last executing test programs: 3.119786785s ago: executing program 0 (id=826): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000400)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x1, 0x6, 0x1, 0x10, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0xfffffff9, 0x1000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x2f, 0xff, 0x9, 0xfffffff7, 0x2, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x10, 0x9, 0x4d}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x18, &(0x7f0000000100)=0xc, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b0368002e0064000200475400f6a13bb1000000086086dd6558", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x13, 0xd3, 0x0, 0x1, 0x0, @remote, @mcast1, 0x0, 0x700, 0x7, 0x6}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x7, 0x10, 0xc2, 0xffffff01, {{0xc, 0x4, 0x1, 0x38, 0x30, 0x64, 0x9, 0x0, 0x4, 0x0, @local, @private=0xa010102, {[@ssrr={0x89, 0xb, 0x86, [@multicast2, @loopback]}, @end, @generic={0x86, 0x10, "cd2b449c53b56b648ed07a6e957e"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x700, 0x80, 0x43, 0x3, {{0x2a, 0x4, 0x0, 0x3, 0xa8, 0x67, 0x0, 0x8, 0x4, 0x0, @empty, @empty, {[@end, @end, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x67, 0x1, 0x2, [{@remote, 0x1}, {@remote, 0x1}, {@multicast1, 0x7ff}]}, @timestamp_prespec={0x44, 0x2c, 0x7a, 0x3, 0x9, [{@multicast2, 0x2b5}, {@empty, 0x43e4}, {@broadcast, 0x8}, {@broadcast, 0xd9}, {@empty, 0x4}]}, @cipso={0x86, 0x46, 0x3, [{0x6, 0xb, "90cdc68d463a5a6932"}, {0x6, 0xc, "7944fc7f710e5a405b81"}, {0x0, 0xf, "39cb27180f838ecbeaa171be4b"}, {0x0, 0xd, "9583c47aeaef7fc9937f1f"}, {0x7, 0x5, "1d12be"}, {0x1, 0x8, "ab9d9f7fbd2f"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000009c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000840)={0x140, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r1, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x40050) 2.791390192s ago: executing program 0 (id=830): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000002000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (async) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRESOCT=r0, @ANYRES32=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.608169286s ago: executing program 0 (id=834): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) accept4$inet6(r1, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd2d}, 0x14}}, 0x10) 2.262699621s ago: executing program 1 (id=838): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="f8ffffff", 0x4) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @local}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) 1.967773846s ago: executing program 2 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @random="0100002010ff"}) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x5, 0xb, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) 1.91950934s ago: executing program 3 (id=842): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x34, r3, 0x431, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x34}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000131481"], 0x28}}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0xfffffeaf, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x9, 0xc4d5, 0x0, 0x4, 0x7fffffff, 0x8, 0x3, 0xa879, r5}, &(0x7f0000000240)=0x20) 1.840096846s ago: executing program 1 (id=843): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) 1.784502297s ago: executing program 1 (id=844): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef", 0xdb}], 0x1}}], 0x1, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.742021809s ago: executing program 3 (id=845): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000540)={r0, 0x3, 0x6, 0xffffffffffffffff}) connect$rds(r2, &(0x7f0000000580)={0x2, 0x4e22, @remote}, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x1e4, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x1e4}}, 0x800) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0xac, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x9404, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x68, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4040) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x0) 1.640613732s ago: executing program 2 (id=846): r0 = socket$kcm(0x10, 0x2, 0x4) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) (async) r3 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000580)={'gre0\x00', &(0x7f00000002c0)={'sit0\x00', 0x0, 0x7, 0x80, 0x7, 0x7, {{0x7, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x9, 0x73, 0x0, @multicast1, @multicast1, {[@end, @ra={0x94, 0x4}, @generic={0x86, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x84, 0x0, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x84}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x812, r6, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) close(0x4) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000004b54a398d72031dabebe14000000000000009500000000000000bfa00000000d658aea757a2c55d38e5d"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x90) 1.639856278s ago: executing program 0 (id=847): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000068000100030010000000008000000000000000000c00020001000009000000000c000c8008000200040000000600030001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000088fcff4c9b222944fc6d6200"/31, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r4}, 0x70) 1.552144627s ago: executing program 3 (id=849): syz_init_net_socket$ax25(0x3, 0x5, 0xcc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) 1.535736811s ago: executing program 2 (id=850): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r1, r1, 0x1, 0x0, 0x0, 0x9, 0xb2, 0x16bf, 0x5505, 0xc3b8, 0x1, 0x401, 'syz1\x00'}) r2 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)="000d0000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e61, @loopback}, 0x10, 0x0}}], 0x2, 0x20004086) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.507223891s ago: executing program 0 (id=851): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x221}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x3, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.380139219s ago: executing program 3 (id=852): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x5, 0x800007, 0x2, 0x6, 0x8, 0x8, 0x7, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0xfdef) 1.338401041s ago: executing program 2 (id=853): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x6}, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f80)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000140)="5b3b2951891504bfc613cf74037e91317d7fd345fd9e2d38ede428df4093d5863311d9137be82d1337f68d74b02d08444b7ea7d2d3d572c5605d80a40c501c1d990cb61cb065052a7daecd3f4ef40222478e7d9139f22c3c705a36543a4956", 0x5f}, {&(0x7f0000000700)="2058052e4b98ba7d0267cb5bd138d0225d1ec6872a4b48053cc0ab226557cdc90b31722a58c4924c2a3f24ccb6783e9ed219bdf6a733ab92f59986c6d8ebcc54a4dfe4ce57a52218b47f2caff679d8577957b9f07cf19fda471a486c1ad120e86d58ea933bdb5b6ada64ecc95ce53646851a998db3bc81ccb7cb4c", 0x7b}], 0x2, &(0x7f00000007c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc8}}], 0x90}}, {{&(0x7f0000000880)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000f00)=[{&(0x7f00000008c0)="933e", 0x2}, {&(0x7f0000000b00)="89abb3ba9392767f380a79a54344279acbf399cd7ae3", 0x16}, {&(0x7f0000000b40)="8526fe589e628981dc3edac49b15dae26c7c611ce9551ca12c2cddf6234fd841880c701792a20022b14fbbcc044959193ebebc648ace17e53b7291c726e8c3cb6ea83dbcc9d165f3ba33ac7e91b5c4447f56c29876dae9a0e0942f193e21d140c25d69845c0bbcbf5c2eb6fba580dd8484a7897b2a74e131b2ce92aa8f33c627bbc3a57bf6dc1b48efd72c57e0a2e50a3a5dd3b484aff78b91b05c9838943292b4e9cbdbb159cd5099f9a7dfe8768ea1ca87db", 0xb3}, {&(0x7f0000000c00)="91937ebf1390ae93166d31", 0xb}, {&(0x7f0000000c40)="fb7b783fff1c9ca0373dc77dfc6415eea21eb9b66b4bf4c2741fbe55c64f2bcb03b5c89cefee95dce17d918379ffac8ed1ad733db381bae29353bd6ccd0d7590c75216c802195b0241d2fed6f21851a95d29f8d8f8981522642210331d7dc3d4c66abdc66bfee5121471ae337cb25efa2d9761c73580c4bf4b957ad7991203ba03b70604c96351d15bfc6ef6dc47bbb9a4f7e49cea47a85cab99f90fc32729966ee89f49fe61383b6a5a3f6a4c78791aea61353a6d2a6e04efa7a325120139c36e56b0518ce823cd", 0xc8}, {&(0x7f0000000d40)="98a2db1baaaa4274d5c5f13ff8b3b1dab62d987c993baffb4090cd7007ba9deb005bc01b3d060a1e5f9dc338cbac9feecd3f9da098e0853e3c2573599956877ee3c2d6c7089653219a58b49cc8502db7a0d575bbcede1f0f5990b3663d2f8ef0df3d34a8155f3e912407ca5381a63d63c7c9ff19461b846af5096b4c07a874dc8ef954c4f886b7cf1183cbe971a7953bf8bacaea2c114c133c5a2477dd7ff516056d7ebd123ff673a7a2072271256d10653610f00dd143200d7bef145635cace85503e5547e19d83f99e97dd3575e5aff41cdba0591b2e79c0dbc40b4371867c658c244312eb8b8acc76db585c8b429cc776bd900c", 0xf5}, {&(0x7f0000000e40)="e78a28f6724e49c0e2e3cf66c391853cecc31db049b5b7b16340e098e47c0f362e09716fd0ad78f65a0df031f2742450dbd4c0e7af298bddad5dc5447748c3c97a8d53bedd4c8a237374c919ca0dc1b6f00bb81de9cd1dae39a66751bee4b29b1172840b7d6b3538f2fda929407ed5aba009ec4b9ed16220a4c9090f5a6f2c8f2b1daf", 0x83}], 0x7}}], 0x2, 0x4000000) sendmmsg$sock(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="72dd", 0x2}], 0x1}}], 0x1, 0x83d086745d8479bf) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x13, &(0x7f0000000600)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="9266979c6ad1655c10cd0b68eaa911b6ea897f2300b4f5adff4ed0f650d717f84df049b513a360753613c1857b3b2df5070fa01081501d4bc578e3c9e26d586f3915be9d3c04838ac544e5509463c37204dfc23e46d8e346518ca716974144f8814f8321e0d86727232993693116d04451c781077297945762c3d25bf269c3665d6de604b940bdf17d29da48aafa92fe9c272ad50628ffc047", @ANYRESDEC=r1, @ANYRES64=r0, @ANYRESHEX, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x1400000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x474, 0x24, 0x1, 0x70bd26, 0x2, "", [@nested={0x464, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0x43d, 0xeb, 0x0, 0x1, [@generic="dab8ca993f84687a64cd87a2f961cc55af32afa7c6ff99b17597f02a3c4fa8cb61bd9b214a9054b1345a6a6e9440406560313a993916d7b4564890cdcf68a04dd049604827675ce904b3f559c25cca97f5d55ca6f74e681f71faaf73e7dbf0251e5f1a8b61b41bc7b56534826d9a2effb9074fc3a3a1e26468c17181f1313e164b8010bc8941cd1a3fd431c87709f6c9c3258ad3130d5f25d9e54ec4c0cad3a79a688f090d48a46df520f35fb2ff6be10c", @generic="5ddef55553470034ff840aaad3364de4d6fbd3", @generic="a171b8c1f2873a1b7b610c968bb1ff24255071e0ba0cd7d00542070af8e8eead716167967fde659fbd7e4e8a4e5d73c4064fc46df4c2529d584c", @nested={0x1b1, 0x72, 0x0, 0x1, [@nested={0x4, 0xf}, @generic="434f1bb8106cb29841c806c46c527381fdaf6a5491", @generic="914573c47083055f19b78aa97f60e656ea0709a7fcd493f93606bbb62ff975990c749a2846318495aeb7d41855bcfb3083bc470bd4ccb5d82c589c5effeb", @generic="d1f446ff667012a7fe600890547d3ab4d30dc5f1951eb2a663f3f5f7e9210519d417107fd9144b3ef446f15a02be3181e5e6f409e98e4b6c9fabbbc652cd7515c86ae35a3717ef18ab4a724b3eb198b5c8fa5ecb8f37a97f01d7a295", @generic="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"]}, @generic="962c49afb5868d5de5446c2c80a0a50421d2600aaf0eb5e54a99bdca60790d898c7c8d3d909456f608a2cb869a327da6576dbb699e8134cbeea9748933b415639b91768ea8081915790d3becef2070a39c67c236c76ca95112007d20ee93b8f6a91b9917f4", @generic="0d768294f529804d515d270ca24e6d146c55dc1e4f2e90fcaa5d0315947956fb3d6598b27b333a190b896fc1b0e4076faa0f4748ef52ce701eac673a50882dc86b79dd85ada336aabba29f9f073cda9746a6f1dad3d1ee9816f4164552f04d7349f25a532e3e745ece81a0c27d415a4afe5b4e34449d19e2574e1d0e50d70e31fa21c307f9ce587b8ccbf1e63dc9f18e1a88738be82914b9cac5fd2b281a5035daa4635ff65abfdc735b1edece672df050da3c564d85b9791b3152391efa4ca92b3cf3c08891faf37080", @nested={0x55, 0x94, 0x0, 0x1, [@generic="113ac7f3808e9adf1660f5b33acc6ade5dfa5d05c551871aec1ca314fceb95be2a3315d1414824db041083e881811762c088b8041361ad8390eea9d07fbad5834e59a61edf", @nested={0x4, 0x12b}, @nested={0x4, 0x134}, @nested={0x4, 0x6e}]}]}]}]}, 0x474}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=ANY=[@ANYBLOB="84010000100001000000000000000000ac1e0101000000000000000000000000fe80000000000000000000000000222746700000200000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000001000000000000000000000000000000006c000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001060000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c00120067636d5f6261736528637472286165732d6165736e69292c67686173682d67656e657269632900000000000000000000000000000000000000000000000000000000000080000000"], 0x184}}, 0x0) 1.218675707s ago: executing program 2 (id=855): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8995, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0xffffffffffffff20, 0x200c0045, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="120000001c000100030000000000000007"], 0x30}}, 0x0) 1.09918829s ago: executing program 2 (id=857): syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x891d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = gettid() r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x1, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80, 0x26}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x903d8ae2c265175e}, 0x8040) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 844.088832ms ago: executing program 4 (id=860): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = gettid() pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r1, r2, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x1401, 0x2, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000800) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'geneve0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x20, 0x83, "7efc455799d59f5bf4c8310bceabb3cbbf673cd7bb12994458dfc66079570e2834d1fe30e0eb19ed8a48e6166ddcadf8f521ac016736aeb0040a26d9008b64c396d816070731b57740d63f71d7ee984148f13c5ebced11e97b553720ccff71d3b6a032c034a85d75ffa80e90c4be5c8cc416a5ea217d61947334bc5513542a941ca3b7"}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x2f, 0xa5, 0x5, 0xfffffc39, 0x8, @empty, @empty, 0x7800, 0x1, 0x1, 0xdb}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f0000000400)={'gretap0\x00', r4, 0x8, 0x10, 0x200, 0x8, {{0x21, 0x4, 0x3, 0x2, 0x84, 0x65, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xc0, 0x1, 0x5, [{@rand_addr=0x64010102, 0x3}]}, @timestamp_addr={0x44, 0xc, 0xa6, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0xa}, 0x10000}]}, @generic={0x89, 0xe, "8bca9912597ee7d2a9dd5428"}, @noop, @end, @noop, @timestamp={0x44, 0x2c, 0x38, 0x0, 0xb, [0x9, 0x4, 0x9, 0xf71, 0x422, 0xe, 0x0, 0x0, 0x5, 0x9]}, @ssrr={0x89, 0x17, 0x9d, [@dev={0xac, 0x14, 0x14, 0x44}, @loopback, @multicast1, @loopback, @loopback]}, @generic={0x86, 0x3, 'T'}]}}}}}) r6 = openat$cgroup_ro(r2, &(0x7f0000000500)='memory.events.local\x00', 0x0, 0x0) ioctl(r0, 0x7fffffff, &(0x7f0000000540)="dad975872868b723fc416d56801ba45a89630f20cd00ff9ef0d63f4cef5df2bdcc3912629e229f5b25fd1ded145ca33483acd69a4cdbd363a20f4d7b2d5bb99a5e13d04855a330382e1016c7e7393143641570ac5519545a1c58cf580c82b7f727bef2811665e35e02164aaaf6d5504cb2d17d0e6997053a8920d43ebfc81a756d4c1734752642e2e2d8c2472a7c18b294f741b200297012f7d93d569314c8a50b12") ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000600)={@loopback, 0x23, r5}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={@private1={0xfc, 0x1, '\x00', 0x1}, @multicast1, 0x18, 0x1e}}) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f00000006c0)=r1) ioctl(r3, 0x669, &(0x7f0000000700)="0b6038e34156c77ad7328d62647e2725743890a9cd25cbb55014c662c9c78c27d4943da83560c26d1f0a61700df090f2b37267") shutdown(r3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_ADD_DEV(r9, 0x5000940a, &(0x7f0000000740)={{r8}, "5fc09a30934dc93b2683018a720d2c88fc83fae38e3b8c5a0540ac3bbec2da4c45e734fbe9e348d2c0152e9810b3d7bec47273ece32c5399126fe9e8d507fc4d828c5aa00b5bccc8746ce30d58a141b9fbf8fa89866ea47634acc8ea6df0893bd81f6cef0193037321a90897f5a8f6e0b88cb3497d816e5a16375bc2dbbdb6ba017be4cf505d4bfa9c21bceaaffeb8333ec16a337a655780d362e4a1e704c16953694a55a1157f38d13678fdb5205388ac81e838341d71f843fcfec55572e19b0ef920c52eb25b7e08b5a3fc39941440e4c072fb7ae0bac6e40e6096569331591e2b749d17eef85b3bb58a4513c626ccf21d6a6b423cd324552c65fc4f60e0eee03779f9435da63efcf3ae580cf2377055ba49fe40b31bc93ac474d8cabffd897bb95033f6f1daaefa6165a958acd637f07a6be0d2842f23a524b73ee68be133785fd187bd2b82f6c94a9df9fe9dee367fc6f16f10b8b0e51cce883bddb0adc370f220b97b0884095a92aedf3418e75f8c25d13d6d10fc9a795b32286b3468befa2df90060b1f7959df91a338422e833d2b30fdb11035d746aaf1896270692ccfce4cd7ddd70525bb3f5a3d99b2a2a03a420503df31acb4cd45facc966521e84892123d346adca1e896bc462fd27a1b3a28a21c7cdceab610fae032f4da69501461f48f676a091681a4e49172d8c22e6664d95ab902609a61b10169ea5fab8f3db05552f67ca23062fb565493da5275bc512c4dc5dc185ccb33484572632beecc16981acc80840429dcf011d0d2a826aa9851ac041e681cc616cc8c4c3a8ab2579d857313aadea06e2111aa1e535dc76d2972ca705937152a8e1ea39b0534d4ef61af785bddaf3d7691e59fb490938aa466bd6aff508638a4906ce6da10f652c47c020bb20b6e2bdb0a7f442dc43f22c316e19dd2db34b090487e1ef3b80706bc02c531b37decbd2e04ebd713868c08dc5f66d54eb81e686077cdf11c925660323100f51d1f78dedf5dcf6a2725c32d6103c6aa055b508e155e42da01fb4e1a32e865a712519c84783cc98b32d06dad4c3b053c25bce2064cbfef0311beef6754fb0a337c1105edadc940eccbff8826475c43d8a4dd9c367022d7ababc1f413655e6d7f38eb9408e815731bdec3a73a3ac3465fb8c83ce2451fe6558b03e84a1961d2332af3a42bd81ecb2dc8ae9749d43e4439a6d0dd14033480d6901c623bcad4b907005acd26d465639f62ce8c4a2083f183739d8a32d9cddf624ba4693b463979ecca0cfb75debafb02719774755a7b2a1f24050d988e168e5dbcebd766a8c03f5d709b0aa1554a280df8d29b7ef31b29c64d4e8c3e8a1698a9a21e62c3080e5b0e95c6f8a4118b65b1429b184f228f54e7d61cd920649280562d6da1b2d040a3dcb524c4aa6da7018b1c207e7b4563e626c74828d33f79b62c0babfd3d6b9902d3032ad29d45a6fd88b5c46f29a969fee96518d5c3339885d751fde7d0b869898843817f74dd2c79078e25ed2e4c076aea5c1391b4f3c85867f63823cb9c2f52adb9b1eece8739a1693e5d324eaee2cc9b358b8e05dcd988b57d643dd50a39914ab65911301f598924b0f2921e9ce7127ee318b7885a2caae5f29ebd4850c89ebe140791b41fd9efb034e3cb13c397e57e0b2219b19cab47473cfc49dc12efee3dba02a56bc99fb09ca11aa334802b9aafb6a7a0253f63edc3133da78ad092937593ec7bf2d06fa65d4a35a90729c5694a5f1bff9d447e724fd238fddccb349b06e33448a42ae3d6be1a5c9074d9b1ee76b7f9e554f2dbb6053323272a8e0aa5a9a4a40556e82b40d9b297a4d99cd26e418b1193431513980a2b0c24916aba6f1bf8edf7a5210302ad0d152b48e48f139ed3a41f84d320067af2cc401016b1be8d3be8a819e1bd539b4863e57ff6a16b786a9bc83b7e763cc3282db48749a91648ac4b793bcf1dc654a5058a85214e124618429f8152e70524f6a515f76d0a564b6a87119fadcd3879a9a9c8e81ba718478640e9e6c4063f7ab42d2dd485a5cb1071af5de1d057d90ff5c4462e0a5719951e8716b8905a7650b913467e1949329b0a73de748a930350919f77c80ed22617032e2f55c0bfd1f1f1b370ef40a3a223474a81de584f70e3e756be4857e543cf0be0dcd6caa94193a9f1b34935090f5f01b2ab3aaf2ae9bed7dea22a45a7c0e2e820e28f6d70c4e2e8155abcd7e7d0f41883c5b4de8ad4eaa5335b5710bf923528d20e6c37b159201aaed7fb99886bd8c3984e7d3be4ab12ab71478583fcd875d564bbe793a7e96f374591410909746ea34d391dd27bfef28787476df138828b61720eacd454f518529cd642feaad655c797c76cbdcbfe934ad3d3620ed7e4b26f0c3c156806353eb1dd7565076e54c209650f7110756f6dc7e67bdcc7424100abffa53acb690d566423994057ab91cfee2fb72602298f27534b21e3552bc825a3b20c2891258905ef4ee7d890ad904a1e94e24f2fa06006d5ccc744873611bd5560fc1e799f96add03122c1284622fdc1b14c96767b45f2ae5d363374cfb8c606b1e7daae8cfdfcec7f5972cce91d64df6423b2ff13de0f28811c84723132200018211a2340caa7239310168bbbc67569718629401e6f737cab23a1ad780f13c2a8fd4158e1e9ee45d2abd59029967d19dabba402d471ac06dc1f3e23675b0f8046805e317a8619febc18a21850448b6959172fbfd701f22d7de5bad20249b9f9d72caa8cb446e15f8af3ea13bd55109b17262dd2cb917d92974d7c0672e6bf6dd1908de75d48978b8c7db575dd8afd4c153b745881bdb25bfeb8ba9e69e1ba127db11a1d174e75dc69429eedbb7722acc551a9f5d9af22afb827037fa8f5168af87bb6455f1b243403a14cfa4246835cb352dc66529f8c72265f3d1841db3184e869ecf0eccbff05f4cb4f8ca76ab339d526627da1dd9f9c54476854e2f010930eb9e462c105cfb2a9706d282464897a91e67969a424b1fdd1eb680bcf8ad266364840d281a209753ff468babcc710c66dd39c7c32a0c1cce7fcf17d610c7eadfc6a2924d7c769b15188e726046b638355fb5ed906553b5d5a133961aa857d5d67b55ed108f71ca105697f433deb0d524854588f37d6e262a71077d6ec332a7556feb9c5bc2ac8b333d846757ae189fca6ef72f9e64fd01ed2ea6efe0868ec7f5ac20fc94daa104f3231a76564cfb941e9ea6ee60baa9959afdb4176d26de63ed8dab9a02b185100251d3e71c47b0e8b9a799c2bb4bce30aafd0689f3b52e28301ee1e3573a8f3b00b66b6d8ba11b9614c0e7c0670141f4a27d8207b44dd1e7535fdc797f6a7ccde842cd805e53d0eb5754de984c2d7eb9c89edf79349d1c9fa66a06008f05204e3209313ae2ecd4c83b2dcbebc28745066bb7369386372ddc2ae4872297a3f8d31166ab9da9ac5ebe2c1bf694cf2e6fffadde5fb2858247b7ba4702e9fa3bd78de6d609ef5282ffefed391056d408c73c7d4b716e75251adb64f99ad4a79262cb51e7ca0917d694d0530fb019e475821a4d2620badc08a71d08d0510ed80004e8c378502cf4293c245868a71d6cb4fd78e34fd13b9bf1ec9806e8477232cfd0a245d89ef0edbf308fd64f6bd7541a8bae84d9113a15883e8d01c1860e9744c486f886556462a28af07be7636aff33604e268c5f520ba64243722562b9354f5e0888cc6c5dbf27779d3d6eff3a1472957750587ac810b0bb807312b9348afe70bff4dd6e849e9dd3e7d4d3316b2988cc42b425dbb6589605234fd9fcdab88277a45220af0109326bca2f910b6240709cbe1887ebfacdabb68ea9ca6122a52c299996b3b0e1f8ce1af0d621dd9c2b465bb5ab9c56c6e7ffa8625371473970f59f1a3bc3d61c3be63181b99ec05efeb3ae314a21ffa01adfc07497f5a1fd955a119833db9880019340dc7cbdbde2742bb5d989f70e6ad44bfe13a0ad56b8adde7f0dcf7a4405194cc6111e4b713aefa0f6fa134c560db3206685ffc1ecc69a01a5beec084069e82e2809fbf8f124739446b1b59f7636eaf1697f9d9be4f844a03753724103b69f063b61e11913c274dfe4f9063de3d9849e8a652be90901eb998297c9233f960fc09875270cd57480582f1bbdfa676139ccc50305b6b789a6b8c3cdf820936757732d19e4379a64dcfa761a21d528634eda1abf2a0b0b8accbd3d8501e6084a4d9d970de28862ae5023e5f238762de57f146dc05bdc216da14b948dbeddd739b3bcc8e3901f5d09c0b5fb0bd171565c5469c35c6641c15701f787bf97f6bea84d799dec8f8d89702b0459be76928e1e03484bfb247fa7b81d4cb89bb093e760ecd33aec4cb0042ac0741bfc5840e9b92a34272b0ab91f18cd516c47e2de566de448f0ba95afdad03c1d1bf2e50cc31d718f4b30d94d07c925777c0a2905cb6a5f2716c2e844b951ad42181ba3437c9fa88b9f414a288b4692448229d2a42dd098b52d60b596c15d1b76480670da5d551e4e4d9a36ad1b6db944df28a2125fc904c4bd41eb6921b6bc0606ea5a58729e0d9ab79f3e46f1d0b33b03fee78e33e78ac578572d29451ffc62348ddd7bae18fb091e0a209bbcedadc1e3d9d0a6facb8252fc42948c484af56e8e49b39a932fcfb8df17bd8cfa158b38594e2b80725f8fc033f2ee71a301c89eb69f4783f18c54030747b7f0af2e9c559ef072277487ed1d38211d011cd2fe780164380759ce5f94368e5e94e97420608e56bf2e5d25a05cb6e0cacb171ecb7b82b769e27e704ca4bc87af36ac702b4eb54fce7e8cc4b1b26cc8ee972f7cf5da51060137709fb65e3ab6703efd662f2c4fe795e74995eb6f9cbe8cbb637ae7883f967628b1e1f0ff3a2d22a15d5b5ec135340eb14446834657499328d28e0100f594c719484abb6e445adccf616656f459792b5e0f11a548fb98b8520965af9734093bca67b785152aa440362b31b97ef9feb11d12bed8937e4517f6103c45dcdca0d437073498475601f84c15ee03b93b86694601eaa3fcd1c34f58f0d60f02537b2353e3c139a97f5efef9fc6fbe0523b7864fce3f29eb11eacf1a9f00528247d6669f0cf49c5bde94fd3f6fbd1e9306c0410f410d8a2778c7aebb9eaa2a1c6c5fc8158bb28e63b81c218b231815533b1aae278acbe9ea914b1439a7d775850d2ce25d9d900dfcad9047954f4dc8ad760199e8975c73f14a87677469beda4a29a8287ea073ca129ba677acd330cc53d02274cc959529e1b9d0dcfd729a797ab41b41d2ceb5d5ce7730969bf2f7057e0a1f9a9283a871d1312c9f96210ea86e0ffdbda7fdb89d458a45c043999ba931c106ad699b006db376e03b019447a802856ad90e72310d252eb5f33263ca8125057fb234000cf85588416a1a02d2f40aa496dfdbe50f845a9c10094028a41113003a09563b6e86b200ad874419f8d2f39301333568c94847f632868b074cc1355c177c606a8e46989d7320458a652cacdcb95bd43f10c56a3f3653a8d12ae3846a97df3b751a72c156a68ec48debb7cbf2839e9fb3dfcef131493cc467442d14757f5356e48aad461dca9263684ec6ca12af09f3b7f7f1aa80a91c51e9891f68a1e8d786a441cf80f366728fca9fac4f0b3904f33de23ae6686907896e9de82fc98399ce978067429665c7c617e7d257840c560a323a07ac87a16a9dfc503bf856a4e4063de9273903170124be8024e9c7372e5f4a8c00a7e09881995df209de36941b1d55f578646ec1dec5c165ca77b9cc98fb7ebc7a3cb06511cc8058"}) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000001740)=""/28, &(0x7f0000001780)=0x1c) accept4$vsock_stream(r2, &(0x7f00000017c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80000) ioctl$sock_inet_SIOCGIFDSTADDR(r8, 0x8917, &(0x7f0000001800)={'bridge_slave_0\x00', {0x2, 0x0, @empty}}) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001840)={0x6, {{0x2, 0x4e21, @multicast2}}, 0x0, 0x2, [{{0x2, 0x4e24, @empty}}, {{0x2, 0x4e22, @rand_addr=0x64010101}}]}, 0x190) pipe(&(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$ax25(0x3, 0x3, 0xcb) sendmsg$NFT_BATCH(r11, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x4c}, 0x1, 0x0, 0x0, 0x2000000}, 0x1) accept$inet(r11, &(0x7f0000001b80), &(0x7f0000001bc0)=0x10) getsockopt$inet_mreq(r10, 0x0, 0x23, &(0x7f0000001c00)={@remote, @initdev}, &(0x7f0000001c40)=0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000001c80), &(0x7f0000001cc0)=0x4) 821.295476ms ago: executing program 1 (id=861): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x10, 0x9}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x3114}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3}]}}}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549", @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x40000c0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000009100080000000000000000000c00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 795.420216ms ago: executing program 4 (id=862): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r1, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4000) (async, rerun: 64) read(r1, &(0x7f00000004c0)=""/4096, 0x1000) (async, rerun: 64) r2 = socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) (async, rerun: 32) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000680)}, 0x0) (async, rerun: 32) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000300)="9c4f00346cd789c943351d5e3812274807b9503c1ddac6001229a93abb66d57fd2a03b07f81ec6", 0x27}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)}}], 0x1, 0x80) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}], 0x1c) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000000c0)) bind$inet(r0, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) connect$inet(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280080001407f0000"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 655.915483ms ago: executing program 4 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)=@tipc=@id, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/180, 0xb4}, {&(0x7f0000000380)=""/164, 0xa4}], 0x3}, 0xf85}, {{&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000000240)}, 0x2}, {{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/212, 0xd4}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/105, 0x69}, {&(0x7f0000000880)=""/191, 0xbf}, {&(0x7f0000000940)=""/90, 0x5a}], 0x7, &(0x7f0000000b00)=""/190, 0xbe}, 0xc7}], 0x3, 0x2001, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r5, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x18, &(0x7f0000000800)={r8, 0x1, 0x6, @local}, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_ACCEPT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, r10, 0x9, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008800}, 0x40000) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0xffffffff}}, @ptr={0xe, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000cc0)=""/61, 0x3f, 0x3d, 0x0, 0xdb, 0x185406de11836f9b}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@bloom_filter={0x1e, 0x749, 0x5, 0x2, 0x40, r1, 0x3, '\x00', r3, r11, 0x1, 0x0, 0x2, 0xc}, 0x50) r12 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r12, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="53df2b456239aaaaaaaaaabb080045000028000000000088907800002100ffffffff0e00907800041000"/54], 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) bind$802154_dgram(r2, &(0x7f00000009c0)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x800) 654.944967ms ago: executing program 1 (id=864): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000dc0)={0x1, 0xc02, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x1}, 0x1d, 0x1, 0x0, 0x0, "62af510b0b7f04ce9bf921f6c5f5c085ede7c77fa0601b1c2f77ffaf5d4095b4c27212333d3ddd460a3fe836ce0f88ab294b8b06d2b55fb8d14a92c421a907a2"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="010000008db879e2b2fa56da00000000", @ANYRES64=0x0, @ANYRES16=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) 565.553957ms ago: executing program 0 (id=865): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1, @mcast1, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000", 0x40}, {&(0x7f0000000100)="2a090ae06f43c8f260a64ab6b38c3cdd3384437f7821ef85", 0x18}], 0x2) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000000c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f00000000c0)={@val={0x8, 0x4}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x6}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x4) 451.141448ms ago: executing program 4 (id=866): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x1, 0x6}, {0x3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@getqdisc={0x24, 0x26, 0x1, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0x1, 0x6}, {0x3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES32=0x0, @ANYBLOB="080004"], 0x8c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x1000, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7fffffff, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x0, 0x0) 347.8666ms ago: executing program 1 (id=867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000100)={0x7, 'wlan1\x00', {0xce}, 0xb6}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) pipe(&(0x7f0000000600)) r2 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f0000000080)) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000040)={0x2, 0xfffc, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000003240)="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", 0xf2b}], 0x2, 0x0, 0x0, 0x8801}, 0x4000001) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000500100001002fbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0201000000000000140003006e657464657673696d30000000000000300016802c000180280001000800"/76], 0x64}}, 0x24040800) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f00000000c0)=0x51, 0x4) 345.570536ms ago: executing program 3 (id=868): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r2) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r3, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x880) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r5, 0x181}, 0x14}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40010) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r2) (async) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r3, 0x53f63307afa5bb95, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200000c1}, 0x880) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r5, 0x181}, 0x14}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r5, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004010}, 0x40010) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) (async) 276.669432ms ago: executing program 4 (id=869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a1401"], 0x20}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 98.107832ms ago: executing program 3 (id=870): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$802154_dgram(r1, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4000}, 0x40408c0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0x5, 0x3ff}, 0x8) (async) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r3, 0xd7b825ccd16be7b5, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004810}, 0x20040800) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x300, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x4010) 0s ago: executing program 4 (id=871): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef", 0xdb}], 0x1}}], 0x1, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.38' (ED25519) to the list of known hosts. [ 72.939765][ T5815] cgroup: Unknown subsys name 'net' [ 73.134016][ T5815] cgroup: Unknown subsys name 'cpuset' [ 73.142732][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.513997][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.982862][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.005461][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.014563][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.015171][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.022471][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.030106][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.036938][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.047395][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.051450][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.058210][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.064762][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.071893][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.079645][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.094756][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.104591][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.111854][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.112306][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.128454][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.136875][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.142797][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.144517][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.161925][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.175168][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.200902][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.208697][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.687682][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 77.905815][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 77.920999][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 78.007965][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.015232][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.022880][ T5827] bridge_slave_0: entered allmulticast mode [ 78.029969][ T5827] bridge_slave_0: entered promiscuous mode [ 78.048210][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 78.096286][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.103604][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.111658][ T5827] bridge_slave_1: entered allmulticast mode [ 78.119448][ T5827] bridge_slave_1: entered promiscuous mode [ 78.203627][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.225094][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.277287][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.295986][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.303406][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.310741][ T5826] bridge_slave_0: entered allmulticast mode [ 78.317672][ T5826] bridge_slave_0: entered promiscuous mode [ 78.324703][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.331877][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.339166][ T5825] bridge_slave_0: entered allmulticast mode [ 78.346520][ T5825] bridge_slave_0: entered promiscuous mode [ 78.402587][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.409744][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.417404][ T5826] bridge_slave_1: entered allmulticast mode [ 78.424735][ T5826] bridge_slave_1: entered promiscuous mode [ 78.431664][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.438823][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.446150][ T5825] bridge_slave_1: entered allmulticast mode [ 78.453121][ T5825] bridge_slave_1: entered promiscuous mode [ 78.471733][ T5827] team0: Port device team_slave_0 added [ 78.523956][ T5827] team0: Port device team_slave_1 added [ 78.548716][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.555958][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.563848][ T5829] bridge_slave_0: entered allmulticast mode [ 78.570986][ T5829] bridge_slave_0: entered promiscuous mode [ 78.603979][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.624546][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.632090][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.639233][ T5829] bridge_slave_1: entered allmulticast mode [ 78.646466][ T5829] bridge_slave_1: entered promiscuous mode [ 78.655994][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.679035][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.709863][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.720544][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.727491][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.753503][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.776327][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.783825][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.791092][ T5832] bridge_slave_0: entered allmulticast mode [ 78.798023][ T5832] bridge_slave_0: entered promiscuous mode [ 78.828738][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.835763][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.865662][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.887879][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.895111][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.902369][ T5832] bridge_slave_1: entered allmulticast mode [ 78.909356][ T5832] bridge_slave_1: entered promiscuous mode [ 78.918748][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.948232][ T5825] team0: Port device team_slave_0 added [ 78.967017][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.991442][ T5826] team0: Port device team_slave_0 added [ 79.000525][ T5825] team0: Port device team_slave_1 added [ 79.029905][ T5826] team0: Port device team_slave_1 added [ 79.063416][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.075207][ T5829] team0: Port device team_slave_0 added [ 79.115687][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.126974][ T5829] team0: Port device team_slave_1 added [ 79.155133][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.162248][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.188818][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.188948][ T5845] Bluetooth: hci1: command tx timeout [ 79.201552][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.206770][ T5833] Bluetooth: hci2: command tx timeout [ 79.212322][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.243531][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.255684][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.260985][ T5833] Bluetooth: hci4: command tx timeout [ 79.262911][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.268268][ T5833] Bluetooth: hci0: command tx timeout [ 79.294352][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.299770][ T5845] Bluetooth: hci3: command tx timeout [ 79.312424][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.322493][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.349185][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.387009][ T5827] hsr_slave_0: entered promiscuous mode [ 79.393481][ T5827] hsr_slave_1: entered promiscuous mode [ 79.425175][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.432265][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.458302][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.501343][ T5826] hsr_slave_0: entered promiscuous mode [ 79.507817][ T5826] hsr_slave_1: entered promiscuous mode [ 79.514143][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 79.519932][ T5826] Cannot create hsr debugfs directory [ 79.527072][ T5832] team0: Port device team_slave_0 added [ 79.533614][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.541284][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.567297][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.601396][ T5832] team0: Port device team_slave_1 added [ 79.710879][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.717843][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.744196][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.760581][ T5825] hsr_slave_0: entered promiscuous mode [ 79.766898][ T5825] hsr_slave_1: entered promiscuous mode [ 79.773151][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 79.778871][ T5825] Cannot create hsr debugfs directory [ 79.814115][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.821585][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.848978][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.885862][ T5829] hsr_slave_0: entered promiscuous mode [ 79.892241][ T5829] hsr_slave_1: entered promiscuous mode [ 79.898255][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 79.905151][ T5829] Cannot create hsr debugfs directory [ 80.115653][ T5832] hsr_slave_0: entered promiscuous mode [ 80.123525][ T5832] hsr_slave_1: entered promiscuous mode [ 80.129521][ T5832] debugfs: 'hsr0' already exists in 'hsr' [ 80.135330][ T5832] Cannot create hsr debugfs directory [ 80.347833][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.360120][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.398326][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.432796][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.528041][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.545268][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.576461][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.586874][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.665957][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.679062][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.716911][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.727139][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.813361][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.826525][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.844844][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.859327][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.971822][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.992604][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.005610][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.017062][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.028901][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.066491][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.136849][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.146754][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.170226][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.177552][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.188829][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.195948][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.224285][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.231419][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.243373][ T3512] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.250494][ T3512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.263049][ T5845] Bluetooth: hci1: command tx timeout [ 81.268532][ T5833] Bluetooth: hci2: command tx timeout [ 81.328538][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.340611][ T52] Bluetooth: hci4: command tx timeout [ 81.346103][ T5845] Bluetooth: hci3: command tx timeout [ 81.357086][ T5833] Bluetooth: hci0: command tx timeout [ 81.359497][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.393560][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.400728][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.427267][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.436337][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.443502][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.534084][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.560034][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.576685][ T3512] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.583899][ T3512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.618395][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.638390][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.645585][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.687273][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.694484][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.792793][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.800195][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.928329][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.976273][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.022965][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.259232][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.308336][ T5826] veth0_vlan: entered promiscuous mode [ 82.412855][ T5826] veth1_vlan: entered promiscuous mode [ 82.498742][ T5826] veth0_macvtap: entered promiscuous mode [ 82.583762][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.604786][ T5826] veth1_macvtap: entered promiscuous mode [ 82.618636][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.631138][ T5825] veth0_vlan: entered promiscuous mode [ 82.703971][ T5825] veth1_vlan: entered promiscuous mode [ 82.715890][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.741484][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.797885][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.807669][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.816830][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.836699][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.858402][ T5829] veth0_vlan: entered promiscuous mode [ 82.867095][ T5827] veth0_vlan: entered promiscuous mode [ 82.887035][ T5829] veth1_vlan: entered promiscuous mode [ 82.896311][ T5832] veth0_vlan: entered promiscuous mode [ 82.913426][ T5825] veth0_macvtap: entered promiscuous mode [ 82.933956][ T5827] veth1_vlan: entered promiscuous mode [ 82.963460][ T5825] veth1_macvtap: entered promiscuous mode [ 82.978361][ T5832] veth1_vlan: entered promiscuous mode [ 83.007819][ T5829] veth0_macvtap: entered promiscuous mode [ 83.049395][ T5829] veth1_macvtap: entered promiscuous mode [ 83.071957][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.074560][ T5827] veth0_macvtap: entered promiscuous mode [ 83.079884][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.091393][ T5827] veth1_macvtap: entered promiscuous mode [ 83.104542][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.156108][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.189844][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.191828][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.199756][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.207034][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.252146][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.267658][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.273129][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.282142][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.296819][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.305919][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.327139][ T5832] veth0_macvtap: entered promiscuous mode [ 83.337463][ T5832] veth1_macvtap: entered promiscuous mode [ 83.351035][ T5833] Bluetooth: hci2: command tx timeout [ 83.356522][ T5833] Bluetooth: hci1: command tx timeout [ 83.377803][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.413573][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.429277][ T3512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.438533][ T5833] Bluetooth: hci0: command tx timeout [ 83.444226][ T5845] Bluetooth: hci3: command tx timeout [ 83.449649][ T5845] Bluetooth: hci4: command tx timeout [ 83.467949][ T3512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.476815][ T3512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.513265][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.525428][ T3512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.535019][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.585159][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.596762][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.626219][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.635954][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.688342][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.724316][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.734815][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.764300][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.800445][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.852675][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.868257][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.899045][ T5955] syz.1.8 uses obsolete (PF_INET,SOCK_PACKET) [ 83.908644][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.918532][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.017216][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.043097][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.075982][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.104147][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.149017][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.167150][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.229510][ T5962] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'. [ 84.257013][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.276984][ T5963] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.287087][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.418478][ T1007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.448019][ T1007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.701522][ T5970] sctp: [Deprecated]: syz.4.5 (pid 5970) Use of int in maxseg socket option. [ 84.701522][ T5970] Use struct sctp_assoc_value instead [ 84.722175][ T5973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 84.895793][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.107153][ T5990] netlink: 'syz.4.14': attribute type 4 has an invalid length. [ 85.126585][ T5995] Cannot find del_set index 0 as target [ 85.186048][ T5990] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.431768][ T5845] Bluetooth: hci1: command tx timeout [ 85.437316][ T5833] Bluetooth: hci2: command tx timeout [ 85.444337][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.458125][ T6002] netlink: 'syz.0.16': attribute type 32 has an invalid length. [ 85.466537][ T6009] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 85.477839][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 85.486060][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.500882][ T5845] Bluetooth: hci4: command tx timeout [ 85.506318][ T5845] Bluetooth: hci0: command tx timeout [ 85.512210][ T5845] Bluetooth: hci3: command tx timeout [ 85.520223][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.629756][ T6002] bond1: option coupled_control: invalid value (6) [ 85.644644][ T6002] bond1 (unregistering): Released all slaves [ 85.724107][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 85.745791][ T6019] tc_dump_action: action bad kind [ 86.382455][ T6046] netlink: 64 bytes leftover after parsing attributes in process `syz.2.31'. [ 86.592197][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.705522][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 86.742465][ T6068] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 86.880671][ T43] cfg80211: failed to load regulatory.db [ 86.933392][ T6073] bond1: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 87.043977][ T6079] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 87.243861][ T6095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.246983][ T6072] bond1: entered promiscuous mode [ 87.251348][ T6095] IPv6: NLM_F_CREATE should be set when creating new route [ 87.327140][ T6072] bond1: entered allmulticast mode [ 87.372955][ T6072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.476359][ T6097] Bluetooth: MGMT ver 1.23 [ 87.559074][ T6097] syzkaller1: entered promiscuous mode [ 87.603015][ T6097] syzkaller1: entered allmulticast mode [ 87.639084][ T6103] lo: entered allmulticast mode [ 87.898217][ T6107] tipc: Started in network mode [ 87.911795][ T6107] tipc: Node identity d63146e73d03, cluster identity 4711 [ 87.929802][ T6107] tipc: Enabled bearer , priority 0 [ 87.964433][ T6107] syzkaller0: entered promiscuous mode [ 87.980154][ T6107] syzkaller0: entered allmulticast mode [ 88.015518][ T6105] syzkaller0: entered promiscuous mode [ 88.021152][ T6105] syzkaller0: entered allmulticast mode [ 88.085785][ T6107] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 88.110740][ T6107] tipc: Resetting bearer [ 88.149564][ T6106] tipc: Resetting bearer [ 88.200897][ T6106] tipc: Disabling bearer [ 88.320324][ T6119] Zero length message leads to an empty skb [ 88.484678][ T6129] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 88.587683][ T6133] tipc: Started in network mode [ 88.625693][ T6133] tipc: Node identity ea2636815747, cluster identity 4711 [ 88.661855][ T6133] tipc: Enabled bearer , priority 0 [ 88.680691][ T6138] syzkaller0: entered promiscuous mode [ 88.702044][ T6138] syzkaller0: entered allmulticast mode [ 88.716196][ T6133] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 88.750235][ T6133] tipc: Resetting bearer [ 88.833328][ T6132] tipc: Resetting bearer [ 88.859993][ T6132] tipc: Disabling bearer [ 89.318048][ T6174] __nla_validate_parse: 3 callbacks suppressed [ 89.318067][ T6174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.64'. [ 89.730986][ T6189] netlink: 'syz.0.70': attribute type 1 has an invalid length. [ 89.827326][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 90.014677][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 90.052305][ T6204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.74'. [ 90.102150][ T6204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.286892][ T6210] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 90.316752][ T6210] netlink: 'syz.2.78': attribute type 4 has an invalid length. [ 90.331131][ T6210] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.78'. [ 90.461825][ T6216] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 90.505283][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.557461][ T6228] sit1: entered promiscuous mode [ 90.565483][ T6228] sit1: entered allmulticast mode [ 90.646914][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.83'. [ 90.913984][ T6248] netlink: 14 bytes leftover after parsing attributes in process `syz.2.90'. [ 91.522826][ T6274] syzkaller1: entered promiscuous mode [ 91.529014][ T6274] syzkaller1: entered allmulticast mode [ 91.591058][ T6280] netlink: 11 bytes leftover after parsing attributes in process `syz.1.100'. [ 91.600041][ T6280] netlink: 11 bytes leftover after parsing attributes in process `syz.1.100'. [ 91.644045][ T6286] netlink: 11 bytes leftover after parsing attributes in process `syz.1.100'. [ 91.963465][ T5845] block nbd0: Receive control failed (result -32) [ 92.522165][ T6300] netlink: 'syz.4.105': attribute type 8 has an invalid length. [ 92.584028][ T6306] xt_hashlimit: size too large, truncated to 1048576 [ 93.211023][ T6344] netlink: 'syz.1.115': attribute type 29 has an invalid length. [ 93.872980][ T6365] tipc: Enabled bearer , priority 0 [ 93.892439][ T6365] syzkaller0: entered promiscuous mode [ 93.897959][ T6365] syzkaller0: entered allmulticast mode [ 93.978676][ T6373] netlink: 'syz.0.122': attribute type 8 has an invalid length. [ 94.001042][ T6365] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 94.103840][ T6365] tipc: Resetting bearer [ 94.149614][ T6364] tipc: Resetting bearer [ 94.236183][ T6364] tipc: Disabling bearer [ 94.290622][ T5493] veth1_vlan: left promiscuous mode [ 94.650856][ T6401] __nla_validate_parse: 4 callbacks suppressed [ 94.650876][ T6401] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.132'. [ 94.933313][ T6410] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.133'. [ 95.138241][ T6438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.139'. [ 95.436012][ T6444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.528373][ T6447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.143'. [ 95.663740][ T6444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.752248][ T6466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.042924][ T6444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.062151][ T6474] netlink: 'syz.1.149': attribute type 10 has an invalid length. [ 96.149574][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.172978][ T6474] bridge_slave_1: left allmulticast mode [ 96.191151][ T6474] bridge_slave_1: left promiscuous mode [ 96.197046][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.237180][ T6474] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 96.275030][ T6482] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.152'. [ 96.393137][ T6444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.573983][ T6494] netlink: 44 bytes leftover after parsing attributes in process `syz.1.155'. [ 96.585866][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 96.672494][ T50] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.684188][ T50] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.741282][ T50] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.781288][ T50] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.916653][ T6513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.944764][ T6513] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 97.093117][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.164'. [ 97.193614][ T6525] IPv6: Can't replace route, no match found [ 97.224782][ T6523] netlink: 'syz.3.166': attribute type 72 has an invalid length. [ 97.257956][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 97.257956][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 97.257990][ T6526] netlink: 'syz.0.165': attribute type 6 has an invalid length. [ 97.277363][ T6525] netlink: 'syz.0.165': attribute type 6 has an invalid length. [ 97.380089][ T6526] netlink: 'syz.0.165': attribute type 6 has an invalid length. [ 97.382276][ T6525] netlink: 'syz.0.165': attribute type 6 has an invalid length. [ 97.395664][ T79] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.410630][ T79] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.437067][ T79] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.460676][ T79] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.730140][ T6550] sctp: [Deprecated]: syz.2.172 (pid 6550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 97.730140][ T6550] Use struct sctp_sack_info instead [ 98.004662][ T6566] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 98.115534][ T6576] netlink: 'syz.0.177': attribute type 13 has an invalid length. [ 98.125223][ T6576] netlink: 'syz.0.177': attribute type 17 has an invalid length. [ 98.135774][ T6578] Cannot find set identified by id 0 to match [ 98.219055][ T6576] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 98.261115][ T6578] netlink: 'syz.4.179': attribute type 2 has an invalid length. [ 98.275420][ T6582] sctp: [Deprecated]: syz.3.180 (pid 6582) Use of int in max_burst socket option. [ 98.275420][ T6582] Use struct sctp_assoc_value instead [ 98.991787][ T6611] nftables ruleset with unbound chain [ 99.414376][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.440375][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.479208][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.539720][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.578635][ T6637] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.025234][ T6670] __nla_validate_parse: 17 callbacks suppressed [ 100.025249][ T6670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.209'. [ 100.254834][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 100.272726][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.215'. [ 100.305610][ T6696] syzkaller0: entered promiscuous mode [ 100.322743][ T6696] syzkaller0: entered allmulticast mode [ 100.365908][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.218'. [ 100.457076][ T6699] tipc: Started in network mode [ 100.471221][ T6699] tipc: Node identity 0a700e277709, cluster identity 4711 [ 100.498866][ T6699] tipc: Enabled bearer , priority 0 [ 100.501774][ T6708] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 100.526150][ T6709] syzkaller0: entered promiscuous mode [ 100.547948][ T6708] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 100.579758][ T6709] syzkaller0: entered allmulticast mode [ 100.657043][ T6709] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 100.725339][ T6721] netlink: 216 bytes leftover after parsing attributes in process `syz.4.223'. [ 100.729790][ T6724] netlink: 48 bytes leftover after parsing attributes in process `syz.2.224'. [ 100.774933][ T6726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.225'. [ 100.791944][ T6698] tipc: Resetting bearer [ 100.849850][ T6698] tipc: Disabling bearer [ 100.890669][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 101.043690][ T6751] xt_connbytes: Forcing CT accounting to be enabled [ 101.078242][ T6724] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 101.093362][ T6751] Cannot find set identified by id 0 to match [ 101.108300][ T6724] bond2 (unregistering): Released all slaves [ 101.140110][ T6751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.224'. [ 101.323411][ T6742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.335174][ T6742] bond2: (slave bond3): making interface the new active one [ 101.344719][ T6742] bond2: (slave bond3): Enslaving as an active interface with an up link [ 101.376684][ T6747] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 101.602849][ T6771] netlink: 40 bytes leftover after parsing attributes in process `syz.2.231'. [ 101.621529][ T6768] netlink: 40 bytes leftover after parsing attributes in process `syz.2.231'. [ 101.661707][ T6777] validate_nla: 5 callbacks suppressed [ 101.661724][ T6777] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 101.848947][ T6777] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.984143][ T6798] sctp: [Deprecated]: syz.2.237 (pid 6798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 101.984143][ T6798] Use struct sctp_sack_info instead [ 102.061533][ T6799] syzkaller0: entered promiscuous mode [ 102.070610][ T6799] syzkaller0: entered allmulticast mode [ 102.094147][ T6797] sctp: [Deprecated]: syz.2.237 (pid 6797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.094147][ T6797] Use struct sctp_sack_info instead [ 102.373853][ T6820] gretap0: entered promiscuous mode [ 102.673683][ T6842] veth0: entered promiscuous mode [ 102.722002][ T6842] veth0: left promiscuous mode [ 102.810703][ T6852] IPVS: set_ctl: invalid protocol: 62 255.255.255.255:20001 [ 102.907037][ T6858] erspan0: entered promiscuous mode [ 102.921456][ T6858] erspan0: entered allmulticast mode [ 103.069443][ T6867] netlink: 'syz.0.260': attribute type 10 has an invalid length. [ 103.093463][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.110825][ T6867] bridge_slave_1: left allmulticast mode [ 103.121503][ T6867] bridge_slave_1: left promiscuous mode [ 103.127468][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.179085][ T6867] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 103.924786][ T6903] tap0: tun_chr_ioctl cmd 1074025677 [ 103.946418][ T6903] tap0: linktype set to 65534 [ 104.458568][ T6937] netlink: 'syz.0.280': attribute type 11 has an invalid length. [ 104.648139][ T6948] IPVS: set_ctl: invalid protocol: 29 127.0.0.1:20003 [ 104.967120][ T6971] IPVS: set_ctl: invalid protocol: 43 172.30.1.1:20000 [ 105.057505][ T6978] pim6reg: entered allmulticast mode [ 105.304242][ T6989] tipc: Enabled bearer , priority 0 [ 105.328180][ T6989] syzkaller0: entered promiscuous mode [ 105.342395][ T6989] syzkaller0: entered allmulticast mode [ 105.375668][ T6989] tipc: Resetting bearer [ 105.391843][ T6988] tipc: Resetting bearer [ 105.481041][ T6988] tipc: Disabling bearer [ 105.858816][ T7009] __nla_validate_parse: 9 callbacks suppressed [ 105.858834][ T7009] netlink: 10 bytes leftover after parsing attributes in process `syz.2.304'. [ 106.014896][ T7013] dvmrp0: entered allmulticast mode [ 106.323230][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 106.679814][ T7059] netlink: 'syz.3.312': attribute type 21 has an invalid length. [ 106.688899][ T7059] netlink: 128 bytes leftover after parsing attributes in process `syz.3.312'. [ 106.699013][ T7059] netlink: 'syz.3.312': attribute type 4 has an invalid length. [ 106.706900][ T7059] netlink: 'syz.3.312': attribute type 5 has an invalid length. [ 106.714683][ T7059] netlink: 3 bytes leftover after parsing attributes in process `syz.3.312'. [ 106.981621][ T7067] netlink: 'syz.2.315': attribute type 1 has an invalid length. [ 107.009885][ T7067] netlink: 224 bytes leftover after parsing attributes in process `syz.2.315'. [ 107.116811][ T7070] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 107.161602][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 107.186145][ T7070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.316'. [ 107.731199][ T7101] netlink: 'syz.0.323': attribute type 12 has an invalid length. [ 108.200843][ T7131] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 108.212576][ T7131] netlink: 224 bytes leftover after parsing attributes in process `syz.0.332'. [ 108.274423][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.335'. [ 108.346003][ T7136] bond5: Invalid ad_actor_system MAC address. [ 108.353256][ T7136] bond5: option ad_actor_system: invalid value (1) [ 108.375166][ T7136] bond5 (unregistering): Released all slaves [ 108.692069][ T12] tipc: Subscription rejected, illegal request [ 108.870781][ T7169] openvswitch: netlink: Key 22 has unexpected len 64 expected 4 [ 108.881979][ T7169] ipt_REJECT: TCP_RESET invalid for non-tcp [ 109.282895][ T7180] syz.4.349 (7180) used obsolete PPPIOCDETACH ioctl [ 109.453433][ T7192] veth0: entered promiscuous mode [ 109.484043][ T7191] openvswitch: netlink: Missing key (keys=40, expected=80) [ 109.545022][ T7185] veth0: left promiscuous mode [ 109.644056][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.694261][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.712885][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.766738][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.848581][ T7200] veth3: entered promiscuous mode [ 110.047712][ T7217] sock: sock_timestamping_bind_phc: sock not bind to device [ 110.075368][ T7217] netlink: 'syz.0.363': attribute type 24 has an invalid length. [ 110.145876][ T7217] tipc: Started in network mode [ 110.164889][ T7217] tipc: Node identity 6e976ef8b683, cluster identity 4711 [ 110.190252][ T7217] tipc: Enabled bearer , priority 0 [ 110.316460][ T7235] syzkaller0: entered promiscuous mode [ 110.330575][ T7235] syzkaller0: entered allmulticast mode [ 110.353473][ T7235] tipc: Resetting bearer [ 110.368199][ T7237] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 110.424689][ T7216] tipc: Resetting bearer [ 111.282036][ T5919] tipc: Node number set to 3625217784 [ 111.600203][ T7216] tipc: Disabling bearer [ 111.609851][ T7268] __nla_validate_parse: 10 callbacks suppressed [ 111.609870][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 111.626533][ T7267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.376'. [ 111.689979][ T7269] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 111.697997][ T7269] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.943361][ T7281] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 111.958382][ T7285] IPv6: addrconf: prefix option has invalid lifetime [ 111.965883][ T7272] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 111.980622][ T7281] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 111.991717][ C0] Illegal XDP return value 16128 on prog (id 112) dev bond0, expect packet loss! [ 112.030819][ T7281] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 112.031099][ T7288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.382'. [ 112.038494][ T7281] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 112.038511][ T7281] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 112.038523][ T7281] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 112.038535][ T7281] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 112.038546][ T7281] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 112.038558][ T7281] netlink: 'syz.0.380': attribute type 2 has an invalid length. [ 112.125465][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.383'. [ 112.134645][ T7292] bridge_slave_0: left allmulticast mode [ 112.157336][ T7292] bridge_slave_0: left promiscuous mode [ 112.200698][ T7292] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.385067][ T7310] netlink: 'syz.2.386': attribute type 27 has an invalid length. [ 112.395928][ T7312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.387'. [ 112.413313][ T7310] tipc: Enabled bearer , priority 15 [ 112.830120][ T7337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.395'. [ 112.881720][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 112.894895][ T7341] netlink: 64 bytes leftover after parsing attributes in process `syz.1.396'. [ 113.263284][ T7360] team_slave_0: entered promiscuous mode [ 113.269159][ T7360] team_slave_1: entered promiscuous mode [ 113.293346][ T7360] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.410727][ T7360] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 113.576967][ T7368] tipc: Enabling of bearer rejected, failed to enable media [ 113.589768][ T5873] tipc: Node number set to 3945940711 [ 113.604876][ T7370] C: renamed from team_slave_0 (while UP) [ 113.616902][ T7370] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 113.753762][ T7368] syzkaller0: entered promiscuous mode [ 113.775238][ T7368] syzkaller0: entered allmulticast mode [ 114.050913][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 115.134879][ T7409] ipt_ECN: cannot use operation on non-tcp rule [ 115.217721][ T7411] wg2: entered promiscuous mode [ 115.238593][ T7411] wg2: entered allmulticast mode [ 115.300154][ T7416] trusted_key: syz.4.420 sent an empty control message without MSG_MORE. [ 115.354930][ T7416] xfrm1: entered allmulticast mode [ 115.573825][ T7433] FAULT_INJECTION: forcing a failure. [ 115.573825][ T7433] name failslab, interval 1, probability 0, space 0, times 1 [ 115.586176][ T7429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.423'. [ 115.590631][ T7433] CPU: 1 UID: 0 PID: 7433 Comm: syz.2.424 Not tainted syzkaller #0 PREEMPT(full) [ 115.590657][ T7433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 115.590674][ T7433] Call Trace: [ 115.590682][ T7433] [ 115.590691][ T7433] dump_stack_lvl+0x189/0x250 [ 115.590715][ T7433] ? __pfx____ratelimit+0x10/0x10 [ 115.590737][ T7433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.590756][ T7433] ? __pfx__printk+0x10/0x10 [ 115.590790][ T7433] ? __pfx___might_resched+0x10/0x10 [ 115.590812][ T7433] ? fs_reclaim_acquire+0x7d/0x100 [ 115.590856][ T7433] should_fail_ex+0x414/0x560 [ 115.590893][ T7433] should_failslab+0xa8/0x100 [ 115.590913][ T7433] __kmalloc_noprof+0xcb/0x7f0 [ 115.590943][ T7433] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 115.590980][ T7433] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 115.591013][ T7433] genl_family_rcv_msg_doit+0xb8/0x300 [ 115.591044][ T7433] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 115.591078][ T7433] ? apparmor_capable+0x137/0x1b0 [ 115.591099][ T7433] ? bpf_lsm_capable+0x9/0x20 [ 115.591120][ T7433] ? security_capable+0x7e/0x2e0 [ 115.591149][ T7433] genl_rcv_msg+0x60e/0x790 [ 115.591180][ T7433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.591203][ T7433] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 115.591219][ T7433] ? __pfx_nl80211_set_station+0x10/0x10 [ 115.591247][ T7433] ? __pfx_nl80211_post_doit+0x10/0x10 [ 115.591279][ T7433] netlink_rcv_skb+0x208/0x470 [ 115.591296][ T7433] ? __lock_acquire+0xab9/0xd20 [ 115.591314][ T7433] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.591340][ T7433] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.591377][ T7433] ? down_read+0x1ad/0x2e0 [ 115.591405][ T7433] genl_rcv+0x28/0x40 [ 115.591427][ T7433] netlink_unicast+0x82c/0x9e0 [ 115.591463][ T7433] ? __pfx_netlink_unicast+0x10/0x10 [ 115.591493][ T7433] ? netlink_sendmsg+0x642/0xb30 [ 115.591510][ T7433] ? skb_put+0x11b/0x210 [ 115.591533][ T7433] netlink_sendmsg+0x805/0xb30 [ 115.591562][ T7433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.591585][ T7433] ? aa_sock_msg_perm+0xf1/0x1d0 [ 115.591611][ T7433] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 115.591628][ T7433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.591648][ T7433] __sock_sendmsg+0x219/0x270 [ 115.591678][ T7433] ____sys_sendmsg+0x505/0x830 [ 115.591707][ T7433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.591738][ T7433] ? import_iovec+0x74/0xa0 [ 115.591759][ T7433] ___sys_sendmsg+0x21f/0x2a0 [ 115.591784][ T7433] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.591843][ T7433] ? __fget_files+0x2a/0x420 [ 115.591858][ T7433] ? __fget_files+0x3a0/0x420 [ 115.591891][ T7433] __x64_sys_sendmsg+0x19b/0x260 [ 115.591916][ T7433] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.591948][ T7433] ? __pfx_ksys_write+0x10/0x10 [ 115.591977][ T7433] ? do_syscall_64+0xbe/0xfa0 [ 115.592003][ T7433] do_syscall_64+0xfa/0xfa0 [ 115.592024][ T7433] ? lockdep_hardirqs_on+0x9c/0x150 [ 115.592045][ T7433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.592063][ T7433] ? clear_bhb_loop+0x60/0xb0 [ 115.592085][ T7433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.592103][ T7433] RIP: 0033:0x7fd774f8eec9 [ 115.592125][ T7433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.592139][ T7433] RSP: 002b:00007fd775edb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.592159][ T7433] RAX: ffffffffffffffda RBX: 00007fd7751e5fa0 RCX: 00007fd774f8eec9 [ 115.592172][ T7433] RDX: 00000000000488d4 RSI: 0000200000000c40 RDI: 0000000000000004 [ 115.592184][ T7433] RBP: 00007fd775edb090 R08: 0000000000000000 R09: 0000000000000000 [ 115.592195][ T7433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.592206][ T7433] R13: 00007fd7751e6038 R14: 00007fd7751e5fa0 R15: 00007ffc3929df38 [ 115.592237][ T7433] [ 116.179919][ T7449] tipc: Enabling of bearer rejected, failed to enable media [ 116.294876][ T7456] tipc: Enabled bearer , priority 0 [ 116.344544][ T7456] syzkaller0: entered promiscuous mode [ 116.350178][ T7456] syzkaller0: entered allmulticast mode [ 116.380933][ T7456] tipc: Resetting bearer [ 116.417877][ T7455] tipc: Resetting bearer [ 116.477274][ T7455] tipc: Disabling bearer [ 116.517703][ T7468] FAULT_INJECTION: forcing a failure. [ 116.517703][ T7468] name failslab, interval 1, probability 0, space 0, times 0 [ 116.530984][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.2.436 Not tainted syzkaller #0 PREEMPT(full) [ 116.531009][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 116.531018][ T7468] Call Trace: [ 116.531025][ T7468] [ 116.531031][ T7468] dump_stack_lvl+0x189/0x250 [ 116.531053][ T7468] ? __pfx____ratelimit+0x10/0x10 [ 116.531072][ T7468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.531089][ T7468] ? __pfx__printk+0x10/0x10 [ 116.531110][ T7468] ? __pfx___might_resched+0x10/0x10 [ 116.531131][ T7468] should_fail_ex+0x414/0x560 [ 116.531156][ T7468] should_failslab+0xa8/0x100 [ 116.531173][ T7468] kmem_cache_alloc_node_noprof+0x77/0x710 [ 116.531195][ T7468] ? __alloc_skb+0x112/0x2d0 [ 116.531216][ T7468] __alloc_skb+0x112/0x2d0 [ 116.531236][ T7468] netlink_ack+0x146/0xa50 [ 116.531249][ T7468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.531269][ T7468] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 116.531284][ T7468] ? __pfx_nl80211_post_doit+0x10/0x10 [ 116.531311][ T7468] netlink_rcv_skb+0x28c/0x470 [ 116.531325][ T7468] ? __lock_acquire+0xab9/0xd20 [ 116.531341][ T7468] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.531363][ T7468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.531396][ T7468] ? down_read+0x1ad/0x2e0 [ 116.531419][ T7468] genl_rcv+0x28/0x40 [ 116.531438][ T7468] netlink_unicast+0x82c/0x9e0 [ 116.531469][ T7468] ? __pfx_netlink_unicast+0x10/0x10 [ 116.531494][ T7468] ? netlink_sendmsg+0x642/0xb30 [ 116.531509][ T7468] ? skb_put+0x11b/0x210 [ 116.531528][ T7468] netlink_sendmsg+0x805/0xb30 [ 116.531554][ T7468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.531574][ T7468] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.531597][ T7468] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.531612][ T7468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.531642][ T7468] __sock_sendmsg+0x219/0x270 [ 116.531668][ T7468] ____sys_sendmsg+0x505/0x830 [ 116.531691][ T7468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.531718][ T7468] ? import_iovec+0x74/0xa0 [ 116.531736][ T7468] ___sys_sendmsg+0x21f/0x2a0 [ 116.531757][ T7468] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.531812][ T7468] ? __fget_files+0x2a/0x420 [ 116.531826][ T7468] ? __fget_files+0x3a0/0x420 [ 116.531849][ T7468] __x64_sys_sendmsg+0x19b/0x260 [ 116.531872][ T7468] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.531902][ T7468] ? __pfx_ksys_write+0x10/0x10 [ 116.531927][ T7468] ? do_syscall_64+0xbe/0xfa0 [ 116.531949][ T7468] do_syscall_64+0xfa/0xfa0 [ 116.531966][ T7468] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.531988][ T7468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.532004][ T7468] ? clear_bhb_loop+0x60/0xb0 [ 116.532023][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.532038][ T7468] RIP: 0033:0x7fd774f8eec9 [ 116.532052][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.532066][ T7468] RSP: 002b:00007fd775edb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.532083][ T7468] RAX: ffffffffffffffda RBX: 00007fd7751e5fa0 RCX: 00007fd774f8eec9 [ 116.532095][ T7468] RDX: 00000000000488d4 RSI: 0000200000000c40 RDI: 0000000000000004 [ 116.532105][ T7468] RBP: 00007fd775edb090 R08: 0000000000000000 R09: 0000000000000000 [ 116.532114][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.532123][ T7468] R13: 00007fd7751e6038 R14: 00007fd7751e5fa0 R15: 00007ffc3929df38 [ 116.532150][ T7468] [ 116.934228][ T7478] syzkaller1: entered promiscuous mode [ 116.939765][ T7478] syzkaller1: entered allmulticast mode [ 116.986510][ T7476] validate_nla: 2 callbacks suppressed [ 116.986527][ T7476] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 117.046803][ T7481] __nla_validate_parse: 3 callbacks suppressed [ 117.046820][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 117.089764][ T7476] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.227318][ T7495] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.445'. [ 117.237055][ T7492] netlink: 176 bytes leftover after parsing attributes in process `syz.0.443'. [ 117.246517][ T7492] ip6gretap0: entered promiscuous mode [ 117.252590][ T7492] netlink: 176 bytes leftover after parsing attributes in process `syz.0.443'. [ 117.266706][ T7497] ip6t_srh: unknown srh match flags 4000 [ 117.274740][ T7495] wg1 speed is unknown, defaulting to 1000 [ 117.286213][ T7495] wg1 speed is unknown, defaulting to 1000 [ 117.296924][ T7495] wg1 speed is unknown, defaulting to 1000 [ 117.314099][ T7495] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 117.336344][ T7495] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.389056][ T7495] wg1 speed is unknown, defaulting to 1000 [ 117.429381][ T7495] wg1 speed is unknown, defaulting to 1000 [ 117.437352][ T7495] wg1 speed is unknown, defaulting to 1000 [ 117.466601][ T7495] wg1 speed is unknown, defaulting to 1000 [ 117.476276][ T7495] wg1 speed is unknown, defaulting to 1000 [ 117.639238][ T7510] syzkaller0: entered promiscuous mode [ 117.648342][ T7510] syzkaller0: entered allmulticast mode [ 117.724072][ T7510] tipc: Enabled bearer , priority 0 [ 117.823758][ T7509] tipc: Resetting bearer [ 117.854787][ T7509] tipc: Disabling bearer [ 117.873017][ T7525] tc_dump_action: action bad kind [ 117.995388][ T7535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.458'. [ 118.126153][ T7544] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 118.139288][ T7544] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 118.626943][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 118.676847][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 118.736117][ T7567] netlink: 'syz.0.468': attribute type 11 has an invalid length. [ 118.779568][ T7567] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 119.905454][ T7637] tipc: Failed to obtain node identity [ 119.921732][ T7637] tipc: Enabling of bearer rejected, failed to enable media [ 119.933509][ T7641] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 120.039196][ T7641] bond3: (slave geneve2): making interface the new active one [ 120.068961][ T7641] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 120.097720][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 120.131672][ T36] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.190872][ T36] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.233339][ T36] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.258305][ T36] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 120.482034][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 120.494309][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 120.752986][ T7686] netlink: 'syz.3.502': attribute type 3 has an invalid length. [ 120.816502][ T7686] netlink: 'syz.3.502': attribute type 11 has an invalid length. [ 120.840836][ T7686] netlink: 'syz.3.502': attribute type 11 has an invalid length. [ 120.970199][ T7692] tipc: Enabling of bearer rejected, failed to enable media [ 121.059016][ T7695] bond6: option xmit_hash_policy: invalid value (64) [ 121.070882][ T7695] bond6 (unregistering): Released all slaves [ 121.151166][ T7703] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.226134][ T7711] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.234512][ T7711] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 121.272319][ T7711] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 121.544875][ T7730] syzkaller0: entered promiscuous mode [ 121.569631][ T7730] syzkaller0: entered allmulticast mode [ 121.898201][ T7754] vlan0: entered promiscuous mode [ 121.941076][ T7754] vlan0: entered allmulticast mode [ 121.946258][ T7754] veth0_vlan: entered allmulticast mode [ 122.150913][ T7772] Bluetooth: MGMT ver 1.23 [ 122.179034][ T7772] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 122.407618][ T7794] C: renamed from team_slave_0 (while UP) [ 122.429029][ T7794] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 122.457691][ T7794] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 122.554708][ T7794] __nla_validate_parse: 5 callbacks suppressed [ 122.554726][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 122.584788][ T7798] netlink: 'syz.2.533': attribute type 4 has an invalid length. [ 122.629499][ T7798] netlink: 152 bytes leftover after parsing attributes in process `syz.2.533'. [ 122.674827][ T7798] `: renamed from bond0 (while UP) [ 122.786395][ T7808] ip6gre1: entered allmulticast mode [ 122.843771][ T7812] netlink: 'syz.2.539': attribute type 2 has an invalid length. [ 122.856532][ T7812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.539'. [ 122.868272][ T7812] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 123.604104][ T7830] netlink: 72 bytes leftover after parsing attributes in process `syz.1.544'. [ 123.626077][ T7830] netlink: 72 bytes leftover after parsing attributes in process `syz.1.544'. [ 123.635927][ T7830] netlink: 72 bytes leftover after parsing attributes in process `syz.1.544'. [ 123.645378][ T7830] netlink: 72 bytes leftover after parsing attributes in process `syz.1.544'. [ 123.657325][ T7830] netlink: 72 bytes leftover after parsing attributes in process `syz.1.544'. [ 123.703640][ T7830] netlink: 72 bytes leftover after parsing attributes in process `syz.1.544'. [ 123.803557][ T7843] syzkaller0: entered promiscuous mode [ 123.809349][ T7843] syzkaller0: entered allmulticast mode [ 123.976196][ T7854] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 124.118472][ T7861] ip6t_rpfilter: unknown options [ 124.306598][ T79] tipc: Subscription rejected, illegal request [ 124.402395][ T7879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.409677][ T7879] IPv6: NLM_F_CREATE should be set when creating new route [ 124.498213][ T7879] xt_hashlimit: invalid interval [ 124.622867][ T7889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 124.911628][ T7892] syz.0.562 (7892) used greatest stack depth: 17976 bytes left [ 125.033229][ T7894] syz.0.562 (7894) used greatest stack depth: 17832 bytes left [ 126.379303][ T7965] wg1 speed is unknown, defaulting to 1000 [ 126.574912][ T7982] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 126.755159][ T7991] vxcan4: entered allmulticast mode [ 126.825406][ T7995] sctp: [Deprecated]: syz.1.591 (pid 7995) Use of int in maxseg socket option. [ 126.825406][ T7995] Use struct sctp_assoc_value instead [ 126.960114][ T7993] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 127.083976][ T8008] netlink: 'syz.2.595': attribute type 1 has an invalid length. [ 127.147690][ T8008] tipc: New replicast peer: 255.255.255.255 [ 127.173773][ T8008] tipc: Enabled bearer , priority 10 [ 127.244267][ T8012] Bluetooth: MGMT ver 1.23 [ 127.362390][ T8025] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 127.454747][ T8025] tipc: New replicast peer: 255.255.255.255 [ 127.470568][ T8025] tipc: Enabled bearer , priority 10 [ 127.647474][ T8039] sctp: [Deprecated]: syz.4.606 (pid 8039) Use of int in maxseg socket option. [ 127.647474][ T8039] Use struct sctp_assoc_value instead [ 127.839444][ T8052] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 128.102139][ T8067] __nla_validate_parse: 69 callbacks suppressed [ 128.102158][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 128.230731][ T8067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.356095][ T8067] 8021q: adding VLAN 0 to HW filter on device bond5 [ 128.365687][ T8067] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 128.379607][ T8067] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 128.489702][ T8080] netlink: 40 bytes leftover after parsing attributes in process `syz.0.623'. [ 128.973156][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 129.017708][ T8102] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 129.042564][ T8102] bond6 (unregistering): Released all slaves [ 129.048304][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 129.344322][ T8129] 8021q: VLANs not supported on ip6gre0 [ 129.394181][ T8128] wg1 speed is unknown, defaulting to 1000 [ 129.414723][ T8137] netlink: 104 bytes leftover after parsing attributes in process `syz.0.635'. [ 129.566021][ T8143] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 129.612274][ T8143] netlink: 'syz.2.638': attribute type 1 has an invalid length. [ 130.223932][ T8184] netlink: 96 bytes leftover after parsing attributes in process `syz.2.647'. [ 130.233722][ T8182] netlink: 'syz.0.646': attribute type 1 has an invalid length. [ 130.544567][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.652'. [ 130.776183][ T8217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 130.809073][ T8205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.820942][ T8205] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.925897][ T8205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.955545][ T8205] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.129904][ T8205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.168524][ T8205] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.514994][ T8205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.545489][ T8205] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.814014][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.845063][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.883184][ T8271] netlink: 'syz.2.668': attribute type 1 has an invalid length. [ 131.969240][ T8265] sch_tbf: burst 3936 is lower than device lo mtu (65550) ! [ 132.026308][ T8283] netlink: 'syz.2.668': attribute type 21 has an invalid length. [ 132.156950][ T3483] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.177643][ T8284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.669'. [ 132.210625][ T3483] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.258626][ T3483] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.297016][ T3483] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.344470][ T3483] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.387364][ T3483] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.487528][ T8303] tipc: Enabled bearer , priority 0 [ 132.522906][ T8302] tipc: Enabling of bearer rejected, already enabled [ 132.551948][ T8303] syzkaller0: entered promiscuous mode [ 132.557459][ T8303] syzkaller0: entered allmulticast mode [ 132.615722][ T8303] tipc: Resetting bearer [ 132.628436][ T8298] tipc: Resetting bearer [ 132.687702][ T8298] tipc: Disabling bearer [ 132.909567][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 133.618105][ T8364] tipc: Enabling of bearer rejected, failed to enable media [ 133.677457][ T8376] syzkaller1: entered promiscuous mode [ 133.730604][ T8376] syzkaller1: entered allmulticast mode [ 133.978775][ T8412] __nla_validate_parse: 3 callbacks suppressed [ 133.978794][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.690'. [ 134.893860][ T8463] syzkaller1: entered promiscuous mode [ 134.913182][ T8463] syzkaller1: entered allmulticast mode [ 135.049527][ T8472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 135.257203][ T8479] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 135.399428][ T8486] sit0: entered promiscuous mode [ 135.444824][ T8486] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 135.469508][ T8488] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 135.500439][ T8486] netlink: 1 bytes leftover after parsing attributes in process `syz.2.708'. [ 135.517891][ T8488] netlink: 'syz.1.709': attribute type 2 has an invalid length. [ 135.720153][ T8498] netlink: 'syz.1.711': attribute type 3 has an invalid length. [ 135.827929][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 135.871520][ T8502] netlink: 28 bytes leftover after parsing attributes in process `syz.2.712'. [ 135.889868][ T8508] sctp: [Deprecated]: syz.0.714 (pid 8508) Use of int in maxseg socket option. [ 135.889868][ T8508] Use struct sctp_assoc_value instead [ 135.914267][ T8506] netlink: 'syz.1.713': attribute type 2 has an invalid length. [ 136.077418][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.152354][ T8517] netlink: 'syz.0.716': attribute type 4 has an invalid length. [ 136.270761][ T8523] tipc: Enabling of bearer rejected, failed to enable media [ 136.373596][ T8528] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 136.443521][ T8529] netlink: 76 bytes leftover after parsing attributes in process `syz.0.719'. [ 136.569487][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.719'. [ 138.448757][ T8541] bond0: (slave rose0): Enslaving as an active interface with an up link [ 138.458047][ T8594] netlink: 88 bytes leftover after parsing attributes in process `syz.0.729'. [ 138.561956][ T8599] bond2 (unregistering): Released all slaves [ 138.700101][ T8601] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 138.711080][ T8616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.732'. [ 139.011936][ T8634] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 139.018198][ T8632] netlink: 56 bytes leftover after parsing attributes in process `syz.3.739'. [ 139.116838][ T8632] bond2 (unregistering): Released all slaves [ 139.175197][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 139.194892][ T8641] netlink: 'syz.4.743': attribute type 20 has an invalid length. [ 139.345781][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.743'. [ 139.361086][ T8641] netlink: 'syz.4.743': attribute type 20 has an invalid length. [ 139.395242][ T8654] netlink: 20 bytes leftover after parsing attributes in process `syz.0.747'. [ 139.529217][ T8654] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.558080][ T8665] netlink: 'syz.3.751': attribute type 6 has an invalid length. [ 139.576382][ T8667] netlink: 64 bytes leftover after parsing attributes in process `syz.4.752'. [ 139.586064][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 139.791630][ T8680] netlink: 76 bytes leftover after parsing attributes in process `syz.3.755'. [ 140.285032][ T8709] bridge2: entered promiscuous mode [ 140.290549][ T8709] bridge2: entered allmulticast mode [ 140.379796][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 140.389350][ T8714] netlink: 248 bytes leftover after parsing attributes in process `syz.1.763'. [ 141.155010][ T8752] xt_TCPMSS: Only works on TCP SYN packets [ 141.189739][ T8751] netlink: 'syz.0.773': attribute type 11 has an invalid length. [ 141.429536][ T8770] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 141.459927][ T8770] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 142.341512][ T8821] af_packet: tpacket_rcv: packet too big, clamped from 4056 to 4294967272. macoff=96 [ 143.503171][ T8823] tipc: Enabled bearer , priority 0 [ 143.522550][ T8830] syzkaller0: entered promiscuous mode [ 143.537200][ T8830] syzkaller0: entered allmulticast mode [ 143.590540][ T8817] tipc: Resetting bearer [ 143.640476][ T8840] netlink: 72 bytes leftover after parsing attributes in process `syz.3.796'. [ 143.681178][ T8840] netlink: 'syz.3.796': attribute type 2 has an invalid length. [ 143.719046][ T8817] tipc: Disabling bearer [ 143.986306][ T8858] netlink: 'syz.4.801': attribute type 11 has an invalid length. [ 144.067547][ T8868] __nla_validate_parse: 7 callbacks suppressed [ 144.067566][ T8868] netlink: 9 bytes leftover after parsing attributes in process `syz.4.801'. [ 144.102944][ T8863] bond4: entered promiscuous mode [ 144.108525][ T8863] bond4: entered allmulticast mode [ 144.114551][ T8863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 144.191965][ T8858] netlink: 5 bytes leftover after parsing attributes in process `syz.4.801'. [ 144.200703][ T8868] gretap0: entered promiscuous mode [ 144.291721][ T8858] 0ªî{X¹¦: renamed from gretap0 [ 144.319054][ T8858] 0ªî{X¹¦: left promiscuous mode [ 144.343158][ T8858] 0ªî{X¹¦: entered allmulticast mode [ 144.372442][ T8858] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 144.445004][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.807'. [ 144.472668][ T8891] xt_TCPMSS: Only works on TCP SYN packets [ 144.751481][ T8903] netlink: 420 bytes leftover after parsing attributes in process `syz.0.812'. [ 144.774668][ T8906] netlink: 'syz.2.814': attribute type 5 has an invalid length. [ 144.975318][ T8920] netlink: 152 bytes leftover after parsing attributes in process `syz.1.816'. [ 145.044961][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.089994][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.141784][ T8926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.149991][ T8926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.008426][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 146.028914][ T8984] sctp: [Deprecated]: syz.1.833 (pid 8984) Use of int in max_burst socket option. [ 146.028914][ T8984] Use struct sctp_assoc_value instead [ 146.126206][ T8997] netlink: 32 bytes leftover after parsing attributes in process `syz.2.836'. [ 146.732797][ T9020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.842'. [ 147.260246][ T9048] netlink: 'syz.2.853': attribute type 1 has an invalid length. [ 147.269082][ T9048] netlink: 'syz.2.853': attribute type 3 has an invalid length. [ 147.277494][ T9048] netlink: 'syz.2.853': attribute type 235 has an invalid length. [ 147.357398][ T9056] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 147.448719][ T9059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 147.458320][ T9060] netlink: 24 bytes leftover after parsing attributes in process `syz.2.857'. [ 147.524804][ T9060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.536063][ T9060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.641506][ T9060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.652380][ T9060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.776418][ T9060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.793716][ T9060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.899126][ T9060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.928621][ T9060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.173177][ T9084] syzkaller1: entered promiscuous mode [ 148.178815][ T9084] syzkaller1: entered allmulticast mode [ 148.186968][ T8396] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.210409][ T8396] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.244579][ T8396] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.255384][ T8396] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.320076][ T8404] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.329820][ T8404] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.352185][ T9092] nbd: must specify a device to reconfigure [ 148.384892][ T8404] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.400780][ T8404] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.413154][ T9059] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.431851][ T9059] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.517673][ T8404] ================================================================== [ 148.525790][ T8404] BUG: KASAN: slab-use-after-free in __mutex_lock+0x147/0x1350 [ 148.533355][ T8404] Read of size 8 at addr ffff88807faa62b0 by task kworker/u8:22/8404 [ 148.541422][ T8404] [ 148.543766][ T8404] CPU: 0 UID: 0 PID: 8404 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 148.543789][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 148.543802][ T8404] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 148.543829][ T8404] Call Trace: [ 148.543838][ T8404] [ 148.543845][ T8404] dump_stack_lvl+0x189/0x250 [ 148.543866][ T8404] ? __kasan_check_byte+0x12/0x40 [ 148.543896][ T8404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.543915][ T8404] ? lock_release+0x4b/0x3e0 [ 148.543936][ T8404] ? __virt_addr_valid+0x4a5/0x5c0 [ 148.543967][ T8404] print_report+0xca/0x240 [ 148.543989][ T8404] ? __mutex_lock+0x147/0x1350 [ 148.544012][ T8404] kasan_report+0x118/0x150 [ 148.544028][ T8404] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 148.544050][ T8404] ? __mutex_lock+0x147/0x1350 [ 148.544077][ T8404] __mutex_lock+0x147/0x1350 [ 148.544102][ T8404] ? __mutex_lock+0x5bb/0x1350 [ 148.544127][ T8404] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 148.544150][ T8404] ? __pfx___mutex_lock+0x10/0x10 [ 148.544176][ T8404] ? __lock_acquire+0xab9/0xd20 [ 148.544199][ T8404] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 148.544224][ T8404] ? process_scheduled_works+0x9ef/0x17b0 [ 148.544244][ T8404] ? process_scheduled_works+0x9ef/0x17b0 [ 148.544264][ T8404] process_scheduled_works+0xae1/0x17b0 [ 148.544297][ T8404] ? __pfx_process_scheduled_works+0x10/0x10 [ 148.544324][ T8404] worker_thread+0x8a0/0xda0 [ 148.544356][ T8404] kthread+0x711/0x8a0 [ 148.544382][ T8404] ? __pfx_worker_thread+0x10/0x10 [ 148.544402][ T8404] ? __pfx_kthread+0x10/0x10 [ 148.544426][ T8404] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.544446][ T8404] ? lockdep_hardirqs_on+0x9c/0x150 [ 148.544467][ T8404] ? __pfx_kthread+0x10/0x10 [ 148.544540][ T8404] ret_from_fork+0x4bc/0x870 [ 148.544560][ T8404] ? __pfx_ret_from_fork+0x10/0x10 [ 148.544581][ T8404] ? __switch_to_asm+0x39/0x70 [ 148.544602][ T8404] ? __switch_to_asm+0x33/0x70 [ 148.544623][ T8404] ? __pfx_kthread+0x10/0x10 [ 148.544647][ T8404] ret_from_fork_asm+0x1a/0x30 [ 148.544676][ T8404] [ 148.544683][ T8404] [ 148.747426][ T8404] Allocated by task 9060: [ 148.751740][ T8404] kasan_save_track+0x3e/0x80 [ 148.756421][ T8404] __kasan_kmalloc+0x93/0xb0 [ 148.761006][ T8404] __kmalloc_noprof+0x411/0x7f0 [ 148.765856][ T8404] udp_tunnel_nic_netdevice_event+0x4c3/0x1810 [ 148.771999][ T8404] notifier_call_chain+0x1b6/0x3e0 [ 148.777098][ T8404] register_netdevice+0x1608/0x1ae0 [ 148.782287][ T8404] nsim_create+0xae8/0xf10 [ 148.786706][ T8404] __nsim_dev_port_add+0x6b6/0xb10 [ 148.791807][ T8404] nsim_dev_port_add_all+0x37/0xf0 [ 148.796907][ T8404] nsim_dev_reload_up+0x451/0x780 [ 148.801919][ T8404] devlink_reload+0x4ec/0x8d0 [ 148.806588][ T8404] devlink_nl_reload_doit+0x9c2/0xd50 [ 148.811944][ T8404] genl_family_rcv_msg_doit+0x215/0x300 [ 148.817481][ T8404] genl_rcv_msg+0x60e/0x790 [ 148.821972][ T8404] netlink_rcv_skb+0x208/0x470 [ 148.826719][ T8404] genl_rcv+0x28/0x40 [ 148.830691][ T8404] netlink_unicast+0x82c/0x9e0 [ 148.835448][ T8404] netlink_sendmsg+0x805/0xb30 [ 148.840198][ T8404] __sock_sendmsg+0x219/0x270 [ 148.844866][ T8404] ____sys_sendmsg+0x505/0x830 [ 148.849618][ T8404] ___sys_sendmsg+0x21f/0x2a0 [ 148.854285][ T8404] __x64_sys_sendmsg+0x19b/0x260 [ 148.859218][ T8404] do_syscall_64+0xfa/0xfa0 [ 148.863711][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.869592][ T8404] [ 148.871901][ T8404] Freed by task 9059: [ 148.875860][ T8404] kasan_save_track+0x3e/0x80 [ 148.880528][ T8404] __kasan_save_free_info+0x46/0x50 [ 148.885713][ T8404] __kasan_slab_free+0x5c/0x80 [ 148.890467][ T8404] kfree+0x19a/0x6d0 [ 148.894349][ T8404] udp_tunnel_nic_netdevice_event+0x11ab/0x1810 [ 148.900576][ T8404] notifier_call_chain+0x1b6/0x3e0 [ 148.905673][ T8404] unregister_netdevice_many_notify+0x1860/0x2390 [ 148.912079][ T8404] unregister_netdevice_queue+0x33c/0x380 [ 148.917786][ T8404] nsim_destroy+0x1dd/0x670 [ 148.922271][ T8404] __nsim_dev_port_del+0x14d/0x1b0 [ 148.927381][ T8404] nsim_dev_reload_destroy+0x288/0x490 [ 148.932826][ T8404] nsim_dev_reload_down+0x8a/0xc0 [ 148.937838][ T8404] devlink_reload+0x1b3/0x8d0 [ 148.942503][ T8404] devlink_nl_reload_doit+0x9c2/0xd50 [ 148.947877][ T8404] genl_family_rcv_msg_doit+0x215/0x300 [ 148.953419][ T8404] genl_rcv_msg+0x60e/0x790 [ 148.957922][ T8404] netlink_rcv_skb+0x208/0x470 [ 148.962673][ T8404] genl_rcv+0x28/0x40 [ 148.966645][ T8404] netlink_unicast+0x82c/0x9e0 [ 148.971398][ T8404] netlink_sendmsg+0x805/0xb30 [ 148.976149][ T8404] __sock_sendmsg+0x219/0x270 [ 148.980816][ T8404] ____sys_sendmsg+0x505/0x830 [ 148.985568][ T8404] ___sys_sendmsg+0x21f/0x2a0 [ 148.990230][ T8404] __x64_sys_sendmsg+0x19b/0x260 [ 148.995154][ T8404] do_syscall_64+0xfa/0xfa0 [ 148.999643][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.005522][ T8404] [ 149.007833][ T8404] Last potentially related work creation: [ 149.013539][ T8404] kasan_save_stack+0x3e/0x60 [ 149.018210][ T8404] kasan_record_aux_stack+0xbd/0xd0 [ 149.023397][ T8404] insert_work+0x3d/0x330 [ 149.027718][ T8404] __queue_work+0xbaf/0xfb0 [ 149.032295][ T8404] queue_work_on+0x181/0x270 [ 149.036871][ T8404] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 149.042579][ T8404] udp_tunnel_push_rx_port+0x17d/0x200 [ 149.048021][ T8404] geneve_offload_rx_ports+0xd7/0x160 [ 149.053381][ T8404] geneve_netdevice_event+0x6a/0x80 [ 149.058564][ T8404] notifier_call_chain+0x1b6/0x3e0 [ 149.063691][ T8404] call_netdevice_notifiers+0x88/0xc0 [ 149.069058][ T8404] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 149.075200][ T8404] notifier_call_chain+0x1b6/0x3e0 [ 149.080301][ T8404] register_netdevice+0x1608/0x1ae0 [ 149.085493][ T8404] nsim_create+0xae8/0xf10 [ 149.089892][ T8404] __nsim_dev_port_add+0x6b6/0xb10 [ 149.094988][ T8404] nsim_dev_port_add_all+0x37/0xf0 [ 149.100093][ T8404] nsim_dev_reload_up+0x451/0x780 [ 149.105105][ T8404] devlink_reload+0x4ec/0x8d0 [ 149.109769][ T8404] devlink_nl_reload_doit+0x9c2/0xd50 [ 149.115127][ T8404] genl_family_rcv_msg_doit+0x215/0x300 [ 149.120663][ T8404] genl_rcv_msg+0x60e/0x790 [ 149.125154][ T8404] netlink_rcv_skb+0x208/0x470 [ 149.129901][ T8404] genl_rcv+0x28/0x40 [ 149.133876][ T8404] netlink_unicast+0x82c/0x9e0 [ 149.138629][ T8404] netlink_sendmsg+0x805/0xb30 [ 149.143378][ T8404] __sock_sendmsg+0x219/0x270 [ 149.148042][ T8404] ____sys_sendmsg+0x505/0x830 [ 149.152792][ T8404] ___sys_sendmsg+0x21f/0x2a0 [ 149.157466][ T8404] __x64_sys_sendmsg+0x19b/0x260 [ 149.162393][ T8404] do_syscall_64+0xfa/0xfa0 [ 149.166889][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.172778][ T8404] [ 149.175083][ T8404] Second to last potentially related work creation: [ 149.181737][ T8404] kasan_save_stack+0x3e/0x60 [ 149.186417][ T8404] kasan_record_aux_stack+0xbd/0xd0 [ 149.191613][ T8404] insert_work+0x3d/0x330 [ 149.195936][ T8404] __queue_work+0xcd2/0xfb0 [ 149.200431][ T8404] queue_work_on+0x181/0x270 [ 149.205065][ T8404] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 149.210682][ T8404] udp_tunnel_push_rx_port+0x17d/0x200 [ 149.216124][ T8404] vxlan_offload_rx_ports+0x139/0x200 [ 149.221482][ T8404] vxlan_netdevice_event+0x111/0x470 [ 149.226757][ T8404] notifier_call_chain+0x1b6/0x3e0 [ 149.231854][ T8404] call_netdevice_notifiers+0x88/0xc0 [ 149.237216][ T8404] udp_tunnel_nic_netdevice_event+0xdff/0x1810 [ 149.243354][ T8404] notifier_call_chain+0x1b6/0x3e0 [ 149.248456][ T8404] register_netdevice+0x1608/0x1ae0 [ 149.253640][ T8404] nsim_create+0xae8/0xf10 [ 149.258038][ T8404] __nsim_dev_port_add+0x6b6/0xb10 [ 149.263136][ T8404] nsim_dev_port_add_all+0x37/0xf0 [ 149.268235][ T8404] nsim_dev_reload_up+0x451/0x780 [ 149.273249][ T8404] devlink_reload+0x4ec/0x8d0 [ 149.277911][ T8404] devlink_nl_reload_doit+0x9c2/0xd50 [ 149.283266][ T8404] genl_family_rcv_msg_doit+0x215/0x300 [ 149.288802][ T8404] genl_rcv_msg+0x60e/0x790 [ 149.293292][ T8404] netlink_rcv_skb+0x208/0x470 [ 149.298040][ T8404] genl_rcv+0x28/0x40 [ 149.302009][ T8404] netlink_unicast+0x82c/0x9e0 [ 149.306765][ T8404] netlink_sendmsg+0x805/0xb30 [ 149.311514][ T8404] __sock_sendmsg+0x219/0x270 [ 149.316181][ T8404] ____sys_sendmsg+0x505/0x830 [ 149.320931][ T8404] ___sys_sendmsg+0x21f/0x2a0 [ 149.325602][ T8404] __x64_sys_sendmsg+0x19b/0x260 [ 149.330535][ T8404] do_syscall_64+0xfa/0xfa0 [ 149.335028][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.340905][ T8404] [ 149.343212][ T8404] The buggy address belongs to the object at ffff88807faa6200 [ 149.343212][ T8404] which belongs to the cache kmalloc-256 of size 256 [ 149.357246][ T8404] The buggy address is located 176 bytes inside of [ 149.357246][ T8404] freed 256-byte region [ffff88807faa6200, ffff88807faa6300) [ 149.371026][ T8404] [ 149.373350][ T8404] The buggy address belongs to the physical page: [ 149.379749][ T8404] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7faa6 [ 149.388496][ T8404] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 149.396977][ T8404] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 149.404944][ T8404] page_type: f5(slab) [ 149.408911][ T8404] raw: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 149.417479][ T8404] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 149.426050][ T8404] head: 00fff00000000040 ffff88813ffa6b40 0000000000000000 dead000000000001 [ 149.434705][ T8404] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 149.443361][ T8404] head: 00fff00000000001 ffffea0001fea981 00000000ffffffff 00000000ffffffff [ 149.452029][ T8404] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 149.460681][ T8404] page dumped because: kasan: bad access detected [ 149.467092][ T8404] page_owner tracks the page as allocated [ 149.472795][ T8404] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5829, tgid 5829 (syz-executor), ts 80943497203, free_ts 80772088344 [ 149.494320][ T8404] post_alloc_hook+0x240/0x2a0 [ 149.499079][ T8404] get_page_from_freelist+0x2365/0x2440 [ 149.504611][ T8404] __alloc_frozen_pages_noprof+0x181/0x370 [ 149.510401][ T8404] alloc_pages_mpol+0x232/0x4a0 [ 149.515248][ T8404] allocate_slab+0x96/0x3a0 [ 149.519736][ T8404] ___slab_alloc+0xe94/0x18a0 [ 149.524400][ T8404] __slab_alloc+0x65/0x100 [ 149.528815][ T8404] __kmalloc_noprof+0x471/0x7f0 [ 149.533652][ T8404] fib_create_info+0x172d/0x3210 [ 149.538579][ T8404] fib_table_insert+0xc6/0x1b50 [ 149.543421][ T8404] fib_magic+0x2c4/0x390 [ 149.547646][ T8404] fib_add_ifaddr+0x144/0x5f0 [ 149.552318][ T8404] fib_netdev_event+0x382/0x490 [ 149.557150][ T8404] notifier_call_chain+0x1b6/0x3e0 [ 149.562260][ T8404] __dev_notify_flags+0x18d/0x2e0 [ 149.567272][ T8404] netif_change_flags+0xe8/0x1a0 [ 149.572198][ T8404] page last free pid 5829 tgid 5829 stack trace: [ 149.578507][ T8404] __free_frozen_pages+0xbc4/0xd30 [ 149.583615][ T8404] __slab_free+0x2e7/0x390 [ 149.588024][ T8404] qlist_free_all+0x97/0x140 [ 149.592652][ T8404] kasan_quarantine_reduce+0x148/0x160 [ 149.598104][ T8404] __kasan_slab_alloc+0x22/0x80 [ 149.602949][ T8404] __kmalloc_cache_noprof+0x36f/0x6f0 [ 149.608312][ T8404] mpls_dev_notify+0x121/0x7a0 [ 149.613065][ T8404] notifier_call_chain+0x1b6/0x3e0 [ 149.618164][ T8404] register_netdevice+0x1608/0x1ae0 [ 149.623349][ T8404] nsim_create+0xae8/0xf10 [ 149.627748][ T8404] __nsim_dev_port_add+0x6b6/0xb10 [ 149.632845][ T8404] nsim_dev_port_add_all+0x37/0xf0 [ 149.637950][ T8404] nsim_drv_probe+0x88e/0xba0 [ 149.642614][ T8404] really_probe+0x26a/0x9e0 [ 149.647102][ T8404] __driver_probe_device+0x18c/0x2f0 [ 149.652371][ T8404] driver_probe_device+0x4f/0x430 [ 149.657389][ T8404] [ 149.659702][ T8404] Memory state around the buggy address: [ 149.665313][ T8404] ffff88807faa6180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.673360][ T8404] ffff88807faa6200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.681501][ T8404] >ffff88807faa6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 149.689543][ T8404] ^ [ 149.695156][ T8404] ffff88807faa6300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.703199][ T8404] ffff88807faa6380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 149.711242][ T8404] ================================================================== [ 149.734050][ T8404] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 149.741300][ T8404] CPU: 1 UID: 0 PID: 8404 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(full) [ 149.750843][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 149.760890][ T8404] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 149.768181][ T8404] Call Trace: [ 149.771448][ T8404] [ 149.774368][ T8404] dump_stack_lvl+0x99/0x250 [ 149.778952][ T8404] ? __asan_memcpy+0x40/0x70 [ 149.783536][ T8404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.788725][ T8404] ? __pfx__printk+0x10/0x10 [ 149.793314][ T8404] vpanic+0x237/0x6d0 [ 149.797294][ T8404] ? __pfx_vpanic+0x10/0x10 [ 149.801788][ T8404] ? preempt_schedule+0xae/0xc0 [ 149.806628][ T8404] ? __pfx_preempt_schedule+0x10/0x10 [ 149.811996][ T8404] panic+0xb9/0xc0 [ 149.815711][ T8404] ? __pfx_panic+0x10/0x10 [ 149.820122][ T8404] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 149.826006][ T8404] ? __mutex_lock+0x147/0x1350 [ 149.830761][ T8404] check_panic_on_warn+0x89/0xb0 [ 149.835692][ T8404] ? __mutex_lock+0x147/0x1350 [ 149.840445][ T8404] end_report+0x78/0x160 [ 149.844682][ T8404] kasan_report+0x129/0x150 [ 149.849169][ T8404] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 149.855048][ T8404] ? __mutex_lock+0x147/0x1350 [ 149.859803][ T8404] __mutex_lock+0x147/0x1350 [ 149.864387][ T8404] ? __mutex_lock+0x5bb/0x1350 [ 149.869140][ T8404] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 149.875372][ T8404] ? __pfx___mutex_lock+0x10/0x10 [ 149.880389][ T8404] ? __lock_acquire+0xab9/0xd20 [ 149.885236][ T8404] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 149.891297][ T8404] ? process_scheduled_works+0x9ef/0x17b0 [ 149.897002][ T8404] ? process_scheduled_works+0x9ef/0x17b0 [ 149.902706][ T8404] process_scheduled_works+0xae1/0x17b0 [ 149.908248][ T8404] ? __pfx_process_scheduled_works+0x10/0x10 [ 149.914219][ T8404] worker_thread+0x8a0/0xda0 [ 149.918805][ T8404] kthread+0x711/0x8a0 [ 149.922866][ T8404] ? __pfx_worker_thread+0x10/0x10 [ 149.927964][ T8404] ? __pfx_kthread+0x10/0x10 [ 149.932547][ T8404] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.937733][ T8404] ? lockdep_hardirqs_on+0x9c/0x150 [ 149.942918][ T8404] ? __pfx_kthread+0x10/0x10 [ 149.947496][ T8404] ret_from_fork+0x4bc/0x870 [ 149.952073][ T8404] ? __pfx_ret_from_fork+0x10/0x10 [ 149.957170][ T8404] ? __switch_to_asm+0x39/0x70 [ 149.961919][ T8404] ? __switch_to_asm+0x33/0x70 [ 149.966670][ T8404] ? __pfx_kthread+0x10/0x10 [ 149.971249][ T8404] ret_from_fork_asm+0x1a/0x30 [ 149.976006][ T8404] [ 149.979283][ T8404] Kernel Offset: disabled [ 149.983600][ T8404] Rebooting in 86400 seconds..