slave_1: entered promiscuous mode [ 457.536183][T17892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.580785][T17892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.600602][T14453] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 457.654352][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3227'. [ 457.722471][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3227'. [ 457.851223][T17892] team0: Port device team_slave_0 added [ 457.870033][T17981] wg1 speed is unknown, defaulting to 1000 [ 457.879232][T17892] team0: Port device team_slave_1 added [ 457.894324][T17786] Set syz1 is full, maxelem 65536 reached [ 457.963296][T17981] lo speed is unknown, defaulting to 1000 [ 457.970874][T17981] wg1 speed is unknown, defaulting to 1000 [ 458.016817][T17892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.056453][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.092169][ T5852] Bluetooth: hci0: command tx timeout [ 458.112090][T17892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.187325][T17892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.205874][T17892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 458.252920][T17892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.465750][T17995] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3231'. [ 458.523762][T17892] hsr_slave_0: entered promiscuous mode [ 458.530524][T17892] hsr_slave_1: entered promiscuous mode [ 458.553017][T17892] debugfs: 'hsr0' already exists in 'hsr' [ 458.559807][T17892] Cannot create hsr debugfs directory [ 458.843628][T18004] netlink: 'syz.3.3233': attribute type 32 has an invalid length. [ 459.085795][T17892] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.188487][T17892] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.287705][T17892] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.381544][T17892] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.650836][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 459.700374][T18025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3239'. [ 459.815358][T17892] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 459.840528][T17892] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 459.889518][T17892] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 459.913452][T17892] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 460.150063][ T5852] Bluetooth: hci0: command tx timeout [ 460.568921][T17892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.598795][T18045] netlink: 209588 bytes leftover after parsing attributes in process `syz.4.3242'. [ 460.651148][T17892] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.710714][ T6040] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.717966][ T6040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.764384][T14450] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.771572][T14450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.069414][T18057] wg1 speed is unknown, defaulting to 1000 [ 461.135739][T18057] lo speed is unknown, defaulting to 1000 [ 461.187673][T18057] wg1 speed is unknown, defaulting to 1000 [ 462.082547][T17892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.225499][ T5852] Bluetooth: hci0: command tx timeout [ 462.360288][T17892] veth0_vlan: entered promiscuous mode [ 462.420446][T17892] veth1_vlan: entered promiscuous mode [ 462.465106][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 462.491285][T18120] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3261'. [ 462.511072][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3262'. [ 462.515976][T17892] veth0_macvtap: entered promiscuous mode [ 462.523400][T18115] netlink: 'syz.0.3262': attribute type 6 has an invalid length. [ 462.551654][T17892] veth1_macvtap: entered promiscuous mode [ 462.591863][T18115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3262'. [ 462.593637][T14453] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.601285][T18115] netlink: 'syz.0.3262': attribute type 6 has an invalid length. [ 462.619366][T14453] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.649221][T14453] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.663683][T14453] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 462.720870][T17892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.762495][T17892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 462.874003][ T3475] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.928616][ T3475] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.951969][ T3475] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.981389][ T3475] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.317645][ T8177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.357942][ T8177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.381243][ T3542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.421151][ T3542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.706197][T18153] __nla_validate_parse: 1 callbacks suppressed [ 463.706217][T18153] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3206'. [ 463.786534][T18158] netlink: 'syz.1.3271': attribute type 21 has an invalid length. [ 463.835359][T18150] wg1 speed is unknown, defaulting to 1000 [ 463.852947][T18150] lo speed is unknown, defaulting to 1000 [ 463.858885][T18158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3271'. [ 463.875520][T18150] wg1 speed is unknown, defaulting to 1000 [ 464.087416][T18172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3277'. [ 464.520055][T18194] netlink: 'syz.2.3282': attribute type 1 has an invalid length. [ 464.686929][T18198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.714381][T18198] batadv_slave_1: entered promiscuous mode [ 464.737724][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 464.741245][T18198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.775868][T18198] bridge0: port 3(batadv_slave_1) entered blocking state [ 464.786415][T18198] bridge0: port 3(batadv_slave_1) entered disabled state [ 464.786936][ T30] audit: type=1800 audit(1754018622.338:9): pid=18179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3276" name="memory.events" dev="tmpfs" ino=286 res=0 errno=0 [ 464.794688][T18198] batadv_slave_1: entered allmulticast mode [ 464.933851][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 464.981242][T18203] wg1 speed is unknown, defaulting to 1000 [ 465.026163][T18201] IPv6: Can't replace route, no match found [ 465.071696][T18204] batadv_slave_0 (unregistering): left promiscuous mode [ 465.158540][T18203] lo speed is unknown, defaulting to 1000 [ 465.194119][T18203] wg1 speed is unknown, defaulting to 1000 [ 465.315927][T18221] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3288'. [ 466.322676][T18258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3296'. [ 466.383632][T18258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3296'. [ 466.448058][T18268] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3297'. [ 466.469297][T18268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3297'. [ 466.481514][T18271] netlink: 'syz.2.3296': attribute type 13 has an invalid length. [ 466.493922][T18271] netlink: 'syz.2.3296': attribute type 17 has an invalid length. [ 466.886061][T18271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.020715][T18275] wg1 speed is unknown, defaulting to 1000 [ 467.104331][T18275] lo speed is unknown, defaulting to 1000 [ 467.196919][T18275] wg1 speed is unknown, defaulting to 1000 [ 467.204291][T18298] netlink: 'syz.1.3308': attribute type 1 has an invalid length. [ 467.558643][T18306] netlink: 'syz.4.3310': attribute type 20 has an invalid length. [ 467.853742][T18318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.734902][T18361] __nla_validate_parse: 8 callbacks suppressed [ 468.734924][T18361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3328'. [ 468.790225][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'. [ 469.345632][T18383] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3333'. [ 469.383378][T18383] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 469.462925][T18383] tap0: tun_chr_ioctl cmd 1074025677 [ 469.482439][T18383] tap0: linktype set to 769 [ 469.627489][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807b107800: rx timeout, send abort [ 469.638551][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b107800: 0x0ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 469.761686][T18403] IPVS: length: 199 != 24 [ 469.799876][T18401] wg1 speed is unknown, defaulting to 1000 [ 469.843404][T18401] lo speed is unknown, defaulting to 1000 [ 469.886154][T18401] wg1 speed is unknown, defaulting to 1000 [ 469.903457][T18410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3340'. [ 470.059439][T18417] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3337'. [ 470.425559][T18422] batadv0: entered promiscuous mode [ 470.927308][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807b105000: rx timeout, send abort [ 470.935902][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807b105000: 0x0ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 471.121593][T18454] Bluetooth: MGMT ver 1.23 [ 471.165439][T18452] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 471.447837][ T7797] IPVS: starting estimator thread 0... [ 471.554112][T18474] IPVS: using max 25 ests per chain, 60000 per kthread [ 471.580857][T18471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3355'. [ 471.598681][T18471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3355'. [ 471.896276][T18494] geneve2: entered allmulticast mode [ 472.003706][T18499] netlink: 'syz.3.3363': attribute type 1 has an invalid length. [ 472.011717][T18499] netlink: 12310 bytes leftover after parsing attributes in process `syz.3.3363'. [ 472.028619][T18500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3362'. [ 472.123519][T18504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3364'. [ 472.124278][T18500] ip6tnl1: entered promiscuous mode [ 472.153143][T18500] ip6tnl1: entered allmulticast mode [ 472.396087][T18519] ip6tnl1: entered promiscuous mode [ 472.401679][T18519] ip6tnl1: entered allmulticast mode [ 472.708819][T18529] netlink: 'syz.1.3372': attribute type 1 has an invalid length. [ 472.775390][T18529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.834520][T18533] vlan2: entered promiscuous mode [ 472.847806][T18533] bond1: entered promiscuous mode [ 472.853717][T18533] vlan2: entered allmulticast mode [ 472.860250][T18533] bond1: entered allmulticast mode [ 473.013799][T18536] block nbd0: server does not support multiple connections per device. [ 473.027754][T18536] block nbd0: shutting down sockets [ 473.094637][T18549] tipc: Enabling of bearer rejected, failed to enable media [ 473.192042][T18549] bond1 (unregistering): Released all slaves [ 473.268517][T18556] sctp: [Deprecated]: syz.3.3381 (pid 18556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 473.268517][T18556] Use struct sctp_sack_info instead [ 473.275608][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 473.480079][T18561] veth1_macvtap: left promiscuous mode [ 473.769788][T18569] __nla_validate_parse: 6 callbacks suppressed [ 473.769812][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3386'. [ 474.011319][T18583] !Dÿ: renamed from gre0 (while UP) [ 474.228939][T18589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3384'. [ 474.698888][T18592] macsec1: entered promiscuous mode [ 474.725299][T18592] macsec1: entered allmulticast mode [ 474.852731][T18600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 475.239415][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3396'. [ 475.289699][T18616] gretap0: entered promiscuous mode [ 475.319774][T18616] macsec1: entered promiscuous mode [ 475.386862][T18624] netlink: 'syz.4.3399': attribute type 9 has an invalid length. [ 475.416112][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3399'. [ 475.464991][T18624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3399'. [ 475.492846][T18626] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 475.500531][T18624] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3399'. [ 475.513938][T18626] macvtap1: entered promiscuous mode [ 475.551569][T18626] mac80211_hwsim hwsim40 wlan1: left promiscuous mode [ 475.817078][T18635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3401'. [ 476.143731][T18651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3406'. [ 476.371293][T18657] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.3407'. [ 476.552803][T18657] pim6reg1: entered promiscuous mode [ 476.582019][T18657] pim6reg1: entered allmulticast mode [ 477.345460][T18692] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 477.368363][T18681] veth3: entered promiscuous mode [ 477.465615][T18681] bond0: (slave veth3): Enslaving as an active interface with an up link [ 477.496506][T18687] !: renamed from dummy0 (while UP) [ 477.559295][T18694] syzkaller1: entered promiscuous mode [ 477.573812][T18694] syzkaller1: entered allmulticast mode [ 477.730283][T18692] wg1 speed is unknown, defaulting to 1000 [ 477.764771][T18692] lo speed is unknown, defaulting to 1000 [ 477.801813][T18692] wg1 speed is unknown, defaulting to 1000 [ 477.908164][T18708] sctp: [Deprecated]: syz.2.3423 (pid 18708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.908164][T18708] Use struct sctp_sack_info instead [ 478.073705][T18716] netlink: 'syz.1.3424': attribute type 1 has an invalid length. [ 478.279750][T18733] netlink: 'syz.1.3429': attribute type 1 has an invalid length. [ 478.510585][T18733] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.539336][T18735] bond2: (slave bridge2): making interface the new active one [ 478.549664][T18735] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 478.571390][T18736] bond2: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 478.659624][T18740] netlink: 'syz.2.3430': attribute type 12 has an invalid length. [ 478.696737][T18744] syzkaller1: entered promiscuous mode [ 478.716547][T18744] syzkaller1: entered allmulticast mode [ 479.331052][T18765] wg1 speed is unknown, defaulting to 1000 [ 479.331073][T18772] netlink: 'syz.2.3440': attribute type 10 has an invalid length. [ 479.371442][T18765] lo speed is unknown, defaulting to 1000 [ 479.392684][T18778] netlink: 'syz.2.3440': attribute type 10 has an invalid length. [ 479.420788][T18765] wg1 speed is unknown, defaulting to 1000 [ 479.939878][T18795] __nla_validate_parse: 4 callbacks suppressed [ 479.939916][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3445'. [ 479.972011][T18787] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3445'. [ 480.183224][T18812] netlink: 4132 bytes leftover after parsing attributes in process `syz.2.3450'. [ 480.391063][T18800] netlink: 'syz.0.3447': attribute type 12 has an invalid length. [ 480.400115][T18800] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.3447'. [ 480.550407][T18823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.601194][T18835] tipc: Enabling of bearer rejected, failed to enable media [ 480.653997][T18823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3452'. [ 480.704976][T18836] netlink: 'syz.4.3455': attribute type 1 has an invalid length. [ 480.775323][T18836] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3455'. [ 480.974999][T18853] netlink: 'syz.3.3460': attribute type 4 has an invalid length. [ 481.027043][T18855] netlink: 'syz.3.3460': attribute type 4 has an invalid length. [ 481.420342][T18877] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3463'. [ 481.421631][T18876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3464'. [ 481.593872][T18872] wg1 speed is unknown, defaulting to 1000 [ 481.616015][T18872] lo speed is unknown, defaulting to 1000 [ 481.660554][T18872] wg1 speed is unknown, defaulting to 1000 [ 481.793170][T18882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 481.888383][T18889] netlink: 'syz.0.3468': attribute type 2 has an invalid length. [ 481.936811][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3466'. [ 483.033187][ T10] page_pool_release_retry() stalled pool shutdown: id 48, 1216 inflight 180 sec [ 483.573310][T18952] netlink: 'syz.2.3483': attribute type 1 has an invalid length. [ 483.939135][ T30] audit: type=1800 audit(1754018641.488:10): pid=18942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3480" name="cgroup.controllers" dev="tmpfs" ino=768 res=0 errno=0 [ 485.079130][T18984] netlink: 'syz.0.3495': attribute type 2 has an invalid length. [ 485.269195][T18996] __nla_validate_parse: 1 callbacks suppressed [ 485.269215][T18996] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3498'. [ 486.181540][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3504'. [ 486.213546][T19019] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3504'. [ 486.251375][T19019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 486.333212][T19019] bridge0: entered promiscuous mode [ 486.339166][T19019] macvtap1: entered promiscuous mode [ 486.414178][T19019] macvtap1: entered allmulticast mode [ 486.419617][T19019] bridge0: entered allmulticast mode [ 486.495915][T19035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.589506][T19037] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 486.691811][T19037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 487.230025][T19056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3515'. [ 487.339949][T19051] vlan2: entered allmulticast mode [ 487.458440][T19061] netlink: 'syz.4.3516': attribute type 7 has an invalid length. [ 487.489106][T19061] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3516'. [ 487.499662][T19061] netem: unknown loss type 13 [ 487.507021][T19061] netem: change failed [ 487.585085][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3518'. [ 487.719444][T19072] netlink: 'syz.4.3520': attribute type 2 has an invalid length. [ 487.893431][T19082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'. [ 487.951130][T19084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 488.079770][T19089] wg1 speed is unknown, defaulting to 1000 [ 488.088845][T19089] lo speed is unknown, defaulting to 1000 [ 488.099574][T19089] wg1 speed is unknown, defaulting to 1000 [ 488.131970][T19091] bridge3: entered promiscuous mode [ 488.137273][T19091] bridge3: entered allmulticast mode [ 488.414131][T19063] delete_channel: no stack [ 488.654984][T19108] tipc: Started in network mode [ 488.659911][T19108] tipc: Node identity 96765688fddb, cluster identity 4711 [ 488.687817][T19108] tipc: Enabled bearer , priority 0 [ 488.712859][T19112] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3533'. [ 488.743514][T19112] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3533'. [ 488.798376][T19118] netlink: 'syz.2.3531': attribute type 2 has an invalid length. [ 488.858599][T19108] syzkaller0: entered promiscuous mode [ 488.864496][T19108] syzkaller0: entered allmulticast mode [ 488.871441][T19108] tipc: Resetting bearer [ 489.111132][T19136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 489.155250][T19136] mac80211_hwsim hwsim42 wlan1: entered promiscuous mode [ 489.165984][T19136] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 489.184408][T19136] bond3: (slave macvlan2): Enslaving as a backup interface with an up link [ 489.211127][T19141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.221257][T14450] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 489.255035][T19136] bond0: (slave wlan1): Releasing backup interface [ 489.266235][T19136] mac80211_hwsim hwsim42 wlan1: left promiscuous mode [ 489.290891][T19136] bond2: (slave bridge2): Releasing active interface [ 489.305682][T19136] bond3: (slave macvlan2): Removing an active aggregator [ 489.315027][T19136] bond3: (slave macvlan2): Releasing backup interface [ 489.470283][T19107] tipc: Resetting bearer [ 489.762211][ T7797] tipc: Node number set to 1806521992 [ 491.676113][T19107] tipc: Disabling bearer [ 491.839997][T19158] gretap0: entered promiscuous mode [ 491.871790][T19158] gretap0: left promiscuous mode [ 491.956761][T19170] __nla_validate_parse: 5 callbacks suppressed [ 491.956780][T19170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3550'. [ 491.983912][T19171] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3552'. [ 492.001046][T19170] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3550'. [ 492.011134][T19171] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3552'. [ 492.182464][T19180] tipc: Started in network mode [ 492.187413][T19180] tipc: Node identity eef51834850c, cluster identity 4711 [ 492.206167][T19180] tipc: Enabled bearer , priority 0 [ 492.247739][T19181] wg1 speed is unknown, defaulting to 1000 [ 492.276412][T19189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.283805][T19188] syzkaller0: entered promiscuous mode [ 492.291772][T19188] syzkaller0: entered allmulticast mode [ 492.348602][T19181] lo speed is unknown, defaulting to 1000 [ 492.359928][T19181] wg1 speed is unknown, defaulting to 1000 [ 492.454018][T19193] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3558'. [ 492.530970][T19198] netlink: 256 bytes leftover after parsing attributes in process `syz.1.3559'. [ 492.686642][T19179] tipc: Resetting bearer [ 492.740266][T19179] tipc: Disabling bearer [ 493.061436][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 493.183464][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 493.193116][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 493.211609][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 493.407353][T19234] openvswitch: netlink: Key 6 has unexpected len 4096 expected 2 [ 493.737807][T19245] openvswitch: netlink: IP tunnel dst address not specified [ 493.763233][T19245] netlink: 'syz.4.3569': attribute type 16 has an invalid length. [ 493.835157][T19248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.856870][T19254] sctp: [Deprecated]: syz.2.3570 (pid 19254) Use of int in maxseg socket option. [ 493.856870][T19254] Use struct sctp_assoc_value instead [ 493.888179][T19253] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 498.002771][T19299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.020966][T19302] __nla_validate_parse: 65 callbacks suppressed [ 498.020988][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3585'. [ 498.238105][T19317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3590'. [ 498.295141][T19317] netlink: 'syz.3.3590': attribute type 4 has an invalid length. [ 498.440187][T19319] wg1 speed is unknown, defaulting to 1000 [ 498.461913][T19319] lo speed is unknown, defaulting to 1000 [ 498.471311][T19319] wg1 speed is unknown, defaulting to 1000 [ 498.768826][T19344] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3597'. [ 499.209861][T19352] netlink: 'syz.3.3598': attribute type 1 has an invalid length. [ 499.241997][T19352] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3598'. [ 499.251094][T19352] netlink: 'syz.3.3598': attribute type 2 has an invalid length. [ 499.339901][T19352] netlink: 'syz.3.3598': attribute type 1 has an invalid length. [ 499.364323][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3601'. [ 499.480092][T19365] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3602'. [ 499.500532][T19369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3603'. [ 499.526929][T19366] Â: renamed from pim6reg1 [ 499.530899][T19369] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3603'. [ 499.931658][T19370] wg1 speed is unknown, defaulting to 1000 [ 499.949726][T19382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.986815][T19370] lo speed is unknown, defaulting to 1000 [ 500.020681][T19370] wg1 speed is unknown, defaulting to 1000 [ 500.146983][T19385] tipc: Enabling of bearer rejected, failed to enable media [ 500.170273][T19385] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 500.374553][T19399] netlink: 'syz.2.3611': attribute type 1 has an invalid length. [ 500.456663][T19390] wg1 speed is unknown, defaulting to 1000 [ 500.463749][T19399] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 500.666456][T19390] lo speed is unknown, defaulting to 1000 [ 500.697886][T19390] wg1 speed is unknown, defaulting to 1000 [ 500.942759][T19418] syz_tun: entered allmulticast mode [ 501.129041][T19423] wg1 speed is unknown, defaulting to 1000 [ 501.137189][T19423] lo speed is unknown, defaulting to 1000 [ 501.145541][T19423] wg1 speed is unknown, defaulting to 1000 [ 501.241080][T19416] syz_tun: left allmulticast mode [ 501.377852][T19429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3621'. [ 501.792537][T19448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3627'. [ 501.824301][ T9] page_pool_release_retry() stalled pool shutdown: id 39, 3329 inflight 242 sec [ 501.923325][T19453] team0: entered promiscuous mode [ 501.953588][T19453] team_slave_0: entered promiscuous mode [ 501.959536][T19453] team_slave_1: entered promiscuous mode [ 502.303700][T19471] netlink: 'syz.2.3631': attribute type 10 has an invalid length. [ 502.336527][T19454] team0 (unregistering): left promiscuous mode [ 502.361144][T19454] team_slave_0: left promiscuous mode [ 502.379295][T19454] team_slave_1: left promiscuous mode [ 502.432837][T19454] team0 (unregistering): Port device team_slave_0 removed [ 502.495308][T19454] team0 (unregistering): Port device team_slave_1 removed [ 502.636627][T19471] veth0_vlan: left promiscuous mode [ 502.644640][T19471] veth0_vlan: entered promiscuous mode [ 502.669852][T19471] team0: Device veth0_vlan failed to register rx_handler [ 503.328517][T19510] siw: device registration error -23 [ 503.348035][T19510] __nla_validate_parse: 5 callbacks suppressed [ 503.348059][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 503.430144][T19510] wg1: entered promiscuous mode [ 503.442759][T19510] wg1: entered allmulticast mode [ 503.746376][T19536] veth1_macvtap: left promiscuous mode [ 503.752412][T19536] macsec0: entered allmulticast mode [ 503.787618][T19536] veth1_macvtap: entered promiscuous mode [ 503.800371][T19536] veth1_macvtap: entered allmulticast mode [ 503.817209][T19536] macsec0: left allmulticast mode [ 503.837298][T19536] veth1_macvtap: left allmulticast mode [ 503.906417][T19538] wg1 speed is unknown, defaulting to 1000 [ 503.947016][T19538] lo speed is unknown, defaulting to 1000 [ 503.993040][T19546] IPv6: syztnl1: Disabled Multicast RS [ 503.993091][T19547] delete_channel: no stack [ 504.015173][T19538] wg1 speed is unknown, defaulting to 1000 [ 504.476479][T19574] netlink: 'syz.1.3657': attribute type 2 has an invalid length. [ 504.512984][T19574] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3657'. [ 504.661861][T19583] tipc: Started in network mode [ 504.667211][T19583] tipc: Node identity 5a44d19860f, cluster identity 4711 [ 504.692326][T19583] tipc: Enabled bearer , priority 0 [ 504.745909][T19584] syzkaller0: entered promiscuous mode [ 504.751445][T19584] syzkaller0: entered allmulticast mode [ 504.774102][T19538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3649'. [ 504.885604][T19599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3663'. [ 505.017437][T19600] tipc: Resetting bearer [ 505.048087][T19582] tipc: Resetting bearer [ 505.113052][T19582] tipc: Disabling bearer [ 505.274990][T19608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3665'. [ 505.558719][T19613] syzkaller0: entered promiscuous mode [ 505.573181][T19613] syzkaller0: entered allmulticast mode [ 506.295464][T19661] sctp: [Deprecated]: syz.0.3678 (pid 19661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 506.295464][T19661] Use struct sctp_sack_info instead [ 506.320919][T19663] tipc: Enabled bearer , priority 0 [ 506.331855][T19663] syzkaller0: entered promiscuous mode [ 506.342965][T19663] syzkaller0: entered allmulticast mode [ 506.389107][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3680'. [ 506.459469][T19663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3680'. [ 506.484530][T19669] wg1 speed is unknown, defaulting to 1000 [ 506.500001][T19663] bridge4: entered promiscuous mode [ 506.507996][T19663] macsec2: entered promiscuous mode [ 506.509830][T19670] sock: sock_set_timeout: `syz.2.3682' (pid 19670) tries to set negative timeout [ 506.513523][T19663] macsec2: entered allmulticast mode [ 506.513543][T19663] bridge4: entered allmulticast mode [ 506.515920][T19663] bridge4: port 1(macsec2) entered blocking state [ 506.540983][T19663] bridge4: port 1(macsec2) entered disabled state [ 506.554548][T19663] bridge4: left allmulticast mode [ 506.559892][T19663] bridge4: left promiscuous mode [ 506.595644][T19669] lo speed is unknown, defaulting to 1000 [ 506.614778][T19669] wg1 speed is unknown, defaulting to 1000 [ 506.629500][T19675] tipc: Resetting bearer [ 506.652767][T19667] delete_channel: no stack [ 506.747163][T19662] tipc: Resetting bearer [ 506.805444][T19662] tipc: Disabling bearer [ 506.959289][T19686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3685'. [ 507.013123][T19689] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3685'. [ 507.120845][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3688'. [ 507.425040][ T6040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.464097][ T6040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.849756][T19726] Unsupported ieee802154 address type: 0 [ 508.251082][T19740] openvswitch: netlink: Key type 16144 is out of range max 32 [ 508.293004][T19734] hsr_slave_1 (unregistering): left promiscuous mode [ 508.719155][T19753] syzkaller0: entered promiscuous mode [ 508.742437][T19753] syzkaller0: entered allmulticast mode [ 508.849502][T19759] wg1 speed is unknown, defaulting to 1000 [ 508.906032][T19759] lo speed is unknown, defaulting to 1000 [ 508.916847][T19772] __nla_validate_parse: 4 callbacks suppressed [ 508.916868][T19772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3713'. [ 509.034651][T19773] netlink: 'syz.2.3710': attribute type 21 has an invalid length. [ 509.058493][T19777] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3712'. [ 509.114816][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3710'. [ 511.009507][T19759] wg1 speed is unknown, defaulting to 1000 [ 511.020270][T19778] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3713'. [ 511.030330][T19773] netlink: 'syz.2.3710': attribute type 6 has an invalid length. [ 511.062466][T19773] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3710'. [ 511.439997][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3720'. [ 511.478735][T19811] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 511.597629][T19816] netlink: 'syz.1.3721': attribute type 4 has an invalid length. [ 511.670486][T19818] netlink: 'syz.1.3721': attribute type 4 has an invalid length. [ 511.695977][T19818] netlink: 'syz.1.3721': attribute type 4 has an invalid length. [ 511.946157][T19825] netlink: 'syz.0.3724': attribute type 1 has an invalid length. [ 512.000959][T19825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 512.104482][T19825] veth3: entered promiscuous mode [ 512.258107][T19838] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3729'. [ 512.438047][T19845] pimreg3: entered allmulticast mode [ 512.636335][T19849] wg1 speed is unknown, defaulting to 1000 [ 512.694644][T19849] lo speed is unknown, defaulting to 1000 [ 512.720208][T19849] wg1 speed is unknown, defaulting to 1000 [ 512.855176][T19868] netlink: 'syz.1.3735': attribute type 1 has an invalid length. [ 512.932101][T19868] netlink: 'syz.1.3735': attribute type 2 has an invalid length. [ 513.688896][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3741'. [ 513.853818][T19893] pim6reg1: entered promiscuous mode [ 513.859218][T19893] pim6reg1: entered allmulticast mode [ 513.945388][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 514.266905][T19918] wg1 speed is unknown, defaulting to 1000 [ 514.275709][T19923] FAULT_INJECTION: forcing a failure. [ 514.275709][T19923] name failslab, interval 1, probability 0, space 0, times 0 [ 514.280226][T19918] lo speed is unknown, defaulting to 1000 [ 514.306247][T19923] CPU: 0 UID: 0 PID: 19923 Comm: syz.2.3753 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 514.306280][T19923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 514.306293][T19923] Call Trace: [ 514.306301][T19923] [ 514.306311][T19923] dump_stack_lvl+0x189/0x250 [ 514.306343][T19923] ? __pfx____ratelimit+0x10/0x10 [ 514.306374][T19923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.306396][T19923] ? __pfx__printk+0x10/0x10 [ 514.306429][T19923] ? __pfx___might_resched+0x10/0x10 [ 514.306460][T19923] ? fs_reclaim_acquire+0x7d/0x100 [ 514.306488][T19923] should_fail_ex+0x414/0x560 [ 514.306527][T19923] should_failslab+0xa8/0x100 [ 514.306549][T19923] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 514.306581][T19923] ? __alloc_skb+0x112/0x2d0 [ 514.306619][T19923] __alloc_skb+0x112/0x2d0 [ 514.306657][T19923] netlink_ack+0x146/0xa50 [ 514.306685][T19923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.306714][T19923] ? __asan_memcpy+0x40/0x70 [ 514.306740][T19923] ? __pfx_ref_tracker_free+0x10/0x10 [ 514.306771][T19923] netlink_rcv_skb+0x28c/0x470 [ 514.306800][T19923] ? __lock_acquire+0xab9/0xd20 [ 514.306831][T19923] ? __pfx_genl_rcv_msg+0x10/0x10 [ 514.306858][T19923] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.306912][T19923] ? down_read+0x1ad/0x2e0 [ 514.306945][T19923] genl_rcv+0x28/0x40 [ 514.306968][T19923] netlink_unicast+0x82c/0x9e0 [ 514.307008][T19923] ? __pfx_netlink_unicast+0x10/0x10 [ 514.307041][T19923] ? netlink_sendmsg+0x642/0xb30 [ 514.307071][T19923] ? skb_put+0x11b/0x210 [ 514.307095][T19923] netlink_sendmsg+0x805/0xb30 [ 514.307139][T19923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.307186][T19923] ? aa_sock_msg_perm+0x94/0x160 [ 514.307218][T19923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 514.307241][T19923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.307275][T19923] __sock_sendmsg+0x219/0x270 [ 514.307307][T19923] ____sys_sendmsg+0x505/0x830 [ 514.307336][T19923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.307370][T19923] ? import_iovec+0x74/0xa0 [ 514.307404][T19923] ___sys_sendmsg+0x21f/0x2a0 [ 514.307429][T19923] ? __pfx____sys_sendmsg+0x10/0x10 [ 514.307510][T19923] ? __fget_files+0x2a/0x420 [ 514.307529][T19923] ? __fget_files+0x3a0/0x420 [ 514.307563][T19923] __x64_sys_sendmsg+0x19b/0x260 [ 514.307590][T19923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 514.307624][T19923] ? __pfx_ksys_write+0x10/0x10 [ 514.307653][T19923] ? rcu_is_watching+0x15/0xb0 [ 514.307694][T19923] ? do_syscall_64+0xbe/0x3b0 [ 514.307730][T19923] do_syscall_64+0xfa/0x3b0 [ 514.307760][T19923] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.307798][T19923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.307820][T19923] ? clear_bhb_loop+0x60/0xb0 [ 514.307847][T19923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.307873][T19923] RIP: 0033:0x7f3a4b78eb69 [ 514.307898][T19923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.307917][T19923] RSP: 002b:00007f3a4c531038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.307942][T19923] RAX: ffffffffffffffda RBX: 00007f3a4b9b5fa0 RCX: 00007f3a4b78eb69 [ 514.307958][T19923] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 514.307972][T19923] RBP: 00007f3a4c531090 R08: 0000000000000000 R09: 0000000000000000 [ 514.307986][T19923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.307998][T19923] R13: 0000000000000000 R14: 00007f3a4b9b5fa0 R15: 00007fff024c1458 [ 514.308033][T19923] [ 514.308473][T19918] wg1 speed is unknown, defaulting to 1000 [ 514.981844][T19948] netlink: 'syz.3.3757': attribute type 1 has an invalid length. [ 515.090506][T19948] 8021q: VLANs not supported on ip6gre0 [ 515.278554][T19940] wg1 speed is unknown, defaulting to 1000 [ 515.307914][T19940] lo speed is unknown, defaulting to 1000 [ 515.335786][T19940] wg1 speed is unknown, defaulting to 1000 [ 515.356942][T19954] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3761'. [ 515.517153][T19960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3763'. [ 515.526700][T19960] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3763'. [ 515.543768][T19960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3763'. [ 515.822940][T19960] netlink: 'syz.1.3763': attribute type 1 has an invalid length. [ 515.874876][T19960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'. [ 516.100668][T19972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3764'. [ 516.129873][T19961] syzkaller0: entered promiscuous mode [ 516.135788][T19961] syzkaller0: entered allmulticast mode [ 516.282701][T19970] FAULT_INJECTION: forcing a failure. [ 516.282701][T19970] name failslab, interval 1, probability 0, space 0, times 0 [ 516.305050][T19970] CPU: 0 UID: 0 PID: 19970 Comm: syz.4.3765 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 516.305086][T19970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 516.305099][T19970] Call Trace: [ 516.305108][T19970] [ 516.305118][T19970] dump_stack_lvl+0x189/0x250 [ 516.305145][T19970] ? __pfx____ratelimit+0x10/0x10 [ 516.305175][T19970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.305197][T19970] ? __pfx__printk+0x10/0x10 [ 516.305230][T19970] ? __pfx___might_resched+0x10/0x10 [ 516.305261][T19970] ? fs_reclaim_acquire+0x7d/0x100 [ 516.305289][T19970] should_fail_ex+0x414/0x560 [ 516.305330][T19970] should_failslab+0xa8/0x100 [ 516.305351][T19970] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 516.305381][T19970] ? __alloc_skb+0x112/0x2d0 [ 516.305418][T19970] __alloc_skb+0x112/0x2d0 [ 516.305455][T19970] netlink_ack+0x146/0xa50 [ 516.305483][T19970] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.305515][T19970] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 516.305554][T19970] netlink_rcv_skb+0x28c/0x470 [ 516.305583][T19970] ? __lock_acquire+0xab9/0xd20 [ 516.305613][T19970] ? __pfx_genl_rcv_msg+0x10/0x10 [ 516.305639][T19970] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 516.305691][T19970] ? down_read+0x1ad/0x2e0 [ 516.305715][T19970] genl_rcv+0x28/0x40 [ 516.305737][T19970] netlink_unicast+0x82c/0x9e0 [ 516.305774][T19970] ? __pfx_netlink_unicast+0x10/0x10 [ 516.305805][T19970] ? netlink_sendmsg+0x642/0xb30 [ 516.305836][T19970] ? skb_put+0x11b/0x210 [ 516.305876][T19970] netlink_sendmsg+0x805/0xb30 [ 516.305918][T19970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.305952][T19970] ? aa_sock_msg_perm+0x94/0x160 [ 516.305992][T19970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 516.306016][T19970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 516.306053][T19970] __sock_sendmsg+0x219/0x270 [ 516.306082][T19970] ____sys_sendmsg+0x505/0x830 [ 516.306106][T19970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 516.306132][T19970] ? import_iovec+0x74/0xa0 [ 516.306159][T19970] ___sys_sendmsg+0x21f/0x2a0 [ 516.306179][T19970] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.306230][T19970] ? __fget_files+0x2a/0x420 [ 516.306246][T19970] ? __fget_files+0x3a0/0x420 [ 516.306272][T19970] __x64_sys_sendmsg+0x19b/0x260 [ 516.306293][T19970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.306319][T19970] ? __pfx_ksys_write+0x10/0x10 [ 516.306342][T19970] ? rcu_is_watching+0x15/0xb0 [ 516.306373][T19970] ? do_syscall_64+0xbe/0x3b0 [ 516.306403][T19970] do_syscall_64+0xfa/0x3b0 [ 516.306427][T19970] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.306451][T19970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.306468][T19970] ? clear_bhb_loop+0x60/0xb0 [ 516.306500][T19970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.306516][T19970] RIP: 0033:0x7f9f3618eb69 [ 516.306531][T19970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.306563][T19970] RSP: 002b:00007f9f36fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.306583][T19970] RAX: ffffffffffffffda RBX: 00007f9f363b5fa0 RCX: 00007f9f3618eb69 [ 516.306596][T19970] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 516.306607][T19970] RBP: 00007f9f36fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 516.306617][T19970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.306627][T19970] R13: 0000000000000000 R14: 00007f9f363b5fa0 R15: 00007ffe1afb75a8 [ 516.306654][T19970] [ 516.885114][T19986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3767'. [ 516.896412][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3767'. [ 516.966525][T19989] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 516.968614][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3767'. [ 518.984077][T20006] __nla_validate_parse: 2 callbacks suppressed [ 518.984099][T20006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3772'. [ 519.059462][T20006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3772'. [ 519.079752][T20017] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 519.105986][T20016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.213567][T20020] netlink: 'syz.1.3774': attribute type 2 has an invalid length. [ 519.223328][T20024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3776'. [ 519.252057][T20020] netlink: 'syz.1.3774': attribute type 1 has an invalid length. [ 519.320523][T20029] FAULT_INJECTION: forcing a failure. [ 519.320523][T20029] name failslab, interval 1, probability 0, space 0, times 0 [ 519.371232][T20029] CPU: 0 UID: 0 PID: 20029 Comm: syz.4.3778 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 519.371265][T20029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.371279][T20029] Call Trace: [ 519.371288][T20029] [ 519.371298][T20029] dump_stack_lvl+0x189/0x250 [ 519.371326][T20029] ? __pfx____ratelimit+0x10/0x10 [ 519.371358][T20029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.371381][T20029] ? __pfx__printk+0x10/0x10 [ 519.371404][T20029] ? genl_rcv+0x28/0x40 [ 519.371428][T20029] ? ____sys_sendmsg+0x505/0x830 [ 519.371449][T20029] ? __x64_sys_sendmsg+0x19b/0x260 [ 519.371485][T20029] should_fail_ex+0x414/0x560 [ 519.371526][T20029] should_failslab+0xa8/0x100 [ 519.371549][T20029] kmem_cache_alloc_noprof+0x73/0x3c0 [ 519.371581][T20029] ? skb_clone+0x212/0x3a0 [ 519.371610][T20029] skb_clone+0x212/0x3a0 [ 519.371640][T20029] __netlink_deliver_tap+0x404/0x850 [ 519.371687][T20029] ? netlink_deliver_tap+0x2e/0x1b0 [ 519.371722][T20029] netlink_deliver_tap+0x19c/0x1b0 [ 519.371756][T20029] netlink_sendskb+0x68/0x140 [ 519.371788][T20029] netlink_unicast+0x397/0x9e0 [ 519.371929][T20029] ? __asan_memcpy+0x40/0x70 [ 519.371968][T20029] ? __pfx_netlink_unicast+0x10/0x10 [ 519.372007][T20029] netlink_rcv_skb+0x28c/0x470 [ 519.372037][T20029] ? __lock_acquire+0xab9/0xd20 [ 519.372068][T20029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.372117][T20029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.372172][T20029] ? down_read+0x1ad/0x2e0 [ 519.372196][T20029] genl_rcv+0x28/0x40 [ 519.372219][T20029] netlink_unicast+0x82c/0x9e0 [ 519.372258][T20029] ? __pfx_netlink_unicast+0x10/0x10 [ 519.372290][T20029] ? netlink_sendmsg+0x642/0xb30 [ 519.372320][T20029] ? skb_put+0x11b/0x210 [ 519.372345][T20029] netlink_sendmsg+0x805/0xb30 [ 519.372402][T20029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.372438][T20029] ? aa_sock_msg_perm+0x94/0x160 [ 519.372468][T20029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.372493][T20029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.372525][T20029] __sock_sendmsg+0x219/0x270 [ 519.372557][T20029] ____sys_sendmsg+0x505/0x830 [ 519.372586][T20029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.372620][T20029] ? import_iovec+0x74/0xa0 [ 519.372654][T20029] ___sys_sendmsg+0x21f/0x2a0 [ 519.372679][T20029] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.372744][T20029] ? __fget_files+0x2a/0x420 [ 519.372763][T20029] ? __fget_files+0x3a0/0x420 [ 519.372796][T20029] __x64_sys_sendmsg+0x19b/0x260 [ 519.372840][T20029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.372875][T20029] ? __pfx_ksys_write+0x10/0x10 [ 519.372904][T20029] ? rcu_is_watching+0x15/0xb0 [ 519.372943][T20029] ? do_syscall_64+0xbe/0x3b0 [ 519.372998][T20029] do_syscall_64+0xfa/0x3b0 [ 519.373029][T20029] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.373059][T20029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.373088][T20029] ? clear_bhb_loop+0x60/0xb0 [ 519.373115][T20029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.373136][T20029] RIP: 0033:0x7f9f3618eb69 [ 519.373156][T20029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.373175][T20029] RSP: 002b:00007f9f36fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.373201][T20029] RAX: ffffffffffffffda RBX: 00007f9f363b5fa0 RCX: 00007f9f3618eb69 [ 519.373217][T20029] RDX: 0000000004040140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 519.373231][T20029] RBP: 00007f9f36fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 519.373245][T20029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.373258][T20029] R13: 0000000000000000 R14: 00007f9f363b5fa0 R15: 00007ffe1afb75a8 [ 519.373293][T20029] [ 519.769204][T20032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3780'. [ 519.781865][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3779'. [ 519.901111][T20033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3779'. [ 520.002806][T20033] siw: device registration error -23 [ 520.037381][T20045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.107427][T20047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3785'. [ 520.122588][T20047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3785'. [ 520.131694][T20047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3785'. [ 520.144231][T20047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3785'. [ 520.213300][T20047] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.221124][T20047] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.242190][T20051] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 520.255096][T20051] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 520.410839][T20056] netem: incorrect ge model size [ 520.425291][T20056] netem: change failed [ 520.666806][T20067] FAULT_INJECTION: forcing a failure. [ 520.666806][T20067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.714949][T20067] CPU: 1 UID: 0 PID: 20067 Comm: syz.2.3791 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 520.714986][T20067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 520.714999][T20067] Call Trace: [ 520.715007][T20067] [ 520.715017][T20067] dump_stack_lvl+0x189/0x250 [ 520.715045][T20067] ? __pfx____ratelimit+0x10/0x10 [ 520.715075][T20067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.715099][T20067] ? __pfx__printk+0x10/0x10 [ 520.715151][T20067] should_fail_ex+0x414/0x560 [ 520.715191][T20067] _copy_to_user+0x31/0xb0 [ 520.715224][T20067] simple_read_from_buffer+0xe1/0x170 [ 520.715263][T20067] proc_fail_nth_read+0x1b3/0x220 [ 520.715293][T20067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.715322][T20067] ? rw_verify_area+0x258/0x650 [ 520.715351][T20067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 520.715379][T20067] vfs_read+0x1fd/0x980 [ 520.715408][T20067] ? fdget_pos+0x247/0x320 [ 520.715433][T20067] ? __pfx___mutex_lock+0x10/0x10 [ 520.715466][T20067] ? __pfx_vfs_read+0x10/0x10 [ 520.715498][T20067] ? __fget_files+0x2a/0x420 [ 520.715523][T20067] ? __fget_files+0x3a0/0x420 [ 520.715542][T20067] ? __fget_files+0x2a/0x420 [ 520.715573][T20067] ksys_read+0x145/0x250 [ 520.715606][T20067] ? __pfx_ksys_read+0x10/0x10 [ 520.715632][T20067] ? rcu_is_watching+0x15/0xb0 [ 520.715672][T20067] ? do_syscall_64+0xbe/0x3b0 [ 520.715717][T20067] do_syscall_64+0xfa/0x3b0 [ 520.715746][T20067] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.715775][T20067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.715796][T20067] ? clear_bhb_loop+0x60/0xb0 [ 520.715823][T20067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.715844][T20067] RIP: 0033:0x7f3a4b78d57c [ 520.715863][T20067] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 520.715882][T20067] RSP: 002b:00007f3a4c531030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 520.715906][T20067] RAX: ffffffffffffffda RBX: 00007f3a4b9b5fa0 RCX: 00007f3a4b78d57c [ 520.715922][T20067] RDX: 000000000000000f RSI: 00007f3a4c5310a0 RDI: 0000000000000004 [ 520.715935][T20067] RBP: 00007f3a4c531090 R08: 0000000000000000 R09: 0000000000000000 [ 520.715949][T20067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.715963][T20067] R13: 0000000000000000 R14: 00007f3a4b9b5fa0 R15: 00007fff024c1458 [ 520.715997][T20067] [ 521.026243][T20066] netlink: 'syz.3.3793': attribute type 13 has an invalid length. [ 521.244717][T20066] wg1 speed is unknown, defaulting to 1000 [ 521.291055][T20083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.323839][T20066] lo speed is unknown, defaulting to 1000 [ 521.385992][T20066] wg1 speed is unknown, defaulting to 1000 [ 521.483820][T20070] syzkaller1: entered promiscuous mode [ 521.489373][T20070] syzkaller1: entered allmulticast mode [ 521.785786][T20107] netlink: 'syz.0.3801': attribute type 1 has an invalid length. [ 521.847795][T20107] 8021q: adding VLAN 0 to HW filter on device bond2 [ 522.299152][T20127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.376735][T20135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.491250][T20127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.556533][T20140] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 522.621264][T20127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.745880][T20127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.301118][T14450] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.323197][T14450] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.355424][T14450] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.401180][ T8177] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.018014][T20193] __nla_validate_parse: 32 callbacks suppressed [ 524.018035][T20193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3824'. [ 524.049462][T20193] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3824'. [ 524.139036][T20193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3824'. [ 524.167479][T20198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.187191][T20194] tipc: Started in network mode [ 524.192378][T20194] tipc: Node identity ac14140f, cluster identity 4711 [ 524.200271][T20194] tipc: New replicast peer: 255.255.255.255 [ 524.210208][T20194] tipc: Enabled bearer , priority 26 [ 524.311770][T20201] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3827'. [ 524.335282][T20201] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3827'. [ 524.472992][T20203] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3828'. [ 524.487408][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3828'. [ 524.696793][T20217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3831'. [ 524.709183][T20217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3831'. [ 524.790807][T20219] netlink: 'syz.1.3832': attribute type 1 has an invalid length. [ 524.831174][T20219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.883037][T20219] 8021q: adding VLAN 0 to HW filter on device bond4 [ 524.890445][T20219] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 524.904149][T20219] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 524.996745][T20227] vxcan1: entered allmulticast mode [ 525.086399][T20229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3832'. [ 525.097920][T20219] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 525.120142][T20233] netlink: 'syz.4.3836': attribute type 13 has an invalid length. [ 525.128636][T20233] netlink: 'syz.4.3836': attribute type 12 has an invalid length. [ 525.140013][T20231] tipc: Enabling of bearer rejected, failed to enable media [ 525.322265][ T9] tipc: Node number set to 2886997007 [ 525.396392][T20248] netlink: 'syz.1.3839': attribute type 10 has an invalid length. [ 525.437495][T20248] batman_adv: batadv0: Adding interface: team0 [ 525.449784][T20253] netlink: 'syz.4.3837': attribute type 1 has an invalid length. [ 525.496458][T20254] netlink: 'syz.1.3839': attribute type 10 has an invalid length. [ 525.543516][T20248] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.624648][T20248] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 525.681745][T20254] team0: entered promiscuous mode [ 525.698503][T20254] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.708156][T20254] batman_adv: batadv0: Interface activated: team0 [ 525.720289][T20254] batman_adv: batadv0: Interface deactivated: team0 [ 525.728828][T20254] batman_adv: batadv0: Removing interface: team0 [ 525.750256][T20254] bridge0: port 1(team0) entered blocking state [ 525.758610][T20254] bridge0: port 1(team0) entered disabled state [ 525.765779][T20254] team0: entered allmulticast mode [ 525.892598][T20269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.190617][T20281] wg1 speed is unknown, defaulting to 1000 [ 526.211785][T20281] lo speed is unknown, defaulting to 1000 [ 526.238179][T20281] wg1 speed is unknown, defaulting to 1000 [ 526.349460][T20280] wg1 speed is unknown, defaulting to 1000 [ 526.369714][T20280] lo speed is unknown, defaulting to 1000 [ 526.601747][T20280] wg1 speed is unknown, defaulting to 1000 [ 527.507951][T20319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.619901][T20307] macvlan3: entered allmulticast mode [ 527.628569][T20307] veth1_vlan: entered allmulticast mode [ 527.637223][T20307] veth1_vlan: left allmulticast mode [ 527.774542][T20325] wg1 speed is unknown, defaulting to 1000 [ 527.783752][T20325] lo speed is unknown, defaulting to 1000 [ 527.791501][T20325] wg1 speed is unknown, defaulting to 1000 [ 528.920350][T20354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 528.946438][T20354] bond_slave_0: entered promiscuous mode [ 528.952626][T20354] bond_slave_1: entered promiscuous mode [ 528.960465][T20354] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 528.971111][T20354] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 529.164484][T20366] netlink: 'syz.4.3867': attribute type 12 has an invalid length. [ 529.530310][T20390] netlink: 'syz.1.3870': attribute type 13 has an invalid length. [ 529.547370][T20390] netlink: 'syz.1.3870': attribute type 17 has an invalid length. [ 529.895048][T20390] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.079553][T20403] netlink: 'syz.2.3874': attribute type 2 has an invalid length. [ 530.128206][T20403] : entered promiscuous mode [ 530.135016][T20399] IPVS: persistence engine module ip_vs_pe_ not found [ 530.334606][T20417] __nla_validate_parse: 12 callbacks suppressed [ 530.334629][T20417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3878'. [ 530.453987][T20425] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 530.500402][T20417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3878'. [ 530.648955][T20436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3885'. [ 530.671573][T20438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3885'. [ 530.678081][T20434] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 530.766764][T20442] netlink: 'syz.4.3886': attribute type 12 has an invalid length. [ 530.775175][T20442] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3886'. [ 530.844128][T20445] tipc: Enabled bearer , priority 0 [ 530.853233][T20445] syzkaller0: entered allmulticast mode [ 530.878351][T20445] tipc: Resetting bearer [ 530.920752][T20444] tipc: Disabling bearer [ 530.936111][T20447] netlink: 'syz.0.3888': attribute type 12 has an invalid length. [ 530.948430][T20447] netlink: 'syz.0.3888': attribute type 1 has an invalid length. [ 530.958814][T20447] netlink: 'syz.0.3888': attribute type 2 has an invalid length. [ 531.545574][T20469] tipc: Enabled bearer , priority 0 [ 531.554658][T20469] syzkaller0: entered promiscuous mode [ 531.560260][T20469] syzkaller0: entered allmulticast mode [ 531.560876][T20471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3894'. [ 531.739741][T20466] tipc: Resetting bearer [ 531.749480][T20466] mac80211_hwsim hwsim57 wlan1: entered allmulticast mode [ 531.760420][T20465] tipc: Resetting bearer [ 531.820413][T20465] tipc: Disabling bearer [ 531.934620][T20489] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3896'. [ 532.038029][T20491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3898'. [ 532.122575][T20493] tipc: Enabled bearer , priority 0 [ 532.165258][T20493] syzkaller0: entered promiscuous mode [ 532.183109][T20493] syzkaller0: entered allmulticast mode [ 532.232546][T20500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.240227][T20500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.254035][T20500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.268482][T20500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.350752][T20501] tipc: Resetting bearer [ 532.375007][T20505] tipc: Enabled bearer , priority 0 [ 532.392543][T20492] tipc: Resetting bearer [ 532.425096][T20492] tipc: Disabling bearer [ 532.451581][T20509] syzkaller0: entered promiscuous mode [ 532.472806][T20509] syzkaller0: entered allmulticast mode [ 532.484598][T20505] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3902'. [ 532.556224][T20505] tipc: Resetting bearer [ 532.601570][T20502] tipc: Resetting bearer [ 532.634702][T20513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.679372][T20502] tipc: Disabling bearer [ 532.699632][T20519] caif0: entered allmulticast mode [ 532.715735][T20522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'. [ 532.726435][T20523] syzkaller0: entered promiscuous mode [ 532.732644][T20523] syzkaller0: entered allmulticast mode [ 532.939278][T20530] wg1 speed is unknown, defaulting to 1000 [ 532.976005][T20530] lo speed is unknown, defaulting to 1000 [ 532.994097][T20530] wg1 speed is unknown, defaulting to 1000 [ 533.099841][T20538] netlink: 'syz.1.3913': attribute type 1 has an invalid length. [ 533.651847][T20555] wg1 speed is unknown, defaulting to 1000 [ 533.679148][T20555] lo speed is unknown, defaulting to 1000 [ 533.866913][T20555] wg1 speed is unknown, defaulting to 1000 [ 534.222341][T20498] Bluetooth: hci4: command 0x0406 tx timeout [ 534.254402][T20535] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 534.290123][T20575] tipc: Enabled bearer , priority 0 [ 534.308122][T20575] syzkaller0: entered promiscuous mode [ 534.351054][T20575] syzkaller0: entered allmulticast mode [ 534.464473][T20572] netlink: 'syz.3.3921': attribute type 3 has an invalid length. [ 534.488346][T20572] netlink: 'syz.3.3921': attribute type 3 has an invalid length. [ 534.586250][T20575] tipc: Resetting bearer [ 534.669141][T20568] tipc: Resetting bearer [ 534.748307][T20568] tipc: Disabling bearer [ 535.200598][T20615] netlink: 'syz.0.3931': attribute type 12 has an invalid length. [ 535.351681][T20620] tun0: tun_chr_ioctl cmd 21731 [ 535.561156][T20626] netlink: 'syz.0.3936': attribute type 1 has an invalid length. [ 535.635573][T20631] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.696151][T20626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.753502][T20638] __nla_validate_parse: 4 callbacks suppressed [ 535.753523][T20638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 535.764194][T20640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3939'. [ 535.814190][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3940'. [ 535.856522][T20634] 8021q: adding VLAN 0 to HW filter on device bond3 [ 535.864266][T20634] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 535.878690][T20634] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 535.966164][T20654] netlink: 'syz.0.3936': attribute type 11 has an invalid length. [ 536.056950][T20639] veth5: entered promiscuous mode [ 536.069634][T20639] bond3: (slave veth5): Enslaving as an active interface with a down link [ 536.097284][T20626] erspan0: entered allmulticast mode [ 536.302550][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 536.486976][T20669] ip6gretap1: entered promiscuous mode [ 536.821323][T20691] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3952'. [ 537.263444][T20709] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3956'. [ 537.375746][ T3475] tipc: Resetting bearer [ 537.433243][T20718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 537.456884][T20717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3959'. [ 538.019391][ T3475] tipc: Disabling bearer [ 538.408685][ T3475] bond0 (unregistering): Released all slaves [ 538.697461][ T3475] bond1 (unregistering): Released all slaves [ 538.893190][ T3475] bond2 (unregistering): Released all slaves [ 539.039553][ T3475] bond3 (unregistering): Released all slaves [ 539.149780][ T3475] bond4 (unregistering): Released all slaves [ 539.259606][ T3475] bond5 (unregistering): Released all slaves [ 539.274858][ T3475] bond6 (unregistering): Released all slaves [ 539.384083][ T3475] bond7 (unregistering): Released all slaves [ 539.497252][ T3475] bond8 (unregistering): Released all slaves [ 539.513140][ T3475] bond9 (unregistering): Released all slaves [ 539.909011][ T3475] : left promiscuous mode [ 539.994529][T20740] wg1 speed is unknown, defaulting to 1000 [ 539.995455][T20770] netlink: 'syz.3.3964': attribute type 10 has an invalid length. [ 540.015349][T20770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3964'. [ 540.040505][T20769] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 540.063527][T20740] lo speed is unknown, defaulting to 1000 [ 540.072822][T20740] wg1 speed is unknown, defaulting to 1000 [ 540.090870][T20769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 540.245620][ T3475] tipc: Disabling bearer [ 540.258934][ T3475] tipc: Left network mode [ 540.269127][T20774] bridge6: entered promiscuous mode [ 540.275688][T20774] bridge6: entered allmulticast mode [ 540.284614][T20774] team0: Port device bridge6 added [ 541.025778][T20810] netlink: 'syz.0.3974': attribute type 3 has an invalid length. [ 541.073724][T20810] netlink: 'syz.0.3974': attribute type 3 has an invalid length. [ 541.136914][T20810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3974'. [ 541.546624][ T3475] hsr_slave_0: left promiscuous mode [ 541.574678][ T3475] hsr_slave_1: left promiscuous mode [ 541.746424][T20833] sctp: [Deprecated]: syz.4.3980 (pid 20833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 541.746424][T20833] Use struct sctp_sack_info instead [ 541.913526][T20842] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3981'. [ 542.051372][T20846] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3984'. [ 543.416483][T20846] batadv1: entered promiscuous mode [ 543.430123][T20846] batadv1: entered allmulticast mode [ 543.557059][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3988'. [ 543.654446][T20856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'. [ 543.687721][T20856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'. [ 543.728018][T20856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'. [ 543.755902][T20856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'. [ 543.768473][T20856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'. [ 543.801504][T20856] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3986'. [ 543.903004][ T5950] page_pool_release_retry() stalled pool shutdown: id 48, 1216 inflight 241 sec [ 544.415726][ T6040] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.459374][ T6040] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.468783][T20498] Bluetooth: hci1: command 0x0405 tx timeout [ 544.534475][ T6040] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.585209][T20886] sctp: [Deprecated]: syz.0.3991 (pid 20886) Use of int in maxseg socket option. [ 544.585209][T20886] Use struct sctp_assoc_value instead [ 544.609637][ T6040] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.649829][T20885] netlink: 'syz.3.3993': attribute type 1 has an invalid length. [ 544.667125][T20885] NCSI netlink: No device for ifindex 0 [ 544.792332][T20885] nbd0: detected capacity change from 0 to 127 [ 544.807536][T20885] tipc: Enabling of bearer rejected, failed to enable media [ 544.839578][ T5855] block nbd0: Receive control failed (result -32) [ 544.898407][ T3475] IPVS: stop unused estimator thread 0... [ 544.902380][T20901] netlink: 'syz.1.3997': attribute type 1 has an invalid length. [ 545.006340][T20901] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 545.031479][T20906] wg1 speed is unknown, defaulting to 1000 [ 545.075377][T20906] lo speed is unknown, defaulting to 1000 [ 545.084021][T20906] wg1 speed is unknown, defaulting to 1000 [ 545.356365][T20921] tipc: Enabling of bearer rejected, failed to enable media [ 546.289749][T20955] tipc: Enabling of bearer rejected, failed to enable media [ 546.510355][T20972] tipc: Enabling of bearer rejected, failed to enable media [ 546.589043][T20971] geneve3: entered allmulticast mode [ 546.674955][T20976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 547.089444][T21000] __nla_validate_parse: 134 callbacks suppressed [ 547.089462][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4019'. [ 547.126803][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4019'. [ 547.158250][T21003] netlink: 'syz.4.4020': attribute type 1 has an invalid length. [ 547.169901][T21003] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4020'. [ 547.357524][T21011] veth0: entered promiscuous mode [ 547.386917][T21011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4023'. [ 547.682811][T21025] netlink: 'syz.4.4026': attribute type 4 has an invalid length. [ 547.734572][T21027] netlink: 'syz.4.4026': attribute type 4 has an invalid length. [ 547.887671][T20996] wg1 speed is unknown, defaulting to 1000 [ 547.995908][T20996] lo speed is unknown, defaulting to 1000 [ 548.002110][T21033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4028'. [ 548.268021][T20996] wg1 speed is unknown, defaulting to 1000 [ 548.620056][T21058] openvswitch: netlink: IPv4 tun info is not correct [ 548.673789][T21058] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.4032'. [ 548.683473][T21058] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 548.692444][T21058] openvswitch: netlink: Duplicate key (type 0). [ 548.758505][T21060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.080955][T21066] wg1 speed is unknown, defaulting to 1000 [ 549.096451][T21066] lo speed is unknown, defaulting to 1000 [ 549.109119][T21066] wg1 speed is unknown, defaulting to 1000 [ 549.540415][T21077] IPVS: persistence engine module ip_vs_pe_ not found [ 550.050622][T21108] netlink: 'syz.4.4043': attribute type 1 has an invalid length. [ 550.426263][T21115] netlink: 'syz.0.4044': attribute type 1 has an invalid length. [ 550.444640][T21115] netlink: 'syz.0.4044': attribute type 2 has an invalid length. [ 550.895477][T21133] netlink: 'syz.3.4050': attribute type 4 has an invalid length. [ 551.003377][T21139] netlink: 'syz.3.4050': attribute type 4 has an invalid length. [ 551.204658][T21122] netlink: 'syz.1.4048': attribute type 32 has an invalid length. [ 551.225425][T21140] netlink: 'syz.0.4049': attribute type 21 has an invalid length. [ 551.877424][T21150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4053'. [ 552.054775][T21158] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.4056'. [ 552.593635][T21172] validate_nla: 2 callbacks suppressed [ 552.593657][T21172] netlink: 'syz.4.4060': attribute type 10 has an invalid length. [ 552.639516][T21172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4060'. [ 552.673923][T21178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4060'. [ 552.683758][T21178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4060'. [ 552.715879][T21172] team0: Port device geneve0 added [ 552.843917][T21178] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 552.969096][T21194] batadv_slave_1: entered promiscuous mode [ 553.069559][T21186] wg1 speed is unknown, defaulting to 1000 [ 553.087637][T21186] lo speed is unknown, defaulting to 1000 [ 553.110137][T21186] wg1 speed is unknown, defaulting to 1000 [ 553.156633][T21194] batadv_slave_1: left promiscuous mode [ 553.614364][T21220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4076'. [ 553.635848][T21220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.646269][T21220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.669537][T21226] netlink: 'syz.0.4078': attribute type 10 has an invalid length. [ 553.680711][T21220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.688999][T21220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.781573][T21226] netlink: 'syz.0.4078': attribute type 10 has an invalid length. [ 554.087190][T21245] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4084'. [ 554.301606][T21254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4086'. [ 554.469361][T21261] syzkaller0: entered promiscuous mode [ 554.478981][T21261] syzkaller0: entered allmulticast mode [ 554.712842][ T5855] Bluetooth: hci5: command 0x0406 tx timeout [ 555.628922][T21287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4093'. [ 555.639167][T21287] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4093'. [ 555.939666][T21294] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4094'. [ 556.952030][T21293] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4093'. [ 557.006389][T21289] wg1 speed is unknown, defaulting to 1000 [ 557.025368][T21289] lo speed is unknown, defaulting to 1000 [ 557.055417][T21289] wg1 speed is unknown, defaulting to 1000 [ 557.168578][T21300] team0: left allmulticast mode [ 557.173851][T21300] team0: left promiscuous mode [ 557.179052][T21300] bridge0: port 1(team0) entered disabled state [ 557.256992][T21302] bond0: Master is either lo or non-ether device [ 557.281535][T21309] netlink: 'syz.3.4097': attribute type 12 has an invalid length. [ 557.382340][T21306] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 557.415657][T21306] bond1: entered promiscuous mode [ 557.422328][T21306] bond1: entered allmulticast mode [ 557.435158][T21306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 557.484673][T21304] batman_adv: batadv0: Adding interface: ip6gretap2 [ 557.491436][T21304] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.528895][T21304] batman_adv: batadv0: Interface activated: ip6gretap2 [ 557.873372][T21322] __nla_validate_parse: 2 callbacks suppressed [ 557.873392][T21322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4101'. [ 558.295918][T21335] wg1 speed is unknown, defaulting to 1000 [ 558.315859][T21335] lo speed is unknown, defaulting to 1000 [ 558.353595][T21335] wg1 speed is unknown, defaulting to 1000 [ 558.378413][T21350] netlink: 'syz.3.4105': attribute type 4 has an invalid length. [ 558.609949][T21344] wg1 speed is unknown, defaulting to 1000 [ 558.657871][T21344] lo speed is unknown, defaulting to 1000 [ 558.686546][T21344] wg1 speed is unknown, defaulting to 1000 [ 559.027407][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4111'. [ 559.043172][T21363] netlink: 'syz.1.4112': attribute type 1 has an invalid length. [ 559.281034][T21369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 559.323267][T21369] bond5: (slave bond6): making interface the new active one [ 559.360883][T21369] bond5: (slave bond6): Enslaving as an active interface with an up link [ 559.432746][T21361] wg1 speed is unknown, defaulting to 1000 [ 559.440826][T21361] lo speed is unknown, defaulting to 1000 [ 559.451920][T21361] wg1 speed is unknown, defaulting to 1000 [ 559.700378][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 559.745910][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 559.774558][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4114'. [ 560.042247][T21384] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4118'. [ 560.046830][T21386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4116'. [ 560.087057][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4116'. [ 560.110846][T21383] netlink: 'syz.1.4116': attribute type 39 has an invalid length. [ 560.528625][T21399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4121'. [ 560.584376][T21399] wg1 speed is unknown, defaulting to 1000 [ 560.605554][T21399] lo speed is unknown, defaulting to 1000 [ 560.614815][T21399] wg1 speed is unknown, defaulting to 1000 [ 561.474134][T21425] macvlan2: entered allmulticast mode [ 561.479580][T21425] veth1_vlan: entered allmulticast mode [ 561.516779][T21425] veth1_vlan: left allmulticast mode [ 562.031424][T21440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4130'. [ 562.058486][T21440] openvswitch: netlink: Flow actions attr not present in new flow. [ 562.622152][ T7815] page_pool_release_retry() stalled pool shutdown: id 39, 3329 inflight 302 sec [ 562.936987][T21472] __nla_validate_parse: 4 callbacks suppressed [ 562.937007][T21472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4139'. [ 563.160594][ T5936] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 563.354621][T21496] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4143'. [ 563.441554][T21496] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4143'. [ 563.526229][T21496] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4143'. [ 563.724021][T21505] netlink: 'syz.4.4146': attribute type 10 has an invalid length. [ 563.733274][T21505] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4146'. [ 563.734046][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4147'. [ 563.770953][T21505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4146'. [ 563.789987][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4146'. [ 563.811174][T21507] netlink: 'syz.3.4147': attribute type 39 has an invalid length. [ 564.157172][T21521] netlink: 'syz.3.4151': attribute type 21 has an invalid length. [ 564.728832][T21548] pim6reg1: entered promiscuous mode [ 564.738353][T21548] pim6reg1: entered allmulticast mode [ 565.148621][T21567] syzkaller1: entered promiscuous mode [ 565.168443][T21567] syzkaller1: entered allmulticast mode [ 565.237660][T21569] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4164'. [ 565.254514][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 565.304614][T21572] syzkaller0: entered promiscuous mode [ 565.310856][T21572] syzkaller0: entered allmulticast mode [ 565.496131][T21583] delete_channel: no stack [ 565.564856][T21589] syzkaller0: entered promiscuous mode [ 565.570403][T21589] syzkaller0: entered allmulticast mode [ 565.817329][T21599] netlink: 'syz.1.4172': attribute type 83 has an invalid length. [ 566.388378][T21623] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 566.763705][T21630] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.920681][T21630] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.079293][T21630] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.245749][T21630] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.348327][T21651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.449737][ T8178] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.474537][ T8168] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.498068][ T8178] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.526727][ T8172] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.702804][T21655] nbd5: detected capacity change from 0 to 127 [ 567.984921][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 568.008784][T21665] __nla_validate_parse: 6 callbacks suppressed [ 568.008803][T21665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4190'. [ 568.098086][T21661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4190'. [ 568.521173][T20498] block nbd5: Receive control failed (result -32) [ 568.639776][T21688] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4194'. [ 568.649005][T21688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4194'. [ 568.715723][T21690] wg1 speed is unknown, defaulting to 1000 [ 568.723827][T21690] lo speed is unknown, defaulting to 1000 [ 568.731662][T21690] wg1 speed is unknown, defaulting to 1000 [ 568.767283][T21692] netlink: 'syz.4.4195': attribute type 1 has an invalid length. [ 568.946389][T21694] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 569.227495][T21702] ip6tnl4: entered promiscuous mode [ 569.530945][T21716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.020568][T21732] tipc: Enabling of bearer rejected, failed to enable media [ 570.065165][T20498] Bluetooth: hci2: command 0x0406 tx timeout [ 570.223423][T21742] netlink: 'syz.3.4206': attribute type 1 has an invalid length. [ 570.252134][T21742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4206'. [ 570.551799][T21755] syzkaller1: entered promiscuous mode [ 570.557818][T21755] syzkaller1: entered allmulticast mode [ 570.818887][T21765] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4212'. [ 570.856616][T21765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4212'. [ 570.901601][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4213'. [ 570.913354][T21772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4213'. [ 571.291767][T21787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.863910][T21822] netlink: 'syz.4.4226': attribute type 29 has an invalid length. [ 572.167432][T21846] bpq0: entered promiscuous mode [ 572.174502][T21837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4227'. [ 572.188312][T21846] pim6reg: entered allmulticast mode [ 572.195874][T21846] pim6reg: left allmulticast mode [ 572.275714][T21843] netlink: 'syz.1.4232': attribute type 3 has an invalid length. [ 572.538515][ T30] audit: type=1800 audit(1754018730.088:11): pid=21825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4227" name="cgroup.controllers" dev="tmpfs" ino=1051 res=0 errno=0 [ 572.879664][T21869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.052656][T21877] can: request_module (can-proto-5) failed. [ 573.632211][T21901] __nla_validate_parse: 4 callbacks suppressed [ 573.632233][T21901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4244'. [ 573.679943][T21904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.994498][T21917] wg1 speed is unknown, defaulting to 1000 [ 574.015368][T21917] lo speed is unknown, defaulting to 1000 [ 574.055379][T21917] wg1 speed is unknown, defaulting to 1000 [ 574.259713][T21928] wg1 speed is unknown, defaulting to 1000 [ 574.277919][T21928] lo speed is unknown, defaulting to 1000 [ 574.437947][T21928] wg1 speed is unknown, defaulting to 1000 [ 574.464817][T21938] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4258'. [ 574.543269][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 574.916768][T21947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4260'. [ 575.377646][T21965] netlink: 'syz.2.4266': attribute type 2 has an invalid length. [ 575.384489][T21968] ip6gretap0: entered promiscuous mode [ 575.391445][T21968] vlan1: entered promiscuous mode [ 575.704800][T21973] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.756089][T21973] tipc: Cannot configure node identity twice [ 575.801567][T21973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4269'. [ 576.005430][T21990] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4273'. [ 576.217927][T21999] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4275'. [ 576.647897][T22018] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4278'. [ 576.661737][T22019] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4277'. [ 576.898193][T22024] bridge_slave_0: left allmulticast mode [ 576.920487][T22024] bridge_slave_0: left promiscuous mode [ 576.931351][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.961074][T22024] bridge_slave_1: left allmulticast mode [ 576.972053][T22024] bridge_slave_1: left promiscuous mode [ 576.984231][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.044366][T22024] bond0: (slave bond_slave_0): Releasing backup interface [ 577.109417][T22024] bond0: (slave bond_slave_1): Releasing backup interface [ 577.150409][T22024] team0: Port device team_slave_0 removed [ 577.192991][T22024] team0: Port device team_slave_1 removed [ 577.231135][T22024] team0: Port device geneve0 removed [ 577.253478][T22035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4283'. [ 577.313639][T22035] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4283'. [ 577.405835][T22027] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 577.828278][T22049] netlink: 'syz.4.4287': attribute type 13 has an invalid length. [ 577.855047][T22049] netlink: 'syz.4.4287': attribute type 17 has an invalid length. [ 578.150885][T22049] caif0: left allmulticast mode [ 578.161428][T22049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.501313][T22079] wg1 speed is unknown, defaulting to 1000 [ 578.517417][T22079] lo speed is unknown, defaulting to 1000 [ 578.531327][T22079] wg1 speed is unknown, defaulting to 1000 [ 579.064175][T22106] __nla_validate_parse: 4 callbacks suppressed [ 579.064194][T22106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4301'. [ 579.114680][T22109] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4301'. [ 579.584961][T22137] IPVS: set_ctl: invalid protocol: 92 10.1.1.1:20004 [ 579.628430][T22129] vlan5: entered promiscuous mode [ 579.639182][T22129] vlan5: entered allmulticast mode [ 579.645693][T22129] hsr_slave_1: entered allmulticast mode [ 579.681253][T22138] tipc: Enabling of bearer rejected, failed to enable media [ 579.865436][T22148] netlink: 'syz.2.4311': attribute type 1 has an invalid length. [ 579.909798][T22146] wg1 speed is unknown, defaulting to 1000 [ 579.925411][T22148] netlink: 'syz.2.4311': attribute type 22 has an invalid length. [ 579.938180][T22146] lo speed is unknown, defaulting to 1000 [ 579.944676][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4311'. [ 579.964807][T22146] wg1 speed is unknown, defaulting to 1000 [ 580.117614][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'. [ 580.165815][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4315'. [ 580.410338][T22176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4320'. [ 580.425321][T22176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.548008][T22178] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4321'. [ 580.567295][T22172] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.732656][T22189] netlink: 'syz.1.4324': attribute type 10 has an invalid length. [ 580.755516][T22189] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4324'. [ 580.806139][T22172] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.846051][T22189] team0: entered promiscuous mode [ 580.963354][T22172] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.067485][T22172] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.182111][T22172] ------------[ cut here ]------------ [ 581.187836][T22172] WARNING: CPU: 0 PID: 22172 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 581.198104][T22172] Modules linked in: [ 581.202296][T22172] CPU: 0 UID: 0 PID: 22172 Comm: syz.2.4319 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 581.214105][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.224270][T22172] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 581.231038][T22172] Code: 74 10 4c 89 e7 89 54 24 0c e8 b4 13 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 c9 ac 74 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 581.250789][T22172] RSP: 0000:ffffc9000ac76980 EFLAGS: 00010246 [ 581.256949][T22172] RAX: ffffc9000ac76900 RBX: 0000000000000017 RCX: 0000000000000000 [ 581.265004][T22172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ac769e8 [ 581.273050][T22172] RBP: ffffc9000ac76a70 R08: ffffc9000ac769e7 R09: 0000000000000000 [ 581.281067][T22172] R10: ffffc9000ac769c0 R11: fffff5200158ed3d R12: 0000000000000000 [ 581.289118][T22172] R13: 1ffff9200158ed34 R14: 0000000000040920 R15: dffffc0000000000 [ 581.297174][T22172] FS: 00007f3a4c5106c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 581.306198][T22172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.312871][T22172] CR2: 00007fe7c63a12a4 CR3: 0000000052d5a000 CR4: 00000000003526f0 [ 581.320885][T22172] Call Trace: [ 581.324255][T22172] [ 581.327230][T22172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 581.333710][T22172] __alloc_pages_noprof+0xa/0x30 [ 581.338700][T22172] ___kmalloc_large_node+0x85/0x210 [ 581.344004][T22172] __kmalloc_large_node_noprof+0x18/0x90 [ 581.349701][T22172] __kmalloc_noprof+0x36f/0x4f0 [ 581.354661][T22172] ? nsim_fib_event_nb+0x295/0x1080 [ 581.359947][T22172] nsim_fib_event_nb+0x295/0x1080 [ 581.365076][T22172] ? validate_chain+0x897/0x2140 [ 581.370072][T22172] call_fib_notifier+0x42/0x80 [ 581.374930][T22172] fib6_node_dump+0x21d/0x2b0 [ 581.379669][T22172] ? __pfx_fib6_node_dump+0x10/0x10 [ 581.384979][T22172] ? __lock_acquire+0xab9/0xd20 [ 581.389938][T22172] ? __local_bh_enable_ip+0x12d/0x1c0 [ 581.395425][T22172] fib6_walk_continue+0x678/0x910 [ 581.400544][T22172] fib6_walk+0x149/0x290 [ 581.404741][T22207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4328'. [ 581.404905][T22172] fib6_tables_dump+0x1c9/0x2b0 [ 581.418631][T22172] ? __pfx_fib6_tables_dump+0x10/0x10 [ 581.424201][T22172] ? net_generic+0x1e/0x240 [ 581.428765][T22172] ? net_generic+0x1e/0x240 [ 581.433364][T22172] register_fib_notifier+0x184/0x360 [ 581.438706][T22172] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 581.445043][T22172] ? register_fib_notifier+0x6a/0x360 [ 581.450459][T22172] nsim_fib_create+0x847/0x9d0 [ 581.455327][T22172] ? __pfx_nsim_fib_create+0x10/0x10 [ 581.460681][T22172] nsim_dev_reload_up+0x36b/0x780 [ 581.465812][T22172] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 581.471429][T22172] devlink_reload+0x4e9/0x8d0 [ 581.476268][T22172] ? __pfx_devlink_reload+0x10/0x10 [ 581.481509][T22172] ? apparmor_capable+0x137/0x1b0 [ 581.486630][T22172] ? bpf_lsm_capable+0x9/0x20 [ 581.491362][T22172] ? security_capable+0x7e/0x2e0 [ 581.496398][T22172] devlink_nl_reload_doit+0x9c2/0xd50 [ 581.501873][T22172] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 581.507821][T22172] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 581.514299][T22172] genl_family_rcv_msg_doit+0x215/0x300 [ 581.519907][T22172] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 581.526069][T22172] ? bpf_lsm_capable+0x9/0x20 [ 581.530781][T22172] ? security_capable+0x7e/0x2e0 [ 581.535838][T22172] genl_rcv_msg+0x60e/0x790 [ 581.540381][T22172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 581.545483][T22172] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 581.551962][T22172] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 581.557899][T22172] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 581.564490][T22172] ? __asan_memcpy+0x40/0x70 [ 581.569137][T22172] ? __pfx_ref_tracker_free+0x10/0x10 [ 581.574646][T22172] netlink_rcv_skb+0x205/0x470 [ 581.579459][T22172] ? __lock_acquire+0xab9/0xd20 [ 581.584417][T22172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 581.589493][T22172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 581.595278][T22172] ? down_read+0x1ad/0x2e0 [ 581.599739][T22172] genl_rcv+0x28/0x40 [ 581.603803][T22172] netlink_unicast+0x82c/0x9e0 [ 581.608629][T22172] ? __pfx_netlink_unicast+0x10/0x10 [ 581.614016][T22172] ? netlink_sendmsg+0x642/0xb30 [ 581.619003][T22172] ? skb_put+0x11b/0x210 [ 581.623339][T22172] netlink_sendmsg+0x805/0xb30 [ 581.628167][T22172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.633557][T22172] ? aa_sock_msg_perm+0x94/0x160 [ 581.638567][T22172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 581.643951][T22172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 581.649296][T22172] __sock_sendmsg+0x219/0x270 [ 581.654087][T22172] ____sys_sendmsg+0x505/0x830 [ 581.658904][T22172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 581.664298][T22172] ? import_iovec+0x74/0xa0 [ 581.668857][T22172] ___sys_sendmsg+0x21f/0x2a0 [ 581.673634][T22172] ? __pfx____sys_sendmsg+0x10/0x10 [ 581.678922][T22172] ? __fget_files+0x2a/0x420 [ 581.683602][T22172] ? __fget_files+0x3a0/0x420 [ 581.688331][T22172] __x64_sys_sendmsg+0x19b/0x260 [ 581.693363][T22172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 581.698878][T22172] ? rcu_is_watching+0x15/0xb0 [ 581.703750][T22172] ? do_syscall_64+0xbe/0x3b0 [ 581.708495][T22172] do_syscall_64+0xfa/0x3b0 [ 581.713114][T22172] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.718366][T22172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.724523][T22172] ? clear_bhb_loop+0x60/0xb0 [ 581.729258][T22172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.735237][T22172] RIP: 0033:0x7f3a4b78eb69 [ 581.739694][T22172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.759380][T22172] RSP: 002b:00007f3a4c510038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 581.767895][T22172] RAX: ffffffffffffffda RBX: 00007f3a4b9b6080 RCX: 00007f3a4b78eb69 [ 581.775948][T22172] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 581.784008][T22172] RBP: 00007f3a4b811df1 R08: 0000000000000000 R09: 0000000000000000 [ 581.792057][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.800065][T22172] R13: 0000000000000000 R14: 00007f3a4b9b6080 R15: 00007fff024c1458 [ 581.808150][T22172] [ 581.811281][T22172] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 581.818597][T22172] CPU: 0 UID: 0 PID: 22172 Comm: syz.2.4319 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 581.830450][T22172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.840569][T22172] Call Trace: [ 581.843886][T22172] [ 581.846856][T22172] dump_stack_lvl+0x99/0x250 [ 581.851486][T22172] ? __asan_memcpy+0x40/0x70 [ 581.856214][T22172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.861449][T22172] ? __pfx__printk+0x10/0x10 [ 581.866099][T22172] panic+0x2db/0x790 [ 581.870035][T22172] ? __pfx_panic+0x10/0x10 [ 581.874486][T22172] ? show_trace_log_lvl+0x4fb/0x550 [ 581.879762][T22172] __warn+0x31b/0x4b0 [ 581.883782][T22172] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 581.889811][T22172] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 581.895836][T22172] report_bug+0x2be/0x4f0 [ 581.900244][T22172] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 581.906274][T22172] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 581.912301][T22172] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 581.918332][T22172] handle_bug+0x84/0x160 [ 581.922623][T22172] exc_invalid_op+0x1a/0x50 [ 581.927176][T22172] asm_exc_invalid_op+0x1a/0x20 [ 581.932071][T22172] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 581.938702][T22172] Code: 74 10 4c 89 e7 89 54 24 0c e8 b4 13 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 c9 ac 74 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 581.958342][T22172] RSP: 0000:ffffc9000ac76980 EFLAGS: 00010246 [ 581.964455][T22172] RAX: ffffc9000ac76900 RBX: 0000000000000017 RCX: 0000000000000000 [ 581.972464][T22172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000ac769e8 [ 581.980453][T22172] RBP: ffffc9000ac76a70 R08: ffffc9000ac769e7 R09: 0000000000000000 [ 581.988437][T22172] R10: ffffc9000ac769c0 R11: fffff5200158ed3d R12: 0000000000000000 [ 581.996418][T22172] R13: 1ffff9200158ed34 R14: 0000000000040920 R15: dffffc0000000000 [ 582.004426][T22172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 582.010792][T22172] __alloc_pages_noprof+0xa/0x30 [ 582.015748][T22172] ___kmalloc_large_node+0x85/0x210 [ 582.020982][T22172] __kmalloc_large_node_noprof+0x18/0x90 [ 582.026642][T22172] __kmalloc_noprof+0x36f/0x4f0 [ 582.031509][T22172] ? nsim_fib_event_nb+0x295/0x1080 [ 582.036730][T22172] nsim_fib_event_nb+0x295/0x1080 [ 582.041773][T22172] ? validate_chain+0x897/0x2140 [ 582.046722][T22172] call_fib_notifier+0x42/0x80 [ 582.051493][T22172] fib6_node_dump+0x21d/0x2b0 [ 582.056194][T22172] ? __pfx_fib6_node_dump+0x10/0x10 [ 582.061419][T22172] ? __lock_acquire+0xab9/0xd20 [ 582.066322][T22172] ? __local_bh_enable_ip+0x12d/0x1c0 [ 582.071723][T22172] fib6_walk_continue+0x678/0x910 [ 582.076867][T22172] fib6_walk+0x149/0x290 [ 582.081126][T22172] fib6_tables_dump+0x1c9/0x2b0 [ 582.085996][T22172] ? __pfx_fib6_tables_dump+0x10/0x10 [ 582.091385][T22172] ? net_generic+0x1e/0x240 [ 582.095892][T22172] ? net_generic+0x1e/0x240 [ 582.100407][T22172] register_fib_notifier+0x184/0x360 [ 582.105702][T22172] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 582.111957][T22172] ? register_fib_notifier+0x6a/0x360 [ 582.117352][T22172] nsim_fib_create+0x847/0x9d0 [ 582.122141][T22172] ? __pfx_nsim_fib_create+0x10/0x10 [ 582.127448][T22172] nsim_dev_reload_up+0x36b/0x780 [ 582.132493][T22172] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 582.138073][T22172] devlink_reload+0x4e9/0x8d0 [ 582.142772][T22172] ? __pfx_devlink_reload+0x10/0x10 [ 582.147981][T22172] ? apparmor_capable+0x137/0x1b0 [ 582.153031][T22172] ? bpf_lsm_capable+0x9/0x20 [ 582.157744][T22172] ? security_capable+0x7e/0x2e0 [ 582.162717][T22172] devlink_nl_reload_doit+0x9c2/0xd50 [ 582.168142][T22172] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 582.174064][T22172] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 582.180423][T22172] genl_family_rcv_msg_doit+0x215/0x300 [ 582.185993][T22172] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 582.192091][T22172] ? bpf_lsm_capable+0x9/0x20 [ 582.196786][T22172] ? security_capable+0x7e/0x2e0 [ 582.201743][T22172] genl_rcv_msg+0x60e/0x790 [ 582.206268][T22172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 582.211308][T22172] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 582.217732][T22172] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 582.223646][T22172] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 582.230161][T22172] ? __asan_memcpy+0x40/0x70 [ 582.234766][T22172] ? __pfx_ref_tracker_free+0x10/0x10 [ 582.240156][T22172] netlink_rcv_skb+0x205/0x470 [ 582.245025][T22172] ? __lock_acquire+0xab9/0xd20 [ 582.249898][T22172] ? __pfx_genl_rcv_msg+0x10/0x10 [ 582.254939][T22172] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.260270][T22172] ? down_read+0x1ad/0x2e0 [ 582.264706][T22172] genl_rcv+0x28/0x40 [ 582.268735][T22172] netlink_unicast+0x82c/0x9e0 [ 582.273617][T22172] ? __pfx_netlink_unicast+0x10/0x10 [ 582.278932][T22172] ? netlink_sendmsg+0x642/0xb30 [ 582.283885][T22172] ? skb_put+0x11b/0x210 [ 582.288166][T22172] netlink_sendmsg+0x805/0xb30 [ 582.292957][T22172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.298266][T22172] ? aa_sock_msg_perm+0x94/0x160 [ 582.303237][T22172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 582.308543][T22172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.313849][T22172] __sock_sendmsg+0x219/0x270 [ 582.318553][T22172] ____sys_sendmsg+0x505/0x830 [ 582.323364][T22172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.328667][T22172] ? import_iovec+0x74/0xa0 [ 582.333191][T22172] ___sys_sendmsg+0x21f/0x2a0 [ 582.337883][T22172] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.343136][T22172] ? __fget_files+0x2a/0x420 [ 582.347738][T22172] ? __fget_files+0x3a0/0x420 [ 582.352437][T22172] __x64_sys_sendmsg+0x19b/0x260 [ 582.357390][T22172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.362874][T22172] ? rcu_is_watching+0x15/0xb0 [ 582.367669][T22172] ? do_syscall_64+0xbe/0x3b0 [ 582.372376][T22172] do_syscall_64+0xfa/0x3b0 [ 582.376908][T22172] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.382129][T22172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.388209][T22172] ? clear_bhb_loop+0x60/0xb0 [ 582.392899][T22172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.398801][T22172] RIP: 0033:0x7f3a4b78eb69 [ 582.403226][T22172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.422853][T22172] RSP: 002b:00007f3a4c510038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.431297][T22172] RAX: ffffffffffffffda RBX: 00007f3a4b9b6080 RCX: 00007f3a4b78eb69 [ 582.439279][T22172] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 582.447267][T22172] RBP: 00007f3a4b811df1 R08: 0000000000000000 R09: 0000000000000000 [ 582.455527][T22172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.463526][T22172] R13: 0000000000000000 R14: 00007f3a4b9b6080 R15: 00007fff024c1458 [ 582.471622][T22172] [ 582.475056][T22172] Kernel Offset: disabled [ 582.479443][T22172] Rebooting in 86400 seconds..