last executing test programs: 2.158160989s ago: executing program 0 (id=2649): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x28, 0x4, 0x2}, 0x50) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000021401002bbd7000ffdbdf25080021"], 0x18}, 0x1, 0x0, 0x0, 0x400c000}, 0x400c040) sendmmsg$inet6(r4, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="4128dbde38f7", 0x6}], 0x1}}], 0x1, 0xc010) shutdown(r4, 0x1) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x701, 0xfffffffc, 0x25dfdbfc, {0x41}}, 0x14}}, 0x4c040) 2.082052741s ago: executing program 0 (id=2653): socket$inet(0x2, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x13ad, &(0x7f0000001180)={@random="1658ffbbc01d", @local, @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "d0e2dd", 0x1377, 0x2f, 0xff, @mcast1, @remote, {[@srh={0x3, 0x4, 0x4, 0x2, 0x6, 0x10, 0x6, [@dev={0xfe, 0x80, '\x00', 0x3b}, @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x3b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}]}, @routing={0xff, 0x6, 0x0, 0x7, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @fragment={0xc, 0x0, 0x7f, 0x1, 0x0, 0x3, 0x65}, @fragment={0x2b, 0x0, 0x58, 0x1, 0x0, 0x4, 0x61}, @fragment={0x1d, 0x0, 0x6, 0x0, 0x0, 0x9, 0x64}, @routing={0x4, 0x4, 0x1, 0x8, 0x0, [@private2, @mcast2]}, @dstopts={0x11, 0x28, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x40, {0x2, 0xe, 0x7, 0xfffe, [0x10000, 0xca7, 0x80, 0x441, 0x1, 0x16, 0x8]}}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x40}}, @generic={0x4, 0xce, "7948ebd3de2c6c83a857d4c9c4646af384f9aaae7be92680cc8830d448b05587ffb5cfd1c006d8eca9d24a02ad5f363b2dac0e18cf42f86ef14d1528057ea9c558e7550a8b3db1d27885eaa495c89577211d323ae2bc956eb70980fbd0f79d806db7d08721902558a135d784e279ea9e0cce83e87b003f981859290e984f5e5666d199b7d182c9d92b019641ce8f7dcac0b0846074b158bf49b60401d3b78360ae2538e40b7832580e5b39248c3f09a97ce0d45546dc2dccd45d804f7a6ef9f5ca66c96e759bba01af230be65762"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x21, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x95d}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x9c, 0x2, [], "9686b39c1979a42e28c3f66d1c4151a3a8c75383ed8c492ac95f9d2244a0f36fba2399a9ca223fcb5f0b3547c7db0ef170f11d35625a24976fa08d347f174b3af285d80b3052c8253570135edbef94c0b591ab48b5ff1d42d851d2ed3813978b61ad1653da11cb5e857081623998c9f85bdda6c844334a2eb9a1814a9adcf8df7b37f8d67640e33c721f2ae3e576bbedaa77309401e91342e1f7785b"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "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"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "21f75d131bbe93bf490d5699ef4052e26f21659aa9ad7cb6dde82d53d8d28de98113ccf6a8b29f4942fc36320b1e629f1b8a270d59615e50e91eea10a19963b326d7b4eeedeed6d580c47e8729a42574acb9b627450752c781b854fee2507978cae8d4f0a33439b3224803e661fb9f5d9236b6189c1686e3b9fd84"}, {0x8, 0x88be, 0x7, {{0x8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x8}, 0x1, {0x745}}}, {0x8, 0x22eb, 0x2, {{0xa, 0x2, 0x3, 0x0, 0x0, 0x3, 0x3, 0x8}, 0x2, {0x1, 0x9, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "b5325700"}}}}}}}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x1000, @mcast2, 0x8}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x3c}}, 0x4000010) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000), 0xf) socket$phonet_pipe(0x23, 0x5, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030500000000002b3bc1d7000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000d00000000000500090001000000"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea61", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[], 0x18}, 0xc800) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r7, &(0x7f0000001140), 0x700, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000000000950000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="05"], 0x10) close(r10) socket$inet6_tcp(0xa, 0x1, 0x0) 2.063038643s ago: executing program 3 (id=2654): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) (async, rerun: 32) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xd1383000) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a010400000000000000000200000014000480101601800b0001006c6f6f6b757000000900010073797a30000000000900020073797a320400000005000740d3000000140000001100010000000000000000000000000a"], 0x70}}, 0x0) (async) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r7, &(0x7f0000000940), 0x10) (async) close(0x3) listen(r7, 0x0) (async, rerun: 64) r8 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 64) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) (async, rerun: 64) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) (rerun: 64) 1.922960256s ago: executing program 3 (id=2656): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x99, &(0x7f0000000180)=""/153}, 0x94) 1.836674155s ago: executing program 3 (id=2659): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.661808941s ago: executing program 3 (id=2664): bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r0 = socket(0x27, 0x800, 0xff7ffffc) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000b40)="fd", 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000003c0)='ip_vti0\x00', 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="71a9341e2857ef1ce299ceacf29f3e01a9f3047902d1f6adc7aaa4cab23fa9794e1cd5fe0750b08dc6a39bba3272e93cb721cae436013fdc09911aec3b0fb335dcff2ece8aaccc4eb612bd3d2f8da067ba", @ANYRES16=r4, @ANYBLOB="010004000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="10005a800c000080060002000c510000"], 0x2c}}, 0x4000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r8, &(0x7f0000000000), 0xe) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x4001, @random="56bade2b0752", 'veth1_to_batadv\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="3354dd3725dfa1258cd6b67105b0ef2f14c12a5be5", 0x15}, {&(0x7f0000000900)="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", 0x19f}, {&(0x7f0000000400)="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", 0x4dc}], 0x3, &(0x7f00000014c0)=ANY=[], 0xb8}}], 0x2, 0x4000001) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) bind$bt_l2cap(r9, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r9, 0x0) listen(r8, 0x0) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1d00000003000000020000006c00000000000200", @ANYRES32=r6, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="010000000000000200"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4daa000000000000711027000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) 1.561385758s ago: executing program 3 (id=2667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18) unshare(0x62040200) (async) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) close(r1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='GPL\x00'}, 0x80) write$tun(0xffffffffffffffff, 0x0, 0x3e) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, r6, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r3) close(r2) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000e231be1f0900000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140000000110800024000000000140000001100010000000000000000000000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r10, &(0x7f00000000c0)="ac5dcac67aca696cdcf22a3f1164102a8457aeea847dd7a4ba2a16fbbf018d0f14367c65c01c", 0x26, 0x48000, 0x0, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001114000100000000000000000800030002000000080001000000000006004f000100"], 0x28}, 0x1, 0x0, 0x0, 0x48050}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r9) 1.502961212s ago: executing program 4 (id=2668): write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0) r1 = socket(0x10, 0x80002, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000002000010000000002000000000a100000000000033e0000000800180004ad93d71400010020010000000000000000000000000002226ae94c4f44f1c7a0710f7a449583ad140fa5bbc2b5d967efc0a71d6b01d3be14d6eb879e2b153d73bf1a31f978bb0c86e670044aae5719e43a5e5378031715799072d1a18fcd221908c24f9e0da608d12c9c9a214071afc3864598cd77890d6818b292895374cffde927ee82d0684e0dcb163208781809033ef8b00b354537a6ec9e04c31c7f25e4850f439f25d2392ad5b3d5a798cd92865b2a01f69a35607edb6a65a996cf6d136180831b801035b916f066dbaf993ca9de33f99f8693da745836a1339e6656ccbbc0c1726ee6"], 0x38}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x810}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x200}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x35}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0xa}]}}}]}, 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280"], 0x48}}, 0x0) (async) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.419767868s ago: executing program 4 (id=2671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000006c0)={@loopback, 0x0}, &(0x7f0000000700)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x65}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r4, 0x1, 0x22, 0x0, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = accept(r5, 0x0, &(0x7f0000000440)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r7}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000480)={0x1d, r9}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000032c0)={@private0, 0x0}, &(0x7f0000003600)=0x14) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="04001600010005000000000000"], 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003640)={'vxcan0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000003840)=[{{&(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)="83f1b4c557bca4866a0e8cbd92c1736bd2c4560c6d0ac77ecb1ac8cf0a92678d54160f3fae8b1e1316d4881b00357aa8e83e96971f00955ff1f219590585cc076ccdfc5ac600abca6c236f95bebc8abb31e72dcba9f4e76df4af2530e8b5e2960036b54671ac4ec1804b571a234db3969d8b87f3993ea16834607d60c0ba8943dcac3f415f4e1cd95c344deb18458dc9ffb76b1b67cbbda7ef7b5453d01103741e6ac3180713922906cf14c78c954e3eb87430a1d23a0edd9a2904d1f7002bba616b47f7781b8bde5c1ef38059a1a84c7b", 0xd1}, {&(0x7f00000003c0)="96b5a6c9", 0x4}, {&(0x7f0000000580)="0a517a1f0780cf69c40f277c7cb94b44b98efef6b4735297f2c8051b9876cbfb974003e6ed3159f55264dd4f66dcab000569db7d17ef1cdbf16e73127de7a0934d465240a73773bbb279e2c0f2b45833398d8e", 0x53}, {&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000400)="448508ad11a2333c1ad04ab71ceff183d8b9e2c0a5469e190a736ab3b971f83a5227e76e9cefde731275937ae6", 0x2d}], 0x6, &(0x7f0000003680)=[@ip_retopts={{0x70, 0x0, 0x7, {[@end, @timestamp={0x44, 0x28, 0xc3, 0x0, 0xe, [0xfffffb43, 0x81, 0x4, 0x6, 0x2, 0x4, 0x5, 0x3, 0xfffffffc]}, @ssrr={0x89, 0x23, 0xc2, [@multicast2, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @empty]}, @rr={0x7, 0x7, 0xd8, [@broadcast]}, @noop, @generic={0x7, 0x8, "60c6c4dfc622"}, @generic={0x44, 0x4, "94c3"}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x16}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @end, @ra={0x94, 0x4}]}}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x4, "9663"}, @rr={0x7, 0x13, 0x19, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @empty]}, @cipso={0x86, 0x6, 0x1}, @timestamp={0x44, 0x10, 0x66, 0x0, 0x8, [0x7fff, 0xc, 0x8d56]}, @cipso={0x86, 0x3f, 0x0, [{0x0, 0xf, "03eac84af36d7e3d4f7bd4bd5d"}, {0x5, 0xf, "28e063fb5f7b1e5635fa10cd00"}, {0x6, 0x7, "79861c0428"}, {0x6, 0xb, "6c231db122576d101c"}, {0x0, 0x9, "70d35d792f675a"}]}, @ssrr={0x89, 0x1b, 0x3b, [@local, @empty, @local, @remote, @loopback, @empty]}, @ssrr={0x89, 0xf, 0x2c, [@dev={0xac, 0x14, 0x14, 0x18}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @local}}}], 0x188}}, {{&(0x7f0000002a40)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002a80)="88ac1bc7988698981b8fad3e92296074ee9e16a15ee4ca9c2860122e2c084fe010d7e4d5f92dc51b733f01b5c413d9b8e498840175ea7769844498bfeeb7cab781557b9655822c26803cec5ac37040049994aa8a6d2ed2548ea01ec981418d6acec3dc99d4f399cd453ea496ffab73be0bedf4636dd3718708ab7d7b90467289fca5977333fd3513a71dc24fa4750546bd", 0x91}, {&(0x7f0000002b40)="8fa0aa413c40d5d9a7166161e503356fefddb196d1c58204dceb7e6049e7bf52c80e2db03c0259874527d89efd45fe449a0c59b80508f63dd96675d615c396c43c351dfbbd3f127e179b3d3b0181238876f8", 0x52}, {&(0x7f0000002bc0)="b550c7a0de69d129215d54590b9c246edaddec320ffa99261e83a3c4e074466c73104e29e08ff9312c34b8e99729b0b28f9cb36219fe0cdfc31250e3e6680c918f178a978299e145286fba026b9fbb7eff37ac88cbe9f176e85a1b6538639c8d4f094a4a5938c715582bae41c9d19df1ba7edf420c17989d86181cde20500c4c230cbcc45344fcfa7f43d5b019150c7cd73247e2e41d8b96280b3296f72a00dbb3e588fb3a5d1fe25c1bdd7214f86952f13dff538e3e4f3a2b599da10a74689f5f7c", 0xc2}], 0x3}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000003000)=[{&(0x7f0000002d40)="dbc6152a93dd6024024b78d30d622c0027ccdbe22f5161c6dc22b91994467791933a86e547a9ac8dcf1ab941e6729e9152262334814d020e47b0545a802fc8c6f20290014f6ff9dd0ece81f41c060b45ccbf0313cd2068967328cd1cb121061f14a0c5180646813836cc46d608cbe363b46bcc95d626e7384dafb94e0a3979cc2ea17a7533563099aaa7a9b3c5e89141b03ae51843fc7130d3cad7cc457febc074311fc434da62ec2c9ef91108a3800637b4287700a8bc796d5e5239c5143455d4de553c037635884b7e8df65abb9c01241b2a811d0e61af", 0xd8}, {&(0x7f0000002e40)="d440c6f1df755df3715f9f3b78a53f4b00709393d7e4e4b5c7cc745e0309bd28fdbada71407e66603b25673841477162d5fb77468cc6cf2983fe056469d080c6091980eb29a5be3f0edf646409e39e725e8e9a8c356cf38d1685f2ebe8cea4f3615848d384948896121132e4d3d3cab53145fe", 0x73}, {&(0x7f0000002ec0)="b254590f7c1f35df6856c71cf4a4098aca039e1f27d96d9e6966a68226f81be2ab65024d24413e78494b5d724506e5e5d8f4428d3ceea9ee9d76592c740ba2ee8bf6d481d07a9e748893dbc3a4e41900acd4781deda9e9095b5d8b157bc9525b2a07af5fc949050c5d69b44d0984e9eabc5ff6797d449857a8a332b387832a15c143ad13e97e378fb981aaeffe4ebfbd2e788e0737a00b353b303c2c33241e8d0c8700"/173, 0xad}, {&(0x7f0000002f80)="fd0193e71d81aa27167aec51ffd76bc0c23b10553a73b51879b844b91803ddb5d202c07b2805401cb608c24377a0ce86c19cb223d8ceb7fa209ec5edcde9c660c6912f20fa5b8a", 0x47}], 0x4}}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000003040)="a12281583b632948f4ccd566ac32ef81edb5905882fbecfab78b566990adabf9b21059318a32cf10d7580b080c758f904b365a43f8f789f43bfea47e8c45437bae896df67cafe2ce044e776446aaca604db5077200ca21b2f48cbeb2c1f04fdc96c2e1c29f5b270d6a64cb95dedc32", 0x6f}, {&(0x7f00000030c0)="fdc2", 0x2}, {&(0x7f0000000080)="352b241bf7baccaed83ddd5a3136f0fe53855d4dcf977a8b2bb17db9d51a043c193902", 0x23}, {&(0x7f0000003140)="400f9d1d69cb2c3527318d8d62e58674023ca496ee097a4f3f018554ac4915ff3f878ac2bf33a66f1200561a27f8df531fcedcd84ab48f8a49883556152c7932fb515f5173f646210f5981a5cdab168d5da37ffd64486f48d81bda0a82c3aa36deccb550", 0x64}, {&(0x7f0000002880)="0cceddd5f309e6aaef575cc3f40473e01303dfae01693342669cc33a6d03f9156b5d22bbdae92d2790f89f4b132d0a41bfddb3e93cd946aa76840c9c2782d5a831856f1c890f7bc2ea42ae636f3dccffbe4632177c16d90c4a246c440b407859fb313fe99e2bff3ce53072aba9134bb3272b2301d04cae73f19db862e65dabd37c9a321db314ea9b0726a8e41b150d4a509244436a218c251bd780a2d2b516dee0dad6", 0xa3}], 0x5}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000003280)="0146dbed9bd972a2476255e415729a8b15758c97548ad15403b71195792f247fe37f15a096e180b54d92e37aa3946ce0a21b1ea874631e001074", 0x3a}, {&(0x7f00000032c0)}, {&(0x7f0000003300)="f9d89cc263b18ef1c3bd99a387d78f187a0265d2a3ceec1f6e1882f01acdd63723b40f14911b0e0b2d2011a02ef3503dbfd86c1921ef91a0731cff682fd819b012cc3c9d2977b165ee0df9af800be6912a798f32ce0a5662d3d6c7d9b53726ac2260c09e9bb299321d87602ee0ec57aceb92d16cf1f29f73f2640c9ef7ffd2f0e26da7e2b93e49425ebb3156ae6904a6306f0da079ccd698734cb8c1163c8eb538ae6e2c8d8c849815d42e9685b203ca", 0xb0}, {&(0x7f00000033c0)="7b252a247ac25c99d8f246cb44ffbb8b18406a68fbdb45382e35dd08703cc1c104f3dbf528ab09a6cc84e3f85c27c79964650b85f1f2c9a4de7f3f90eb1012a00ffb2129cbd38efbad7e00df679a06982ce42502c81aca2d04cd84deac8de20f0c648632e62c27e6e19854adf5c5adf2e6bf585e45", 0x75}, {&(0x7f0000003440)="7da8a62440", 0x5}, {&(0x7f0000003480)="09c6a2753f965fef227887ff58493568fc645749d4986aa5f4a32d7d983d5810b74bb2e5a7e29defc8b4ce824ad7d544f0808312c8629df879cd41f5d86d12af9c345d945bd278af6e9945b7ed8bc7c5170ef3ef6246e68842ca1b1bcaab", 0x5e}, {&(0x7f0000003500)}], 0x7, &(0x7f00000039c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ac1414bbe0000001000000001c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r12, @ANYRES32=r9], 0x1c0}}], 0x5, 0x84004) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8982, &(0x7f00000001c0)={0x6, 'pim6reg0\x00', {0xd}, 0x3}) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x4, @bcast, @bpq0, 0x7, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) 1.359968554s ago: executing program 1 (id=2672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x2c020400) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000040), 0x12) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5], 0xfd45}}, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20040000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020601040000000000000000000000001400078005001400f400000008000840000000360500010006000000050005000200000005000400040000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 1.259067161s ago: executing program 1 (id=2673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206030000abc7df9776c1c3007f20000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002e179b7e4afcaf60073797a31ffaeff9acf9e2029bb09c4f1e824ae735b07eca0afa5fe9081141cf31b0d293329badc9bea3f135fb2694c6ad0f07c750f56d3216f3255eb0700708368dccd6232982cd857334c5491025ce567a90799713c1e5992f9edcba3c66906010000008ac05b72c1fdb5a00d2dd788eb81"], 0x58}}, 0x0) 1.125905701s ago: executing program 0 (id=2674): r0 = socket$inet6(0xa, 0x3, 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0xffffffffffffffe3) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 1.123683583s ago: executing program 1 (id=2675): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3600000014000007"], 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @null}, [@bcast, @netrom, @remote, @null, @bcast, @netrom, @remote, @default]}, &(0x7f0000000440)=0x48, 0x40000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000480)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xf8}}, 0x0) r5 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r8 = getuid() setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010102, 0x4e22, 0x4, 0x4e20, 0x4, 0xa, 0xa0, 0x20, 0x3c, r7, r8}, {0x1000, 0x0, 0xf088, 0x8000000000000000, 0x8, 0x184c000, 0x74, 0x7ff}, {0x8, 0x0, 0x9c5, 0xf}, 0x7fffffff, 0x6e6bb6, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x4d6, 0xff}, 0x2, @in6=@private1, 0x0, 0x1, 0x3, 0xb2, 0x1, 0x1a, 0x6}}, 0xe8) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) (async) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x31}}, 0x8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="3600000014000007"], 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x9c, 0xb, 0x0, 0xffffffffffffffff, 0x327}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) accept4$netrom(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @null}, [@bcast, @netrom, @remote, @null, @bcast, @netrom, @remote, @default]}, &(0x7f0000000440)=0x48, 0x40000) (async) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000480)) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0xf8}}, 0x0) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000040)=0x10) (async) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async) getuid() (async) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private=0xa010102, 0x4e22, 0x4, 0x4e20, 0x4, 0xa, 0xa0, 0x20, 0x3c, r7, r8}, {0x1000, 0x0, 0xf088, 0x8000000000000000, 0x8, 0x184c000, 0x74, 0x7ff}, {0x8, 0x0, 0x9c5, 0xf}, 0x7fffffff, 0x6e6bb6, 0x1, 0x0, 0x1}, {{@in6=@private2, 0x4d6, 0xff}, 0x2, @in6=@private1, 0x0, 0x1, 0x3, 0xb2, 0x1, 0x1a, 0x6}}, 0xe8) (async) 1.059745344s ago: executing program 0 (id=2676): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) mmap(&(0x7f000095b000/0x4000)=nil, 0x4000, 0x2000009, 0x25813, r0, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0xffffe000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000800)="00214705c4e7b3591fe6b7c1f36099a9268140fbf39f", 0x16}], 0x1, 0x8, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x5, 0x1000}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_GATEWAY={0x14, 0x5, @loopback={0xffffffffffff0000}}]}, 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2a, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xfd, 0x0, 0xfe, 0x5, 0x1000}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_GATEWAY={0x14, 0x5, @loopback={0xffffffffffff0000}}]}, 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000740)={0xa, 0x4e24, 0x9, @local, 0x4}, 0x1c) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x8b, "5d3435a4961abfcb96732e2d3a8f37a0121ac1928c2bd35f7445dab1e969494a433a294e36131110bb23206730ec603d1049d69c3cb3591885bc080569ae847db96486ca58e5d5a615459e90f214c9ad33908d5682b64dfe5e02023589f1b6912b411e6b23d3121a64d7489e7e9b807b530ac07ffc8a420a73d9cebbf04e73b93aa26e29e79e70d43df290"}, &(0x7f00000000c0)=0x93) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x8b, "5d3435a4961abfcb96732e2d3a8f37a0121ac1928c2bd35f7445dab1e969494a433a294e36131110bb23206730ec603d1049d69c3cb3591885bc080569ae847db96486ca58e5d5a615459e90f214c9ad33908d5682b64dfe5e02023589f1b6912b411e6b23d3121a64d7489e7e9b807b530ac07ffc8a420a73d9cebbf04e73b93aa26e29e79e70d43df290"}, &(0x7f00000000c0)=0x93) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f00000003c0)={r9, @in={{0x2, 0x4e20, @local}}, 0xfffffffe, 0xb708, 0xffffff02, 0x8, 0x1ae}, &(0x7f0000000140)=0x98) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001300070125bd7000fcdbdf25047c000014000000fc00000000000000000000000000000006000600800a000008001100ffffff7f0000000041e238fff377ba7620691411207cbadb49f690871acc245fe87394e0a294342765ba"], 0x3c}}, 0x0) (async) sendmsg$nl_generic(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001300070125bd7000fcdbdf25047c000014000000fc00000000000000000000000000000006000600800a000008001100ffffff7f0000000041e238fff377ba7620691411207cbadb49f690871acc245fe87394e0a294342765ba"], 0x3c}}, 0x0) bind$inet6(r7, &(0x7f0000000780)={0xa, 0x4e23, 0x2000008, @private1, 0x204}, 0x1c) 914.591738ms ago: executing program 1 (id=2677): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x1}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\b'], 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 817.807116ms ago: executing program 0 (id=2678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r2, 0x1000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 730.636107ms ago: executing program 0 (id=2679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0xf29, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r5, 0x0, 0x0, 0x2}, 0x20) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r11, 0x0, 0x0, 0x80800) sendmmsg$alg(r12, &(0x7f0000000280), 0x0, 0x40800) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="05000000000000191670ae00000008000300128e5fd528a1d07858cc311bf6567dde2c2c20904c59ac471a8be316ccf38423aeed9c0f2894599501d57b2180a4b70c15859fd73a2ff737a9dd227dfefe28d25c9ab195b8adf4de6bbb2dd82b2e3d7514f8cd3ae28130cf3463", @ANYRES32=r10, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0) 662.707569ms ago: executing program 1 (id=2680): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000010000000c0001000300000000000000140003"], 0x114}], 0x1, 0x0, 0x0, 0x10}, 0x40040) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000c060108000000000000000007000004050001"], 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020000200600280012800b0001006d61637365630000180002800c0004000100000100028000080005000900000008000500", @ANYRES32=r11, @ANYBLOB="3b2ed1118533c5e6502805543aa432"], 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x80000001, 0x4, 0x3, 0x4, 0x0, 0x5, 0x8, 0x5, 0x802}}}}]}, 0x58}}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 654.051016ms ago: executing program 2 (id=2681): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="1803000000000020000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffb0b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000040b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3, 0x0, 0x2}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0xc) splice(r5, 0x0, r6, 0x0, 0x10d00, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x87, @loopback, 0x4e23, 0x4, 'lblcr\x00', 0x2, 0x4, 0x74}, 0x2c) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x28, 0x0, &(0x7f00000007c0)="c1188e99b95d02ff4284860188a8", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 521.771008ms ago: executing program 2 (id=2682): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000027c0000000039a0040008000c0001800600060008"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r5, 0x1000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000) accept4$ax25(r5, &(0x7f0000000140)={{}, [@netrom, @rose, @remote, @rose, @rose, @bcast, @rose, @rose]}, &(0x7f0000000100)=0x48, 0x80800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 499.44984ms ago: executing program 2 (id=2683): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e"], 0x6c}}, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="8a450200000000001c00128009000100626f6e64000000000c000280080002"], 0x3c}}, 0x40) 370.694878ms ago: executing program 4 (id=2684): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x38, 0x1, 0x20, 0x0, {0xa}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x40010) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000014c0)={0x420, 0x3f4, 0x0, 0x0, 0x0, {0x10, 0x3ea, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xfffffffe]}}, 0x420}}, 0x0) 302.237143ms ago: executing program 4 (id=2685): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) connect$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x3, r1}, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000009640)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000009680)=0x3, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x14, 0x1, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0}, 0x40) sendfile(r3, r3, 0x0, 0x970b) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYRES8, @ANYBLOB='&\x00\x00\x00\x00'], 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d", @ANYBLOB='Cy4'], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendto$inet6(r6, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003400)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000080)="0f386bb8", 0x4}], 0x1}}], 0x1, 0x4000) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="c39203100400000000000600000008000300", @ANYRES32=r8, @ANYBLOB="10001d806c0000800600050012000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r9 = socket$inet6(0xa, 0x3, 0x87) ioctl$AUTOFS_IOC_PROTOVER(r9, 0x80049363, &(0x7f0000000200)) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e21, 0xfffb, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x1, 0x1, 0x1}, {{@in6=@local, 0x1, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18010000000000000000000004000000850000005e0000009500000000000000a30b406b5a2bc8900d74868f5f4d1098c19588a23d7ae496951cac6cba4fd5c344499902356fe555b769ad074a9c8526831ea54da16a35cf6ba9"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 225.683554ms ago: executing program 1 (id=2686): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa0000000}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS_MASK={0x28, 0x17, [0x9, 0x7fff, 0x9, 0x3ff, 0xfffff757, 0xe22, 0xb, 0x6, 0x0]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) (async, rerun: 64) r5 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) sendmmsg$sock(r5, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x14, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x18}}], 0x1, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={r4, r0}, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff}, @generic={0xfb, 0x7, 0x9, 0xf, 0x7}, @exit]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdfffff}, 0x94) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000d5429f5f733a5ad7e7676611afecee2ace9337b92a0186d3b04cad1483877d1c9ca905e9b670c4e8232036da3904adbfa714fa3812a308ca5ffabc038c85e2cb08d3078f7b1e486d1a2c7b4b05101e7b18561fd452f90debb898e1d6a89fd209d39bd8db0f5b909f5a411933f2f64f84c9639dfcde30ff53dee7b526bc71", @ANYRESHEX=r6, @ANYBLOB="00000000010000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 225.009909ms ago: executing program 2 (id=2687): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040)=0x7ff, 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41}}}, 0x10, 0x0}, 0x0) socket(0xc, 0x4, 0x3) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="5a400486852da7a299e4c3976140a6db2edf1767f1570000", 0xff1d}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f0000000040)=""/153, 0x99}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) gettid() ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r4, 0x8b29, &(0x7f0000000040)) close(0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x4, 0x3, 0x20, @dev={0xfe, 0x80, '\x00', 0x3a}, @remote, 0x80, 0x7, 0xffffffff, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', r5, 0x40, 0x1, 0x80, 0x8, {{0x14, 0x4, 0x2, 0x2, 0x50, 0x65, 0x0, 0x1, 0x2f, 0x0, @multicast1, @private=0xa010101, {[@lsrr={0x83, 0x13, 0xe9, [@multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @timestamp_addr={0x44, 0xc, 0x65, 0x1, 0x6, [{@rand_addr=0x64010101, 0x3}]}, @end, @rr={0x7, 0x1b, 0x3a, [@dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0xe}, @multicast1, @empty, @multicast1, @multicast2]}]}}}}}) 180.135284ms ago: executing program 2 (id=2688): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x1616, &(0x7f0000000280)={@random="2c581be4ac5b", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0xc, 0x6, "6ee65a", 0x15e0, 0x3a, 0x1, @private2, @loopback, {[@srh={0x29, 0x4, 0x4, 0x2, 0x4, 0x48, 0x2cf, [@local, @empty]}, @hopopts={0x29, 0x6, '\x00', [@calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x1000, [0x9, 0xdf0e]}}, @enc_lim={0x4, 0x1, 0xee}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @routing={0xff, 0xa, 0x2, 0x5, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}]}, @dstopts={0x3a, 0x1, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x3}, @pad1]}, @dstopts={0xd19241cc0973985d, 0xb, '\x00', [@calipso={0x7, 0x58, {0x2, 0x14, 0x9, 0x3, [0xeb0, 0xd, 0x8, 0x35, 0x2, 0x3ff, 0x7, 0x7, 0x9, 0x81]}}]}], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x8, 0xd351, 0x9, 0x800, [{0x22, 0xf, "02c6492e9a9f756ffafe31cfa5ebf6c10b4717421bf72a6bbb169f87d98b5f5f770bb6b1ea241f72b0c67bafbd4e6c112623aaf1b43e691fce350dedf4d166806dee8cf08dfd3a0fc09766b3e6596fe124ad48696f90f0a8b8ad5dcca8b11db9924a3f4f72ded329afa41b5bc74b36b0f2cdb1de99ea"}, {0x7, 0x1c, "386784c374efadffc4a27d9913cd71810a6051b2f02f76728af1f3baa1b6cf2f1b22a3d561dc06bdc7939a249102ba6515874636c741ad522227755f846ed3f9a85e57258c1436c401b43c06fc1b746891b22703a4cdaa0f1ad31e547d4613f466271927ea162a81d21fd73bce46169bc1b721864496c2a9f29217597007ff43361dfa77148a2e2d3bcbbc965283a963041c4b4140484e1542cb5547ec247939c1d9e67a58711717a3066c269f6bc3109dfb7c754bcacbab280b911dab4c6d6e08df9eb7580823b00d1fda510d31c2ed4bfa726c206a457761a05859b7851c1a198b40"}, {0x4, 0x5, "6e8831ec0f8ea067c77f703b7045c11f4e7279477f990c80a4235ea824e13532873af1103a40d160a59b9aca"}, {0x22, 0x12, "c8134405e15086c0864e7bc333b75f5d590f01c509ba3f0801f771020ff9d29311fb434f665cc8a9a58aa88d868000dec2278151b8cff7768339da05ceabac759266b3b78f3bac0ab5f4a2f4f003ac7923a5d57b66f467505f08b60187fd980b755f8caa3efba166ffee2d57999240b8d21c70f32b6daf002951daee89cc6dd49a7e4f4d9ac28c93c17ef1e20c41b4ec"}, {0x22, 0x16, "792e9e6bf0fc8c230814155de16cc82b09088375ecff4827454b4ba47d3a25c48d9a20f7811131b65b245054d47bf188eb6fe1661f9b141c4d971a64ff9c5f3610b6ac6a749ebecbb8cde8a9f7c63f8b8be6f12101ecf47e6eba839f6b298bc0bf0d422cdd31cf2a04eeba5efec7305f5edfab5b62fc41760d5771ecc08d6f51e076693ffbd88fdb697c17eb5a41147c981331b09b8d5dd645094403c8f52dff47b86c3d3ff6eef474180ca5f66489"}, {0x1f, 0x1d, "d9c9702846895fd834c1ef8c5ffae56b157fe1f6661bd974059689983cb23c0e73c91a97bc9d7819f2bfc641d72e409c7f7ac0089f3c41ef699c89c4d48d3e889eef3d0973d0b5f3b8df4de98f388f2901fddf5f09696c1026897bc9a119b59671ceacfb44e25b737c2d7f4c904d1a3896f1db3f9ebc53a4c17043be05aeab25af4cfc72f177d3fd377f0ed32cb029b434dee07294843ede395d391d8b0e1d828c41c538de6c536c08633a070131bcecac15ff108b66cf0cd9326b5f76664a508e3fee0456fbec21ec122bd1ca0016a0d95de2cf670ff709dba6fa9190d46876ed05fd649b6927"}, {0x3, 0x1, "4ea2f55cacac48be50"}, {0x4, 0x200, "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"}, {0x18, 0x19, "8e32ae75064c830f21a481bf2da9f97bf09f606c336c1249993f2d1c05ebc576f7c89fc0d4615d04a23dd9219e5e3755a79792784eaab3a5bfefb1bd53aa32ca2e7b24d0283b47461cf394e08c4630f0aaa503cc753e9275a4536e5a8b2c3dc9b94a75fc72be015097c6bb7e36802f55ede310d205ea875b19a20a36aa4008fd71afa35a39f7fad13bcf1c60124b846a73c9eb4bf1a7df110d996a3c8368d7bb1e302b9a34865ea294f50d003062e4e1e22bc32944b9bbe20f1fc2d56541c8d3030b4c2b0ce83f98d02b"}]}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) 141.775477ms ago: executing program 3 (id=2689): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x0, 0x4000, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00120000009404006c0012800b00010062726964676500005c0002800c001e00000000000000000005002a00ff0000000500260001000000050019000000000008001a"], 0x9c}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="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", 0xffe3}], 0x1, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @local}}}], 0x20}, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340), 0x0, &(0x7f0000000140)=[@hopopts={{0xc8, 0x29, 0x36, {0x2f, 0x16, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x8, 0x5, [0x7f, 0x9, 0x8000000000000001, 0x6, 0x2, 0x1000000007, 0xb, 0x6]}}, @ra={0x5, 0x2, 0xf}, @jumbo={0xc2, 0x4, 0xa}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x50, {0x2, 0x12, 0x1, 0x80, [0xffffffffffff0f66, 0x80, 0xff00000000000000, 0x7, 0x7c8, 0x0, 0x9, 0x2, 0x7]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0xe0}}], 0x1, 0x80) 49.473665ms ago: executing program 2 (id=2690): socket(0x10, 0x80002, 0x0) (async) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) unshare(0x20000400) (async) unshare(0x20000400) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x401}, {0x9, 0x8, 0x8, 0x40}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0x4e}, {0xe97, 0x3, 0x81, 0x4, 0x1, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000000080)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000b19dca4c73bf2ddc2fac721f0de0871ff73a5e96466b8bdbbbd402000000a668a8809b4e890d9c0b", @ANYRES16=r7, @ANYBLOB="000129bd7000ffdbdf256d00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x440000c5}, 0x20008004) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) listen(r6, 0xfff) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x7, 0x9}, 0x10, 0x0, r12}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x7, 0x9}, 0x10, 0x0, r12}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r11], 0x4c}}, 0x0) 48.780824ms ago: executing program 4 (id=2691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x3, 0x0, 0x2, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@broadcast, 0x80000}, {@broadcast}]}, @generic={0x7, 0x2}]}}, {{0x4e23, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x25, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0xf2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 4 (id=2692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000280)={r0, 0x101, 0x80000001, 0x100000001}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)='%ps \x00'}, 0x20) (async) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'dvmrp0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @broadcast, @private}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0x37, 0xfffffffa}}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0x5}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) kernel console output (not intermixed with test programs): failed to get link speed/duplex [ 150.197312][T11253] batman_adv: batadv0: Interface deactivated: gretap1 [ 150.276604][T11243] lo speed is unknown, defaulting to 1000 [ 150.498031][T11270] pimreg: entered allmulticast mode [ 150.534857][T11270] dvmrp8: entered allmulticast mode [ 150.544243][T11270] pimreg: left allmulticast mode [ 150.552272][T11270] dvmrp8: left allmulticast mode [ 150.637036][T11272] lo speed is unknown, defaulting to 1000 [ 150.706724][T11278] vlan0: entered promiscuous mode [ 150.736586][T11283] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.769621][T11285] netlink: 'syz.4.1486': attribute type 1 has an invalid length. [ 150.818627][T11283] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.837254][T11285] gretap2: entered promiscuous mode [ 150.845145][T11285] bond4: (slave gretap2): making interface the new active one [ 150.853361][T11285] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 150.899503][T11285] __nla_validate_parse: 10 callbacks suppressed [ 150.899525][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1486'. [ 150.901141][T11283] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.942324][T11285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.002573][T11283] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.069200][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.082669][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.119246][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.131111][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 151.153434][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.161935][T10146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.177606][T10146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.256511][T10145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.446080][T11319] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 151.467240][T11319] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 151.477343][T11319] team0: Port device dummy0 removed [ 151.526734][T11324] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1501'. [ 151.586545][T11331] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1504'. [ 151.601148][T11331] team_slave_0 (unregistering): left promiscuous mode [ 151.610757][T11331] team0: Port device team_slave_0 removed [ 151.786527][T11350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'. [ 151.806855][T11350] xfrm1: entered promiscuous mode [ 151.812014][T11350] xfrm1: entered allmulticast mode [ 151.859630][T11346] lo speed is unknown, defaulting to 1000 [ 151.952848][ T30] audit: type=1800 audit(1756339014.547:6): pid=11361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1512" name="memory.events" dev="tmpfs" ino=1586 res=0 errno=0 [ 152.029334][ T30] audit: type=1804 audit(1756339014.547:7): pid=11361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1512" name="/newroot/308/memory.events" dev="tmpfs" ino=1586 res=1 errno=0 [ 152.437161][T11374] lo speed is unknown, defaulting to 1000 [ 152.521837][T11400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 152.590236][T11405] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1524'. [ 152.629681][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'. [ 152.652632][T11400] bridge_slave_1: left allmulticast mode [ 152.669609][T11400] bridge_slave_1: left promiscuous mode [ 152.683354][T11400] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.692169][T11400] bridge_slave_0: left allmulticast mode [ 152.711101][T11400] bridge_slave_0: left promiscuous mode [ 152.717392][T11400] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.788984][T11407] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.865731][T11409] syzkaller0: entered promiscuous mode [ 152.883912][T11409] syzkaller0: entered allmulticast mode [ 152.900035][T11407] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.948797][T11404] lo speed is unknown, defaulting to 1000 [ 152.961394][T11407] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.015898][T11375] lo speed is unknown, defaulting to 1000 [ 153.024637][T11407] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.192177][T10144] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.213719][T11420] syzkaller0: entered promiscuous mode [ 153.219324][T11420] syzkaller0: entered allmulticast mode [ 153.231376][T10144] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.258984][T10144] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.277123][T10144] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.385777][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1532'. [ 153.471614][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 153.481434][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1533'. [ 153.490748][T11425] netlink: 'syz.4.1533': attribute type 1 has an invalid length. [ 153.520154][T11424] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 153.547186][T10149] net_ratelimit: 25 callbacks suppressed [ 153.547205][T10149] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 153.633933][T11433] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 153.683735][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 153.853446][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 153.953631][T11447] netlink: 'syz.2.1539': attribute type 1 has an invalid length. [ 154.007177][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 154.108685][T11447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.203483][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 154.294495][T11448] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.330235][T11448] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.394928][T11448] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 154.574324][T11451] tipc: Invalid UDP bearer configuration [ 154.574362][T11451] tipc: Enabling of bearer rejected, failed to enable media [ 154.601608][T11463] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 154.634429][T11452] veth7: entered promiscuous mode [ 154.670828][T11452] bond2: (slave veth7): Enslaving as an active interface with a down link [ 154.719210][T11465] tipc: Enabled bearer , priority 0 [ 154.731386][T11461] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 154.752705][T11460] tipc: Disabling bearer [ 154.793753][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 154.908873][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 154.952680][T11488] syzkaller1: entered promiscuous mode [ 155.023111][T11488] syzkaller1: entered allmulticast mode [ 155.033742][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 155.192867][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 155.497080][T11508] lo speed is unknown, defaulting to 1000 [ 155.676779][T11527] IPVS: length: 222 != 8 [ 155.689716][T11527] netlink: 'syz.1.1561': attribute type 11 has an invalid length. [ 156.106003][T11543] __nla_validate_parse: 111 callbacks suppressed [ 156.106020][T11543] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1564'. [ 156.256490][T11552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1569'. [ 156.550337][T11576] netlink: 'syz.4.1576': attribute type 10 has an invalid length. [ 156.567308][T11576] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1576'. [ 156.595717][T11576] geneve0: entered promiscuous mode [ 156.624320][T11576] team0: Port device geneve0 added [ 156.636069][T10145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.644533][T10145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.654166][T10146] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.678244][T10146] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.746440][T11596] netlink: 'syz.2.1582': attribute type 29 has an invalid length. [ 156.895123][T11609] nbd: couldn't find device at index 536870912 [ 156.907697][T11612] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20001 [ 157.039770][T11624] netlink: 'syz.4.1590': attribute type 1 has an invalid length. [ 157.099058][T11630] netlink: 'syz.0.1592': attribute type 2 has an invalid length. [ 157.118794][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1592'. [ 157.134348][T11630] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'. [ 157.152406][T11626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1591'. [ 157.419166][T11658] tap0: tun_chr_ioctl cmd 35108 [ 157.503548][T11667] !: renamed from dummy0 (while UP) [ 157.657229][T11684] netlink: 'syz.1.1610': attribute type 3 has an invalid length. [ 157.708717][T11687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1612'. [ 157.806563][T11691] macsec1: entered promiscuous mode [ 157.811845][T11691] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 157.821754][T11691] mac80211_hwsim hwsim22 wlan1: left promiscuous mode [ 157.841206][T11701] tipc: Enabling of bearer rejected, failed to enable media [ 157.857582][T11703] erspan0: left allmulticast mode [ 158.016979][T11715] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1619'. [ 158.042133][T11715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1619'. [ 158.105406][T11723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1621'. [ 158.223365][ T12] erspan0: left promiscuous mode [ 158.441837][T11759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 158.577875][T11787] netlink: 'syz.3.1638': attribute type 12 has an invalid length. [ 158.587121][T11787] netlink: 'syz.3.1638': attribute type 14 has an invalid length. [ 158.607130][T11791] net_ratelimit: 31 callbacks suppressed [ 158.607145][T11791] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 158.643514][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.814236][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.943775][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 158.978615][T11811] lo speed is unknown, defaulting to 1000 [ 159.083634][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 159.203369][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 159.313838][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 159.376579][T11859] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.433554][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 159.455788][T11865] netlink: 'syz.3.1658': attribute type 1 has an invalid length. [ 159.567065][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 159.704190][T11870] lo speed is unknown, defaulting to 1000 [ 159.770321][T11885] sctp: [Deprecated]: syz.3.1664 (pid 11885) Use of int in max_burst socket option. [ 159.770321][T11885] Use struct sctp_assoc_value instead [ 160.010527][T11897] dvmrp8: entered allmulticast mode [ 160.119372][T11913] netlink: 'syz.1.1671': attribute type 4 has an invalid length. [ 160.176098][T11918] netlink: 'syz.4.1673': attribute type 5 has an invalid length. [ 160.230204][T11924] tipc: Started in network mode [ 160.244103][T11924] tipc: Node identity 12570fbe46a8, cluster identity 4711 [ 160.256921][T11924] tipc: Enabled bearer , priority 0 [ 160.275357][T11924] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 160.584315][T11941] ieee802154 phy0 wpan0: encryption failed: -90 [ 161.170045][T11924] tipc: Resetting bearer [ 161.184931][T11932] __nla_validate_parse: 18 callbacks suppressed [ 161.184948][T11932] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1676'. [ 161.221610][T11922] tipc: Disabling bearer [ 161.283297][T11890] dvmrp8: left allmulticast mode [ 161.358071][T11956] tipc: Enabled bearer , priority 0 [ 161.400444][T11959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1683'. [ 161.429423][T11956] syzkaller0: entered promiscuous mode [ 161.471319][T11956] syzkaller0: entered allmulticast mode [ 161.488608][T11960] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.520500][T11960] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.546860][T11968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.560281][T11968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.612858][T11960] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.648927][T11960] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.691951][T11968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.716703][T11968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.749595][T11960] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.760051][T11960] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.777181][T11968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.790378][T11968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.870834][T11960] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.885004][T11960] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.901969][T11968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.914325][T11968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.972873][T10145] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 161.989048][T10145] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.026927][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'. [ 162.046346][T12006] bond4: entered promiscuous mode [ 162.051589][T10145] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.062104][T10145] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.108182][T10145] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.119942][T10145] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.128493][T10145] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.137010][T10145] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.148859][T10145] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.157394][T10145] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.170866][T10145] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.182622][T10145] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.209398][T12014] tipc: Enabling of bearer rejected, already enabled [ 162.220649][T12014] tipc: Enabling of bearer rejected, already enabled [ 162.229760][T12014] tipc: Enabling of bearer rejected, already enabled [ 162.239106][T12014] tipc: Enabling of bearer rejected, already enabled [ 162.247632][T10145] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.262270][T10145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.271148][T12014] tipc: Enabling of bearer rejected, already enabled [ 162.291159][T10148] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.299484][T10148] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.353729][ T9269] tipc: Node number set to 3909348611 [ 162.405323][T12010] lo speed is unknown, defaulting to 1000 [ 162.430136][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'. [ 162.577546][T12031] lo speed is unknown, defaulting to 1000 [ 162.674588][T12046] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 162.701112][T12046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1706'. [ 162.778571][T12052] netlink: 'syz.1.1708': attribute type 10 has an invalid length. [ 162.791153][T12052] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.794835][T12054] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 162.808842][T12052] bond0: (slave team0): Enslaving as an active interface with an up link [ 163.096002][T12070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1712'. [ 163.216626][T12075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1714'. [ 163.341654][T12077] tipc: Enabled bearer , priority 0 [ 163.359959][T12077] syzkaller0: entered promiscuous mode [ 163.376309][T12077] syzkaller0: entered allmulticast mode [ 163.435642][T12077] syzkaller1: entered allmulticast mode [ 163.455436][T12072] lo speed is unknown, defaulting to 1000 [ 163.455856][T12077] syzkaller1: left allmulticast mode [ 163.475270][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 163.548588][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 163.582412][T12091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1718'. [ 163.651575][T12076] tipc: Resetting bearer [ 163.661266][T12076] tipc: Disabling bearer [ 163.735479][T10144] net_ratelimit: 22 callbacks suppressed [ 163.735497][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.806430][T12104] netlink: 'syz.3.1723': attribute type 7 has an invalid length. [ 163.849262][T12104] netlink: 'syz.3.1723': attribute type 8 has an invalid length. [ 163.870119][T12113] netlink: 'syz.2.1725': attribute type 11 has an invalid length. [ 163.889360][T12113] netlink: 'syz.2.1725': attribute type 4 has an invalid length. [ 163.928394][T12088] netlink: 'syz.1.1717': attribute type 1 has an invalid length. [ 163.933577][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 163.969176][T12115] geneve4: entered promiscuous mode [ 163.992626][T10148] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.007916][T12084] lo speed is unknown, defaulting to 1000 [ 164.009928][T12120] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 164.017643][T10148] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.068209][ T9] IPVS: starting estimator thread 0... [ 164.110779][T10148] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.159352][T10148] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.163162][T12125] IPVS: using max 42 ests per chain, 100800 per kthread [ 164.233407][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 164.344753][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 164.463198][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 164.556294][T12155] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 164.572117][T12155] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 164.585534][T12155] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 164.652807][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 164.757222][T12177] netlink: 'syz.2.1745': attribute type 13 has an invalid length. [ 164.758316][T12171] netlink: 'syz.0.1744': attribute type 1 has an invalid length. [ 164.773700][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 164.812912][T12177] netlink: 'syz.2.1745': attribute type 17 has an invalid length. [ 164.931885][T12171] 8021q: adding VLAN 0 to HW filter on device bond5 [ 164.939218][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 165.033684][T12177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.041562][T12177] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.049911][T12177] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.082367][ T9] lo speed is unknown, defaulting to 1000 [ 165.091569][ T9] syz2: Port: 1 Link ACTIVE [ 165.184464][T12205] ip6tnl0: Caught tx_queue_len zero misconfig [ 165.273385][ T7095] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 165.285407][T12178] lo speed is unknown, defaulting to 1000 [ 165.298875][T12208] netlink: 'syz.0.1756': attribute type 3 has an invalid length. [ 165.400953][T12188] lo speed is unknown, defaulting to 1000 [ 165.604331][T12205] lo speed is unknown, defaulting to 1000 [ 165.854774][T12229] lo speed is unknown, defaulting to 1000 [ 166.152566][T12247] netlink: 'syz.2.1764': attribute type 1 has an invalid length. [ 166.195276][ T5864] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 166.201698][ T5864] Bluetooth: hci2: command 0x0401 tx timeout [ 166.219132][T12235] lo speed is unknown, defaulting to 1000 [ 166.282435][T12252] __nla_validate_parse: 13 callbacks suppressed [ 166.282453][T12252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1768'. [ 166.417837][T12261] veth0_to_bridge: entered promiscuous mode [ 166.450442][T12260] veth0_to_bridge: left promiscuous mode [ 166.649169][T12282] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1773'. [ 167.025914][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'. [ 167.385029][T12307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 167.420374][T12309] bond5: (slave batadv1): Opening slave failed [ 167.520969][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1789'. [ 167.755179][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 167.789344][T12316] lo speed is unknown, defaulting to 1000 [ 167.966784][T12364] vxcan1: entered allmulticast mode [ 167.972449][T12365] tipc: New replicast peer: 255.255.255.255 [ 168.000817][T12365] tipc: Enabled bearer , priority 10 [ 168.214594][T12368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1800'. [ 168.316562][T12381] ipvlan2: entered promiscuous mode [ 168.379706][T12391] syzkaller1: entered promiscuous mode [ 168.390331][T12391] syzkaller1: entered allmulticast mode [ 168.507895][T12404] validate_nla: 1 callbacks suppressed [ 168.507914][T12404] netlink: 'syz.2.1811': attribute type 1 has an invalid length. [ 168.587334][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 168.645558][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1811'. [ 168.685383][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 168.734172][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1816'. [ 168.754578][ T7095] net_ratelimit: 22 callbacks suppressed [ 168.754596][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.808595][T12431] openvswitch: netlink: Missing key (keys=40, expected=80) [ 168.867386][T12435] batadv_slave_1: entered promiscuous mode [ 168.883192][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 168.896330][T12433] batadv_slave_1: left promiscuous mode [ 169.004312][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 169.013162][ T9269] tipc: Node number set to 2835778468 [ 169.101499][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 169.144092][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 169.273227][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 169.321223][T12478] tipc: Enabling of bearer rejected, already enabled [ 169.383350][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 169.467632][T12466] lo speed is unknown, defaulting to 1000 [ 169.476079][T12487] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.490607][T12487] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.544954][T12497] caif0: entered allmulticast mode [ 169.559332][T12487] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.571883][T12487] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.623327][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 169.641651][T12487] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.652127][T12487] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.669474][T12490] lo speed is unknown, defaulting to 1000 [ 169.669682][T12501] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 169.683718][T12501] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 169.727566][T12487] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.739536][T12487] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.803441][T10145] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.811696][T10145] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.823509][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.831766][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.848206][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.858297][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.889354][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.908236][T12486] delete_channel: no stack [ 169.922477][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.030272][T12508] ieee802154 phy0 wpan0: encryption failed: -22 [ 170.088022][T12510] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.111385][T12510] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.128227][T12510] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 170.241596][T12510] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.261497][T12510] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.272600][T12510] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 170.323351][T12528] vlan2: entered promiscuous mode [ 170.328415][T12528] gretap0: entered promiscuous mode [ 170.361120][T12510] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.375448][T12510] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.389480][T12510] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 170.425335][T12536] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 170.477150][T12536] vlan2: entered allmulticast mode [ 170.522938][T12536] bond0: entered allmulticast mode [ 170.561874][T12536] bond_slave_0: entered allmulticast mode [ 170.568281][T12536] bond_slave_1: entered allmulticast mode [ 170.612746][T12536] syz_tun: entered allmulticast mode [ 170.625379][T12536] team0: entered allmulticast mode [ 170.630692][T12536] team_slave_1: entered allmulticast mode [ 170.640240][T12510] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.655138][T12510] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.665302][T12510] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 170.820306][T10145] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.837325][T10145] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.854539][T10145] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.927331][T10145] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 170.955683][T10145] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 170.980722][T10145] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 171.004657][T10145] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.053625][T10145] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.054431][T12589] netlink: 'syz.3.1859': attribute type 6 has an invalid length. [ 171.071330][T10145] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 171.292392][T12589] bond3: entered promiscuous mode [ 171.318874][T12567] lo speed is unknown, defaulting to 1000 [ 171.324829][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 171.335094][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 171.359279][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 171.502365][T12612] bond0: (slave syz_tun): Device is not bonding slave [ 171.509751][T12612] bond0: option active_slave: invalid value (syz_tun) [ 171.528140][T12612] __nla_validate_parse: 10 callbacks suppressed [ 171.528155][T12612] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1862'. [ 171.652401][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'. [ 171.785630][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 171.809004][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 171.930711][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1868'. [ 172.298766][T12624] lo speed is unknown, defaulting to 1000 [ 172.330026][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1874'. [ 172.346493][T12661] netlink: 'syz.2.1874': attribute type 5 has an invalid length. [ 172.386746][T12661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1874'. [ 172.511549][T12661] geneve2: entered promiscuous mode [ 172.532812][T12661] geneve2: entered allmulticast mode [ 172.556055][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 172.583843][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 172.599914][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 172.647363][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 172.860178][T12696] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 172.871100][T12696] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1882'. [ 172.871644][T12703] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1881'. [ 172.915682][T12703] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1881'. [ 172.931868][T12696] bond0 (unregistering): Released all slaves [ 172.959549][T12700] gtp1: entered promiscuous mode [ 172.965904][T12700] gtp1: entered allmulticast mode [ 173.036574][T12710] netlink: 'syz.1.1886': attribute type 25 has an invalid length. [ 173.084708][T12715] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 173.092907][T12715] dummy0: entered promiscuous mode [ 173.219729][T12727] syzkaller1: entered promiscuous mode [ 173.229204][T12727] syzkaller1: entered allmulticast mode [ 173.250572][T12728] syzkaller1: entered promiscuous mode [ 173.259321][T12728] syzkaller1: entered allmulticast mode [ 173.669699][T12779] netlink: 'syz.3.1907': attribute type 1 has an invalid length. [ 173.682151][T12779] NCSI netlink: No device for ifindex 813332851 [ 173.690795][T12778] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.702587][T12778] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 173.712499][T12778] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 173.779486][T12778] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.789566][T12778] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 173.800742][T12778] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 173.832359][T12782] lo speed is unknown, defaulting to 1000 [ 173.838522][ T13] net_ratelimit: 64 callbacks suppressed [ 173.838537][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 173.874248][T12778] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.884580][T12778] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 173.894486][T12778] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 173.939000][T12778] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.949455][T12778] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 173.959835][T12778] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 173.998917][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 174.067100][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.083669][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.097206][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.135082][ T7095] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.146581][ T7095] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.158546][ T7095] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.180535][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.189130][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.202166][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.210747][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.219174][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 174.229190][ T13] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 174.233508][T12801] openvswitch: netlink: Duplicate or invalid key (type 0). [ 174.246933][T12786] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.252402][T12801] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.256888][T12786] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.256916][T12786] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 174.293487][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 174.347759][T12786] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.364979][T12786] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.377517][T12786] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 174.420269][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 174.437258][T12786] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.469107][T12786] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.495420][T12786] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 174.552920][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 174.579532][T12786] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 174.589490][T12786] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 174.599870][T12786] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 174.619548][T12826] netlink: 'syz.4.1923': attribute type 30 has an invalid length. [ 174.636952][T12828] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 174.678831][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 174.793302][T12838] netlink: 'syz.4.1926': attribute type 4 has an invalid length. [ 174.793313][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 174.907865][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 175.070162][T12853] netlink: 'syz.3.1931': attribute type 1 has an invalid length. [ 175.087169][T12853] team0: entered promiscuous mode [ 175.092282][T12853] team_slave_0: entered promiscuous mode [ 175.099103][T12853] team_slave_1: entered promiscuous mode [ 175.105881][T12853] debugfs: 'hsr0' already exists in 'hsr' [ 175.111929][T12853] Cannot create hsr debugfs directory [ 175.117717][T12853] hsr0: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 175.489709][T12880] netlink: 'syz.3.1940': attribute type 1 has an invalid length. [ 175.506258][T12880] batadv1: entered promiscuous mode [ 175.511878][T12880] batadv1: entered allmulticast mode [ 175.551829][T12885] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 175.567734][T12885] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 175.746177][T12882] lo speed is unknown, defaulting to 1000 [ 175.930231][T10144] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 175.948610][T10144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 175.957930][T10144] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 175.997296][T10144] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.009515][T10144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.018933][T10144] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.047285][T10144] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.079510][T10144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.123265][T10144] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.142083][T10144] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.175587][T10144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 176.192526][T10144] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 176.273149][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 176.558087][T12939] __nla_validate_parse: 26 callbacks suppressed [ 176.558110][T12939] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1958'. [ 176.601589][T12941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1960'. [ 176.634754][T12941] veth1: entered promiscuous mode [ 176.651662][T12941] netlink: 'syz.2.1960': attribute type 8 has an invalid length. [ 176.727486][T12946] netlink: 'syz.3.1961': attribute type 10 has an invalid length. [ 176.746056][T12946] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1961'. [ 176.792100][T12946] dummy0: entered allmulticast mode [ 176.893857][T12955] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1963'. [ 176.924310][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1963'. [ 176.951957][T12946] syzkaller0: entered promiscuous mode [ 176.963882][T12946] syzkaller0: entered allmulticast mode [ 176.990661][T12948] tipc: Enabled bearer , priority 0 [ 177.024366][T12946] netlink: 'syz.3.1961': attribute type 1 has an invalid length. [ 177.032116][T12946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1961'. [ 177.051501][T12949] lo speed is unknown, defaulting to 1000 [ 177.116477][T12963] vxcan1: left allmulticast mode [ 177.124549][T12945] tipc: Resetting bearer [ 177.221138][T12945] tipc: Disabling bearer [ 177.418310][T12975] IPv6: Can't replace route, no match found [ 177.554267][T12980] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1966'. [ 177.644621][T12984] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1967'. [ 177.828776][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1972'. [ 177.860032][T12996] 8021q: adding VLAN 0 to HW filter on device bond6 [ 177.963764][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1974'. [ 178.024724][T13016] netlink: 'syz.4.1973': attribute type 10 has an invalid length. [ 178.039744][T13016] dummy0: entered promiscuous mode [ 178.051459][T13016] team0: Port device dummy0 added [ 178.147679][T13016] team0: Port device dummy0 removed [ 178.222408][T13014] lo speed is unknown, defaulting to 1000 [ 178.883662][T10145] net_ratelimit: 35 callbacks suppressed [ 178.883680][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 178.918418][T13042] validate_nla: 3 callbacks suppressed [ 178.918436][T13042] netlink: 'syz.4.1982': attribute type 11 has an invalid length. [ 179.033553][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 179.070918][T13037] lo speed is unknown, defaulting to 1000 [ 179.246195][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 179.329701][T13055] syzkaller1: entered promiscuous mode [ 179.372288][T13055] syzkaller1: entered allmulticast mode [ 179.403940][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 179.583610][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 179.629089][T13069] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.683940][T13069] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 179.716825][T13069] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 179.750635][T13050] lo speed is unknown, defaulting to 1000 [ 179.763948][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 179.794154][T13069] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.806594][T13069] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 179.820935][T13069] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 179.866443][T13075] tipc: Enabled bearer , priority 0 [ 179.906059][T13075] syzkaller0: entered promiscuous mode [ 179.911850][T13075] syzkaller0: entered allmulticast mode [ 179.920565][T13075] tipc: Resetting bearer [ 179.928864][T13069] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.942585][T13069] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 179.953936][T13069] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 179.977861][T13074] tipc: Resetting bearer [ 180.056888][T13074] tipc: Disabling bearer [ 180.075908][T13069] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 180.087095][T13069] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 180.097399][T13069] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 180.140432][T13078] netlink: 'syz.4.1990': attribute type 1 has an invalid length. [ 180.143289][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 180.167153][T13078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.195593][T13078] veth7: entered promiscuous mode [ 180.209948][T13078] bond0: (slave veth7): Enslaving as an active interface with a down link [ 180.224160][T13081] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 180.263224][T13078] erspan0: entered allmulticast mode [ 180.290620][T13078] bond3: (slave erspan0): Releasing active interface [ 180.320477][T13078] bond0: (slave erspan0): making interface the new active one [ 180.328926][T13078] erspan0: entered promiscuous mode [ 180.334647][T13078] bond0: (slave erspan0): Enslaving as an active interface with an up link [ 180.343419][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.351869][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.361596][ T13] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 180.395165][T13083] bond0 (unregistering): Released all slaves [ 180.417647][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.427848][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.448205][ T13] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 180.457867][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.466482][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.474840][ T13] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 180.486886][T10145] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.495524][T10145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.505640][T10145] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 180.519932][T13087] ªªªªªª: renamed from wg2 [ 180.544700][T13082] delete_channel: no stack [ 180.554065][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 180.603770][T13089] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 180.703363][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 180.913278][ T5180] Bluetooth: hci2: command 0x0401 tx timeout [ 180.913361][ T5869] Bluetooth: hci1: command 0x0406 tx timeout [ 180.919337][ T5867] Bluetooth: hci3: command 0x0406 tx timeout [ 181.396850][T13151] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 181.568266][T13172] __nla_validate_parse: 15 callbacks suppressed [ 181.568283][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2014'. [ 181.655080][T13174] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.759258][T13151] lo speed is unknown, defaulting to 1000 [ 182.089922][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2027'. [ 182.210304][T13207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2030'. [ 182.550702][T13231] sch_fq: defrate 0 ignored. [ 182.556885][T13229] netlink: 'syz.1.2037': attribute type 10 has an invalid length. [ 182.567186][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2038'. [ 182.587096][T13229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.608591][T13229] batadv0: entered allmulticast mode [ 182.629603][T13229] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 182.640509][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2037'. [ 182.659194][T13229] netlink: 'syz.1.2037': attribute type 10 has an invalid length. [ 182.677508][T13229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2037'. [ 182.696930][T13229] batadv0: entered promiscuous mode [ 182.726073][T13229] bond0: (slave batadv0): Releasing backup interface [ 182.750130][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2041'. [ 182.772411][T13247] dvmrp0: left allmulticast mode [ 182.773092][T13245] netlink: 'syz.4.2041': attribute type 30 has an invalid length. [ 182.787108][T13245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2041'. [ 182.810640][T13249] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2043'. [ 182.836591][T13247] lo speed is unknown, defaulting to 1000 [ 182.851403][T13247] lo speed is unknown, defaulting to 1000 [ 182.862011][T13247] lo speed is unknown, defaulting to 1000 [ 182.878276][T13251] netlink: 'syz.4.2044': attribute type 9 has an invalid length. [ 182.891201][T13252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2042'. [ 182.908249][T13251] macvlan0: entered promiscuous mode [ 182.918023][T13251] hsr0: entered promiscuous mode [ 182.923787][T13251] macvlan0: entered allmulticast mode [ 182.926895][T13254] sctp: [Deprecated]: syz.1.2045 (pid 13254) Use of int in max_burst socket option deprecated. [ 182.926895][T13254] Use struct sctp_assoc_value instead [ 182.929320][T13251] hsr0: entered allmulticast mode [ 182.951948][T13251] hsr_slave_0: entered allmulticast mode [ 182.958185][T13251] hsr_slave_1: entered allmulticast mode [ 182.964888][T13251] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 183.067805][T13247] infiniband syz0: set down [ 183.072950][ T1210] lo speed is unknown, defaulting to 1000 [ 183.081458][T13247] infiniband syz0: added lo [ 183.121985][T13247] RDS/IB: syz0: added [ 183.126259][T13247] smc: adding ib device syz0 with port count 1 [ 183.132535][T13247] smc: ib device syz0 port 1 has pnetid [ 183.138721][ T1210] lo speed is unknown, defaulting to 1000 [ 183.145293][T13247] lo speed is unknown, defaulting to 1000 [ 183.197267][T13263] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.277386][T13247] lo speed is unknown, defaulting to 1000 [ 183.341025][T13263] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.411663][T13267] lo speed is unknown, defaulting to 1000 [ 183.512612][T13263] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.536900][T13267] lo speed is unknown, defaulting to 1000 [ 183.651351][T13263] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.740010][T13289] netlink: 'syz.2.2053': attribute type 2 has an invalid length. [ 183.757705][T13247] lo speed is unknown, defaulting to 1000 [ 183.780131][T13281] netlink: 'syz.3.2051': attribute type 303 has an invalid length. [ 183.821328][ T7095] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.836167][ T7095] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.858406][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.879665][ T13] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.923377][ T12] net_ratelimit: 29 callbacks suppressed [ 183.923396][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 183.964791][T13247] lo speed is unknown, defaulting to 1000 [ 184.006936][T13293] IPVS: length: 103 != 24 [ 184.120864][T13304] tipc: Enabled bearer , priority 0 [ 184.173212][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 184.198771][T13298] tipc: Disabling bearer [ 184.232614][ T7095] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 184.261947][T13247] lo speed is unknown, defaulting to 1000 [ 184.294256][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 184.465631][T13247] lo speed is unknown, defaulting to 1000 [ 184.493210][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 184.603643][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 184.626615][T13247] lo speed is unknown, defaulting to 1000 [ 184.673150][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 184.733456][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 184.844207][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 185.001129][T13327] syzkaller1: entered promiscuous mode [ 185.030654][T13327] syzkaller1: entered allmulticast mode [ 185.054835][T13327] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 185.240495][T13327] 8021q: adding VLAN 0 to HW filter on device bond7 [ 185.309970][T13331] bond7: (slave bridge0): making interface the new active one [ 185.318650][T13331] bond7: (slave bridge0): Enslaving as an active interface with an up link [ 185.387982][T13334] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 185.426833][T13326] pim6reg: entered allmulticast mode [ 185.433304][T13326] pim6reg: left allmulticast mode [ 185.449477][T13297] lo speed is unknown, defaulting to 1000 [ 185.563194][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 185.673287][T13323] lo speed is unknown, defaulting to 1000 [ 185.673414][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 185.899809][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 185.907869][T13366] tipc: Enabled bearer , priority 0 [ 185.944903][T13366] syzkaller0: entered promiscuous mode [ 185.950394][T13366] syzkaller0: entered allmulticast mode [ 186.028662][T13366] tipc: Resetting bearer [ 186.036256][T13365] tipc: Resetting bearer [ 186.044997][T13365] tipc: Disabling bearer [ 186.052514][T13377] netlink: 'syz.3.2074': attribute type 39 has an invalid length. [ 186.265785][T13392] tipc: Enabling of bearer rejected, failed to enable media [ 186.283680][T13392] tipc: Enabling of bearer rejected, failed to enable media [ 186.406954][T13399] netlink: 'syz.3.2084': attribute type 1 has an invalid length. [ 186.414935][T13399] NCSI netlink: No device for ifindex 0 [ 186.595296][T13404] __nla_validate_parse: 76 callbacks suppressed [ 186.595316][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2085'. [ 186.643440][T13404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2085'. [ 186.666560][T13404] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2085'. [ 186.680737][T13410] tipc: Enabling of bearer rejected, failed to enable media [ 186.770844][T13433] syzkaller1: entered promiscuous mode [ 186.786077][T13433] syzkaller1: entered allmulticast mode [ 186.850320][T13411] lo speed is unknown, defaulting to 1000 [ 186.863375][T13411] lo speed is unknown, defaulting to 1000 [ 186.938427][T13450] netlink: 2748 bytes leftover after parsing attributes in process `syz.1.2099'. [ 186.951219][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2099'. [ 186.963860][T13454] netlink: 5636 bytes leftover after parsing attributes in process `syz.0.2098'. [ 186.997184][T13454] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2098'. [ 187.040631][T13456] lo: entered allmulticast mode [ 187.045361][T13458] netlink: 'syz.1.2102': attribute type 9 has an invalid length. [ 187.046824][T13456] lo: left allmulticast mode [ 187.102241][T13463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 187.119118][T13468] netlink: 'syz.1.2102': attribute type 9 has an invalid length. [ 187.137401][T13463] nbd: socks must be embedded in a SOCK_ITEM attr [ 187.144039][ T5875] block nbd64: NBD_DISCONNECT [ 187.216144][T13472] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.221518][ T5861] udevd[5861]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 187.228164][T13472] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 187.251742][T13472] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 187.566729][T13484] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20001 [ 187.576966][T13472] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.627946][T13472] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 187.669993][T13472] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 187.718176][T13472] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.736774][T13472] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 187.753127][T13472] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 187.807857][T13496] netlink: 'syz.1.2111': attribute type 16 has an invalid length. [ 187.823291][T13496] netlink: 'syz.1.2111': attribute type 17 has an invalid length. [ 187.837082][T13472] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.853345][T13472] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 187.873081][T13472] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 188.373240][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.541838][T13502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2113'. [ 188.633597][T13496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.923159][T13496] tipc: Resetting bearer [ 188.953332][T13496] batman_adv: batadv0: Interface deactivated: gretap1 [ 188.975881][T10145] net_ratelimit: 14 callbacks suppressed [ 188.975900][T10145] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 189.035142][T13509] syzkaller1: entered allmulticast mode [ 189.046383][T10148] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.071845][T10148] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.125371][T10148] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.143474][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 189.180403][T10145] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.213748][T10145] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.250127][T10145] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.283149][T10145] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.395698][ T7095] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.415898][ T7095] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.444646][ T7095] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.487571][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2122'. [ 189.496686][ T7095] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 189.506763][ T7095] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 189.524557][ T7095] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 189.542581][T13558] netlink: 'syz.0.2124': attribute type 10 has an invalid length. [ 190.122947][ T7095] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 190.166658][ T7095] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 190.178250][ T7095] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 190.188833][T13558] syz_tun: entered promiscuous mode [ 190.200913][T13558] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 190.213486][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 190.337124][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 190.399488][T13592] nbd: illegal input index -1 [ 190.415603][T13594] netlink: 'syz.3.2133': attribute type 3 has an invalid length. [ 190.424109][T13594] netlink: 'syz.3.2133': attribute type 3 has an invalid length. [ 190.469845][T13592] netlink: 'syz.4.2132': attribute type 13 has an invalid length. [ 190.503546][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 190.633759][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 190.753415][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 190.762501][T13625] netlink: 'syz.2.2140': attribute type 10 has an invalid length. [ 190.829578][T13620] lo speed is unknown, defaulting to 1000 [ 190.836994][T13620] lo speed is unknown, defaulting to 1000 [ 190.873625][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 190.909441][T13636] tipc: Enabling of bearer rejected, already enabled [ 191.010587][T13640] netlink: 'syz.2.2146': attribute type 4 has an invalid length. [ 191.203715][ T49] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 191.316662][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 191.498425][ T49] erspan0: left promiscuous mode [ 191.514001][T13646] lo speed is unknown, defaulting to 1000 [ 191.556153][T13646] lo speed is unknown, defaulting to 1000 [ 191.769784][T13675] netlink: 'syz.4.2159': attribute type 6 has an invalid length. [ 191.829768][T13676] __nla_validate_parse: 14 callbacks suppressed [ 191.829787][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 191.851052][T13645] lo speed is unknown, defaulting to 1000 [ 191.866320][T13645] lo speed is unknown, defaulting to 1000 [ 191.876746][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2158'. [ 191.906384][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'. [ 191.944069][T13676] syzkaller0: entered promiscuous mode [ 191.949635][T13676] syzkaller0: entered allmulticast mode [ 191.959773][T13676] tipc: Enabled bearer , priority 0 [ 191.970705][T13676] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 191.998350][T13676] tipc: Resetting bearer [ 192.024976][T13673] tipc: Resetting bearer [ 192.070456][T13673] tipc: Disabling bearer [ 192.148245][T13694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2163'. [ 192.217980][T13699] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 192.223568][T13694] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.243347][T13699] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2162'. [ 192.390827][T13694] erspan0: entered promiscuous mode [ 192.450128][T13694] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 192.578024][T13694] bond5: (slave macvlan1): Enslaving as a backup interface with an up link [ 192.652893][T13700] bond0: (slave erspan0): Releasing active interface [ 192.663465][T13700] erspan0: left promiscuous mode [ 192.679587][T13700] geneve0: left promiscuous mode [ 192.696488][T13700] team0: Port device geneve0 removed [ 192.718894][T13700] bond3: (slave veth3): Releasing active interface [ 192.730660][T13700] bond4: (slave gretap2): Releasing active interface [ 192.745034][T13700] bond0: (slave veth7): Releasing active interface [ 192.759831][T13700] bond5: (slave macvlan1): Removing an active aggregator [ 192.768741][T13700] bond5: (slave macvlan1): Releasing backup interface [ 192.817936][ T7095] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.826369][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 192.860577][ T7095] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.885045][ T7095] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.901435][ T7095] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.941295][T13708] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2168'. [ 192.993490][T10146] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 193.006355][T10146] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 193.447182][T13752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2176'. [ 193.597847][T13761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2176'. [ 193.689942][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2178'. [ 193.718556][T13765] netlink: 1032 bytes leftover after parsing attributes in process `syz.1.2178'. [ 193.835956][T13761] lo speed is unknown, defaulting to 1000 [ 193.845459][T13761] lo speed is unknown, defaulting to 1000 [ 194.017399][T13789] vlan0: entered allmulticast mode [ 194.022590][T13789] dummy0: entered allmulticast mode [ 194.083066][ T12] net_ratelimit: 17 callbacks suppressed [ 194.083085][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 194.109072][T13786] lo speed is unknown, defaulting to 1000 [ 194.118252][T13786] lo speed is unknown, defaulting to 1000 [ 194.148260][T13796] netlink: 'syz.0.2189': attribute type 1 has an invalid length. [ 194.205747][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.212093][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.219930][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 194.365363][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 194.388185][T13805] sctp: [Deprecated]: syz.0.2192 (pid 13805) Use of int in maxseg socket option. [ 194.388185][T13805] Use struct sctp_assoc_value instead [ 194.495028][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 194.623425][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 194.736834][T13834] syzkaller0: entered promiscuous mode [ 194.747495][T13834] syzkaller0: entered allmulticast mode [ 194.757269][T13836] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 194.793949][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 195.005570][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 195.143482][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 195.284306][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 195.303919][T13874] syzkaller1: entered promiscuous mode [ 195.309467][T13874] syzkaller1: entered allmulticast mode [ 195.567594][T13885] vlan0: entered promiscuous mode [ 195.583347][T13885] gretap0: entered promiscuous mode [ 195.600404][T13894] policy can only be matched on NF_INET_PRE_ROUTING [ 195.600422][T13894] unable to load match [ 195.796209][T13906] block nbd1: server does not support multiple connections per device. [ 195.826505][T13906] block nbd1: shutting down sockets [ 195.849124][T13922] tunl0: entered allmulticast mode [ 195.863582][T13924] IPVS: length: 209 != 792 [ 195.948922][T13928] netlink: 'syz.1.2231': attribute type 2 has an invalid length. [ 196.047584][T13939] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 196.303870][T13953] syz.1.2241: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 196.324802][T13953] CPU: 0 UID: 0 PID: 13953 Comm: syz.1.2241 Not tainted syzkaller #0 PREEMPT(full) [ 196.324827][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 196.324837][T13953] Call Trace: [ 196.324844][T13953] [ 196.324852][T13953] dump_stack_lvl+0x189/0x250 [ 196.324877][T13953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.324897][T13953] ? __pfx__printk+0x10/0x10 [ 196.324918][T13953] ? lock_release+0x4b/0x3e0 [ 196.324941][T13953] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 196.324961][T13953] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 196.324982][T13953] warn_alloc+0x214/0x310 [ 196.325009][T13953] ? __pfx_warn_alloc+0x10/0x10 [ 196.325036][T13953] ? __get_vm_area_node+0x28f/0x300 [ 196.325058][T13953] ? hash_ipportip_create+0x358/0xfe0 [ 196.325078][T13953] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 196.325101][T13953] ? do_syscall_64+0xfa/0x3b0 [ 196.325138][T13953] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 196.325164][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.325181][T13953] ? hash_ipportip_create+0x358/0xfe0 [ 196.325198][T13953] ? hash_ipportip_create+0x358/0xfe0 [ 196.325215][T13953] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 196.325237][T13953] ? hash_ipportip_create+0x358/0xfe0 [ 196.325255][T13953] ? hash_ipportip_create+0x2fe/0xfe0 [ 196.325274][T13953] hash_ipportip_create+0x358/0xfe0 [ 196.325295][T13953] ? __nla_parse+0x40/0x60 [ 196.325319][T13953] ? __pfx_hash_ipportip_create+0x10/0x10 [ 196.325338][T13953] ip_set_create+0xa97/0x1940 [ 196.325359][T13953] ? ip_set_create+0x4a2/0x1940 [ 196.325384][T13953] ? __pfx_ip_set_create+0x10/0x10 [ 196.325402][T13953] ? css_rstat_updated+0x23a/0x4f0 [ 196.325429][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.325446][T13953] ? lock_release+0x4b/0x3e0 [ 196.325468][T13953] ? __nla_parse+0x40/0x60 [ 196.325493][T13953] nfnetlink_rcv_msg+0xb4d/0x1130 [ 196.325515][T13953] ? read_tsc+0x9/0x20 [ 196.325583][T13953] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 196.325613][T13953] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 196.325647][T13953] ? lock_release+0x4b/0x3e0 [ 196.325668][T13953] ? lock_release+0x4b/0x3e0 [ 196.325692][T13953] ? is_bpf_text_address+0x292/0x2b0 [ 196.325716][T13953] ? is_bpf_text_address+0x26/0x2b0 [ 196.325743][T13953] netlink_rcv_skb+0x208/0x470 [ 196.325767][T13953] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 196.325793][T13953] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.325821][T13953] ? bpf_lsm_capable+0x9/0x20 [ 196.325842][T13953] ? security_capable+0x7e/0x2e0 [ 196.325869][T13953] nfnetlink_rcv+0x26a/0x2520 [ 196.325890][T13953] ? is_bpf_text_address+0x26/0x2b0 [ 196.325914][T13953] ? kernel_text_address+0xa5/0xe0 [ 196.325937][T13953] ? __kernel_text_address+0xd/0x40 [ 196.325957][T13953] ? unwind_get_return_address+0x4d/0x90 [ 196.325977][T13953] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 196.325997][T13953] ? arch_stack_walk+0xfc/0x150 [ 196.326023][T13953] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 196.326045][T13953] ? stack_depot_save_flags+0x40/0x860 [ 196.326066][T13953] ? __pfx_stack_trace_save+0x10/0x10 [ 196.326087][T13953] ? kasan_save_track+0x4f/0x80 [ 196.326107][T13953] ? kasan_save_track+0x3e/0x80 [ 196.326142][T13953] ? __kasan_slab_alloc+0x6c/0x80 [ 196.326162][T13953] ? kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 196.326183][T13953] ? kmalloc_reserve+0xbd/0x290 [ 196.326200][T13953] ? __netlink_lookup+0xbd/0x810 [ 196.326215][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.326233][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.326249][T13953] ? lock_release+0x4b/0x3e0 [ 196.326276][T13953] ? net_generic+0x1e/0x240 [ 196.326294][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.326311][T13953] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.326333][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.326349][T13953] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.326373][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.326388][T13953] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.326415][T13953] ? lock_release+0x4b/0x3e0 [ 196.326436][T13953] ? net_generic+0x1e/0x240 [ 196.326459][T13953] ? net_generic+0x1e/0x240 [ 196.326483][T13953] netlink_unicast+0x82f/0x9e0 [ 196.326509][T13953] ? __pfx_netlink_unicast+0x10/0x10 [ 196.326531][T13953] ? netlink_sendmsg+0x642/0xb30 [ 196.326545][T13953] ? skb_put+0x11b/0x210 [ 196.326563][T13953] netlink_sendmsg+0x805/0xb30 [ 196.326582][T13953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.326600][T13953] ? aa_sock_msg_perm+0xf1/0x1d0 [ 196.326617][T13953] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 196.326638][T13953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.326659][T13953] __sock_sendmsg+0x219/0x270 [ 196.326681][T13953] ____sys_sendmsg+0x505/0x830 [ 196.326702][T13953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.326725][T13953] ? import_iovec+0x74/0xa0 [ 196.326745][T13953] ___sys_sendmsg+0x21f/0x2a0 [ 196.326763][T13953] ? __pfx____sys_sendmsg+0x10/0x10 [ 196.326785][T13953] ? futex_wake+0x4b2/0x560 [ 196.326820][T13953] ? __fget_files+0x2a/0x420 [ 196.326834][T13953] ? __fget_files+0x3a0/0x420 [ 196.326853][T13953] __x64_sys_sendmsg+0x19b/0x260 [ 196.326872][T13953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 196.326902][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.326925][T13953] ? rcu_is_watching+0x15/0xb0 [ 196.326946][T13953] do_syscall_64+0xfa/0x3b0 [ 196.326962][T13953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.326983][T13953] ? clear_bhb_loop+0x60/0xb0 [ 196.327009][T13953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.327034][T13953] RIP: 0033:0x7f699338ebe9 [ 196.327054][T13953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.327084][T13953] RSP: 002b:00007f6994184038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.327103][T13953] RAX: ffffffffffffffda RBX: 00007f69935b6090 RCX: 00007f699338ebe9 [ 196.327116][T13953] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000007 [ 196.327133][T13953] RBP: 00007f6993411e19 R08: 0000000000000000 R09: 0000000000000000 [ 196.327145][T13953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.327156][T13953] R13: 00007f69935b6128 R14: 00007f69935b6090 R15: 00007fff0790c7c8 [ 196.327177][T13953] [ 196.327271][T13953] Mem-Info: [ 196.356121][T13967] team_slave_0: left promiscuous mode [ 196.363817][T13953] active_anon:12224 inactive_anon:0 isolated_anon:0 [ 196.363817][T13953] active_file:3208 inactive_file:39889 isolated_file:0 [ 196.363817][T13953] unevictable:768 dirty:228 writeback:0 [ 196.363817][T13953] slab_reclaimable:12589 slab_unreclaimable:160142 [ 196.363817][T13953] mapped:29473 shmem:2721 pagetables:1142 [ 196.363817][T13953] sec_pagetables:0 bounce:0 [ 196.363817][T13953] kernel_misc_reclaimable:0 [ 196.363817][T13953] free:1246523 free_pcp:20123 free_cma:0 [ 196.654490][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 196.656278][T13953] Node 0 active_anon:48896kB inactive_anon:0kB active_file:12832kB inactive_file:159352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117892kB dirty:912kB writeback:0kB shmem:9348kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13836kB pagetables:4428kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.661418][T13967] team0: Port device team_slave_0 removed [ 196.665374][T13953] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 196.665420][T13953] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.665480][T13953] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 196.665516][T13953] Node 0 DMA32 free:1075316kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48852kB inactive_anon:0kB active_file:12832kB inactive_file:157784kB unevictable:1536kB writepending:912kB present:3129332kB managed:2557444kB mlocked:0kB bounce:0kB free_pcp:61920kB local_pcp:19580kB free_cma:0kB [ 196.665568][T13953] lowmem_reserve[]: 0 0 1 1 1 [ 196.665602][T13953] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 196.665652][T13953] lowmem_reserve[]: 0 0 0 0 0 [ 196.665687][T13953] Node 1 Normal free:3895392kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18980kB local_pcp:13028kB free_cma:0kB [ 196.665739][T13953] lowmem_reserve[]: 0 0 0 [ 196.673985][T13967] team_slave_1: left promiscuous mode [ 196.675126][T13953] 0 0 [ 197.194117][T13967] team0: Port device team_slave_1 removed [ 197.196151][T13953] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.202179][T13967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.228505][T13967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.234824][T13953] Node 0 DMA32: 615*4kB (UE) 1719*8kB (UM) 673*16kB (UME) 2282*32kB (UM) 500*64kB (UME) 93*128kB (UME) 31*256kB (UM) 16*512kB (UM) 6*1024kB (UM) 8*2048kB (UME) 221*4096kB (UM) = 1087780kB [ 197.258352][T13967] bond0: (slave veth3): Releasing active interface [ 197.271245][T13953] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 197.285951][T13967] bond2: (slave geneve2): Releasing active interface [ 197.286964][T13953] Node 1 Normal: 212*4kB (UE) 54*8kB (UME) 50*16kB (UME) 84*32kB (UME) 29*64kB (UME) 11*128kB (UME) 5*256kB (UME) 6*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3895392kB [ 197.311334][T13953] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.321345][T13953] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 197.330897][T13953] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.340592][T13953] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 197.357660][T13953] 45830 total pagecache pages [ 197.362951][T13953] 0 pages in swap cache [ 197.363096][T13975] dummy0: Caught tx_queue_len zero misconfig [ 197.375525][T13953] Free swap = 124996kB [ 197.379763][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.400493][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.420264][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.433031][T13953] Total swap = 124996kB [ 197.453220][T13953] 2097051 pages RAM [ 197.457052][T13953] 0 pages HighMem/MovableOnly [ 197.463642][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.483772][T13953] 425664 pages reserved [ 197.493297][T13953] 0 pages cma reserved [ 197.613431][T13996] __nla_validate_parse: 11 callbacks suppressed [ 197.613450][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 197.639573][T13996] macvtap1: entered promiscuous mode [ 197.654867][T13996] team0: entered promiscuous mode [ 197.660364][T13996] team_slave_0: entered promiscuous mode [ 197.670688][T13996] team_slave_1: entered promiscuous mode [ 197.722070][T13996] bond1: entered promiscuous mode [ 197.747265][T13996] macvtap1: entered allmulticast mode [ 197.763888][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2255'. [ 197.772502][T13996] team0: entered allmulticast mode [ 197.778241][T13996] team_slave_0: entered allmulticast mode [ 197.787846][T13996] team_slave_1: entered allmulticast mode [ 197.794451][T13996] bond1: entered allmulticast mode [ 197.801511][T13996] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 197.866222][T14008] team0: left allmulticast mode [ 197.872825][T14008] team_slave_0: left allmulticast mode [ 197.881730][T14008] team_slave_1: left allmulticast mode [ 197.888343][T14008] bond1: left allmulticast mode [ 197.894138][T14008] team0: left promiscuous mode [ 197.899501][T14008] team_slave_0: left promiscuous mode [ 197.906380][T14008] team_slave_1: left promiscuous mode [ 197.911959][T14008] bond1: left promiscuous mode [ 197.969899][T14015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2256'. [ 197.996412][T14015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2256'. [ 198.008277][T14015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2256'. [ 198.022355][T14015] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2256'. [ 198.055678][T14004] lo speed is unknown, defaulting to 1000 [ 198.061866][T14004] lo speed is unknown, defaulting to 1000 [ 198.169352][T14025] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 198.181506][T14025] CPU: 1 UID: 0 PID: 14025 Comm: syz.3.2259 Not tainted syzkaller #0 PREEMPT(full) [ 198.181528][T14025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.181538][T14025] Call Trace: [ 198.181545][T14025] [ 198.181552][T14025] dump_stack_lvl+0x189/0x250 [ 198.181577][T14025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.181595][T14025] ? __pfx__printk+0x10/0x10 [ 198.181614][T14025] ? kernfs_root+0x1c/0x230 [ 198.181635][T14025] ? kernfs_path_from_node+0x2f/0x290 [ 198.181652][T14025] ? kernfs_path_from_node+0x250/0x290 [ 198.181669][T14025] ? kernfs_path_from_node+0x2f/0x290 [ 198.181704][T14025] sysfs_warn_dup+0x8e/0xa0 [ 198.181721][T14025] sysfs_do_create_link_sd+0xc0/0x110 [ 198.181740][T14025] device_add_class_symlinks+0x1cf/0x240 [ 198.181759][T14025] device_add+0x475/0xb50 [ 198.181777][T14025] wiphy_register+0x1ba6/0x28d0 [ 198.181806][T14025] ? __pfx_wiphy_register+0x10/0x10 [ 198.181828][T14025] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 198.181850][T14025] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 198.181870][T14025] ieee80211_register_hw+0x3425/0x4080 [ 198.181895][T14025] ? ieee80211_register_hw+0x14c1/0x4080 [ 198.181917][T14025] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 198.181937][T14025] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 198.181968][T14025] ? __hrtimer_setup+0x187/0x210 [ 198.181984][T14025] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 198.182009][T14025] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 198.182042][T14025] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 198.182062][T14025] ? trace_kmalloc+0x1f/0xd0 [ 198.182081][T14025] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 198.182104][T14025] ? kstrndup+0xbf/0x160 [ 198.182125][T14025] hwsim_new_radio_nl+0xea4/0x1b10 [ 198.182148][T14025] ? __pfx___nla_validate_parse+0x10/0x10 [ 198.182178][T14025] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.182208][T14025] ? __nla_parse+0x40/0x60 [ 198.182232][T14025] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 198.182256][T14025] genl_family_rcv_msg_doit+0x212/0x300 [ 198.182279][T14025] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 198.182304][T14025] ? bpf_lsm_capable+0x9/0x20 [ 198.182326][T14025] ? security_capable+0x7e/0x2e0 [ 198.182351][T14025] genl_rcv_msg+0x60e/0x790 [ 198.182373][T14025] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.182390][T14025] ? __kasan_slab_alloc+0x6c/0x80 [ 198.182411][T14025] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 198.182432][T14025] ? __netlink_lookup+0xbd/0x810 [ 198.182447][T14025] ? rcu_is_watching+0x15/0xb0 [ 198.182468][T14025] netlink_rcv_skb+0x208/0x470 [ 198.182492][T14025] ? __pfx_genl_rcv_msg+0x10/0x10 [ 198.182511][T14025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.182538][T14025] ? lock_release+0x4b/0x3e0 [ 198.182562][T14025] ? down_read+0x1ad/0x2e0 [ 198.182579][T14025] genl_rcv+0x28/0x40 [ 198.182596][T14025] netlink_unicast+0x82f/0x9e0 [ 198.182620][T14025] ? __pfx_netlink_unicast+0x10/0x10 [ 198.182642][T14025] ? netlink_sendmsg+0x642/0xb30 [ 198.182655][T14025] ? skb_put+0x11b/0x210 [ 198.182673][T14025] netlink_sendmsg+0x805/0xb30 [ 198.182692][T14025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.182708][T14025] ? futex_unqueue+0x22/0x240 [ 198.182725][T14025] ? aa_sock_msg_perm+0xf1/0x1d0 [ 198.182742][T14025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 198.182759][T14025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.182775][T14025] __sock_sendmsg+0x219/0x270 [ 198.182797][T14025] ____sys_sendmsg+0x505/0x830 [ 198.182816][T14025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 198.182837][T14025] ? import_iovec+0x74/0xa0 [ 198.182856][T14025] ___sys_sendmsg+0x21f/0x2a0 [ 198.182869][T14025] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.182880][T14025] ? futex_wait+0x285/0x360 [ 198.182898][T14025] ? __fget_files+0x2a/0x420 [ 198.182906][T14025] ? __fget_files+0x3a0/0x420 [ 198.182916][T14025] __x64_sys_sendmsg+0x19b/0x260 [ 198.182926][T14025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 198.182939][T14025] ? rcu_is_watching+0x15/0xb0 [ 198.182949][T14025] do_syscall_64+0xfa/0x3b0 [ 198.182957][T14025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.182975][T14025] ? clear_bhb_loop+0x60/0xb0 [ 198.182992][T14025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.183007][T14025] RIP: 0033:0x7f31e9d8ebe9 [ 198.183021][T14025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.183035][T14025] RSP: 002b:00007f31eabea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.183052][T14025] RAX: ffffffffffffffda RBX: 00007f31e9fb5fa0 RCX: 00007f31e9d8ebe9 [ 198.183065][T14025] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 198.183077][T14025] RBP: 00007f31e9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 198.183088][T14025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.183098][T14025] R13: 00007f31e9fb6038 R14: 00007f31e9fb5fa0 R15: 00007fffbc7642e8 [ 198.183118][T14025] [ 198.932674][T14055] syzkaller1: entered allmulticast mode [ 199.061043][T14062] netlink: 'syz.4.2268': attribute type 8 has an invalid length. [ 199.081870][T14067] netlink: 704 bytes leftover after parsing attributes in process `syz.2.2270'. [ 199.123473][ T12] net_ratelimit: 18 callbacks suppressed [ 199.123490][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.243200][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.282748][T14077] lo speed is unknown, defaulting to 1000 [ 199.289393][T14077] lo speed is unknown, defaulting to 1000 [ 199.306472][T14081] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 199.370611][T14081] 8021q: adding VLAN 0 to HW filter on device bond8 [ 199.443118][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.553265][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.673899][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.795536][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.825632][T14086] lo speed is unknown, defaulting to 1000 [ 199.833648][T14086] lo speed is unknown, defaulting to 1000 [ 199.913672][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 199.951924][T14096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2276'. [ 199.977847][T14096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2276'. [ 200.033454][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 200.107165][T14100] netlink: 'syz.2.2277': attribute type 1 has an invalid length. [ 200.139631][T14100] netlink: 14422 bytes leftover after parsing attributes in process `syz.2.2277'. [ 200.160437][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 200.254981][T14101] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.305173][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 200.376270][T14116] netlink: 'syz.0.2282': attribute type 1 has an invalid length. [ 200.644523][T14117] bond9: (slave gretap1): making interface the new active one [ 200.652544][T14117] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 200.733088][T14128] netlink: 'syz.0.2286': attribute type 15 has an invalid length. [ 200.822267][T14137] netlink: 'syz.3.2289': attribute type 21 has an invalid length. [ 201.107670][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.121721][T14161] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 201.135150][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805537f000: rx timeout, send abort [ 201.267741][T14173] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 201.412779][T14184] IPVS: length: 163 != 8 [ 201.643440][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805537f000: abort rx timeout. Force session deactivation [ 202.031738][T14236] netlink: 'syz.2.2317': attribute type 29 has an invalid length. [ 202.051896][T14236] netlink: 'syz.2.2317': attribute type 29 has an invalid length. [ 202.084707][T14238] can: request_module (can-proto-4) failed. [ 202.465104][T10144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.475510][T10144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.492021][T14276] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.625629][T14278] lo speed is unknown, defaulting to 1000 [ 202.632179][T14278] lo speed is unknown, defaulting to 1000 [ 203.173543][T14299] __nla_validate_parse: 18 callbacks suppressed [ 203.173562][T14299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 203.279761][T14299] bond7: (slave bridge0): Releasing active interface [ 203.602010][T14332] pimreg: tun_chr_ioctl cmd 1074812118 [ 203.758430][T14341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2343'. [ 203.891295][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2348'. [ 203.970056][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 204.006983][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 204.028121][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 204.050489][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 204.071502][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 204.090918][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 204.110432][T14366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2351'. [ 204.179283][T14361] lo speed is unknown, defaulting to 1000 [ 204.205474][T14361] lo speed is unknown, defaulting to 1000 [ 204.233354][T10146] net_ratelimit: 31 callbacks suppressed [ 204.233371][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 204.366893][T14384] IPVS: set_ctl: invalid protocol: 30 0.0.0.0:20004 [ 204.473217][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 204.499382][T14394] tipc: Enabled bearer , priority 0 [ 204.528719][T14394] syzkaller0: entered promiscuous mode [ 204.538124][T14394] syzkaller0: entered allmulticast mode [ 204.544258][T14394] tipc: Resetting bearer [ 204.603254][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 204.632282][T14401] openvswitch: netlink: IP tunnel dst address not specified [ 204.723224][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 204.814870][T14404] lo speed is unknown, defaulting to 1000 [ 204.821507][T14404] lo speed is unknown, defaulting to 1000 [ 204.840232][ T13] tipc: Resetting bearer [ 204.864042][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 204.935738][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 204.984806][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 205.033611][T14408] lo speed is unknown, defaulting to 1000 [ 205.061021][T14408] lo speed is unknown, defaulting to 1000 [ 205.094484][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 205.213298][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 205.375669][T14393] tipc: Resetting bearer [ 205.447513][T14393] tipc: Disabling bearer [ 205.474337][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 205.864255][T14443] netlink: 'syz.0.2372': attribute type 1 has an invalid length. [ 206.094788][T14453] tipc: Enabled bearer , priority 0 [ 206.139540][T14453] syzkaller0: entered promiscuous mode [ 206.147910][T14453] syzkaller0: entered allmulticast mode [ 206.268641][T14462] tipc: Resetting bearer [ 206.278865][T14441] lo speed is unknown, defaulting to 1000 [ 206.298998][T14441] lo speed is unknown, defaulting to 1000 [ 206.323882][T14452] tipc: Resetting bearer [ 206.352203][T14452] tipc: Disabling bearer [ 206.428783][T14451] lo speed is unknown, defaulting to 1000 [ 206.494927][T14451] lo speed is unknown, defaulting to 1000 [ 206.800577][T14469] ieee802154 phy0 wpan0: encryption failed: -22 [ 207.030741][T14478] tipc: Enabled bearer , priority 0 [ 207.050187][T14478] syzkaller0: entered promiscuous mode [ 207.077576][T14478] syzkaller0: entered allmulticast mode [ 207.109180][T14478] pimreg: entered allmulticast mode [ 207.153690][T14478] tipc: Resetting bearer [ 207.165403][T14477] tipc: Resetting bearer [ 207.186411][T14477] tipc: Disabling bearer [ 207.399993][T14505] netlink: 'syz.3.2388': attribute type 2 has an invalid length. [ 207.797475][T14534] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 207.807131][T14534] netlink: 'syz.2.2398': attribute type 2 has an invalid length. [ 207.824399][T14527] lo speed is unknown, defaulting to 1000 [ 207.831247][T14527] lo speed is unknown, defaulting to 1000 [ 207.862560][T14537] netlink: 'syz.2.2399': attribute type 1 has an invalid length. [ 208.059447][T14544] lo speed is unknown, defaulting to 1000 [ 208.066312][T14544] lo speed is unknown, defaulting to 1000 [ 208.505851][T14563] can: request_module (can-proto-0) failed. [ 208.513075][T14563] IPVS: set_ctl: invalid protocol: 59 172.30.1.2:19999 [ 208.557056][T14567] netlink: 'syz.0.2406': attribute type 1 has an invalid length. [ 208.607739][T14567] bond10: (slave gretap2): making interface the new active one [ 208.617882][T14567] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 208.819594][T14563] lo speed is unknown, defaulting to 1000 [ 208.839785][T14563] lo speed is unknown, defaulting to 1000 [ 209.005231][T14584] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 209.013697][T14584] tipc: Enabled bearer , priority 10 [ 209.076352][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 209.253366][T10144] net_ratelimit: 28 callbacks suppressed [ 209.253384][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.357385][T14592] __nla_validate_parse: 37 callbacks suppressed [ 209.357403][T14592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2414'. [ 209.373493][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.485534][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.490542][T14602] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2416'. [ 209.539003][T14607] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2419'. [ 209.561997][T14607] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2419'. [ 209.572725][T14607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2419'. [ 209.584127][T14607] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2419'. [ 209.605273][T14598] lo speed is unknown, defaulting to 1000 [ 209.611793][T14598] lo speed is unknown, defaulting to 1000 [ 209.626284][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.744357][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.778477][ T51] Bluetooth: hci4: link tx timeout [ 209.784284][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 209.853068][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 209.920026][T14631] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2427'. [ 209.929804][T14632] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2427'. [ 209.983083][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.123067][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.263261][T10144] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.386431][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2436'. [ 210.444083][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 210.499622][T14664] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2437'. [ 210.671077][T14660] lo speed is unknown, defaulting to 1000 [ 210.686114][T14660] lo speed is unknown, defaulting to 1000 [ 211.673647][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805537f400: Timeout. Failed to send simple message. [ 211.794413][ T5864] Bluetooth: hci4: command 0x0406 tx timeout [ 212.511542][T14772] lo speed is unknown, defaulting to 1000 [ 212.528546][T14772] lo speed is unknown, defaulting to 1000 [ 212.899842][T14791] wg1: Caught tx_queue_len zero misconfig [ 212.904895][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 213.189212][T14795] veth1: left promiscuous mode [ 213.203390][T14795] vlan0: left promiscuous mode [ 213.213479][T14809] netlink: 'syz.3.2473': attribute type 1 has an invalid length. [ 213.231958][T14795] tipc: Resetting bearer [ 213.241741][T14795] syzkaller0: left promiscuous mode [ 213.257688][T14795] syzkaller0: left allmulticast mode [ 213.298382][T14795] veth7: left promiscuous mode [ 213.307971][T14795] vlan2: left promiscuous mode [ 213.320871][T14795] gretap0: left promiscuous mode [ 213.332687][T14795] geneve2: left promiscuous mode [ 213.339863][T14795] geneve2: left allmulticast mode [ 213.360089][ T5941] lo speed is unknown, defaulting to 1000 [ 213.366833][T14807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.378898][ T5941] syz2: Port: 1 Link DOWN [ 213.384210][T14809] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 213.384401][T10148] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 213.462855][T10148] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 213.509034][T14822] netlink: 'syz.0.2478': attribute type 3 has an invalid length. [ 213.517220][T10148] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 213.545186][T10148] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 213.568872][T14825] netlink: 'syz.3.2477': attribute type 4 has an invalid length. [ 213.588376][T14825] netlink: 'syz.3.2477': attribute type 12 has an invalid length. [ 213.960226][T14850] netlink: 'syz.3.2484': attribute type 2 has an invalid length. [ 214.014741][T14850] k›*·]‘: entered promiscuous mode [ 214.050491][T14850] veth0_to_team: entered promiscuous mode [ 214.058483][T14850] veth0_to_team: entered allmulticast mode [ 214.172817][T14860] dvmrp8: entered allmulticast mode [ 214.207304][T14823] lo speed is unknown, defaulting to 1000 [ 214.216046][T14823] lo speed is unknown, defaulting to 1000 [ 214.323059][ T7095] net_ratelimit: 27 callbacks suppressed [ 214.323078][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 214.474823][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 214.598634][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 214.619307][T14865] dvmrp8: left allmulticast mode [ 214.680814][T14888] __nla_validate_parse: 5 callbacks suppressed [ 214.680833][T14888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2493'. [ 214.702104][T14888] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2493'. [ 214.729108][T14888] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2493'. [ 214.793827][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 214.805655][T14895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 214.904367][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 214.973565][T14907] netlink: 'syz.3.2498': attribute type 7 has an invalid length. [ 214.981729][T14907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2498'. [ 215.059664][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 215.191337][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 215.238169][T14912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2500'. [ 215.322703][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 215.375474][T14926] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2505'. [ 215.402476][T14904] lo speed is unknown, defaulting to 1000 [ 215.417330][T14904] lo speed is unknown, defaulting to 1000 [ 215.443702][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 215.581264][T10148] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 215.709754][T14945] tipc: Enabling of bearer rejected, already enabled [ 215.849278][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2512'. [ 216.072062][T14971] netlink: 'syz.4.2517': attribute type 12 has an invalid length. [ 216.094268][T14970] netlink: 'syz.4.2517': attribute type 12 has an invalid length. [ 216.102093][T14970] netlink: 'syz.4.2517': attribute type 18 has an invalid length. [ 216.160173][T14971] netlink: 'syz.4.2517': attribute type 18 has an invalid length. [ 216.242377][T14981] syzkaller0: entered promiscuous mode [ 216.250868][T14981] syzkaller0: entered allmulticast mode [ 216.391753][T14998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2525'. [ 216.401207][T14998] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2525'. [ 216.528911][T15013] sctp: [Deprecated]: syz.3.2529 (pid 15013) Use of int in maxseg socket option. [ 216.528911][T15013] Use struct sctp_assoc_value instead [ 216.831657][T15034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.849536][T15035] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.861242][T15035] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 216.881762][T15035] bond6: (slave vcan1): Error -95 calling set_mac_address [ 217.049224][T15053] tipc: Enabled bearer , priority 0 [ 217.056468][T15053] syzkaller0: entered promiscuous mode [ 217.061946][T15053] syzkaller0: entered allmulticast mode [ 217.095100][T15053] tipc: Resetting bearer [ 217.103686][T15053] tipc: Disabling bearer [ 217.259205][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.279802][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.366015][T15088] syz_tun: left promiscuous mode [ 217.371942][T15088] batadv0: left promiscuous mode [ 217.378997][T15088] batadv0: left allmulticast mode [ 217.386184][T15088] batadv_slave_1: left promiscuous mode [ 217.400633][T15088] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 217.410173][T15088] tipc: Resetting bearer [ 217.420807][T15088] syzkaller0: left promiscuous mode [ 217.426822][T15088] syzkaller0: left allmulticast mode [ 217.436245][T15088] bond3: left promiscuous mode [ 217.441040][T15088] bond3: left allmulticast mode [ 217.447401][T15088] erspan1: left promiscuous mode [ 217.452829][T15088] geneve2: left promiscuous mode [ 217.459200][T15088] vlan2: left allmulticast mode [ 217.481845][T15088] bond0: left allmulticast mode [ 217.499667][T15088] bond_slave_0: left allmulticast mode [ 217.521053][T15088] bond_slave_1: left allmulticast mode [ 217.529342][T15088] syz_tun: left allmulticast mode [ 217.538791][T15088] team0: left allmulticast mode [ 217.543725][T15088] team_slave_1: left allmulticast mode [ 217.659030][T15042] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 217.722477][ T9260] lo speed is unknown, defaulting to 1000 [ 217.740802][ T9260] syz0: Port: 1 Link ACTIVE [ 217.756815][ T9260] lo speed is unknown, defaulting to 1000 [ 217.797909][T15126] team0: Mode changed to "activebackup" [ 217.921058][T15116] lo speed is unknown, defaulting to 1000 [ 217.927939][T15116] lo speed is unknown, defaulting to 1000 [ 218.132314][T15146] rdma_rxe: rxe_newlink: failed to add lo [ 218.250113][T15153] 8021q: VLANs not supported on ipvlan1 [ 218.334511][T15154] vlan3: entered allmulticast mode [ 218.339975][T15154] veth1: entered allmulticast mode [ 218.960842][T15193] lo speed is unknown, defaulting to 1000 [ 218.975453][T15193] lo speed is unknown, defaulting to 1000 [ 219.015081][T15217] tipc: Enabled bearer , priority 0 [ 219.056954][T15217] syzkaller0: entered promiscuous mode [ 219.062534][T15217] syzkaller0: entered allmulticast mode [ 219.076370][T15217] tipc: Resetting bearer [ 219.123774][T15216] tipc: Resetting bearer [ 219.235457][T15216] tipc: Disabling bearer [ 219.246386][T15201] lo speed is unknown, defaulting to 1000 [ 219.279368][T15201] lo speed is unknown, defaulting to 1000 [ 219.342339][ T7095] net_ratelimit: 33 callbacks suppressed [ 219.342356][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 219.454099][T15211] lo speed is unknown, defaulting to 1000 [ 219.485996][T15211] lo speed is unknown, defaulting to 1000 [ 219.486152][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 219.525188][T15238] validate_nla: 11 callbacks suppressed [ 219.525204][T15238] netlink: 'syz.4.2594': attribute type 1 has an invalid length. [ 219.769548][T15255] __nla_validate_parse: 14 callbacks suppressed [ 219.769566][T15255] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2601'. [ 219.801708][T15255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2601'. [ 219.813158][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 219.835981][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2602'. [ 219.943281][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 219.960508][T15276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2603'. [ 219.969576][T15276] team0: invalid flags given to default FDB implementation [ 220.054845][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.166029][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.303122][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.464940][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.594315][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 220.721137][T15325] syzkaller0: entered promiscuous mode [ 220.733110][T15325] syzkaller0: entered allmulticast mode [ 220.750428][T15325] tipc: Resetting bearer [ 220.766693][T10141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 221.041716][T15347] netlink: 'syz.2.2623': attribute type 2 has an invalid length. [ 221.070634][T15347] netlink: 'syz.2.2623': attribute type 1 has an invalid length. [ 221.095201][T15348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2623'. [ 221.317484][T15372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2632'. [ 221.328722][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'. [ 221.371739][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'. [ 221.414105][T15366] lo speed is unknown, defaulting to 1000 [ 221.420699][T15366] lo speed is unknown, defaulting to 1000 [ 221.447372][T15378] tap0: tun_chr_ioctl cmd 1074025677 [ 221.457392][T15378] tap0: linktype set to 805 [ 221.589495][T15391] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2639'. [ 221.802599][T15404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2642'. [ 221.823474][T15404] netlink: 'syz.2.2642': attribute type 14 has an invalid length. [ 221.831439][T15404] netlink: 'syz.2.2642': attribute type 14 has an invalid length. [ 221.945381][T15415] bridge0: entered promiscuous mode [ 221.966712][T15416] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20004 [ 222.003687][T15415] macsec0: entered promiscuous mode [ 222.009891][T15415] bridge0: port 1(macsec0) entered blocking state [ 222.016820][T15415] bridge0: port 1(macsec0) entered disabled state [ 222.051009][T15415] macsec0: entered allmulticast mode [ 222.060066][T15415] bridge0: entered allmulticast mode [ 222.094016][T15425] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 222.106897][T15415] macsec0: left allmulticast mode [ 222.121071][T15415] bridge0: left allmulticast mode [ 222.127391][T15415] bridge0: left promiscuous mode [ 222.405339][T15450] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 222.442175][T15450] bond7: entered promiscuous mode [ 222.462780][T15450] 8021q: adding VLAN 0 to HW filter on device bond7 [ 222.505813][T15450] 8021q: adding VLAN 0 to HW filter on device bond7 [ 222.533444][T15450] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 222.557663][T15450] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 222.579788][T15466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.587054][T15466] IPv6: NLM_F_CREATE should be set when creating new route [ 222.594254][T15466] IPv6: NLM_F_CREATE should be set when creating new route [ 222.609149][T15466] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 222.619921][T15450] bond7: (slave wireguard0): making interface the new active one [ 222.627736][T15450] wireguard0: entered promiscuous mode [ 222.634513][T15450] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 222.643614][T15467] netlink: 'syz.3.2659': attribute type 9 has an invalid length. [ 222.664070][T15467] netlink: 'syz.3.2659': attribute type 9 has an invalid length. [ 222.732573][T15475] bridge0: port 1(bond6) entered blocking state [ 222.743381][T15475] bridge0: port 1(bond6) entered disabled state [ 222.749918][T15475] bond6: entered allmulticast mode [ 222.760743][T15475] bond6: entered promiscuous mode [ 222.770011][T15480] netlink: 'syz.4.2663': attribute type 29 has an invalid length. [ 222.847160][T15488] tipc: Enabling of bearer rejected, already enabled [ 223.089012][T15491] lo speed is unknown, defaulting to 1000 [ 223.112160][T15491] lo speed is unknown, defaulting to 1000 [ 223.588581][T15538] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 223.607288][T15539] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 223.761477][T15544] tipc: Enabling of bearer rejected, already enabled [ 223.775273][T15544] syzkaller0: entered promiscuous mode [ 223.810905][T15544] syzkaller0: entered allmulticast mode [ 223.825447][T15546] tunl0: left allmulticast mode [ 223.887206][T15546] syz_tun: left promiscuous mode [ 223.940532][T15546] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.037781][T15555] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 224.272941][T15549] lo speed is unknown, defaulting to 1000 [ 224.282379][T15549] lo speed is unknown, defaulting to 1000 [ 224.339716][T15572] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 224.423047][T10141] net_ratelimit: 25 callbacks suppressed [ 224.423065][T10141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 224.492362][T15591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.590958][T10141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 224.783908][T10141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 224.893385][T10141] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.003318][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.113079][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.223162][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.333089][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.443145][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.553231][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.523050][ T7095] net_ratelimit: 35 callbacks suppressed [ 229.523067][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.643104][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.753271][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.863192][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 229.973136][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.083073][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.193097][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.303212][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.413085][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.523144][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 234.633083][T10140] net_ratelimit: 36 callbacks suppressed [ 234.633104][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 234.753223][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 234.863163][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 234.973151][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 235.083081][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 235.193154][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 235.313269][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 235.423109][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 235.533190][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 235.643073][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 239.743178][T10140] net_ratelimit: 36 callbacks suppressed [ 239.743200][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 239.873112][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 239.983176][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 240.093191][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 240.203104][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 240.313222][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 240.423156][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 240.533065][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 240.643142][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 240.753102][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 244.843383][ T13] net_ratelimit: 36 callbacks suppressed [ 244.843407][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 244.973240][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 245.093062][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 245.203105][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 245.313216][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 245.423099][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 245.533280][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 245.643265][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 245.753188][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 245.863340][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 249.853315][T10140] net_ratelimit: 35 callbacks suppressed [ 249.853335][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 249.973136][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 250.083048][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 250.193271][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 250.303223][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 250.413054][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 250.523399][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 250.633332][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 250.743496][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 250.853211][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 254.933418][ T13] net_ratelimit: 36 callbacks suppressed [ 254.933441][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.053347][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.163422][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.273137][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.383109][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.493086][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.603051][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.634832][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.641148][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.713173][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.823093][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 255.933083][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.033483][ T12] net_ratelimit: 36 callbacks suppressed [ 260.033504][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.153100][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.263212][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.373053][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.483142][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.593086][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.703117][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.813235][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 260.923095][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 261.033190][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 265.133412][ T7095] net_ratelimit: 36 callbacks suppressed [ 265.133434][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 265.253149][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 265.373204][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 265.483060][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 265.593071][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 265.703249][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 265.813130][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 265.933053][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 266.043072][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 266.153158][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 270.243221][T10146] net_ratelimit: 36 callbacks suppressed [ 270.243241][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 270.363125][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 270.473056][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 270.583197][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 270.693195][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 270.803213][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 270.913121][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 271.023144][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 271.133106][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 271.243134][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 275.333355][ T13] net_ratelimit: 36 callbacks suppressed [ 275.333375][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 275.453079][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 275.563217][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 275.673052][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 275.783221][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 275.893097][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 276.003134][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 276.113780][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 276.223330][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 276.333477][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 280.423134][T10143] net_ratelimit: 36 callbacks suppressed [ 280.423154][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 280.543167][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 280.653283][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 280.763193][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 280.873328][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 280.983307][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 281.093117][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 281.203358][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 281.313112][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 281.423334][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 285.523110][ T13] net_ratelimit: 36 callbacks suppressed [ 285.523130][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 285.643052][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 285.753253][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 285.863228][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 285.973065][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 286.083092][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 286.193204][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 286.303067][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 286.423102][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 286.533167][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 290.633255][T10146] net_ratelimit: 36 callbacks suppressed [ 290.633283][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 290.753184][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 290.863084][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 290.973011][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.083071][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.193149][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.303140][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.413189][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.523166][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 291.633072][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 295.713262][T10146] net_ratelimit: 36 callbacks suppressed [ 295.713284][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 295.833216][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 295.943113][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.053174][T10140] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.163107][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.273213][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.383080][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.493211][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.603186][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 296.713315][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 300.813263][T10143] net_ratelimit: 36 callbacks suppressed [ 300.813284][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 300.933120][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.043162][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.153095][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.263116][ T7095] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.373060][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.483204][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.593073][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.703117][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 301.813212][T10146] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 305.913406][T10143] net_ratelimit: 36 callbacks suppressed [ 305.913421][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.033186][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.143157][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.253181][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.373035][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.483054][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.603565][T10143] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.713264][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.823268][T10142] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 306.833171][ C1] ================================================================== [ 306.841285][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 306.849170][ C1] Read of size 2 at addr ffff88805510b42a by task swapper/1/0 [ 306.856633][ C1] [ 306.858948][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 306.858961][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.858977][ C1] Call Trace: [ 306.858983][ C1] [ 306.858989][ C1] dump_stack_lvl+0x189/0x250 [ 306.859006][ C1] ? rcu_is_watching+0x15/0xb0 [ 306.859018][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.859029][ C1] ? rcu_is_watching+0x15/0xb0 [ 306.859038][ C1] ? lock_release+0x4b/0x3e0 [ 306.859054][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 306.859067][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 306.859079][ C1] print_report+0xca/0x240 [ 306.859089][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 306.859102][ C1] kasan_report+0x118/0x150 [ 306.859117][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 306.859131][ C1] rose_timer_expiry+0x471/0x4b0 [ 306.859144][ C1] call_timer_fn+0x17e/0x5f0 [ 306.859159][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 306.859172][ C1] ? call_timer_fn+0xbe/0x5f0 [ 306.859184][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 306.859199][ C1] ? rcu_is_watching+0x15/0xb0 [ 306.859209][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 306.859221][ C1] __run_timer_base+0x61a/0x860 [ 306.859234][ C1] ? ktime_get+0x3e/0x1f0 [ 306.859247][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 306.859259][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 306.859274][ C1] run_timer_softirq+0xb7/0x180 [ 306.859287][ C1] handle_softirqs+0x283/0x870 [ 306.859298][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 306.859309][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 306.859319][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 306.859332][ C1] __irq_exit_rcu+0xca/0x1f0 [ 306.859341][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 306.859353][ C1] irq_exit_rcu+0x9/0x30 [ 306.859361][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 306.859376][ C1] [ 306.859380][ C1] [ 306.859384][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.859396][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 306.859414][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 306.859423][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 306.859434][ C1] RAX: 66eac223d2658100 RBX: ffffffff819683b8 RCX: 66eac223d2658100 [ 306.859442][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 306.859449][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 306.859457][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38430 [ 306.859464][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a53b40 [ 306.859472][ C1] ? do_idle+0x1e8/0x510 [ 306.859481][ C1] ? do_idle+0x1e8/0x510 [ 306.859491][ C1] default_idle+0x13/0x20 [ 306.859501][ C1] default_idle_call+0x74/0xb0 [ 306.859511][ C1] do_idle+0x1e8/0x510 [ 306.859521][ C1] ? __pfx_do_idle+0x10/0x10 [ 306.859533][ C1] cpu_startup_entry+0x44/0x60 [ 306.859542][ C1] start_secondary+0x101/0x110 [ 306.859558][ C1] common_startup_64+0x13e/0x147 [ 306.859575][ C1] [ 306.859578][ C1] [ 307.165539][ C1] Allocated by task 10142: [ 307.169946][ C1] kasan_save_track+0x3e/0x80 [ 307.174678][ C1] __kasan_kmalloc+0x93/0xb0 [ 307.179282][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 307.184637][ C1] batadv_forw_packet_alloc+0x1e9/0x390 [ 307.190169][ C1] batadv_iv_ogm_queue_add+0x85f/0xd30 [ 307.195607][ C1] batadv_iv_ogm_schedule+0xb48/0xf00 [ 307.200957][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 307.207953][ C1] process_scheduled_works+0xae1/0x17b0 [ 307.213508][ C1] worker_thread+0x8a0/0xda0 [ 307.218072][ C1] kthread+0x70e/0x8a0 [ 307.222117][ C1] ret_from_fork+0x3f9/0x770 [ 307.226680][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.231417][ C1] [ 307.233714][ C1] Freed by task 13: [ 307.237492][ C1] kasan_save_track+0x3e/0x80 [ 307.242143][ C1] kasan_save_free_info+0x46/0x50 [ 307.247137][ C1] __kasan_slab_free+0x5b/0x80 [ 307.251875][ C1] kfree+0x18e/0x440 [ 307.255742][ C1] process_scheduled_works+0xae1/0x17b0 [ 307.261256][ C1] worker_thread+0x8a0/0xda0 [ 307.265815][ C1] kthread+0x70e/0x8a0 [ 307.269857][ C1] ret_from_fork+0x3f9/0x770 [ 307.274416][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.279152][ C1] [ 307.281448][ C1] Last potentially related work creation: [ 307.287132][ C1] kasan_save_stack+0x3e/0x60 [ 307.291780][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 307.296950][ C1] insert_work+0x3d/0x330 [ 307.301254][ C1] __queue_work+0xbaf/0xfb0 [ 307.305726][ C1] call_timer_fn+0x17e/0x5f0 [ 307.310291][ C1] __run_timer_base+0x646/0x860 [ 307.315113][ C1] tmigr_handle_remote+0xa32/0x13d0 [ 307.320290][ C1] handle_softirqs+0x283/0x870 [ 307.325024][ C1] __irq_exit_rcu+0xca/0x1f0 [ 307.329583][ C1] irq_exit_rcu+0x9/0x30 [ 307.333795][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 307.339440][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.345392][ C1] [ 307.347689][ C1] The buggy address belongs to the object at ffff88805510b400 [ 307.347689][ C1] which belongs to the cache kmalloc-512 of size 512 [ 307.361712][ C1] The buggy address is located 42 bytes inside of [ 307.361712][ C1] freed 512-byte region [ffff88805510b400, ffff88805510b600) [ 307.375391][ C1] [ 307.377694][ C1] The buggy address belongs to the physical page: [ 307.384079][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55108 [ 307.392827][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 307.401298][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 307.408813][ C1] page_type: f5(slab) [ 307.412770][ C1] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 307.421325][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 307.429880][ C1] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 307.438524][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 307.447168][ C1] head: 00fff00000000002 ffffea0001544201 00000000ffffffff 00000000ffffffff [ 307.455809][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 307.464449][ C1] page dumped because: kasan: bad access detected [ 307.470843][ C1] page_owner tracks the page as allocated [ 307.476527][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5857, tgid 5857 (syz-executor), ts 57415097836, free_ts 13575025967 [ 307.497853][ C1] post_alloc_hook+0x240/0x2a0 [ 307.502596][ C1] get_page_from_freelist+0x21e4/0x22c0 [ 307.508113][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 307.513889][ C1] alloc_pages_mpol+0x232/0x4a0 [ 307.518716][ C1] allocate_slab+0x8a/0x370 [ 307.523191][ C1] ___slab_alloc+0xbeb/0x1410 [ 307.527842][ C1] __kmalloc_noprof+0x305/0x4f0 [ 307.532667][ C1] fib6_info_alloc+0x30/0xf0 [ 307.537228][ C1] ip6_route_info_create+0x142/0x860 [ 307.542487][ C1] ip6_route_add+0x49/0x1b0 [ 307.546964][ C1] inet6_addr_add+0x6b2/0xc00 [ 307.551609][ C1] inet6_rtm_newaddr+0x93d/0xd20 [ 307.556522][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 307.561432][ C1] netlink_rcv_skb+0x208/0x470 [ 307.566169][ C1] netlink_unicast+0x82f/0x9e0 [ 307.570904][ C1] netlink_sendmsg+0x805/0xb30 [ 307.575640][ C1] page last free pid 1 tgid 1 stack trace: [ 307.581415][ C1] __free_frozen_pages+0xbc4/0xd30 [ 307.586503][ C1] free_contig_range+0x1bd/0x4a0 [ 307.591410][ C1] destroy_args+0x64/0x4a0 [ 307.595802][ C1] debug_vm_pgtable+0x39f/0x3b0 [ 307.600628][ C1] do_one_initcall+0x233/0x820 [ 307.605366][ C1] do_initcall_level+0x104/0x190 [ 307.610275][ C1] do_initcalls+0x59/0xa0 [ 307.614614][ C1] kernel_init_freeable+0x334/0x4b0 [ 307.619790][ C1] kernel_init+0x1d/0x1d0 [ 307.624091][ C1] ret_from_fork+0x3f9/0x770 [ 307.628656][ C1] ret_from_fork_asm+0x1a/0x30 [ 307.633395][ C1] [ 307.635693][ C1] Memory state around the buggy address: [ 307.641295][ C1] ffff88805510b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 307.649328][ C1] ffff88805510b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 307.657359][ C1] >ffff88805510b400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 307.665387][ C1] ^ [ 307.670726][ C1] ffff88805510b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 307.678757][ C1] ffff88805510b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 307.686787][ C1] ================================================================== [ 307.694943][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 307.702134][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 307.711071][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 307.721106][ C1] Call Trace: [ 307.724364][ C1] [ 307.727189][ C1] dump_stack_lvl+0x99/0x250 [ 307.731760][ C1] ? __asan_memcpy+0x40/0x70 [ 307.736324][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.741498][ C1] ? __pfx__printk+0x10/0x10 [ 307.746069][ C1] vpanic+0x281/0x750 [ 307.750029][ C1] ? __pfx_vpanic+0x10/0x10 [ 307.754518][ C1] ? ct_nmi_exit+0x14b/0x1d0 [ 307.759114][ C1] panic+0xb9/0xc0 [ 307.762816][ C1] ? __pfx_panic+0x10/0x10 [ 307.767208][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 307.773080][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 307.778977][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 307.784067][ C1] check_panic_on_warn+0x89/0xb0 [ 307.788986][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 307.794093][ C1] end_report+0x78/0x160 [ 307.798315][ C1] kasan_report+0x129/0x150 [ 307.802796][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 307.807896][ C1] rose_timer_expiry+0x471/0x4b0 [ 307.812848][ C1] call_timer_fn+0x17e/0x5f0 [ 307.817428][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 307.822875][ C1] ? call_timer_fn+0xbe/0x5f0 [ 307.827558][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 307.832651][ C1] ? rcu_is_watching+0x15/0xb0 [ 307.837390][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 307.842829][ C1] __run_timer_base+0x61a/0x860 [ 307.847657][ C1] ? ktime_get+0x3e/0x1f0 [ 307.851962][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 307.857313][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 307.863539][ C1] run_timer_softirq+0xb7/0x180 [ 307.868367][ C1] handle_softirqs+0x283/0x870 [ 307.873114][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 307.877854][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 307.883119][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 307.888296][ C1] __irq_exit_rcu+0xca/0x1f0 [ 307.892862][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 307.898035][ C1] irq_exit_rcu+0x9/0x30 [ 307.902252][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 307.907867][ C1] [ 307.910780][ C1] [ 307.913691][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.919649][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 307.925350][ C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 56 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 307.945018][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 307.951061][ C1] RAX: 66eac223d2658100 RBX: ffffffff819683b8 RCX: 66eac223d2658100 [ 307.959021][ C1] RDX: 0000000000000001 RSI: ffffffff8be33660 RDI: ffffffff819683b8 [ 307.966974][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 307.974923][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa38430 [ 307.982869][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a53b40 [ 307.990818][ C1] ? do_idle+0x1e8/0x510 [ 307.995059][ C1] ? do_idle+0x1e8/0x510 [ 307.999279][ C1] default_idle+0x13/0x20 [ 308.003599][ C1] default_idle_call+0x74/0xb0 [ 308.008368][ C1] do_idle+0x1e8/0x510 [ 308.012425][ C1] ? __pfx_do_idle+0x10/0x10 [ 308.017000][ C1] cpu_startup_entry+0x44/0x60 [ 308.021746][ C1] start_secondary+0x101/0x110 [ 308.026497][ C1] common_startup_64+0x13e/0x147 [ 308.031423][ C1] [ 308.034726][ C1] Kernel Offset: disabled [ 308.039034][ C1] Rebooting in 86400 seconds..