last executing test programs: 7.58424235s ago: executing program 2 (id=18734): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000000540)=@id={0x1e, 0x3, 0x2, {0x4e20, 0x3}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x67476000) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) 7.383820362s ago: executing program 2 (id=18736): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="5eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3c5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r3, 0x300, 0x4070bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x18) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r3, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0x20000000) r4 = socket$packet(0x11, 0x2, 0x300) writev(r1, &(0x7f0000000900)=[{&(0x7f0000000880)}, {&(0x7f00000008c0)="eee841fc7613acb2bb8b3600a54481b8c712fdb7602f4058dad5bf3d479210b7fa2683246774cba0231168fcf98c6e41403d51ae3f3dc3b005", 0x39}], 0x2) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000014c0)="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", 0x6a7}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000840)={0x6, &(0x7f0000000800)=[{0x8, 0x9, 0x7, 0xffffff2f}, {0x1, 0x4, 0x30, 0xbf85}, {0x8001, 0xf9, 0x0, 0x9}, {0xb, 0x6, 0x2, 0x101}, {0x3, 0x0, 0x59, 0x9}, {0x54b2, 0x0, 0x6, 0x7}]}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r6, 0x5305d99ff2cfab1c, 0x70bd28, 0x25dfdbfa}, 0x14}}, 0x8000) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x1000, 0x1}, 0x4) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) 6.405110926s ago: executing program 2 (id=18749): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r3) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r3) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r6, @ANYRES32=r9, @ANYRESHEX=r4], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r14 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r14, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) 5.170639771s ago: executing program 2 (id=18762): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x6720f15ce8555866) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @remote}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) accept4(r3, 0x0, 0x0, 0x80000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000000201010200000000000000000a0000073c0002800c00028005000100210000002c00018014620300fc01000000000000000000000000000114000400fe8000000000000000000000000000aa"], 0x50}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000040c0)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf250a000000", @ANYRES32=0x0, @ANYBLOB="0000000004"], 0x24}}, 0x40004040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x38, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffff763c}, @NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x38}}, 0x40000) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000840)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000800000000fedbdf251700000008000300", @ANYRES32=r10, @ANYBLOB="3000308014000400403a050c5baee2004ef2b6d713459a7a100001800800090000000000040003800500020000000000c24e85e04cf859be801287ccb31c6b75208f0b2764f9003105fa78dbe34e8644a20b7210dce304278e9f8f6424bf26ba9887734dddba41982a7df4ba654d6eff8cecc0394f0b309a28251e4930e15f414b92b19db9040d61ed7f5eb1682470436fed294e821e44f2fd865938b06985732074218be3b1a4197d1ef732"], 0x4c}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, 0x0, 0x1, 0x46af, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x100}, 0x80) 4.396598792s ago: executing program 0 (id=18768): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f0000000000)="b9ff03316845268cb89614f0080062027aa13c0e58460c463bb7c65d22e7b167", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000001a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000840)={0x1144, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "bcd3f4f533b6372cf9227c4d6c4c4846344435e4a9f3b0e2f4693d8396323e7f47a93f"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_NODE={0x10b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4be2ffe1747b4cf50f04bf35d925473b4e0b4674409c0a9f6e517ff504"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "b149b74de63d5b1cb645dd7b74f3944a1f52232b10f832a97039c3908a82d12ba87cb0e97ccfb53ef7efe9a8254a969128d4eb7d5c35cbb859852518ea51f005381d71b6910139631df3dd5f711f84b3b545c85ec9f05369c0a5dd113e2cae08107113332450168d4e5afe117241b9283da0b14535185095e116b8e1aadcae8a45a6a55b232feffc040e00da2b75d758ff3e0cf3a195e8e374ddbe9006247f014fffa8d86f29fea5220d463c4e2af1a8bbdcb2a3ab56b0aed37f1243dcb7fc4b3555332968581fae17d554d93e805ae17fe17c38c5a3d4a3b0abb61c6b41a85549716c071140aa9850e58eae77fa56a48804f1f9c85d12cfbefcc75e3d4f70b3b1c86997ebd0246bb2e2883c732008a3af24af18f9756f71f0f89a2f30be640d012d39a917048c11a0c054f59d547d9d29c201277a0a43ef5b9d4d1ae39ddcca90ff5c09fd10e8aeb994b92685c63339a85412cb1bfa88f7459b25d557a96f7fef1f8f7a26ee5842806d1fc4c28b05c8adf446a63cf1ff14564b17bbeed4b07569128ac29a76550322c390ab10bd610d2f35c23cce751b9c858646dbf48fabea64268f8bb5933ab3b83a13cf949f40043366a61bcf1ddccc4a54966e05bc02b5153747bb7e1d5a39d76559cfb80d4e7e6878dfe7e382ae4d3927468119a829dcd3c36f6a4cae469572801b72ef5f36dc0b819d65298d8e16e5982bc2f2acde009738e6e66305e0a901fc7b0e087d6ede8fe2c1647c9dfe88e280a6b3672f349a508c0fc0be74d31341f77566232fb84d69d75d599b3b1bf2975d495e4180535e12a50ef6377ec978c880e58868efe3510a2c0afb784f8fdeb37df05d860a68e48360a1f80977163f3d221799c9ecf48ed2124a9f735998c87c44fea94794b7ad455eddc375f230f7033ff43c068466d94a5590e7f8652fae8847dc7afc00c2992ba0ec543d07d8388f63e5b7fb7943612f2c85587b09fdfb58964c52fc42a85175469aca6ce5ab2b26486608b0bfe54056c67c7dd3cfb23c4f8f4603ab679894250dd40316d27fb25b390272f7f101281bdfb711ff3591ba73311121976f6185dbb45a0d8e2832b0242cd479ede4549adc49db913c14b4b328134058c605c8a433c20b2abd9c4c155d3659e533c111b47bccc5d563931883bff814e0a8cc8502bed5de6e9946d46bd7260bc0589824dc63049ed7534a4d88758fdf23d8d9a2941a74c4f6cb9dba42c03bba647e8fad180932789b6e78e90637d85147582dfaf6bb0cbc62a3006a3889d03a9bfec432e070468558ceb9e28b955059d7d9e24ef7d8a65e8ef7e014e843426d61412f396aed3e6c084ec5ff1ed4b5383c616af93280bea7ac47d34c7e68785a0fdd010b5545bcecd7bc6cf901773d0454dd61354e52e08816f328d2d500df3b56c00c75c7cae749a278326f0438a215f601a2db654fab6b6ca53ae84af58701a5c1d87494ec81cf292b6bf57d05ba9ada36ef9a6ad123045aae974d8b1981e2f9651583301c13a9eeac6be9853da4b8738e5c9ee478ea371283aa298b04da6b0440dea890835c3a07fc285db90403e8fd6c3798bb144aea02dc34f34f85f19ee7a047b73176dbd84093ca259dc267ee2193b329fea519f3360f418c2bfeac3f7577117a63cd1965589dbff20295d22f7b1b522344857f3dbdd79732aa0c7ad9c2c6bc345924e3a2d7dd87bfc766339ff46ca914bcca8f37757f64053d40ec4f012955f9cb45cb5e1b05df9cc8c26622a2a394af51b3237f62c9ec63fc416b7a0ad9443a7fa3e3c8807c23d75a1ddc5a375783a6a168b63b87a9516bfe671e5a107045040b92d403e676a23541e142d9fde86929e9db874c3c0ed6971bc56cc34b991c30f0304ea0d82961d49d1b5f858e60fda9a83ef116c0c12c1e45bf3f16af648f84bac42ffc374715649cbc15fc0273a1648344dd6ac8302fd982e5d97dd6e2c1d27405f0db271691e71b63c64a65ec69ebebf4820596dce0df83d41b4c21e3a567a4ca6aee57ca27c54b23128de841fc143938ab87ff9e722bca28a09388143f2e8749245690072520a73aeb9eb19c69514ecde8d96e7498c97f0220981e831ac21def432aa5ee686b3c169234a72e244bb5d7022d021b70182598fd022067d5751f97397b4d1bac78f94d9b4353ed283b13260271c061910b1a9d8a3e9b6691ee93dfd4be894da96f40b49f5bbb7b697785ca3a814bbac2219eb93b51b7fff3bf6ea5c85e08a807d80e59c9c1a1acce6a83d1b8659401fc37d47c56b6469bd6c5748f88938ef2303057e7d536185240f5d4652f9ca17130605a24bdbbbddae73651041406953425acde3d80b3b4c67c2ba398094a8abe631d009d46c0af7a6f9a08fe9e71b202c6661d278c8edb7d8289e08f017d7201f3b2c9268e16cec7ea8d979673b38327fc2c2fce119e00bfacfb42d1332633c5fa74a698d9d23ff9549bc829a6286c3899368ce7f1422cd1ad186736e37a3ae77b9369e95607acb9a98718ce3d5acbc10e72adf7c8781e728a1afb9fd4f652e54e568474265d0a1021815ff6c8d94f482058714e3d7faa457a4eb923174a3eee52e7af2c03a184107534bd502855862a568ae305dbdef54bae447392252a28f50c04197ad3d39ae5e64d0e669939e2b7d85754b1d68e0dc941772d2acb0f3de05d2f987541e6a65d564c88a968161243a771419cfdbba32703d111d85050156ccb41714b01cb4cd0f66c5cf139e274ec9200386023d421ad2417d9f9155e32de200c255c3e3bf36b023c4e0f8b38c488668f6fdf23908a702b6ed275003be3b2007f11094be780c191210132ac5a3cc4ad16d76ce23ebfa8e43f8f4a2f3c054d181d0ba8341325d13852e3d2253a4462acc7b77b773e49a8cde3c0c4563cf93decd89a4e8b508d5da111631ff565fd7706f5917012d8fa73616f4f47cf374de812a05b92e75b03c507983efc4dbc38a7598ffd4261aacfa95b2a0cbf7e2b71f6427b23e108fc45cbc1cddcac0d7346d46d0551b4be27c0c221f97410d85a9a73c3f3f4dfef72f49fb8d55601e9545ce64f9ee338d0fc610fd5db16c22ab4d0d464462b7deeb5ba97e67276d93759f91d44d99b3a0ca2781b3a793d1457cde37023677d8f16696ff77398a7618ca451620e78f3fb92568e3460d6a17dab2caaf5e8c0b42c9ae06b71a67d73e67c9570095edfbc92bdffadfded35b90a7d3719a0e1aeb41d2d92b82e43ec3e2ebbe13eccb3354597370f90a85a18e1e44f973b371576ed45914505343565793377d964f6691ca7abec8b0f3959e3e29746292af8ecac8e6a4351d14e0e2999f5703c6fe71f9e874dd4132cb0dd6ecf217688a3b33ac278534a0d64793074f9491a49ec7f68f073eb5a266fd0e6bc6cb1a36058942af2797812c837e24481f03dea28a2bbcb3542315e9ab76fed71f86d4c2742aeceffcbe6d9550dd744932c3f17b0df265f484b075be40068dc59049c045f4e05215e546f0ea6885f6949dfd74e3985bcc77818541d2433b16ea0c37271ca84af91a7ee35e139b4e480e87f0a94be7052672a5db2e83d086f43b856c33791023b4ad02abd5e09d0a3694927f2edf124aba11a0ed7f24e40dc461de6538cedbf5fd8d99283d32a7a93e4a9286d1d141fa1c7845610d61bb531a207da796f5b8c65757b26f2926d4da15a5a168ff283edd70fc31970a902fab68d9e74c832768987052a46bc60fae46502c140f45bbaea507bf23ef09293b6325cf1384f861386d958033efe3ce78410e14adb6216a0d85f89bc628b500c3c985293c9bf743810b45c27c7298d625fbe082b6e462a85ce9c3ecb412c91a8fe69015152aa6b89a722a283295404a0b0c136b806120f4a33bc0a73121296cf69aa58dd5ab832e9ac48b0bc5708c612c3eb86c5a2acc7ceb1d34d74dfbf32434889c097aaa9be6493d59893a74c67a2d5eee1ba918d1d30ae4714e60b375fd6250b1ca75e7ec0d06247131ea925416245b375ee7e72f7de50ced7cbd424da615fdb698527d49ac80908627bb1f0f1418d5caf15ee570fdf65eb45310de3f23f6a3bd6146593c70b23cf85c3e0460361313da2cbcc2faa71423cbd4ac27dcbf1a23f7ee4a5908c97f2ffc66838d03697c7eb97d625b028ea09f0f6ffae2b8a4b20ddf4c4e1228b4199c40b1826a5dc225a4ac2eb8939fbe41f3053e4749b3dba133d2dd74de4cfce39095fb71f8c39f5222fddfa9a6cf357080f12156f837a7370967ea369a97268df5eae84eb25dacdb1ad2b491a44e0d4a4787ef3eeb6a27d82b15d7f33efd40a7d7fd3185ab8143f1a8d1cecd7c25a9d8af21de49a0331680bb148e65696ec6b36d0a5695519dde8358e54fc7facb7458d29c02b72c7497413b4543861f03d7b8de175c601b55e8e46dfc4e990bb920a1b7132bf2d992ef9b1d11405d926e8121bafbb70ee6cedc2e3d484fe065285ebb7c4ea949bd295433e775a891f591d69d01a154fce96a8468486e8a651c3a4ab39b9841d790eececc96af3724f950cb5507e6b1cf24199d8ed7b380a54d3a57919a8872588d0a8d7d8e8e936b4bcaf856b245a99a0d495211f16fe6ecca99fb91eb4fb9da7b11fef287f21164a21807a3161125114ab6afe8452e05a05804a4bc7691a100f3c3117660341f4088f7cf189019f451c7b18023c8addcbc55d74a2a6bb4a1545eb6113a91cde6f96424c01c02d7647389fa4e129416a4ef965e11f274043b87bebe946928e6baeb4b196648e3de6173339d90d609a79f7e428beee4fdb55558533f9a61806776f934f1f25dfb304d90c943c03e8928ba693f65697593096c6a74e4212cdff7be37cc623e733cae393b9dc35dbf7b365d9fc16376d38a8e6ea74a8f80722ee0c0f7aec8cadb39b34350d6b507a48787fe2ca5f7571a095af7900e5800313c48f9d9e1cdec9499e6c686c8c31d9147bb4b5655e2df2c1286f1c176cc537619dfaa4fe584091b9e51c346edd49e7dbc05547c6720c896a2861c17c9ff78bdb7817c27c91c1e30fd38141b6ec5f8b6228efcb2e04739c21dce514e15a352c406a622ab0952badac05726aa17ee18343861779dc8a9a5511d242e5cbb3121578a7e5d3f76ccec07ed6c52fdd56b99bf4bed786f395853adc0c30d4cdd6b65cbfbd19ace6b8323c6d23f3b00d9a73133435f34f32ededaa18fd989fdd3dfc47b53179e13c7f628d67ff99ebe0853778a022fbfb90340cb011f3f6565b0351488f4cebc7ca3992c44eae6ee8a0d2373ee7e6d79cca0df6a71ee55b61ce3c65014b5d7e5808b27190215b059ee5eda863d898c296f02308968e3333073b01cf70506f04d30e83c8fd0cd7783db3bfb34abe4a444c68a2037a4b3d0296425aca1352cf33a5dcd2285c07d64453021577e40714836c95220bda8b96f80a115fc437734b5ea387de89dfc17c7586e8767c55423fd82ed3504e4a61a8a31a1cc16e0902649d619b5c04cbb62424579135b197685801eb5442b7952a98e7d56c0f6d1f9e36b2e0156f860e3c7c524d50e6d8f3e69c89df0a5a5bd9f7b838399b6ead1c2f13a489917eefadd78f44d13e811e26881f8073471d9f8aceabb714d6c9ccc9070cd0b0ac26989beef70b298f3511b2e20944d0ef8927e2a0a403f31b997950455e556aebea33d65b23bf67f60a404d94d603114f5f4acbc0b721aded28ff7563547b3f5d140a3b6071c7ece470ddc724b64900ea46f101a6f3c2ece6abc7d538ca5abf38f450b7157f72100193d4128bd1b1fd055244c8f2b750443983198aa997b12188"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "b4d04b0730988df2aeaeddf33de4d78614e2082f7edc"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd05f}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1144}, 0x1, 0x0, 0x0, 0x68a238a80e03e8c4}, 0x20044801) 4.199682544s ago: executing program 0 (id=18772): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc, 0x20}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r3) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r3) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r6, @ANYRES32=r9, @ANYRESHEX=r4], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r14 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r14, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) 4.165050569s ago: executing program 2 (id=18774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001600)={&(0x7f0000000180)={0x1460, 0x1f, 0x400, 0x70bd2b, 0x25dfdbfe, {0x1c}, [@typed={0x14, 0x44, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x4b, 0x0, 0x0, @fd=r0}, @nested={0x1010, 0xc8, 0x0, 0x1, [@typed={0xc, 0x29, 0x0, 0x0, @u64=0x5}, @generic="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"]}, @typed={0x8, 0xa3, 0x0, 0x0, @ipv4=@remote}, @nested={0x405, 0x56, 0x0, 0x1, [@nested={0x4, 0x8e}, @generic="c770c56e7658a08acdd0ff40cfcad21aafe6a0e566f68d6c730d1f7a73cdb74b40cea4a188f9e42edd467b36d69b0481f34c7e86aede2ba7ba875cf8989e4d6a12992adf9405b79017469d7144b887e2a70923be2c635bd70659579d986a7ccb540225d1aecba74bf90623022715dcade77dfcd49df209fb290588a10107eaea80ed23331b0915d02b7ce0210c2691b37de9edaebce722ea35a9f4351d5ca522452191bfbddfc4db53bf4fed69de49e5617629f16271", @nested={0x4, 0x7}, @typed={0xf2, 0xf, 0x0, 0x0, @binary="61602413699e8473e4a0ec033bfde0a5719db6509c79e3875c6516e2f419c5466e2d4790602bf40af379f70e04c3b9995eeea47cb1080b01311e63cfaae012dfb804facee5abf115cfd1b01935169b14cb7d6538d3b9b04a6a3dc659d8bdf2dcabc83e454b62928d77c897067140f7a5c91564506ef252b6bb60f71c504a9c29c86900100a537d4b8093a98817323ca9714f5ec754ef841c8fe5c3b1cbc49991c6c8a8df4a90787ef06b2134192614e18d5f417b1861d4fb2cb505c032609e41b2a0e5982e576cbca730f503ad4b19e50e8756c0c5ee8209cb6ef0ffb40e3dbff1bcd3a7fcdcbaa9eb76981d4126"}, @generic="6e5f4e62e6c1e39453b039d90b9784dbbdd9aa09b79ea20b562f7841701c5665eac79dc0b319e2af94480bd485ff28a24ad0da1c22b7d48f890ffc50ff129f4a5c8cd2dde230dd0f2507b57a48b222f2985971f545498f7cf3ea1d930d5c80299b9001f7ec6de01f7df0395fad34c57aac4660763410edba0c625bb058a3c01a0868ba3168659c1097bae2ec6992f4fe28bbf1418b7d47c17c818a31032c8262c7d1c343baf6ec4a13e5023be9401a30e203d62501f6db501e3fd1b90b39965f2b8b5f1c1f796406", @nested={0x4, 0xe9}, @generic="3167ece7fa394a3e330241f1979b3b35ad94c491b6565240dda26df8a6c7f8d14bd7ba68945d89264f7351dedf7a9a413f683b2cd1cb1595157555dc4b3783b3ed8f7db5c27a0d9f6fc63ec6cd3dd2a7b7dc81ac58627c42e81967b08b6e6f010599caf10009a35ccec590f26bdce096986bddcf4c3e69f0e830be03fcce45a21b46100344978e969f9e869eb528cfdfb76a69", @typed={0xea, 0xdf, 0x0, 0x0, @binary="97d9711b1c5e95aafc638562f390cdbcdb4af2e2d4d1a9cadea0342145fd73aeaa5f74a1d4515340da0e0fa50634bc225fee4df1a18f604335fefb680db9e693146a102161aef9ceb94f78eee9924d4162c84fb40e111b7d81497fe1c2bd19d7e5b680d6465a9c36a57cb469384fc269b379f7e47b0416af643a5b4987808d712b44c44ce0d06d0306b41a94cc2689888b8ba99d0f714c2e5c066971e0ebcfcf4a9cce5b657c1db9310c90ae764a5108003d44e54d2ebe686260a5cec733fa6efd33d55503f567bbe0b83c08d79c707cfa5f6fb513d689e3bcdd4a58aa7f3adde174fdd8be19"}, @nested={0x4, 0x53}]}, @typed={0x5, 0xba, 0x0, 0x0, @str='\x00'}]}, 0x1460}, 0x1, 0x0, 0x0, 0x880}, 0x40) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8}]}, 0x38}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0x0, 0x0}, &(0x7f0000001780)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001840)={0x1, 0x58, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0xfffffffe, 0xffffffff, {0x2, 0x14, 0x10, 0x4, 0xfd, 0x0, 0xfe, 0x2, 0x300}, [@RTA_OIF={0x8, 0x4, r11}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x2c}, 0x1, 0xffffff7f}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001900)={'syztnl2\x00', &(0x7f0000001880)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0xfffffffa, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x20, 0x20, 0x0, 0x97d}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001940)={'syztnl2\x00', 0x0, 0x29, 0xf8, 0x4, 0x1, 0x7, @empty, @mcast2, 0x8, 0x20, 0x0, 0x7}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001a40)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001a80)={@initdev, @initdev, 0x0}, &(0x7f0000001ac0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001b80)={'syztnl0\x00', &(0x7f0000001b00)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x81, 0x5, 0x1e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8, 0x40, 0x3, 0x3}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001bc0)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f00000016c0), 0xc, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x1c0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x56c4b1c53c7b82cd}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x4}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4801) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x801c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1002}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x44}}, 0x24008850) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f00000000c0)={@remote, @private=0xa010100, @multicast2}, 0xc) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050200010000fddbdf251200000008000900000001001800018014000200626f6e645f736c6176655f3100000000080008005e000000"], 0x3c}}, 0x0) 3.963608041s ago: executing program 2 (id=18776): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaabaaaaaa00000000000000069078640100feac1414aa00034e"], 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.843138684s ago: executing program 4 (id=18778): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x86, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x1, 0x5, 0xf49b5ed75375c798, @mcast1, @mcast1, 0x700, 0x700, 0x400, 0x7fff}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x15, 0xd, 0x7, 0x5bbe, 0x20004, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x20, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0xc, 0x163, 0x0, 0x0, @u64=0x12}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280", @ANYRES16=r7], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) 3.780868026s ago: executing program 4 (id=18779): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}}}, 0x24}}, 0x4000010) r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70600000000000085000000170000009500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r2, r2, 0x3, 0x3, &(0x7f0000000140)="818325", 0x9, 0xf3, 0xc45, 0x8, 0xc336, 0x3, 0x7ff, 'syz0\x00'}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000000700)={{&(0x7f0000000180)=[{0x8, 0x5, 0x0, {0x80b, 0x6}, 0x9, 0x7, 0x1}, {0x8, 0x60, 0x40, {0xb, 0x8a09}, 0x200, 0x3, 0x5}, {0x2b3, 0x3ff, 0x18, {0xfffffffffffffffd, 0x1}, 0x6c, 0x4f0c, 0x3}, {0x8, 0x2, 0xff, {0x7}, 0x4, 0x7, 0x9}], 0x4, 0x40, 0x9}, {&(0x7f0000000380)=[{0x9, 0x2}, {0x9, 0x9}, {0x4, 0x2}, {0x6, 0x5}], 0x4, 0x10, 0x4, 0xb0}, {&(0x7f0000000580)=[0x2], 0x1, 0x8, 0x0, 0x2}, {&(0x7f00000005c0)=[{0xec8, 0x5, 0x1f, 0xe, 0xe9}, {0x8, 0x6, 0x5, 0x8001, 0x5}, {0x1, 0x4, 0x68c3, 0x200, 0x2}, {0xa1, 0x9, 0xb1, 0x54870810, 0xfffffc01}, {0x40, 0x8, 0x0, 0x8, 0x344}, {0xc, 0x1, 0x1, 0x800, 0xffffff81}], 0x6, 0x28, 0x80, 0x6}, {&(0x7f00000006c0)=[0x2, 0xfffffffffffffff7, 0x9, 0x6, 0x10], 0x5, 0x8, 0x9, 0x7}}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f0000000440)={0x0, {{0x2, 0x4e21, @broadcast}}, {{0x2, 0x4e24, @loopback}}}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xbbe21a6a6c0c72fd}, 0xc000) 3.725304457s ago: executing program 0 (id=18781): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r2, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0x0}}, 0x10) bind$unix(r1, &(0x7f0000000340)=@file={0x1, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000fa0000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) r6 = socket(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'veth0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r8, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x20000000) sendmmsg(r6, &(0x7f0000000000), 0x400000000000047, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.57204695s ago: executing program 1 (id=18782): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3.564457799s ago: executing program 4 (id=18783): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0x16, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, {}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x20}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x3, 0x0, 0x60048110, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000500)=[{0x1, 0x2, 0x4, 0xa}, {0x1, 0x5, 0x10, 0x5}, {0x1, 0x5, 0x9, 0xa}], 0x10, 0x57}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) accept4$unix(r2, 0x0, 0x0, 0xbd5d1002d9ebc349) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000001c0)={0x0, 0x81}, 0x8) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aac000000060a01040000000000000a00001c0900010073797a31000000008000048014000180090001006d6173710000000004000280140001800e000100627974656f72646572000000540001800900010068617368000000004400028008000640000000100800044000000004080001400000001508000240000000000800074000000000080003400000002b080005400000100008000440000000030900020073797a3200000000140000001100010000000000000000000000000a"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) socket(0x1e, 0x5, 0x1) 3.259203016s ago: executing program 1 (id=18784): socket(0x2a, 0x6, 0xde97) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x800000}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000183600000500000000000000000000009d052000fcffffff9d720800010000000d64f4ff100000004d77c0ff000000009500"/72], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xff1, &(0x7f0000002e00)=""/4081, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 3.156312467s ago: executing program 4 (id=18785): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001e000100810c38b15a5800000000000000000200000001"], 0x24}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000040)=0x8, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009f00)={0x0, 0x0, &(0x7f0000009ec0)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0xf0, 0xe, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xdc, 0x3, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x71, 0x1, "4408f68929288a702e0d1e114b27da16f370d1a42a8da44e69a708ee6b22e232133067ecf78199c904c0b6cef741cfc867f1c061e3002a13d8420da3a53e8a882c89cb7832ade488b834ca1eb9e34a04b727da9a8cc4b28a5de8aececcfecf4f36b201c58b35aecbe86a4e8e18"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9e02f13dd87731e4}}}, 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) 2.994429554s ago: executing program 3 (id=18787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (fail_nth: 5) 2.615874358s ago: executing program 1 (id=18788): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="18010000fa00000000000000feffffff8500000075000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) poll(&(0x7f0000000000)=[{r4, 0x402}], 0x1, 0xeb) close(r4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@bridge_delneigh={0x30, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0xf2, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x1000000}, 0x0) 2.607767973s ago: executing program 3 (id=18789): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x10}, 0x0) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c00018008"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) (async) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x20000020, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='bond\x00', 0x5) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0x56760003ded1ddd3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @rand_addr=0xc0000200}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000940)={0x3c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xfffffffffffffd1b}, 0x1, 0x0, 0x0, 0x40814}, 0x8000) (async) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) (async) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xa}]}}}]}, 0x3c}}, 0x0) 2.554492839s ago: executing program 4 (id=18790): syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYRESDEC], 0x48) (async, rerun: 32) r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x40, 0xf5, 0x7, 0x42, @rand_addr=' \x01\x00', @mcast2, 0x10, 0x20, 0x9, 0x6}}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000380)=@ccm_128={{0x304}, "020f2f13cc2351b2", "6bf3f0b7ba057fc385a39186b37619c9", "8a41c1e3", "d2a426e226622437"}, 0x28) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x401c1, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x68, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x400, 0x3, 0x7, 0xdb}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$TUNSETTXFILTER(r1, 0x400454d1, 0x0) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000001080)=[{r3}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 2.453983774s ago: executing program 3 (id=18791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100210000002c00018014000300200100000000000000000000000000011400041300000000000000000000ffffac1414aa3c0003800c0002800500ffff000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000007900000000bb3c0002800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400"], 0xc8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x28) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_retopts={{0x10, 0x2900}}], 0x10}, 0x840) socket$inet6(0xa, 0x4, 0x5) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4, 0x2d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2.003947953s ago: executing program 1 (id=18792): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x890c, &(0x7f0000000000)={'macvlan0\x00', @random="0200fe7fffff"}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000326bd7000ffdbdf251900000008000300", @ANYRES32=r8, @ANYBLOB="050060000600000005006000a8000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000004) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r10, &(0x7f00000000c0), 0x9) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendfile(r11, r9, 0x0, 0x10000) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000005c0)={0x3, 0x0, 0x5, 0x200, 0x2, 0x0, [{0x200, 0xa, 0x227}, {0x8, 0xd, 0x8, '\x00', 0x400}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$netlink(0x10, 0x3, 0x14) 1.230700077s ago: executing program 0 (id=18793): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r2, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5b}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000c90}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) syz_genetlink_get_family_id$l2tp(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0xc001) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r7, 0x200, 0x70bd2c, 0x25dfdb7f, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x8fe02, {0x0, 0x0, 0x0, r6, {0xfff1, 0xffed}, {0xa, 0xb}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@acquire={0x284, 0x17, 0x0, 0x70bd2d, 0x25dfdbfe, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d6, 0x32}, @in6=@local, {@in6=@local, @in=@empty, 0x4e21, 0x7fff, 0x4e24, 0x9, 0xa, 0x80, 0xa0, 0x84, r6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x10}, @in6=@loopback, 0x4e21, 0xc, 0x4e21, 0x0, 0xa, 0x80, 0x20, 0x8, r6}, {0x8, 0xf09, 0x5, 0xd5, 0xfffffffffffffbe2, 0x6, 0x250, 0xfffffffffffffff7}, {0x3, 0x6, 0x6, 0x7}, 0xfffffffe, 0x6e6bba, 0x2, 0x0, 0x2, 0x3}, 0x10001, 0xc, 0x4, 0x70bd28}, [@encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e22, @in6=@loopback}}, @tfcpad={0x8, 0x16, 0x72e}, @replay_esn_val={0x2c, 0x17, {0x4, 0x70bd28, 0x70bd25, 0x70bd2b, 0x70bd27, 0xff, [0x3, 0x0, 0x200, 0x7]}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0xa}, @tmpl={0x104, 0x5, [{{@in6=@loopback, 0x4d6, 0xff}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x3504, 0x0, 0x0, 0x8, 0x7, 0x9, 0x8}, {{@in=@private=0xa010101, 0x4d3, 0x2b}, 0x2, @in=@empty, 0x4, 0x2, 0x2, 0x5, 0x4, 0x8, 0x7}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x4d4, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0x3501, 0x3, 0x3, 0xb7, 0x7, 0x6, 0x5}, {{@in=@loopback, 0x4d2, 0xff}, 0xf, @in6=@mcast1, 0x0, 0x3, 0x2, 0x9, 0x52, 0x6, 0x9}]}]}, 0x284}, 0x1, 0x0, 0x0, 0xc060}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8000038, 0x3, 0x2b0, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xd0, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x3, 0x6, 'netbios-ns\x00', {0x4}}}}, {{@ipv6={@loopback, @private1, [0x0, 0xffffffff, 0xffffff], [0x0, 0x0, 0xff000000], 'veth1\x00', 'veth0_to_batadv\x00', {0x8499377069aa4b5f}, {}, 0x3a, 0x80, 0x4}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x7fffffff, 0xfffffffc, 'pptp\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x34a) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2e7c4cbe}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 901.437715ms ago: executing program 3 (id=18794): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, 0x94) 816.121447ms ago: executing program 4 (id=18795): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg(r0, &(0x7f0000008800)=[{{&(0x7f0000001940)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x9, 0x2}}, 0x80, &(0x7f0000000100), 0x0, &(0x7f0000002300)}}, {{0x0, 0x0, &(0x7f0000003a40), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x110}}, {{&(0x7f00000053c0)=@can, 0x80, &(0x7f0000008700)=[{&(0x7f0000001780)="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", 0x18e}, {&(0x7f0000006500)="395b9f129c0758f7fdf9e24f3e5e709f19731bd29635314a2066df73aab51a87672aa917246eac66b5a80c11e4c5690dd6707ba71e10bbf05d376c5715f842ef25602b449a73169ff4ae04bc53291d41613f543eef8892fa9bba1ace6bf7ff0972e55bc710319c93758bcbbd5ba7daea688afc3f02bfbcbc8a0488c9e5743f8fd04d6da4d47cac600a839155e058909352e281b8a4afdb4bfddef2f853f18e6c2411a246a7203298b138ef1167553657ab7bfb03ebef05082c25c8b4db231e7706b61372f72bd66e5783503dec", 0xcd}, {&(0x7f0000001a40)="ddac3b3f9c74d935530dad4c456c73769524cf65e406b085eb8a7528c82c0e92dc1f893a9ddd2f60ce4453830825c083b4edeae85fdbba924c5fca28d4e90d562fa967641f1601dc83ad9292e757f8a89da6e558dddac5bda50dfc1425f95696e43b98106c14f6de493ceafff69fa7840ed1c00cc9d8087a9f50c2ed7e12a2015cf4fcf23d3f38f04d2b751ed3ae42b1cd42da762e7662d92cdb709953f86d2ebaac5b568acaf5ec11e8336a2fe7671301fa11960f5242ba43577f6f9cf6966f2ab850d3281dc20358631ea807d7533a9f286fa8e5f878357fdc90db3d996981aa989f8c672e986e29eb7aa431a6e78bd4fffc0eb5699108faa799e93a300f951b3ce1eb34d90d8eceb0d0de712d707197b4d4bfecf6d705d9ee348a5206e4035e0bbd70e45fc37de2a3334d5f50cb084b953fe07987a9b9ce7dddb42089c2c0dff347daac58d61c370b74b0dfdb52a16e3ea448c40491827767af148814edad96a963fabc7c66b49d83004da122e6a585bb417485522f182e61da4a5eae204be81bd655a62a684aba72748d1b05dfdc5dfc0798fa953636ea307ab37c434d5c25e91471ab60c1823f0b4e1b4e6e7fd45863c480c53731ab951df9182f98f43e837da22fa6ca43a0f1b0af9467dee6bbcf55fdea463ebcb7b25c1f72d22419b579f3665e3177f213f09aabfcd23da3db670560b0be03c20efaf4a8d64b0b905016d13efece72261c2c83717e5e79c0dfe289e1b667e13918115f06b03602c9c354196d796ec741d5e3cbe7887be17209150151659117f875b6d1b59aa395a8778446982acf7e8fd6de9631b9d83f01c976f2653e0582c62d9f88496117a334304ea97d41bd9e39e59024b3f581fc8a83d2650f48006c01523e13acc979b0b5c2c50ef5df51b5b3fd5d81e4e2701f31d539d303353161bcb5a9859b4877285c0e86c46127affc72b9e37cc3620b75ecea030a42f24c701e66903b207315a5046410f1743094bb157ae77f1df0b8d71c030f44896b08af45e3f1b39d2da70adf43afcc483b297f2f0ae2277bf32014d6e7f7546a95d593511eef6133fff5406b5d87c25cea7bb3efd3f62e5ed8beb31e914b27674d51112c6a73abf20d75f4e9ea98335c09d32ae4927c30080d888a3c68ebc3c15371e6fdc0b174a62422e4621da1b48db994298521603075e6408b217c7680554d9461878a7e77806ce9e7d41c0658dd9a17131095de7066bb8f8715cce423696a3794a312d3c4af06fb65ffe98e90d6f3a8c3eae4f571610b1945b8005705ef6e66fb6e817a3b36056b32df10c880aeaf8e077df4c11e357b24c9cacb4c2a0d262b417ee92193914c76f92382946704fe6fb224bcea9088c196fb4b891f5265fa83c4d443dcc1ca7b9ed923051ee69a2f9671f9ff566541b83386e63d40b76542d15fb5193b5ddbf7366e71fbd00cc615f69616912a3d7c826d7515c4c14c432121ac5f84f1f0468e71b2f1a20eed570e1895b11d1a22405aeb5cafb93f951da34890e197ef9ca2da31a23fb65c5122f2ca63faee5b5d717961c5c0c92301654bbc56378016ec06c1f2d0db384eb47f23bfbb7db30eeff6dfe6a9c7b7a5e70e457b512c21f5e4209dbd584b6ae5529dd731796987ddba4c2be76e6e14eae0f5670aa038a0b5ab0b04a1c1bd3c47ef30beedf6d24d18acf40e456cfc56032ebeb43154351d7c0a7f4c1f58fa1975ca6ccac464260e0ed4881248017df5e8a4af056b700463cf965902714cbd10981431b7b036c132c5c0a33a9ad0ae5cd9221ccb905226a385f1aeb8e18f956d01a2de143e43199896febfe76d2359740612ff128514fda7cc4ab1912871d926b5367cd7dd372746040ee0ff668eb601e7975960be5d79a3d1b850e764cb9f5f8588d14623779ac4bf6a8fc3ef0889370bc6e6f8861c81e94f8f5c66bacd22478c7fece0ffac2a2eae74e1c5741162265fb502d134eb25f15f01fc6bd3cf945fea02f1e2705fe4a851fdf2a928fac0362ea6a50ebd2f3a1bfc84df6f104a8b0fc97899899190c199d02b924c8fc33e33bd9c3dc520748150c59918def6198902aee1c8d6c742ea148de3c60ed43424df3dde34a35f6876fad3bddb847747ea0b86be9758c95555fad431a273482a4d1415878398b31fb83c6dfcc60f6d79e177dc87d2aad30e47e7c1bb6dd282ab5ae1970ec80956bd2d3a2b274a35e190a5eedb0a116ec4aad1e737550c488d73fbf8781b30009bb27b0308ce897ed88994d4e781c7efd2b75dcf091270836e4b48df16eacaa2a6d891d6219b62c63160045a43d1dbdd8f9dadab26cc11c9dbcf91e494cfa10d8d5e311b1ef503537866b47014b7c41a67e6094013a05be7c78288d4f508a53a7251f7d344f3d8244b67b11c8750997072b71d95796efd4134d014ae112fc455e0c811d8a2d8ed841c6bfb8ce83cc0fd809d288f3fbb78ff88bdd12eeabd264328f363dff8ad8184661f9e0a31dab5661cc9f053b420e9c2f3e55cd5ec7b25a2f802f50aa5e0354434056794044546718f856cd1e9610a0b7b69cfe4a59b3c04ff082bc3f240078c2b7dc4cfac04d98c6d7dcc3b0fb43a93375e868e928b0f7ddec90da17e91587e944a83930daad2e0375de440c4ab09244f87e56ef7034d5842f85be3c0b7cb521303b90982f5ff09e5c07127d4e082d0e98ad50a6d42e361f18c447af6d85e393bb5f6471a11a77e45b5a53529fef569e22e679b086d178278e089daf86387c0b367e20e5cc64fc9b20d15b63ed4b7c82cd49fbce26e49208cf3a16d24d5d4b70e5718a02efd0fc3020af7bf4c849d61957e925b42ea0df4e9a68f88903b274cce1c1cbc31dc9f96a30c9cb5ddea56a97e2655ccb1d6e8739656e5ecd8948ff90c7ef5264e8505b633ba9bc636372cc50873392531420b66e610d6316a023f0025056c7ec56e710346e91cb8a7b94fdcc0505c02aee1a738f4e4779ff9ea39b1db216a0c4c2ae3d8d334c3e1d22104a1a9e15e981b904386ffef9a513d8bbb769e30fec1f6c9ae206689e01c9e2e894efd6ee551184afe55c613fb9d4f1f1664608f79b0157eb1a80bc3747ccf0320ebac37ad6f624b114330c0b9ad04b37dcdf277034e1dd05de93ad6af93ed69e7f60cbb47f8f82768f5a143e33651a19ae829302ee38dbe4bd8be399fc839359fb087a03bac70cf0b9d22332515b550d816c74aefa612070574dbf3e6a228ec23efce57f012c4d71712e89be0e1a8b60fa2112f43dd1d4b465b2bb3ec5e5ad5d5c3ca202d075512dbe57f44923d9e23bc493003ff2161f13f8b040e9f16ede301c8bdf733573becb19af7a9c81566293db5fb5f5a8ddc6347c401e4382cc0e2ad2c9737f7568872ccdbdac83e69c2076639a6117663de6102d20c6cc083b3479736e06e14a35d32cdad29914dd35da5bab4cbc23e9155f1d76cd2934e0b5189b24dc3e71d0b3b24fc90711864f30d2882b53530caba19352c48a015017e590dd7cc54d8e5fa526b28a0e295b9704ab9bbfbf9c5c5c9eef7304eb6136bb817d4718373fe3b9c26711f3d6502b396a0986fda657de855bd184e5052c8694f14aab9ba442fe5f8142a897e5565cedf06b0acd756b1654cd813a0c920fe511fb5607e3b76b0ec264c676bd34ecc2110332f8de41be3c15b0565d6ddef7704dfc23c8552c8c35e420c6fe6293193973052142fd0e4dab36534db8255a7945ea600bdd2bbdc512c0b64c5d6de1be6d110c050dcbaaa8d5e45dc8e290096768f75a1efcd6eace036a8a5e9c7e8e2e29e2b85f348bc3c4decda11cf3613974649f58cad827a0527c4ec73fd29cb514a3348f58b3b8e6f2df469351ffdcfc435fa361412c92b9794c9e64b5dbc2b373a673e09148476fd5399dbc3018b8e29c3b2589ed407b969de16dd13ec4df761b2b0bbd82d39d113ecaf501ad7192a00d97e8399c1831c1113ec4aa0cf5b7f110b756d039178ac31477e03c87113c35504f8bb49eea6b9929daa5e744109410d0334a3c04f48a86ca5947ae4983f290cee945b46d3e01584568f322a1003f911158cb92f9a524d9cb769714912e4c11c1836c01c7503fe27d4ec773c4cee6bf08775075c0f5fe4eb202f4a56ab20029207452ce69614a7dbd894b458b773a94528b42e985d38fe71ac01979ae575cbf782f88b0e86bb06b46fa528c6c3692dbd5f5caf1ec9637dda5fb5a04fbac12bb08976f32ba3b7d2c666837cdc02fbd898039ebc3d7a4c703d0ef7a7474e2fc898f8be1b85a04b64e412f6f70e91aeb520779610fd5889d37ba7706bcfea59208ab0bd02448b7afcb930f7eb7517678b4264cc8cac1c77b94cdcce0680cc18fc94128acf7bdb5dcd841642d06ef011f6590e75437505e9a07e58669856a490bf5479bc4c7831d3bca6a841baeb03d6a42cc08435f3b5ad46926cac4d4a786155c17b65a064e954977c82af7d9bd3913926eaf83d71c94d59af8d21c58bdc160e6942a72a67da4bd695d8467bb1c27e6fceb318785c737b2f8a9d33991a2e9563204a08766a1eb000c1d0ef0e07800ea75f8eb24a9f3e56a0e067d4da04491910c21c065c6cf18540cf066a19662699dd12829a3743085d625f24ac5f0b0502914f27783fab0be8f85073b69d910f3611aa3623430ece5d87b2d0ec08c644a545fc696c23bd7fd38efb3f93e368f9b6aa6abdf9b38d8019e929ad9a2d0a73e62bc03d9be19f75480e4e15c21a633cf85036fb5193e4ff515b201ef206d1fa7f3bb90b6613187cbe527f95367a84a49cf27105349479b103e6a956f85c91052ed67eab441ef777d2bf597fb74c1da6f7736137e96831dc9686dffa8678efae97e63e1fa6422b1882e0f759eb9506941e23129ee5677ab082b87b29522a13f0ec8b5d630e5e4c3c89ff851acf5eaa1d28a779ac043810bd6b4cb82a413820eb422bc0954fcfc0a33c7e74cddf1126f2b409983724626cccd57160fe50c1c486282be557ae80ce58af393af4d905177faf48ba0355119de4095aa5520b508207da2d94a3c132cacad411f757f9b3cc307262a558198aed21fdaeeeb0e0e39e2a256734e1b124564553df50ad29762f064b7f2e5ffad95bebe6851c46bd0a6893049148f517d7343064356d1615009780b09fb2501c646ca2503afaef000565dec427a22f07791ff4adbc16a1416d73f991713b4a37f03b6e301e9c2886381935a28c85eb0664438fa91b9d21cbf46901a5f0f4b3621b4715b800385df1423a9754729dceea5d984e6d2960bde33e2eea95184ce2990213f9821c6c31681ad60b72e922de4d68226554e7cf68a8dc0cb1256915b9d3c0980dfcec0b96936aed3c001d4c3f628c3db7a26a49a67a028343f5f7defdd00bf4498739d66d8df333ade2cf92c379c02f4de4ca2a946112d191af3abc47ed6170216ab579cc31fdfce540347fabb4867b7261ccb558c9460a370837e9cf19f52cb4a7b303fd0d357c32979aa6a79fa5e444e437f8d3e34f199ea5afc76c3825a591b71705591fdc453cc6ac091f73dae440304b7a8ed369ff1b892fe59ce295fa39ded769b1ce4ce05a2452aed72cd766837c7f345f42ea751285d988d67feb6494eac9398f279defe83c5efc5bc77a98066737966fd876e6d789c678d263640f9c341680581975445cc013c390019079e6b9dc9b247e85c0ce7ed4200b477f45b8eb33e255e0978ba3986388bcfbfed81bedf446f72c99ff0b6013bc32a7dd3cbf6f1d949cd18ef36fcf535bed5b1c477e490c53a5cb37105c545c7c96fb897d9b9a9df56ccd82ff14e0ef43a33a0f44d562ef645104d3e6d9729441786089cbed9e9d3168c50e9270ce41a7ce13a8bb493a7657fa043c78b940c4d89a2fab0c1d6661dcd861df9f11fb0957ab71a630c1069115fddc20a4b078bb72a1f771610801d7e9b915261ced7a88652e1ea37c76d6f2a3b8c8b13d2312768ba3a9ca4129e2f7362e60dc65ee2e6ba6cca62ae8c8624f466276c6ab4bc8af0fae9136030af30cee815c632b2e7621f323e3e99bc4b145960e6f8599863e45b1518c7a9d1c27116ea40a72173ee498484f3e2e61a95d3ab6d9c6f892c243b272bb5e257e271f7588b623b540fdad3f5bd583bdbfa7268bebb9724d37a950894a553b4d88c36e63bfcffbe60e5f1f6fea20739f510d554b85a7a799891c7986826e2473eb6dfdfc158e7b5baf234e1d061fa14e85b71a11b2ac041a24438dbadf844c68896ba4688f71efd0b87091186e1163ae23806451c3348c3c4780261c292a2ecc08201b47ed59c738ff9c49d27bf273831b4eb060a356fab2eedd572db94f06568945c3631a81a557138ee67f1de03c941790dd9bda34586fd4064bd3ea6c200e5cd7a3b0572c6593e2e15dcb71d46625b53cda341ba21111875cea20825f2d14f8a735", 0x11bb}, {0x0}, {&(0x7f00000076c0)="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", 0xff8}, {0x0}], 0x6, &(0x7f00000019c0)=ANY=[@ANYBLOB="7000008200000000ff000000030000005e629231efadf29b3a3f962b5ad88866acd81b68d4ecfaa5e8518be7cb7ba8e58804d1d815bee2121e015a4110333d3e4caa69ff8eeb1a22d56135e9089c17f6dc0eb136532060991a07d12b1b9be68b72fbd605ebe6124c831f000000000000"], 0x70}}], 0x3, 0xc0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="050000000000000000000000d139a82c7dd18854cd6e3e5c0af7afad033b56dd8f3fc0aaeebbf10840c81507f43957782b528000e1affa2445d7faea26d71ca82f5a00a5f54f1ed44884950b4a44ee7511798c6d253d7c9111085f1e3179a4ffe807bce42bb9654feb69e4d68a2fb5e0af1581388d6b6f5cfdbb83fa67fff3f90e85945320ba05ed0f935797b58b23e614c1aac77e31ddae35a83ac801c6f76cdd32096e3e658ca193ecc46802ddef8d1fa2f160f6bd63826f8080", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001740)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r10, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r11], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f00000001c0), 0x0}, 0x20) 782.565035ms ago: executing program 0 (id=18796): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000003780)=[{{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001740)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001780)='\"', 0x1}], 0x1}}, {{&(0x7f0000002500)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000003580)}}], 0x3, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r1, 0xd}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000600000000000000", @ANYRES32, @ANYBLOB="0004000000000000000000000000000000000000b28bf7e65e0015236eb9522170590a6e4ed99af3553c6b3375e4336d3f66a45e98b8e5e353823ae210c047f5d214fa69ce56dae253cb181ee9925dd388118a9b89b92771e1268d8aaf647321cddcd23091c129d907bcd909314ac6cdda84b83981fc3bafbe75f301d322e78f513817aae95d973068136a448715d4d1f86736d870b710b1a0903a2e16b080d5e9c0d949b28294fb30bde7d6d5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000200"/28], 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400c89c) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 782.329543ms ago: executing program 3 (id=18797): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400044, r1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, &(0x7f0000000180), r3, 0x0, 0x2000000000004, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 543.756636ms ago: executing program 3 (id=18798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readv(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r1, &(0x7f0000001a40)={&(0x7f0000000200)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000001900)=[{&(0x7f0000000240)="e837", 0x2}], 0x1}, 0x20000081) listen(r1, 0x7) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) 196.186871ms ago: executing program 0 (id=18799): socket(0x2a, 0x6, 0xde97) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0ff, 0x800000}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000183600000500000000000000000000009d052000fcffffff9d720800010000000d64f4ff100000004d77c0ff000000009500"/72], &(0x7f0000000000)='syzkaller\x00', 0xa, 0xff1, &(0x7f0000002e00)=""/4081, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r12, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r11, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 172.280393ms ago: executing program 1 (id=18800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x64, 0x11, 0xff, @local, @local, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "54e90dade0f83f43817a33a14e885678a5f38ab436a174d6f2369fc532f6c82b", "fc7dfb6e5293418dd950af36edd6dc1c", {"9cf20b4958f15cd0a3eddaf23b2e0eaf", "6272f64f06756f4bee7a8933b1524843"}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x25}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8810) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r6, @ANYBLOB="24005a802000018014000300000000000000000000000d000100000004000200040001"], 0x40}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r5, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0xe}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004041}, 0x1) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x1200, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x50000000) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r10, 0x0, 0x4008004) 0s ago: executing program 1 (id=18801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000180)=[{r4}, {r1, 0x4}, {r3, 0x1c}], 0x3, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)={0x4}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000804}, 0x4000080) kernel console output (not intermixed with test programs): t [1, 0] type 2 family 0 port 6081 - 0 [ 1394.442128][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.478993][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.589746][T29540] team0: Port device xfrm0 removed [ 1394.674346][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.698322][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.602835][T29568] syzkaller0: entered allmulticast mode [ 1395.807897][T29618] netlink: 7 bytes leftover after parsing attributes in process `syz.0.17742'. [ 1395.977778][T29630] sctp: [Deprecated]: syz.0.17744 (pid 29630) Use of int in max_burst socket option. [ 1395.977778][T29630] Use struct sctp_assoc_value instead [ 1396.007556][T29630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17744'. [ 1396.086063][T29643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17745'. [ 1396.157132][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17745'. [ 1396.170841][T29643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.287348][T29658] block nbd0: must specify backend [ 1396.423648][T29654] : renamed from veth0_to_bond [ 1396.452648][T29670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17751'. [ 1396.501607][T29670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17751'. [ 1396.525600][ T1165] net_ratelimit: 24 callbacks suppressed [ 1396.525620][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1396.676685][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1396.719927][T29681] netlink: 'syz.4.17754': attribute type 1 has an invalid length. [ 1396.835113][T29681] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1396.849926][T12193] bond8: (slave gretap0): failed to get link speed/duplex [ 1396.889268][T29688] macvlan1: entered allmulticast mode [ 1397.004990][T12193] bond8: (slave gretap0): failed to get link speed/duplex [ 1397.192758][T29700] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1397.222978][T17402] bond8: (slave gretap0): failed to get link speed/duplex [ 1397.234087][T29709] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17760'. [ 1397.367646][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1397.495758][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1397.625176][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1397.674395][T27605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1397.681663][T27605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1397.688915][T27605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1397.696515][T27605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1397.703964][T27605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1397.850190][T12193] bond8: (slave gretap0): failed to get link speed/duplex [ 1397.901703][T29733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17765'. [ 1397.951048][T29733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17765'. [ 1398.404446][T29721] xfrm0 speed is unknown, defaulting to 1000 [ 1398.784109][T29776] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17772'. [ 1398.845721][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1398.934291][T29721] lo speed is unknown, defaulting to 1000 [ 1399.486070][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1399.493908][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1399.725666][T27605] Bluetooth: hci3: command tx timeout [ 1399.872325][T29819] tipc: Started in network mode [ 1399.905230][T29819] tipc: Node identity e0000001, cluster identity 4711 [ 1399.962726][T29819] tipc: Enabling of bearer rejected, failed to enable media [ 1399.987153][T29721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.994349][T29721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.001655][T29721] bridge_slave_0: entered allmulticast mode [ 1400.008823][T29721] bridge_slave_0: entered promiscuous mode [ 1400.045353][T29721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.053807][T29721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.061164][T29721] bridge_slave_1: entered allmulticast mode [ 1400.106991][T29721] bridge_slave_1: entered promiscuous mode [ 1400.125007][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1400.126853][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1400.134352][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1400.191038][T29721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.210238][T29721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.315511][T29721] team0: Port device team_slave_0 added [ 1400.330835][T29721] team0: Port device team_slave_1 added [ 1400.409538][T29721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.425344][T29721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.454294][T29721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.470608][T29721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.481146][T29721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.522883][T29721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.680306][T29721] hsr_slave_0: entered promiscuous mode [ 1400.696625][T29721] hsr_slave_1: entered promiscuous mode [ 1400.722990][T29721] debugfs: 'hsr0' already exists in 'hsr' [ 1400.738109][T29721] Cannot create hsr debugfs directory [ 1400.799583][T29860] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1400.822100][T29860] bond1 (unregistering): Released all slaves [ 1400.975535][T29869] tipc: Enabling of bearer rejected, failed to enable media [ 1401.014251][T29873] __nla_validate_parse: 3 callbacks suppressed [ 1401.014274][T29873] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17794'. [ 1401.033689][T29874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17793'. [ 1401.073971][T29721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.143483][T29879] bridge6: port 1(dummy0) entered blocking state [ 1401.143713][T29876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17795'. [ 1401.164052][T29876] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1401.167310][T29879] bridge6: port 1(dummy0) entered disabled state [ 1401.183704][T29879] dummy0: entered allmulticast mode [ 1401.189444][T29876] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1401.199680][T29874] netlink: 'syz.1.17793': attribute type 4 has an invalid length. [ 1401.208309][T29876] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1401.219105][T29879] dummy0: entered promiscuous mode [ 1401.237314][T29878] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17797'. [ 1401.263170][T29721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.284711][T29874] netlink: 'syz.1.17793': attribute type 10 has an invalid length. [ 1401.292713][T29874] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17793'. [ 1401.303303][T29874] bridge6: port 1(dummy0) entered blocking state [ 1401.309743][T29874] bridge6: port 1(dummy0) entered forwarding state [ 1401.329774][T29874] dummy0: left allmulticast mode [ 1401.334971][T29874] bridge6: port 1(dummy0) entered disabled state [ 1401.428601][T29721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.522949][T29721] bridge0: port 1(vlan2) entered disabled state [ 1401.540025][T29721] vlan2 (unregistering): left allmulticast mode [ 1401.546954][T29721] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1401.555555][T29721] vlan2 (unregistering): left promiscuous mode [ 1401.567618][T29721] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1401.576141][T29721] bridge0: port 1(vlan2) entered disabled state [ 1401.587995][T29721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.602341][T29891] syzkaller0: entered promiscuous mode [ 1401.607863][T29891] syzkaller0: entered allmulticast mode [ 1401.634799][T17402] net_ratelimit: 18 callbacks suppressed [ 1401.634820][T17402] bond8: (slave gretap0): failed to get link speed/duplex [ 1401.810882][T29721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1401.820308][T29721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1401.828272][T29721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1401.837791][T29721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1401.845769][T29721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1401.855273][T29721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1401.869146][T27605] Bluetooth: hci3: command tx timeout [ 1401.879832][T29721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1401.907688][T29721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1402.179741][T29721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.205616][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1402.233217][T29721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.259499][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.266677][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.337465][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1402.344686][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.468205][T29941] tipc: Enabling of bearer rejected, failed to enable media [ 1402.512802][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1402.547387][T29945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17806'. [ 1402.645056][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1402.684913][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1402.693544][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1402.755103][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1402.788762][T15723] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1402.846581][T29959] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17807'. [ 1402.918382][T29721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.935085][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1403.041738][T29721] veth0_vlan: entered promiscuous mode [ 1403.075985][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1403.084440][T29721] veth1_vlan: entered promiscuous mode [ 1403.176209][T29721] veth0_macvtap: entered promiscuous mode [ 1403.189368][T29980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17818'. [ 1403.201106][T29721] veth1_macvtap: entered promiscuous mode [ 1403.252556][T29721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.327171][T29721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.355065][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1403.415149][T12215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.452977][T12215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.479097][T12215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.543002][T12215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.590261][ T9717] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1403.620093][T30001] netlink: 68 bytes leftover after parsing attributes in process `syz.0.17823'. [ 1403.866394][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1403.887153][T27605] Bluetooth: hci3: command tx timeout [ 1403.917668][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.927916][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.029539][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.064054][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.079477][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1404.497974][T30044] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17836'. [ 1404.610126][ T9717] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 1404.610157][ T9717] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1404.656385][ T9717] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1404.742006][T30052] netlink: 'syz.1.17842': attribute type 6 has an invalid length. [ 1404.865915][T15723] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1405.212783][T30078] pimreg: entered allmulticast mode [ 1405.224503][T30078] pimreg: left allmulticast mode [ 1405.582969][T30098] ip6gre1: entered promiscuous mode [ 1405.603661][T30098] ip6gre1: entered allmulticast mode [ 1405.965809][T27605] Bluetooth: hci3: command tx timeout [ 1406.725037][T17412] net_ratelimit: 17 callbacks suppressed [ 1406.725057][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1406.833310][T30175] __nla_validate_parse: 1 callbacks suppressed [ 1406.833330][T30175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17871'. [ 1406.852976][T30170] macsec1: entered promiscuous mode [ 1406.879684][T30170] bridge0: entered promiscuous mode [ 1406.935302][ T9717] bond8: (slave gretap0): failed to get link speed/duplex [ 1406.977858][T30182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17873'. [ 1407.030409][T30184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17873'. [ 1407.071142][T30183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17873'. [ 1407.159687][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1407.283399][ T9717] bond8: (slave gretap0): failed to get link speed/duplex [ 1407.405319][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1407.490082][T30199] netlink: 148 bytes leftover after parsing attributes in process `syz.2.17877'. [ 1407.579646][T30206] netlink: 'syz.0.17879': attribute type 1 has an invalid length. [ 1407.657797][T30206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1407.723630][ T36] bond8: (slave gretap0): link status up again after 0 ms [ 1407.783083][T30208] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 1407.809429][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1407.819283][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1407.830912][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1407.833525][ C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1407.839112][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1407.858023][T17412] bond8: (slave gretap0): link status up again after 0 ms [ 1407.865893][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1407.901432][T30222] FAULT_INJECTION: forcing a failure. [ 1407.901432][T30222] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.914233][T30222] CPU: 0 UID: 0 PID: 30222 Comm: syz.0.17882 Not tainted syzkaller #0 PREEMPT(full) [ 1407.914261][T30222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1407.914273][T30222] Call Trace: [ 1407.914282][T30222] [ 1407.914290][T30222] dump_stack_lvl+0xe8/0x150 [ 1407.914318][T30222] should_fail_ex+0x40c/0x560 [ 1407.914344][T30222] should_failslab+0xa8/0x100 [ 1407.914376][T30222] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1407.914403][T30222] ? rcu_is_watching+0x15/0xb0 [ 1407.914426][T30222] ? __alloc_skb+0x1d7/0x7a0 [ 1407.914451][T30222] ? trace_irq_enable+0x3b/0x140 [ 1407.914481][T30222] __alloc_skb+0x1d7/0x7a0 [ 1407.914510][T30222] netlink_sendmsg+0x5d4/0xb40 [ 1407.914548][T30222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.914581][T30222] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1407.914602][T30222] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1407.914627][T30222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1407.914658][T30222] ____sys_sendmsg+0x9b9/0xa20 [ 1407.914691][T30222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1407.914721][T30222] ? lock_release+0x4b/0x3c0 [ 1407.914764][T30222] ? import_iovec+0x73/0xa0 [ 1407.914791][T30222] ___sys_sendmsg+0x2a5/0x360 [ 1407.914817][T30222] ? rcu_is_watching+0x15/0xb0 [ 1407.914836][T30222] ? get_pid_task+0x20/0x1f0 [ 1407.914856][T30222] ? __pfx____sys_sendmsg+0x10/0x10 [ 1407.914897][T30222] ? rcu_is_watching+0x15/0xb0 [ 1407.914932][T30222] ? __fget_files+0x2a/0x420 [ 1407.914954][T30222] ? __fget_files+0x3a2/0x420 [ 1407.914982][T30222] __x64_sys_sendmsg+0x1b1/0x290 [ 1407.915012][T30222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1407.915049][T30222] ? rcu_is_watching+0x15/0xb0 [ 1407.915071][T30222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.915092][T30222] do_syscall_64+0x174/0x580 [ 1407.915118][T30222] ? trace_irq_disable+0x3b/0x140 [ 1407.915144][T30222] ? clear_bhb_loop+0x40/0x90 [ 1407.915165][T30222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.915184][T30222] RIP: 0033:0x7f1e0279ce59 [ 1407.915202][T30222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1407.915219][T30222] RSP: 002b:00007f1e009f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1407.915242][T30222] RAX: ffffffffffffffda RBX: 00007f1e02a15fa0 RCX: 00007f1e0279ce59 [ 1407.915257][T30222] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1407.915270][T30222] RBP: 00007f1e009f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1407.915282][T30222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1407.915294][T30222] R13: 00007f1e02a16038 R14: 00007f1e02a15fa0 R15: 00007ffd460b8298 [ 1407.915318][T30222] [ 1408.247569][T30208] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17880'. [ 1408.338184][T30231] netlink: zone id is out of range [ 1408.339171][T30229] sctp: [Deprecated]: syz.3.17883 (pid 30229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1408.339171][T30229] Use struct sctp_sack_info instead [ 1408.447065][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1408.615352][T30238] netlink: 'syz.3.17885': attribute type 17 has an invalid length. [ 1408.652874][T30238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17885'. [ 1408.719108][T30238] bond0: option all_slaves_active: invalid value (8) [ 1409.085969][ C0] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1409.280112][T30269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17896'. [ 1409.569263][T30278] FAULT_INJECTION: forcing a failure. [ 1409.569263][T30278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.639679][T30278] CPU: 1 UID: 0 PID: 30278 Comm: syz.3.17899 Not tainted syzkaller #0 PREEMPT(full) [ 1409.639710][T30278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1409.639724][T30278] Call Trace: [ 1409.639732][T30278] [ 1409.639742][T30278] dump_stack_lvl+0xe8/0x150 [ 1409.639769][T30278] should_fail_ex+0x40c/0x560 [ 1409.639801][T30278] _copy_to_user+0x31/0xb0 [ 1409.639830][T30278] simple_read_from_buffer+0xe1/0x170 [ 1409.639858][T30278] proc_fail_nth_read+0x1bb/0x230 [ 1409.639887][T30278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1409.639916][T30278] ? rw_verify_area+0x24a/0x4c0 [ 1409.639943][T30278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1409.639968][T30278] vfs_read+0x213/0xa80 [ 1409.639998][T30278] ? __pfx___mutex_lock+0x10/0x10 [ 1409.640026][T30278] ? __pfx_vfs_read+0x10/0x10 [ 1409.640057][T30278] ? __fget_files+0x3a2/0x420 [ 1409.640080][T30278] ? __fget_files+0x2a/0x420 [ 1409.640107][T30278] ksys_read+0x150/0x270 [ 1409.640135][T30278] ? __pfx_ksys_read+0x10/0x10 [ 1409.640165][T30278] ? rcu_is_watching+0x15/0xb0 [ 1409.640188][T30278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.640210][T30278] do_syscall_64+0x174/0x580 [ 1409.640236][T30278] ? trace_irq_disable+0x3b/0x140 [ 1409.640263][T30278] ? clear_bhb_loop+0x40/0x90 [ 1409.640286][T30278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.640306][T30278] RIP: 0033:0x7fe9f355d68e [ 1409.640325][T30278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1409.640342][T30278] RSP: 002b:00007fe9f44ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1409.640365][T30278] RAX: ffffffffffffffda RBX: 00007fe9f44ec6c0 RCX: 00007fe9f355d68e [ 1409.640381][T30278] RDX: 000000000000000f RSI: 00007fe9f44ec0a0 RDI: 0000000000000004 [ 1409.640394][T30278] RBP: 00007fe9f44ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.640407][T30278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.640419][T30278] R13: 00007fe9f3816038 R14: 00007fe9f3815fa0 R15: 00007ffda03bcee8 [ 1409.640444][T30278] [ 1409.850980][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1409.858953][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1410.166310][T30289] syzkaller1: entered promiscuous mode [ 1410.194934][T30289] syzkaller1: entered allmulticast mode [ 1410.772546][T30310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17910'. [ 1410.808831][T30315] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1410.994084][T30325] mac80211_hwsim hwsim178 syzkaller0: entered promiscuous mode [ 1411.041234][T30325] mac80211_hwsim hwsim178 syzkaller0: entered allmulticast mode [ 1411.056045][T30326] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17916'. [ 1411.645632][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1411.789370][T30366] macsec2: entered promiscuous mode [ 1411.817128][T30366] bridge0: entered promiscuous mode [ 1411.838792][T30365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1411.861611][T30365] batadv_slave_1: entered promiscuous mode [ 1412.042592][T30367] tipc: Enabled bearer , priority 0 [ 1412.066084][ T9717] net_ratelimit: 422 callbacks suppressed [ 1412.066106][ T9717] bond8: (slave gretap0): failed to get link speed/duplex [ 1412.136675][T30377] batman_adv: batadv0: Adding interface: dummy0 [ 1412.142981][T30377] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1412.168207][T30377] batman_adv: batadv0: Interface activated: dummy0 [ 1412.225145][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1412.345138][ T9717] bond8: (slave gretap0): failed to get link speed/duplex [ 1412.402057][T30383] __nla_validate_parse: 3 callbacks suppressed [ 1412.402077][T30383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17934'. [ 1412.505945][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1412.539394][T30354] tipc: Disabling bearer [ 1412.625144][ T9717] bond8: (slave gretap0): failed to get link speed/duplex [ 1412.761261][ T9717] bond8: (slave gretap0): failed to get link speed/duplex [ 1412.885194][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1413.194930][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1413.222982][T30436] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1413.230779][T30436] IPv6: NLM_F_CREATE should be set when creating new route [ 1413.238544][T30436] IPv6: NLM_F_CREATE should be set when creating new route [ 1413.315546][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1413.346517][T30445] tipc: Enabled bearer , priority 0 [ 1413.456835][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1413.572464][T30460] FAULT_INJECTION: forcing a failure. [ 1413.572464][T30460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1413.643523][T30460] CPU: 1 UID: 0 PID: 30460 Comm: syz.0.17953 Not tainted syzkaller #0 PREEMPT(full) [ 1413.643570][T30460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1413.643585][T30460] Call Trace: [ 1413.643594][T30460] [ 1413.643602][T30460] dump_stack_lvl+0xe8/0x150 [ 1413.643632][T30460] should_fail_ex+0x40c/0x560 [ 1413.643658][T30460] _copy_from_user+0x2d/0xb0 [ 1413.643686][T30460] __sys_bpf+0x229/0x950 [ 1413.643715][T30460] ? __pfx___sys_bpf+0x10/0x10 [ 1413.643752][T30460] ? ksys_write+0x242/0x270 [ 1413.643781][T30460] ? __pfx_ksys_write+0x10/0x10 [ 1413.643810][T30460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.643833][T30460] __x64_sys_bpf+0x7c/0x90 [ 1413.643858][T30460] do_syscall_64+0x174/0x580 [ 1413.643884][T30460] ? trace_irq_disable+0x3b/0x140 [ 1413.643922][T30460] ? clear_bhb_loop+0x40/0x90 [ 1413.643945][T30460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.643966][T30460] RIP: 0033:0x7f1e0279ce59 [ 1413.643985][T30460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1413.644002][T30460] RSP: 002b:00007f1e009f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1413.644025][T30460] RAX: ffffffffffffffda RBX: 00007f1e02a15fa0 RCX: 00007f1e0279ce59 [ 1413.644040][T30460] RDX: 000000000000001d RSI: 0000200000000340 RDI: 0000000000000000 [ 1413.644053][T30460] RBP: 00007f1e009f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.644066][T30460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.644079][T30460] R13: 00007f1e02a16038 R14: 00007f1e02a15fa0 R15: 00007ffd460b8298 [ 1413.644104][T30460] [ 1414.182397][T30487] bond10: option updelay: invalid value (18446744073709518847) [ 1414.202584][T30487] bond10: option updelay: allowed values 0 - 2147483647 [ 1414.240562][T30487] bond10 (unregistering): Released all slaves [ 1414.365072][T15723] tipc: Node number set to 2095319273 [ 1414.517729][T30503] netlink: 'syz.0.17965': attribute type 28 has an invalid length. [ 1414.535357][T30503] netlink: 'syz.0.17965': attribute type 3 has an invalid length. [ 1414.556444][T30503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.611838][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.631707][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.661600][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.711752][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.721802][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.738633][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.750213][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.763760][T30503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17965'. [ 1414.798024][T30503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.805613][T30503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.824780][T30503] batman_adv: batadv0: Interface deactivated: dummy0 [ 1414.916255][T30503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1414.930795][T30503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.122576][ T48] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.177774][ T48] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.202998][ T48] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.213016][ T48] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.308504][T30533] Cannot find add_set index 2 as target [ 1415.762090][T30558] syzkaller0: entered promiscuous mode [ 1415.786523][T30558] syzkaller0: entered allmulticast mode [ 1415.802546][T30560] syzkaller1: entered promiscuous mode [ 1415.816984][T30560] syzkaller1: entered allmulticast mode [ 1415.874227][T30558] tipc: Enabled bearer , priority 0 [ 1416.037451][T30554] tipc: Resetting bearer [ 1416.067002][T30554] tipc: Disabling bearer [ 1416.125009][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1416.865999][T30614] netlink: 'syz.3.18003': attribute type 1 has an invalid length. [ 1416.949993][T30614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1417.031317][T30617] bond1: (slave gretap0): Enslaving as a backup interface with an up link [ 1417.122254][T30622] xfrm0 speed is unknown, defaulting to 1000 [ 1417.155488][T17404] net_ratelimit: 23 callbacks suppressed [ 1417.155508][T17404] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1417.189947][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1417.456720][T30627] tipc: Started in network mode [ 1417.462049][T30627] tipc: Node identity e0000001, cluster identity 4711 [ 1417.491196][T30627] tipc: Enabling of bearer rejected, failed to enable media [ 1417.552782][T30622] lo speed is unknown, defaulting to 1000 [ 1417.567267][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1417.690190][T30633] sctp: [Deprecated]: syz.2.18008 (pid 30633) Use of int in max_burst socket option deprecated. [ 1417.690190][T30633] Use struct sctp_assoc_value instead [ 1417.805070][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1417.925075][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1418.072647][T30649] netlink: 'syz.2.18013': attribute type 11 has an invalid length. [ 1418.080797][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1418.185354][T17407] bond8: (slave gretap0): failed to get link speed/duplex [ 1418.294207][T30669] __nla_validate_parse: 150 callbacks suppressed [ 1418.294244][T30669] netlink: 44 bytes leftover after parsing attributes in process `syz.3.18017'. [ 1418.325568][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1418.421430][T30657] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18017'. [ 1418.551312][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1418.666538][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1419.059884][T30693] macsec3: entered promiscuous mode [ 1421.649706][T30685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1421.818152][T30768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18039'. [ 1421.861991][T30772] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18041'. [ 1421.956500][T30772] xt_CT: No such helper "snmp_trap" [ 1422.021856][T30778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.039375][T30783] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.18042'. [ 1422.183450][T30794] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18049'. [ 1422.195717][ T36] net_ratelimit: 27 callbacks suppressed [ 1422.195738][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1422.210206][T30794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1422.222997][T30794] netlink: 'syz.2.18049': attribute type 4 has an invalid length. [ 1422.325896][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1422.435101][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1422.530713][T30803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18051'. [ 1422.545061][T17407] bond8: (slave gretap0): failed to get link speed/duplex [ 1422.616352][T30805] batadv_slave_1: entered promiscuous mode [ 1422.665965][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1422.759767][T30817] FAULT_INJECTION: forcing a failure. [ 1422.759767][T30817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.774264][T30817] CPU: 1 UID: 0 PID: 30817 Comm: syz.0.18057 Not tainted syzkaller #0 PREEMPT(full) [ 1422.774294][T30817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1422.774307][T30817] Call Trace: [ 1422.774324][T30817] [ 1422.774333][T30817] dump_stack_lvl+0xe8/0x150 [ 1422.774363][T30817] should_fail_ex+0x40c/0x560 [ 1422.774391][T30817] _copy_from_iter+0x3b0/0x1660 [ 1422.774419][T30817] ? rcu_is_watching+0x15/0xb0 [ 1422.774446][T30817] ? __pfx__copy_from_iter+0x10/0x10 [ 1422.774471][T30817] ? __napi_alloc_frag_align+0x163/0x550 [ 1422.774498][T30817] ? rcu_is_watching+0x15/0xb0 [ 1422.774519][T30817] ? __napi_alloc_frag_align+0x163/0x550 [ 1422.774546][T30817] ? rcu_is_watching+0x15/0xb0 [ 1422.774565][T30817] ? __napi_alloc_frag_align+0x163/0x550 [ 1422.774592][T30817] ? lock_release+0x4b/0x3c0 [ 1422.774625][T30817] skb_copy_datagram_from_iter+0xe6/0x720 [ 1422.774648][T30817] ? __netdev_alloc_frag_align+0xda/0x130 [ 1422.774675][T30817] ? __netdev_alloc_frag_align+0xda/0x130 [ 1422.774701][T30817] ? __local_bh_enable_ip+0xd0/0x130 [ 1422.774731][T30817] tun_get_user+0xc71/0x4350 [ 1422.774771][T30817] ? __pfx_tun_get_user+0x10/0x10 [ 1422.774797][T30817] ? aa_file_perm+0x18b/0x15f0 [ 1422.774818][T30817] ? rcu_is_watching+0x15/0xb0 [ 1422.774841][T30817] ? rcu_is_watching+0x15/0xb0 [ 1422.774862][T30817] ? lock_release+0x4b/0x3c0 [ 1422.774892][T30817] ? aa_file_perm+0x18b/0x15f0 [ 1422.774916][T30817] ? ref_tracker_alloc+0x341/0x4b0 [ 1422.774943][T30817] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1422.774968][T30817] ? tun_get+0x1c/0x2f0 [ 1422.774992][T30817] ? tun_get+0x1c/0x2f0 [ 1422.775016][T30817] ? rcu_is_watching+0x15/0xb0 [ 1422.775036][T30817] ? tun_get+0x1c/0x2f0 [ 1422.775060][T30817] ? lock_release+0x4b/0x3c0 [ 1422.775089][T30817] ? __pfx_aa_file_perm+0x10/0x10 [ 1422.775113][T30817] ? tun_get+0x1c/0x2f0 [ 1422.775155][T30817] tun_chr_write_iter+0x113/0x200 [ 1422.775183][T30817] do_iter_readv_writev+0x612/0x8c0 [ 1422.775215][T30817] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1422.775249][T30817] ? bpf_lsm_file_permission+0x9/0x20 [ 1422.775276][T30817] ? security_file_permission+0x75/0x260 [ 1422.775305][T30817] ? rw_verify_area+0x203/0x4c0 [ 1422.775342][T30817] vfs_writev+0x343/0x990 [ 1422.775368][T30817] ? __pfx_vfs_writev+0x10/0x10 [ 1422.775396][T30817] ? lock_release+0x4b/0x3c0 [ 1422.775430][T30817] ? __fget_files+0x3a2/0x420 [ 1422.775454][T30817] ? __fget_files+0x2a/0x420 [ 1422.775481][T30817] do_writev+0x154/0x2e0 [ 1422.775504][T30817] ? __pfx_do_writev+0x10/0x10 [ 1422.775527][T30817] ? rcu_is_watching+0x15/0xb0 [ 1422.775548][T30817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.775570][T30817] do_syscall_64+0x174/0x580 [ 1422.775597][T30817] ? trace_irq_disable+0x3b/0x140 [ 1422.775625][T30817] ? clear_bhb_loop+0x40/0x90 [ 1422.775649][T30817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.775669][T30817] RIP: 0033:0x7f1e0279ce59 [ 1422.775688][T30817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1422.775706][T30817] RSP: 002b:00007f1e009f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1422.775729][T30817] RAX: ffffffffffffffda RBX: 00007f1e02a15fa0 RCX: 00007f1e0279ce59 [ 1422.775745][T30817] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 1422.775759][T30817] RBP: 00007f1e009f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1422.775772][T30817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1422.775785][T30817] R13: 00007f1e02a16038 R14: 00007f1e02a15fa0 R15: 00007ffd460b8298 [ 1422.775812][T30817] [ 1423.188442][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18059'. [ 1423.197535][T30820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18059'. [ 1423.225175][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1423.378094][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1423.444281][T30833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1423.476530][T30837] syzkaller0: entered promiscuous mode [ 1423.511005][T30837] syzkaller0: entered allmulticast mode [ 1423.520599][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1423.563518][T30837] tipc: Enabled bearer , priority 0 [ 1423.599056][T30839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18066'. [ 1423.877272][T30834] tipc: Resetting bearer [ 1423.890200][T30834] tipc: Disabling bearer [ 1424.025343][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1424.145340][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1424.388783][T30876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1424.396126][T30876] IPv6: NLM_F_CREATE should be set when creating new route [ 1424.403401][T30876] IPv6: NLM_F_CREATE should be set when creating new route [ 1424.416936][T30870] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18077'. [ 1424.528168][T30887] netlink: 'syz.1.18082': attribute type 1 has an invalid length. [ 1424.536547][T30887] netlink: 'syz.1.18082': attribute type 2 has an invalid length. [ 1424.544537][T30887] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18082'. [ 1424.787427][T30896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18086'. [ 1424.810845][T30896] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18086'. [ 1424.841990][T30898] xfrm0 speed is unknown, defaulting to 1000 [ 1424.930150][T30907] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1424.937483][T30907] IPv6: NLM_F_CREATE should be set when creating new route [ 1424.944827][T30907] IPv6: NLM_F_CREATE should be set when creating new route [ 1425.320106][T30898] lo speed is unknown, defaulting to 1000 [ 1425.467115][T30931] netlink: 'syz.4.18097': attribute type 29 has an invalid length. [ 1425.510798][T30931] netlink: 'syz.4.18097': attribute type 29 has an invalid length. [ 1425.591593][T30944] netlink: 'syz.3.18102': attribute type 1 has an invalid length. [ 1425.684298][T30953] Cannot find del_set index 2 as target [ 1425.698237][T30957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1425.705572][T30957] IPv6: NLM_F_CREATE should be set when creating new route [ 1425.712851][T30957] IPv6: NLM_F_CREATE should be set when creating new route [ 1425.847335][T30961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18107'. [ 1426.067138][T30976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18110'. [ 1426.101941][T30976] netlink: 7 bytes leftover after parsing attributes in process `syz.3.18110'. [ 1426.393058][T30986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18113'. [ 1426.666686][T31010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18120'. [ 1427.081372][T31031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1427.215077][T17412] net_ratelimit: 23 callbacks suppressed [ 1427.215113][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1427.375141][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1427.505750][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1427.635096][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1427.736932][T31068] bond6 (unregistering): Released all slaves [ 1427.779434][T31075] netlink: 'syz.4.18142': attribute type 39 has an invalid length. [ 1427.835791][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1427.955537][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1428.076773][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1428.216243][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1428.348202][T17407] bond8: (slave gretap0): failed to get link speed/duplex [ 1428.359128][T31093] netlink: 'syz.4.18148': attribute type 89 has an invalid length. [ 1428.388296][T31093] netlink: 'syz.4.18148': attribute type 266 has an invalid length. [ 1428.491452][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1428.752293][T31101] __nla_validate_parse: 7 callbacks suppressed [ 1428.752311][T31101] netlink: 68 bytes leftover after parsing attributes in process `syz.1.18151'. [ 1428.924516][T31100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18152'. [ 1428.965019][T31115] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18157'. [ 1429.029872][T31100] RDS: rds_bind could not find a transport for ::600:0:8000:0:20:0, load rds_tcp or rds_rdma? [ 1429.305423][T31134] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18162'. [ 1429.316401][T31126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1429.325410][T31126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1429.342551][T31126] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1429.390746][T31126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1429.402933][T31126] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1429.811854][T31160] netlink: 67 bytes leftover after parsing attributes in process `syz.0.18169'. [ 1430.206411][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1430.909419][T31214] sch_tbf: peakrate 2 is lower than or equals to rate 8 ! [ 1431.374560][T31241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1431.485305][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1431.532352][T31250] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 1431.548281][T31250] syzkaller0: entered promiscuous mode [ 1431.553933][T31250] syzkaller0: entered allmulticast mode [ 1431.646635][T31257] netlink: 'syz.4.18206': attribute type 11 has an invalid length. [ 1431.764526][T31261] nbd: must specify a size in bytes for the device [ 1432.125256][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1432.305444][T17412] net_ratelimit: 31 callbacks suppressed [ 1432.305479][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1432.431114][T31289] netlink: 'syz.0.18218': attribute type 28 has an invalid length. [ 1433.130560][T31291] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1433.140159][T31291] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1433.406276][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1433.415748][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1434.045310][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1434.685377][ C1] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured! [ 1436.454635][T15723] IPVS: starting estimator thread 0... [ 1436.555808][T31313] IPVS: using max 36 ests per chain, 86400 per kthread [ 1436.826667][T31322] vlan5: entered allmulticast mode [ 1436.835893][T31322] bond0: entered allmulticast mode [ 1436.841771][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1436.975958][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1437.124916][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1437.266986][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1437.386041][T31356] __nla_validate_parse: 9 callbacks suppressed [ 1437.386064][T31356] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18236'. [ 1437.419310][T17402] bond8: (slave gretap0): failed to get link speed/duplex [ 1437.565773][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1437.695188][T17402] bond8: (slave gretap0): failed to get link speed/duplex [ 1437.759801][T31368] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18240'. [ 1437.836608][T17402] bond8: (slave gretap0): failed to get link speed/duplex [ 1438.056925][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1438.198133][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1438.226128][T31393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18245'. [ 1438.337928][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1438.428790][T31407] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18247'. [ 1438.448025][T31408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18250'. [ 1438.474863][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1438.530586][T31408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18250'. [ 1438.608592][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1438.735428][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1439.165055][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1439.432862][T31449] netlink: 72 bytes leftover after parsing attributes in process `syz.0.18261'. [ 1440.314577][T31483] netlink: 'syz.2.18268': attribute type 214 has an invalid length. [ 1440.587368][T31497] netlink: 'syz.4.18274': attribute type 10 has an invalid length. [ 1440.658591][T31464] tipc: Resetting bearer [ 1440.910119][T31490] tipc: Enabling of bearer rejected, failed to enable media [ 1440.930410][T31497] syz_tun: entered promiscuous mode [ 1440.987290][T17404] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.030470][T17404] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.077632][T17404] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.126712][T17404] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.182101][T17404] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.214977][T17404] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.229019][T17404] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.239651][T17404] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.486942][T31516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18280'. [ 1441.513993][T31522] netlink: 'syz.3.18284': attribute type 6 has an invalid length. [ 1441.590735][T31528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18285'. [ 1441.757755][T31536] syzkaller0: entered promiscuous mode [ 1441.776538][T31536] syzkaller0: entered allmulticast mode [ 1441.815618][T31536] tipc: Enabled bearer , priority 0 [ 1441.833511][T31534] tipc: Resetting bearer [ 1441.857633][T31534] tipc: Disabling bearer [ 1442.042489][T31543] batman_adv: batadv0: Removing interface: dummy0 [ 1442.087114][T31543] bridge_slave_0: left allmulticast mode [ 1442.118784][T31543] bridge_slave_0: left promiscuous mode [ 1442.143551][T31543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.179542][T31543] bridge_slave_1: left allmulticast mode [ 1442.196763][T31543] bridge_slave_1: left promiscuous mode [ 1442.202544][T31543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.226076][T31543] bond0: (slave bond_slave_0): Releasing backup interface [ 1442.249840][T31543] bond0: (slave bond_slave_1): Releasing backup interface [ 1442.259655][T31543] team0: Port device team_slave_0 removed [ 1442.277363][T31543] team0: Port device team_slave_1 removed [ 1442.283588][T31543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.304120][T31543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.365190][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 1442.618416][ T48] net_ratelimit: 18 callbacks suppressed [ 1442.618439][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1442.633097][T31549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18289'. [ 1442.642227][T31549] nbd: must specify a size in bytes for the device [ 1442.765572][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1442.895330][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1443.007675][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1443.074056][T31566] erspan0: entered promiscuous mode [ 1443.157376][T31566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.183920][T31566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1443.212438][T31566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1443.351067][T31566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1443.364187][T31576] netlink: 'syz.3.18296': attribute type 1 has an invalid length. [ 1443.374579][T31576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1443.386172][T31566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1443.407031][T31566] veth1_vlan: left promiscuous mode [ 1443.413818][T31566] veth0_vlan: left promiscuous mode [ 1443.420586][T31566] veth0_vlan: entered promiscuous mode [ 1443.429787][T31566] veth1_vlan: entered promiscuous mode [ 1443.441292][T31566] veth1_macvtap: left promiscuous mode [ 1443.449627][T31566] veth0_macvtap: left promiscuous mode [ 1443.456950][T31566] veth0_macvtap: entered promiscuous mode [ 1443.464231][T31566] veth1_macvtap: entered promiscuous mode [ 1443.479883][T31566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1443.489013][T31566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1443.498519][T31566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1443.510542][T31566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1443.527203][T31566] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1443.605197][T31572] mac80211_hwsim hwsim203 wlan0: entered promiscuous mode [ 1443.623010][T31572] mac80211_hwsim hwsim203 wlan0: entered allmulticast mode [ 1443.643127][T17404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1443.654337][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1443.690542][T17404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.085694][T31589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18301'. [ 1444.254256][T17402] team0: Port device bridge0 removed [ 1444.280213][T17402] team0: Port device bridge1 removed [ 1444.307998][T17402] team0: Port device bridge2 removed [ 1444.331193][T17402] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 1444.346067][T17402] bridge5 (unregistering): left promiscuous mode [ 1444.394129][T17402] team0: Port device bridge7 removed [ 1444.431447][T17402] bond1 (unregistering): Released all slaves [ 1444.473425][T17402] bond2 (unregistering): Released all slaves [ 1444.511740][T17402] bond3 (unregistering): Released all slaves [ 1444.547599][T17402] bond4 (unregistering): Released all slaves [ 1444.584016][T17402] bond5 (unregistering): Released all slaves [ 1444.626287][T17402] bond6 (unregistering): Released all slaves [ 1444.666173][T17402] bond7 (unregistering): Released all slaves [ 1444.696176][T17402] bond0 (unregistering): Released all slaves [ 1444.724091][T17404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.724176][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1444.750275][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1444.757948][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1444.765850][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1444.781595][ T1165] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1444.789957][T17404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.812059][ T1165] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1444.821491][ T1165] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1444.829923][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1444.841836][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1444.853080][T17402] : left promiscuous mode [ 1444.999171][T31592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1445.049954][T17402] hmó3)ó: left promiscuous mode [ 1445.075118][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1445.141542][T17402] tipc: Disabling bearer [ 1445.163890][T17402] tipc: Left network mode [ 1445.197054][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1445.332166][T31624] syzkaller0: entered promiscuous mode [ 1445.350189][T31624] syzkaller0: entered allmulticast mode [ 1445.382857][T31627] syzkaller0: entered promiscuous mode [ 1445.408243][T31627] syzkaller0: entered allmulticast mode [ 1445.419951][T31624] tipc: Enabled bearer , priority 0 [ 1445.496920][T31623] tipc: Resetting bearer [ 1445.516316][T31623] tipc: Disabling bearer [ 1445.546666][T31609] xfrm0 speed is unknown, defaulting to 1000 [ 1445.574851][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1445.715257][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1445.969426][T31609] lo speed is unknown, defaulting to 1000 [ 1445.986341][T31646] xfrm0 speed is unknown, defaulting to 1000 [ 1446.082592][T31650] netlink: 92 bytes leftover after parsing attributes in process `syz.1.18319'. [ 1446.152466][T17402] hsr_slave_0: left promiscuous mode [ 1446.221683][T17402] hsr_slave_1: left promiscuous mode [ 1446.658948][T31646] lo speed is unknown, defaulting to 1000 [ 1446.764059][T31658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1446.837808][T31658] veth1_vlan: left promiscuous mode [ 1446.843987][T31658] veth0_vlan: left promiscuous mode [ 1446.850816][T31658] veth0_vlan: entered promiscuous mode [ 1446.860064][T31658] veth1_vlan: entered promiscuous mode [ 1446.869253][T31658] veth1_vlan: entered allmulticast mode [ 1446.878934][T31658] veth0_macvtap: left promiscuous mode [ 1446.886034][T31658] veth0_macvtap: entered promiscuous mode [ 1446.900533][T31658] bridge0: port 2(vlan2) entered blocking state [ 1446.906931][T31658] bridge0: port 2(vlan2) entered forwarding state [ 1446.918301][T31658] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1446.927556][T31658] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1446.938385][T31658] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1446.946645][T31658] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1446.963339][T31658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1446.971549][T31658] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1447.024153][T27605] Bluetooth: hci0: command tx timeout [ 1447.072622][ T1165] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.082386][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.091855][ T1165] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.102329][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.112099][T31677] syzkaller0: entered promiscuous mode [ 1447.117954][T31677] syzkaller0: entered allmulticast mode [ 1447.141853][T31667] tipc: Enabled bearer , priority 0 [ 1447.149280][ T1165] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.158491][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.261725][ T1165] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.271437][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1447.305402][T31666] tipc: Resetting bearer [ 1447.316305][T31666] tipc: Disabling bearer [ 1447.324916][T31681] netlink: 68 bytes leftover after parsing attributes in process `syz.1.18325'. [ 1447.378911][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1447.387669][ T36] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1447.398087][ T36] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1447.405832][ T36] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1447.414564][ T36] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1447.422277][ T36] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1447.427354][ T8479] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1447.633073][T31609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.640720][T31609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.649845][T31609] bridge_slave_0: entered allmulticast mode [ 1447.658168][T31609] bridge_slave_0: entered promiscuous mode [ 1447.686700][T31609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.711893][T31609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.720118][T31609] bridge_slave_1: entered allmulticast mode [ 1447.727590][T31609] bridge_slave_1: entered promiscuous mode [ 1447.776632][T12193] net_ratelimit: 5 callbacks suppressed [ 1447.776653][T12193] bond8: (slave gretap0): failed to get link speed/duplex [ 1447.851877][T17402] IPVS: stop unused estimator thread 0... [ 1447.891676][T31609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.952240][T31609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.974100][T12193] bond8: (slave gretap0): failed to get link speed/duplex [ 1448.162035][T31609] team0: Port device team_slave_0 added [ 1448.194435][T31609] team0: Port device team_slave_1 added [ 1448.241065][T31609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.250652][T31609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.279564][T31609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.295342][T31609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.302373][T31609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.329823][T31609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.380251][T31609] hsr_slave_0: entered promiscuous mode [ 1448.393816][T31609] hsr_slave_1: entered promiscuous mode [ 1448.407760][T31609] debugfs: 'hsr0' already exists in 'hsr' [ 1448.415126][T31609] Cannot create hsr debugfs directory [ 1448.423758][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1448.504325][T31723] batadv_slave_0: mtu less than device minimum [ 1448.536990][T31722] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18336'. [ 1448.564943][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1448.599287][T17402] team0: Port device netdevsim1 removed [ 1448.688883][T31726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18338'. [ 1448.945318][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1449.065064][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1449.084873][T27605] Bluetooth: hci0: command tx timeout [ 1449.754309][T17402] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1449.828309][T17402] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1449.899394][T17402] team0: Port device bridge1 removed [ 1449.942059][T17402] team0: Port device bridge2 removed [ 1449.957801][T17402] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1449.988433][T17402] bond0 (unregistering): Released all slaves [ 1450.037526][T17402] bond1 (unregistering): Released all slaves [ 1450.080183][T17402] bond2 (unregistering): Released all slaves [ 1450.122860][T31778] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18348'. [ 1450.149518][T17402] bond3 (unregistering): Released all slaves [ 1450.188047][T17402] bond4 (unregistering): Released all slaves [ 1450.226784][T17402] bond5 (unregistering): Released all slaves [ 1450.340719][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1450.400168][T17402] tipc: Disabling bearer [ 1450.425389][T17402] tipc: Disabling bearer [ 1450.455756][T17402] tipc: Left network mode [ 1450.514957][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1450.563741][ T8484] IPVS: starting estimator thread 0... [ 1450.657711][T31789] IPVS: using max 42 ests per chain, 100800 per kthread [ 1450.995196][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1451.085050][ C0] ip6_tnl_xmit_ctl: 12 callbacks suppressed [ 1451.085082][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1451.165701][T27605] Bluetooth: hci0: command tx timeout [ 1451.405130][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1451.697697][T17404] bond8: (slave gretap0): failed to get link speed/duplex [ 1451.719636][T31609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1451.738539][T31609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1451.771528][T31609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1451.791868][T31609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1451.800158][T31609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1451.829424][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1451.853103][T31609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1451.865822][T31838] netlink: 81 bytes leftover after parsing attributes in process `syz.3.18360'. [ 1451.914617][T31609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1451.969698][T31609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1452.129455][T31869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18365'. [ 1452.398439][T31609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.498401][T31609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.542408][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.549603][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.632842][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.640051][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.830831][T17402] hsr_slave_0: left promiscuous mode [ 1452.843087][T17402] hsr_slave_1: left promiscuous mode [ 1453.184227][T31908] netlink: 14 bytes leftover after parsing attributes in process `syz.4.18373'. [ 1453.222554][T31909] netlink: 'syz.1.18374': attribute type 1 has an invalid length. [ 1453.293587][T27605] Bluetooth: hci0: command tx timeout [ 1453.380512][T31918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18374'. [ 1453.611222][T12215] net_ratelimit: 6 callbacks suppressed [ 1453.611243][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1453.940642][T31937] openvswitch: netlink: nsh attr 0 has unexpected len 2 expected 0 [ 1453.949511][T31937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1454.098262][T31942] xfrm0 speed is unknown, defaulting to 1000 [ 1454.169795][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1454.331453][T31942] lo speed is unknown, defaulting to 1000 [ 1454.517970][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1454.554515][T31974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1454.648588][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1454.682490][T31609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1454.706299][T31983] Bluetooth: MGMT ver 1.23 [ 1454.717140][T17402] IPVS: stop unused estimator thread 0... [ 1454.834193][T31609] veth0_vlan: entered promiscuous mode [ 1454.867775][T31609] veth1_vlan: entered promiscuous mode [ 1454.896102][T17407] bond8: (slave gretap0): failed to get link speed/duplex [ 1454.977476][T31609] veth0_macvtap: entered promiscuous mode [ 1455.003771][ T5282] veth1_vlan: left promiscuous mode [ 1455.028594][T31609] veth1_macvtap: entered promiscuous mode [ 1455.107239][T31609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.115871][T17412] bond8: (slave gretap0): failed to get link speed/duplex [ 1455.151318][T31609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.182803][T12215] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.224267][T12215] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.239149][T32003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1455.257374][T12215] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.267774][T12215] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.364895][ T1165] bond8: (slave gretap0): failed to get link speed/duplex [ 1455.376942][T32008] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 1455.461131][T32013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18398'. [ 1455.488228][T32016] netlink: 100 bytes leftover after parsing attributes in process `syz.1.18399'. [ 1455.515886][T32016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18399'. [ 1455.524982][T32016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18399'. [ 1455.701472][T32024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18400'. [ 1455.739290][T12215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.759039][T12215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.835353][T17412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.853673][T17412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.871174][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1456.231133][T32039] syzkaller0: entered promiscuous mode [ 1456.262397][T32039] syzkaller0: entered allmulticast mode [ 1456.587246][T32064] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18410'. [ 1456.611707][T32064] ip6tnl4: entered allmulticast mode [ 1456.627927][T32064] netlink: 'syz.0.18410': attribute type 11 has an invalid length. [ 1456.672844][T32067] netlink: 'syz.3.18409': attribute type 4 has an invalid length. [ 1456.726426][T32069] netlink: 'syz.3.18409': attribute type 4 has an invalid length. [ 1456.773848][T32063] netlink: 'syz.3.18409': attribute type 1 has an invalid length. [ 1456.800545][T32063] netlink: 'syz.3.18409': attribute type 2 has an invalid length. [ 1457.084800][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1457.092563][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1457.100230][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1457.234579][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1457.251540][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1457.273147][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1457.286153][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1457.296238][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1457.751896][T32116] tipc: Enabling of bearer rejected, failed to enable media [ 1458.091983][T17412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.134312][T17412] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.269909][T32087] xfrm0 speed is unknown, defaulting to 1000 [ 1458.365629][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1458.677102][T32087] lo speed is unknown, defaulting to 1000 [ 1458.750696][T17412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.809340][T17412] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.873611][T32162] netlink: 'syz.2.18428': attribute type 23 has an invalid length. [ 1458.900637][T17412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1458.917679][T17412] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1458.972906][T32162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1458.981033][T32162] netlink: 84 bytes leftover after parsing attributes in process `syz.2.18428'. [ 1458.995922][T17407] net_ratelimit: 19 callbacks suppressed [ 1458.995993][T17407] bond8: (slave gretap0): failed to get link speed/duplex [ 1459.205961][T17412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1459.219066][T17412] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1459.236861][T32177] tipc: Started in network mode [ 1459.242137][T32177] tipc: Node identity e0000001, cluster identity 4711 [ 1459.250230][T32177] tipc: Enabling of bearer rejected, failed to enable media [ 1459.329899][ T5625] Bluetooth: hci1: command tx timeout [ 1459.349098][T32087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1459.366819][T32087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.392471][T32087] bridge_slave_0: entered allmulticast mode [ 1459.419264][T32087] bridge_slave_0: entered promiscuous mode [ 1459.459681][T32174] syzkaller0: entered promiscuous mode [ 1459.481154][T32174] syzkaller0: entered allmulticast mode [ 1459.528073][T32087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.551964][T32087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.579965][T32087] bridge_slave_1: entered allmulticast mode [ 1459.605591][T32087] bridge_slave_1: entered promiscuous mode [ 1459.656431][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1460.075359][T17402] bond1: (slave gretap0): link status up again after 0 ms [ 1460.094984][T12215] bond1: (slave gretap0): link status up again after 0 ms [ 1460.128150][T17407] bond1: (slave gretap0): link status up again after 0 ms [ 1460.155761][T12215] bond1: (slave gretap0): link status up again after 0 ms [ 1460.195584][ T36] bond1: (slave gretap0): link status up again after 0 ms [ 1460.216068][T17407] bond1: (slave gretap0): link status up again after 0 ms [ 1460.307076][T32087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1460.343207][T32087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1460.377584][T17402] bond8: (slave gretap0): failed to get link speed/duplex [ 1460.389965][T12215] bond1: (slave gretap0): link status up again after 0 ms [ 1460.425073][T12215] bond1: (slave gretap0): link status up again after 0 ms [ 1460.509314][T32087] team0: Port device team_slave_0 added [ 1460.518651][T17412] vlan2: left allmulticast mode [ 1460.545677][T17412] geneve0: left allmulticast mode [ 1460.559941][T17412] vlan2: left promiscuous mode [ 1460.575839][T17412] geneve0: left promiscuous mode [ 1460.596049][T17412] bridge0: port 2(vlan2) entered disabled state [ 1460.614569][T17412] team0: left allmulticast mode [ 1460.630044][T17412] bridge1: left allmulticast mode [ 1460.655865][T17412] bridge3: left allmulticast mode [ 1460.666995][T17412] team0: left promiscuous mode [ 1460.695076][T17412] bridge1: left promiscuous mode [ 1460.703799][T17412] bridge3: left promiscuous mode [ 1460.715792][T17412] bridge0: port 1(team0) entered disabled state [ 1460.768432][T17412] pim6reg: left allmulticast mode [ 1460.775100][T17412] pimreg: left allmulticast mode [ 1460.780144][T17412] dvmrp8: left allmulticast mode [ 1460.911327][T17412] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1461.067621][T17412] team0: Port device bridge1 removed [ 1461.081267][T17412] team0: Port device bridge3 removed [ 1461.102471][T32247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18440'. [ 1461.149814][T17412] bond0 (unregistering): Released all slaves [ 1461.161259][T17412] bond1 (unregistering): Released all slaves [ 1461.174523][T17412] bond2 (unregistering): Released all slaves [ 1461.187288][T17412] bond3 (unregistering): Released all slaves [ 1461.199144][T17412] bond4 (unregistering): Released all slaves [ 1461.210693][T17412] bond5 (unregistering): Released all slaves [ 1461.222593][T17412] bond6 (unregistering): Released all slaves [ 1461.239364][T32087] team0: Port device team_slave_1 added [ 1461.268771][T32233] ip6gre1: entered promiscuous mode [ 1461.274035][T32233] ip6gre1: entered allmulticast mode [ 1461.280680][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.288327][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.306817][T32087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.310258][T15722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.313792][T32087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.373381][T32087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.465318][ T5625] Bluetooth: hci1: command tx timeout [ 1461.541506][T32087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.554291][T32087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.580939][ C1] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1461.600290][T32087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.620035][T32256] tipc: Enabling of bearer rejected, failed to enable media [ 1461.632391][T17412] tipc: Disabling bearer [ 1461.669569][T17412] tipc: Left network mode [ 1461.858161][T32087] hsr_slave_0: entered promiscuous mode [ 1461.873449][T32087] hsr_slave_1: entered promiscuous mode [ 1461.885112][T15722] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1461.899253][T32087] debugfs: 'hsr0' already exists in 'hsr' [ 1461.914508][T32087] Cannot create hsr debugfs directory [ 1462.075157][T32279] gtp0: entered promiscuous mode [ 1462.080167][T32279] gtp0: entered allmulticast mode [ 1462.088096][T32279] team0: Device gtp0 is of different type [ 1462.134668][ T8486] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1462.190401][T32274] syzkaller0: entered promiscuous mode [ 1462.197186][T32274] syzkaller0: entered allmulticast mode [ 1462.218470][T32274] tipc: Enabled bearer , priority 0 [ 1462.238972][T32273] tipc: Resetting bearer [ 1462.280073][T32273] tipc: Disabling bearer [ 1462.419458][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1462.587683][T32311] netlink: 'syz.0.18454': attribute type 32 has an invalid length. [ 1462.662047][T32317] netlink: 'syz.3.18457': attribute type 5 has an invalid length. [ 1462.730473][T32328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18458'. [ 1462.884647][T32311] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18454'. [ 1463.187904][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1463.215256][T32358] netlink: 'syz.2.18464': attribute type 19 has an invalid length. [ 1463.223360][T32358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18464'. [ 1463.256155][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.256441][T32358] netlink: 'syz.2.18464': attribute type 19 has an invalid length. [ 1463.269874][ T36] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.272793][T32358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18464'. [ 1463.325485][ T36] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.334680][ T36] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.504854][ T5625] Bluetooth: hci1: command tx timeout [ 1463.635989][T32380] xt_hashlimit: size too large, truncated to 1048576 [ 1463.715563][T17412] veth1_macvtap: left promiscuous mode [ 1463.722708][T17412] veth0_macvtap: left promiscuous mode [ 1463.737093][T17412] veth1_vlan: left allmulticast mode [ 1463.742720][T17412] veth1_vlan: left promiscuous mode [ 1463.748290][T17412] veth0_vlan: left promiscuous mode [ 1464.215444][T12215] net_ratelimit: 42 callbacks suppressed [ 1464.215463][T12215] bond1: (slave gretap0): failed to get link speed/duplex [ 1464.265648][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1464.324249][T32087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1464.348980][T32087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1464.378658][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1464.395544][T32087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1464.406457][T32087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1464.414515][T32087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1464.439653][T32087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1464.457214][T32087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1464.466921][T32087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1464.494342][T32430] netlink: 'syz.2.18482': attribute type 21 has an invalid length. [ 1464.502304][T32430] IPv6: NLM_F_CREATE should be specified when creating new route [ 1464.505196][ T36] bond1: (slave gretap0): failed to get link speed/duplex [ 1464.609803][T32087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1464.635368][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1464.649166][T32087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1464.663432][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1464.670567][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1464.683690][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1464.690808][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1464.745582][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1464.761814][T32087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1464.773834][T32087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1464.821825][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1464.875397][ T36] bond1: (slave gretap0): failed to get link speed/duplex [ 1464.937442][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1465.048786][T17407] bond8: (slave gretap0): failed to get link speed/duplex [ 1465.199533][T32087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1465.301659][T32478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18484'. [ 1465.337236][T32478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18484'. [ 1465.358286][T32478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18484'. [ 1465.363717][T32087] veth0_vlan: entered promiscuous mode [ 1465.383302][T32087] veth1_vlan: entered promiscuous mode [ 1465.400220][T32478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18484'. [ 1465.423145][T32480] netlink: 'syz.4.18485': attribute type 27 has an invalid length. [ 1465.424120][T32478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18484'. [ 1465.433161][T32087] veth0_macvtap: entered promiscuous mode [ 1465.451989][T32087] veth1_macvtap: entered promiscuous mode [ 1465.471923][T32087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1465.488302][T32087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1465.506658][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1465.529400][ T1165] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.538805][ T1165] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.547937][ T1165] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.563404][ T1165] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1465.572975][ T5625] Bluetooth: hci1: command tx timeout [ 1465.632463][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.642580][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.674641][T17407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.682526][T17407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.798837][T32491] netlink: 'syz.2.18489': attribute type 12 has an invalid length. [ 1465.963287][T32497] ip6tnl0: entered promiscuous mode [ 1466.129427][T32510] macsec1: entered allmulticast mode [ 1466.135628][T32510] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 1466.233428][T32519] netlink: 'syz.0.18497': attribute type 6 has an invalid length. [ 1466.346623][T32524] __nla_validate_parse: 33 callbacks suppressed [ 1466.346640][T32524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18499'. [ 1466.371604][T32521] xfrm0 speed is unknown, defaulting to 1000 [ 1466.434268][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.442142][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.453484][T32525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1466.681150][T32521] lo speed is unknown, defaulting to 1000 [ 1466.700896][T32532] tipc: Enabling of bearer rejected, failed to enable media [ 1466.830552][T17412] IPVS: stop unused estimator thread 0... [ 1467.009502][T32548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18502'. [ 1467.231652][T32553] : entered promiscuous mode [ 1467.486949][T32566] netlink: 'syz.2.18508': attribute type 1 has an invalid length. [ 1467.554247][T32566] bond1: (slave gretap1): making interface the new active one [ 1467.562561][T32566] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1467.574303][T32566] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18508'. [ 1467.649700][T32557] netlink: 3 bytes leftover after parsing attributes in process `syz.0.18507'. [ 1467.811993][T32578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1467.819324][T32578] IPv6: NLM_F_CREATE should be set when creating new route [ 1467.826628][T32578] IPv6: NLM_F_CREATE should be set when creating new route [ 1467.839728][T32579] xfrm0 speed is unknown, defaulting to 1000 [ 1468.050419][ T30] audit: type=1804 audit(1781748256.991:33): pid=32586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.18512" name="/newroot/172/memory.events" dev="tmpfs" ino=897 res=1 errno=0 [ 1468.147269][T32595] tipc: Enabling of bearer rejected, failed to enable media [ 1468.165705][T32579] lo speed is unknown, defaulting to 1000 [ 1468.678816][T32629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18523'. [ 1468.925050][ T5625] Bluetooth: hci1: command tx timeout [ 1468.952764][T32648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18530'. [ 1469.050739][T32652] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18529'. [ 1469.062035][T32652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18529'. [ 1469.155046][T32656] netlink: 476 bytes leftover after parsing attributes in process `syz.0.18530'. [ 1469.179488][T32648] bond2 (unregistering): Released all slaves [ 1469.264222][T32658] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 1469.286690][T32638] xfrm0 speed is unknown, defaulting to 1000 [ 1469.359224][T12215] net_ratelimit: 47 callbacks suppressed [ 1469.359246][T12215] bond1: (slave gretap0): failed to get link speed/duplex [ 1469.423125][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1469.561781][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1469.575895][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1469.597333][T32638] lo speed is unknown, defaulting to 1000 [ 1469.900855][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1470.015725][T17412] bond1: (slave gretap0): failed to get link speed/duplex [ 1470.054204][T32701] xfrm0 speed is unknown, defaulting to 1000 [ 1470.089354][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1470.138964][T17402] bond1: (slave gretap0): failed to get link speed/duplex [ 1470.177336][T32711] openvswitch: netlink: Flow actions attr not present in new flow. [ 1470.466152][T17402] bond8: (slave gretap0): failed to get link speed/duplex [ 1470.505188][T32701] lo speed is unknown, defaulting to 1000 [ 1470.558012][T32717] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1470.676662][T32721] erspan0: entered promiscuous mode [ 1470.725148][T32726] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18549'. [ 1471.879222][T32720] erspan0: left promiscuous mode [ 1471.916218][ T310] syzkaller0: entered promiscuous mode [ 1471.921744][ T310] syzkaller0: entered allmulticast mode [ 1471.968803][ T310] tipc: Enabled bearer , priority 0 [ 1471.977541][ T307] tipc: Resetting bearer [ 1471.986995][ T307] tipc: Disabling bearer [ 1472.002162][ T317] gre1: entered promiscuous mode [ 1472.371814][ T334] __nla_validate_parse: 7 callbacks suppressed [ 1472.371836][ T334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18576'. [ 1472.432114][ T327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18573'. [ 1472.771125][ T354] syzkaller0: entered promiscuous mode [ 1472.777566][ T354] syzkaller0: entered allmulticast mode [ 1472.787779][ T354] tipc: Enabled bearer , priority 0 [ 1472.910170][ T353] tipc: Resetting bearer [ 1472.988216][ T353] tipc: Disabling bearer [ 1473.084895][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1473.166983][ T362] xt_addrtype: ipv6 does not support BROADCAST matching [ 1473.286368][ T374] netlink: 'syz.2.18592': attribute type 3 has an invalid length. [ 1473.309485][ T374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18592'. [ 1473.430502][ T383] FAULT_INJECTION: forcing a failure. [ 1473.430502][ T383] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.443297][ T383] CPU: 1 UID: 0 PID: 383 Comm: syz.3.18596 Not tainted syzkaller #0 PREEMPT(full) [ 1473.443324][ T383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1473.443336][ T383] Call Trace: [ 1473.443344][ T383] [ 1473.443352][ T383] dump_stack_lvl+0xe8/0x150 [ 1473.443400][ T383] should_fail_ex+0x40c/0x560 [ 1473.443425][ T383] should_failslab+0xa8/0x100 [ 1473.443455][ T383] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1473.443481][ T383] kmem_cache_alloc_noprof+0x87/0x650 [ 1473.443505][ T383] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1473.443537][ T383] ? kmem_cache_alloc_noprof+0x156/0x650 [ 1473.443565][ T383] radix_tree_node_alloc+0x7e/0x3a0 [ 1473.443593][ T383] idr_get_free+0x28f/0xa10 [ 1473.443623][ T383] idr_alloc_u32+0x18a/0x330 [ 1473.443649][ T383] ? __radix_tree_preload+0x82/0x870 [ 1473.443674][ T383] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1473.443703][ T383] ? do_raw_spin_lock+0x12b/0x2f0 [ 1473.443730][ T383] idr_alloc_cyclic+0x9c/0x1b0 [ 1473.443760][ T383] bpf_map_alloc_id+0x40/0xe0 [ 1473.443783][ T383] map_create+0x11a3/0x1660 [ 1473.443813][ T383] ? security_bpf+0x7e/0x2d0 [ 1473.443844][ T383] __sys_bpf+0x6e1/0x950 [ 1473.443873][ T383] ? __pfx___sys_bpf+0x10/0x10 [ 1473.443907][ T383] ? ksys_write+0x242/0x270 [ 1473.443936][ T383] ? __pfx_ksys_write+0x10/0x10 [ 1473.443965][ T383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.443988][ T383] __x64_sys_bpf+0x7c/0x90 [ 1473.444012][ T383] do_syscall_64+0x174/0x580 [ 1473.444038][ T383] ? trace_irq_disable+0x3b/0x140 [ 1473.444066][ T383] ? clear_bhb_loop+0x40/0x90 [ 1473.444090][ T383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.444111][ T383] RIP: 0033:0x7fe9f359ce59 [ 1473.444129][ T383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.444146][ T383] RSP: 002b:00007fe9f44ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1473.444169][ T383] RAX: ffffffffffffffda RBX: 00007fe9f3815fa0 RCX: 00007fe9f359ce59 [ 1473.444184][ T383] RDX: 000000000000001d RSI: 0000200000000340 RDI: 0000000000000000 [ 1473.444198][ T383] RBP: 00007fe9f44ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1473.444212][ T383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1473.444225][ T383] R13: 00007fe9f3816038 R14: 00007fe9f3815fa0 R15: 00007ffda03bcee8 [ 1473.444250][ T383] [ 1473.725619][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1473.733362][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1474.387516][T12215] net_ratelimit: 3383 callbacks suppressed [ 1474.387539][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1474.466247][ T408] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1474.479418][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1474.488241][T12215] bond1: (slave gretap0): failed to get link speed/duplex [ 1474.502548][ T409] Cannot find set identified by id 0 to match [ 1474.510301][ T410] netlink: 'syz.3.18604': attribute type 1 has an invalid length. [ 1474.525404][ T409] netlink: 'syz.3.18604': attribute type 1 has an invalid length. [ 1474.575308][ T410] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1474.628452][ T409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1474.644801][T12215] bond8: (slave gretap0): failed to get link speed/duplex [ 1474.682638][ T420] syzkaller0: entered promiscuous mode [ 1474.688320][ T420] syzkaller0: entered allmulticast mode [ 1474.714764][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1474.764926][ T48] bond8: (slave gretap0): failed to get link speed/duplex [ 1474.875993][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1474.931226][T12215] bond1: (slave gretap0): failed to get link speed/duplex [ 1474.995317][ T36] bond8: (slave gretap0): failed to get link speed/duplex [ 1475.044780][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1475.488560][T27605] block nbd4: Receive control failed (result -32) [ 1475.517649][ T5625] block nbd4: Receive control failed (result -32) [ 1475.873754][ T493] netlink: 52 bytes leftover after parsing attributes in process `syz.2.18619'. [ 1476.076329][ T502] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1476.301648][T27605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1476.309161][T27605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1476.318625][T27605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1476.326595][T27605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1476.334057][T27605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1476.567186][ T517] xfrm0 speed is unknown, defaulting to 1000 [ 1476.644125][ T517] lo speed is unknown, defaulting to 1000 [ 1476.789825][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.797027][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.804367][ T517] bridge_slave_0: entered allmulticast mode [ 1476.811309][ T517] bridge_slave_0: entered promiscuous mode [ 1476.818549][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.825635][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.832900][ T517] bridge_slave_1: entered allmulticast mode [ 1476.853603][ T517] bridge_slave_1: entered promiscuous mode [ 1476.874351][ T517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1476.885844][ T517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1476.908488][ T517] team0: Port device team_slave_0 added [ 1476.916348][ T517] team0: Port device team_slave_1 added [ 1476.936550][ T517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1476.943569][ T517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1476.984963][ T517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1476.997138][ T517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1477.004122][ T517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.030085][ T517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1477.051919][ T48] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1477.061693][ T48] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.112282][ T517] hsr_slave_0: entered promiscuous mode [ 1477.119252][ T517] hsr_slave_1: entered promiscuous mode [ 1477.126404][ T517] debugfs: 'hsr0' already exists in 'hsr' [ 1477.132200][ T517] Cannot create hsr debugfs directory [ 1477.145905][ T48] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1477.155698][ T48] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.210785][ T539] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1477.311688][ T542] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18629'. [ 1477.322249][ T542] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18629'. [ 1477.431422][ T48] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1477.442310][ T48] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.541203][ T48] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1477.550986][ T48] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.040000][ T48] bond8 (unregistering): (slave gretap0): Removing an active aggregator [ 1478.056401][ T48] bond8 (unregistering): (slave gretap0): Releasing backup interface [ 1478.069846][ T48] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 1478.120775][ T48] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1478.133078][ T48] team0: Port device bridge3 removed [ 1478.141863][ T48] team0: Port device bridge4 removed [ 1478.161211][ T48] bond0 (unregistering): Released all slaves [ 1478.169676][ T48] bond1 (unregistering): Released all slaves [ 1478.179759][ T48] bond2 (unregistering): Released all slaves [ 1478.188577][ T48] bond3 (unregistering): Released all slaves [ 1478.211940][ T48] bond4 (unregistering): Released all slaves [ 1478.222164][ T48] bond5 (unregistering): Released all slaves [ 1478.233175][ T48] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1478.241783][ T48] bond6 (unregistering): Released all slaves [ 1478.251863][ T48] bond7 (unregistering): Released all slaves [ 1478.262481][ T48] bond8 (unregistering): Released all slaves [ 1478.272616][ T48] bond9 (unregistering): Released all slaves [ 1478.356884][ T48] tipc: Left network mode [ 1478.423115][T27605] Bluetooth: hci5: command tx timeout [ 1478.535745][ T48] IPVS: stopping backup sync thread 25912 ... [ 1478.596620][ T465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1478.692969][ T546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.729380][ T547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.773426][ T546] netlink: 49 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.782551][ T546] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.832621][ T546] netlink: 49 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.845446][ T547] netlink: 49 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.886435][ T547] netlink: 140 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.903022][ T550] xfrm0 speed is unknown, defaulting to 1000 [ 1478.912256][ T547] netlink: 49 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.927338][ T563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1478.936341][ T563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18632'. [ 1479.062126][ T550] lo speed is unknown, defaulting to 1000 [ 1479.214193][ T578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1479.331110][ T588] FAULT_INJECTION: forcing a failure. [ 1479.331110][ T588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1479.349585][ T588] CPU: 1 UID: 0 PID: 588 Comm: syz.3.18637 Not tainted syzkaller #0 PREEMPT(full) [ 1479.349614][ T588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1479.349626][ T588] Call Trace: [ 1479.349634][ T588] [ 1479.349642][ T588] dump_stack_lvl+0xe8/0x150 [ 1479.349670][ T588] should_fail_ex+0x40c/0x560 [ 1479.349694][ T588] _copy_from_iter+0x1d3/0x1660 [ 1479.349722][ T588] ? rcu_is_watching+0x15/0xb0 [ 1479.349747][ T588] ? __pfx__copy_from_iter+0x10/0x10 [ 1479.349769][ T588] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1479.349800][ T588] ? netlink_sendmsg+0x650/0xb40 [ 1479.349829][ T588] ? skb_put+0x112/0x210 [ 1479.349857][ T588] netlink_sendmsg+0x6c0/0xb40 [ 1479.349891][ T588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1479.349923][ T588] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1479.349943][ T588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1479.349968][ T588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1479.349998][ T588] ____sys_sendmsg+0x9b9/0xa20 [ 1479.350032][ T588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1479.350063][ T588] ? lock_release+0x4b/0x3c0 [ 1479.350094][ T588] ? import_iovec+0x73/0xa0 [ 1479.350122][ T588] ___sys_sendmsg+0x2a5/0x360 [ 1479.350162][ T588] ? __pfx____sys_sendmsg+0x10/0x10 [ 1479.350210][ T588] ? __fget_files+0x2a/0x420 [ 1479.350233][ T588] ? __fget_files+0x3a2/0x420 [ 1479.350260][ T588] __x64_sys_sendmsg+0x1b1/0x290 [ 1479.350290][ T588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1479.350328][ T588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.350350][ T588] do_syscall_64+0x174/0x580 [ 1479.350377][ T588] ? trace_irq_disable+0x3b/0x140 [ 1479.350405][ T588] ? clear_bhb_loop+0x40/0x90 [ 1479.350427][ T588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1479.350447][ T588] RIP: 0033:0x7fe9f359ce59 [ 1479.350465][ T588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1479.350482][ T588] RSP: 002b:00007fe9f44ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1479.350504][ T588] RAX: ffffffffffffffda RBX: 00007fe9f3815fa0 RCX: 00007fe9f359ce59 [ 1479.350536][ T588] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1479.350550][ T588] RBP: 00007fe9f44ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1479.350579][ T588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1479.350592][ T588] R13: 00007fe9f3816038 R14: 00007fe9f3815fa0 R15: 00007ffda03bcee8 [ 1479.350618][ T588] [ 1479.604794][T12215] net_ratelimit: 39 callbacks suppressed [ 1479.604814][T12215] bond1: (slave gretap0): failed to get link speed/duplex [ 1479.664926][ T595] netlink: 'syz.3.18638': attribute type 4 has an invalid length. [ 1479.777847][ T605] IPVS: length: 15 != 8 [ 1479.828479][ T517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1479.852004][ T517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1479.861383][ T517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1479.870970][ T517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1479.888907][ T609] netlink: 'syz.2.18639': attribute type 32 has an invalid length. [ 1479.899257][ T517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1479.913187][ T517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1479.922196][ T517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1479.953443][ T517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1479.989517][ T609] bond2: Setting coupled_control to off (0) [ 1480.063905][ T609] bond3: entered promiscuous mode [ 1480.069006][ T609] bond3: entered allmulticast mode [ 1480.074402][ T609] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1480.208360][ T517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.243940][ T517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.262799][ T635] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1480.311254][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.318405][T17402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1480.327772][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.334979][T17402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1480.409650][T12215] bond1: (slave gretap0): failed to get link speed/duplex [ 1480.444834][T27605] Bluetooth: hci5: command tx timeout [ 1480.556911][ T646] bridge0: port 1(vlan2) entered blocking state [ 1480.575323][ T646] bridge0: port 1(vlan2) entered disabled state [ 1480.588974][ T646] vlan2: entered allmulticast mode [ 1480.594221][ T646] geneve0: entered allmulticast mode [ 1480.601505][ T646] vlan2: entered promiscuous mode [ 1480.613467][ T646] geneve0: entered promiscuous mode [ 1480.667441][ T654] syzkaller0: entered promiscuous mode [ 1480.683376][ T654] syzkaller0: entered allmulticast mode [ 1480.738791][ T36] bond1: (slave gretap0): failed to get link speed/duplex [ 1480.780915][ T654] can: request_module (can-proto-0) failed. [ 1480.872835][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1480.968866][ T670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1481.003911][ T48] hsr_slave_0: left promiscuous mode [ 1481.009911][ T48] hsr_slave_1: left promiscuous mode [ 1481.025872][ T48] veth1_vlan: left promiscuous mode [ 1481.031246][ T48] veth0_vlan: left promiscuous mode [ 1481.347734][ T517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1481.411942][T17402] bond1: (slave gretap0): failed to get link speed/duplex [ 1481.655215][T17412] bond1: (slave gretap0): failed to get link speed/duplex [ 1481.718204][ T517] veth0_vlan: entered promiscuous mode [ 1481.731360][ T517] veth1_vlan: entered promiscuous mode [ 1481.775044][T14305] bond1: (slave gretap0): failed to get link speed/duplex [ 1481.784440][ T517] veth0_macvtap: entered promiscuous mode [ 1481.793963][ T517] veth1_macvtap: entered promiscuous mode [ 1481.811893][ T517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.825768][ T517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.840197][T14305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.870607][T14305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.879376][T14305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.926258][T14305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.021965][ T727] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1482.030745][ T727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1482.049643][T17402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.058769][T17402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.126578][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1482.158962][T17407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.169232][T17407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.170239][ T730] netlink: 'syz.0.18661': attribute type 22 has an invalid length. [ 1482.186021][ T730] netlink: 'syz.0.18661': attribute type 22 has an invalid length. [ 1482.270266][ T735] xt_ecn: cannot match TCP bits for non-tcp packets [ 1482.282104][ T735] nbd: must specify a size in bytes for the device [ 1482.443359][ T48] IPVS: stop unused estimator thread 0... [ 1482.528655][T27605] Bluetooth: hci5: command tx timeout [ 1482.608571][ T750] netlink: 'syz.4.18668': attribute type 2 has an invalid length. [ 1483.049338][ T782] syzkaller0: entered promiscuous mode [ 1483.054870][ T782] syzkaller0: entered allmulticast mode [ 1483.087455][ T782] tipc: Enabled bearer , priority 0 [ 1483.097707][ T781] tipc: Resetting bearer [ 1483.168730][ T781] tipc: Disabling bearer [ 1483.185478][ T789] Unknown options in mask 6 [ 1483.281917][ T784] tipc: Started in network mode [ 1483.286982][ T784] tipc: Node identity , cluster identity 4711 [ 1483.293217][ T784] tipc: Failed to obtain node identity [ 1483.300350][ T784] tipc: Enabling of bearer rejected, failed to enable media [ 1483.311775][ T784] syzkaller0: entered promiscuous mode [ 1483.317458][ T784] syzkaller0: entered allmulticast mode [ 1483.637195][ T817] netlink: 'syz.2.18693': attribute type 1 has an invalid length. [ 1483.645076][ T817] netlink: 'syz.2.18693': attribute type 1 has an invalid length. [ 1483.667329][ T820] netlink: 'syz.3.18694': attribute type 3 has an invalid length. [ 1483.742814][ T822] xfrm0 speed is unknown, defaulting to 1000 [ 1483.882805][ T822] lo speed is unknown, defaulting to 1000 [ 1483.891961][ T825] xfrm0 speed is unknown, defaulting to 1000 [ 1484.057000][ T825] lo speed is unknown, defaulting to 1000 [ 1484.608609][T27605] Bluetooth: hci5: command tx timeout [ 1484.701773][T17412] net_ratelimit: 17 callbacks suppressed [ 1484.701795][T17412] bond1: (slave gretap0): failed to get link speed/duplex [ 1484.826277][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1484.935255][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1485.044765][T12193] bond1: (slave gretap0): failed to get link speed/duplex [ 1485.100288][ T868] openvswitch: netlink: Flow actions attr not present in new flow. [ 1485.144741][ T871] __nla_validate_parse: 9 callbacks suppressed [ 1485.144760][ T871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18707'. [ 1485.171147][ T870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18709'. [ 1485.181025][ T870] tipc: Invalid UDP bearer configuration [ 1485.181062][ T870] tipc: Enabling of bearer rejected, failed to enable media [ 1485.214813][T12193] bond1: (slave gretap0): failed to get link speed/duplex [ 1485.373226][T12193] bond1: (slave gretap0): failed to get link speed/duplex [ 1485.593881][T17407] bond1: (slave gretap0): failed to get link speed/duplex [ 1485.719948][T17412] bond1: (slave gretap0): failed to get link speed/duplex [ 1485.847053][ T902] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1485.996057][ T909] xfrm0 speed is unknown, defaulting to 1000 [ 1486.163192][ T909] lo speed is unknown, defaulting to 1000 [ 1486.548854][ T937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18733'. [ 1486.806670][ T949] syzkaller0: entered promiscuous mode [ 1486.836914][ T949] syzkaller0: entered allmulticast mode [ 1487.064372][ T968] netlink: 'syz.4.18737': attribute type 10 has an invalid length. [ 1487.075620][ T968] geneve1: entered promiscuous mode [ 1487.088903][ T968] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 1487.261787][ T973] sctp: [Deprecated]: syz.0.18742 (pid 973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1487.261787][ T973] Use struct sctp_sack_info instead [ 1487.592650][ T985] lo: entered allmulticast mode [ 1487.599556][ T985] lo: left allmulticast mode [ 1487.785776][ T992] netlink: 'syz.2.18749': attribute type 32 has an invalid length. [ 1487.810745][ T989] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18747'. [ 1487.843330][ T996] FAULT_INJECTION: forcing a failure. [ 1487.843330][ T996] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.866221][ T996] CPU: 1 UID: 0 PID: 996 Comm: syz.4.18748 Not tainted syzkaller #0 PREEMPT(full) [ 1487.866252][ T996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1487.866264][ T996] Call Trace: [ 1487.866271][ T996] [ 1487.866279][ T996] dump_stack_lvl+0xe8/0x150 [ 1487.866304][ T996] should_fail_ex+0x40c/0x560 [ 1487.866327][ T996] should_failslab+0xa8/0x100 [ 1487.866355][ T996] __kmalloc_cache_noprof+0x88/0x660 [ 1487.866378][ T996] ? __kasan_kmalloc+0x93/0xb0 [ 1487.866403][ T996] ? ovs_nla_get_identifier+0x72/0xd0 [ 1487.866430][ T996] ovs_nla_get_identifier+0x72/0xd0 [ 1487.866454][ T996] ovs_flow_cmd_new+0x500/0xe80 [ 1487.866473][ T996] ? kasan_save_track+0x3e/0x80 [ 1487.866495][ T996] ? kasan_save_free_info+0x40/0x50 [ 1487.866519][ T996] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1487.866566][ T996] ? __nla_parse+0x40/0x60 [ 1487.866590][ T996] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1487.866613][ T996] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1487.866638][ T996] genl_family_rcv_msg_doit+0x233/0x340 [ 1487.866663][ T996] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1487.866692][ T996] ? bpf_lsm_capable+0x9/0x20 [ 1487.866708][ T996] ? security_capable+0x7e/0x2c0 [ 1487.866739][ T996] genl_rcv_msg+0x614/0x7a0 [ 1487.866763][ T996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.866782][ T996] ? ref_tracker_free+0x689/0x830 [ 1487.866802][ T996] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1487.866825][ T996] ? __pfx_ref_tracker_free+0x10/0x10 [ 1487.866850][ T996] netlink_rcv_skb+0x226/0x4a0 [ 1487.866877][ T996] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1487.866897][ T996] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1487.866938][ T996] ? down_read+0x2be/0x330 [ 1487.866966][ T996] genl_rcv+0x28/0x40 [ 1487.866983][ T996] netlink_unicast+0x7bb/0x940 [ 1487.867013][ T996] netlink_sendmsg+0x813/0xb40 [ 1487.867045][ T996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.867074][ T996] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1487.867092][ T996] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1487.867115][ T996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1487.867143][ T996] ____sys_sendmsg+0x9b9/0xa20 [ 1487.867175][ T996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1487.867204][ T996] ? lock_release+0x4b/0x3c0 [ 1487.867231][ T996] ? import_iovec+0x73/0xa0 [ 1487.867256][ T996] ___sys_sendmsg+0x2a5/0x360 [ 1487.867281][ T996] ? rcu_is_watching+0x15/0xb0 [ 1487.867297][ T996] ? get_pid_task+0x20/0x1f0 [ 1487.867315][ T996] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.867340][ T996] ? rcu_is_watching+0x15/0xb0 [ 1487.867369][ T996] ? __fget_files+0x2a/0x420 [ 1487.867389][ T996] ? __fget_files+0x3a2/0x420 [ 1487.867414][ T996] __x64_sys_sendmsg+0x1b1/0x290 [ 1487.867440][ T996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1487.867473][ T996] ? rcu_is_watching+0x15/0xb0 [ 1487.867492][ T996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.867512][ T996] do_syscall_64+0x174/0x580 [ 1487.867536][ T996] ? trace_irq_disable+0x3b/0x140 [ 1487.867561][ T996] ? clear_bhb_loop+0x40/0x90 [ 1487.867582][ T996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.867600][ T996] RIP: 0033:0x7f4cdf19ce59 [ 1487.867617][ T996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.867634][ T996] RSP: 002b:00007f4ce00df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.867655][ T996] RAX: ffffffffffffffda RBX: 00007f4cdf415fa0 RCX: 00007f4cdf19ce59 [ 1487.867668][ T996] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1487.867680][ T996] RBP: 00007f4ce00df090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.867689][ T996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.867699][ T996] R13: 00007f4cdf416038 R14: 00007f4cdf415fa0 R15: 00007ffd2e233ac8 [ 1487.867717][ T996] [ 1488.267694][ T992] netlink: 76 bytes leftover after parsing attributes in process `syz.2.18749'. [ 1488.292238][ T999] netlink: 'syz.0.18751': attribute type 28 has an invalid length. [ 1488.437260][ T1002] xfrm0 speed is unknown, defaulting to 1000 [ 1488.505255][ T1005] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1488.562085][ T1002] lo speed is unknown, defaulting to 1000 [ 1488.621247][ T1011] syzkaller0: entered promiscuous mode [ 1488.627128][ T1011] syzkaller0: entered allmulticast mode [ 1488.761041][ T1018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18758'. [ 1488.774494][ T1018] Can't find ip_set type hash [ 1489.034626][ T1031] netlink: 68 bytes leftover after parsing attributes in process `syz.3.18761'. [ 1489.050748][ T1038] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1489.174634][ T1048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18762'. [ 1489.229582][ T1053] FAULT_INJECTION: forcing a failure. [ 1489.229582][ T1053] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.242692][ T1053] CPU: 1 UID: 0 PID: 1053 Comm: syz.1.18764 Not tainted syzkaller #0 PREEMPT(full) [ 1489.242720][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1489.242733][ T1053] Call Trace: [ 1489.242741][ T1053] [ 1489.242750][ T1053] dump_stack_lvl+0xe8/0x150 [ 1489.242776][ T1053] should_fail_ex+0x40c/0x560 [ 1489.242801][ T1053] should_failslab+0xa8/0x100 [ 1489.242832][ T1053] __kmalloc_noprof+0xe8/0x750 [ 1489.242859][ T1053] ? ovs_nla_copy_actions+0x68/0x3d0 [ 1489.242888][ T1053] ? __kmalloc_cache_noprof+0x318/0x660 [ 1489.242917][ T1053] ovs_nla_copy_actions+0x68/0x3d0 [ 1489.242950][ T1053] ovs_flow_cmd_new+0x60f/0xe80 [ 1489.242972][ T1053] ? kasan_save_track+0x3e/0x80 [ 1489.242997][ T1053] ? kasan_save_free_info+0x40/0x50 [ 1489.243022][ T1053] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1489.243077][ T1053] ? __nla_parse+0x40/0x60 [ 1489.243103][ T1053] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1489.243129][ T1053] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1489.243157][ T1053] genl_family_rcv_msg_doit+0x233/0x340 [ 1489.243186][ T1053] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1489.243217][ T1053] ? bpf_lsm_capable+0x9/0x20 [ 1489.243236][ T1053] ? security_capable+0x7e/0x2c0 [ 1489.243270][ T1053] genl_rcv_msg+0x614/0x7a0 [ 1489.243314][ T1053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1489.243334][ T1053] ? ref_tracker_free+0x689/0x830 [ 1489.243354][ T1053] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1489.243377][ T1053] ? __pfx_ref_tracker_free+0x10/0x10 [ 1489.243403][ T1053] netlink_rcv_skb+0x226/0x4a0 [ 1489.243431][ T1053] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1489.243453][ T1053] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1489.243488][ T1053] ? down_read+0x2be/0x330 [ 1489.243516][ T1053] genl_rcv+0x28/0x40 [ 1489.243535][ T1053] netlink_unicast+0x7bb/0x940 [ 1489.243565][ T1053] netlink_sendmsg+0x813/0xb40 [ 1489.243618][ T1053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.243651][ T1053] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1489.243672][ T1053] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1489.243698][ T1053] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.243730][ T1053] ____sys_sendmsg+0x9b9/0xa20 [ 1489.243765][ T1053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.243798][ T1053] ? lock_release+0x4b/0x3c0 [ 1489.243834][ T1053] ? import_iovec+0x73/0xa0 [ 1489.243863][ T1053] ___sys_sendmsg+0x2a5/0x360 [ 1489.243892][ T1053] ? rcu_is_watching+0x15/0xb0 [ 1489.243912][ T1053] ? get_pid_task+0x20/0x1f0 [ 1489.243933][ T1053] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.243966][ T1053] ? rcu_is_watching+0x15/0xb0 [ 1489.244003][ T1053] ? __fget_files+0x2a/0x420 [ 1489.244027][ T1053] ? __fget_files+0x3a2/0x420 [ 1489.244056][ T1053] __x64_sys_sendmsg+0x1b1/0x290 [ 1489.244088][ T1053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1489.244126][ T1053] ? rcu_is_watching+0x15/0xb0 [ 1489.244148][ T1053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.244171][ T1053] do_syscall_64+0x174/0x580 [ 1489.244197][ T1053] ? trace_irq_disable+0x3b/0x140 [ 1489.244225][ T1053] ? clear_bhb_loop+0x40/0x90 [ 1489.244248][ T1053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.244270][ T1053] RIP: 0033:0x7fe2a8b9ce59 [ 1489.244293][ T1053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.244312][ T1053] RSP: 002b:00007fe2a9aef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.244335][ T1053] RAX: ffffffffffffffda RBX: 00007fe2a8e15fa0 RCX: 00007fe2a8b9ce59 [ 1489.244350][ T1053] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1489.244364][ T1053] RBP: 00007fe2a9aef090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.244377][ T1053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1489.244389][ T1053] R13: 00007fe2a8e16038 R14: 00007fe2a8e15fa0 R15: 00007ffd5f0103b8 [ 1489.244413][ T1053] [ 1489.820692][T17412] net_ratelimit: 26 callbacks suppressed [ 1489.820714][T17412] bond1: (slave gretap0): failed to get link speed/duplex [ 1489.973149][ T1081] netlink: 'syz.0.18772': attribute type 32 has an invalid length. [ 1489.988118][ T1076] veth0: entered promiscuous mode [ 1489.994296][ T1076] netlink: 568 bytes leftover after parsing attributes in process `syz.3.18773'. [ 1490.011339][ T1081] netlink: 76 bytes leftover after parsing attributes in process `syz.0.18772'. [ 1490.020653][ T1075] veth0: left promiscuous mode [ 1490.043090][T17402] bond1: (slave gretap0): failed to get link speed/duplex [ 1490.179100][T14305] bond1: (slave gretap0): failed to get link speed/duplex [ 1490.252069][ T1091] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1490.277573][ T1091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1490.298319][ T1088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1490.309394][ T1088] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.345657][ T1094] netlink: 'syz.4.18778': attribute type 11 has an invalid length. [ 1490.393050][T12193] bond1: (slave gretap0): failed to get link speed/duplex [ 1490.456444][ T8484] hid-generic 0005:0C45:0008.0001: item fetching failed at offset 2/3 [ 1490.465101][ T8484] hid-generic 0005:0C45:0008.0001: probe with driver hid-generic failed with error -22 [ 1490.487364][ T1101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18781'. [ 1490.497732][ T1101] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18781'. [ 1490.519768][T12193] bond1: (slave gretap0): failed to get link speed/duplex [ 1490.537134][ T1088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1490.547482][ T1088] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.634859][ T48] bond1: (slave gretap0): failed to get link speed/duplex [ 1490.653373][ T1105] netlink: 152 bytes leftover after parsing attributes in process `syz.4.18783'. [ 1490.746230][T14305] bond1: (slave gretap0): failed to get link speed/duplex [ 1490.867259][T12215] bond1: (slave gretap0): failed to get link speed/duplex [ 1491.026013][ T1111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18786'. [ 1491.178231][ T1115] FAULT_INJECTION: forcing a failure. [ 1491.178231][ T1115] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.191602][ T1115] CPU: 1 UID: 0 PID: 1115 Comm: syz.3.18787 Not tainted syzkaller #0 PREEMPT(full) [ 1491.191628][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1491.191642][ T1115] Call Trace: [ 1491.191650][ T1115] [ 1491.191659][ T1115] dump_stack_lvl+0xe8/0x150 [ 1491.191685][ T1115] should_fail_ex+0x40c/0x560 [ 1491.191710][ T1115] should_failslab+0xa8/0x100 [ 1491.191739][ T1115] ? skb_clone+0x212/0x3a0 [ 1491.191757][ T1115] kmem_cache_alloc_noprof+0x87/0x650 [ 1491.191787][ T1115] skb_clone+0x212/0x3a0 [ 1491.191806][ T1115] __netlink_deliver_tap+0x413/0x860 [ 1491.191842][ T1115] ? netlink_deliver_tap+0x2e/0x1b0 [ 1491.191872][ T1115] netlink_deliver_tap+0x19c/0x1b0 [ 1491.191902][ T1115] netlink_unicast+0x77f/0x940 [ 1491.191934][ T1115] netlink_sendmsg+0x813/0xb40 [ 1491.191969][ T1115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1491.192001][ T1115] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1491.192021][ T1115] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1491.192046][ T1115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1491.192077][ T1115] ____sys_sendmsg+0x9b9/0xa20 [ 1491.192118][ T1115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1491.192146][ T1115] ? lock_release+0x4b/0x3c0 [ 1491.192177][ T1115] ? import_iovec+0x73/0xa0 [ 1491.192204][ T1115] ___sys_sendmsg+0x2a5/0x360 [ 1491.192232][ T1115] ? rcu_is_watching+0x15/0xb0 [ 1491.192252][ T1115] ? get_pid_task+0x20/0x1f0 [ 1491.192272][ T1115] ? __pfx____sys_sendmsg+0x10/0x10 [ 1491.192303][ T1115] ? rcu_is_watching+0x15/0xb0 [ 1491.192337][ T1115] ? __fget_files+0x2a/0x420 [ 1491.192359][ T1115] ? __fget_files+0x3a2/0x420 [ 1491.192386][ T1115] __x64_sys_sendmsg+0x1b1/0x290 [ 1491.192425][ T1115] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1491.192480][ T1115] ? rcu_is_watching+0x15/0xb0 [ 1491.192501][ T1115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.192522][ T1115] do_syscall_64+0x174/0x580 [ 1491.192550][ T1115] ? clear_bhb_loop+0x40/0x90 [ 1491.192573][ T1115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.192593][ T1115] RIP: 0033:0x7fe9f359ce59 [ 1491.192612][ T1115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.192630][ T1115] RSP: 002b:00007fe9f44ec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1491.192653][ T1115] RAX: ffffffffffffffda RBX: 00007fe9f3815fa0 RCX: 00007fe9f359ce59 [ 1491.192668][ T1115] RDX: 0000000024000840 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1491.192682][ T1115] RBP: 00007fe9f44ec090 R08: 0000000000000000 R09: 0000000000000000 [ 1491.192694][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1491.192707][ T1115] R13: 00007fe9f3816038 R14: 00007fe9f3815fa0 R15: 00007ffda03bcee8 [ 1491.192731][ T1115] [ 1491.686232][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1492.104455][ T1126] netlink: 'syz.4.18790': attribute type 3 has an invalid length. [ 1492.237238][ T1139] netlink: 'syz.1.18792': attribute type 1 has an invalid length. [ 1492.918349][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1492.925830][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.060294][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1493.169808][ T1139] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1493.174315][ T1088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1493.203025][ T1088] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.248444][ T48] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.259156][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.268658][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.278293][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.415768][ T1159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18795'. [ 1493.432856][ T1163] netlink: 'syz.3.18797': attribute type 18 has an invalid length. [ 1493.443797][ T1163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18797'. [ 1493.488599][T12193] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.496333][ T1163] netlink: 'syz.3.18797': attribute type 18 has an invalid length. [ 1493.497382][T12193] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.513941][T12193] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.519553][ T1163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18797'. [ 1493.522962][T12193] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1493.608039][ T1159] batadv_slave_1: entered promiscuous mode [ 1493.613924][ T1159] batadv_slave_1: entered allmulticast mode [ 1493.661446][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1493.669069][ T1170] batadv_slave_1: left promiscuous mode [ 1493.674785][ T1170] batadv_slave_1: left allmulticast mode [ 1493.839220][ T1088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1493.869147][ T1088] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.060986][ T48] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.069650][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.106633][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.121801][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.155830][T12193] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1494.164409][T12193] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.187512][ T1088] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1494.212203][ T1088] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.241424][T12193] ================================================================== [ 1494.249555][T12193] BUG: KASAN: slab-use-after-free in __mutex_lock+0x154/0x1550 [ 1494.257139][T12193] Read of size 8 at addr ffff88807ce432a8 by task kworker/u8:15/12193 [ 1494.265308][T12193] [ 1494.267673][T12193] CPU: 1 UID: 0 PID: 12193 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 1494.267699][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1494.267714][T12193] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 1494.267750][T12193] Call Trace: [ 1494.267760][T12193] [ 1494.267770][T12193] dump_stack_lvl+0xe8/0x150 [ 1494.267795][T12193] print_address_description+0x55/0x1e0 [ 1494.267817][T12193] ? __mutex_lock+0x154/0x1550 [ 1494.267844][T12193] print_report+0x58/0x70 [ 1494.267863][T12193] kasan_report+0x117/0x150 [ 1494.267893][T12193] ? rcu_is_watching+0x15/0xb0 [ 1494.267917][T12193] ? __mutex_lock+0x154/0x1550 [ 1494.267949][T12193] __mutex_lock+0x154/0x1550 [ 1494.267979][T12193] ? __mutex_lock+0x5d4/0x1550 [ 1494.268009][T12193] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 1494.268041][T12193] ? __pfx___mutex_lock+0x10/0x10 [ 1494.268069][T12193] ? do_raw_spin_lock+0x12b/0x2f0 [ 1494.268097][T12193] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1494.268122][T12193] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 1494.268150][T12193] ? process_scheduled_works+0xa20/0x14e0 [ 1494.268175][T12193] ? rcu_is_watching+0x15/0xb0 [ 1494.268197][T12193] ? process_scheduled_works+0xa20/0x14e0 [ 1494.268223][T12193] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 1494.268255][T12193] ? rcu_is_watching+0x15/0xb0 [ 1494.268279][T12193] ? process_scheduled_works+0xa20/0x14e0 [ 1494.268305][T12193] process_scheduled_works+0xa8e/0x14e0 [ 1494.268365][T12193] ? __pfx_process_scheduled_works+0x10/0x10 [ 1494.268389][T12193] ? do_raw_spin_lock+0x12b/0x2f0 [ 1494.268416][T12193] ? assign_work+0x3cf/0x5d0 [ 1494.268443][T12193] worker_thread+0xa47/0xfb0 [ 1494.268484][T12193] kthread+0x388/0x470 [ 1494.268503][T12193] ? __pfx_worker_thread+0x10/0x10 [ 1494.268528][T12193] ? __pfx_kthread+0x10/0x10 [ 1494.268547][T12193] ret_from_fork+0x514/0xb70 [ 1494.268569][T12193] ? __pfx_ret_from_fork+0x10/0x10 [ 1494.268589][T12193] ? __switch_to+0xc89/0x1420 [ 1494.268618][T12193] ? __pfx_kthread+0x10/0x10 [ 1494.268637][T12193] ret_from_fork_asm+0x1a/0x30 [ 1494.268669][T12193] [ 1494.268677][T12193] [ 1494.473114][T12193] Allocated by task 1088: [ 1494.477457][T12193] kasan_save_track+0x3e/0x80 [ 1494.482162][T12193] __kasan_kmalloc+0x93/0xb0 [ 1494.486775][T12193] __kmalloc_noprof+0x358/0x750 [ 1494.491651][T12193] udp_tunnel_nic_netdevice_event+0x4e9/0x1850 [ 1494.497835][T12193] notifier_call_chain+0x1a5/0x3d0 [ 1494.502973][T12193] register_netdevice+0x18a4/0x1eb0 [ 1494.508187][T12193] nsim_create+0xbd7/0x1140 [ 1494.512707][T12193] __nsim_dev_port_add+0x7f8/0xcd0 [ 1494.517844][T12193] nsim_dev_port_add_all+0x37/0xf0 [ 1494.522995][T12193] nsim_dev_reload_up+0x4dd/0x880 [ 1494.528047][T12193] devlink_reload+0x4b2/0x890 [ 1494.532746][T12193] devlink_nl_reload_doit+0xa9c/0xc80 [ 1494.538132][T12193] genl_family_rcv_msg_doit+0x233/0x340 [ 1494.543700][T12193] genl_rcv_msg+0x614/0x7a0 [ 1494.548228][T12193] netlink_rcv_skb+0x226/0x4a0 [ 1494.553029][T12193] genl_rcv+0x28/0x40 [ 1494.557029][T12193] netlink_unicast+0x7bb/0x940 [ 1494.561814][T12193] netlink_sendmsg+0x813/0xb40 [ 1494.566609][T12193] ____sys_sendmsg+0x9b9/0xa20 [ 1494.571417][T12193] ___sys_sendmsg+0x2a5/0x360 [ 1494.576132][T12193] __x64_sys_sendmsg+0x1b1/0x290 [ 1494.581105][T12193] do_syscall_64+0x174/0x580 [ 1494.585740][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.591660][T12193] [ 1494.594000][T12193] Freed by task 1088: [ 1494.597998][T12193] kasan_save_track+0x3e/0x80 [ 1494.602703][T12193] kasan_save_free_info+0x40/0x50 [ 1494.607758][T12193] __kasan_slab_free+0x5c/0x80 [ 1494.612553][T12193] kfree+0x1c5/0x640 [ 1494.616475][T12193] udp_tunnel_nic_netdevice_event+0x1236/0x1850 [ 1494.622767][T12193] notifier_call_chain+0x1a5/0x3d0 [ 1494.627917][T12193] unregister_netdevice_many_notify+0x17de/0x2150 [ 1494.634385][T12193] unregister_netdevice_queue+0x2f5/0x340 [ 1494.640135][T12193] nsim_destroy+0x26d/0x800 [ 1494.644671][T12193] __nsim_dev_port_del+0x14e/0x200 [ 1494.649822][T12193] nsim_dev_port_add_all+0xae/0xf0 [ 1494.654964][T12193] nsim_dev_reload_up+0x4dd/0x880 [ 1494.660015][T12193] devlink_reload+0x4b2/0x890 [ 1494.664744][T12193] devlink_nl_reload_doit+0xa9c/0xc80 [ 1494.670246][T12193] genl_family_rcv_msg_doit+0x233/0x340 [ 1494.675820][T12193] genl_rcv_msg+0x614/0x7a0 [ 1494.680348][T12193] netlink_rcv_skb+0x226/0x4a0 [ 1494.685140][T12193] genl_rcv+0x28/0x40 [ 1494.689137][T12193] netlink_unicast+0x7bb/0x940 [ 1494.693925][T12193] netlink_sendmsg+0x813/0xb40 [ 1494.698722][T12193] ____sys_sendmsg+0x9b9/0xa20 [ 1494.703517][T12193] ___sys_sendmsg+0x2a5/0x360 [ 1494.708245][T12193] __x64_sys_sendmsg+0x1b1/0x290 [ 1494.713216][T12193] do_syscall_64+0x174/0x580 [ 1494.717841][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.723753][T12193] [ 1494.726084][T12193] Last potentially related work creation: [ 1494.731869][T12193] kasan_save_stack+0x3e/0x60 [ 1494.736578][T12193] kasan_record_aux_stack+0xbd/0xd0 [ 1494.741797][T12193] insert_work+0x3d/0x330 [ 1494.746159][T12193] __queue_work+0xb7c/0xff0 [ 1494.750681][T12193] queue_work_on+0x106/0x1d0 [ 1494.755283][T12193] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 1494.760935][T12193] udp_tunnel_push_rx_port+0x169/0x1f0 [ 1494.766500][T12193] geneve_offload_rx_ports+0xc7/0x150 [ 1494.771894][T12193] geneve_netdevice_event+0x6a/0x80 [ 1494.777100][T12193] notifier_call_chain+0x1a5/0x3d0 [ 1494.782228][T12193] call_netdevice_notifiers+0x90/0xd0 [ 1494.787603][T12193] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 1494.793767][T12193] notifier_call_chain+0x1a5/0x3d0 [ 1494.798899][T12193] register_netdevice+0x18a4/0x1eb0 [ 1494.804102][T12193] nsim_create+0xbd7/0x1140 [ 1494.808622][T12193] __nsim_dev_port_add+0x7f8/0xcd0 [ 1494.813749][T12193] nsim_dev_port_add_all+0x37/0xf0 [ 1494.818904][T12193] nsim_dev_reload_up+0x4dd/0x880 [ 1494.823985][T12193] devlink_reload+0x4b2/0x890 [ 1494.828692][T12193] devlink_nl_reload_doit+0xa9c/0xc80 [ 1494.834083][T12193] genl_family_rcv_msg_doit+0x233/0x340 [ 1494.839648][T12193] genl_rcv_msg+0x614/0x7a0 [ 1494.844170][T12193] netlink_rcv_skb+0x226/0x4a0 [ 1494.848969][T12193] genl_rcv+0x28/0x40 [ 1494.852970][T12193] netlink_unicast+0x7bb/0x940 [ 1494.857758][T12193] netlink_sendmsg+0x813/0xb40 [ 1494.862549][T12193] ____sys_sendmsg+0x9b9/0xa20 [ 1494.867328][T12193] ___sys_sendmsg+0x2a5/0x360 [ 1494.872027][T12193] __x64_sys_sendmsg+0x1b1/0x290 [ 1494.876980][T12193] do_syscall_64+0x174/0x580 [ 1494.881581][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.887481][T12193] [ 1494.889815][T12193] Second to last potentially related work creation: [ 1494.896404][T12193] kasan_save_stack+0x3e/0x60 [ 1494.901096][T12193] kasan_record_aux_stack+0xbd/0xd0 [ 1494.906303][T12193] insert_work+0x3d/0x330 [ 1494.910674][T12193] __queue_work+0xcb6/0xff0 [ 1494.915195][T12193] queue_work_on+0x106/0x1d0 [ 1494.919804][T12193] __udp_tunnel_nic_add_port+0xba9/0xd90 [ 1494.925458][T12193] udp_tunnel_push_rx_port+0x169/0x1f0 [ 1494.930931][T12193] vxlan_offload_rx_ports+0x129/0x1f0 [ 1494.936311][T12193] vxlan_netdevice_event+0x111/0x490 [ 1494.941613][T12193] notifier_call_chain+0x1a5/0x3d0 [ 1494.946755][T12193] call_netdevice_notifiers+0x90/0xd0 [ 1494.952144][T12193] udp_tunnel_nic_netdevice_event+0xe33/0x1850 [ 1494.958314][T12193] notifier_call_chain+0x1a5/0x3d0 [ 1494.963461][T12193] register_netdevice+0x18a4/0x1eb0 [ 1494.968674][T12193] nsim_create+0xbd7/0x1140 [ 1494.973200][T12193] __nsim_dev_port_add+0x7f8/0xcd0 [ 1494.978350][T12193] nsim_dev_port_add_all+0x37/0xf0 [ 1494.983481][T12193] nsim_dev_reload_up+0x4dd/0x880 [ 1494.988524][T12193] devlink_reload+0x4b2/0x890 [ 1494.993220][T12193] devlink_nl_reload_doit+0xa9c/0xc80 [ 1494.998616][T12193] genl_family_rcv_msg_doit+0x233/0x340 [ 1495.004195][T12193] genl_rcv_msg+0x614/0x7a0 [ 1495.008724][T12193] netlink_rcv_skb+0x226/0x4a0 [ 1495.013504][T12193] genl_rcv+0x28/0x40 [ 1495.017496][T12193] netlink_unicast+0x7bb/0x940 [ 1495.022266][T12193] netlink_sendmsg+0x813/0xb40 [ 1495.027042][T12193] ____sys_sendmsg+0x9b9/0xa20 [ 1495.031815][T12193] ___sys_sendmsg+0x2a5/0x360 [ 1495.036513][T12193] __x64_sys_sendmsg+0x1b1/0x290 [ 1495.041462][T12193] do_syscall_64+0x174/0x580 [ 1495.046064][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.051994][T12193] [ 1495.054325][T12193] The buggy address belongs to the object at ffff88807ce43200 [ 1495.054325][T12193] which belongs to the cache kmalloc-256 of size 256 [ 1495.068381][T12193] The buggy address is located 168 bytes inside of [ 1495.068381][T12193] freed 256-byte region [ffff88807ce43200, ffff88807ce43300) [ 1495.082181][T12193] [ 1495.084518][T12193] The buggy address belongs to the physical page: [ 1495.090964][T12193] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ce42 [ 1495.099808][T12193] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1495.108319][T12193] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1495.115882][T12193] page_type: f5(slab) [ 1495.119880][T12193] raw: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 1495.128484][T12193] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1495.137087][T12193] head: 00fff00000000040 ffff88813fe1bb40 dead000000000100 dead000000000122 [ 1495.145783][T12193] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1495.154476][T12193] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1495.163164][T12193] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1495.171841][T12193] page dumped because: kasan: bad access detected [ 1495.178263][T12193] page_owner tracks the page as allocated [ 1495.183990][T12193] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5633, tgid 5633 (syz-executor), ts 69668607828, free_ts 69623782689 [ 1495.205361][T12193] post_alloc_hook+0x22d/0x280 [ 1495.210148][T12193] get_page_from_freelist+0x24ae/0x2530 [ 1495.215709][T12193] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1495.221524][T12193] allocate_slab+0x74/0x5d0 [ 1495.226055][T12193] refill_objects+0x328/0x3c0 [ 1495.230740][T12193] __pcs_replace_empty_main+0x2e0/0x6b0 [ 1495.236290][T12193] __kmalloc_noprof+0x464/0x750 [ 1495.241175][T12193] fib_create_info+0x16fe/0x3170 [ 1495.246136][T12193] fib_table_insert+0xcb/0x1b10 [ 1495.251039][T12193] fib_magic+0x43b/0x530 [ 1495.255322][T12193] fib_add_ifaddr+0x139/0x5d0 [ 1495.260018][T12193] fib_inetaddr_event+0x12e/0x190 [ 1495.265086][T12193] notifier_call_chain+0x1a5/0x3d0 [ 1495.270240][T12193] blocking_notifier_call_chain+0x6a/0x90 [ 1495.276003][T12193] __inet_insert_ifa+0x9ef/0xbc0 [ 1495.280963][T12193] inet_rtm_newaddr+0x102d/0x19e0 [ 1495.286007][T12193] page last free pid 5798 tgid 5798 stack trace: [ 1495.292344][T12193] __free_frozen_pages+0xc0d/0xd20 [ 1495.297466][T12193] __mmdrop+0xf3/0x510 [ 1495.301544][T12193] exit_mm+0x221/0x2d0 [ 1495.305647][T12193] do_exit+0x6cd/0x2360 [ 1495.309810][T12193] do_group_exit+0x22d/0x2f0 [ 1495.314406][T12193] __x64_sys_exit_group+0x3f/0x40 [ 1495.319440][T12193] x64_sys_call+0x221a/0x2240 [ 1495.324126][T12193] do_syscall_64+0x174/0x580 [ 1495.328727][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.334637][T12193] [ 1495.336978][T12193] Memory state around the buggy address: [ 1495.342637][T12193] ffff88807ce43180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1495.350712][T12193] ffff88807ce43200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1495.358777][T12193] >ffff88807ce43280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1495.366841][T12193] ^ [ 1495.372221][T12193] ffff88807ce43300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1495.380290][T12193] ffff88807ce43380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1495.388438][T12193] ================================================================== [ 1495.399309][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1495.524520][T12193] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1495.531800][T12193] CPU: 1 UID: 0 PID: 12193 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 1495.541481][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1495.551559][T12193] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 1495.558967][T12193] Call Trace: [ 1495.562287][T12193] [ 1495.565236][T12193] vpanic+0x56c/0xa60 [ 1495.569279][T12193] ? __pfx_vpanic+0x10/0x10 [ 1495.573809][T12193] ? rcu_is_watching+0x15/0xb0 [ 1495.578596][T12193] panic+0xc5/0xd0 [ 1495.582338][T12193] ? __pfx_panic+0x10/0x10 [ 1495.586798][T12193] ? preempt_schedule_thunk+0x16/0x40 [ 1495.592201][T12193] ? __mutex_lock+0x154/0x1550 [ 1495.597005][T12193] ? preempt_schedule_thunk+0x16/0x40 [ 1495.602413][T12193] ? __mutex_lock+0x154/0x1550 [ 1495.607215][T12193] check_panic_on_warn+0x89/0xb0 [ 1495.612186][T12193] ? __mutex_lock+0x154/0x1550 [ 1495.616984][T12193] end_report+0x73/0x170 [ 1495.621254][T12193] ? __mutex_lock+0x154/0x1550 [ 1495.626050][T12193] kasan_report+0x128/0x150 [ 1495.630584][T12193] ? rcu_is_watching+0x15/0xb0 [ 1495.635401][T12193] ? __mutex_lock+0x154/0x1550 [ 1495.640211][T12193] __mutex_lock+0x154/0x1550 [ 1495.644854][T12193] ? __mutex_lock+0x5d4/0x1550 [ 1495.649683][T12193] ? udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 1495.655991][T12193] ? __pfx___mutex_lock+0x10/0x10 [ 1495.661039][T12193] ? do_raw_spin_lock+0x12b/0x2f0 [ 1495.666089][T12193] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1495.671493][T12193] ? pwq_dec_nr_in_flight+0xb93/0xf20 [ 1495.676902][T12193] ? process_scheduled_works+0xa20/0x14e0 [ 1495.682651][T12193] ? rcu_is_watching+0x15/0xb0 [ 1495.687440][T12193] ? process_scheduled_works+0xa20/0x14e0 [ 1495.693180][T12193] udp_tunnel_nic_device_sync_work+0x39/0xa20 [ 1495.699297][T12193] ? rcu_is_watching+0x15/0xb0 [ 1495.704094][T12193] ? process_scheduled_works+0xa20/0x14e0 [ 1495.709855][T12193] process_scheduled_works+0xa8e/0x14e0 [ 1495.715446][T12193] ? __pfx_process_scheduled_works+0x10/0x10 [ 1495.721457][T12193] ? do_raw_spin_lock+0x12b/0x2f0 [ 1495.726607][T12193] ? assign_work+0x3cf/0x5d0 [ 1495.731235][T12193] worker_thread+0xa47/0xfb0 [ 1495.735864][T12193] kthread+0x388/0x470 [ 1495.739955][T12193] ? __pfx_worker_thread+0x10/0x10 [ 1495.745093][T12193] ? __pfx_kthread+0x10/0x10 [ 1495.749704][T12193] ret_from_fork+0x514/0xb70 [ 1495.754329][T12193] ? __pfx_ret_from_fork+0x10/0x10 [ 1495.759476][T12193] ? __switch_to+0xc89/0x1420 [ 1495.764188][T12193] ? __pfx_kthread+0x10/0x10 [ 1495.768806][T12193] ret_from_fork_asm+0x1a/0x30 [ 1495.773640][T12193] [ 1495.785223][T12193] Kernel Offset: disabled [ 1495.789559][T12193] Rebooting in 86400 seconds..