last executing test programs: 13.523285239s ago: executing program 2 (id=1630): socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) unshare(0x20400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) 13.111361417s ago: executing program 2 (id=1633): socket(0x28, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0xe, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x40, 0x0}, 0x0, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x10, 0x8, 0xfb, 0x8001, {{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x29, 0x9, 0x8, 0x800, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x10, 0x0, 0xe7, 0x2}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000440)={0x0, 0x0, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x8000000000, 0x800000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="02000000", 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x10) bind$can_raw(r6, &(0x7f0000000040), 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x40, 0x7800, 0x7, 0x7, {{0xe, 0x4, 0x1, 0x1, 0x38, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, {[@generic={0x94, 0x2}, @end, @ssrr={0x89, 0xf, 0x3e, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x42}]}, @rr={0x7, 0xb, 0x37, [@multicast1, @local]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x306, @multicast}, 0x14, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'team0\x00'}) unshare(0x62040200) 6.885108519s ago: executing program 2 (id=1657): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.153952056s ago: executing program 2 (id=1652): syz_emit_ethernet(0x66, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @time_exceed={0xa1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '%kT', 0x0, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x3b}}}}}}}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r3, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) r4 = socket(0x22, 0x2, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0xd2, 0xb}}, 0x1c}}, 0x0) accept4$inet(r4, 0x0, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0x1a) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000000)=0x18, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000040)=@ethtool_cmd={0x45, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x87, 0x0, 0xfffffffd, 0x0, 0x1, 0xb8, 0x0, 0x80000048, [0x2, 0x89ff]}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x0) recvmmsg(r10, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/129, 0x81}, {&(0x7f00000002c0)=""/9, 0x9}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x42, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000e2000008000400cdff000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 5.798628266s ago: executing program 4 (id=1653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xaa24, 0x6, 0x6, 0xa, 0x3, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.442556173s ago: executing program 4 (id=1658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0103000000000000000000000000140000001100010010000000000000000000000a"], 0x3c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001001700"], 0x1c}}, 0x4140) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x3f, 0x890, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x4008800) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x10048095, 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r7}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000211}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0xc0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) splice(r0, 0x0, r5, 0x0, 0xc, 0x0) write(r4, 0x0, 0x0) tee(r3, r5, 0x8f5, 0x100000000000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a310000"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x60800) 5.21870388s ago: executing program 3 (id=1660): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r8, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f, 0x0, 0x0, 0x5}], "13d86558da0a7f6b"}}}}}}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.146100203s ago: executing program 1 (id=1661): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.087625799s ago: executing program 2 (id=1662): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14c, 0x14c, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xf45}}, @datasec={0x5, 0x2, 0x0, 0xf, 0x3, [{0x4, 0x7, 0xce7}, {0x3, 0x7, 0x3}], "8d0ccf"}, @volatile={0xb, 0x0, 0x0, 0x9, 0x4}, @enum64={0xa, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x3, 0x6, 0x189}, {0x9, 0xc075, 0x4}]}, @var={0xc, 0x0, 0x0, 0xe, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @datasec={0x9, 0x3, 0x0, 0xf, 0x1, [{0x1, 0x10000, 0x3}, {0x1, 0x2, 0x7}, {0x4, 0x1, 0x2}], "1b"}, @struct={0x7, 0x6, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x5, 0x5}, {0x9, 0x5, 0x7fffffff}, {0x8, 0x3, 0x81}, {0x6, 0x4, 0x8}, {0xb, 0x3, 0x1000}, {0x3, 0x2, 0xfff}]}, @enum64={0x8, 0x3, 0x0, 0x13, 0x1, 0xb, [{0x9, 0x5e, 0xc1}, {0x6, 0x77, 0x1000}, {0x7, 0x2, 0x10}]}, @const={0x9, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x10, 0x5f, 0x61]}}, &(0x7f0000000900)=""/138, 0x169, 0x8a, 0x1, 0x1, 0x10000}, 0x28) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg1\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', r1, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) unshare(0x62040200) shutdown(0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x16c2, @private2, 0x80000000}}, 0xfdf, 0x9}, &(0x7f0000000200)=0x90) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x22d, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040005}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfe3a) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000640)={0x48, r11, 0x109, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.004645272s ago: executing program 3 (id=1663): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.272177922s ago: executing program 4 (id=1664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.211805976s ago: executing program 1 (id=1665): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008000100"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.144994694s ago: executing program 3 (id=1666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xf3a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x8, @remote, 0x7}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 3.992489026s ago: executing program 3 (id=1667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30", &(0x7f0000000180)=""/9, 0x2}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) sendmsg(r4, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000006240)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x39, 0x2, '\xe2\x00\x00\x00D\x00t\x95\xf7OL\xd1C\v\x0f\x03\xde\xc9\xb8\xfc\x1e\xdbPMs\xaf\xa9\xc4\xb9\x97E\xa1>\x97\x8d\x88\xb5\xbe6y\x84\x1b\'\xb7A\xa8Kn\x00Pn\xd3\xd0'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) 2.955819611s ago: executing program 0 (id=1669): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), r0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='rxrpc_recvmsg\x00', r3}, 0x10) r4 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x100, 0x2, 0x10, {0x2, 0x4000, @empty}}, 0x24) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, 0x0, 0x1) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f00000006c0)={0x0, @adiantum, 0x0, @desc2}) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 1.973309314s ago: executing program 0 (id=1670): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x9d}], 0x1, 0x170, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x38) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000076000907020000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80050003000400000096130577ad33b7e38f08f99bc2f43f187dc48901ecdf54ae8cd9da112a612bebc4c0bae0a102810569112724e630a46e4aa18e7ac588944471030e22cf26a8dbea40208c6c0923a5dd83402750d346f4838eedb12d03dce19196f7149e6dac312f83cd83bf2ff1e7ca"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000030000000000002907800000000e004030004009078000000004542000400740002054b00a77f000001ac141435ef1846c710f0987eeabfba246e7f9846b3f6fc067c971eb9aca2f84a51fbf0c3c18e3ed1b3e33b4827284b610ca49c47bab8fc59c19d9f8ecde50351be5d8f817998cba4a2a002c5cb3e6ff94ae25086d6acf9a2050dc53d5f3c0972b84e1a87c3c1f23ecf0f80c8150d059716ec38b91c287272f097af0317e23eee0ea492174efaa2133df12b83ec56790ed276f090f0d67f0895f60d9a6c44640f323e5a2378dcb900e0f6df817146e9adbc3efdf77f6e"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) 1.690131325s ago: executing program 3 (id=1671): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) socket(0x2, 0x80805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x8, @remote, 0x7}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) tee(r1, r5, 0x8f5, 0x100000000000000) write$cgroup_type(r5, &(0x7f0000000180), 0x9) write(r3, 0x0, 0x0) 1.644312862s ago: executing program 1 (id=1672): socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002d86f12fa19f8bb5e2fd6c52b55280aedc76cf0e16313bc2f3b4f7ae21f4a03eeec2614223c9a2f27dcd4f2aa4d5f701519c2c6cbe1a9849355b32efd40ec5229969"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e20, @multicast2}, {0x1, @remote}, 0x2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 'bond0\x00'}) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f0000000740)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x80, 0x0}}], 0x1, 0x24004041) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}, @TCA_NETEM_RATE64={0xc, 0x8, 0x4526dd370cbcddac}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) ioctl$sock_rose_SIOCADDRT(r9, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r10, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r10, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.51483555s ago: executing program 0 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r8, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f, 0x0, 0x0, 0x5}], "13d86558da0a7f6b"}}}}}}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.513170565s ago: executing program 4 (id=1674): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x38, r6, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x81}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}]}, 0x38}}, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@routing={0x2f, 0x0, 0x0, 0x5}], "13d86558da0a7f6b"}}}}}}}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.399976504s ago: executing program 4 (id=1675): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.328632664s ago: executing program 0 (id=1676): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r7) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.004937907s ago: executing program 4 (id=1677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x46014}, 0x2404c880) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 765.432421ms ago: executing program 0 (id=1678): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x9}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000680)="fd5480f45dac6b50f5df6c74b62a0962f1efe698d360c4b49174f93d3dad10793aa4119f16a05b1f2c40fac30888127cae8dee59ee", &(0x7f00000000c0), 0x2, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x80000001, 0xe8, &(0x7f0000000900)=""/232, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x3, 0xf, 0x6, 0xd}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, r0], &(0x7f0000000ac0)=[{0x2, 0x5, 0x4, 0xb}, {0x3, 0x2, 0x10, 0x3}], 0x10, 0xffff}, 0x94) socket$netlink(0x10, 0x3, 0x12) r3 = socket(0x2b, 0x80801, 0x1) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x7, 0x10000006, 0x1000000004, 0x100000001]}, &(0x7f0000000080)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x4, [@const={0xd, 0x0, 0x0, 0xa, 0x4}, @struct={0xd, 0x6, 0x0, 0x4, 0x1, 0x10f, [{0x9, 0x1}, {0x8, 0x4, 0x7fff}, {0x1, 0x3, 0x6}, {0x7, 0x3, 0x2400}, {0xd, 0x2, 0x4}, {0x2, 0x4, 0xfffffff2}]}, @enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0xe, 0x22e14ac5}, {0x3, 0x7ff}, {0xf, 0x3}, {0x3, 0x27}, {0xd}, {0x7, 0x8}, {0x3, 0x3}, {0x10, 0x5}, {0x0, 0x1}]}, @volatile={0x6}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000400)=""/231, 0xe8, 0xe7, 0x1, 0x80000000, 0x10000}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00'], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000080)='/', 0x1}], 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="08000500060000000c001780040007"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) pipe(&(0x7f0000000740)) 705.310969ms ago: executing program 3 (id=1679): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002000, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x4000880) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) sendto$inet6(r2, 0x0, 0x0, 0x884, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @empty, 0x3}, 0x1c) setsockopt$inet6_group_source_req(r1, 0x29, 0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r9 = socket$unix(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000128bd7000ffdbdf25790000000c009900c8000000600000000400f400040009000400f400"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x800) 622.714693ms ago: executing program 1 (id=1680): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x38, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0xc0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x0, 0xffff, {{0x16, 0x4, 0x1, 0x21, 0x58, 0x65, 0x0, 0x6, 0x2f, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe9, [@multicast1, @private=0xa010102, @empty, @remote]}, @ssrr={0x89, 0x1f, 0x42, [@loopback, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @rand_addr=0x64010100, @private=0xa010101]}, @rr={0x7, 0xb, 0x29, [@broadcast, @local]}, @noop]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) 227.364419ms ago: executing program 0 (id=1681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000002060101000000000300000000000000050005000a001800050001000700000005000400030000000900020073797a310000000011000300686173683a6e"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) read(r4, &(0x7f00000000c0)=""/81, 0x51) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x1410, 0x4, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x1) setsockopt$inet_tcp_int(r1, 0x29, 0x8, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4a, 0x800000, 0x8, 0x5, 0x80, 0x81}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x118) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7ffb}]}, 0x2c}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) 200.629971ms ago: executing program 1 (id=1682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xaa24, 0x6, 0x6, 0xa, 0x3, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 128.072503ms ago: executing program 1 (id=1683): r0 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000300)) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x2341, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='rcu_utilization\x00', r2}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRESDEC=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 2 (id=1684): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0xffff, 0xffff}, {0x1, 0xffef}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x5, 0xf, 0xffff, 0x17f32da6}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r5, &(0x7f0000000500)="3aab39f4a67f8595d38cb18b21aab0c3ef43fccd3c005845deee3a7a7916c7b4887d182330018c563fcfd42fc492a2c78a38cfbb198a0054b765674c483f22c2a2d7066e1ce428841a3f2aeb7c5231121edaba30", &(0x7f0000000180)=""/9, 0x2}, 0x20) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) socket(0x2, 0x80805, 0x0) sendmsg(r4, &(0x7f0000006800)={0x0, 0x0, 0x0}, 0x810) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, &(0x7f0000006240)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x68, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x202b}, [@IFLA_GROUP={0x8}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x39, 0x2, '\xe2\x00\x00\x00D\x00t\x95\xf7OL\xd1C\v\x0f\x03\xde\xc9\xb8\xfc\x1e\xdbPMs\xaf\xa9\xc4\xb9\x97E\xa1>\x97\x8d\x88\xb5\xbe6y\x84\x1b\'\xb7A\xa8Kn\x00Pn\xd3\xd0'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048054}, 0x8000) kernel console output (not intermixed with test programs): tman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.830987][ T8832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.876781][ T8838] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 224.151323][ T8854] gretap1: entered allmulticast mode [ 224.184552][ T8854] bond1: (slave gretap1): making interface the new active one [ 224.195571][ T8854] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 224.232799][ T8855] tipc: Enabled bearer , priority 0 [ 224.249265][ T8856] syzkaller0: entered promiscuous mode [ 224.254766][ T8856] syzkaller0: entered allmulticast mode [ 224.276678][ T8870] syzkaller0: entered promiscuous mode [ 224.289248][ T8870] syzkaller0: entered allmulticast mode [ 224.340344][ T8848] lo speed is unknown, defaulting to 1000 [ 224.381819][ T8856] tipc: Resetting bearer [ 224.459642][ T8856] tipc: Disabling bearer [ 224.531806][ T8875] netlink: 'syz.1.716': attribute type 13 has an invalid length. [ 224.579307][ T8875] netlink: 'syz.1.716': attribute type 17 has an invalid length. [ 224.592430][ T8877] xfrm0: entered promiscuous mode [ 224.597486][ T8877] xfrm0: entered allmulticast mode [ 224.816896][ T8875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.827221][ T8875] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.081187][ T8885] lo speed is unknown, defaulting to 1000 [ 225.101148][ T8887] tipc: Enabled bearer , priority 0 [ 225.123693][ T8887] syzkaller0: entered promiscuous mode [ 225.129377][ T8887] syzkaller0: entered allmulticast mode [ 225.636749][ T8889] tipc: Resetting bearer [ 225.653374][ T8886] tipc: Resetting bearer [ 225.708946][ T8886] tipc: Disabling bearer [ 226.196915][ T8897] lo speed is unknown, defaulting to 1000 [ 226.298223][ T8821] net_ratelimit: 14 callbacks suppressed [ 226.298244][ T8821] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 226.509180][ T8815] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 226.767236][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'. [ 226.824027][ T8912] vlan3: entered promiscuous mode [ 226.835004][ T8912] bond0: entered promiscuous mode [ 226.846425][ T8912] bond_slave_0: entered promiscuous mode [ 226.855578][ T8912] bond_slave_1: entered promiscuous mode [ 226.861783][ T8912] bridge0: entered promiscuous mode [ 227.030359][ T8910] lo speed is unknown, defaulting to 1000 [ 227.039329][ T3459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 227.124548][ T8920] bridge_slave_1: entered promiscuous mode [ 227.239526][ T3459] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 227.539133][ T8815] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 227.615848][ T8927] netlink: 'syz.3.728': attribute type 13 has an invalid length. [ 227.909333][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.916892][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.032839][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.048665][ T8927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.148250][ T8927] veth1_vlan: left allmulticast mode [ 228.430856][ T8937] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.532037][ T8813] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.541751][ T8813] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.640112][ T8937] netdevsim netdevsim4 netdevsim2 (unregistering): left allmulticast mode [ 228.678180][ T8937] netdevsim netdevsim4 netdevsim2 (unregistering): left promiscuous mode [ 228.688101][ T8937] bridge0: port 3(netdevsim2) entered disabled state [ 228.735791][ T8937] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.768440][ T8813] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.787690][ T8813] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.817364][ T8937] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.024786][ T8937] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.187707][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 229.362324][ T8958] tipc: Enabled bearer , priority 0 [ 229.371985][ T8815] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.388277][ T8958] syzkaller0: entered promiscuous mode [ 229.404359][ T8958] syzkaller0: entered allmulticast mode [ 229.443658][ T8815] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.481206][ T8958] tipc: Resetting bearer [ 229.549873][ T8957] tipc: Resetting bearer [ 229.622063][ T8957] tipc: Disabling bearer [ 229.705046][ T8965] tipc: Enabled bearer , priority 0 [ 229.741084][ T3459] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.818260][ T3459] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.962074][ T8962] tipc: Disabling bearer [ 230.041594][ T8967] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 230.214223][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 230.223681][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 231.246921][ T9000] Set syz1 is full, maxelem 6117 reached [ 231.401160][ T9004] tipc: Enabled bearer , priority 0 [ 231.413532][ T9004] syzkaller0: entered promiscuous mode [ 231.433992][ T9004] syzkaller0: entered allmulticast mode [ 231.565501][ T9003] tipc: Resetting bearer [ 231.681497][ T9003] tipc: Disabling bearer [ 232.430671][ T9028] bond4: Removing last arp target with arp_interval on [ 232.709714][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 232.752060][ T9034] macvtap1: entered promiscuous mode [ 232.757423][ T9034] team0: entered promiscuous mode [ 232.786030][ T9034] macvtap1: entered allmulticast mode [ 232.792900][ T9034] team0: entered allmulticast mode [ 232.858799][ T9034] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 232.923919][ T9036] team0: left allmulticast mode [ 232.941761][ T9036] team0: left promiscuous mode [ 233.255826][ T9041] netlink: 'syz.2.762': attribute type 10 has an invalid length. [ 233.265433][ T9041] bond0: (slave wlan1): Opening slave failed [ 233.325633][ T9039] lo speed is unknown, defaulting to 1000 [ 233.375839][ T9044] geneve4: entered promiscuous mode [ 233.469436][ T8815] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.511164][ T8815] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.557208][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.764'. [ 233.610376][ T8815] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.628565][ T8815] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.989033][ T9049] lo speed is unknown, defaulting to 1000 [ 234.031805][ T9056] netlink: 156 bytes leftover after parsing attributes in process `syz.1.766'. [ 234.443729][ T9061] tipc: Enabled bearer , priority 0 [ 234.481171][ T9061] tipc: Resetting bearer [ 234.506114][ T9060] tipc: Disabling bearer [ 234.586976][ T9063] tipc: Enabled bearer , priority 0 [ 234.616000][ T9063] tipc: Resetting bearer [ 234.637153][ T9062] tipc: Disabling bearer [ 235.590610][ T9078] tipc: New replicast peer: 255.255.255.255 [ 235.601193][ T9078] tipc: Enabled bearer , priority 10 [ 235.970598][ T9084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.773'. [ 236.055005][ T9085] netlink: 'syz.1.773': attribute type 1 has an invalid length. [ 236.520133][ T9088] lo speed is unknown, defaulting to 1000 [ 236.649455][ T9097] netlink: 'syz.4.776': attribute type 13 has an invalid length. [ 236.695734][ T9097] netlink: 'syz.4.776': attribute type 17 has an invalid length. [ 236.901267][ T9097] bridge0: port 4(syz_tun) entered blocking state [ 236.907883][ T9097] bridge0: port 4(syz_tun) entered forwarding state [ 236.923686][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.934458][ T9097] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.954101][ T9097] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.974505][ T8942] syz1: Port: 1 Link ACTIVE [ 237.513741][ T9113] tipc: Enabled bearer , priority 0 [ 237.535686][ T9113] tipc: Resetting bearer [ 237.542055][ T9106] lo speed is unknown, defaulting to 1000 [ 237.573864][ T9111] tipc: Disabling bearer [ 237.844906][ T9121] netlink: 'syz.3.781': attribute type 12 has an invalid length. [ 238.484345][ T9129] tipc: Enabled bearer , priority 0 [ 238.557848][ T9126] syzkaller0: entered promiscuous mode [ 238.565212][ T9126] syzkaller0: entered allmulticast mode [ 238.610869][ T9125] tipc: Resetting bearer [ 238.682605][ T9125] tipc: Disabling bearer [ 238.864331][ T9134] tipc: Enabled bearer , priority 0 [ 238.913674][ T9134] tipc: Resetting bearer [ 238.949592][ T9133] tipc: Disabling bearer [ 239.083322][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.3.789'. [ 239.248601][ T9144] netlink: 56 bytes leftover after parsing attributes in process `syz.4.788'. [ 239.269559][ T9152] tipc: Enabled bearer , priority 0 [ 239.276530][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'. [ 239.287328][ T9152] syzkaller0: entered promiscuous mode [ 239.293581][ T9152] syzkaller0: entered allmulticast mode [ 239.322461][ T9152] tipc: Resetting bearer [ 239.343186][ T9151] tipc: Resetting bearer [ 239.388717][ T9151] tipc: Disabling bearer [ 239.510020][ T9156] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 239.547543][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 239.563987][ T9156] 8021q: adding VLAN 0 to HW filter on device bond5 [ 239.591957][ T9154] netlink: 'syz.1.792': attribute type 13 has an invalid length. [ 239.687767][ T9156] bond5 (unregistering): Released all slaves [ 239.965988][ T9171] tipc: Enabled bearer , priority 0 [ 239.973661][ T9171] syzkaller0: entered promiscuous mode [ 239.985585][ T9171] syzkaller0: entered allmulticast mode [ 240.020196][ T9170] tipc: Resetting bearer [ 240.036923][ T9170] tipc: Disabling bearer [ 240.123413][ T9177] tipc: Enabled bearer , priority 0 [ 240.136394][ T9177] syzkaller0: entered promiscuous mode [ 240.144159][ T9177] syzkaller0: entered allmulticast mode [ 240.159549][ T9177] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 240.259763][ T9184] xfrm0: left promiscuous mode [ 240.264574][ T9184] xfrm0: left allmulticast mode [ 240.276085][ T9184] geneve3: left allmulticast mode [ 240.282494][ T9184] vlan2: left promiscuous mode [ 240.287276][ T9184] bond3: left promiscuous mode [ 240.295588][ T9184] gretap1: left promiscuous mode [ 240.306689][ T9184] vlan2: left allmulticast mode [ 240.317012][ T9184] bond3: left allmulticast mode [ 240.322217][ T9184] gretap1: left allmulticast mode [ 240.328516][ T9184] bond4: left promiscuous mode [ 240.333371][ T9184] bond4: left allmulticast mode [ 240.341492][ T9184] gretap2: left promiscuous mode [ 240.348985][ T9184] bond6: left promiscuous mode [ 240.353948][ T9184] bond6: left allmulticast mode [ 240.381008][ T9184] macvtap1: left promiscuous mode [ 240.396269][ T9184] macvtap1: left allmulticast mode [ 240.406763][ T9184] geneve4: left promiscuous mode [ 240.481411][ T9189] tipc: Resetting bearer [ 240.493033][ T8824] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.510099][ T8824] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.547506][ T9176] tipc: Resetting bearer [ 240.605786][ T9176] tipc: Disabling bearer [ 240.631253][ T8824] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.641999][ T9193] tipc: New replicast peer: 255.255.255.255 [ 240.655659][ T9193] tipc: Enabled bearer , priority 10 [ 240.684410][ T8824] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.736757][ T9195] lo speed is unknown, defaulting to 1000 [ 240.984910][ T9205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'. [ 241.184083][ T9207] netlink: 'syz.1.805': attribute type 1 has an invalid length. [ 241.294504][ T9210] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 241.621496][ T9221] netlink: 'syz.4.810': attribute type 10 has an invalid length. [ 241.681915][ T9221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.695983][ T9227] netlink: 'syz.4.810': attribute type 10 has an invalid length. [ 241.712901][ T9227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.810'. [ 241.713704][ T9221] batadv0: entered promiscuous mode [ 241.728984][ T9221] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 241.761473][ T9227] batadv0: entered allmulticast mode [ 241.780834][ T8942] tipc: Node number set to 3752976237 [ 241.792704][ T9227] bond0: (slave batadv0): Releasing backup interface [ 241.821186][ T9227] bridge0: port 3(batadv0) entered blocking state [ 241.853242][ T9227] bridge0: port 3(batadv0) entered disabled state [ 241.957355][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.812'. [ 241.984484][ T9218] lo speed is unknown, defaulting to 1000 [ 242.005032][ T9233] batadv0: entered promiscuous mode [ 242.023450][ T9233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 242.053339][ T9233] batadv0: left promiscuous mode [ 242.129645][ T8824] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 242.139221][ T8824] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 242.587763][ T9238] syzkaller0: entered promiscuous mode [ 242.688144][ T9238] syzkaller0: entered allmulticast mode [ 244.329109][ T9244] lo speed is unknown, defaulting to 1000 [ 244.433017][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.817'. [ 244.714229][ T9259] tipc: Enabled bearer , priority 0 [ 244.759580][ T9259] syzkaller0: entered promiscuous mode [ 244.765075][ T9259] syzkaller0: entered allmulticast mode [ 244.858773][ T9259] tipc: Resetting bearer [ 244.868324][ T9257] tipc: Resetting bearer [ 244.894373][ T9257] tipc: Disabling bearer [ 245.188648][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 246.560013][ T9287] tipc: Enabled bearer , priority 0 [ 246.590765][ T9287] syzkaller0: entered promiscuous mode [ 246.596263][ T9287] syzkaller0: entered allmulticast mode [ 246.684460][ T9289] netlink: 'syz.0.826': attribute type 16 has an invalid length. [ 246.692322][ T9289] netlink: 'syz.0.826': attribute type 17 has an invalid length. [ 246.705201][ T9287] tipc: Resetting bearer [ 246.748721][ T9286] tipc: Resetting bearer [ 246.826065][ T9286] tipc: Disabling bearer [ 246.847038][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.826'. [ 246.925313][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 246.986186][ T9293] hsr_slave_0: left promiscuous mode [ 247.006901][ T9293] hsr_slave_1: left promiscuous mode [ 247.165462][ T9302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.830'. [ 247.225853][ T9307] Bluetooth: MGMT ver 1.23 [ 247.250053][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.831'. [ 247.341689][ T9311] syzkaller0: entered promiscuous mode [ 247.362461][ T9311] syzkaller0: entered allmulticast mode [ 247.385307][ T9311] tipc: Enabled bearer , priority 0 [ 247.439554][ T9309] tipc: Resetting bearer [ 247.468367][ T9309] tipc: Disabling bearer [ 247.622542][ T9318] netlink: 'syz.1.836': attribute type 39 has an invalid length. [ 248.169273][ T9339] dvmrp0: entered allmulticast mode [ 248.224520][ T9341] vlan2: entered promiscuous mode [ 249.937876][ T9382] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 249.973045][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 250.255544][ T9389] netlink: 136 bytes leftover after parsing attributes in process `syz.1.857'. [ 250.379775][ T9396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 250.442106][ T9396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.460053][ T9396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.633370][ T9404] lo speed is unknown, defaulting to 1000 [ 250.979702][ T9411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.863'. [ 251.028009][ T9411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.863'. [ 251.058335][ T9411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.863'. [ 251.067438][ T9411] netlink: 36 bytes leftover after parsing attributes in process `syz.4.863'. [ 251.528102][ T9437] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 251.656311][ T9437] netlink: 224 bytes leftover after parsing attributes in process `syz.0.868'. [ 251.827248][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.870'. [ 252.209263][ T9426] lo speed is unknown, defaulting to 1000 [ 252.762401][ T9474] tipc: Enabled bearer , priority 0 [ 252.782850][ T9470] lo speed is unknown, defaulting to 1000 [ 252.789612][ T9474] tipc: Resetting bearer [ 252.815249][ T9473] tipc: Disabling bearer [ 252.980717][ T9468] macvtap0: entered allmulticast mode [ 252.986225][ T9468] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 253.002143][ T9468] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 253.161726][ T9464] lo speed is unknown, defaulting to 1000 [ 253.179155][ T9482] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 253.583767][ T9487] netlink: 'syz.4.877': attribute type 2 has an invalid length. [ 253.602922][ T9487] netlink: 'syz.4.877': attribute type 4 has an invalid length. [ 253.619694][ T9487] netlink: 'syz.4.877': attribute type 8 has an invalid length. [ 253.627563][ T9487] netlink: 44 bytes leftover after parsing attributes in process `syz.4.877'. [ 253.666362][ T9487] netlink: 'syz.4.877': attribute type 1 has an invalid length. [ 253.890054][ T9487] 8021q: adding VLAN 0 to HW filter on device bond3 [ 254.256540][ T9494] lo speed is unknown, defaulting to 1000 [ 255.024660][ T9502] netlink: 'syz.3.880': attribute type 4 has an invalid length. [ 255.130822][ T9499] netlink: 'syz.3.880': attribute type 4 has an invalid length. [ 255.166742][ T9506] lo speed is unknown, defaulting to 1000 [ 255.703583][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.077446][ T9518] tipc: Enabled bearer , priority 0 [ 257.119687][ T9515] tipc: Resetting bearer [ 257.144955][ T9514] tipc: Disabling bearer [ 257.430425][ T9532] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 257.483863][ T9534] tipc: Enabled bearer , priority 0 [ 257.504057][ T9534] syzkaller0: entered promiscuous mode [ 257.511238][ T9534] syzkaller0: entered allmulticast mode [ 257.536017][ T9536] netlink: 'syz.3.890': attribute type 16 has an invalid length. [ 257.544779][ T9536] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.890'. [ 257.570125][ T9534] tipc: Resetting bearer [ 257.607914][ T9533] tipc: Resetting bearer [ 257.633052][ T9533] tipc: Disabling bearer [ 258.273353][ T9538] macvtap1: left promiscuous mode [ 258.280502][ T9538] gretap2: left promiscuous mode [ 258.287420][ T9538] batman_adv: batadv0: Interface deactivated: macvlan3 [ 258.348176][ T9538] bond4: left promiscuous mode [ 258.358856][ T5833] lo speed is unknown, defaulting to 1000 [ 258.364872][ T5833] syz0: Port: 1 Link DOWN [ 258.383704][ T3484] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.403259][ T9541] lo speed is unknown, defaulting to 1000 [ 258.411310][ T5833] lo speed is unknown, defaulting to 1000 [ 258.418098][ T3484] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.446866][ T3484] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.486377][ T3484] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.029666][ T9551] lo speed is unknown, defaulting to 1000 [ 259.251769][ T9566] macvtap2: entered allmulticast mode [ 259.277614][ T9566] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 259.303786][ T9566] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 259.432406][ T9591] tipc: Enabled bearer , priority 0 [ 259.466139][ T9591] tipc: Resetting bearer [ 259.486933][ T9590] tipc: Disabling bearer [ 259.681741][ T9575] lo speed is unknown, defaulting to 1000 [ 260.909551][ T9599] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 260.977305][ T9604] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 260.999615][ T9601] bridge_slave_1: left promiscuous mode [ 261.005790][ T9601] bond2: left promiscuous mode [ 261.015737][ T9601] bond3: left promiscuous mode [ 261.027114][ T9601] macsec1: left promiscuous mode [ 261.189873][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 261.558250][ T9620] netlink: 'syz.1.904': attribute type 1 has an invalid length. [ 261.877819][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.1.906'. [ 262.488625][ T9659] lo speed is unknown, defaulting to 1000 [ 262.526147][ T9662] netlink: 'syz.3.912': attribute type 1 has an invalid length. [ 262.534641][ T9662] netlink: 224 bytes leftover after parsing attributes in process `syz.3.912'. [ 263.009006][ T9668] nbd2: detected capacity change from 0 to 63 [ 263.016033][ T9671] block nbd2: NBD_DISCONNECT [ 263.022606][ T9673] netlink: 'syz.4.916': attribute type 10 has an invalid length. [ 263.032395][ T9671] block nbd2: Disconnected due to user request. [ 263.039357][ T9671] block nbd2: shutting down sockets [ 263.074295][ T9675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.916'. [ 263.113495][ T9668] bond5: entered promiscuous mode [ 263.128107][ T9668] bond5: entered allmulticast mode [ 263.134591][ T9668] 8021q: adding VLAN 0 to HW filter on device bond5 [ 263.150483][ T9673] bridge0: port 5(macsec0) entered blocking state [ 263.157181][ T9673] bridge0: port 5(macsec0) entered disabled state [ 263.164418][ T9673] macsec0: entered allmulticast mode [ 263.170329][ T9673] veth1_macvtap: entered allmulticast mode [ 263.179055][ T9673] macsec0: entered promiscuous mode [ 263.266448][ T9678] netlink: 'syz.2.917': attribute type 1 has an invalid length. [ 263.438423][ T9683] nbd3: detected capacity change from 0 to 63 [ 263.446476][ T9688] block nbd3: NBD_DISCONNECT [ 263.463123][ T9688] block nbd3: Disconnected due to user request. [ 263.470667][ T9688] block nbd3: shutting down sockets [ 263.543368][ T9689] netlink: 'syz.0.921': attribute type 10 has an invalid length. [ 263.546740][ T9683] bond4: entered promiscuous mode [ 263.556736][ T9683] bond4: entered allmulticast mode [ 263.563445][ T9683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.576889][ T9689] team0: Port device dummy0 added [ 263.703094][ T9685] lo speed is unknown, defaulting to 1000 [ 263.900410][ T9695] gretap1: left promiscuous mode [ 263.958286][ T9695] bond4: left promiscuous mode [ 264.845551][ T9713] lo speed is unknown, defaulting to 1000 [ 265.019619][ T9722] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 265.708769][ T9733] nbd4: detected capacity change from 0 to 63 [ 265.735488][ T9734] block nbd4: NBD_DISCONNECT [ 265.745354][ T9735] bond4: entered promiscuous mode [ 265.758780][ T9735] bond4: entered allmulticast mode [ 265.764511][ T9735] 8021q: adding VLAN 0 to HW filter on device bond4 [ 265.779430][ T9734] block nbd4: Disconnected due to user request. [ 265.785767][ T9734] block nbd4: shutting down sockets [ 266.338899][ T9745] nbd3: detected capacity change from 0 to 63 [ 266.349197][ T9748] block nbd3: NBD_DISCONNECT [ 266.357900][ T9749] bond5: entered promiscuous mode [ 266.364223][ T9748] block nbd3: Disconnected due to user request. [ 266.371264][ T9749] bond5: entered allmulticast mode [ 266.376958][ T9749] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.388352][ T9748] block nbd3: shutting down sockets [ 266.419343][ T9741] lo speed is unknown, defaulting to 1000 [ 267.304601][ T9764] bridge0: port 1(syz_tun) entered blocking state [ 267.312478][ T9764] bridge0: port 1(syz_tun) entered disabled state [ 267.326663][ T9764] syz_tun: entered allmulticast mode [ 267.337886][ T9764] syz_tun: entered promiscuous mode [ 267.405108][ T9758] rdma_rxe: rxe_newlink: failed to add syz_tun [ 267.596549][ T9773] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 267.616992][ T9775] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 267.868106][ T9783] nbd0: detected capacity change from 0 to 63 [ 267.876206][ T9784] block nbd0: NBD_DISCONNECT [ 267.887078][ T9784] block nbd0: Disconnected due to user request. [ 267.904444][ T9784] block nbd0: shutting down sockets [ 268.089531][ T9783] bond6: entered promiscuous mode [ 268.109867][ T9783] bond6: entered allmulticast mode [ 268.124346][ T9783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 268.419580][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 268.435664][ T9795] syz_tun: entered promiscuous mode [ 268.465932][ T9795] syz_tun: left promiscuous mode [ 268.762867][ T9808] tipc: Enabled bearer , priority 0 [ 268.776427][ T9808] syzkaller0: entered promiscuous mode [ 268.783452][ T9808] syzkaller0: entered allmulticast mode [ 268.816107][ T9808] tipc: Resetting bearer [ 268.830382][ T9807] tipc: Resetting bearer [ 268.856077][ T9807] tipc: Disabling bearer [ 269.059009][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 269.059112][ T5150] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 269.272771][ T9821] lo speed is unknown, defaulting to 1000 [ 269.368246][ T9819] nbd4: detected capacity change from 0 to 63 [ 269.385248][ T9823] block nbd4: NBD_DISCONNECT [ 269.417700][ T9823] block nbd4: Disconnected due to user request. [ 269.424687][ T9823] block nbd4: shutting down sockets [ 269.461479][ T9827] bond5: entered promiscuous mode [ 269.470020][ T9827] bond5: entered allmulticast mode [ 269.486054][ T9827] 8021q: adding VLAN 0 to HW filter on device bond5 [ 269.672676][ T9836] syzkaller1: entered promiscuous mode [ 269.688796][ T9836] syzkaller1: entered allmulticast mode [ 269.722919][ T9838] netlink: 'syz.0.959': attribute type 4 has an invalid length. [ 270.427549][ T9854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.450868][ T9854] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.477631][ T9854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.519294][ T8942] lo speed is unknown, defaulting to 1000 [ 270.531128][ T8942] syz0: Port: 1 Link ACTIVE [ 270.559824][ T8942] lo speed is unknown, defaulting to 1000 [ 270.844858][ T9846] siw: device registration error -23 [ 270.873993][ T9850] lo speed is unknown, defaulting to 1000 [ 270.887452][ T9865] syz_tun: left allmulticast mode [ 270.893604][ T9865] syz_tun: left promiscuous mode [ 270.899423][ T9865] bridge0: port 4(syz_tun) entered disabled state [ 270.929159][ T9866] ieee802154 phy1 wpan1: encryption failed: -22 [ 270.955094][ T9865] bridge0: port 3(batadv0) entered disabled state [ 270.969695][ T9865] bridge_slave_0: left allmulticast mode [ 270.975498][ T9865] bridge_slave_0: left promiscuous mode [ 270.983420][ T9865] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.993837][ T9865] bridge_slave_1: left allmulticast mode [ 271.000139][ T9865] bridge_slave_1: left promiscuous mode [ 271.005995][ T9865] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.019878][ T9865] bond0: (slave bond_slave_0): Releasing backup interface [ 271.031470][ T9865] bond0: (slave bond_slave_1): Releasing backup interface [ 271.043991][ T9865] team0: Port device team_slave_1 removed [ 271.052192][ T9865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.064216][ T9865] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.072419][ T9865] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 271.120070][ T9866] team0: Mode changed to "loadbalance" [ 271.125899][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.968'. [ 271.339574][ T9874] nbd2: detected capacity change from 0 to 63 [ 271.350206][ T9876] lo speed is unknown, defaulting to 1000 [ 271.356369][ T9877] block nbd2: NBD_DISCONNECT [ 271.368170][ T9877] block nbd2: Disconnected due to user request. [ 271.438724][ T9877] block nbd2: shutting down sockets [ 271.495224][ T9874] bond6: entered promiscuous mode [ 271.518003][ T9874] bond6: entered allmulticast mode [ 271.528987][ T9874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 271.716929][ T9885] netlink: 'syz.2.972': attribute type 1 has an invalid length. [ 271.735802][ T9885] netlink: 224 bytes leftover after parsing attributes in process `syz.2.972'. [ 272.540348][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 272.558250][ T9894] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 272.580426][ T9894] bond7 (unregistering): Released all slaves [ 273.432535][ T9903] netlink: 79 bytes leftover after parsing attributes in process `syz.4.976'. [ 273.859409][ T9914] netlink: 136 bytes leftover after parsing attributes in process `syz.3.979'. [ 274.664121][ T9890] Set syz1 is full, maxelem 65536 reached [ 274.865952][ T9934] lo speed is unknown, defaulting to 1000 [ 274.889103][ T9936] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 274.915582][ T9936] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 274.932115][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.0.983'. [ 274.963290][ T9938] netlink: 56 bytes leftover after parsing attributes in process `syz.3.985'. [ 275.112305][ T9938] bond1: (slave macvlan1): Releasing active interface [ 275.271982][ T9940] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 275.289110][ T9940] tipc: Enabled bearer , priority 0 [ 275.296499][ T9940] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 275.304613][ T9940] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 275.314410][ T9940] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 275.325706][ T9940] tipc: Resetting bearer [ 275.897373][ T9960] netlink: 'syz.4.992': attribute type 13 has an invalid length. [ 276.171843][ T9960] veth1_macvtap: left allmulticast mode [ 276.267724][ T9957] Set syz1 is full, maxelem 6117 reached [ 276.291676][ T8751] syz1: Port: 1 Link DOWN [ 276.309922][ T8942] tipc: Node number set to 3026125966 [ 276.420526][ T8819] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.430694][ T8819] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.443153][ T8819] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.494578][ T8819] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.880298][ T9978] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 276.958160][ T9974] lo speed is unknown, defaulting to 1000 [ 277.100649][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 277.219935][ T9983] trusted_key: syz.2.999 sent an empty control message without MSG_MORE. [ 277.245235][ T9986] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 277.273156][ T9986] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 277.312457][ T9986] netlink: 224 bytes leftover after parsing attributes in process `syz.4.995'. [ 277.434295][ T9979] lo speed is unknown, defaulting to 1000 [ 277.727859][ T9991] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 277.736992][ T9991] netlink: 'syz.4.1001': attribute type 1 has an invalid length. [ 277.749773][ T9991] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1001'. [ 277.895336][ T9972] lo speed is unknown, defaulting to 1000 [ 278.040895][ T9999] netlink: 'syz.4.1002': attribute type 16 has an invalid length. [ 278.058741][ T9999] netlink: 'syz.4.1002': attribute type 17 has an invalid length. [ 278.148798][ T9998] 8021q: adding VLAN 0 to HW filter on device bond8 [ 278.191365][T10002] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 278.230776][T10002] bond8: (slave macvlan2): Enslaving as a backup interface with a down link [ 278.342642][ T9999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.351872][ T9999] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.384719][ T9999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.408232][T10004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 278.538576][ T8751] syz1: Port: 1 Link ACTIVE [ 279.013707][T10026] netlink: 'syz.3.1009': attribute type 4 has an invalid length. [ 279.172610][T10029] wg1: entered promiscuous mode [ 279.177586][T10029] wg1: entered allmulticast mode [ 279.406896][T10033] wg1: entered promiscuous mode [ 279.412079][T10033] wg1: entered allmulticast mode [ 280.229771][T10037] bond1: (slave gretap1): Releasing active interface [ 280.261561][T10037] gretap1: left allmulticast mode [ 280.319111][T10037] macvlan2: left allmulticast mode [ 280.337136][T10037] macvlan2: left promiscuous mode [ 280.346453][T10037] bridge0: port 1(macvlan2) entered disabled state [ 280.385808][T10037] bond2: (slave gretap2): Releasing active interface [ 280.409437][T10037] batman_adv: batadv0: Removing interface: macvlan3 [ 280.426121][T10037] bond3: (slave geneve2): Releasing active interface [ 280.451500][T10040] team0: Mode changed to "broadcast" [ 280.578712][T10052] netlink: 'syz.3.1016': attribute type 16 has an invalid length. [ 280.598450][T10052] netlink: 'syz.3.1016': attribute type 17 has an invalid length. [ 281.003834][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1017'. [ 281.110637][T10056] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1017'. [ 281.646768][T10058] tipc: Enabling of bearer rejected, already enabled [ 281.671986][T10060] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 281.715830][T10060] bond6: entered promiscuous mode [ 281.722051][T10060] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.775632][T10069] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1018'. [ 281.804845][T10067] 8021q: adding VLAN 0 to HW filter on device bond6 [ 281.812198][T10067] bond6: (slave gre2): The slave device specified does not support setting the MAC address [ 281.823276][T10067] bond6: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 281.836978][T10067] bond6: (slave gre2): making interface the new active one [ 281.844439][T10067] gre2: entered promiscuous mode [ 281.861719][T10067] bond6: (slave gre2): Enslaving as an active interface with an up link [ 282.557813][T10083] lo speed is unknown, defaulting to 1000 [ 282.896682][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 283.499927][T10100] dvmrp8: entered allmulticast mode [ 283.572120][T10100] lo speed is unknown, defaulting to 1000 [ 283.592728][T10102] bridge0: failed insert local address into bridge forwarding table [ 284.429527][T10106] tipc: Enabling of bearer rejected, failed to enable media [ 284.468229][T10111] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1030'. [ 284.928328][T10099] dvmrp8: left allmulticast mode [ 285.480621][T10121] lo speed is unknown, defaulting to 1000 [ 286.583531][T10134] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1035'. [ 286.730895][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 286.806245][T10140] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 287.039348][T10144] dvmrp8: entered allmulticast mode [ 287.081255][T10146] IPVS: Error connecting to the multicast addr [ 287.440602][T10144] lo speed is unknown, defaulting to 1000 [ 288.363686][T10150] lo speed is unknown, defaulting to 1000 [ 289.085770][T10165] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 289.167082][T10165] bond9 (unregistering): Released all slaves [ 289.543056][T10177] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 289.551725][T10177] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1046'. [ 289.572370][T10176] lo: Caught tx_queue_len zero misconfig [ 289.658827][T10179] netlink: 'syz.2.1048': attribute type 4 has an invalid length. [ 289.684154][ T5919] lo speed is unknown, defaulting to 1000 [ 289.691450][ T5919] syz0: Port: 1 Link DOWN [ 289.696065][ T5919] lo speed is unknown, defaulting to 1000 [ 290.351230][T10189] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1050'. [ 290.432490][T10192] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 290.441837][T10189] batadv1: entered promiscuous mode [ 290.447203][T10192] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 290.456143][T10189] batadv1: entered allmulticast mode [ 290.461988][T10192] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1051'. [ 290.804466][T10196] netlink: 'syz.0.1054': attribute type 10 has an invalid length. [ 290.980768][T10196] bond0: (slave wlan1): Opening slave failed [ 291.166315][T10199] lo speed is unknown, defaulting to 1000 [ 291.294509][T10216] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 291.418966][T10216] bond0: (slave wlan1): Opening slave failed [ 291.721998][T10219] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1058'. [ 291.742785][T10205] lo speed is unknown, defaulting to 1000 [ 292.211749][T10207] lo speed is unknown, defaulting to 1000 [ 292.414281][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1061'. [ 292.620632][T10238] netlink: 'syz.2.1063': attribute type 16 has an invalid length. [ 292.648011][T10238] netlink: 'syz.2.1063': attribute type 17 has an invalid length. [ 292.764773][T10224] lo speed is unknown, defaulting to 1000 [ 293.632162][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1066'. [ 293.659743][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1066'. [ 293.701304][T10257] team0: entered promiscuous mode [ 293.735073][T10257] team0: left promiscuous mode [ 294.276586][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 294.461891][T10270] dvmrp0: left allmulticast mode [ 294.479240][T10270] dvmrp8: left allmulticast mode [ 295.418402][T10275] nbd2: detected capacity change from 0 to 63 [ 295.424884][T10280] block nbd2: NBD_DISCONNECT [ 295.439119][T10276] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1072'. [ 295.450687][T10280] block nbd2: Disconnected due to user request. [ 295.456941][T10280] block nbd2: shutting down sockets [ 295.540427][T10275] bond7: entered promiscuous mode [ 295.545562][T10275] bond7: entered allmulticast mode [ 295.551930][T10275] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.902259][T10281] lo speed is unknown, defaulting to 1000 [ 296.212286][T10289] pim6reg1: entered promiscuous mode [ 296.245939][T10289] pim6reg1: entered allmulticast mode [ 296.414573][ T8819] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 296.432031][ T8819] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 296.458977][ T8819] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 296.469162][ T8819] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 296.792210][T10288] lo speed is unknown, defaulting to 1000 [ 297.245651][T10298] lo speed is unknown, defaulting to 1000 [ 297.775446][T10306] lo speed is unknown, defaulting to 1000 [ 297.972321][T10310] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 298.322642][T10313] bond8 (unregistering): Released all slaves [ 298.527603][T10316] bridge0: failed insert local address into bridge forwarding table [ 298.543714][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1079'. [ 298.911899][T10323] tipc: Enabled bearer , priority 0 [ 298.927128][T10323] tipc: Resetting bearer [ 298.946301][T10322] tipc: Disabling bearer [ 300.309272][T10331] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 300.327521][T10331] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 300.398752][T10331] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1085'. [ 300.691382][T10340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.712788][T10340] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.740750][T10340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.015371][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1090'. [ 301.243476][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 301.274195][T10356] bridge3: port 1(veth0_to_bond) entered blocking state [ 301.295009][T10356] bridge3: port 1(veth0_to_bond) entered disabled state [ 301.328845][T10356] veth0_to_bond: entered allmulticast mode [ 301.351359][T10356] veth0_to_bond: entered promiscuous mode [ 301.380174][T10354] vlan0: entered allmulticast mode [ 301.388062][T10354] veth1: entered allmulticast mode [ 301.419281][T10354] bridge3: port 2(vlan0) entered blocking state [ 301.428300][T10354] bridge3: port 2(vlan0) entered disabled state [ 301.447731][T10354] vlan0: entered promiscuous mode [ 301.458928][T10354] veth1: entered promiscuous mode [ 301.767632][T10371] lo speed is unknown, defaulting to 1000 [ 301.944482][T10379] tipc: Enabling of bearer rejected, failed to enable media [ 302.079065][T10383] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 302.496080][T10394] lo speed is unknown, defaulting to 1000 [ 302.664270][T10401] netlink: 'syz.3.1102': attribute type 10 has an invalid length. [ 302.733412][T10401] dummy0: entered promiscuous mode [ 302.758738][T10401] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 303.333969][T10376] lo speed is unknown, defaulting to 1000 [ 303.802677][T10408] lo speed is unknown, defaulting to 1000 [ 304.061510][T10413] syzkaller0: entered promiscuous mode [ 304.077371][T10413] syzkaller0: entered allmulticast mode [ 304.212834][T10409] lo speed is unknown, defaulting to 1000 [ 304.370875][T10417] netlink: 'syz.2.1106': attribute type 10 has an invalid length. [ 304.379898][T10417] bond0: (slave wlan1): Opening slave failed [ 304.596878][T10421] bond0: (slave gretap0): Error: Device type is different from other slaves [ 304.640451][T10423] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 304.742574][T10423] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 304.808530][T10423] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 304.856174][T10423] bond6 (unregistering): Released all slaves [ 304.866129][T10428] netlink: 'syz.2.1109': attribute type 1 has an invalid length. [ 304.956588][T10428] bond8 (unregistering): Released all slaves [ 305.806583][T10441] tipc: Enabling of bearer rejected, failed to enable media [ 306.578475][T10461] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1115'. [ 307.002752][T10467] netlink: 'syz.0.1117': attribute type 10 has an invalid length. [ 307.065207][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 307.101681][T10467] bond0: (slave wlan1): Opening slave failed [ 307.198592][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 307.210798][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 307.382350][T10477] netlink: 'syz.0.1121': attribute type 1 has an invalid length. [ 307.582280][T10477] bond7 (unregistering): Released all slaves [ 307.979349][T10468] infiniband syz2: set down [ 307.985581][T10468] infiniband syz2: added vxcan1 [ 307.999966][T10468] syz2: rxe_create_cq: returned err = -12 [ 308.010057][T10468] infiniband syz2: Couldn't create ib_mad CQ [ 308.016191][T10468] infiniband syz2: Couldn't open port 1 [ 308.132622][T10468] RDS/IB: syz2: added [ 308.136700][T10468] smc: adding ib device syz2 with port count 1 [ 308.168398][ T8747] vxcan1 speed is unknown, defaulting to 1000 [ 308.194650][T10468] smc: ib device syz2 port 1 has no pnetid [ 308.215406][ T8747] vxcan1 speed is unknown, defaulting to 1000 [ 308.328907][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 308.335213][T10493] lo speed is unknown, defaulting to 1000 [ 308.791915][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1126'. [ 308.857563][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 309.015416][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1127'. [ 309.116695][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 309.434375][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 309.612899][T10519] netlink: 'syz.3.1133': attribute type 1 has an invalid length. [ 309.892657][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 310.559082][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 310.880774][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 311.030844][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 311.165402][T10468] vxcan1 speed is unknown, defaulting to 1000 [ 311.301019][T10520] lo speed is unknown, defaulting to 1000 [ 311.523569][T10543] netlink: 136 bytes leftover after parsing attributes in process `syz.1.1137'. [ 312.059036][T10539] lo speed is unknown, defaulting to 1000 [ 312.789794][T10558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1139'. [ 312.899693][T10552] lo speed is unknown, defaulting to 1000 [ 313.631414][T10564] tipc: New replicast peer: 255.255.255.255 [ 313.637922][T10564] tipc: Enabled bearer , priority 10 [ 313.835848][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1142'. [ 313.970453][T10552] vxcan1 speed is unknown, defaulting to 1000 [ 314.149807][T10572] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 314.264379][T10572] bond9 (unregistering): Released all slaves [ 314.704028][T10578] lo speed is unknown, defaulting to 1000 [ 315.205582][T10583] bridge0: port 1(erspan0) entered blocking state [ 315.223272][T10583] bridge0: port 1(erspan0) entered disabled state [ 315.246342][T10583] erspan0: entered allmulticast mode [ 315.261784][T10583] erspan0: entered promiscuous mode [ 315.267993][T10583] bridge0: port 1(erspan0) entered blocking state [ 315.274764][T10583] bridge0: port 1(erspan0) entered forwarding state [ 315.399539][T10578] vxcan1 speed is unknown, defaulting to 1000 [ 315.724390][T10595] netlink: 'syz.4.1150': attribute type 1 has an invalid length. [ 315.882530][T10597] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 315.940375][T10597] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 316.033085][T10595] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 316.175198][T10599] bond6: (slave gretap1): making interface the new active one [ 316.229976][T10599] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 316.326430][T10595] macvlan3: entered promiscuous mode [ 316.344458][T10595] macvlan3: entered allmulticast mode [ 316.363803][T10595] bond6: entered promiscuous mode [ 316.378639][T10595] gretap1: entered promiscuous mode [ 316.384803][T10595] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 316.435423][T10595] bond6: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 316.470267][T10595] bond6: left promiscuous mode [ 316.475444][T10595] gretap1: left promiscuous mode [ 316.735345][T10606] netlink: 'syz.0.1152': attribute type 1 has an invalid length. [ 316.748625][T10595] syz.4.1150 (10595) used greatest stack depth: 17672 bytes left [ 316.801482][T10608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 316.904970][T10611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'. [ 316.976060][T10609] netlink: 'syz.4.1153': attribute type 1 has an invalid length. [ 316.990525][T10609] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.1153'. [ 317.146592][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.185663][T10619] netlink: 'syz.4.1155': attribute type 15 has an invalid length. [ 317.688461][T10628] netlink: 'syz.2.1158': attribute type 1 has an invalid length. [ 318.082565][T10632] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 318.110334][T10632] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 318.252320][T10636] macvlan0: entered promiscuous mode [ 318.268514][T10636] macvlan0: entered allmulticast mode [ 318.289905][T10636] bond8: entered promiscuous mode [ 318.307547][T10636] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 318.322937][T10636] bond8: left promiscuous mode [ 318.407420][T10641] syzkaller0: entered promiscuous mode [ 318.419646][T10641] syzkaller0: entered allmulticast mode [ 318.507563][T10639] lo speed is unknown, defaulting to 1000 [ 319.011738][T10655] tipc: Enabling of bearer rejected, already enabled [ 319.177344][T10667] ªªªªªª: renamed from wg2 [ 319.366809][T10669] syzkaller0: entered promiscuous mode [ 319.377030][T10669] syzkaller0: entered allmulticast mode [ 319.585202][T10664] lo speed is unknown, defaulting to 1000 [ 320.298774][T10639] vxcan1 speed is unknown, defaulting to 1000 [ 320.781196][T10691] netlink: 'syz.2.1173': attribute type 10 has an invalid length. [ 320.822363][T10664] vxcan1 speed is unknown, defaulting to 1000 [ 320.834259][T10691] bond0: (slave wlan1): Opening slave failed [ 320.892365][T10693] netlink: 'syz.1.1174': attribute type 1 has an invalid length. [ 320.957893][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1175'. [ 320.970374][T10693] bond9 (unregistering): Released all slaves [ 321.125475][T10699] netlink: 'syz.3.1176': attribute type 1 has an invalid length. [ 321.173822][T10696] IPv6: sit2: Disabled Multicast RS [ 321.280806][T10706] 8021q: adding VLAN 0 to HW filter on device bond8 [ 321.381425][T10699] veth7: entered promiscuous mode [ 321.414050][T10699] bond8: (slave veth7): Enslaving as a backup interface with a down link [ 321.793296][T10709] lo speed is unknown, defaulting to 1000 [ 322.305389][T10725] netlink: 'syz.3.1180': attribute type 1 has an invalid length. [ 322.326583][T10725] netlink: 'syz.3.1180': attribute type 1 has an invalid length. [ 322.391669][T10725] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1180'. [ 323.355280][T10738] lo speed is unknown, defaulting to 1000 [ 323.558788][T10709] vxcan1 speed is unknown, defaulting to 1000 [ 324.272167][T10746] lo speed is unknown, defaulting to 1000 [ 325.194274][T10738] vxcan1 speed is unknown, defaulting to 1000 [ 325.402441][T10760] syzkaller0: entered promiscuous mode [ 325.437725][T10760] syzkaller0: entered allmulticast mode [ 325.747421][T10752] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 326.356868][T10746] vxcan1 speed is unknown, defaulting to 1000 [ 326.975431][T10780] lo speed is unknown, defaulting to 1000 [ 328.761119][T10780] vxcan1 speed is unknown, defaulting to 1000 [ 329.202999][T10794] lo speed is unknown, defaulting to 1000 [ 330.028734][T10815] nbd0: detected capacity change from 0 to 63 [ 330.048059][T10816] block nbd0: NBD_DISCONNECT [ 330.053049][T10816] block nbd0: Disconnected due to user request. [ 330.067059][T10816] block nbd0: shutting down sockets [ 330.126399][T10815] bond7: entered promiscuous mode [ 330.132620][T10815] bond7: entered allmulticast mode [ 330.152853][T10815] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.513422][T10794] vxcan1 speed is unknown, defaulting to 1000 [ 330.525253][T10831] syzkaller1: entered allmulticast mode [ 332.414121][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1214'. [ 332.575016][T10869] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1215'. [ 332.593348][T10865] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 332.757601][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 332.910145][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 332.924073][T10859] lo speed is unknown, defaulting to 1000 [ 333.267621][T10865] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 333.361577][T10865] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 333.419111][T10865] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 333.496774][ T8819] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 333.532928][ T8819] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 333.570619][ T8819] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 333.611955][ T8819] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 333.764841][T10861] lo speed is unknown, defaulting to 1000 [ 333.789656][T10879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1217'. [ 334.219027][T10859] vxcan1 speed is unknown, defaulting to 1000 [ 334.274924][T10871] lo speed is unknown, defaulting to 1000 [ 334.598626][T10886] nbd4: detected capacity change from 0 to 63 [ 334.605002][T10887] block nbd4: NBD_DISCONNECT [ 334.618586][T10887] block nbd4: Disconnected due to user request. [ 334.655520][T10887] block nbd4: shutting down sockets [ 334.767257][T10886] bond7: entered promiscuous mode [ 334.773194][T10886] bond7: entered allmulticast mode [ 334.779120][T10886] 8021q: adding VLAN 0 to HW filter on device bond7 [ 334.848607][T10861] vxcan1 speed is unknown, defaulting to 1000 [ 335.303966][T10904] nbd0: detected capacity change from 0 to 63 [ 335.311299][T10906] block nbd0: NBD_DISCONNECT [ 335.316126][T10906] block nbd0: Disconnected due to user request. [ 335.323581][T10906] block nbd0: shutting down sockets [ 335.519834][T10907] bond8: entered promiscuous mode [ 335.525135][T10907] bond8: entered allmulticast mode [ 335.531441][T10907] 8021q: adding VLAN 0 to HW filter on device bond8 [ 335.794466][T10871] vxcan1 speed is unknown, defaulting to 1000 [ 336.652074][T10926] lo speed is unknown, defaulting to 1000 [ 337.254189][T10936] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 337.278582][T10936] netlink: 'syz.4.1231': attribute type 2 has an invalid length. [ 337.369212][T10936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1231'. [ 338.173944][T10926] vxcan1 speed is unknown, defaulting to 1000 [ 338.176385][T10944] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 338.241226][T10944] netlink: 'syz.2.1234': attribute type 10 has an invalid length. [ 338.268297][T10944] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 338.301742][T10944] bond0: (slave wlan1): refused to change device type [ 338.321591][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 338.422405][T10952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.598490][T10956] bond0: Device is already in use. [ 338.822978][T10959] syz_tun: entered allmulticast mode [ 338.866291][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 338.893058][T10959] syz_tun (unregistering): left allmulticast mode [ 339.245632][T10964] netlink: 'syz.4.1240': attribute type 13 has an invalid length. [ 339.253895][T10964] netlink: 'syz.4.1240': attribute type 17 has an invalid length. [ 339.410439][T10964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 339.595128][T10967] lo speed is unknown, defaulting to 1000 [ 340.410297][T10967] vxcan1 speed is unknown, defaulting to 1000 [ 341.025330][T10988] lo speed is unknown, defaulting to 1000 [ 341.714269][T10989] lo speed is unknown, defaulting to 1000 [ 341.752347][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 341.929254][T11003] tunl0: Caught tx_queue_len zero misconfig [ 342.640780][T10989] vxcan1 speed is unknown, defaulting to 1000 [ 343.065237][T11005] netlink: 'syz.0.1249': attribute type 1 has an invalid length. [ 343.201948][T11005] bond9 (unregistering): Released all slaves [ 343.210605][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 343.395903][T11017] tipc: New replicast peer: 255.255.255.255 [ 343.412434][T11017] tipc: Enabled bearer , priority 10 [ 343.573925][T10988] vxcan1 speed is unknown, defaulting to 1000 [ 343.770825][T11025] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1256'. [ 343.799976][T11025] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1256'. [ 343.831486][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1256'. [ 343.969076][T11024] lo speed is unknown, defaulting to 1000 [ 344.305896][T11033] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 344.373002][T11033] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 344.399529][ T8751] tipc: Node number set to 3876020880 [ 344.406514][T11033] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 344.633850][T11041] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1258'. [ 344.660511][ T5150] Bluetooth: hci3: link tx timeout [ 344.665745][ T5150] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 344.707624][T11041] veth3: entered promiscuous mode [ 345.075166][T11040] lo speed is unknown, defaulting to 1000 [ 345.504088][T11047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1261'. [ 345.775364][T11050] tipc: Enabled bearer , priority 0 [ 345.796994][T11050] tipc: Resetting bearer [ 345.806923][T11048] tipc: Disabling bearer [ 345.874492][T11051] syz.1.1262: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 345.911575][T11051] CPU: 0 UID: 0 PID: 11051 Comm: syz.1.1262 Not tainted syzkaller #0 PREEMPT(full) [ 345.911607][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.911626][T11051] Call Trace: [ 345.911635][T11051] [ 345.911644][T11051] dump_stack_lvl+0x189/0x250 [ 345.911684][T11051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.911706][T11051] ? __pfx__printk+0x10/0x10 [ 345.911728][T11051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 345.911756][T11051] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 345.911786][T11051] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 345.911816][T11051] warn_alloc+0x214/0x310 [ 345.911846][T11051] ? stack_depot_save_flags+0x40/0x860 [ 345.911870][T11051] ? __cgroup_account_cputime+0xe5/0x120 [ 345.911898][T11051] ? __pfx_warn_alloc+0x10/0x10 [ 345.911928][T11051] ? kasan_save_track+0x3e/0x80 [ 345.911953][T11051] ? __kasan_kmalloc+0x93/0xb0 [ 345.911983][T11051] ? xsk_setsockopt+0x4dc/0x8d0 [ 345.912002][T11051] ? do_sock_setsockopt+0x179/0x1b0 [ 345.912023][T11051] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 345.912048][T11051] ? do_syscall_64+0xfa/0xfa0 [ 345.912072][T11051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.912102][T11051] __vmalloc_node_range_noprof+0x125/0x12d0 [ 345.912163][T11051] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 345.912197][T11051] ? __kasan_kmalloc+0x93/0xb0 [ 345.912231][T11051] vmalloc_user_noprof+0xad/0xf0 [ 345.912260][T11051] ? xskq_create+0xbf/0x170 [ 345.912283][T11051] xskq_create+0xbf/0x170 [ 345.912309][T11051] xsk_init_queue+0xb0/0x110 [ 345.912334][T11051] xsk_setsockopt+0x4dc/0x8d0 [ 345.912358][T11051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 345.912381][T11051] ? __pfx_aa_sk_perm+0x10/0x10 [ 345.912408][T11051] ? aa_sock_opt_perm+0xff/0x1b0 [ 345.912439][T11051] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 345.912457][T11051] ? __pfx_xsk_setsockopt+0x10/0x10 [ 345.912487][T11051] do_sock_setsockopt+0x179/0x1b0 [ 345.912515][T11051] __x64_sys_setsockopt+0x13f/0x1b0 [ 345.912544][T11051] do_syscall_64+0xfa/0xfa0 [ 345.912567][T11051] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.912591][T11051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.912611][T11051] ? clear_bhb_loop+0x60/0xb0 [ 345.912637][T11051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.912656][T11051] RIP: 0033:0x7f88b278eec9 [ 345.912683][T11051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.912701][T11051] RSP: 002b:00007f88b3602038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 345.912724][T11051] RAX: ffffffffffffffda RBX: 00007f88b29e5fa0 RCX: 00007f88b278eec9 [ 345.912740][T11051] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 345.912752][T11051] RBP: 00007f88b2811f91 R08: 0000000000000004 R09: 0000000000000000 [ 345.912765][T11051] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.912778][T11051] R13: 00007f88b29e6038 R14: 00007f88b29e5fa0 R15: 00007ffd4306c6f8 [ 345.912813][T11051] [ 345.912825][T11051] Mem-Info: [ 346.023006][T11054] macsec1: entered promiscuous mode [ 346.023030][T11054] batadv0: entered promiscuous mode [ 346.275432][T11051] active_anon:7835 inactive_anon:0 isolated_anon:0 [ 346.275432][T11051] active_file:3337 inactive_file:39988 isolated_file:0 [ 346.275432][T11051] unevictable:768 dirty:503 writeback:0 [ 346.275432][T11051] slab_reclaimable:12026 slab_unreclaimable:161296 [ 346.275432][T11051] mapped:33246 shmem:4281 pagetables:1185 [ 346.275432][T11051] sec_pagetables:0 bounce:0 [ 346.275432][T11051] kernel_misc_reclaimable:0 [ 346.275432][T11051] free:1255170 free_pcp:14265 free_cma:0 [ 346.315631][T11024] vxcan1 speed is unknown, defaulting to 1000 [ 346.329620][T11051] Node 0 active_anon:31340kB inactive_anon:0kB active_file:13348kB inactive_file:159748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132984kB dirty:2012kB writeback:0kB shmem:15588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13964kB pagetables:4612kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 346.363140][T11051] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 346.414312][T11051] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.415044][T11056] netlink: 'syz.4.1264': attribute type 1 has an invalid length. [ 346.465518][T11051] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 346.484024][T11051] Node 0 DMA32 free:1114228kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31440kB inactive_anon:0kB active_file:13348kB inactive_file:159748kB unevictable:1536kB writepending:2012kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:40376kB local_pcp:30920kB free_cma:0kB [ 346.518634][T11051] lowmem_reserve[]: 0 0 1 1 1 [ 346.523447][T11051] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.568102][T11051] lowmem_reserve[]: 0 0 0 0 0 [ 346.573024][T11051] Node 1 Normal free:3890964kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:16696kB local_pcp:6016kB free_cma:0kB [ 346.618045][T11051] lowmem_reserve[]: 0 0 0 0 0 [ 346.622816][T11051] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 346.651066][T11060] bond8 (unregistering): Released all slaves [ 346.658668][T11051] Node 0 DMA32: 745*4kB (UM) 1137*8kB (UME) 417*16kB (UME) 862*32kB (UME) 460*64kB (UM) 179*128kB (UME) 95*256kB (UM) 40*512kB (UME) 22*1024kB (UM) 5*2048kB (UM) 229*4096kB (UM) = 1114236kB [ 346.688956][T11051] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 346.707412][T11051] Node 1 Normal: 157*4kB (UME) 42*8kB (UME) 41*16kB (UME) 162*32kB (UME) 52*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3890964kB [ 346.727069][T11051] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.737714][T11051] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 346.744183][ T5841] Bluetooth: hci3: command 0x0405 tx timeout [ 346.754515][T11051] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.767747][T11051] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 346.777776][T11051] 47602 total pagecache pages [ 346.813562][T11051] 0 pages in swap cache [ 346.848955][T11051] Free swap = 124996kB [ 346.853258][T11051] Total swap = 124996kB [ 346.857578][T11051] 2097051 pages RAM [ 346.867381][T11051] 0 pages HighMem/MovableOnly [ 346.872432][T11051] 424543 pages reserved [ 346.876593][T11051] 0 pages cma reserved [ 347.012168][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1265'. [ 347.251188][T11065] nbd4: detected capacity change from 0 to 63 [ 347.317882][T11067] bond8: entered promiscuous mode [ 347.325418][T11067] bond8: entered allmulticast mode [ 347.334425][T11067] 8021q: adding VLAN 0 to HW filter on device bond8 [ 347.347547][ T5150] block nbd4: Receive control failed (result -32) [ 347.920768][T11040] vxcan1 speed is unknown, defaulting to 1000 [ 348.535616][T11084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 349.052860][T11091] tipc: Enabling of bearer rejected, already enabled [ 349.192671][T11093] syzkaller0: entered promiscuous mode [ 349.211072][T11093] syzkaller0: entered allmulticast mode [ 349.409189][T11095] lo speed is unknown, defaulting to 1000 [ 349.566470][T11098] IPVS: Scheduler module ip_vs_sip not found [ 349.723227][T11105] syzkaller0: entered promiscuous mode [ 349.768623][T11105] syzkaller0: entered allmulticast mode [ 349.829172][T11107] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 350.215319][T11109] bond0: Device is already in use. [ 350.401400][T11111] lo speed is unknown, defaulting to 1000 [ 351.006887][T11133] lo speed is unknown, defaulting to 1000 [ 351.041256][T11095] vxcan1 speed is unknown, defaulting to 1000 [ 351.661647][T11111] vxcan1 speed is unknown, defaulting to 1000 [ 351.982720][T11146] tipc: Enabling of bearer rejected, already enabled [ 352.034833][ T8819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 352.092478][ T8819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.229974][T11153] wg1: left promiscuous mode [ 352.238079][T11153] wg1: left allmulticast mode [ 352.251919][T11153] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 352.276188][T11153] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 352.314412][T11153] veth3: left promiscuous mode [ 352.327734][T11153] batadv0: left promiscuous mode [ 352.346749][T11153] macsec1: left promiscuous mode [ 352.399206][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1286'. [ 352.453330][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 352.463999][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 352.499042][T11157] hsr_slave_0: left promiscuous mode [ 352.507081][T11157] hsr_slave_1: left promiscuous mode [ 352.575804][T11133] vxcan1 speed is unknown, defaulting to 1000 [ 352.721339][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 352.748094][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 353.100400][T11173] lo speed is unknown, defaulting to 1000 [ 354.289976][T11175] lo speed is unknown, defaulting to 1000 [ 354.804912][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1295'. [ 355.003042][T11196] syz_tun: left allmulticast mode [ 355.050002][T11196] syz_tun: left promiscuous mode [ 355.073930][T11196] bridge0: port 1(syz_tun) entered disabled state [ 355.281589][T11173] vxcan1 speed is unknown, defaulting to 1000 [ 355.463241][T11207] tipc: Enabling of bearer rejected, already enabled [ 355.545780][T11209] wg1: entered promiscuous mode [ 355.551471][T11209] wg1: entered allmulticast mode [ 356.029062][T11213] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 356.036832][T11213] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1299'. [ 356.046345][T11213] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1299'. [ 356.060404][T11175] vxcan1 speed is unknown, defaulting to 1000 [ 356.227446][T11217] dvmrp8: entered allmulticast mode [ 356.512109][T11215] netlink: 'syz.3.1300': attribute type 23 has an invalid length. [ 356.524829][T11220] No such timeout policy "syz1" [ 356.549131][T11216] lo speed is unknown, defaulting to 1000 [ 356.699301][T11222] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1302'. [ 356.861359][T11226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 356.942142][T11214] dvmrp8: left allmulticast mode [ 357.530109][T11216] vxcan1 speed is unknown, defaulting to 1000 [ 358.221813][T11238] lo speed is unknown, defaulting to 1000 [ 358.957731][T11251] tipc: Enabled bearer , priority 0 [ 358.978984][T11251] tipc: Resetting bearer [ 358.989846][T11249] tipc: Disabling bearer [ 359.061932][T11241] lo speed is unknown, defaulting to 1000 [ 359.299881][T11261] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 3, id = 0 [ 359.734084][T11258] lo speed is unknown, defaulting to 1000 [ 359.734625][T11241] vxcan1 speed is unknown, defaulting to 1000 [ 360.116783][T11263] tipc: Enabling of bearer rejected, failed to enable media [ 360.141230][T11263] syzkaller0: entered promiscuous mode [ 360.146825][T11263] syzkaller0: entered allmulticast mode [ 360.563798][T11267] pimreg: entered allmulticast mode [ 360.592052][T11267] pimreg: left allmulticast mode [ 360.716442][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 360.853888][T11238] vxcan1 speed is unknown, defaulting to 1000 [ 364.799970][T11258] vxcan1 speed is unknown, defaulting to 1000 [ 364.830920][T11289] team0: Port device dummy0 removed [ 364.849082][T11289] bond0: (slave bond_slave_0): Releasing backup interface [ 364.856865][T11289] bond_slave_0: left promiscuous mode [ 364.880247][T11289] bond0: (slave bond_slave_1): Releasing backup interface [ 364.902466][T11289] bond_slave_1: left promiscuous mode [ 364.921027][T11289] team0: Port device team_slave_1 removed [ 364.927176][T11289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 364.944306][T11290] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 365.085184][T11298] lo speed is unknown, defaulting to 1000 [ 365.140896][T11300] tipc: Enabled bearer , priority 0 [ 365.169806][T11300] tipc: Resetting bearer [ 365.178433][T11299] tipc: Disabling bearer [ 365.899544][T11308] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1323'. [ 365.967523][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.986375][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.995107][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.003890][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.034649][T11306] lo speed is unknown, defaulting to 1000 [ 366.037524][T11298] vxcan1 speed is unknown, defaulting to 1000 [ 366.054422][T11311] netlink: 'syz.3.1324': attribute type 10 has an invalid length. [ 366.070382][T11311] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 366.078777][T11311] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 366.293540][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1325'. [ 367.301036][T11313] lo speed is unknown, defaulting to 1000 [ 367.686066][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 367.886925][T11313] vxcan1 speed is unknown, defaulting to 1000 [ 368.532293][T11306] vxcan1 speed is unknown, defaulting to 1000 [ 369.003341][T11334] netlink: 'syz.1.1327': attribute type 13 has an invalid length. [ 369.033761][T11334] netlink: 'syz.1.1327': attribute type 17 has an invalid length. [ 369.056835][T11329] bond9: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 369.114277][T11329] bond9 (unregistering): Released all slaves [ 369.351977][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.362476][T11334] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.374779][T11334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 369.585110][T11338] lo speed is unknown, defaulting to 1000 [ 369.901750][ T8942] IPVS: starting estimator thread 0... [ 369.998623][T11347] IPVS: using max 50 ests per chain, 120000 per kthread [ 370.069637][T11351] bond9: entered promiscuous mode [ 370.075126][T11351] bond9: entered allmulticast mode [ 370.085669][T11351] 8021q: adding VLAN 0 to HW filter on device bond9 [ 370.281822][T11357] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1334'. [ 370.328783][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 370.370859][T11357] netlink: 'syz.2.1334': attribute type 2 has an invalid length. [ 370.659695][T11365] openvswitch: netlink: Flow actions attr not present in new flow. [ 370.967405][T11368] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1338'. [ 371.695189][T11374] lo speed is unknown, defaulting to 1000 [ 371.736066][T11338] vxcan1 speed is unknown, defaulting to 1000 [ 372.217673][T11397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1343'. [ 372.944431][T11398] lo speed is unknown, defaulting to 1000 [ 373.400301][T11408] netlink: 'syz.3.1346': attribute type 13 has an invalid length. [ 373.432762][T11408] netlink: 'syz.3.1346': attribute type 17 has an invalid length. [ 374.076427][T11408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.088985][T11408] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.103843][T11408] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.132518][T11374] vxcan1 speed is unknown, defaulting to 1000 [ 374.527666][T11416] lo speed is unknown, defaulting to 1000 [ 374.567555][T11398] vxcan1 speed is unknown, defaulting to 1000 [ 375.098698][T11410] lo speed is unknown, defaulting to 1000 [ 376.122264][T11416] vxcan1 speed is unknown, defaulting to 1000 [ 376.409683][T11436] netlink: 'syz.0.1350': attribute type 3 has an invalid length. [ 376.422878][T11436] syz_tun: entered allmulticast mode [ 376.544532][T11436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.555328][T11436] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.592503][T11436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 376.664621][T11435] syz_tun: left allmulticast mode [ 376.810830][T11440] 8021q: VLANs not supported on vcan0 [ 377.042641][T11410] vxcan1 speed is unknown, defaulting to 1000 [ 377.237407][ T30] audit: type=1800 audit(1760443787.827:6): pid=11443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1352" name="memory.events" dev="tmpfs" ino=1353 res=0 errno=0 [ 377.571295][T11448] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 377.572987][T11440] siw: device registration error -23 [ 377.669831][T11448] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 377.677922][T11448] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 378.110475][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 378.598844][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.689517][T11465] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 378.907871][T11471] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1359'. [ 379.746638][T11485] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1362'. [ 379.797448][T11485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1362'. [ 379.862624][T11492] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1363'. [ 380.149511][T11500] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1361'. [ 380.233203][T11503] netlink: 'syz.2.1365': attribute type 10 has an invalid length. [ 380.241613][T11503] bond0: (slave wlan1): refused to change device type [ 380.328681][T11506] netlink: 'syz.0.1364': attribute type 6 has an invalid length. [ 380.340338][T11505] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1367'. [ 380.353907][T11505] netlink: 'syz.2.1367': attribute type 13 has an invalid length. [ 380.393576][T11505] lo speed is unknown, defaulting to 1000 [ 380.822750][T11515] bond9: entered promiscuous mode [ 380.828855][T11515] bond9: entered allmulticast mode [ 380.839648][T11515] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.856828][T11511] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 380.870016][T11511] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 380.879807][T11511] tipc: Resetting bearer [ 381.015881][T11525] tipc: Enabling of bearer rejected, already enabled [ 381.226985][ T12] tipc: Resetting bearer [ 381.444238][T11505] vxcan1 speed is unknown, defaulting to 1000 [ 381.647238][T11542] tipc: New replicast peer: 255.255.255.255 [ 381.669744][T11542] tipc: Enabled bearer , priority 10 [ 381.689539][T11544] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 381.914106][T11549] lo speed is unknown, defaulting to 1000 [ 381.937106][T11554] netlink: 'syz.0.1377': attribute type 10 has an invalid length. [ 381.941924][T11555] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1378'. [ 381.977915][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1378'. [ 382.067869][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1378'. [ 382.103227][T11562] netlink: 'syz.0.1380': attribute type 10 has an invalid length. [ 382.744979][T11549] vxcan1 speed is unknown, defaulting to 1000 [ 384.076958][T11582] __nla_validate_parse: 1 callbacks suppressed [ 384.076980][T11582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1386'. [ 384.500760][T11592] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 384.674021][T11582] netlink: 'syz.4.1386': attribute type 3 has an invalid length. [ 384.731075][T11582] netlink: 'syz.4.1386': attribute type 1 has an invalid length. [ 384.825861][T11582] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1386'. [ 385.057122][T11602] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 385.066881][T11602] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1387'. [ 385.883777][T11611] netlink: 'syz.0.1390': attribute type 10 has an invalid length. [ 386.337320][T11631] netlink: 'syz.1.1395': attribute type 10 has an invalid length. [ 386.368119][T11631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1395'. [ 386.611702][T11633] lo speed is unknown, defaulting to 1000 [ 387.243221][T11643] tipc: Enabled bearer , priority 0 [ 387.313710][T11643] syzkaller0: entered promiscuous mode [ 387.319767][T11643] syzkaller0: entered allmulticast mode [ 388.202814][T11662] netlink: 'syz.3.1404': attribute type 10 has an invalid length. [ 389.349141][T11643] tipc: Resetting bearer [ 389.355445][T11633] vxcan1 speed is unknown, defaulting to 1000 [ 389.370335][T11642] tipc: Resetting bearer [ 389.394856][T11642] tipc: Disabling bearer [ 389.791920][T11671] bridge0: port 1(erspan0) entered disabled state [ 390.049325][T11671] batadv0: left promiscuous mode [ 390.072016][T11671] batadv0: left allmulticast mode [ 390.107440][T11671] wg1: left promiscuous mode [ 390.152700][T11671] wg1: left allmulticast mode [ 390.212913][T11671] macvtap1: left promiscuous mode [ 390.218694][T11671] macvtap1: left allmulticast mode [ 390.224970][T11671] bond4: left promiscuous mode [ 390.230765][T11671] bond4: left allmulticast mode [ 390.236304][T11671] bond5: left promiscuous mode [ 390.242346][T11671] bond5: left allmulticast mode [ 390.281731][T11671] bond7: left promiscuous mode [ 390.300909][T11671] bond7: left allmulticast mode [ 390.359772][T11671] bond8: left promiscuous mode [ 390.377587][T11671] bond8: left allmulticast mode [ 390.429626][T11672] syz.2.1407: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 390.450788][T11672] CPU: 0 UID: 0 PID: 11672 Comm: syz.2.1407 Not tainted syzkaller #0 PREEMPT(full) [ 390.450817][T11672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 390.450834][T11672] Call Trace: [ 390.450843][T11672] [ 390.450853][T11672] dump_stack_lvl+0x189/0x250 [ 390.450882][T11672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.450902][T11672] ? __pfx__printk+0x10/0x10 [ 390.450921][T11672] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 390.450947][T11672] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 390.450971][T11672] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 390.450997][T11672] warn_alloc+0x214/0x310 [ 390.451028][T11672] ? __pfx_warn_alloc+0x10/0x10 [ 390.451215][T11672] ? __get_vm_area_node+0x28f/0x300 [ 390.451241][T11672] ? xp_create_and_assign_umem+0x197/0xd00 [ 390.451275][T11672] __vmalloc_node_range_noprof+0x690/0x12d0 [ 390.451335][T11672] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 390.451361][T11672] ? xp_create_and_assign_umem+0x197/0xd00 [ 390.451386][T11672] ? rcu_is_watching+0x15/0xb0 [ 390.451406][T11672] ? xp_create_and_assign_umem+0x197/0xd00 [ 390.451429][T11672] __kvmalloc_node_noprof+0x674/0x910 [ 390.451457][T11672] ? xp_create_and_assign_umem+0x197/0xd00 [ 390.451479][T11672] ? xp_create_and_assign_umem+0xa9/0xd00 [ 390.451508][T11672] xp_create_and_assign_umem+0x197/0xd00 [ 390.451539][T11672] ? dev_get_by_index+0x22/0x2e0 [ 390.451561][T11672] ? dev_get_by_index+0x22/0x2e0 [ 390.451589][T11672] xsk_bind+0x42d/0xf90 [ 390.451606][T11672] ? apparmor_socket_bind+0xff/0x1e0 [ 390.451639][T11672] __sys_bind+0x2c6/0x3e0 [ 390.451660][T11672] ? __pfx___sys_bind+0x10/0x10 [ 390.451702][T11672] ? rcu_is_watching+0x15/0xb0 [ 390.451735][T11672] __x64_sys_bind+0x7a/0x90 [ 390.451755][T11672] do_syscall_64+0xfa/0xfa0 [ 390.451780][T11672] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.451804][T11672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.451824][T11672] ? clear_bhb_loop+0x60/0xb0 [ 390.451848][T11672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.451879][T11672] RIP: 0033:0x7fe7c238eec9 [ 390.451900][T11672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.451919][T11672] RSP: 002b:00007fe7c31ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 390.451941][T11672] RAX: ffffffffffffffda RBX: 00007fe7c25e6090 RCX: 00007fe7c238eec9 [ 390.451956][T11672] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000006 [ 390.451969][T11672] RBP: 00007fe7c2411f91 R08: 0000000000000000 R09: 0000000000000000 [ 390.451982][T11672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.451994][T11672] R13: 00007fe7c25e6128 R14: 00007fe7c25e6090 R15: 00007ffd96fd14c8 [ 390.452028][T11672] [ 390.452043][T11672] Mem-Info: [ 390.744317][T11672] active_anon:5748 inactive_anon:0 isolated_anon:0 [ 390.744317][T11672] active_file:3337 inactive_file:40004 isolated_file:0 [ 390.744317][T11672] unevictable:768 dirty:447 writeback:0 [ 390.744317][T11672] slab_reclaimable:11923 slab_unreclaimable:180162 [ 390.744317][T11672] mapped:31359 shmem:1360 pagetables:1202 [ 390.744317][T11672] sec_pagetables:0 bounce:0 [ 390.744317][T11672] kernel_misc_reclaimable:0 [ 390.744317][T11672] free:1229933 free_pcp:15753 free_cma:0 [ 390.791254][T11672] Node 0 active_anon:22992kB inactive_anon:0kB active_file:13348kB inactive_file:159812kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125436kB dirty:1788kB writeback:0kB shmem:3904kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14020kB pagetables:4680kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.837098][T11672] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 390.867632][T11672] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.906309][T11672] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 390.926312][T11672] Node 0 DMA32 free:1024032kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22644kB inactive_anon:0kB active_file:13348kB inactive_file:159812kB unevictable:1536kB writepending:1800kB zspages:0kB present:3129332kB managed:2561672kB mlocked:0kB bounce:0kB free_pcp:41756kB local_pcp:26872kB free_cma:0kB [ 390.960779][T11672] lowmem_reserve[]: 0 0 1 1 1 [ 390.965543][T11672] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 391.004174][T11672] lowmem_reserve[]: 0 0 0 0 0 [ 391.009897][T11672] Node 1 Normal free:3892276kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15432kB local_pcp:9632kB free_cma:0kB [ 391.043788][T11672] lowmem_reserve[]: 0 0 0 0 0 [ 391.049216][T11672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 391.071889][T11672] Node 0 DMA32: 129*4kB (M) 889*8kB (UME) 1008*16kB (UME) 1256*32kB (UME) 372*64kB (UME) 127*128kB (UME) 75*256kB (UME) 41*512kB (UM) 37*1024kB (UME) 4*2048kB (UME) 204*4096kB (M) = 1025868kB [ 391.093512][T11672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 391.106280][T11672] Node 1 Normal: 221*4kB (UME) 42*8kB (UME) 41*16kB (UME) 183*32kB (UME) 58*64kB (UME) 7*128kB (UME) 4*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3892276kB [ 391.126050][T11672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.146714][T11672] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 391.167564][T11672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 391.186650][T11672] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 391.207823][T11672] 44697 total pagecache pages [ 391.218456][T11672] 0 pages in swap cache [ 391.226137][T11672] Free swap = 124996kB [ 391.232287][T11672] Total swap = 124996kB [ 391.236808][T11672] 2097051 pages RAM [ 391.241834][T11672] 0 pages HighMem/MovableOnly [ 391.246979][T11672] 424543 pages reserved [ 391.253318][T11672] 0 pages cma reserved [ 391.341744][ T5947] syz1: Port: 1 Link DOWN [ 391.480529][T11690] lo speed is unknown, defaulting to 1000 [ 391.830476][T11709] netlink: 'syz.2.1416': attribute type 10 has an invalid length. [ 391.859919][T11709] bond0: (slave wlan1): refused to change device type [ 391.941417][T11711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1417'. [ 392.129522][T11722] netlink: 'syz.4.1421': attribute type 1 has an invalid length. [ 392.163913][T11725] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1420'. [ 392.272976][T11690] vxcan1 speed is unknown, defaulting to 1000 [ 392.281576][T11726] lo speed is unknown, defaulting to 1000 [ 392.615579][T11730] netlink: 'syz.2.1422': attribute type 30 has an invalid length. [ 393.180549][T11726] vxcan1 speed is unknown, defaulting to 1000 [ 393.999477][T11743] netlink: 'syz.3.1426': attribute type 10 has an invalid length. [ 394.120704][T11743] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.180780][T11748] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 394.225148][T11743] team0: entered promiscuous mode [ 394.241638][T11743] team_slave_0: entered promiscuous mode [ 394.253847][T11748] raw_sendmsg: syz.3.1426 forgot to set AF_INET. Fix it! [ 394.269893][T11743] team_slave_1: entered promiscuous mode [ 394.289968][T11743] geneve0: entered promiscuous mode [ 394.306794][T11743] bond0: (slave team0): Enslaving as an active interface with an up link [ 394.326961][T11751] netlink: 'syz.4.1428': attribute type 10 has an invalid length. [ 394.357775][T11751] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 394.507689][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1431'. [ 394.825261][T11759] lo speed is unknown, defaulting to 1000 [ 396.182801][T11781] lo speed is unknown, defaulting to 1000 [ 396.867253][T11759] vxcan1 speed is unknown, defaulting to 1000 [ 397.382691][T11781] vxcan1 speed is unknown, defaulting to 1000 [ 397.987585][T11812] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1443'. [ 398.109146][T11816] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1443'. [ 399.776140][T11830] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 399.806718][T11830] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 399.853005][T11830] tipc: Resetting bearer [ 400.261678][T11841] nbd: must specify at least one socket [ 400.268113][T11841] block nbd4: NBD_DISCONNECT [ 400.272848][T11841] block nbd4: Send disconnect failed -32 [ 400.287143][T11841] block nbd4: shutting down sockets [ 400.391512][T11841] bond9: entered promiscuous mode [ 400.404608][T11841] bond9: entered allmulticast mode [ 400.416159][T11841] 8021q: adding VLAN 0 to HW filter on device bond9 [ 401.254184][T11850] lo speed is unknown, defaulting to 1000 [ 401.288335][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 401.609899][T11857] netlink: 'syz.1.1455': attribute type 12 has an invalid length. [ 401.678840][T11857] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1455'. [ 401.776067][T11863] bond10: option arp_validate: invalid value (18446744073491447809) [ 401.794924][T11863] bond10 (unregistering): Released all slaves [ 401.893323][T11861] netlink: 'syz.4.1457': attribute type 13 has an invalid length. [ 402.238184][T11872] bond9: entered promiscuous mode [ 402.264065][T11872] bond9: entered allmulticast mode [ 402.275301][T11872] 8021q: adding VLAN 0 to HW filter on device bond9 [ 402.327280][T11850] vxcan1 speed is unknown, defaulting to 1000 [ 402.557457][T11880] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1461'. [ 402.601819][T11880] tipc: Enabling of bearer rejected, already enabled [ 402.660455][T11884] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1459'. [ 402.670525][T11880] tipc: New replicast peer: 255.255.255.255 [ 403.543981][T11896] tipc: Enabling of bearer rejected, failed to enable media [ 403.569523][T11896] syzkaller0: entered promiscuous mode [ 403.584179][T11896] syzkaller0: entered allmulticast mode [ 404.219224][T11903] team0: Refused to change device type [ 404.369992][T11904] tipc: Enabling of bearer rejected, already enabled [ 404.388522][T11903] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 404.389987][T11909] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 404.414980][T11903] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 404.423037][T11903] tipc: Resetting bearer [ 405.072452][T11811] Set syz1 is full, maxelem 65536 reached [ 407.349284][T11914] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 407.386141][T11918] lo speed is unknown, defaulting to 1000 [ 407.492219][T11929] netlink: 'syz.2.1473': attribute type 10 has an invalid length. [ 407.664106][T11929] 8021q: adding VLAN 0 to HW filter on device bond10 [ 407.846151][T11934] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 407.912737][T11934] bond10: (slave macvlan0): Enslaving as a backup interface with a down link [ 408.294658][T11936] lo speed is unknown, defaulting to 1000 [ 408.389556][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1475'. [ 408.640331][T11940] lo speed is unknown, defaulting to 1000 [ 408.646489][T11918] vxcan1 speed is unknown, defaulting to 1000 [ 408.949606][T11954] lo speed is unknown, defaulting to 1000 [ 409.144564][T11936] vxcan1 speed is unknown, defaulting to 1000 [ 409.761215][T11940] vxcan1 speed is unknown, defaulting to 1000 [ 410.066116][T11954] vxcan1 speed is unknown, defaulting to 1000 [ 410.310864][T11971] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 410.374196][T11973] netlink: 'syz.1.1482': attribute type 10 has an invalid length. [ 410.602230][T11977] netlink: 'syz.1.1483': attribute type 13 has an invalid length. [ 410.611362][T11977] netlink: 'syz.1.1483': attribute type 17 has an invalid length. [ 410.639396][T11977] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.777687][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1485'. [ 410.878599][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1487'. [ 410.989575][T11985] bridge0: entered allmulticast mode [ 411.108037][T11983] netlink: 'syz.3.1486': attribute type 13 has an invalid length. [ 411.230342][T11992] bond9: option arp_validate: invalid value (18446744073491447809) [ 411.244297][T11992] bond9 (unregistering): Released all slaves [ 411.998927][T12008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.006351][T12008] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 412.088268][T12006] nbd0: detected capacity change from 0 to 63 [ 412.098603][T11999] lo speed is unknown, defaulting to 1000 [ 412.119817][T11999] syz0: Port: 1 Link ACTIVE [ 412.225041][T12014] bond9: entered promiscuous mode [ 412.240007][T12014] bond9: entered allmulticast mode [ 412.267260][T12014] 8021q: adding VLAN 0 to HW filter on device bond9 [ 412.304074][ T5150] block nbd0: Receive control failed (result -32) [ 412.391221][T12022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1492'. [ 412.505773][T11999] lo speed is unknown, defaulting to 1000 [ 412.533782][T12024] netlink: 'syz.3.1493': attribute type 10 has an invalid length. [ 412.547556][T12026] netlink: 'syz.0.1492': attribute type 29 has an invalid length. [ 413.710901][T12056] netlink: 'syz.3.1500': attribute type 1 has an invalid length. [ 413.733765][T12056] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1500'. [ 414.301782][T12064] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 414.339666][T12064] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 414.356572][T12064] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 414.588750][ T12] bond10: (slave macvlan0): failed to get link speed/duplex [ 414.609874][T12069] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1504'. [ 414.728096][ T12] bond10: (slave macvlan0): failed to get link speed/duplex [ 414.784006][T12071] bond10: option packets_per_slave: invalid value (1802723700) [ 414.807289][T12071] bond10: option packets_per_slave: allowed values 0 - 65535 [ 415.390015][T12071] bond10 (unregistering): Released all slaves [ 415.600808][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 415.639512][T12084] lo speed is unknown, defaulting to 1000 [ 415.828626][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 415.942005][ T8817] bond10: (slave macvlan0): failed to get link speed/duplex [ 416.059025][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 416.188908][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 416.229059][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 416.309550][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1508'. [ 416.319283][ T8817] bond10: (slave macvlan0): failed to get link speed/duplex [ 416.528851][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 416.638576][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 416.721802][T12084] vxcan1 speed is unknown, defaulting to 1000 [ 416.771935][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 416.881879][T12098] nbd1: detected capacity change from 0 to 63 [ 416.888682][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 416.889172][T12102] block nbd0: NBD_DISCONNECT [ 416.921755][T12102] block nbd0: Send disconnect failed -32 [ 416.927434][T12102] block nbd0: shutting down sockets [ 416.928767][ T8823] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 417.009534][T12098] bond10: entered promiscuous mode [ 417.014781][T12098] bond10: entered allmulticast mode [ 417.020852][T12098] 8021q: adding VLAN 0 to HW filter on device bond10 [ 417.031943][ T5150] block nbd1: Receive control failed (result -32) [ 417.875331][T12128] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1515'. [ 418.076274][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 418.105322][T12127] netlink: 'syz.3.1516': attribute type 5 has an invalid length. [ 418.115464][T12131] netlink: 'syz.0.1517': attribute type 4 has an invalid length. [ 418.123801][T12127] netlink: 'syz.3.1516': attribute type 8 has an invalid length. [ 418.123822][T12127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 418.132356][T12136] smc: removing ib device syz1 [ 418.301446][T12127] geneve2: entered promiscuous mode [ 418.306669][T12127] geneve2: entered allmulticast mode [ 418.370302][T12142] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1519'. [ 418.528358][T12137] bond0: (slave bridge0): Releasing backup interface [ 418.586184][T12137] bridge0: left promiscuous mode [ 418.705250][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1519'. [ 418.707542][T12137] bond0: (slave team0): Releasing backup interface [ 418.760569][T12137] team0: left promiscuous mode [ 418.765632][T12137] team_slave_0: left promiscuous mode [ 418.795119][T12137] team_slave_1: left promiscuous mode [ 418.824144][T12137] geneve0: left promiscuous mode [ 418.889266][T12137] bond0: (slave dummy0): Releasing backup interface [ 418.923045][T12137] dummy0: left promiscuous mode [ 418.947604][T12137] bridge_slave_0: left allmulticast mode [ 418.967173][T12137] bridge_slave_0: left promiscuous mode [ 419.007621][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.067619][T12137] bridge_slave_1: left allmulticast mode [ 419.073496][T12137] bridge_slave_1: left promiscuous mode [ 419.079543][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.129839][T12137] bond0: (slave bond_slave_0): Releasing backup interface [ 419.149477][T12137] bond_slave_0: left promiscuous mode [ 419.174891][T12137] bond0: (slave bond_slave_1): Releasing backup interface [ 419.194832][T12137] bond_slave_1: left promiscuous mode [ 419.224642][T12137] team0: Port device team_slave_0 removed [ 419.245021][T12137] team0: Port device team_slave_1 removed [ 419.259021][T12137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.295069][T12137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.325985][ T154] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 419.384980][ T154] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 419.408865][ T154] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 419.433735][T12155] netlink: 'syz.1.1520': attribute type 16 has an invalid length. [ 419.461916][T12155] netlink: 'syz.1.1520': attribute type 17 has an invalid length. [ 419.484081][ T154] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 419.523014][T12142] lo speed is unknown, defaulting to 1000 [ 420.021207][ T5841] Bluetooth: hci3: command 0x0405 tx timeout [ 420.176050][T12167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1524'. [ 420.217893][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1524'. [ 420.339188][T12172] bond9: left promiscuous mode [ 420.369393][T12172] bond9: left allmulticast mode [ 420.461461][T12142] vxcan1 speed is unknown, defaulting to 1000 [ 420.468978][T12154] lo speed is unknown, defaulting to 1000 [ 420.848378][ T12] net_ratelimit: 19 callbacks suppressed [ 420.848398][ T12] bond10: (slave macvlan0): failed to get link speed/duplex [ 420.969189][ T12] bond10: (slave macvlan0): failed to get link speed/duplex [ 421.079004][ T8817] bond10: (slave macvlan0): failed to get link speed/duplex [ 421.182981][T12176] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1526'. [ 421.235554][T12165] lo speed is unknown, defaulting to 1000 [ 421.242440][T12154] vxcan1 speed is unknown, defaulting to 1000 [ 421.338287][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 421.458499][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 421.506624][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 421.577168][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 421.592497][T12165] vxcan1 speed is unknown, defaulting to 1000 [ 421.738346][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 421.900348][T12185] lo speed is unknown, defaulting to 1000 [ 421.908540][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 422.053470][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 422.228172][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 422.393132][T12191] lo speed is unknown, defaulting to 1000 [ 422.970989][T12196] lo speed is unknown, defaulting to 1000 [ 423.145008][T12196] vxcan1 speed is unknown, defaulting to 1000 [ 423.309178][T12185] vxcan1 speed is unknown, defaulting to 1000 [ 423.835030][T12191] vxcan1 speed is unknown, defaulting to 1000 [ 423.885715][T12207] 8021q: adding VLAN 0 to HW filter on device bond10 [ 424.145065][T12207] bond10 (unregistering): Released all slaves [ 424.961648][T12216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 424.988744][T12216] netlink: 'syz.1.1535': attribute type 5 has an invalid length. [ 424.996505][T12216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1535'. [ 425.070087][T12221] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 425.080377][T12216] geneve6: entered promiscuous mode [ 425.087440][T12216] geneve6: entered allmulticast mode [ 425.211412][ T3484] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 425.223927][ T3484] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 425.244483][ T3484] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 425.267338][ T3484] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 425.462634][T12236] nbd: must specify at least one socket [ 425.533243][T12236] bond10: entered promiscuous mode [ 425.539399][T12236] bond10: entered allmulticast mode [ 425.545311][T12236] 8021q: adding VLAN 0 to HW filter on device bond10 [ 425.625464][T12242] nbd: must specify at least one socket [ 425.744512][T12249] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1541'. [ 425.758330][T12249] netlink: 'syz.0.1541': attribute type 13 has an invalid length. [ 425.786125][T12242] bond11: entered promiscuous mode [ 425.792360][T12242] bond11: entered allmulticast mode [ 425.798642][T12242] 8021q: adding VLAN 0 to HW filter on device bond11 [ 425.830484][T12254] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1542'. [ 425.928127][ T8823] net_ratelimit: 16 callbacks suppressed [ 425.928147][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 425.963141][T12252] lo speed is unknown, defaulting to 1000 [ 425.974337][T12223] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 426.078472][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 426.188101][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 426.469285][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 426.532684][T12252] vxcan1 speed is unknown, defaulting to 1000 [ 426.619286][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 426.642911][T12266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1546'. [ 426.748752][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 426.858989][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 426.974435][T12266] nbd: socks must be embedded in a SOCK_ITEM attr [ 427.002499][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 427.128551][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 427.136981][T12279] nbd: must specify at least one socket [ 427.183139][T12279] bond10: entered promiscuous mode [ 427.199538][T12279] bond10: entered allmulticast mode [ 427.205365][T12279] 8021q: adding VLAN 0 to HW filter on device bond10 [ 427.238086][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 427.555677][T12287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1552'. [ 427.568558][T12286] netlink: 'syz.3.1551': attribute type 1 has an invalid length. [ 427.857185][T12291] lo speed is unknown, defaulting to 1000 [ 428.268516][T12291] vxcan1 speed is unknown, defaulting to 1000 [ 428.391659][T12295] bond12: entered promiscuous mode [ 428.396940][T12295] bond12: entered allmulticast mode [ 428.402920][T12295] 8021q: adding VLAN 0 to HW filter on device bond12 [ 428.593963][T12308] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1558'. [ 428.956769][T12315] netlink: 'syz.1.1559': attribute type 10 has an invalid length. [ 429.505689][T12323] nbd: must specify at least one socket [ 429.623751][T12323] bond11: entered promiscuous mode [ 429.629583][T12323] bond11: entered allmulticast mode [ 429.635312][T12323] 8021q: adding VLAN 0 to HW filter on device bond11 [ 429.711366][T12335] netlink: 'syz.0.1565': attribute type 12 has an invalid length. [ 430.176470][T12345] nbd: nbd1 already in use [ 430.182152][T12345] block nbd1: NBD_DISCONNECT [ 430.186886][T12345] block nbd1: Send disconnect failed -32 [ 430.193360][T12345] block nbd1: shutting down sockets [ 430.265574][T12345] bond10: entered promiscuous mode [ 430.275701][T12345] bond10: entered allmulticast mode [ 430.308800][T12345] 8021q: adding VLAN 0 to HW filter on device bond10 [ 430.659770][ T5841] Bluetooth: hci3: command 0x0405 tx timeout [ 431.018174][ T154] net_ratelimit: 20 callbacks suppressed [ 431.018195][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 431.248264][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 431.285059][T12364] 8021q: adding VLAN 0 to HW filter on device bond13 [ 431.595612][T12364] bond13 (unregistering): Released all slaves [ 432.156749][T12382] syzkaller1: entered promiscuous mode [ 432.167098][T12382] syzkaller1: entered allmulticast mode [ 432.258347][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 432.314606][T12394] lo speed is unknown, defaulting to 1000 [ 432.369529][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 432.478254][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 432.516334][T12396] Bluetooth: MGMT ver 1.23 [ 432.532442][T12394] vxcan1 speed is unknown, defaulting to 1000 [ 432.600045][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 432.612761][T12398] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 432.768564][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 432.858433][T12403] nbd0: detected capacity change from 0 to 63 [ 432.870472][T12409] bond12: entered promiscuous mode [ 432.875755][T12409] bond12: entered allmulticast mode [ 432.882159][T12409] 8021q: adding VLAN 0 to HW filter on device bond12 [ 432.916745][ T5150] block nbd0: Receive control failed (result -32) [ 432.925145][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1583'. [ 433.001106][T12414] vlan0: entered promiscuous mode [ 433.011997][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1581'. [ 433.115742][T12417] netlink: 'syz.2.1583': attribute type 14 has an invalid length. [ 433.248115][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 433.359233][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 433.468930][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 433.605991][T12439] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1587'. [ 433.871905][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 434.283467][T12450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1591'. [ 434.350522][T12450] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 434.442037][T12450] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 434.581283][T12450] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 434.608357][T12459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1593'. [ 434.701949][T12450] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 434.758237][T12462] nbd1: detected capacity change from 0 to 63 [ 434.794917][T12465] bond11: entered promiscuous mode [ 434.809830][T12465] bond11: entered allmulticast mode [ 434.827519][T12465] 8021q: adding VLAN 0 to HW filter on device bond11 [ 434.847591][ T5150] block nbd1: Receive control failed (result -32) [ 435.002818][ T8817] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 435.036579][ T8817] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 435.071922][ T8823] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 435.158034][ T3484] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 435.221810][T12473] lo speed is unknown, defaulting to 1000 [ 435.243374][T12477] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 435.255570][T12481] netlink: 'syz.1.1597': attribute type 4 has an invalid length. [ 435.296530][T12476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 435.432099][T12477] tipc: Resetting bearer [ 435.482295][ T8817] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 435.493211][ T8817] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 435.558751][ T8817] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 435.583143][ T8817] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 435.597894][T12473] vxcan1 speed is unknown, defaulting to 1000 [ 435.605356][T12486] netlink: 'syz.3.1598': attribute type 39 has an invalid length. [ 435.906910][T12494] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 436.001718][T12498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 436.050633][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1599'. [ 436.264830][ T8819] net_ratelimit: 13 callbacks suppressed [ 436.264851][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 436.412117][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 436.507502][T12508] nbd: must specify at least one socket [ 436.532110][T12508] block nbd1: NBD_DISCONNECT [ 436.538653][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 436.550078][T12508] block nbd1: Send disconnect failed -32 [ 436.565038][T12508] block nbd1: shutting down sockets [ 436.703694][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1602'. [ 436.817460][T12508] bond12: entered promiscuous mode [ 436.838427][T12508] bond12: entered allmulticast mode [ 436.865637][T12508] 8021q: adding VLAN 0 to HW filter on device bond12 [ 436.908693][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 437.018797][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 437.182188][T12519] netlink: 'syz.1.1606': attribute type 4 has an invalid length. [ 437.396143][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 437.508135][ T8817] bond10: (slave macvlan0): failed to get link speed/duplex [ 437.668612][ T8817] bond10: (slave macvlan0): failed to get link speed/duplex [ 437.796381][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 437.904225][T12527] netlink: 'syz.1.1608': attribute type 5 has an invalid length. [ 437.913063][T12527] netlink: 'syz.1.1608': attribute type 8 has an invalid length. [ 437.921531][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 437.930136][T12527] __nla_validate_parse: 4 callbacks suppressed [ 437.930154][T12527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 438.129132][T12541] lo speed is unknown, defaulting to 1000 [ 438.227801][T12548] netlink: 'syz.3.1612': attribute type 10 has an invalid length. [ 438.261497][T12548] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 438.316895][T12548] team0: Failed to send options change via netlink (err -105) [ 438.378251][T12548] team0: Port device dummy0 added [ 438.559131][T12541] vxcan1 speed is unknown, defaulting to 1000 [ 438.730377][T12553] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 438.742890][T12553] netlink: 'syz.2.1615': attribute type 2 has an invalid length. [ 438.812508][T12556] nbd: must specify at least one socket [ 438.855341][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 438.996596][T12556] bond11: entered promiscuous mode [ 439.016338][T12556] bond11: entered allmulticast mode [ 439.041314][T12556] 8021q: adding VLAN 0 to HW filter on device bond11 [ 439.671016][T12575] tipc: Enabling of bearer rejected, failed to enable media [ 440.025653][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.345040][T12592] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1621'. [ 440.358972][T12593] tipc: Enabling of bearer rejected, failed to enable media [ 441.342621][ T154] net_ratelimit: 24 callbacks suppressed [ 441.342641][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 441.435559][T12613] lo speed is unknown, defaulting to 1000 [ 441.469974][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 441.556954][T12615] nbd2: detected capacity change from 0 to 63 [ 441.571236][T12617] bond11: entered promiscuous mode [ 441.578902][T12617] bond11: entered allmulticast mode [ 441.599540][T12617] 8021q: adding VLAN 0 to HW filter on device bond11 [ 441.667680][ T5150] block nbd2: Receive control failed (result -32) [ 441.678392][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 441.788133][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 442.008221][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 442.027707][T12613] vxcan1 speed is unknown, defaulting to 1000 [ 442.052466][T12620] lo speed is unknown, defaulting to 1000 [ 442.128510][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 442.458317][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 442.588070][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 442.748066][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 442.794859][T12637] lo speed is unknown, defaulting to 1000 [ 442.803453][T12620] vxcan1 speed is unknown, defaulting to 1000 [ 443.044340][T12651] tipc: Enabling of bearer rejected, already enabled [ 443.067469][T12651] tipc: Resetting bearer [ 443.118665][ T3484] bond10: (slave macvlan0): failed to get link speed/duplex [ 443.296441][T12657] netlink: 'syz.1.1636': attribute type 1 has an invalid length. [ 443.485179][T12642] lo speed is unknown, defaulting to 1000 [ 443.852008][T12661] lo speed is unknown, defaulting to 1000 [ 443.852368][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 444.410370][T12672] lo speed is unknown, defaulting to 1000 [ 444.484819][T12642] vxcan1 speed is unknown, defaulting to 1000 [ 445.158439][T12661] vxcan1 speed is unknown, defaulting to 1000 [ 445.158638][T12685] lo speed is unknown, defaulting to 1000 [ 446.023971][T12672] vxcan1 speed is unknown, defaulting to 1000 [ 446.363173][T12685] vxcan1 speed is unknown, defaulting to 1000 [ 446.579659][ T8823] net_ratelimit: 22 callbacks suppressed [ 446.579680][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 446.718712][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 447.268502][ T8817] bond10: (slave macvlan0): failed to get link speed/duplex [ 447.705323][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 447.818803][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 447.928585][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 447.948727][T12704] tipc: Enabling of bearer rejected, failed to enable media [ 448.039311][ T8817] bond10: (slave macvlan0): failed to get link speed/duplex [ 448.148348][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 448.278599][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 448.388612][ T8817] bond10: (slave macvlan0): failed to get link speed/duplex [ 448.584258][T12723] tipc: Enabling of bearer rejected, failed to enable media [ 448.625491][T12724] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1647'. [ 448.781853][T12733] netlink: 'syz.4.1650': attribute type 1 has an invalid length. [ 449.082195][T12739] 8021q: adding VLAN 0 to HW filter on device bond13 [ 449.267461][T12744] netlink: 'syz.2.1652': attribute type 2 has an invalid length. [ 449.356583][T12740] bond13 (unregistering): Released all slaves [ 449.648848][T12753] tipc: Enabling of bearer rejected, failed to enable media [ 449.664985][T12753] syzkaller0: entered promiscuous mode [ 449.679206][T12753] syzkaller0: entered allmulticast mode [ 449.791968][T12758] netlink: 'syz.0.1655': attribute type 1 has an invalid length. [ 449.816079][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 449.869765][T12758] sch_fq: defrate 0 ignored. [ 450.063346][T12769] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1658'. [ 450.203351][T12773] netlink: 'syz.3.1660': attribute type 10 has an invalid length. [ 450.251028][T12775] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 450.360998][T12775] 8021q: adding VLAN 0 to HW filter on device bond13 [ 450.840815][T12775] bond13 (unregistering): Released all slaves [ 450.969912][T12781] tipc: Enabling of bearer rejected, failed to enable media [ 450.981931][T12778] lo speed is unknown, defaulting to 1000 [ 451.183679][T12804] tipc: Enabled bearer , priority 0 [ 451.203949][T12806] netlink: 'syz.1.1665': attribute type 1 has an invalid length. [ 451.321798][T12804] syzkaller0: entered promiscuous mode [ 451.327395][T12804] syzkaller0: entered allmulticast mode [ 452.384179][T12826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'. [ 453.432620][T12813] tipc: Resetting bearer [ 453.440215][T12814] 8021q: adding VLAN 0 to HW filter on device bond13 [ 453.529966][T12806] bond13 (unregistering): Released all slaves [ 453.545040][T12778] vxcan1 speed is unknown, defaulting to 1000 [ 453.547142][T12822] net_ratelimit: 13 callbacks suppressed [ 453.547159][T12822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 453.587777][T12803] tipc: Resetting bearer [ 453.679090][T12803] tipc: Disabling bearer [ 453.709686][T12830] netlink: 'syz.0.1670': attribute type 3 has an invalid length. [ 453.722361][T12830] syz_tun: entered allmulticast mode [ 453.728596][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 453.739675][T12830] syz_tun: left allmulticast mode [ 453.838685][ T8821] bond10: (slave macvlan0): failed to get link speed/duplex [ 453.868348][T12843] netlink: 'syz.4.1674': attribute type 10 has an invalid length. [ 453.912502][T12844] netlink: 'syz.0.1673': attribute type 10 has an invalid length. [ 453.953283][T12847] netlink: 'syz.4.1675': attribute type 1 has an invalid length. [ 454.009774][T12847] 8021q: adding VLAN 0 to HW filter on device bond13 [ 454.156848][T12847] bond13 (unregistering): Released all slaves [ 454.174519][T12850] tipc: Enabling of bearer rejected, failed to enable media [ 454.198648][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 454.318676][ T154] bond10: (slave macvlan0): failed to get link speed/duplex [ 454.450163][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 454.568727][ T8823] bond10: (slave macvlan0): failed to get link speed/duplex [ 454.688746][ T1148] bond10: (slave macvlan0): failed to get link speed/duplex [ 454.708600][T12865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'. [ 454.743865][T12869] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1679'. [ 454.838345][ T1148] bond10: (slave macvlan0): failed to get link speed/duplex [ 454.928448][T12871] nbd1: detected capacity change from 0 to 63 [ 454.980006][T12873] bond13: entered promiscuous mode [ 454.985962][T12873] bond13: entered allmulticast mode [ 455.022717][T12873] 8021q: adding VLAN 0 to HW filter on device bond13 [ 455.061865][ T5150] block nbd1: Receive control failed (result -32) [ 455.088429][ T8819] bond10: (slave macvlan0): failed to get link speed/duplex [ 455.135914][T12878] tipc: Enabling of bearer rejected, failed to enable media [ 455.340084][T12880] syzkaller1: entered promiscuous mode [ 455.345981][T12880] syzkaller1: entered allmulticast mode [ 455.378469][ C1] ------------[ cut here ]------------ [ 455.384303][ C1] ODEBUG: free active (active state 0) object: ffff88802e97c890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 455.397868][ C1] WARNING: CPU: 1 PID: 12886 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 455.407598][ C1] Modules linked in: [ 455.411889][ C1] CPU: 1 UID: 0 PID: 12886 Comm: syz.2.1684 Not tainted syzkaller #0 PREEMPT(full) [ 455.421392][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 455.431579][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 455.437406][ C1] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 455.457165][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 455.463319][ C1] RAX: 03320abef792fd00 RBX: dffffc0000000000 RCX: ffff888040f1bc80 [ 455.471344][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 455.479362][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 455.487344][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c00 [ 455.495371][ C1] R13: ffffffff8bc08000 R14: ffff88802e97c890 R15: ffffffff8b6cf600 [ 455.503414][ C1] FS: 00007fe7c31db6c0(0000) GS:ffff888125e0f000(0000) knlGS:0000000000000000 [ 455.512408][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 455.519049][ C1] CR2: 00007fe7c31daf98 CR3: 00000000857d0000 CR4: 00000000003526f0 [ 455.527084][ C1] Call Trace: [ 455.530432][ C1] [ 455.533296][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 455.538923][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 455.544060][ C1] kfree+0x115/0x6d0 [ 455.548019][ C1] rose_timer_expiry+0x4cb/0x600 [ 455.552986][ C1] call_timer_fn+0x17e/0x5f0 [ 455.557588][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 455.563109][ C1] ? call_timer_fn+0xbe/0x5f0 [ 455.567809][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 455.573083][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 455.578366][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.583586][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 455.589113][ C1] __run_timer_base+0x61a/0x860 [ 455.594005][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 455.599452][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 455.605736][ C1] run_timer_softirq+0xb7/0x180 [ 455.610664][ C1] handle_softirqs+0x283/0x870 [ 455.615449][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 455.620288][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 455.625600][ C1] __irq_exit_rcu+0xca/0x1f0 [ 455.630260][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 455.635489][ C1] irq_exit_rcu+0x9/0x30 [ 455.639800][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 455.645458][ C1] [ 455.648443][ C1] [ 455.651382][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 455.657378][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 455.662736][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb 2c f4 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 455.682947][ C1] RSP: 0018:ffffc90003c9f418 EFLAGS: 00000206 [ 455.689093][ C1] RAX: 03320abef792fd00 RBX: 0000000000000000 RCX: 03320abef792fd00 [ 455.697089][ C1] RDX: 0000000000000000 RSI: ffffffff8d9d1595 RDI: ffffffff8bc074e0 [ 455.705135][ C1] RBP: ffffffff81731d25 R08: 0000000000000000 R09: ffffffff81731d25 [ 455.713447][ C1] R10: ffffc90003c9f5e8 R11: fffff52000793ec9 R12: 0000000000000002 [ 455.721499][ C1] R13: ffffffff8e13d320 R14: 0000000000000000 R15: 0000000000000246 [ 455.729555][ C1] ? unwind_next_frame+0xa5/0x2390 [ 455.734692][ C1] ? unwind_next_frame+0xa5/0x2390 [ 455.739895][ C1] ? tun_set_iff+0x844/0xf00 [ 455.744496][ C1] ? __tun_chr_ioctl+0x788/0x1df0 [ 455.749592][ C1] ? __se_sys_ioctl+0xfc/0x170 [ 455.754384][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.760530][ C1] ? __unwind_start+0xf8/0x760 [ 455.765312][ C1] ? unwind_next_frame+0xa5/0x2390 [ 455.770496][ C1] unwind_next_frame+0xc2/0x2390 [ 455.775542][ C1] ? unwind_next_frame+0xa5/0x2390 [ 455.780739][ C1] ? node_tag_clear+0x1ef/0x320 [ 455.785605][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 455.791146][ C1] __unwind_start+0x5b9/0x760 [ 455.795841][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 455.802072][ C1] arch_stack_walk+0xe4/0x150 [ 455.806771][ C1] ? __unwind_start+0xf8/0x760 [ 455.811623][ C1] stack_trace_save+0x9c/0xe0 [ 455.816313][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 455.821779][ C1] kasan_save_track+0x3e/0x80 [ 455.826530][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 455.831818][ C1] __kasan_kmalloc+0x93/0xb0 [ 455.836441][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 455.841887][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 455.847113][ C1] kobject_uevent_env+0x27c/0x8c0 [ 455.852242][ C1] net_rx_queue_update_kobjects+0x3e5/0x740 [ 455.858238][ C1] netdev_register_kobject+0x21f/0x310 [ 455.863720][ C1] register_netdevice+0x126c/0x1ae0 [ 455.868997][ C1] ? __kasan_kmalloc_large+0x85/0xa0 [ 455.874322][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 455.879943][ C1] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 455.885520][ C1] ? __asan_memset+0x22/0x50 [ 455.890195][ C1] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 455.895347][ C1] ? tun_net_initialize+0x18d/0x450 [ 455.900629][ C1] ? __pfx_tun_net_initialize+0x10/0x10 [ 455.906187][ C1] ? alloc_netdev_mqs+0xd9b/0x11b0 [ 455.911405][ C1] tun_set_iff+0x844/0xf00 [ 455.915840][ C1] __tun_chr_ioctl+0x788/0x1df0 [ 455.920788][ C1] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 455.926109][ C1] ? __fget_files+0x3a0/0x420 [ 455.930878][ C1] ? __fget_files+0x2a/0x420 [ 455.935567][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 455.940600][ C1] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 455.945742][ C1] __se_sys_ioctl+0xfc/0x170 [ 455.950430][ C1] do_syscall_64+0xfa/0xfa0 [ 455.954952][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.960248][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.966330][ C1] ? clear_bhb_loop+0x60/0xb0 [ 455.971104][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.977180][ C1] RIP: 0033:0x7fe7c238eec9 [ 455.981688][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.001409][ C1] RSP: 002b:00007fe7c31db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.009954][ C1] RAX: ffffffffffffffda RBX: 00007fe7c25e5fa0 RCX: 00007fe7c238eec9 [ 456.018041][ C1] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 456.026101][ C1] RBP: 00007fe7c2411f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.034207][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.042284][ C1] R13: 00007fe7c25e6038 R14: 00007fe7c25e5fa0 R15: 00007ffd96fd14c8 [ 456.050412][ C1] [ 456.053545][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 456.060847][ C1] CPU: 1 UID: 0 PID: 12886 Comm: syz.2.1684 Not tainted syzkaller #0 PREEMPT(full) [ 456.070239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 456.080337][ C1] Call Trace: [ 456.083641][ C1] [ 456.086511][ C1] dump_stack_lvl+0x99/0x250 [ 456.091124][ C1] ? __asan_memcpy+0x40/0x70 [ 456.095741][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.100968][ C1] ? __pfx__printk+0x10/0x10 [ 456.105588][ C1] vpanic+0x237/0x6d0 [ 456.109678][ C1] ? __pfx_vpanic+0x10/0x10 [ 456.114194][ C1] panic+0xb9/0xc0 [ 456.117930][ C1] ? __pfx_panic+0x10/0x10 [ 456.122448][ C1] __warn+0x31b/0x4b0 [ 456.126426][ C1] ? debug_print_object+0x16b/0x1e0 [ 456.131698][ C1] ? debug_print_object+0x16b/0x1e0 [ 456.136883][ C1] report_bug+0x2be/0x4f0 [ 456.141207][ C1] ? debug_print_object+0x16b/0x1e0 [ 456.146404][ C1] ? debug_print_object+0x16b/0x1e0 [ 456.151593][ C1] ? debug_print_object+0x16d/0x1e0 [ 456.156798][ C1] handle_bug+0x84/0x160 [ 456.161037][ C1] exc_invalid_op+0x1a/0x50 [ 456.165623][ C1] asm_exc_invalid_op+0x1a/0x20 [ 456.170461][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 456.176269][ C1] Code: 4c 89 ff e8 37 f9 8b fd 4d 8b 0f 48 c7 c7 80 7e c0 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 fa 77 e9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 77 06 05 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 456.196141][ C1] RSP: 0018:ffffc90000a08a00 EFLAGS: 00010296 [ 456.202216][ C1] RAX: 03320abef792fd00 RBX: dffffc0000000000 RCX: ffff888040f1bc80 [ 456.210181][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 456.218144][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 456.226112][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa658 R12: ffffffff8a3e0c00 [ 456.234080][ C1] R13: ffffffff8bc08000 R14: ffff88802e97c890 R15: ffffffff8b6cf600 [ 456.242056][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 456.247716][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 456.253277][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 456.258401][ C1] kfree+0x115/0x6d0 [ 456.262310][ C1] rose_timer_expiry+0x4cb/0x600 [ 456.267246][ C1] call_timer_fn+0x17e/0x5f0 [ 456.271834][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 456.277285][ C1] ? call_timer_fn+0xbe/0x5f0 [ 456.281950][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 456.287228][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.292424][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.297707][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 456.303172][ C1] __run_timer_base+0x61a/0x860 [ 456.308038][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 456.313412][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 456.319664][ C1] run_timer_softirq+0xb7/0x180 [ 456.324512][ C1] handle_softirqs+0x283/0x870 [ 456.329274][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 456.334032][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 456.339320][ C1] __irq_exit_rcu+0xca/0x1f0 [ 456.343901][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 456.349121][ C1] irq_exit_rcu+0x9/0x30 [ 456.353353][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 456.358982][ C1] [ 456.361899][ C1] [ 456.364824][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.370798][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 456.376074][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 eb 2c f4 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 456.395674][ C1] RSP: 0018:ffffc90003c9f418 EFLAGS: 00000206 [ 456.401737][ C1] RAX: 03320abef792fd00 RBX: 0000000000000000 RCX: 03320abef792fd00 [ 456.409698][ C1] RDX: 0000000000000000 RSI: ffffffff8d9d1595 RDI: ffffffff8bc074e0 [ 456.417655][ C1] RBP: ffffffff81731d25 R08: 0000000000000000 R09: ffffffff81731d25 [ 456.425615][ C1] R10: ffffc90003c9f5e8 R11: fffff52000793ec9 R12: 0000000000000002 [ 456.433581][ C1] R13: ffffffff8e13d320 R14: 0000000000000000 R15: 0000000000000246 [ 456.441551][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.446656][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.451766][ C1] ? tun_set_iff+0x844/0xf00 [ 456.456340][ C1] ? __tun_chr_ioctl+0x788/0x1df0 [ 456.461440][ C1] ? __se_sys_ioctl+0xfc/0x170 [ 456.466195][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.472266][ C1] ? __unwind_start+0xf8/0x760 [ 456.477023][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.482169][ C1] unwind_next_frame+0xc2/0x2390 [ 456.487123][ C1] ? unwind_next_frame+0xa5/0x2390 [ 456.492246][ C1] ? node_tag_clear+0x1ef/0x320 [ 456.497129][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 456.502612][ C1] __unwind_start+0x5b9/0x760 [ 456.507403][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 456.513586][ C1] arch_stack_walk+0xe4/0x150 [ 456.518280][ C1] ? __unwind_start+0xf8/0x760 [ 456.523074][ C1] stack_trace_save+0x9c/0xe0 [ 456.527751][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 456.533131][ C1] kasan_save_track+0x3e/0x80 [ 456.537852][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 456.543050][ C1] __kasan_kmalloc+0x93/0xb0 [ 456.547645][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 456.553023][ C1] ? kobject_uevent_env+0x27c/0x8c0 [ 456.558659][ C1] kobject_uevent_env+0x27c/0x8c0 [ 456.563780][ C1] net_rx_queue_update_kobjects+0x3e5/0x740 [ 456.569713][ C1] netdev_register_kobject+0x21f/0x310 [ 456.575175][ C1] register_netdevice+0x126c/0x1ae0 [ 456.580460][ C1] ? __kasan_kmalloc_large+0x85/0xa0 [ 456.586106][ C1] ? __pfx_register_netdevice+0x10/0x10 [ 456.591645][ C1] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 456.597187][ C1] ? __asan_memset+0x22/0x50 [ 456.601854][ C1] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 456.606971][ C1] ? tun_net_initialize+0x18d/0x450 [ 456.612157][ C1] ? __pfx_tun_net_initialize+0x10/0x10 [ 456.617691][ C1] ? alloc_netdev_mqs+0xd9b/0x11b0 [ 456.622803][ C1] tun_set_iff+0x844/0xf00 [ 456.627218][ C1] __tun_chr_ioctl+0x788/0x1df0 [ 456.632417][ C1] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 456.637696][ C1] ? __fget_files+0x3a0/0x420 [ 456.642363][ C1] ? __fget_files+0x2a/0x420 [ 456.646946][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 456.651874][ C1] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 456.656985][ C1] __se_sys_ioctl+0xfc/0x170 [ 456.661751][ C1] do_syscall_64+0xfa/0xfa0 [ 456.666254][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.671450][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.677594][ C1] ? clear_bhb_loop+0x60/0xb0 [ 456.682266][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.688153][ C1] RIP: 0033:0x7fe7c238eec9 [ 456.692583][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.712500][ C1] RSP: 002b:00007fe7c31db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.721544][ C1] RAX: ffffffffffffffda RBX: 00007fe7c25e5fa0 RCX: 00007fe7c238eec9 [ 456.729532][ C1] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 456.737591][ C1] RBP: 00007fe7c2411f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.745753][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.753839][ C1] R13: 00007fe7c25e6038 R14: 00007fe7c25e5fa0 R15: 00007ffd96fd14c8 [ 456.761946][ C1] [ 456.765250][ C1] Kernel Offset: disabled [ 456.769568][ C1] Rebooting in 86400 seconds..