last executing test programs: 7.566683083s ago: executing program 3 (id=1657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x160, 0x1170, 0x1398, 0x0, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="7000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004"], 0x8c}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r9, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r9, 0x1) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r10, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r10, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r11, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r13, {0x0, 0xd}, {0x6, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000001700)="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", 0x1000}, {&(0x7f0000000040)="a33ea82a42dbe4e348ea0320049b07c4620b83ac41486f68db1bd869f9b65946271466e39717135532ec79468a18fa389c44f7727a33e251c689e3780fca44dd5a70c412b35fabbb7a0b9eca39ccdb850ea6ff8938352efa46a347646146cc81c15f53d298e279c262985e935f142f7dba775c5cfca94f1240ddf7d545e978282ef82c7373866773ec6563199e3b7c63095da0625ea783579d263fc3a57124d122345a291ede422bb7b9d879f8f1a32d0c049a6f43baa32b3894b81dc5bee54684fa7d22f70939b1bdfafff3173cf5393992d53718cc91c17f5c01d8a697ecbd3f987f80", 0xe4}, {&(0x7f0000000140)="5706483b4ad9eeba21a4312b3da509fcefb1278f3b2933b10fc8c38711835f3e978f587562da08a869fb172a1e1c78d5a67dd82ff3ecb1556c5d0631022cff9612dc1e9af083ebfa7e2eb588704349a5fbafbc7e57c7532ba5744d378d6e217f0c188f8cba95436a29091aed5345bfef9dc84896f162cb7f99faa5c7af14805bebded8c1e27b7df513854613eb97556d6782a00cd62593941e20520238eaa7944f6c3a538bfd5e39954d2d95e6ed8b3d4689fb7fcd6c95dd9764c250406e5c6594af3a57db6a1389295cadd3b03bf261f232849aa9e261", 0xd7}, {&(0x7f0000000240)="2b6d412843bfab633a7d942be6dcc07447", 0x11}, {&(0x7f0000000280)="1f1916e19d", 0x5}, {&(0x7f00000002c0)="234d4be5d2b02a4c4ed993708516458c0855d457f8952069f8d1e4fc4eef3ae5a0098a395a3b8ec3f0404b42735f232c1f5b6945057164508ab09b6153ddb26edf05375ed87bf284579038faf6a89b2087d9a1a25e2550e7469ede4419e60a1a9d64738d62081f062882e99e347541c9a5eba597623c9e3ec1976565041d67876f280e67b145302e29a23788cc699a8d6a90e1a57d5209f884e93606b742bb99d4c31c28eb29ab03ababa054fbe697ee20cb316317c57d6ccdf85ad94fb26256413b9305123f48", 0xc7}, {&(0x7f00000003c0)="b85228c5b99a471aec3e634c88759d57ab38f79eb92236944a88b07f6c92b4b5c38a9017fabe12de15ef6e8769eb775500895a0fc27ea30f0ab8a1ba43966c93067b44b70c82", 0x46}, {&(0x7f0000000440)="a986350ed1d0a676b9af49bcb7b1d97708b122b4ffac23889dd5c7e72c88cd158fd4ca7e49661b78e0fa9024e21266df64c327696e893b6d966146f4ee64183fca340f93be16191094fbce4f330d45193921df2cc6be9d", 0x57}], 0x8, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffa}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r13, @multicast2, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0xb0}, 0x8005) 7.113724393s ago: executing program 1 (id=1667): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xd, 0x7fe6, 0xffffffff, 0x42}, 0x48) (async) accept4(r0, 0x0, 0x0, 0x800) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r2, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000640)) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}]}], {0x14}}, 0x88}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010004b0400000000feffffff7a0000001d131fc4b4a9fb57c074f2c80fbc6086800265713bb40e2a806dd7442013286909f2ffa57aeb60c5e1c3c84a9795680c71201420771c71ba3f187f027f49a0c7282b4844b88e310c199f7261c929285d6d2d74523285b860870bfa082d62e332c87f95e9513e1f5cb387ad0b3b2a4d26450505133c97e0bfac40a72bb967fb4d218315a588448da944705386616549395b21ce99b2823bb59c97d16ce72760730a741f626d8937bbf7c13d6bf7e66e4a12266f3a7d", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c002300fbffffffffffffff"], 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r4) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xc8, r5, 0x0, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20814}, 0x40) 7.007842267s ago: executing program 3 (id=1669): socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x11, 0xa, 0x10001, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r1, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x16}}, 0x1c) pipe(&(0x7f00000045c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="24000000580025000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffd}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000440)="ba927afbc9b55400040000ea0732a85d86dd", 0x12, 0x24044085, &(0x7f0000000340)={0x11, 0x88a8, r8, 0x1, 0xd8, 0x6, @remote}, 0x14) close(r4) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 6.984693857s ago: executing program 1 (id=1670): syz_emit_ethernet(0x32, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x10, 0x100}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20004000) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x110}}], 0x28}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0xe, 0x0, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004010) 6.870116105s ago: executing program 1 (id=1673): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0x6, 0x5, 0x3, 0x5, "249523"}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x2a, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x8, 0x0, 0x8000) ioctl$SIOCRSGL2CALL(r3, 0x89e5, &(0x7f0000001f00)=@bcast) ioctl$sock_netrom_SIOCADDRT(r3, 0x6180, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)=@newtfilter={0x4c, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xffff, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x4c}}, 0x48c0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x20, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xb0}, {@in6=@empty}, @in6=@private2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet6_udp_encap(r5, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r7) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r8, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x34}}, 0x0) 6.631943228s ago: executing program 2 (id=1676): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_0\x00', 0x1}) (async) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000280)={'wlan1\x00', @ifru_names='wlan0\x00'}) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0xff, 0x4) (async) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000132ae57f60014001a8010000580"], 0x34}}, 0x0) (async) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x2, 0x4, {0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}}, 0x3a) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) ioctl(r1, 0x8b32, &(0x7f0000000040)) 6.629812669s ago: executing program 0 (id=1678): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) (async) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r2, 0x301, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) 6.54493941s ago: executing program 0 (id=1679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000080)=@ethtool_sset_info={0x37, 0x4, 0x10}}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRDELBR(r1, 0x89a3, &(0x7f0000000200)='hsr0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 6.277135526s ago: executing program 2 (id=1680): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70ad2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff2}, {}, {0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x3f, 0x2, 0x6}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x78, 0xfa}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r6, 0x5201) (async) socket$isdn(0x22, 0x3, 0x24) (async) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) (async) close(0x3) (async) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021206090290000000bd7000ffdbdf25"], 0x10}}, 0x40010) 6.207851059s ago: executing program 0 (id=1681): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000002000010000000000000000000af9130000000002000000001400010000000000000000000000000000000001140002"], 0x44}}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x6, 0x2, @remote}]}, 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x27}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) r4 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r5 = socket(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c90200000000d0a20268fa095d42000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) accept4$nfc_llcp(r4, &(0x7f0000000380), &(0x7f0000000040)=0x60, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000462015f00000000009500000000000000c63b4ea5a13bd29dc5f7796b49ad7156114d0f943beeb53e65833996b36479518b12741919cc69c84ae7151c7aa3b61207dad20f0ef65ef7f73541272239de5857ab680a6874e542a2a402efab9a2b0302b5baa866957d050ce740e44af324f6fe15a5c93c915c4e83e811a11b5a17e347d7e6671c4145fa5bf6181b7761712b916a91b1dfed65ca141baae8518ada0e67d97e1afde9f711479e04f0fa1ba5f9de8f122b01c4ee79ad61197db95c5991"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r8, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0xf9b, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461910000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514"], 0xe8}}, 0x0) listen(r10, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300)={0x27, r8, 0x0, 0x7, 0x9, 0xc, "59768a3ed80a4a01d442f825ac83064198d8be56cfbb43bc73cb895f542707c91c76e1a21cbf33f6f82c6b3fa731f39cf5e8eb0e3f96c0d4c9dcc270cc24e5", 0x34}, 0x60) 6.138671266s ago: executing program 2 (id=1683): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffd9df250300080008000100b7"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) 6.087621075s ago: executing program 2 (id=1684): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)=""/234, 0xea}], 0x1}, 0x101}], 0x1, 0x60, 0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x22, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x20}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x24040800) r4 = socket(0x23, 0x5, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0xfc, 0x6, 0x1, 0x0, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1, 0x1, 0x6, 0x8}}) sendmsg$xdp(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x2c, 0xa, r5, 0x9}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000180)="ca3eb8ec6e1a0205ab69156a229e7dc36c6c6268a7563e5b791ed39f7f532abbc0702b51984b087bb73c490000e122f851ebd375c52ed534bc32c02cddb0dc81589bbd83722f0e7b3e8c077b7ee5e2a2b4b0622f59895f5cb67e23ba14fd280041725bb46dbabda991354b9224be15b5353c173bf8ee344e9b5d2e400c6d0fb6f1a51a0992180d1e767515d2a97a8630d8ebb6e54834b52cf0a1a5bc9a98718725fafa21de8e97c06b2a113bd8a32ceec409ec458f36e3d0cc0bb58d3d2b798dce7aa584da152113e22425e7d6b0fe1cfdb3959f6889df8b5dd0d65c8430908bc57b", 0xe2}, {&(0x7f00000002c0)="2dd9b5f4d47214fb2d55652257b1bfb4c532d4da4de08b55cc2b339f76d6ed8c36c63ef8", 0x24}, {&(0x7f0000000300)="560b7199818af080e1d67575f4f219eddea93bacb16cf200", 0x18}], 0x3, 0x0, 0x0, 0x24048800}, 0x40000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffff, 0xffe0}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x7, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000101000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800050007000000"], 0x3c}}, 0x0) 6.007882599s ago: executing program 0 (id=1685): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x154, 0x30, 0x101, 0x70bd2b, 0x25dfdbfe, {}, [{0x140, 0x1, [@m_simple={0x13c, 0x2, 0x0, 0x0, {{0xb}, {0x110, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xcf, 0x3, 'flow\x00\x00YU\xba\xc19\xd9\xcf\xa2\xa3P\xb1@\\\xb4\x84\xc8\x11\x83\xb4\xf2\x00\xa1\xf0\x15H{\x96&,\xd2\x13Z\xeb\xb8\xcf\xf9=\xcbT\xda\x8d$\xd5\x03\x16\xc1\xd0\x01\x91f\xf4\xa34\xfeG\x18<\x9a0\xa6\x86\xc1\x0f}\x84%\xd7B\x93\xff|KY\x0e\x8b\x8fq-\x90S\x91\xee^6\xc7\xed\xaaqfP,\x1a\x8a\x97\x9b\x06\xb0\xb1m\xb6\xc9\xa5u]\x8ez\xcd\x97\xcci$f_\xc0*\x88)\xea\x8e\x10\x91\x81\x13\xc1\xdd\xa3\x9fJ\xf0\xd9<\xed\a\xa3zD\xe30`\xf8\xc8k\x11\xd1W\xa2\xea\r\xfa5 %\xb1\v@\xb6\xea\xdc\x18b\xc9@6\xdaL{h\x16w$\x8b\xd0czg [\x81=\x03\xd4|\xc1\x9f\xe9Jv\xbc\x99pn)>\xfdl\t\x8e'}, @TCA_DEF_DATA={0xa, 0x3, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x2, 0x1, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x7, 0x7, 0x9, 0x5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000080) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x1cf1cd988231dbb, 0x1, 0x8, 0xc, 0xffff}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) write$tun(r2, &(0x7f0000001700)={@val, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tcp={0x1, 0x6, "b4d55e", 0x14, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0xc}}}}}}}}, 0x56) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000003300)=0x5b58, 0x4) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.99652918s ago: executing program 3 (id=1686): syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0x14, 0x65, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x404c851) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="78000000030705000000000000000000050000060900010073797a31000000000c00034000000000000033ad08000540000000014400078008000140000000050800014000000005080001400000000008000240ffffff80080002400000000908000240000000050800024000004c9108000240000000059778870078254ce347e9feb6ca621c5b29f5dbff5016d2522f30450429b01c08eca2b9d55e9d"], 0x78}, 0x1, 0x0, 0x0, 0x1000}, 0x4004) 5.876090891s ago: executing program 3 (id=1688): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x30}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x0, 0x4, 0x70bd2c, 0x25dfd9fc, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x7e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004850}, 0x4044030) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 5.87294821s ago: executing program 1 (id=1689): r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_buf(r0, 0x29, 0x2d, &(0x7f0000000080)="b84c620dcd1102aa8871d09afa512dc2a5afc6d860d4c676dcc0627b5d0463816237e4d979acfca294d0d1265c3d33c16799ec8b5c344f791545babd286754253697e43aca73c47490f4ab74275df5e731e2a703f17817e66d0ecdd91b2553895a63a688daa3493538f4d894b1743b1a1a865c8c6be7f68c7053c2968b31f72286a4cbf8a38f381271663093d9b9fecc8f6d2b00b4bcf04c04753c52176a67cbde656862af3123b5fa89c562db81feee13fa7d0d8607ed26f3f0f0e765171587fa20", 0xc2) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0xffff}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x10, 0x1405, 0x1, 0x70bd27, 0x25dfdbfb}, 0x10}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x4}, 0x7}) 5.860002901s ago: executing program 2 (id=1690): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r2}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 5.822810672s ago: executing program 0 (id=1691): r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0xc020400) r1 = epoll_create1(0x0) r2 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@remote, @remote, @remote, @netrom, @rose, @remote, @bcast, @null]}, &(0x7f0000000000)=0x48, 0x80000) shutdown(r2, 0x1) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020400000e00000000000000000000000200010000000000000000000000000005000500000000000a00000000000000fe880000000000000000000000000001000000010000000005000600000000000a0000000000000000000000000000000000ffffe00000010000000000000000"], 0x70}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r3, @ANYBLOB="11fa330bce1ce7132906f4f0843bf2828c7fb37e95a6b84f859772f9db6c60937250bacbc9443b83dab96bf027ec3334bb784af79b404e63bce17347d0dd52b274892e449133251d2596ba5b6e6744d143a0"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 5.775849417s ago: executing program 1 (id=1692): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x34}}, 0x4000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@cgroup, 0xffffffffffffffff, 0x9, 0x8}, 0x20) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040801}, 0x24000000) 5.772974054s ago: executing program 3 (id=1693): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0) r4 = socket(0x10, 0x80003, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0)) 5.722990403s ago: executing program 0 (id=1694): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0), 0x8) 5.403562201s ago: executing program 32 (id=1694): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0), 0x8) 5.384392374s ago: executing program 1 (id=1696): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002140)={0x0, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7562fa7}}}, &(0x7f00000000c0)=0x84) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000000)=0x2, 0x4) 5.081726907s ago: executing program 33 (id=1696): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000002140)={0x0, @in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7562fa7}}}, &(0x7f00000000c0)=0x84) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000000)=0x2, 0x4) 5.03926153s ago: executing program 2 (id=1697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 5.03605846s ago: executing program 34 (id=1697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000006110810000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xa, 0x3032, 0xffffffffffffffff, 0xe08b8000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 5.011920642s ago: executing program 3 (id=1698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x14, &(0x7f00000002c0)=@raw=[@generic={0x3, 0x0, 0x1, 0x5, 0xfff}, @printk={@llu}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @ldst={0x3, 0x1, 0x2, 0xa, 0x3, 0xa9, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xf9, &(0x7f0000000500)=""/249, 0x41000, 0x46, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0xd12, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[{0x5, 0x5, 0xb, 0xa}], 0x10, 0x400}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000400)=0x2) r4 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={0x0, r5, 0x4000, r4}, 0x18) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_int(r2, &(0x7f00000007c0)='memory.max\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x39}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000d80)=[{{&(0x7f00000006c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x2}}, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="8e5d19d3c7983aa16774e6d04966181bb2505e259dadf2dbd8a0d5b1b59cd89e3bf3ae35be62a31fef2a8f0a268a24f95c15390385ee60f33eac60e9955b18642015d9b0"}, {&(0x7f0000000980)="725cb5642e9fb8158955cfa9b0a3533ccca7777104d6f61e027bd6912b0e74954f57a6804783acb3debe6c8079a1283ca8ca9f7acc381b39a745691029280837d4f469d718"}], 0x0, &(0x7f0000000a40)=[{0x0, 0x107, 0x10, "6fcf41a132b389d29840c84028c9d4d9360115bb3e14d3ddd26071fac1c2915da093215bef57a1da07ca75fc62e7fa83c99484f24bd0e2c8390a17b7effd880e65c16f7a5920e82f19e28f5f338812e622c7d8f495485a4109b6339194b1aba2fc13babe9559cca96a9723"}, {0x0, 0x7, 0x7fff, "e420398aaf45d8ede9cc8e1b731f8ab46da3f66b0f87554e9398111e13d21e54022879fd0e9007409463d0ed4d0c9e1bc89e652318fc1bb5e437dcae"}]}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b40)='R'}, {&(0x7f0000000b80)="b0"}, {&(0x7f0000000bc0)="6d166ca6cbf07a24f8e4f7415f4c75f4fb57f087e408ff70ee61abd0318a4f30bb300b6a16d9aca6adab9f0478fc9f282121ac733e64138a0810eb46a09d808bba1555681bcc0933130ffefa0851c9bd0d3caa8320cf3d0fde1d557f13c362e2597e3d54309387633caa883b6b05423429c327ed412b0c2e68bcf5c1c5e764a5c1ba7c75cc7292762f540830c9d541bf4f40dcc3c2e23ec50f4a7ba531fb28db0bec0abb8e3735e0a823e79d80df886a8610eac153381601003116e63f2e84d7d2b6fab72b435323875fa37ea7cd7eb172ff1e727a603498eecc612e241fffaffbe73d8e34a32d1ad7"}], 0x0, &(0x7f0000000d00)=[{0x0, 0x10f, 0x9, "63c7a198a0b541a912fd0aa44652b6492211d19b1ba51c63714e0f0ac35e82a3914fd6ae80cfdf9a402329b9ba94a7d4338e7a14eccfca8e"}, {0x0, 0x101, 0xf, "904206b868991278d859eff1"}]}}], 0x4000000000000d6, 0x0) 5.007352901s ago: executing program 35 (id=1698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) syz_emit_ethernet(0x3e, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x14, &(0x7f00000002c0)=@raw=[@generic={0x3, 0x0, 0x1, 0x5, 0xfff}, @printk={@llu}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @ldst={0x3, 0x1, 0x2, 0xa, 0x3, 0xa9, 0x10}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0xf9, &(0x7f0000000500)=""/249, 0x41000, 0x46, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x6, 0xd12, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[{0x5, 0x5, 0xb, 0xa}], 0x10, 0x400}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000400)=0x2) r4 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={0x0, r5, 0x4000, r4}, 0x18) syz_init_net_socket$x25(0x9, 0x5, 0x0) openat$cgroup_int(r2, &(0x7f00000007c0)='memory.max\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x39}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000d80)=[{{&(0x7f00000006c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x2}}, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="8e5d19d3c7983aa16774e6d04966181bb2505e259dadf2dbd8a0d5b1b59cd89e3bf3ae35be62a31fef2a8f0a268a24f95c15390385ee60f33eac60e9955b18642015d9b0"}, {&(0x7f0000000980)="725cb5642e9fb8158955cfa9b0a3533ccca7777104d6f61e027bd6912b0e74954f57a6804783acb3debe6c8079a1283ca8ca9f7acc381b39a745691029280837d4f469d718"}], 0x0, &(0x7f0000000a40)=[{0x0, 0x107, 0x10, "6fcf41a132b389d29840c84028c9d4d9360115bb3e14d3ddd26071fac1c2915da093215bef57a1da07ca75fc62e7fa83c99484f24bd0e2c8390a17b7effd880e65c16f7a5920e82f19e28f5f338812e622c7d8f495485a4109b6339194b1aba2fc13babe9559cca96a9723"}, {0x0, 0x7, 0x7fff, "e420398aaf45d8ede9cc8e1b731f8ab46da3f66b0f87554e9398111e13d21e54022879fd0e9007409463d0ed4d0c9e1bc89e652318fc1bb5e437dcae"}]}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b40)='R'}, {&(0x7f0000000b80)="b0"}, {&(0x7f0000000bc0)="6d166ca6cbf07a24f8e4f7415f4c75f4fb57f087e408ff70ee61abd0318a4f30bb300b6a16d9aca6adab9f0478fc9f282121ac733e64138a0810eb46a09d808bba1555681bcc0933130ffefa0851c9bd0d3caa8320cf3d0fde1d557f13c362e2597e3d54309387633caa883b6b05423429c327ed412b0c2e68bcf5c1c5e764a5c1ba7c75cc7292762f540830c9d541bf4f40dcc3c2e23ec50f4a7ba531fb28db0bec0abb8e3735e0a823e79d80df886a8610eac153381601003116e63f2e84d7d2b6fab72b435323875fa37ea7cd7eb172ff1e727a603498eecc612e241fffaffbe73d8e34a32d1ad7"}], 0x0, &(0x7f0000000d00)=[{0x0, 0x10f, 0x9, "63c7a198a0b541a912fd0aa44652b6492211d19b1ba51c63714e0f0ac35e82a3914fd6ae80cfdf9a402329b9ba94a7d4338e7a14eccfca8e"}, {0x0, 0x101, 0xf, "904206b868991278d859eff1"}]}}], 0x4000000000000d6, 0x0) 2.825802045s ago: executing program 4 (id=1708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7fffffff, 0xb, 0x4}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.474785544s ago: executing program 4 (id=1709): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfd}, [@RTA_PREF={0x5, 0x14, 0x4}]}, 0x24}}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f00000004c0)=0xc) (async) r5 = getgid() (async) r6 = getpid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f00000006c0)=0xe8) (async) r8 = getgid() (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a010100000000000000000100000009393ca8e01c00010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800500030001000000080002400000000108000140000000010900010073797a3000000000140000001100010000000000000000"], 0xe0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000f40)={'wg1\x00'}) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000700)=0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000cc0)={{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000dc0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000e00)={0x0, 0x0, 0x0}, &(0x7f0000000e40)=0xc) sendmsg$netlink(r0, &(0x7f0000000f00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)=[{&(0x7f00000007c0)={0x2e8, 0x26, 0x400, 0x70bd26, 0x25dfdbfe, "", [@typed={0x8, 0xbf, 0x0, 0x0, @u32=0x6}, @nested={0x2ce, 0xe3, 0x0, 0x1, [@generic="43c125111278d5e761bed0d1a9071f7a50e4d0d6b462ec5d3ffbe0bd4bc751b20111dadc4aa622351169c3e01a160e42b4172189b3aed919cd93c119b4c1086bde843883748e2223bf567195beef7f6a7893f013b444cc39e5260a2b5a559cee1cd7353429328fe7674a1a10fdebcfbf8ca77d44887b1db76209c902fced5bdb2dc47fde3d1a152ab126350d2d32fd9e9c072ab55a72c371fbdb3cc21da3", @typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@local}, @generic="f860795a1dbb6b6e9cbc69e5b373ee97ce1c49d0f7522bdffc25a4023688933ea177084ec9435d3c984c804e4bef796c7edccf52f11008667712073b6daa24f6b3ff406c455d44cb19418cd802e27a1939eb26000dfe25e4780318bfe11417753828be73c0d50d403215552372e0aa2482fa082a362f7d2eb8ac737ae1921bfdff14f7cb98295888264166aeac84f19ffda1b10925d12be78f49fe3c8e18d987b2f1968fc2cd5975fab8f7e2a088b5d0f18fb07f2523209338437297bec0c67520adce55c32217e03befbb46b2e72c0205fa7638a1c460931e7ccbc80c20d8366622919d2f400fd76ec4cb426be985051c", @nested={0x4, 0xce}, @typed={0x8, 0x6d, 0x0, 0x0, @pid=r2}, @generic="69ba284bd24321b56cc3b3f2e0d05becd733a29cf5fae4220eb210d30aee0bd61a7c50ee0fb973561bd01ac0432d0eca973304cbf3a6", @generic="cf9609e0a34f56ee2f2dbafd51e8c48f1fae73bc09df43d6615dfa467aaca31bb19f701ee4338a8e8da2508b1f2b3781b10853a020eca8c77e4ceaf3c1ad9bf7df9e2e36718ef4d9bd9bbb9ccb6d7dd3a6bcd0af", @nested={0x4, 0xc0}, @generic="57503558b5d4e0d14ae11ab5b27231bcef6bdf944ffbd7837f96826d777b0c8dc6d3aee02f9f6cbe02710125099302421048af8e592a780f6c374a5f8925d5993fd20116d5b3b59efa928322b300a7748587c24b9c21b834ddb0790c5f6c6b3db93790b64eafe725ad0abe62c8ab24ed9c6a3751b3ad42a36889a62b7f6fc0a04ebbfe1f6bb671bdb21fab0a571cdf43d0a98b1300d0d7c2b2"]}]}, 0x2e8}, {&(0x7f00000002c0)={0x200, 0x3d, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xa, 0x14a, 0x0, 0x1, [@generic='AY', @nested={0x4, 0x5a}]}, @typed={0x14, 0x142, 0x0, 0x0, @ipv6=@mcast1}, @generic="c3fcfafd1a451cd5522d77ddd4511d88b5fd28a470604ebff5bcd52f38014fec6c85c347d28297a573c116c3f52ec21513e69f048c965c96b4b6f89616c4cc299030f31164ff93790ba2be9f460a882893006920ada9fb33ffe3c251d460841107596b74d87863ac878bd661c3e32f28af57f17424aa69d198043506e86ebdb4f0774f4737cc25e18cea878d53d8669023146850714af4ae2ae713a3d916134060203352b24b57a626c2df592d607b8de0817d6117f4dd22fc8d88559916f1e04e5698d6f5607afb363183b64fea5eff37276fa8216484f26c39139067273aa4700d981c", @generic="70974debf2b10a399e3653030d8c943b83fa2ff3fd4d781edad9f41061884842bb61b43d3a0911bd9bd86aa17251eadb25b6f57ccdcb037ed88606e5ec348f0ec27bfe9b1806995e4a33e7316663832107c358f4a15183d013a03212d7863e9eaf37d5a3a15d9510b71d51de8e08439ec1b07c31b27804a544c45f6ee6f45466cbe22f0ec57cdc5406bd8e49d9f408b3fd04d7c02f1797c300729171a72696db25c004e4ca56e446403487fabdbfb3d9b3a8609967bdf345259394168e5a054d36be7296a1fc048e23ac986a93dcd720f1e6f8c3f52fe0151a887305a015189c52a88350d4f1bbce25befe"]}, 0x200}, {&(0x7f0000000580)={0x134, 0x18, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x78, 0xc, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}, @typed={0x64, 0x100, 0x0, 0x0, @binary="fe886aa6ec268df2d2f0ddf577ab6a8e10f4eade25a0484fec3d8124b2468b5281d872af09dab86a1e651492137362efea8bf16f3d4d0bb0ab9f8afe805c24dfa747805a2d79d4b4174ef8d42519f0ef275a0503968c5a41ec03de4642135c88"}, @typed={0x8, 0x8e, 0x0, 0x0, @fd=r1}]}, @generic="d6e71296fe3d832d90dcb99afb8e230ed77128985ebd532de45667ffe072451bd825fdb5c43855384c1a81c46a028116957c180c430b3f83a87cbc5a86d85e08c4717ae8294a7ee93457dd8a3843ae70bf9d0e4606715b4458a23cfb15126b8ff4981593571d667bb259a17a4b7b5755cbfe404c650ff3b9464d9eac786bd9f55c78ceb7170342cc700cdcf8531deeff9e3724309ec06e606c31e4b4d75404ec5eb4627a11427a6a17a4a2a0"]}, 0x134}], 0x3, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r3, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee00, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, r12}}}], 0x80, 0x4000000}, 0x42) r13 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014009080c00000000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x9b}], 0x1}, 0x0) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0x8, 0x1, @dev}]}, 0x48}}, 0x0) (async) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r15, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x20}, 0x8) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES8=r1], 0x38}}, 0x0) 1.360414992s ago: executing program 4 (id=1710): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.054212384s ago: executing program 4 (id=1711): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1c0000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040800) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x891b, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xc, 0x4010, r5, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000007c0), 0x4) r6 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000440)={@loopback, @remote, 0x0}, &(0x7f0000000480)=0xc) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000540)={@multicast2, @broadcast, r7}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e6", 0x3}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a43", 0x45}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x1f8, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x7, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000faffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 857.704887ms ago: executing program 4 (id=1712): r0 = socket(0x10, 0x803, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000002) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r3, 0x1, 0x20, 0x0, 0x4, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0xdb, 0x29, 0x0, @empty, @empty}}}}) (async, rerun: 32) r6 = socket(0x2, 0x2, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x1, &(0x7f0000000300)=@raw=[@alu={0x4, 0x1, 0xf3767c68fa0481d3, 0x4, 0x7, 0x20, 0x8}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2469, r8, 0x0, 0x0, 0x0, 0x10, 0x878}, 0x94) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) 0s ago: executing program 4 (id=1713): r0 = socket(0x28, 0x80000, 0x8001) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'tunl0\x00', r1, 0x8000, 0x7, 0x1a7d, 0x6, {{0xa, 0x4, 0x0, 0x4, 0x28, 0x67, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0xa, 0x0, 0x9, [0x6, 0x3, 0x1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x7, 0x10, 0x7ff, 0x7, {{0x2f, 0x4, 0x3, 0x4, 0xbc, 0x66, 0x0, 0x40, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010102, {[@generic={0x83, 0x11, "3232367352167a6e6cc00519c84bd5"}, @timestamp={0x44, 0x14, 0x13, 0x0, 0x6, [0x7b3e, 0x5, 0xfffffff9, 0xf]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x1b, 0x87, [@rand_addr=0x64010101, @broadcast, @broadcast, @private=0xa010102, @broadcast, @rand_addr=0x64010102]}, @noop, @rr={0x7, 0xf, 0x40, [@loopback, @rand_addr=0x64010101, @broadcast]}, @noop, @lsrr={0x83, 0x2b, 0xd4, [@remote, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @local, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x34}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x21, 0x3, [{0x7, 0x4, "00d6"}, {0x6, 0xa, "863dea478ef04805"}, {0x2, 0x8, "118ed5689c37"}, {0x1, 0x5, '\"\n\t'}]}]}}}}}) (async) setsockopt$MRT_DEL_MFC(r0, 0x0, 0xcd, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0x1, "1f565550fd5fb439c1fe86afb367116600fb942d718103a1ef9375f9e1d89b47", 0x7ff, 0x8, 0x7, 0x2}, 0x3c) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000300)={0x0, @hci={0x1f, 0x4, 0x5}, @qipcrtr={0x2a, 0x0, 0x7fff}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x80, 0x0, 0x0, 0x0, 0x8, &(0x7f00000002c0)='nr0\x00', 0x9, 0x11d3b5ae}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r4, &(0x7f0000000380)="a9cb7848a082cbf38e0fd005d07d49881d27f031f768e2a6d6416b5d37bd805bf7a2061c82a7b05a7e274ef484bbc9ddfa8795c4a83c6d7b6b93964b17931354a5fa9410d4ee8c893014380c62f9e02029d6d05e3faa962b95c618901158013fb8ad16de987ec2a5e94b6a66d8288c18de0abe514f713ce9dc1342b343628ccb6d7c78126c77a017e3b9d716043188639bf9fd99853087371996ea2ded2fed7f5613b43d2166ee8a8343d704e564fed624cefe4155f771707484a813504c213bf3f7e2594bc332698b", 0xc9, 0x4000000, &(0x7f0000000480)=@sco, 0x80) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, 0x1407, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}]}, 0x50}}, 0x44044) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa814, 0x0, 0x0, 0x0, 0x10}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x7, 0x1, 0x0, 0x1}]}, &(0x7f00000006c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2d765, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[0x1], &(0x7f0000000780)=[{0x2, 0x4, 0xe, 0x8}, {0x0, 0x5, 0x0, 0x6}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r6, 0x0, 0x0, 0x0, &(0x7f0000000880), &(0x7f00000008c0), 0x1, 0x0, 0xa, 0x8d, &(0x7f0000000900)="3f19d404f75f5fe6e17d", &(0x7f0000000940)="80d8c30ff8e7024b2962f6f15f376f55275c4b4d5749802ff14f65c6b3679647c668651e84b48b606b7508f62a799ec5466b2ed85490fdb0b8a704a637d9a9f0dd873d472f34e1df5a47af26687c9fa62447eb78994dc7db3771f543cf588e5f213ae6b4ba1fb46053bbf07ced39ff9c7559bc3eb44ca738a48bc7b2e23f8a60377dabcb65172b3750125c38e9", 0x4, 0x0, 0xd}, 0x50) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008001}, 0x20004000) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r6, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r7, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000d00)={r4}) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x38, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xf, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x40}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x844) r10 = socket(0x25, 0x4, 0x17e5) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000ec0)={0x3d0, r11, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x99}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x23234393}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x12, 0x3, "54a3c4589c621e45801bec1db039"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "3675f2d816fc02d1e852acdc84be31b1bbf5b16363c2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x29, 0x3, "34f19870f918f4bbbb54ebf89ecbfaaaa39e990c4f44c821d60f08ec87974bb7af2af6cc67"}, @TIPC_NLA_NODE_ID={0x43, 0x3, "bcfac5351d18cc816affcab6cb3c2d42c3d6bf4094af2f7f1aca8225ce4f2cf80e10e36a15997798f1ffcf26eb42e29d82f24a399aeb0a32b7709db927fa62"}, @TIPC_NLA_NODE_ID={0x7d, 0x3, "8d60f9e40f45c12002ffe7c7ff1599bd6d01b62709ab6075246bec557867393033cdfe8d64ac0d50e58367881cd87532e9f4ca88b4c79befb11ab32512639afe933b63613ead868bf473d8c636f7578102241de36d5edc2e44d2ae946527edf5066eca7cfaae5d963d7185187bdc194dddc114116eadd4b016"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x958}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x74b5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcef}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x462b}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd31}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth0_macvtap\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4f6, @mcast1, 0x95}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f0000001400)={'ip_vti0\x00', &(0x7f0000001340)={'erspan0\x00', r3, 0x10, 0x7800, 0x7f, 0x1, {{0x19, 0x4, 0x0, 0x38, 0x64, 0x64, 0x0, 0x8, 0x2f, 0x0, @local, @remote, {[@cipso={0x86, 0x4e, 0x2, [{0x0, 0xa, "65dfc6ef0537d6f2"}, {0x5, 0x3, "fe"}, {0x6, 0x11, "c41ebfdccd5160e22ddcd0f2a65562"}, {0x6, 0x6, "0a507cd6"}, {0x7, 0x9, "9504683bd04c05"}, {0x0, 0xe, "940b603cc4e0068d691b640b"}, {0x7, 0xd, "4e2b07a3762a87e5317811"}]}, @end]}}}}}) r13 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000001540)={'syztnl1\x00', &(0x7f0000001440)={'syztnl1\x00', r2, 0x7, 0x1, 0x2, 0x9, {{0x34, 0x4, 0x0, 0x39, 0xd0, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @empty, {[@cipso={0x86, 0x65, 0x3, [{0x2, 0x3, "c4"}, {0x1, 0xf, "327b4ad8829e87b26c93787ab9"}, {0x2, 0xe, "5d58703bdafb2decbd60b7ea"}, {0x5, 0xa, "b81f2f57f6b7dfc6"}, {0x2, 0x10, "00338d03b57b19bcc489895f7537"}, {0x7, 0x3, "bd"}, {0x7, 0xb, "905dd7f1957fddf5fc"}, {0x6, 0xa, "49d211b02f6c2c60"}, {0x2, 0xd, "07728b2aec2357194908ac"}]}, @rr={0x7, 0x27, 0x36, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x29}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @broadcast, @remote, @private=0xa010100]}, @timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x5, [{@loopback, 0x5}, {@multicast2, 0x1}]}, @timestamp={0x44, 0x1c, 0x8d, 0x0, 0x6, [0x7f, 0x1ff, 0x6, 0xc6, 0x5, 0x7]}]}}}}}) setsockopt$MRT_ADD_VIF(r13, 0x0, 0xca, &(0x7f0000001580)={0x1, 0xd, 0xa9, 0x3, @vifc_lcl_ifindex=r14, @remote}, 0x10) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f00000015c0)=@generic, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001640)=""/31, 0x1f}, {&(0x7f0000001680)=""/234, 0xea}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000017c0)=""/20, 0x14}, {&(0x7f0000001800)=""/110, 0x6e}, {&(0x7f0000001880)=""/174, 0xae}, {&(0x7f0000001940)=""/241, 0xf1}], 0x7, &(0x7f0000001ac0)=""/130, 0x82}, 0x2060) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCDELRT(r12, 0x890c, &(0x7f0000001c00)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, @vsock={0x28, 0x0, 0x2711, @hyper}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, 0x9, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001bc0)='veth0_to_team\x00', 0xd9, 0xfffffffffffffffb, 0x4}) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), r0) kernel console output (not intermixed with test programs): interface: batadv_slave_0 [ 70.775748][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.801698][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.827164][ T5830] hsr_slave_0: entered promiscuous mode [ 70.833366][ T5830] hsr_slave_1: entered promiscuous mode [ 70.840004][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 70.846120][ T5830] Cannot create hsr debugfs directory [ 70.858026][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.865351][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.891552][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.903235][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.910511][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.936723][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.001875][ T5828] hsr_slave_0: entered promiscuous mode [ 71.008386][ T5828] hsr_slave_1: entered promiscuous mode [ 71.014350][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 71.020284][ T5828] Cannot create hsr debugfs directory [ 71.094318][ T5841] hsr_slave_0: entered promiscuous mode [ 71.100645][ T5841] hsr_slave_1: entered promiscuous mode [ 71.107181][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 71.112904][ T5841] Cannot create hsr debugfs directory [ 71.166958][ T5843] hsr_slave_0: entered promiscuous mode [ 71.173636][ T5843] hsr_slave_1: entered promiscuous mode [ 71.180604][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 71.186988][ T5843] Cannot create hsr debugfs directory [ 71.361936][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.368406][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.609306][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.624473][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.636427][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.655853][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.708427][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.729583][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.741430][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.753639][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.824042][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.843320][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.853653][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.865559][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.977106][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.988137][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.005365][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.017588][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.068029][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.132488][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.143395][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.159146][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.171450][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.193554][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.207801][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.233397][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.240681][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.285904][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.293046][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.319813][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.332092][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.363184][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.370305][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.403210][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.410354][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.426794][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.447765][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.454944][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.474667][ T1329] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.481853][ T1329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.545568][ T5839] Bluetooth: hci0: command tx timeout [ 72.546563][ T5845] Bluetooth: hci2: command tx timeout [ 72.571883][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.626701][ T5845] Bluetooth: hci4: command tx timeout [ 72.626735][ T5839] Bluetooth: hci1: command tx timeout [ 72.632114][ T5155] Bluetooth: hci3: command tx timeout [ 72.678166][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.721968][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.797500][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.804671][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.851926][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.871549][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.878736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.950977][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.981285][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.038914][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.046062][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.059341][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.066517][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.125521][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.155486][ T5827] veth0_vlan: entered promiscuous mode [ 73.176191][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.217377][ T5827] veth1_vlan: entered promiscuous mode [ 73.285290][ T5830] veth0_vlan: entered promiscuous mode [ 73.339619][ T5830] veth1_vlan: entered promiscuous mode [ 73.388316][ T5841] veth0_vlan: entered promiscuous mode [ 73.419510][ T5827] veth0_macvtap: entered promiscuous mode [ 73.430045][ T5841] veth1_vlan: entered promiscuous mode [ 73.450365][ T5827] veth1_macvtap: entered promiscuous mode [ 73.471874][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.507515][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.533387][ T204] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.551959][ T204] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.562684][ T204] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.579839][ T204] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.616105][ T5830] veth0_macvtap: entered promiscuous mode [ 73.627068][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.648377][ T5830] veth1_macvtap: entered promiscuous mode [ 73.670637][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.690119][ T5841] veth0_macvtap: entered promiscuous mode [ 73.732392][ T5841] veth1_macvtap: entered promiscuous mode [ 73.779531][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.791486][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.800580][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.807765][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.873324][ T1140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.886615][ T1140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.915728][ T1140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.924631][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.931418][ T5843] veth0_vlan: entered promiscuous mode [ 73.940718][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.952529][ T1140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.978030][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.034570][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.059452][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.071760][ T5843] veth1_vlan: entered promiscuous mode [ 74.129608][ T1329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.143500][ T1329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.209131][ T1329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.227970][ T1329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.256225][ T3078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.278364][ T3078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.359043][ T5843] veth0_macvtap: entered promiscuous mode [ 74.359729][ T5944] openvswitch: netlink: Flow key attr not present in new flow. [ 74.381317][ T5828] veth0_vlan: entered promiscuous mode [ 74.420004][ T5843] veth1_macvtap: entered promiscuous mode [ 74.442116][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.444747][ T5828] veth1_vlan: entered promiscuous mode [ 74.458359][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.497231][ T5946] netlink: 'syz.0.7': attribute type 12 has an invalid length. [ 74.541982][ T5946] bond1: option primary_reselect: invalid value (255) [ 74.553424][ T5946] bond1 (unregistering): Released all slaves [ 74.575170][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.583119][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.608319][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.638075][ T5845] Bluetooth: hci2: command tx timeout [ 74.643570][ T5155] Bluetooth: hci0: command tx timeout [ 74.696664][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.696719][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.713769][ T5845] Bluetooth: hci3: command tx timeout [ 74.713794][ T5839] Bluetooth: hci4: command tx timeout [ 74.719317][ T5155] Bluetooth: hci1: command tx timeout [ 74.737145][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.786175][ T5828] veth0_macvtap: entered promiscuous mode [ 74.822989][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.842700][ T5828] veth1_macvtap: entered promiscuous mode [ 74.861003][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.878517][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.897397][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.021234][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.034738][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 75.083863][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.130081][ T5962] netlink: 'syz.2.3': attribute type 12 has an invalid length. [ 75.159611][ T5962] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 75.203077][ T1140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.255017][ T1140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.317387][ T1140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.347781][ T1140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.360758][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 75.404673][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.417889][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.442969][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.475060][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.662454][ T5987] syz.1.16 uses obsolete (PF_INET,SOCK_PACKET) [ 75.800056][ T5995] xt_addrtype: ipv6 does not support BROADCAST matching [ 75.812902][ T5995] netlink: 'syz.3.4': attribute type 63 has an invalid length. [ 75.889288][ T4218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.900288][ T4218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.900381][ T5993] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 75.919615][ T6002] netlink: 'syz.3.4': attribute type 63 has an invalid length. [ 75.955968][ T6001] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 75.981378][ T6001] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 76.157950][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.199368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.236641][ T6008] nbd0: detected capacity change from 0 to 127 [ 76.270713][ T5845] block nbd0: Receive control failed (result -32) [ 76.281994][ T5835] block nbd0: Send control failed (result -32) [ 76.315945][ T5835] block nbd0: Request send failed, requeueing [ 76.327190][ T25] block nbd0: Dead connection, failed to find a fallback [ 76.340154][ T25] block nbd0: shutting down sockets [ 76.347143][ T25] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.357776][ T25] Buffer I/O error on dev nbd0, logical block 0, async page read [ 76.359465][ T5835] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.449155][ T6021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.463335][ T5835] Buffer I/O error on dev nbd0, logical block 1, async page read [ 76.475212][ T5835] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.487748][ T5835] Buffer I/O error on dev nbd0, logical block 2, async page read [ 76.515379][ T5835] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.524455][ T5835] Buffer I/O error on dev nbd0, logical block 3, async page read [ 76.581596][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.590051][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 76.596116][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 76.609840][ T6023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.24'. [ 76.619851][ T5835] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.659913][ T5835] Buffer I/O error on dev nbd0, logical block 1, async page read [ 76.686840][ T5835] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.706361][ T5845] Bluetooth: hci0: command tx timeout [ 76.706674][ T5155] Bluetooth: hci2: command tx timeout [ 76.714351][ T5835] Buffer I/O error on dev nbd0, logical block 2, async page read [ 76.752068][ T5835] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.775202][ T6030] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.25'. [ 76.785443][ T5155] Bluetooth: hci1: command tx timeout [ 76.787089][ T5839] Bluetooth: hci4: command tx timeout [ 76.797302][ T5845] Bluetooth: hci3: command tx timeout [ 76.816466][ T6030] netlink: 252 bytes leftover after parsing attributes in process `syz.3.25'. [ 76.836552][ T5835] Buffer I/O error on dev nbd0, logical block 3, async page read [ 76.865834][ T5835] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.878828][ T5835] Buffer I/O error on dev nbd0, logical block 0, async page read [ 76.888778][ T5835] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 76.898800][ T5835] Buffer I/O error on dev nbd0, logical block 1, async page read [ 76.909943][ T5835] ldm_validate_partition_table(): Disk read failed. [ 76.918677][ T5835] Dev nbd0: unable to read RDB block 0 [ 76.933189][ T5835] nbd0: unable to read partition table [ 76.979292][ T5835] ldm_validate_partition_table(): Disk read failed. [ 77.049936][ T5835] Dev nbd0: unable to read RDB block 0 [ 77.071166][ T5835] nbd0: unable to read partition table [ 77.171313][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.293951][ T6043] Zero length message leads to an empty skb [ 77.423346][ T6049] sctp: [Deprecated]: syz.1.31 (pid 6049) Use of int in max_burst socket option. [ 77.423346][ T6049] Use struct sctp_assoc_value instead [ 77.461573][ T6053] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 77.631705][ T6051] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.640006][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.822965][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.839085][ T6051] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.888454][ T6051] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 77.907627][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.4.38'. [ 77.947359][ T6077] veth0: entered promiscuous mode [ 77.974600][ T50] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.099196][ T6085] netlink: 'syz.1.39': attribute type 1 has an invalid length. [ 78.121200][ T6085] netlink: 224 bytes leftover after parsing attributes in process `syz.1.39'. [ 78.146173][ T204] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.174403][ T204] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.204629][ T204] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.486457][ T6102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 78.534715][ T6105] pimreg3: entered allmulticast mode [ 78.705373][ T6111] warning: `syz.3.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.773600][ T6115] netlink: 'syz.4.50': attribute type 12 has an invalid length. [ 78.800152][ T6115] netlink: 'syz.4.50': attribute type 29 has an invalid length. [ 78.815074][ T6117] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 78.856014][ T6117] netlink: 'syz.2.51': attribute type 1 has an invalid length. [ 79.634260][ T6160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.636804][ T6159] syzkaller0: entered promiscuous mode [ 79.676896][ T6159] syzkaller0: entered allmulticast mode [ 79.944336][ T6174] validate_nla: 32 callbacks suppressed [ 79.944355][ T6174] netlink: 'syz.3.63': attribute type 15 has an invalid length. [ 80.077301][ T6174] __nla_validate_parse: 8 callbacks suppressed [ 80.077318][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.63'. [ 80.077520][ T3078] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 80.114016][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 80.163148][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.65'. [ 80.174964][ T6174] netlink: 'syz.3.63': attribute type 15 has an invalid length. [ 80.213600][ T3078] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 80.257739][ T3078] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 80.297196][ T3078] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 80.467388][ T6202] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 80.529193][ T6204] erspan0: entered promiscuous mode [ 80.684727][ T6212] netlink: 84 bytes leftover after parsing attributes in process `syz.1.71'. [ 80.733534][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 80.770170][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 80.831224][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 81.187916][ T6228] netlink: 44 bytes leftover after parsing attributes in process `syz.3.78'. [ 81.290499][ T6243] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 81.306323][ T6240] can: request_module (can-proto-0) failed. [ 81.315146][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 81.354803][ T6243] x_tables: unsorted underflow at hook 2 [ 81.687471][ T6260] unsupported nlmsg_type 40 [ 82.041219][ T6275] netlink: 'syz.3.95': attribute type 10 has an invalid length. [ 82.101629][ T6275] team0: Device ip_vti0 is of different type [ 82.526656][ T6293] Driver unsupported XDP return value 0 on prog (id 86) dev N/A, expect packet loss! [ 82.621936][ T6301] sctp: [Deprecated]: syz.3.106 (pid 6301) Use of int in maxseg socket option. [ 82.621936][ T6301] Use struct sctp_assoc_value instead [ 83.046968][ T6325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.212501][ T6325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.344960][ T6338] veth1_to_bond: entered allmulticast mode [ 83.441415][ T6325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.702414][ T6325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.982268][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.056807][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.114416][ T3532] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.171211][ T3532] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.345278][ T6386] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 84.421271][ T6395] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 84.443094][ T6395] netlink: 'syz.1.128': attribute type 4 has an invalid length. [ 84.650792][ T48] IPVS: starting estimator thread 0... [ 84.761700][ T6413] IPVS: using max 39 ests per chain, 93600 per kthread [ 85.109730][ T6439] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 85.200348][ T6449] 8021q: VLANs not supported on ip6_vti0 [ 85.393437][ T6462] netlink: 'syz.0.148': attribute type 4 has an invalid length. [ 85.404120][ T6459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.461313][ T6464] __nla_validate_parse: 16 callbacks suppressed [ 85.461330][ T6464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 85.480231][ T6457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.494580][ T6467] netlink: 'syz.1.149': attribute type 1 has an invalid length. [ 85.514618][ T6462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.148'. [ 85.541503][ T6464] macvtap1: entered promiscuous mode [ 85.547527][ T6464] vlan0: entered promiscuous mode [ 85.552812][ T6464] macvtap1: entered allmulticast mode [ 85.558308][ T6464] vlan0: entered allmulticast mode [ 85.564914][ T6464] veth0_vlan: entered allmulticast mode [ 85.661039][ T6472] netlink: 'syz.0.151': attribute type 4 has an invalid length. [ 85.863013][ T6487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.156'. [ 85.873794][ T6487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.156'. [ 85.982085][ T6490] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.157'. [ 86.354159][ T6515] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.165'. [ 86.457411][ T6506] bond1: option lp_interval: invalid value (0) [ 86.486473][ T6506] bond1: option lp_interval: allowed values 1 - 2147483647 [ 86.527197][ T6506] bond1 (unregistering): Released all slaves [ 86.616201][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 86.655918][ T9] IPVS: starting estimator thread 0... [ 86.673714][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 86.710216][ T10] cfg80211: failed to load regulatory.db [ 86.768363][ T6540] IPVS: using max 28 ests per chain, 67200 per kthread [ 86.788148][ T6543] trusted_key: syz.2.171 sent an empty control message without MSG_MORE. [ 87.080883][ T985] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x1 [ 87.097823][ T985] hid-generic 0005:0C49:1012.0001: ignoring exceeding usage max [ 87.109876][ T985] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x4 [ 87.118484][ T985] hid-generic 0005:0C49:1012.0001: unknown main item tag 0x5 [ 87.129886][ T985] hid-generic 0005:0C49:1012.0001: reserved main item tag 0xd [ 87.139405][ T985] hid-generic 0005:0C49:1012.0001: item fetching failed at offset 31/106 [ 87.148617][ T985] hid-generic 0005:0C49:1012.0001: probe with driver hid-generic failed with error -22 [ 88.124713][ T6585] xt_cgroup: xt_cgroup: no path or classid specified [ 88.225135][ T6588] sctp: [Deprecated]: syz.4.183 (pid 6588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.225135][ T6588] Use struct sctp_sack_info instead [ 88.283724][ T6593] syzkaller0: entered promiscuous mode [ 88.294974][ T6593] syzkaller0: entered allmulticast mode [ 88.359082][ T6594] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 88.514392][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 88.527158][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 88.925381][ T6629] nbd1: detected capacity change from 0 to 127 [ 88.939183][ T5839] block nbd1: Receive control failed (result -32) [ 88.950633][ T5835] block nbd1: Dead connection, failed to find a fallback [ 88.962450][ T5835] block nbd1: shutting down sockets [ 88.974945][ T5835] blk_print_req_error: 138 callbacks suppressed [ 88.974962][ T5835] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 88.999772][ T5835] buffer_io_error: 138 callbacks suppressed [ 88.999788][ T5835] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.018435][ T5835] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.034152][ T5835] Buffer I/O error on dev nbd1, logical block 1, async page read [ 89.042504][ T5835] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.052645][ T5835] Buffer I/O error on dev nbd1, logical block 2, async page read [ 89.060988][ T5835] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.070438][ T5835] Buffer I/O error on dev nbd1, logical block 3, async page read [ 89.078647][ T5835] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.088083][ T5835] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.107342][ T5835] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.143605][ T5835] Buffer I/O error on dev nbd1, logical block 1, async page read [ 89.159290][ T5835] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.169552][ T5835] Buffer I/O error on dev nbd1, logical block 2, async page read [ 89.178132][ T5835] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.209053][ T5835] Buffer I/O error on dev nbd1, logical block 3, async page read [ 89.220765][ T5835] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.230285][ T5835] Buffer I/O error on dev nbd1, logical block 0, async page read [ 89.238667][ T5835] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 89.250259][ T5835] Buffer I/O error on dev nbd1, logical block 1, async page read [ 89.262572][ T5835] ldm_validate_partition_table(): Disk read failed. [ 89.277483][ T5835] Dev nbd1: unable to read RDB block 0 [ 89.285599][ T5835] nbd1: unable to read partition table [ 89.317562][ T5835] ldm_validate_partition_table(): Disk read failed. [ 89.326244][ T5835] Dev nbd1: unable to read RDB block 0 [ 89.329177][ T6626] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 89.340488][ T5835] nbd1: unable to read partition table [ 89.373601][ T6626] bond1: (slave vcan1): Error -95 calling set_mac_address [ 89.493487][ T6647] syzkaller1: entered promiscuous mode [ 89.505732][ T6647] syzkaller1: entered allmulticast mode [ 89.788710][ T6673] netlink: 'syz.0.209': attribute type 21 has an invalid length. [ 89.797104][ T6673] IPv6: NLM_F_CREATE should be specified when creating new route [ 89.806140][ T6671] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 89.868748][ T6671] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 90.051539][ T6690] netlink: 'syz.3.214': attribute type 11 has an invalid length. [ 90.067420][ T6689] netlink: 'syz.3.214': attribute type 11 has an invalid length. [ 90.360211][ T6701] Bluetooth: MGMT ver 1.23 [ 90.467387][ T6711] __nla_validate_parse: 10 callbacks suppressed [ 90.467399][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.219'. [ 90.921450][ T6717] netlink: 112 bytes leftover after parsing attributes in process `syz.2.221'. [ 91.626683][ T6736] netlink: 'syz.0.226': attribute type 10 has an invalid length. [ 91.635554][ T6736] batman_adv: batadv0: Adding interface: netdevsim0 [ 91.642172][ T6736] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.697552][ T6736] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 91.821330][ T6743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.226'. [ 91.846200][ T6754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.230'. [ 91.851036][ T6752] netlink: 'syz.1.229': attribute type 1 has an invalid length. [ 91.892635][ T6755] nftables ruleset with unbound set [ 91.898934][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.933545][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.228'. [ 91.970248][ T6752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.014561][ T6751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 92.024520][ T6751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 92.070693][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.228'. [ 92.241508][ T6774] netlink: 'syz.4.236': attribute type 12 has an invalid length. [ 92.497922][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.241'. [ 92.586204][ T6796] netlink: 'syz.3.243': attribute type 3 has an invalid length. [ 92.752493][ T6802] netlink: 288 bytes leftover after parsing attributes in process `syz.4.245'. [ 92.926173][ T6813] bridge1: entered promiscuous mode [ 92.954928][ T6813] bridge1: entered allmulticast mode [ 93.334560][ T6838] smc: net device team0 applied user defined pnetid SYZ2 [ 93.461782][ T6844] netlink: 'syz.2.258': attribute type 27 has an invalid length. [ 93.522818][ T6846] tipc: Started in network mode [ 93.531889][ T6846] tipc: Node identity da371e1fcc8f, cluster identity 4711 [ 93.539716][ T6846] tipc: Enabled bearer , priority 0 [ 93.569700][ T6846] syzkaller0: entered promiscuous mode [ 93.579154][ T6846] syzkaller0: entered allmulticast mode [ 93.613744][ T6846] tipc: Resetting bearer [ 93.636983][ T6846] netlink: 'syz.1.259': attribute type 10 has an invalid length. [ 94.301468][ T6845] tipc: Resetting bearer [ 94.336027][ T6845] tipc: Disabling bearer [ 94.424318][ T6892] netlink: 'syz.4.271': attribute type 10 has an invalid length. [ 94.434881][ T6851] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.441908][ T6851] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 94.464221][ T6851] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 94.477285][ T6851] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 94.479966][ T6892] team0: Port device geneve0 added [ 94.502380][ T6851] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 94.511270][ T6851] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 94.530352][ T6851] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.545711][ T6851] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 94.569651][ T6851] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 94.577064][ T6851] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 95.008599][ T6909] xt_ecn: cannot match TCP bits for non-tcp packets [ 95.192251][ T6926] netlink: 'syz.3.281': attribute type 21 has an invalid length. [ 95.216429][ T6921] nbd2: detected capacity change from 0 to 127 [ 95.239028][ T5839] block nbd2: Receive control failed (result -32) [ 95.241414][ T5835] block nbd2: Send control failed (result -32) [ 95.281695][ T5835] block nbd2: Request send failed, requeueing [ 95.306085][ T11] block nbd2: Dead connection, failed to find a fallback [ 95.313242][ T11] block nbd2: shutting down sockets [ 95.318830][ T11] blk_print_req_error: 138 callbacks suppressed [ 95.318844][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.334396][ T11] buffer_io_error: 138 callbacks suppressed [ 95.334412][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.351671][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.361224][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read [ 95.389250][ T5835] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.420133][ T5835] Buffer I/O error on dev nbd2, logical block 2, async page read [ 95.446087][ T5835] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.456411][ T5835] Buffer I/O error on dev nbd2, logical block 3, async page read [ 95.464788][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.474512][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.482926][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.492239][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read [ 95.500588][ T5835] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.513713][ T5835] Buffer I/O error on dev nbd2, logical block 2, async page read [ 95.522287][ T5835] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.531857][ T5835] Buffer I/O error on dev nbd2, logical block 3, async page read [ 95.540238][ T5835] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.549888][ T5835] Buffer I/O error on dev nbd2, logical block 0, async page read [ 95.558509][ T5835] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.568421][ T5835] Buffer I/O error on dev nbd2, logical block 1, async page read [ 95.579423][ T5835] ldm_validate_partition_table(): Disk read failed. [ 95.588390][ T5835] Dev nbd2: unable to read RDB block 0 [ 95.596656][ T5835] nbd2: unable to read partition table [ 95.621763][ T5835] ldm_validate_partition_table(): Disk read failed. [ 95.631765][ T5835] Dev nbd2: unable to read RDB block 0 [ 95.656534][ T5835] nbd2: unable to read partition table [ 95.690778][ T6946] __nla_validate_parse: 11 callbacks suppressed [ 95.690794][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 95.736269][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 95.760175][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 95.791498][ T6947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 95.881238][ T6926] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 95.892766][ T6926] syzkaller1: Refused to change device type [ 96.057002][ T6961] netlink: 'syz.4.290': attribute type 2 has an invalid length. [ 96.093344][ T6961] netlink: 244 bytes leftover after parsing attributes in process `syz.4.290'. [ 96.163942][ T6969] dvmrp6: entered allmulticast mode [ 96.224731][ T6965] sctp: [Deprecated]: syz.0.292 (pid 6965) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.224731][ T6965] Use struct sctp_sack_info instead [ 96.370303][ T6982] netlink: 10 bytes leftover after parsing attributes in process `syz.1.294'. [ 96.576084][ T6991] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.298'. [ 96.749017][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.300'. [ 96.817721][ T7005] netlink: 116 bytes leftover after parsing attributes in process `syz.3.301'. [ 96.872668][ T7008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.951207][ T7010] dummy0: entered allmulticast mode [ 97.079140][ T7012] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.303'. [ 97.191322][ T7021] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 97.243599][ T7025] netlink: 'syz.4.309': attribute type 1 has an invalid length. [ 97.770910][ T7053] bond2: entered promiscuous mode [ 97.788893][ T7053] bond2: entered allmulticast mode [ 97.794457][ T7053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.803085][ T7052] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 97.968909][ T7074] ksmbd: Unknown IPC event: 3, ignore. [ 98.142557][ T7088] netlink: 'syz.0.323': attribute type 1 has an invalid length. [ 98.154034][ T7088] netlink: 'syz.0.323': attribute type 2 has an invalid length. [ 98.623605][ T7116] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 98.723607][ T7116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.776086][ T7118] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.783400][ T7118] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.795849][ T7118] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 98.916003][ T7116] veth3: entered promiscuous mode [ 98.932207][ T7116] bond1: (slave veth3): Enslaving as an active interface with a down link [ 98.977815][ T7118] vlan2: entered allmulticast mode [ 98.997164][ T7118] bond1: entered allmulticast mode [ 99.322918][ T7132] syzkaller0: entered promiscuous mode [ 99.364929][ T7132] syzkaller0: entered allmulticast mode [ 100.584983][ T7163] syzkaller1: entered promiscuous mode [ 100.590669][ T7163] syzkaller1: entered allmulticast mode [ 100.598996][ T7174] netlink: 'syz.4.349': attribute type 4 has an invalid length. [ 101.151613][ T7223] __nla_validate_parse: 7 callbacks suppressed [ 101.151631][ T7223] netlink: 76 bytes leftover after parsing attributes in process `syz.0.360'. [ 101.200525][ T7225] : entered promiscuous mode [ 101.225907][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 101.249220][ T7223] TCP: TCP_TX_DELAY enabled [ 101.494260][ T7246] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 101.527395][ T7248] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 101.536503][ T7246] netlink: 96 bytes leftover after parsing attributes in process `syz.3.368'. [ 101.546631][ T7246] netlink: 658 bytes leftover after parsing attributes in process `syz.3.368'. [ 101.560057][ T7246] netlink: 1 bytes leftover after parsing attributes in process `syz.3.368'. [ 101.573034][ T7253] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.636883][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.4.369'. [ 101.654037][ T7256] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048) [ 101.663792][ T7256] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 101.670516][ T7256] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.220522][ T7285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.379'. [ 102.302165][ T7291] set match dimension is over the limit! [ 102.321638][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 102.621008][ T7305] netlink: 'syz.1.385': attribute type 10 has an invalid length. [ 102.632707][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.649120][ T7309] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 102.655429][ T7305] bridge_slave_1: left allmulticast mode [ 102.663572][ T7305] bridge_slave_1: left promiscuous mode [ 102.681958][ T7305] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.709300][ T7305] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 102.817329][ T7309] 8021q: adding VLAN 0 to HW filter on device bond2 [ 102.879793][ T7315] bond2: (slave geneve2): making interface the new active one [ 102.889834][ T7315] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 103.035269][ T7340] syzkaller0: entered promiscuous mode [ 103.047203][ T7340] syzkaller0: entered allmulticast mode [ 103.313921][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 103.415474][ T7361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.504700][ T7367] netlink: 'syz.4.402': attribute type 10 has an invalid length. [ 103.513005][ T7367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.402'. [ 103.522429][ T7367] dummy0: entered promiscuous mode [ 103.530277][ T7367] bridge0: port 3(dummy0) entered blocking state [ 103.565255][ T7367] bridge0: port 3(dummy0) entered disabled state [ 103.571811][ T7367] dummy0: entered allmulticast mode [ 103.600686][ T7367] bridge0: port 3(dummy0) entered blocking state [ 103.602492][ T7377] netlink: 'syz.2.407': attribute type 11 has an invalid length. [ 103.607204][ T7367] bridge0: port 3(dummy0) entered forwarding state [ 103.626056][ T7377] netlink: 'syz.2.407': attribute type 11 has an invalid length. [ 103.688781][ T7370] syzkaller0: entered promiscuous mode [ 103.694292][ T7370] syzkaller0: entered allmulticast mode [ 103.746813][ T7370] tipc: Enabled bearer , priority 0 [ 103.870400][ T7389] syzkaller0: entered promiscuous mode [ 103.880938][ T7389] syzkaller0: entered allmulticast mode [ 104.171376][ T7409] netlink: 'syz.0.418': attribute type 39 has an invalid length. [ 104.309851][ T7362] tipc: Resetting bearer [ 104.388863][ T7362] tipc: Disabling bearer [ 104.768635][ T7423] syzkaller0: entered promiscuous mode [ 104.788273][ T7423] syzkaller0: entered allmulticast mode [ 105.612135][ T7483] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20003 [ 106.388544][ T7489] __nla_validate_parse: 6 callbacks suppressed [ 106.388562][ T7489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 106.423220][ T7493] ip6t_srh: unknown srh match flags 5F28 [ 106.517184][ T7497] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 106.547563][ T7499] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 106.636039][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 106.681233][ T7506] netlink: 'syz.1.444': attribute type 29 has an invalid length. [ 106.708353][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 106.820973][ T7516] netlink: 20 bytes leftover after parsing attributes in process `syz.4.446'. [ 106.981467][ T7527] netlink: 'syz.4.450': attribute type 10 has an invalid length. [ 107.003285][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.017788][ T7527] bridge_slave_1: left allmulticast mode [ 107.023641][ T7527] bridge_slave_1: left promiscuous mode [ 107.030820][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.039089][ T7532] netlink: 'syz.3.452': attribute type 1 has an invalid length. [ 107.052646][ T7527] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 107.093889][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.452'. [ 107.105575][ T7535] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.113296][ T7535] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 107.122584][ T7535] netlink: 224 bytes leftover after parsing attributes in process `syz.1.453'. [ 107.260566][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.456'. [ 107.349540][ T7541] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 107.408623][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 107.496855][ T7552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.460'. [ 107.506591][ T7552] netlink: 40 bytes leftover after parsing attributes in process `syz.4.460'. [ 108.024734][ T7593] netlink: 'syz.2.473': attribute type 1 has an invalid length. [ 108.063662][ T7593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.153919][ T7602] tipc: Started in network mode [ 108.159702][ T7602] tipc: Node identity d2f7281f6c6, cluster identity 4711 [ 108.167440][ T7602] tipc: Enabled bearer , priority 0 [ 108.179490][ T7602] syzkaller0: entered promiscuous mode [ 108.186189][ T7602] syzkaller0: entered allmulticast mode [ 108.331499][ T7612] vlan2: entered allmulticast mode [ 108.387710][ T7601] tipc: Resetting bearer [ 108.422431][ T7601] tipc: Disabling bearer [ 108.884495][ T7655] netlink: 'syz.4.492': attribute type 83 has an invalid length. [ 108.907241][ T7653] netlink: 'syz.4.492': attribute type 83 has an invalid length. [ 109.139308][ T7666] x_tables: unsorted underflow at hook 1 [ 109.334214][ T7682] openvswitch: netlink: Message has -2 unknown bytes. [ 109.502700][ T7695] syzkaller0: entered promiscuous mode [ 109.514877][ T7695] syzkaller0: entered allmulticast mode [ 109.848570][ T7714] Cannot find add_set index 1 as target [ 110.192545][ T7741] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 110.221617][ T7742] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 110.325816][ T7738] bond3: (slave gretap1): making interface the new active one [ 110.340497][ T7738] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 110.541652][ T7771] vlan0: entered allmulticast mode [ 110.548144][ T7771] veth0_vlan: entered allmulticast mode [ 110.660106][ T7775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.857729][ T7780] xfrm0: entered allmulticast mode [ 110.897950][ T7796] xt_recent: Unsupported userspace flags (000000b1) [ 110.954671][ T7799] vlan2: entered promiscuous mode [ 110.971878][ T7799] bridge0: entered promiscuous mode [ 111.164350][ T7799] bond4: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 111.401850][ T7831] only policy match revision 0 supported [ 111.401869][ T7831] unable to load match [ 111.430727][ T7835] dummy0: left allmulticast mode [ 111.437005][ T7835] bridge0: port 3(dummy0) entered disabled state [ 111.470814][ T7835] bridge_slave_0: left allmulticast mode [ 111.477484][ T7835] bridge_slave_0: left promiscuous mode [ 111.483315][ T7835] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.500527][ T7835] bond0: (slave bridge_slave_1): Releasing backup interface [ 111.519025][ T7835] bond0: (slave bond_slave_0): Releasing backup interface [ 111.533745][ T7835] bond0: (slave bond_slave_1): Releasing backup interface [ 111.557085][ T7835] team0: Port device team_slave_0 removed [ 111.570495][ T7835] team0: Port device team_slave_1 removed [ 111.580679][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.588537][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.597399][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.604774][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.613787][ T7835] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 111.655866][ T7844] __nla_validate_parse: 17 callbacks suppressed [ 111.655882][ T7844] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.548'. [ 111.956986][ T7865] syzkaller0: entered promiscuous mode [ 111.962611][ T7865] syzkaller0: entered allmulticast mode [ 111.969888][ T7866] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 111.992831][ T7866] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 112.059998][ T7875] netlink: 'syz.2.557': attribute type 11 has an invalid length. [ 112.282722][ T7887] netlink: 48 bytes leftover after parsing attributes in process `syz.3.561'. [ 112.350627][ T7902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.563'. [ 112.454344][ T7905] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'. [ 112.524102][ T7912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.564'. [ 112.559903][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.2.566'. [ 112.761149][ T7922] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.569'. [ 112.933302][ T7931] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20004 [ 112.943737][ T7936] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 114.326011][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.586'. [ 114.431732][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 114.578887][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 114.712504][ T8000] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 114.795736][ T8000] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 114.802951][ T8000] batman_adv: batadv0: Removing interface: netdevsim0 [ 114.838798][ T8000] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 115.359280][ T8034] dvmrp0: entered allmulticast mode [ 115.579565][ T8043] netlink: 'syz.0.606': attribute type 4 has an invalid length. [ 115.666244][ T5905] IPVS: starting estimator thread 0... [ 115.671975][ T8051] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20000 [ 115.680201][ T8052] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20000 [ 115.688066][ T8051] IPVS: ip_vs_add_dest(): server weight less than zero [ 115.758178][ T8052] bridge0: port 3(ipvlan2) entered blocking state [ 115.766047][ T8053] IPVS: using max 27 ests per chain, 64800 per kthread [ 115.773183][ T8052] bridge0: port 3(ipvlan2) entered disabled state [ 115.792805][ T8052] ipvlan2: entered allmulticast mode [ 115.816267][ T8052] bridge0: entered allmulticast mode [ 115.836711][ T8052] ipvlan2: left allmulticast mode [ 115.841869][ T8052] bridge0: left allmulticast mode [ 115.878077][ T8051] bridge0: port 3(ipvlan2) entered blocking state [ 115.884988][ T8051] bridge0: port 3(ipvlan2) entered disabled state [ 115.891801][ T8051] ipvlan2: entered allmulticast mode [ 115.897809][ T8051] bridge0: entered allmulticast mode [ 115.904512][ T8051] ipvlan2: left allmulticast mode [ 115.909735][ T8051] bridge0: left allmulticast mode [ 115.940646][ T8057] netem: change failed [ 115.959031][ T8057] tipc: Enabled bearer , priority 0 [ 115.968553][ T8057] syzkaller0: entered promiscuous mode [ 115.974147][ T8057] syzkaller0: entered allmulticast mode [ 116.041878][ T8056] tipc: Resetting bearer [ 116.071449][ T8056] tipc: Disabling bearer [ 116.096504][ T8070] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.278329][ T8077] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 116.595262][ T8096] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 116.668491][ T8096] bridge0: port 3(ipvlan2) entered blocking state [ 116.692405][ T8096] bridge0: port 3(ipvlan2) entered disabled state [ 116.702665][ T8096] ipvlan2: entered allmulticast mode [ 116.712503][ T8096] bridge0: entered allmulticast mode [ 116.721547][ T8096] ipvlan2: left allmulticast mode [ 116.729695][ T8096] bridge0: left allmulticast mode [ 116.793522][ T8098] netlink: 'syz.1.627': attribute type 29 has an invalid length. [ 117.033461][ T8122] __nla_validate_parse: 3 callbacks suppressed [ 117.033478][ T8122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.635'. [ 117.286389][ T8121] delete_channel: no stack [ 117.503268][ T8141] netlink: 'syz.4.637': attribute type 12 has an invalid length. [ 117.514561][ T8141] syzkaller1: entered promiscuous mode [ 117.520612][ T8141] syzkaller1: entered allmulticast mode [ 117.773961][ T8154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 117.795123][ T8155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.640'. [ 117.862042][ T8158] team0: Cannot enslave team device to itself [ 117.872044][ T8155] team0: Cannot enslave team device to itself [ 117.933635][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.642'. [ 118.379028][ T8197] sctp: [Deprecated]: syz.2.644 (pid 8197) Use of int in maxseg socket option. [ 118.379028][ T8197] Use struct sctp_assoc_value instead [ 118.482237][ T8194] bridge_slave_0: left allmulticast mode [ 118.501565][ T8194] bridge_slave_0: left promiscuous mode [ 118.525197][ T8194] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.556818][ T8194] bridge_slave_1: left allmulticast mode [ 118.582869][ T8194] bridge_slave_1: left promiscuous mode [ 118.596106][ T8194] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.691119][ T8194] bond0: (slave bond_slave_0): Releasing backup interface [ 118.704335][ T8194] bond0: (slave bond_slave_1): Releasing backup interface [ 118.717324][ T8194] team0: Port device team_slave_0 removed [ 118.732469][ T8194] team0: Port device team_slave_1 removed [ 118.740018][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.758812][ T8194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.778855][ T8194] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 118.797850][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 118.827706][ T8206] netlink: 'syz.3.648': attribute type 5 has an invalid length. [ 118.842326][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.850715][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.068316][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.076227][ T8223] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.360909][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 119.572808][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 119.582372][ T8263] openvswitch: netlink: Flow actions attr not present in new flow. [ 119.808010][ T8276] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20002 [ 119.847053][ T8278] IPVS: set_ctl: invalid protocol: 58 172.30.0.1:20002 [ 119.906121][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.668'. [ 119.936930][ T8282] xt_TPROXY: Can be used only with -p tcp or -p udp [ 120.087510][ T8293] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 120.201915][ T8298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'. [ 120.254659][ T8303] C: renamed from lo (while UP) [ 120.277374][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.676'. [ 120.289403][ T8302] geneve0: entered promiscuous mode [ 120.296897][ T8302] macvtap1: entered promiscuous mode [ 120.303993][ T8302] team0: entered promiscuous mode [ 120.312863][ T8302] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 120.342884][ T8305] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 120.759380][ T8342] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 120.883253][ T8342] bond5: entered promiscuous mode [ 120.889127][ T8342] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.993453][ T8356] netlink: 'syz.1.689': attribute type 1 has an invalid length. [ 121.409003][ T8394] syzkaller0: entered promiscuous mode [ 121.416227][ T8394] syzkaller0: entered allmulticast mode [ 121.620781][ T8408] netlink: 'syz.4.700': attribute type 21 has an invalid length. [ 121.667995][ T8407] netlink: 'syz.4.700': attribute type 21 has an invalid length. [ 121.677425][ T8408] netlink: 'syz.4.700': attribute type 4 has an invalid length. [ 121.686534][ T8408] netlink: 'syz.4.700': attribute type 5 has an invalid length. [ 121.708221][ T8407] netlink: 'syz.4.700': attribute type 4 has an invalid length. [ 121.738445][ T8407] netlink: 'syz.4.700': attribute type 5 has an invalid length. [ 122.047926][ T8442] xt_l2tp: v2 doesn't support IP mode [ 122.084319][ T8445] __nla_validate_parse: 9 callbacks suppressed [ 122.084336][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.710'. [ 122.238985][ T8458] netlink: 'syz.4.712': attribute type 2 has an invalid length. [ 122.270016][ T8458] 9: entered promiscuous mode [ 122.307313][ T8458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.712'. [ 122.360476][ T8463] netlink: 32 bytes leftover after parsing attributes in process `syz.3.716'. [ 122.399551][ T8472] netlink: 'syz.0.717': attribute type 1 has an invalid length. [ 122.503598][ T8476] macvlan2: entered promiscuous mode [ 122.519599][ T8476] macvlan2: entered allmulticast mode [ 122.526554][ T8476] bond1: entered promiscuous mode [ 122.532992][ T8476] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.544152][ T8476] bond1: left promiscuous mode [ 122.663227][ T8490] syz.1.722: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.679423][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.1.722 Not tainted syzkaller #0 PREEMPT(full) [ 122.679447][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.679464][ T8490] Call Trace: [ 122.679474][ T8490] [ 122.679482][ T8490] dump_stack_lvl+0x189/0x250 [ 122.679515][ T8490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.679534][ T8490] ? __pfx__printk+0x10/0x10 [ 122.679558][ T8490] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 122.679584][ T8490] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 122.679612][ T8490] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 122.679638][ T8490] warn_alloc+0x214/0x310 [ 122.679668][ T8490] ? stack_depot_save_flags+0x422/0x850 [ 122.679692][ T8490] ? __pfx_warn_alloc+0x10/0x10 [ 122.679717][ T8490] ? kasan_save_track+0x3e/0x80 [ 122.679736][ T8490] ? __kasan_kmalloc+0x93/0xb0 [ 122.679759][ T8490] ? xsk_setsockopt+0x4dc/0x8d0 [ 122.679775][ T8490] ? do_sock_setsockopt+0x17c/0x1b0 [ 122.679797][ T8490] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 122.679818][ T8490] ? do_syscall_64+0xfa/0xf80 [ 122.679838][ T8490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.679864][ T8490] __vmalloc_node_range_noprof+0x125/0x12d0 [ 122.679915][ T8490] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.679940][ T8490] ? __kasan_kmalloc+0x93/0xb0 [ 122.679968][ T8490] vmalloc_user_noprof+0xad/0xf0 [ 122.679989][ T8490] ? xskq_create+0xbf/0x170 [ 122.680009][ T8490] xskq_create+0xbf/0x170 [ 122.680031][ T8490] xsk_init_queue+0xb0/0x110 [ 122.680053][ T8490] xsk_setsockopt+0x4dc/0x8d0 [ 122.680073][ T8490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.680094][ T8490] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.680121][ T8490] ? aa_sock_opt_perm+0xff/0x1a0 [ 122.680142][ T8490] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 122.680163][ T8490] ? __pfx_xsk_setsockopt+0x10/0x10 [ 122.680183][ T8490] do_sock_setsockopt+0x17c/0x1b0 [ 122.680212][ T8490] __x64_sys_setsockopt+0x13f/0x1b0 [ 122.680242][ T8490] do_syscall_64+0xfa/0xf80 [ 122.680265][ T8490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.680282][ T8490] ? clear_bhb_loop+0x60/0xb0 [ 122.680303][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.680323][ T8490] RIP: 0033:0x7f4713d8f749 [ 122.680339][ T8490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.680353][ T8490] RSP: 002b:00007f4714b85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.680372][ T8490] RAX: ffffffffffffffda RBX: 00007f4713fe5fa0 RCX: 00007f4713d8f749 [ 122.680384][ T8490] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 122.680395][ T8490] RBP: 00007f4713e13f91 R08: 0000000000000004 R09: 0000000000000000 [ 122.680406][ T8490] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.680417][ T8490] R13: 00007f4713fe6038 R14: 00007f4713fe5fa0 R15: 00007ffebf2918f8 [ 122.680449][ T8490] [ 122.680534][ T8490] Mem-Info: [ 122.822088][ T8496] sctp: [Deprecated]: syz.0.725 (pid 8496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.822088][ T8496] Use struct sctp_sack_info instead [ 122.832428][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.724'. [ 122.893892][ T8501] netlink: 176 bytes leftover after parsing attributes in process `syz.2.726'. [ 122.896723][ T8490] active_anon:5171 inactive_anon:0 isolated_anon:0 [ 122.896723][ T8490] active_file:2500 inactive_file:39893 isolated_file:0 [ 122.896723][ T8490] unevictable:768 dirty:54 writeback:0 [ 122.896723][ T8490] slab_reclaimable:10879 slab_unreclaimable:98578 [ 122.896723][ T8490] mapped:29031 shmem:1355 pagetables:1111 [ 122.896723][ T8490] sec_pagetables:0 bounce:0 [ 122.896723][ T8490] kernel_misc_reclaimable:0 [ 122.896723][ T8490] free:1329885 free_pcp:14678 free_cma:0 [ 122.959087][ T8498] vlan3: entered allmulticast mode [ 122.990714][ T8490] Node 0 active_anon:20584kB inactive_anon:0kB active_file:10000kB inactive_file:159368kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116124kB dirty:212kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13100kB pagetables:4196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.008425][ T8498] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 123.093259][ T8490] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 123.156732][ T8490] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.206000][ T8509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 123.215890][ T8490] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 123.221755][ T8490] Node 0 DMA32 free:1412884kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20584kB inactive_anon:0kB active_file:10000kB inactive_file:159368kB unevictable:1536kB writepending:212kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:40036kB local_pcp:18960kB free_cma:0kB [ 123.274986][ T8490] lowmem_reserve[]: 0 0 0 0 0 [ 123.285596][ T8490] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 123.325476][ T8490] lowmem_reserve[]: 0 0 0 0 0 [ 123.330306][ T8490] Node 1 Normal free:3891096kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20736kB local_pcp:9792kB free_cma:0kB [ 123.393022][ T8490] lowmem_reserve[]: 0 0 0 0 0 [ 123.398172][ T8490] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 123.412039][ T8490] Node 0 DMA32: 681*4kB (UME) 208*8kB (UME) 60*16kB (UM) 142*32kB (UM) 21*64kB (UM) 30*128kB (UME) 21*256kB (ME) 17*512kB (UM) 7*1024kB (UM) 6*2048kB (UM) 333*4096kB (M) = 1412580kB [ 123.433633][ T8490] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 123.463158][ T8490] Node 1 Normal: 162*4kB (UME) 50*8kB (UME) 40*16kB (UME) 102*32kB (UME) 17*64kB (UME) 10*128kB (UME) 7*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3891096kB [ 123.482969][ T8490] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.529963][ T8490] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 123.535644][ T8520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.732'. [ 123.548263][ T8490] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 123.558815][ T8490] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 123.572832][ T8490] 43745 total pagecache pages [ 123.580318][ T8490] 0 pages in swap cache [ 123.588718][ T8490] Free swap = 124996kB [ 123.594411][ T8490] Total swap = 124996kB [ 123.599685][ T8490] 2097051 pages RAM [ 123.603557][ T8490] 0 pages HighMem/MovableOnly [ 123.614031][ T8490] 424280 pages reserved [ 123.619728][ T8490] 0 pages cma reserved [ 123.625135][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.3.734'. [ 123.721064][ T8530] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.736'. [ 123.731456][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.736'. [ 124.487027][ T8581] nbd: socks must be embedded in a SOCK_ITEM attr [ 124.707783][ T8595] sctp: [Deprecated]: syz.1.759 (pid 8595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.707783][ T8595] Use struct sctp_sack_info instead [ 124.867198][ T8606] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 124.888727][ T8606] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 125.853392][ T8674] validate_nla: 6 callbacks suppressed [ 125.853411][ T8674] netlink: 'syz.0.779': attribute type 5 has an invalid length. [ 126.105500][ T985] IPVS: starting estimator thread 0... [ 126.216004][ T8690] IPVS: using max 35 ests per chain, 84000 per kthread [ 126.720038][ T8737] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20001 [ 126.810123][ T8740] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.912340][ T8744] netlink: 'syz.3.801': attribute type 11 has an invalid length. [ 127.153172][ T8759] netlink: 'syz.0.806': attribute type 63 has an invalid length. [ 127.167281][ T8759] netlink: 'syz.0.806': attribute type 83 has an invalid length. [ 127.179326][ T8759] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 127.191333][ T8760] __nla_validate_parse: 15 callbacks suppressed [ 127.191349][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.807'. [ 127.522790][ T8777] netlink: 'syz.0.815': attribute type 1 has an invalid length. [ 127.613032][ T8777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.627990][ T8781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.814'. [ 127.790853][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.815'. [ 127.807540][ T8777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.815'. [ 127.899954][ T8777] veth5: entered promiscuous mode [ 128.076854][ T8798] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 128.534286][ T8816] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 128.551843][ T8816] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.566948][ T8797] Cannot find add_set index 0 as target [ 128.575681][ T8819] netlink: 'syz.4.827': attribute type 30 has an invalid length. [ 128.642414][ T8823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.829'. [ 128.834086][ T8831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.851971][ T8831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.923173][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.939868][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.965834][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.635374][ T8863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.842'. [ 129.827708][ T8867] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 129.937360][ T8867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 130.139333][ T8883] netlink: 20 bytes leftover after parsing attributes in process `syz.4.848'. [ 130.164258][ T8880] netlink: 'syz.3.847': attribute type 10 has an invalid length. [ 130.175112][ T8880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.206241][ T8880] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 130.405833][ T8887] syzkaller0: entered promiscuous mode [ 130.411420][ T8887] syzkaller0: entered allmulticast mode [ 130.543092][ T8901] netlink: 'syz.4.850': attribute type 39 has an invalid length. [ 130.565846][ T8902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.851'. [ 131.637492][ T8754] Set syz1 is full, maxelem 65536 reached [ 132.322562][ T8925] netlink: 'syz.0.855': attribute type 11 has an invalid length. [ 132.334109][ T8925] netlink: 224 bytes leftover after parsing attributes in process `syz.0.855'. [ 132.363449][ T8929] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 132.483075][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 132.494701][ T8929] 8021q: adding VLAN 0 to HW filter on device bond6 [ 132.513300][ T8930] bond6: (slave geneve3): making interface the new active one [ 132.530608][ T8930] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 132.550062][ T8939] netlink: 'syz.4.860': attribute type 1 has an invalid length. [ 132.578627][ T8383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.580155][ T8939] netlink: 224 bytes leftover after parsing attributes in process `syz.4.860'. [ 132.617475][ T8939] NCSI netlink: No device for ifindex 0 [ 132.621027][ T8383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.670471][ T8383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.719857][ T8383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.792034][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820841][ T8953] bond3 (unregistering): Released all slaves [ 132.854390][ T8958] netlink: 'syz.4.865': attribute type 8 has an invalid length. [ 132.864506][ T8958] ipt_REJECT: TCP_RESET invalid for non-tcp [ 132.872286][ T8962] netlink: 36 bytes leftover after parsing attributes in process `syz.3.866'. [ 132.982419][ T8962] netlink: 'syz.3.866': attribute type 16 has an invalid length. [ 132.990360][ T8962] netlink: 'syz.3.866': attribute type 3 has an invalid length. [ 133.000329][ T8962] netlink: 132 bytes leftover after parsing attributes in process `syz.3.866'. [ 133.103122][ T8978] netlink: 'syz.1.869': attribute type 1 has an invalid length. [ 133.114852][ T8979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 133.138436][ T8980] xt_hashlimit: overflow, try lower: 3/0 [ 133.167268][ T8983] netlink: 'syz.2.871': attribute type 11 has an invalid length. [ 133.179203][ T8983] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.871'. [ 133.191206][ T8984] tipc: Started in network mode [ 133.196674][ T8984] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 133.221767][ T8984] tipc: Enabled bearer , priority 10 [ 133.376397][ T8996] netlink: 5 bytes leftover after parsing attributes in process `syz.1.876'. [ 133.390413][ T8996] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 133.399933][ T8996] 0ªî{X¹¦: entered allmulticast mode [ 133.406823][ T8996] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 133.556034][ T9010] netlink: 'syz.4.880': attribute type 1 has an invalid length. [ 133.612545][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 133.650415][ T9013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 133.710697][ T9010] bond5: entered promiscuous mode [ 133.716695][ T9010] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.832703][ T9016] bond5: (slave bridge3): making interface the new active one [ 133.874954][ T9016] bridge3: entered promiscuous mode [ 133.882112][ T9016] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 134.081202][ T9031] IPv6: sit1: Disabled Multicast RS [ 134.110873][ T9031] sit1: entered allmulticast mode [ 134.117590][ T9033] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 134.182369][ T9040] IPv6: sit1: Disabled Multicast RS [ 134.196658][ T9040] sit1: entered allmulticast mode [ 134.348071][ T5940] tipc: Node number set to 10005162 [ 134.398465][ T9059] netlink: 'syz.2.895': attribute type 9 has an invalid length. [ 134.412525][ T9059] netlink: 'syz.2.895': attribute type 11 has an invalid length. [ 134.420711][ T9059] netlink: 'syz.2.895': attribute type 12 has an invalid length. [ 134.751863][ T9091] nbd: socks must be embedded in a SOCK_ITEM attr [ 134.920914][ T9101] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 135.310115][ T9137] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 135.490482][ T9150] xt_nat: multiple ranges no longer supported [ 135.514120][ T9155] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 136.207537][ T9196] syzkaller0: entered promiscuous mode [ 136.230947][ T9196] syzkaller0: entered allmulticast mode [ 136.584031][ T9220] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 136.593008][ T9220] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€ [ 136.634055][ T9226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.641573][ T9226] IPv6: NLM_F_CREATE should be set when creating new route [ 136.751536][ T9226] bond3: entered promiscuous mode [ 136.758262][ T9226] bond3: entered allmulticast mode [ 136.764014][ T9226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.783059][ T9233] syzkaller0: entered promiscuous mode [ 136.788741][ T9233] syzkaller0: entered allmulticast mode [ 137.072809][ T9257] net veth1_virt_wifi .: renamed from virt_wifi0 [ 137.508145][ T9282] __nla_validate_parse: 37 callbacks suppressed [ 137.508162][ T9282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.954'. [ 137.597041][ T9282] netlink: 20 bytes leftover after parsing attributes in process `syz.2.954'. [ 137.662676][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.955'. [ 137.806765][ T9301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 138.778795][ T9294] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 138.779222][ T9301] batadv_slave_1: entered promiscuous mode [ 138.805350][ T9309] batadv_slave_1: left promiscuous mode [ 139.106879][ T9334] macvlan0: entered promiscuous mode [ 139.147954][ T9340] IPVS: set_ctl: invalid protocol: 92 100.1.1.2:20002 [ 139.428051][ T9349] batadv_slave_0: entered promiscuous mode [ 139.547599][ T9367] netlink: 256 bytes leftover after parsing attributes in process `syz.2.977'. [ 139.583746][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.978'. [ 139.776789][ T9347] batadv_slave_0: left promiscuous mode [ 140.002571][ T9395] validate_nla: 31 callbacks suppressed [ 140.002643][ T9395] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 140.007150][ T9388] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.081212][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 140.159383][ T9388] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.214566][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.991'. [ 140.267997][ T9388] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.390252][ T9388] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.512224][ T9425] ip6t_rpfilter: unknown options [ 140.539710][ T204] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.593279][ T8383] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.603455][ T9427] netlink: 144 bytes leftover after parsing attributes in process `syz.1.995'. [ 140.634274][ T8398] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.659364][ T8398] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.930348][ T9448] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.950333][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1002'. [ 141.446146][ T9486] netlink: 'syz.1.1010': attribute type 10 has an invalid length. [ 141.584488][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.592247][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.660368][ T9477] pimreg: entered allmulticast mode [ 141.699756][ T9479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 141.754334][ T9484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.759280][ T9502] netlink: 'syz.3.1016': attribute type 1 has an invalid length. [ 141.761942][ T9500] block nbd5: Unsupported socket: should be TCP or UNIX. [ 141.798359][ T9484] bond3: (slave bond0): making interface the new active one [ 141.808473][ T9484] bond3: (slave bond0): Enslaving as an active interface with an up link [ 141.819443][ T9486] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.879907][ T9486] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.887150][ T9486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.926752][ T9486] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.936385][ T9488] bridge0: port 2(syz_tun) entered blocking state [ 141.943265][ T9488] bridge0: port 2(syz_tun) entered disabled state [ 141.952866][ T9488] syz_tun: entered allmulticast mode [ 141.982293][ T9488] syz_tun: entered promiscuous mode [ 141.989229][ T9488] bridge0: port 2(syz_tun) entered blocking state [ 141.996039][ T9488] bridge0: port 2(syz_tun) entered forwarding state [ 142.161517][ T9475] pimreg: left allmulticast mode [ 142.292809][ T9509] bond7: (slave gretap1): making interface the new active one [ 142.303037][ T9509] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 142.614659][ T9537] __nla_validate_parse: 39 callbacks suppressed [ 142.614675][ T9537] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1023'. [ 142.666538][ T9540] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 142.768621][ T9540] bond7: entered promiscuous mode [ 142.775913][ T9540] bond7: entered allmulticast mode [ 142.804513][ T9540] 8021q: adding VLAN 0 to HW filter on device bond7 [ 142.842414][ T9542] macvlan2: entered promiscuous mode [ 142.857646][ T9542] macvlan2: entered allmulticast mode [ 142.869008][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1025'. [ 142.875505][ T9542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.926051][ T9556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1025'. [ 142.939164][ T9555] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1028'. [ 142.960299][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1025'. [ 143.418806][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'. [ 143.435854][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 143.456090][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'. [ 143.581951][ T9585] dvmrp0: entered allmulticast mode [ 143.621072][ T9589] netlink: 'syz.4.1035': attribute type 7 has an invalid length. [ 143.668775][ T9593] netlink: 'syz.1.1036': attribute type 1 has an invalid length. [ 143.712822][ T9593] netlink: 'syz.1.1036': attribute type 2 has an invalid length. [ 143.787605][ T9597] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 143.849209][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1038'. [ 143.863595][ T9601] bond4: entered allmulticast mode [ 143.880758][ T9601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.171732][ T9639] syzkaller1: entered promiscuous mode [ 144.173315][ T9640] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1048'. [ 144.198068][ T9639] syzkaller1: entered allmulticast mode [ 144.369973][ T9655] openvswitch: netlink: Key type 31 is not supported [ 144.738192][ T9679] dvmrp0: entered allmulticast mode [ 144.761972][ T9679] dvmrp0: left allmulticast mode [ 145.028034][ T9705] sctp: [Deprecated]: syz.0.1066 (pid 9705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.028034][ T9705] Use struct sctp_sack_info instead [ 145.114342][ T9709] nbd: socks must be embedded in a SOCK_ITEM attr [ 145.131199][ T9715] tc_dump_action: action bad kind [ 145.137743][ T9716] tc_dump_action: action bad kind [ 145.210108][ T9718] netlink: 'syz.0.1071': attribute type 4 has an invalid length. [ 145.342203][ T9729] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.410596][ T9735] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.610359][ T9752] block nbd5: Unsupported socket: should be TCP or UNIX. [ 145.778613][ T9765] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 145.826594][ T9770] sctp: [Deprecated]: syz.4.1086 (pid 9770) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.826594][ T9770] Use struct sctp_sack_info instead [ 146.113654][ T9792] team0: Device gtp0 is up. Set it down before adding it as a team port [ 146.429867][ T9815] tipc: Started in network mode [ 146.435297][ T9815] tipc: Node identity d66b68e3e78f, cluster identity 4711 [ 146.443138][ T9815] tipc: Enabled bearer , priority 0 [ 146.451776][ T9815] syzkaller0: entered allmulticast mode [ 146.473927][ T9815] tipc: Resetting bearer [ 146.495645][ T9814] tipc: Resetting bearer [ 146.525895][ T9814] tipc: Disabling bearer [ 146.709786][ T9836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.823946][ T8399] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.839802][ T8399] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.862690][ T8399] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.903441][ T8399] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.976377][ T9856] netlink: 'syz.0.1119': attribute type 22 has an invalid length. [ 147.633199][ T9883] can: request_module (can-proto-5) failed. [ 147.681190][ T9893] netlink: 'syz.3.1131': attribute type 13 has an invalid length. [ 147.871342][ T9904] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 147.884223][ T9905] __nla_validate_parse: 20 callbacks suppressed [ 147.884241][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1134'. [ 148.051770][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1137'. [ 148.294099][ T9936] Bluetooth: MGMT ver 1.23 [ 148.299993][ T9938] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1143'. [ 148.336336][ T9936] openvswitch: netlink: Message has 8 unknown bytes. [ 148.343094][ T9936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.451106][ T9949] team0: Device gtp0 is up. Set it down before adding it as a team port [ 148.585650][ T9961] syzkaller0: entered promiscuous mode [ 148.592512][ T9964] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 148.608378][ T9961] syzkaller0: entered allmulticast mode [ 148.807077][ T9972] netlink: 'syz.4.1153': attribute type 10 has an invalid length. [ 149.084382][ T9996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 149.099624][ T9996] : entered promiscuous mode [ 149.399995][T10009] netlink: 'syz.0.1163': attribute type 83 has an invalid length. [ 149.618934][T10027] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1168'. [ 149.628913][T10018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1166'. [ 149.833446][T10027] syzkaller1: entered promiscuous mode [ 149.839347][T10027] syzkaller1: entered allmulticast mode [ 149.899296][T10034] bond9: Unable to set down delay as MII monitoring is disabled [ 149.973927][T10051] netlink: 576 bytes leftover after parsing attributes in process `syz.0.1171'. [ 149.989083][T10034] bond9 (unregistering): Released all slaves [ 150.056945][T10051] xfrm0: left allmulticast mode [ 150.204338][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1177'. [ 150.422665][T10073] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1180'. [ 150.565276][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1185'. [ 151.382115][T10163] netlink: 'syz.0.1209': attribute type 11 has an invalid length. [ 151.395982][T10164] netlink: 'syz.0.1209': attribute type 11 has an invalid length. [ 151.533884][T10167] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 151.633621][T10167] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 151.684442][T10167] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 151.701422][T10191] netlink: 'syz.0.1218': attribute type 11 has an invalid length. [ 151.773145][T10191] netlink: 'syz.0.1218': attribute type 11 has an invalid length. [ 151.865421][T10202] netlink: 'syz.3.1220': attribute type 16 has an invalid length. [ 152.337899][T10231] xt_CT: No such helper "snmp" [ 152.482663][T10247] veth0: entered promiscuous mode [ 152.488980][T10250] netlink: 'syz.0.1235': attribute type 1 has an invalid length. [ 152.499733][T10246] veth0: left promiscuous mode [ 152.751690][T10261] veth11: entered allmulticast mode [ 153.158749][T10294] syzkaller1: entered promiscuous mode [ 153.164267][T10294] syzkaller1: entered allmulticast mode [ 153.648974][T10328] __nla_validate_parse: 19 callbacks suppressed [ 153.648991][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 153.684218][T10331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 153.869225][T10346] can: request_module (can-proto-0) failed. [ 153.869258][T10341] can: request_module (can-proto-0) failed. [ 153.953402][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 153.983935][T10353] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1260'. [ 154.577304][T10402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1276'. [ 154.594660][T10398] tipc: Enabled bearer , priority 0 [ 154.668414][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 154.693310][T10398] syzkaller0: entered promiscuous mode [ 154.696987][T10406] openvswitch: netlink: Missing key (keys=40, expected=80) [ 154.723697][T10398] syzkaller0: entered allmulticast mode [ 154.739027][T10398] tipc: Resetting bearer [ 154.813160][ T6364] tipc: Resetting bearer [ 154.830762][T10397] tipc: Resetting bearer [ 154.866733][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 154.886918][T10409] sctp: [Deprecated]: syz.4.1279 (pid 10409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 154.886918][T10409] Use struct sctp_sack_info instead [ 155.973748][T10397] tipc: Disabling bearer [ 155.993314][T10432] tipc: Enabling of bearer rejected, failed to enable media [ 156.084373][ T5912] tipc: Node number set to 3197577247 [ 156.276086][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1289'. [ 156.317628][ T5839] block nbd5: Receive control failed (result -107) [ 156.346068][T10456] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1293'. [ 156.360179][T10456] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1293'. [ 156.452102][T10467] netlink: 'syz.1.1296': attribute type 7 has an invalid length. [ 156.494121][ T2203] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.494235][T10467] netlink: 'syz.1.1296': attribute type 7 has an invalid length. [ 156.519639][ T2203] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.539064][ T2203] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.571103][ T2203] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.662238][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1298'. [ 156.895862][T10499] block nbd6: Unsupported socket: should be TCP or UNIX. [ 156.932854][T10501] netlink: 'syz.0.1307': attribute type 10 has an invalid length. [ 156.958924][T10501] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.978550][T10501] bond0: (slave team0): Enslaving as an active interface with an up link [ 157.027463][T10504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 157.748354][T10514] team0: Port device team_slave_0 removed [ 157.802552][T10521] netlink: 'syz.3.1315': attribute type 1 has an invalid length. [ 157.927042][T10529] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 157.982245][ T8190] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 157.996355][ T8190] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 158.067246][T10533] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 158.084335][ T8190] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 158.096359][T10533] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 158.119240][ T8190] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 158.282430][T10547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.480059][T10558] tipc: Enabling of bearer rejected, failed to enable media [ 158.529669][T10561] syzkaller1: entered promiscuous mode [ 158.554665][T10561] syzkaller1: entered allmulticast mode [ 158.634267][T10571] lo: entered promiscuous mode [ 158.634451][T10568] netlink: 'syz.1.1333': attribute type 15 has an invalid length. [ 158.654678][T10571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.707104][T10568] __nla_validate_parse: 22 callbacks suppressed [ 158.707121][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1333'. [ 158.707128][ T8190] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 158.721953][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1333'. [ 158.743874][T10568] netlink: 'syz.1.1333': attribute type 15 has an invalid length. [ 158.771071][T10582] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1336'. [ 158.772276][ T8190] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 158.819913][T10586] netlink: 'syz.3.1335': attribute type 12 has an invalid length. [ 158.876972][ T8190] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 158.909011][ T8190] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 159.129833][T10610] netlink: 'syz.3.1340': attribute type 9 has an invalid length. [ 159.458794][T10631] syzkaller1: left promiscuous mode [ 159.484429][T10631] syzkaller1: left allmulticast mode [ 159.611872][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1353'. [ 159.681177][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 159.693931][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1353'. [ 159.736032][T10640] bridge5: port 1(veth0_to_bond) entered blocking state [ 159.786227][T10640] bridge5: port 1(veth0_to_bond) entered disabled state [ 159.793402][T10640] veth0_to_bond: entered allmulticast mode [ 159.833496][T10640] veth0_to_bond: entered promiscuous mode [ 159.955241][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1360'. [ 160.043911][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1364'. [ 160.061787][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'. [ 160.190314][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1367'. [ 160.204292][T10684] netlink: 'syz.3.1368': attribute type 10 has an invalid length. [ 160.953060][T10729] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 160.967099][T10729] bond9: (slave vcan1): Error -95 calling set_mac_address [ 161.052431][T10742] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 161.498687][T10765] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 161.648939][T10787] netlink: 'syz.1.1397': attribute type 12 has an invalid length. [ 161.837084][T10802] veth0: entered promiscuous mode [ 161.855698][T10802] veth0: left promiscuous mode [ 161.941743][T10803] dvmrp6: entered allmulticast mode [ 162.076722][T10819] veth0_to_bond: left allmulticast mode [ 162.082482][T10819] veth0_to_bond: left promiscuous mode [ 162.099489][T10819] bridge5: port 1(veth0_to_bond) entered disabled state [ 162.161841][T10819] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 162.410892][T10837] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 162.619513][T10846] : entered promiscuous mode [ 162.921911][T10867] tipc: Enabled bearer , priority 0 [ 162.930768][T10854] syzkaller0: entered promiscuous mode [ 162.955241][T10854] syzkaller0: entered allmulticast mode [ 163.000490][T10859] tipc: Resetting bearer [ 163.092845][T10880] IPVS: Error joining to the multicast group [ 163.146562][T10880] x_tables: duplicate underflow at hook 3 [ 163.266102][T10891] vlan2: entered promiscuous mode [ 163.282153][T10891] bridge0: entered promiscuous mode [ 163.445973][T10900] netlink: 'syz.0.1435': attribute type 10 has an invalid length. [ 163.567905][T10853] tipc: Resetting bearer [ 163.604050][T10853] tipc: Disabling bearer [ 163.621615][T10913] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 163.622242][T10915] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 163.693081][T10913] 8021q: adding VLAN 0 to HW filter on device bond6 [ 163.701630][T10920] bond6: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 163.741232][T10920] bond6: entered allmulticast mode [ 163.962779][T10944] netlink: 'syz.2.1444': attribute type 32 has an invalid length. [ 163.986982][T10944] __nla_validate_parse: 14 callbacks suppressed [ 163.986999][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 164.084903][T10944] bond8: option coupled_control: invalid value (52) [ 164.136812][T10944] bond8 (unregistering): Released all slaves [ 164.272043][T10966] syzkaller0: entered promiscuous mode [ 164.282061][T10966] syzkaller0: entered allmulticast mode [ 164.316782][T10964] syzkaller0: entered promiscuous mode [ 164.329599][T10964] syzkaller0: entered allmulticast mode [ 164.338958][T10973] xt_cgroup: path and classid specified [ 164.436840][T10977] netlink: 'syz.4.1456': attribute type 3 has an invalid length. [ 164.490619][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 164.626796][T10982] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1458'. [ 164.707630][T10989] netlink: 'syz.1.1461': attribute type 21 has an invalid length. [ 164.744865][T10989] netlink: 'syz.1.1461': attribute type 22 has an invalid length. [ 164.753598][T10989] netlink: 'syz.1.1461': attribute type 23 has an invalid length. [ 164.764728][T10989] netlink: 'syz.1.1461': attribute type 25 has an invalid length. [ 164.776461][T10989] netlink: 'syz.1.1461': attribute type 26 has an invalid length. [ 164.784292][T10989] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1461'. [ 164.806769][T10997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.827588][T10993] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1462'. [ 165.276804][T11025] nbd6: detected capacity change from 0 to 64 [ 165.317310][ T5839] block nbd6: Receive control failed (result -104) [ 165.456596][T11043] sctp: [Deprecated]: syz.3.1478 (pid 11043) Use of int in maxseg socket option. [ 165.456596][T11043] Use struct sctp_assoc_value instead [ 165.551120][T11058] netlink: 163384 bytes leftover after parsing attributes in process `syz.3.1481'. [ 165.707315][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1484'. [ 165.718262][T11068] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.1484'. [ 166.437497][T11106] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1493'. [ 166.450626][T11106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1493'. [ 167.347477][T11172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.443695][T11182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.457076][T11181] block nbd0: reconnected socket [ 167.463121][ T5839] block nbd0: Receive control failed (result -32) [ 167.836802][T11203] bond10 (unregistering): Released all slaves [ 167.983092][T11218] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 167.994295][T11218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.725126][T11275] validate_nla: 11 callbacks suppressed [ 168.725144][T11275] netlink: 'syz.2.1539': attribute type 13 has an invalid length. [ 168.740007][T11275] netlink: 'syz.2.1539': attribute type 58 has an invalid length. [ 168.856433][T11283] xt_bpf: check failed: parse error [ 168.989547][T11289] tipc: Enabling of bearer rejected, failed to enable media [ 169.108834][T11302] syzkaller0: entered promiscuous mode [ 169.116098][T11304] __nla_validate_parse: 14 callbacks suppressed [ 169.116116][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1547'. [ 169.129038][T11302] syzkaller0: entered allmulticast mode [ 169.183160][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 169.191591][T11308] netlink: 'syz.2.1548': attribute type 21 has an invalid length. [ 169.202846][T11308] IPv6: NLM_F_CREATE should be specified when creating new route [ 169.213837][T11308] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.221470][T11308] IPv6: NLM_F_CREATE should be set when creating new route [ 169.228838][T11308] IPv6: NLM_F_CREATE should be set when creating new route [ 169.236130][T11308] IPv6: NLM_F_CREATE should be set when creating new route [ 169.286841][T11311] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1549'. [ 169.309155][T11313] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 169.319296][T11311] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1549'. [ 169.334506][T11313] netlink: 'syz.2.1548': attribute type 1 has an invalid length. [ 169.342830][T11313] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1548'. [ 169.809279][T11341] x_tables: duplicate underflow at hook 3 [ 169.894947][T11348] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1560'. [ 169.925073][T11348] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1560'. [ 169.979294][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1560'. [ 170.253782][T11376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1566'. [ 170.473030][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1572'. [ 170.508860][T11383] gtp0: entered promiscuous mode [ 170.514225][T11383] gtp0: entered allmulticast mode [ 170.717104][T11402] netlink: 'syz.4.1575': attribute type 11 has an invalid length. [ 171.651612][T11459] syzkaller0: entered promiscuous mode [ 171.663651][T11459] syzkaller0: entered allmulticast mode [ 171.929849][T11469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.954240][T11469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.975401][T11469] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 171.994755][T11469] bond0 (unregistering): Released all slaves [ 172.104393][T11491] tipc: Enabled bearer , priority 0 [ 172.120948][T11491] syzkaller0: entered allmulticast mode [ 172.151787][T11491] tipc: Resetting bearer [ 172.171315][T11490] tipc: Resetting bearer [ 172.201386][T11490] tipc: Disabling bearer [ 172.442069][T11520] netem: change failed [ 172.691856][T11528] bond0: option xmit_hash_policy: invalid value (64) [ 172.702289][T11528] bond0 (unregistering): Released all slaves [ 172.786061][T11540] syzkaller0: entered promiscuous mode [ 172.823057][T11540] syzkaller0: entered allmulticast mode [ 173.014666][T11561] openvswitch: netlink: Key type 148 is out of range max 32 [ 173.395964][T11586] sctp: [Deprecated]: syz.3.1623 (pid 11586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.395964][T11586] Use struct sctp_sack_info instead [ 173.572817][T11604] netlink: 'syz.0.1628': attribute type 3 has an invalid length. [ 173.772054][T11616] tipc: Started in network mode [ 173.777643][T11616] tipc: Node identity 7a01a529e606, cluster identity 4711 [ 173.787482][T11616] tipc: Enabled bearer , priority 0 [ 173.872733][T11616] syzkaller0: entered promiscuous mode [ 173.879395][T11616] syzkaller0: entered allmulticast mode [ 173.886533][T11616] tipc: Resetting bearer [ 174.020864][T10171] tipc: Resetting bearer [ 174.055600][T11615] tipc: Resetting bearer [ 174.092624][T11647] syz.0.1643: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 174.118031][T11647] CPU: 1 UID: 0 PID: 11647 Comm: syz.0.1643 Not tainted syzkaller #0 PREEMPT(full) [ 174.118053][T11647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 174.118063][T11647] Call Trace: [ 174.118069][T11647] [ 174.118077][T11647] dump_stack_lvl+0x189/0x250 [ 174.118102][T11647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.118119][T11647] ? __pfx__printk+0x10/0x10 [ 174.118139][T11647] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.118163][T11647] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 174.118196][T11647] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 174.118221][T11647] warn_alloc+0x214/0x310 [ 174.118242][T11647] ? stack_depot_save_flags+0x40/0x850 [ 174.118264][T11647] ? __pfx_warn_alloc+0x10/0x10 [ 174.118284][T11647] ? kasan_save_track+0x3e/0x80 [ 174.118301][T11647] ? __kasan_kmalloc+0x93/0xb0 [ 174.118320][T11647] ? xsk_setsockopt+0x4dc/0x8d0 [ 174.118334][T11647] ? do_sock_setsockopt+0x17c/0x1b0 [ 174.118354][T11647] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 174.118373][T11647] ? do_syscall_64+0xfa/0xf80 [ 174.118392][T11647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.118416][T11647] __vmalloc_node_range_noprof+0x125/0x12d0 [ 174.118463][T11647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 174.118486][T11647] ? __kasan_kmalloc+0x93/0xb0 [ 174.118513][T11647] vmalloc_user_noprof+0xad/0xf0 [ 174.118533][T11647] ? xskq_create+0xbf/0x170 [ 174.118550][T11647] xskq_create+0xbf/0x170 [ 174.118571][T11647] xsk_init_queue+0xb0/0x110 [ 174.118591][T11647] xsk_setsockopt+0x4dc/0x8d0 [ 174.118611][T11647] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.118631][T11647] ? __pfx_aa_sk_perm+0x10/0x10 [ 174.118656][T11647] ? aa_sock_opt_perm+0xff/0x1a0 [ 174.118676][T11647] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 174.118695][T11647] ? __pfx_xsk_setsockopt+0x10/0x10 [ 174.118713][T11647] do_sock_setsockopt+0x17c/0x1b0 [ 174.118740][T11647] __x64_sys_setsockopt+0x13f/0x1b0 [ 174.118768][T11647] do_syscall_64+0xfa/0xf80 [ 174.118789][T11647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.118804][T11647] ? clear_bhb_loop+0x60/0xb0 [ 174.118825][T11647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.118840][T11647] RIP: 0033:0x7f67ef78f749 [ 174.118855][T11647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.118869][T11647] RSP: 002b:00007f67f0571038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 174.118887][T11647] RAX: ffffffffffffffda RBX: 00007f67ef9e5fa0 RCX: 00007f67ef78f749 [ 174.118899][T11647] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 174.118908][T11647] RBP: 00007f67ef813f91 R08: 0000000000000004 R09: 0000000000000000 [ 174.118918][T11647] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.118927][T11647] R13: 00007f67ef9e6038 R14: 00007f67ef9e5fa0 R15: 00007ffd79647f18 [ 174.118957][T11647] [ 174.118963][T11647] Mem-Info: [ 174.408196][T11647] active_anon:5186 inactive_anon:0 isolated_anon:0 [ 174.408196][T11647] active_file:2500 inactive_file:39915 isolated_file:0 [ 174.408196][T11647] unevictable:768 dirty:51 writeback:0 [ 174.408196][T11647] slab_reclaimable:11393 slab_unreclaimable:137995 [ 174.408196][T11647] mapped:29086 shmem:1356 pagetables:1108 [ 174.408196][T11647] sec_pagetables:0 bounce:0 [ 174.408196][T11647] kernel_misc_reclaimable:0 [ 174.408196][T11647] free:1291325 free_pcp:13048 free_cma:0 [ 174.456226][T11647] Node 0 active_anon:20744kB inactive_anon:0kB active_file:10000kB inactive_file:159456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116344kB dirty:200kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13940kB pagetables:4284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.491322][T11647] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 174.523517][T11647] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.553940][T11647] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 174.559785][T11647] Node 0 DMA32 free:1257820kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20744kB inactive_anon:0kB active_file:10000kB inactive_file:159456kB unevictable:1536kB writepending:200kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:32384kB local_pcp:11780kB free_cma:0kB [ 174.593782][T11647] lowmem_reserve[]: 0 0 0 0 0 [ 174.600315][T11647] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 174.631522][T11647] lowmem_reserve[]: 0 0 0 0 0 [ 174.638449][T11647] Node 1 Normal free:3892120kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19872kB local_pcp:10784kB free_cma:0kB [ 174.671818][T11647] lowmem_reserve[]: 0 0 0 0 0 [ 174.676990][T11647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 174.700177][T11647] Node 0 DMA32: 1187*4kB (UM) 343*8kB (UME) 67*16kB (UME) 225*32kB (UM) 50*64kB (UM) 10*128kB (U) 16*256kB (UM) 17*512kB (UM) 8*1024kB (UME) 4*2048kB (UM) 295*4096kB (M) = 1257748kB [ 174.720855][T11647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 174.733963][T11647] Node 1 Normal: 162*4kB (UME) 52*8kB (UME) 43*16kB (UME) 120*32kB (UME) 21*64kB (UME) 11*128kB (UME) 7*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3892120kB [ 174.799686][T11647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.822624][T11647] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.832476][T11647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 174.854362][T11647] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 174.866397][T11647] 43768 total pagecache pages [ 174.871096][T11647] 0 pages in swap cache [ 174.875340][T11647] Free swap = 124996kB [ 174.879497][T11647] Total swap = 124996kB [ 174.883665][T11647] 2097051 pages RAM [ 174.888133][T11647] 0 pages HighMem/MovableOnly [ 174.892914][T11647] 424280 pages reserved [ 174.897454][T11647] 0 pages cma reserved [ 174.906525][T11667] __nla_validate_parse: 22 callbacks suppressed [ 174.906539][T11667] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1646'. [ 175.794466][T11615] tipc: Disabling bearer [ 175.804765][ T5912] tipc: Node number set to 2617746729 [ 175.922845][T11675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 176.057729][T11678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 176.091607][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1651'. [ 176.287612][T11700] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 176.341176][T11700] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1657'. [ 176.387569][T11700] tipc: Enabled bearer , priority 10 [ 176.508979][T11716] raw_sendmsg: syz.1.1663 forgot to set AF_INET. Fix it! [ 176.580888][T11720] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1664'. [ 176.826413][T11743] syzkaller0: entered promiscuous mode [ 176.843925][T11743] syzkaller0: entered allmulticast mode [ 177.535389][T11787] netlink: 'syz.0.1681': attribute type 2 has an invalid length. [ 177.543407][T11787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1681'. [ 177.557582][T11787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1681'. [ 177.590853][T11789] netlink: 'syz.4.1682': attribute type 1 has an invalid length. [ 178.063762][T11814] bridge0: port 2(syz_tun) entered disabled state [ 178.118057][T11814] syz_tun (unregistering): left allmulticast mode [ 178.133135][T11814] syz_tun (unregistering): left promiscuous mode [ 178.146674][T11814] bridge0: port 2(syz_tun) entered disabled state [ 178.264494][ T3532] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.287693][ T3532] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.449934][ T3532] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.484467][ T3532] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.602403][ T3532] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.627598][ T3532] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.754150][ T3532] bond0: (slave netdevsim0): Releasing backup interface [ 178.839021][ T3532] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.874972][ T3532] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.215702][ T3532] bridge_slave_1: left allmulticast mode [ 179.224856][ T3532] bridge_slave_1: left promiscuous mode [ 179.232041][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.286038][ T3532] bridge_slave_0: left allmulticast mode [ 179.291719][ T3532] bridge_slave_0: left promiscuous mode [ 179.326335][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.481480][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.482194][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.498342][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.506024][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 179.514761][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 179.517133][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.533991][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 179.541811][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.550788][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.562939][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.572109][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.572367][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.581497][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.595906][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.596335][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.604068][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.611798][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.623746][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.635139][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 179.647648][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 179.659860][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.667523][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 179.668140][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.677167][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.683148][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.697251][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.703759][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.705412][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.712772][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.719683][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.727822][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 179.732558][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 179.748370][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 179.756730][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 179.765295][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.172296][ T3532] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.183545][ T3532] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.194310][ T3532] bond0 (unregistering): (slave team0): Releasing backup interface [ 180.204481][ T3532] bond0 (unregistering): Released all slaves [ 180.217645][ T3532] bond1 (unregistering): Released all slaves [ 180.295568][ T3532] bond2 (unregistering): Released all slaves [ 180.372872][ T3532] bond3 (unregistering): Released all slaves [ 180.450664][ T3532] bond4 (unregistering): Released all slaves [ 180.463367][ T3532] bond5 (unregistering): Released all slaves [ 180.540500][ T3532] bond6 (unregistering): Released all slaves [ 180.654943][T11848] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1706'. [ 180.688441][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 180.721085][ T3532] tipc: Left network mode [ 180.802984][T11849] nbd: couldn't find device at index 4 [ 180.810107][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 181.062021][T11857] tipc: Enabled bearer , priority 0 [ 181.092318][T11857] syzkaller0: entered promiscuous mode [ 181.098286][T11857] syzkaller0: entered allmulticast mode [ 181.133673][ T3532] hsr_slave_0: left promiscuous mode [ 181.139598][ T3532] hsr_slave_1: left promiscuous mode [ 181.158041][ T3532] vlan0: left allmulticast mode [ 181.162919][ T3532] veth0_vlan: left allmulticast mode [ 181.169267][ T3532] vlan0: left promiscuous mode [ 181.174660][ T3532] veth1_macvtap: left promiscuous mode [ 181.180730][ T3532] veth0_macvtap: left promiscuous mode [ 181.186547][ T3532] veth1_vlan: left promiscuous mode [ 181.191814][ T3532] veth0_vlan: left promiscuous mode [ 181.507956][ T3532] pimreg3 (unregistering): left allmulticast mode [ 181.745180][ T5155] Bluetooth: hci0: command tx timeout [ 181.745485][ T5839] Bluetooth: hci3: command tx timeout [ 181.782588][ T3532] team0 (unregistering): Port device team_slave_1 removed [ 181.815857][ T3532] team0 (unregistering): Port device team_slave_0 removed [ 181.824963][ T5839] Bluetooth: hci4: command tx timeout [ 181.837014][ T5839] Bluetooth: hci2: command tx timeout [ 182.105389][T11862] tipc: Resetting bearer [ 182.112101][T11856] tipc: Resetting bearer [ 182.158113][T11856] tipc: Disabling bearer [ 182.182671][T11830] chnl_net:caif_netlink_parms(): no params data found [ 182.256424][T11865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1709'. [ 182.311303][T11867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1709'. [ 182.322715][T11867] netlink: 'syz.4.1709': attribute type 8 has an invalid length. [ 182.325553][T11865] sctp: [Deprecated]: syz.4.1709 (pid 11865) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.325553][T11865] Use struct sctp_sack_info instead [ 182.458613][T11871] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 182.466445][T11871] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1710'. [ 182.569978][T11832] chnl_net:caif_netlink_parms(): no params data found [ 182.579779][ T3532] IPVS: stop unused estimator thread 0... [ 182.617748][T11874] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 182.643473][T11874] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1710'. [ 182.696766][T11831] chnl_net:caif_netlink_parms(): no params data found [ 182.735791][T11836] chnl_net:caif_netlink_parms(): no params data found [ 182.746445][T11830] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.753649][T11830] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.761231][T11830] bridge_slave_0: entered allmulticast mode [ 182.768488][T11830] bridge_slave_0: entered promiscuous mode [ 182.821388][T11830] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.829638][T11830] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.837615][T11830] bridge_slave_1: entered allmulticast mode [ 182.845757][T11830] bridge_slave_1: entered promiscuous mode [ 182.870635][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1712'. [ 182.990226][T11830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.027202][T11830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.041364][T11832] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.049262][T11832] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.056882][T11832] bridge_slave_0: entered allmulticast mode [ 183.063962][T11832] bridge_slave_0: entered promiscuous mode [ 183.101143][T11832] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.108845][T11832] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.116286][T11832] bridge_slave_1: entered allmulticast mode [ 183.123413][T11832] bridge_slave_1: entered promiscuous mode [ 183.130816][T11836] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.138567][T11836] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.146248][T11836] bridge_slave_0: entered allmulticast mode [ 183.153258][T11836] bridge_slave_0: entered promiscuous mode [ 183.191385][T11836] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.199120][T11836] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.207325][T11836] bridge_slave_1: entered allmulticast mode [ 183.214339][T11836] bridge_slave_1: entered promiscuous mode [ 183.223974][T11830] team0: Port device team_slave_0 added [ 183.230131][T11831] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.237811][T11831] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.245387][T11831] bridge_slave_0: entered allmulticast mode [ 183.252468][T11831] bridge_slave_0: entered promiscuous mode [ 183.284731][T11830] team0: Port device team_slave_1 added [ 183.290683][T11831] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.298475][T11831] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.306075][T11831] bridge_slave_1: entered allmulticast mode [ 183.313189][T11831] bridge_slave_1: entered promiscuous mode [ 183.322954][T11832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.365495][T11832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.378256][T11836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.420090][T11836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.430076][T11830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.437621][T11830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.464409][T11830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.479552][T11831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.510809][T11830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.517865][T11830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.544256][T11830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.557435][T11831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.569331][T11832] team0: Port device team_slave_0 added [ 183.605048][T11832] team0: Port device team_slave_1 added [ 183.612348][T11836] team0: Port device team_slave_0 added [ 183.641792][T11836] team0: Port device team_slave_1 added [ 183.650055][T11831] team0: Port device team_slave_0 added [ 183.688327][T11831] team0: Port device team_slave_1 added [ 183.695038][T11832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.703181][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.730962][T11832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.748999][ T5940] Oops: general protection fault, probably for non-canonical address 0xdffffc000000004c: 0000 [#1] SMP KASAN PTI [ 183.760916][ T5940] KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] [ 183.769348][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 183.778709][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.788870][ T5940] Workqueue: events l2cap_info_timeout [ 183.794349][ T5940] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 183.800235][ T5940] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 10 25 09 cc 66 66 66 66 66 66 2e [ 183.819834][ T5940] RSP: 0018:ffffc900046af768 EFLAGS: 00010202 [ 183.825893][ T5940] RAX: dffffc0000000000 RBX: ffffffff8920e518 RCX: 0eaebe5f48384c00 [ 183.833947][ T5940] RDX: 0000000000000000 RSI: ffffffff8920e518 RDI: 000000000000004c [ 183.841904][ T5940] RBP: ffffffff8a52c0b5 R08: 0000000000000001 R09: 0000000000000000 [ 183.849885][ T5940] R10: dffffc0000000000 R11: ffffffff8a52c070 R12: 0000000000000000 [ 183.857843][ T5940] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 183.865799][ T5940] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 183.874711][ T5940] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.881280][ T5940] CR2: 00007f0881db7f18 CR3: 0000000074f0c000 CR4: 00000000003526f0 [ 183.889238][ T5940] Call Trace: [ 183.892509][ T5940] [ 183.895423][ T5940] __kasan_check_byte+0x12/0x40 [ 183.900266][ T5940] lock_acquire+0x84/0x340 [ 183.904699][ T5940] ? lockdep_hardirqs_on+0x98/0x140 [ 183.909890][ T5940] ? __cancel_work+0x254/0x2c0 [ 183.915081][ T5940] lock_sock_nested+0x48/0x100 [ 183.919831][ T5940] ? l2cap_sock_ready_cb+0x45/0x140 [ 183.925020][ T5940] l2cap_sock_ready_cb+0x45/0x140 [ 183.930035][ T5940] l2cap_conn_start+0x76d/0xe60 [ 183.934879][ T5940] ? __pfx_l2cap_conn_start+0x10/0x10 [ 183.940243][ T5940] ? __pfx___mutex_lock+0x10/0x10 [ 183.945257][ T5940] ? process_scheduled_works+0x9ef/0x1770 [ 183.950970][ T5940] l2cap_info_timeout+0x68/0xa0 [ 183.955802][ T5940] ? process_scheduled_works+0x9ef/0x1770 [ 183.961511][ T5940] process_scheduled_works+0xad1/0x1770 [ 183.967055][ T5940] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.973032][ T5940] worker_thread+0x8a0/0xda0 [ 183.977607][ T5940] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.983923][ T5940] ? __kthread_parkme+0x7b/0x200 [ 183.988850][ T5940] kthread+0x711/0x8a0 [ 183.992917][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 183.998013][ T5940] ? __pfx_kthread+0x10/0x10 [ 184.002616][ T5940] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.007799][ T5940] ? lockdep_hardirqs_on+0x98/0x140 [ 184.012980][ T5940] ? __pfx_kthread+0x10/0x10 [ 184.017559][ T5940] ret_from_fork+0x599/0xb30 [ 184.022140][ T5940] ? __pfx_ret_from_fork+0x10/0x10 [ 184.027244][ T5940] ? __switch_to_asm+0x39/0x70 [ 184.031993][ T5940] ? __switch_to_asm+0x33/0x70 [ 184.036742][ T5940] ? __pfx_kthread+0x10/0x10 [ 184.041327][ T5940] ret_from_fork_asm+0x1a/0x30 [ 184.046090][ T5940] [ 184.049102][ T5940] Modules linked in: [ 184.053277][ T5940] ---[ end trace 0000000000000000 ]--- [ 184.054737][ T10] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000039: 0000 [#2] SMP KASAN PTI [ 184.070605][ T10] KASAN: null-ptr-deref in range [0x00000000000001c8-0x00000000000001cf] [ 184.079023][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G D syzkaller #0 PREEMPT(full) [ 184.089798][ T10] Tainted: [D]=DIE [ 184.093507][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 184.103550][ T10] Workqueue: events l2cap_info_timeout [ 184.109012][ T10] RIP: 0010:do_raw_spin_lock+0x78/0x290 [ 184.114578][ T10] Code: cd 9e 81 48 8d 4c 24 20 48 c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 4c 24 18 4a 89 04 39 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 9f 01 00 00 41 8b 06 3d ad 4e ad de 0f [ 184.134185][ T10] RSP: 0018:ffffc900000f7760 EFLAGS: 00010207 [ 184.140246][ T10] RAX: 0000000000000039 RBX: 00000000000001c8 RCX: 1ffff9200001eef0 [ 184.148202][ T10] RDX: 0000000000000000 RSI: ffffffff8bbfc640 RDI: 00000000000001c8 [ 184.156160][ T10] RBP: ffffc900000f7818 R08: 0000000000000001 R09: 0000000000000000 [ 184.164123][ T10] R10: dffffc0000000000 R11: ffffffff8a52c070 R12: dffffc0000000000 [ 184.172075][ T10] R13: dffffc0000000000 R14: 00000000000001cc R15: dffffc0000000000 [ 184.180030][ T10] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 184.188950][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.195528][ T10] CR2: 00007f08829156c0 CR3: 000000007daa4000 CR4: 00000000003526f0 [ 184.203495][ T10] Call Trace: [ 184.206768][ T10] [ 184.209688][ T10] ? lock_acquire+0x5f/0x340 [ 184.214272][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 184.219643][ T10] ? __cancel_work+0x254/0x2c0 [ 184.224405][ T10] ? lock_sock_nested+0x6a/0x100 [ 184.229329][ T10] lock_sock_nested+0x6a/0x100 [ 184.234083][ T10] l2cap_sock_ready_cb+0x45/0x140 [ 184.239098][ T10] l2cap_conn_start+0x76d/0xe60 [ 184.243936][ T10] ? __pfx_l2cap_conn_start+0x10/0x10 [ 184.249293][ T10] ? __pfx___mutex_lock+0x10/0x10 [ 184.254311][ T10] ? lock_acquire+0x5f/0x340 [ 184.258883][ T10] l2cap_info_timeout+0x68/0xa0 [ 184.263720][ T10] ? process_scheduled_works+0x9ef/0x1770 [ 184.269428][ T10] process_scheduled_works+0xad1/0x1770 [ 184.274972][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 184.280946][ T10] worker_thread+0x8a0/0xda0 [ 184.285542][ T10] kthread+0x711/0x8a0 [ 184.289613][ T10] ? __pfx_worker_thread+0x10/0x10 [ 184.294710][ T10] ? __pfx_kthread+0x10/0x10 [ 184.299295][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 184.304492][ T10] ? lockdep_hardirqs_on+0x98/0x140 [ 184.309685][ T10] ? __pfx_kthread+0x10/0x10 [ 184.314280][ T10] ret_from_fork+0x599/0xb30 [ 184.318861][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 184.323965][ T10] ? __switch_to_asm+0x39/0x70 [ 184.328715][ T10] ? __switch_to_asm+0x33/0x70 [ 184.333504][ T10] ? __pfx_kthread+0x10/0x10 [ 184.338084][ T10] ret_from_fork_asm+0x1a/0x30 [ 184.342835][ T10] [ 184.345838][ T10] Modules linked in: [ 184.349833][ T10] ---[ end trace 0000000000000000 ]--- [ 184.355315][ T10] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 184.361219][ T10] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 d0 10 25 09 cc 66 66 66 66 66 66 2e [ 184.361282][ T5839] Bluetooth: hci0: command tx timeout [ 184.380847][ T10] RSP: 0018:ffffc900046af768 EFLAGS: 00010202 [ 184.380866][ T10] RAX: dffffc0000000000 RBX: ffffffff8920e518 RCX: 0eaebe5f48384c00 [ 184.380880][ T10] RDX: 0000000000000000 RSI: ffffffff8920e518 RDI: 000000000000004c [ 184.380892][ T10] RBP: ffffffff8a52c0b5 R08: 0000000000000001 R09: 0000000000000000 [ 184.380904][ T10] R10: dffffc0000000000 R11: ffffffff8a52c070 R12: 0000000000000000 [ 184.380917][ T10] R13: 0000000000000260 R14: 0000000000000260 R15: 0000000000000001 [ 184.380928][ T10] FS: 0000000000000000(0000) GS:ffff8881260b1000(0000) knlGS:0000000000000000 [ 184.380943][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.380955][ T10] CR2: 00007f08829156c0 CR3: 000000007daa4000 CR4: 00000000003526f0 [ 184.380974][ T10] Kernel panic - not syncing: Fatal exception in interrupt [ 184.381338][ T10] Kernel Offset: disabled