last executing test programs: 9.939292115s ago: executing program 1 (id=1100): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000040)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="05000000bfc79703cf994d6cbfd1a0b100000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0400008001000000030000e0040300000000000010000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x240400c6) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x0, {}, [@FRA_FLOW={0x8, 0xb, 0x2}]}, 0x24}}, 0x0) r5 = socket(0x14, 0x2, 0x4) ioctl$SIOCGETMIFCNT_IN6(r5, 0x89e0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x61d0, 0x0) 9.392319506s ago: executing program 2 (id=1108): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b940020506050e130204430009003f0020480a0000200d0085a168d027000b000a00000049935afe4a460c89b6f1f54482107aec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e2f66ed538f2", 0x64, 0x10004011, 0x0, 0x0) 9.160591874s ago: executing program 2 (id=1111): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x14}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016004163d25a80648c2594f91d24fc60", 0x14}], 0x1}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r1) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)="4fa1f49ff8a930286f7a2043220c00340905aa398464cf67c5e786558ea0a2ec2ac69b5e4bd9e78ccf0abcb03a1b826ebbf50f6ebce9e8f8bfe63e5354bff39a239e1f67ad8f0b", 0x47) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r8, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x80}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xd2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xe0}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030b0000000000090000130000000c0009800600020000000000000002800000010002000000000002000400000000000380000002000200000000000100070000000000020009000000000001000900000000000200000000800000020010000000000002000000000000000200400000000000020009000000000001000200000000000380000001000900000000000100010000000000010003000000000002000a000000000001000700000000000400000002000700000000000380000001000300000000000400"], 0x20}}, 0x0) 8.850278785s ago: executing program 1 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000250900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010001280090001006c61737400000000080003400000011014"], 0xb4}}, 0x20050800) 8.710843411s ago: executing program 1 (id=1118): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0xfa) setsockopt$inet_int(r3, 0x0, 0x20, &(0x7f0000000180)=0xb51, 0x4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x840000000002, 0x3, 0xfa) (async) setsockopt$inet_int(r3, 0x0, 0x20, &(0x7f0000000180)=0xb51, 0x4) (async) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) (async) 8.589305651s ago: executing program 2 (id=1120): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e25, 0x0, @loopback, 0x18}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "122000"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "2000a200009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) writev(r1, &(0x7f0000000600)=[{&(0x7f0000000200)='f', 0x1}], 0x1) recvfrom$inet6(r1, &(0x7f00000004c0)=""/1, 0x3, 0x3, 0x0, 0x14487ccc76af586c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5044, 0x21000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x3c}}, 0x48000) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5044, 0x21000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x3c}}, 0x48000) 8.337864528s ago: executing program 1 (id=1124): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x6, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e657464657673696d0000000ff801006e657464657673696d30000008008e00020000000c008f0008000000000000000c009000fdffffffffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) 8.279188551s ago: executing program 2 (id=1125): syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000"/100}}}}}}, 0x0) 8.201264667s ago: executing program 1 (id=1126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 8.174615719s ago: executing program 2 (id=1127): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'wg1\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x22, 0x2, 0x2) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0x0, &(0x7f0000000800)) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4d, 0xfffffff9, 0x6, 0x7, 0x7f, 0xb2, 0x7, 0xf9, 0x68, 0x6, [0x3, 0x9, 0xffff7fff, 0x4, 0x8, 0x80, 0x8000]}}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) (async, rerun: 32) preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000000)={'syzkaller0\x00'}) 7.524515093s ago: executing program 1 (id=1133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x24040010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x58, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r3, 0x802, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x4004801) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="0380c2f4ffffffff000000a433079a0261e94ab8074341ffff00ffffffff0000000000019078ac1e0101ac1414aa05343314d0369201a1b500000000000000010000000000007f000001001863718e9bf703000000"], 0x0) 6.90012737s ago: executing program 32 (id=1133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x24040010) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002300), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000002380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x58, r5, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_SEC_LEVEL={0x4}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x4804) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r3, 0x802, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xb}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x4004801) syz_emit_ethernet(0x46, &(0x7f00000001c0)=ANY=[@ANYBLOB="0380c2f4ffffffff000000a433079a0261e94ab8074341ffff00ffffffff0000000000019078ac1e0101ac1414aa05343314d0369201a1b500000000000000010000000000007f000001001863718e9bf703000000"], 0x0) 6.871284771s ago: executing program 2 (id=1138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r4, 0x25, 0x0, @val=@perf_event}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f00000001c0), 0xe) listen(r5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, &(0x7f0000000080)) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xcf, &(0x7f0000000300)={@remote, @empty, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x25, 0x4, 0x1, 0x9, 0xbd, 0x68, 0x3, 0x3, 0x6, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0x2c, 0x0, 0x9, [0x43, 0x2, 0x9]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0xf, 0x82, [@empty, @multicast2, @private=0xa010102]}, @timestamp_addr={0x44, 0x4c, 0xde, 0x1, 0x8, [{@private=0xa010101, 0xdd8a7f6}, {@empty, 0x400}, {@private=0xa010101, 0x101}, {@multicast1, 0x6}, {@loopback, 0x7}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}}, {@broadcast, 0xffffffff}, {@remote, 0x8}]}, @rr={0x7, 0xf, 0xd0, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @rand_addr=0x64010102]}]}}, {{0x4e23, 0x4e20, r7, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1000, 0x0, 0x8, {[@eol]}}, {"212847f7418eb81bd191f5a7b1142e4a2a"}}}}}}, 0x0) 6.848628099s ago: executing program 33 (id=1138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r4, 0x25, 0x0, @val=@perf_event}, 0x18) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r5, &(0x7f00000001c0), 0xe) listen(r5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, &(0x7f0000000080)) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0xcf, &(0x7f0000000300)={@remote, @empty, @val={@void, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x25, 0x4, 0x1, 0x9, 0xbd, 0x68, 0x3, 0x3, 0x6, 0x0, @loopback, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0x2c, 0x0, 0x9, [0x43, 0x2, 0x9]}, @ra={0x94, 0x4, 0x1}, @end, @lsrr={0x83, 0xf, 0x82, [@empty, @multicast2, @private=0xa010102]}, @timestamp_addr={0x44, 0x4c, 0xde, 0x1, 0x8, [{@private=0xa010101, 0xdd8a7f6}, {@empty, 0x400}, {@private=0xa010101, 0x101}, {@multicast1, 0x6}, {@loopback, 0x7}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}}, {@broadcast, 0xffffffff}, {@remote, 0x8}]}, @rr={0x7, 0xf, 0xd0, [@dev={0xac, 0x14, 0x14, 0x17}, @multicast1, @rand_addr=0x64010102]}]}}, {{0x4e23, 0x4e20, r7, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x1000, 0x0, 0x8, {[@eol]}}, {"212847f7418eb81bd191f5a7b1142e4a2a"}}}}}}, 0x0) 5.355221591s ago: executing program 4 (id=1151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a010200000000000040000200fffd0900010073797a30"], 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x14, r2, 0x1, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8844) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x388, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_NODE={0x1f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3b, 0x3, "aa84080352c27d3f400be186bffda29d771f5e8c4eec7e3bbffe6ecd413598e596fcc4656a77ca2398d4cacf133f9949b88d40cfbb7cc2"}, @TIPC_NLA_NODE_ID={0xf9, 0x3, "af3523889814a000d03fd463d9fe243c2902207eafafa3c719381e50ae7f4c540c14745c71f0e1cc9aff838f99fd1f27ba9462d204710dd49d0346ea03d0e79688a1964c5686431fcdbaea8d870c29c5ac089e9780bee1dd68b3d485dd8cd4e33881ecadac572a3b196e37531e28f69825a5185ba6bee5138abb3e711b450ce5f9a3fa4596aaaea94f9e5d8923d879643bf8f7e7d10ec022535b6920fddec30edf2e00fffbed2a13e45c2c674a2d3bad10767c80ec906a4d381dfd160ee1d3a837c199ef3181c87b63ddc84b753a35ceb04eef654a7a1c39082296a8f2333c9275df53cc997ffb6f29d418e71ad8bd7a359e438956"}, @TIPC_NLA_NODE_ID={0x60, 0x3, "f1bbb247edc1b4eafd71f79bf725773cf77d55e4077fbeeb2965e3aa57a57ce2115a0e7fb60669e9aaec01c1a8c888d8aa56c2599805a7dd935d80a585b99d61bfdc15b362b34933d9d5986e258be92e652c2e90c2ff47524e57d23d"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "c8826f9045149b74565752544734c9bbcc9d6bb07edf20f53c98"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6380}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x89f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x67}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd52c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x27d}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "74b7b59b7a6224d191fb84fda3fee24c34ce0d4f778a170be263"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "1546a62d9cda8c83a360b8598e8edd712286ede3a808e8f4fb21eda9d0"}}]}]}, 0x388}, 0x1, 0x0, 0x0, 0xc841}, 0x600c084) 4.920000417s ago: executing program 4 (id=1155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000010003b150c0000000004060000000000", @ANYRES32=0x0, @ANYBLOB="c1900000ac5402002c0012800b00010069703667726500001c0002800400120014000700ff02000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x48010) 3.42622956s ago: executing program 4 (id=1160): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r3, 0x87, &(0x7f0000000800)}, 0x10) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 3.386700941s ago: executing program 3 (id=1161): r0 = socket(0x1f, 0xa, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)="3c44e4a53a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @multicast1}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private2, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001200020025bd7000fedbdf2500000000", @ANYRES32=r3, @ANYBLOB="800800000002007fc7bfcb605ca0860008001f0009000000"], 0x30}, 0x1, 0x0, 0x0, 0xc801}, 0x20008800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delqdisc={0x44, 0x25, 0x2, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xd, 0x9}, {0xffe0, 0xa}, {0xffe0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xca}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x200, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0xfff3, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x3c}}, 0x8014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r6, 0xc040ff0b, 0x2000000000) r7 = socket(0x10, 0x80000, 0xffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r10, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, 0x0, 0x0) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800fc00", @ANYRES16=r11, @ANYBLOB="13002abd7000fddbdf25030000000a00090087f1ee1930b7000008000300", @ANYRES32=r12, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="8337da03efe5364a0c142906d73a80bb9e59dd0de9675f5c5d04f3d6c4f1cc14b64e4e818623e82fd6afa61a66716a44000000000000000000", @ANYRES16=r11, @ANYBLOB="100027bd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000020}, 0x40000) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.599068848s ago: executing program 3 (id=1164): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x64}}, 0x40000) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x4) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48040}, 0x0) r4 = accept4(r1, 0x0, 0x0, 0x400000000000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x8, &(0x7f00000003c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0xfcf8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000ff000000000000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000ad06f0fff0ffffff95000000000000001800000002000000000000000b0800009d70f8ff0100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b71f0000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008080000b7040000018000008500000082000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000317adce939103b192d247441039474511890a3e3800e0bd866"], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000002340)=""/4096, 0x40f00, 0x51, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x27c28, r7, 0x4, &(0x7f0000000740)=[r8, r8, r8], &(0x7f0000000280)=[{0x2, 0x3, 0x0, 0x2}, {0x5, 0x5, 0xe, 0xa}, {0x1, 0x4, 0x0, 0x8}, {0x2, 0x4}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r10, r7, 0x4, r7}, 0x10) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000380)={@remote, @private, 0x0}, &(0x7f00000003c0)=0xc) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x40, 0x1, @vifc_lcl_ifindex=r11, @remote}, 0x10) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) bind$inet(r5, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) 2.415207925s ago: executing program 4 (id=1165): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x2) connect$caif(r1, &(0x7f00000003c0)=@rfm={0x25, 0x3, "974a7386d371a23ef74ea97b8a3ae5d9"}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f0000000300)={0x1100, 0x0, 0x0, 0x2a40}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}) sendmsg$NFT_MSG_GETOBJ_RESET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x9c, 0x15, 0xa, 0xe01, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x85, 0x8, "7633925924a3503400cc2c1001aebe9b43217551378c8380d5421194f2899b0258454df8fe479ee467d20257a85d985d8945f6d44c1b915851095872a2c06840b73f7c897f34bf1c222fc7219ba7aaa160c9ab607828bb895e2900079f7c8fd6a138f90a029efaa1f45f1457fb933c1205cc345f7f20e5e55f534a66b8d7146b0c"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x1e, 0x2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000580)=@netrom={'nr', 0x0}, 0x10) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x890}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@delqdisc={0xe4, 0x25, 0x800, 0x70bd29, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, {0xd}, {0x7, 0x9}, {0x1, 0xffe0}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x30}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9d}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/223, 0xdf}, {&(0x7f0000000840)=""/127, 0x7f}], 0x2}, 0x101}], 0x1, 0x60, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x1}, 0x10) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x2}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x13}]}, 0x28}, 0x1, 0x0, 0x0, 0x44044}, 0x4000001) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 2.237483951s ago: executing program 0 (id=1166): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0xbc, 0x4}}, &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000180)={0x80, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x2, 0x5, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0xffffffffffffffe4, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x1, 0x71, 0x10, 0xbc, 0x4}}, &(0x7f0000000480)='GPL\x00'}, 0x94) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000180)={0x80, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x2, 0x5, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0xffffffffffffffe4, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x1) (async) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r0) (async) 2.236147279s ago: executing program 4 (id=1167): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x7f}}}]}, 0x7f}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000840)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100677470001400028008000600", @ANYRES32, @ANYBLOB="08000300c6f898"], 0x40}}, 0x0) 2.096005226s ago: executing program 0 (id=1168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5400000010003b150c0000000000070000000000", @ANYRES32=0x0, @ANYBLOB="c1900000ac5402002c0012800b00010069703667726500001c0002800400120014000700ff02000000000000000000000000000108000a00", @ANYRES32], 0x54}}, 0x48010) 1.882888648s ago: executing program 4 (id=1169): setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000140)="4fa1f49ff8a930286f7a2043220c00340905aa398464cf67c5e786558ea0a2ec2ac69b5e4bd9e78ccf0abcb03a1b826ebbf50f6ebce9e8f8bfe63e5354bff39a239e1f67ad8f0b", 0x47) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "840000000000110002000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.823133637s ago: executing program 0 (id=1170): r0 = socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020200000a000000000000000000000003000600000000000200000000000000000000000000000002000100140000fbffffff0700000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x8c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_SIZE={0x8}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x448d0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000200)}, 0x20) 1.616836713s ago: executing program 3 (id=1171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000811248000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a000000000f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1b, 0x0, 0x0, 0x2663}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001200)={'batadv_slave_1\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000004c0)=0x4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async, rerun: 32) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001800), 0x4840, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)={0x18, 0x24, 0x301, 0x0, 0x0, {0x1}, [@nested={0x4, 0xae}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r9, 0x29, 0x1f, 0x0, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r10, 0x300, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0xfffffffffffffea5, 0x13, 0x9}, @L2TP_ATTR_RECV_SEQ={0x0, 0x12, 0xe}]}, 0x30}}, 0x0) (async) sendmmsg$inet(r6, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) (async) r11 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000000906030000000000000000000a000002662e8d77a3da941ef5bfd4395e62ec05c2da33ebba92da35b4997a67df17ef65af1a4800a7da0ca0b0b242455f9a9c626af812dab59b56981a6ffda5b69b6e3b391f0dc366b346e4e6ce9dd5261e5532ddb191204108ef"], 0x14}, 0x1, 0x0, 0x0, 0x24018800}, 0x24000810) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r12, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 1.571335063s ago: executing program 0 (id=1172): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x72a, 0x0, r1, 0x57651d5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0xa, 0x7, 0x40, @dev={0xfe, 0x80, '\x00', 0x38}, @mcast1, 0x40, 0x700, 0x401, 0xff8}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f00000000c0), &(0x7f0000000140)=""/116}, 0x20) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) 1.49750429s ago: executing program 0 (id=1173): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) (async) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x700, 0x7, 0xf098, 0x1, {{0x18, 0x4, 0x1, 0xe, 0x60, 0x67, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@generic={0x89, 0xe, "ea485858cd0fed24713c30e0"}, @ra={0x94, 0x4}, @rr={0x7, 0x7, 0x40, [@multicast2]}, @rr={0x7, 0x7, 0xff, [@initdev={0xac, 0x1e, 0x80, 0x0}]}, @rr={0x7, 0x7, 0x4c, [@loopback]}, @cipso={0x86, 0x18, 0x2, [{0x7, 0x12, "da15028d85e02b82611eaac2550d69e9"}]}, @rr={0x7, 0xb, 0xf8, [@rand_addr=0x64010100, @multicast2]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) (async) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x0, r13}, 0x10) (async) bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, r10, 0x0, r11}, 0x60) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xe}, {}, {0x7}}}, 0x24}}, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x80, 0x80, 0xc510, 0x4, {{0x1f, 0x4, 0x0, 0x2, 0x7c, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @local, {[@timestamp_prespec={0x44, 0x34, 0x2, 0x3, 0x8, [{@remote, 0x5}, {@local, 0x4306}, {@empty, 0x81}, {@multicast1, 0x2}, {@remote, 0x6}, {@empty, 0x6f}]}, @cipso={0x86, 0x33, 0xffffffffffffffff, [{0x7, 0x12, "64c46a22ae2b52cc7544e5a0bb482b91"}, {0x2, 0xa, "350e6da38df97eb3"}, {0x0, 0x9, "ad6d1dff86e497"}, {0x2, 0x8, "fe5b4c4a2162"}]}]}}}}}) sendmsg$nl_route(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=@getnexthop={0x5c, 0x6a, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_OIF={0x8, 0x5, r3}, @NHA_OIF={0x8, 0x5, r4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8}, @NHA_OIF={0x8, 0x5, r10}, @NHA_MASTER={0x8, 0xa, 0x2}, @NHA_OIF={0x8, 0x5, r14}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x20008c5) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 1.383405885s ago: executing program 3 (id=1174): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) 1.183358741s ago: executing program 3 (id=1175): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000380)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x18}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x18}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 349.234996ms ago: executing program 3 (id=1176): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)={0x3fc, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0x64, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'vxcan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x358, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xe3, 0x5, "c81a1eab4fd77da50478e6f5d52e459a270f171e6f8d54f6656bb91503d9487184d77fc0f59207af225178c66f0271782a9abc28429200f863f96e2d20bea903b3f12fd2162e542ad87160bfcb6f235398ae7e23119d56d8be488264c64d00fb38c553d61ba2bc50c9c44c295e1193d27fca8e3a48b90a96d26211315b0efb0e981078afcd247b483fa5484ea83dfaed391206adc91c976fd70e6a4413e018db562a149f838bc7e0c7800024097dce359775a2cb5c2634c4b31f2d17e17a49f526cf27d24ee2f98ddc55b65bb5300e237b477272c496d8b84ca6bbd6e7378d"}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "fcda8951"}, @ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "891b700a380dc9b51fe29d4d79aba7dc37c2366b23af7c39320da30aa6aad7af8f9a90756a6c1718d22c202d951b4ec2d99feab844426ef2070e580c261ff7ab501f83c706d2ba0816b172916094e372ebb47d701183555d1f54afd55a73fdf4f4fb2652ccda6fabf1dd0d25dfaff0560521ab38ce6f0ef823fd4f7a7b6f89ba23a05c3281b65dac67b517826e6329d972734de1c93ea4eabebb85e818b4170b8499f32561eaf8b567bcc0e2062dc9b3ed71bcf48a8f6c9fd98faeb97a525039146f10d213b0e3a0ba3085"}, @ETHTOOL_A_BITSET_VALUE={0xc6, 0x4, "2bf1c4d3709a70dd2eabe526fbedafe032c4d7b00f1878eb9dfa2c3ea39b121ef8114955038dc6f024d18aaca9e8ebc789f570aca71845e79f6767e4ca1378ab439d38044321822c19571e654a99d0030993eed43077aecf5c451861621feab44ba9cd8bff838e6c80085ff299e2b46d0f6d432c1883b77cc1b147f23c3c787482729ecd715304fd449587b4ee61c4b3423b71971f269bcf1bb49e2c9616dcbc0e1ad1a2a35814af69c403fa0ef48a7d1539caa75bc3045e8fb7647d55b8fb3efb20"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'eth\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '].\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-{}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x56}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syztnl1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x2c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc00}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0xc1}, 0x44084) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000062ffffffff73c74400009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000000053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32=r3, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r5], 0x24}}, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40054}, 0x20000080) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x828949ab3fe143d7, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0xf, 0x6, 0xfffffffa, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x700, 0x0, 0x2, 0x8}}) r9 = socket(0x40000000015, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r9, 0x114, 0x2, &(0x7f0000000680)={{0x0}, 0x0, 0x33}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001fc0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r13, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_deladdr={0x64, 0x15, 0x20, 0x70bd2c, 0x25dfdbfe, {0xa, 0x10, 0x2, 0xfe, r8}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x14, 0x1, @private2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x303}, @IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_FLAGS={0x8, 0x8, 0x280}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xa0, r3, 0xa, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7ff}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x40804) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x104, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff800}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdf0}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x18ade0aa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "a81d4a24088afc44a9128df82aa41b16e36f867d"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_PUBL={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x8000) shutdown(r6, 0x0) 0s ago: executing program 0 (id=1177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 66.693882][ T5851] cgroup: Unknown subsys name 'net' [ 66.848228][ T5851] cgroup: Unknown subsys name 'cpuset' [ 66.856865][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.222946][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.638957][ T5185] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.670358][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.679695][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.687678][ T5878] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.695774][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.714397][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.717132][ T5879] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.731030][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.731153][ T5882] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.747005][ T5882] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.756324][ T5882] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.764258][ T5882] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.773061][ T5882] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.781865][ T5882] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.789998][ T5882] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.798218][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.799733][ T5882] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.813538][ T5881] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.822958][ T5880] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.831830][ T5880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.840105][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.840225][ T5880] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.856972][ T5880] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.865292][ T5880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.888894][ T5880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.380253][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 71.449672][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.456783][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.654271][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 71.701120][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 71.733434][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 71.778970][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 71.887723][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.895239][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.902629][ T5869] bridge_slave_0: entered allmulticast mode [ 71.911390][ T5869] bridge_slave_0: entered promiscuous mode [ 71.929172][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.936802][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.943961][ T5867] bridge_slave_0: entered allmulticast mode [ 71.952021][ T5867] bridge_slave_0: entered promiscuous mode [ 71.970315][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.977592][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.984849][ T5869] bridge_slave_1: entered allmulticast mode [ 71.991780][ T5869] bridge_slave_1: entered promiscuous mode [ 72.012432][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.019594][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.027029][ T5867] bridge_slave_1: entered allmulticast mode [ 72.034813][ T5867] bridge_slave_1: entered promiscuous mode [ 72.147834][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.157048][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.164212][ T5862] bridge_slave_0: entered allmulticast mode [ 72.171825][ T5862] bridge_slave_0: entered promiscuous mode [ 72.191000][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.198366][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.205623][ T5872] bridge_slave_0: entered allmulticast mode [ 72.212525][ T5872] bridge_slave_0: entered promiscuous mode [ 72.223502][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.242107][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.251588][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.258863][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.266164][ T5862] bridge_slave_1: entered allmulticast mode [ 72.273496][ T5862] bridge_slave_1: entered promiscuous mode [ 72.280069][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.287902][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.295439][ T5872] bridge_slave_1: entered allmulticast mode [ 72.302324][ T5872] bridge_slave_1: entered promiscuous mode [ 72.311194][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.335205][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.442769][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.450161][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.457501][ T5865] bridge_slave_0: entered allmulticast mode [ 72.464448][ T5865] bridge_slave_0: entered promiscuous mode [ 72.486140][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.498892][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.511210][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.522317][ T5869] team0: Port device team_slave_0 added [ 72.528553][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.536173][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.543354][ T5865] bridge_slave_1: entered allmulticast mode [ 72.550664][ T5865] bridge_slave_1: entered promiscuous mode [ 72.572429][ T5867] team0: Port device team_slave_0 added [ 72.591937][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.619159][ T5869] team0: Port device team_slave_1 added [ 72.655071][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.666501][ T5867] team0: Port device team_slave_1 added [ 72.712128][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.719532][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.746137][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.761601][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.785369][ T5862] team0: Port device team_slave_0 added [ 72.793092][ T5872] team0: Port device team_slave_0 added [ 72.799774][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.807184][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.833102][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.870536][ T5862] team0: Port device team_slave_1 added [ 72.878222][ T5872] team0: Port device team_slave_1 added [ 72.885864][ T5880] Bluetooth: hci1: command tx timeout [ 72.891759][ T5880] Bluetooth: hci3: command tx timeout [ 72.897960][ T5876] Bluetooth: hci0: command tx timeout [ 72.904188][ T5880] Bluetooth: hci2: command tx timeout [ 72.932588][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.940036][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.966203][ T5880] Bluetooth: hci4: command tx timeout [ 72.966389][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.985132][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.992095][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.018240][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.053263][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.060802][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.087065][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.100657][ T5865] team0: Port device team_slave_0 added [ 73.140674][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.148335][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.174674][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.187593][ T5865] team0: Port device team_slave_1 added [ 73.202887][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.209933][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.237131][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.286116][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.293245][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.319557][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.331469][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.338556][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.365219][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.382564][ T5869] hsr_slave_0: entered promiscuous mode [ 73.389283][ T5869] hsr_slave_1: entered promiscuous mode [ 73.422590][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.429975][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.456161][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.544414][ T5867] hsr_slave_0: entered promiscuous mode [ 73.551556][ T5867] hsr_slave_1: entered promiscuous mode [ 73.558663][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 73.564473][ T5867] Cannot create hsr debugfs directory [ 73.576037][ T5872] hsr_slave_0: entered promiscuous mode [ 73.582356][ T5872] hsr_slave_1: entered promiscuous mode [ 73.588790][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 73.594526][ T5872] Cannot create hsr debugfs directory [ 73.627915][ T5865] hsr_slave_0: entered promiscuous mode [ 73.634624][ T5865] hsr_slave_1: entered promiscuous mode [ 73.641307][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 73.647397][ T5865] Cannot create hsr debugfs directory [ 73.712165][ T5862] hsr_slave_0: entered promiscuous mode [ 73.720035][ T5862] hsr_slave_1: entered promiscuous mode [ 73.726428][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 73.732162][ T5862] Cannot create hsr debugfs directory [ 74.250668][ T5869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.264850][ T5869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.299217][ T5869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.315298][ T5869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.375944][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.390148][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.413259][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.424419][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.489876][ T5872] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.509991][ T5872] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.520470][ T5872] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.552123][ T5872] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.616936][ T5867] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.640708][ T5867] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.652683][ T5867] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.668981][ T5867] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.834116][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.850504][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.860319][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.889211][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.900794][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.948722][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.966188][ T5880] Bluetooth: hci2: command tx timeout [ 74.978485][ T5880] Bluetooth: hci0: command tx timeout [ 74.978514][ T5882] Bluetooth: hci3: command tx timeout [ 74.989330][ T5876] Bluetooth: hci1: command tx timeout [ 75.002384][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.027005][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.045447][ T5882] Bluetooth: hci4: command tx timeout [ 75.054284][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.061666][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.071745][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.078976][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.110681][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.130821][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.161047][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.168175][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.180476][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.187641][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.218091][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.225275][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.248723][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.255914][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.273429][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.302696][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.321855][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.328988][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.356960][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.364075][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.423121][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.449758][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.512625][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.519869][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.562310][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.569781][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.952531][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.073384][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.156945][ T5869] veth0_vlan: entered promiscuous mode [ 76.199981][ T5869] veth1_vlan: entered promiscuous mode [ 76.258711][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.299331][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.337814][ T5865] veth0_vlan: entered promiscuous mode [ 76.362954][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.372586][ T5869] veth0_macvtap: entered promiscuous mode [ 76.408937][ T5865] veth1_vlan: entered promiscuous mode [ 76.421084][ T5869] veth1_macvtap: entered promiscuous mode [ 76.532308][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.563605][ T5872] veth0_vlan: entered promiscuous mode [ 76.587046][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.607039][ T5865] veth0_macvtap: entered promiscuous mode [ 76.631931][ T5872] veth1_vlan: entered promiscuous mode [ 76.642389][ T5862] veth0_vlan: entered promiscuous mode [ 76.676974][ T5865] veth1_macvtap: entered promiscuous mode [ 76.691627][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.711620][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.743084][ T5862] veth1_vlan: entered promiscuous mode [ 76.750732][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.777433][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.824222][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.841725][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.882379][ T1090] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.893846][ T1090] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.931684][ T1090] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.940641][ T1090] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.961077][ T5862] veth0_macvtap: entered promiscuous mode [ 76.970742][ T5872] veth0_macvtap: entered promiscuous mode [ 76.980453][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.989187][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.010021][ T5872] veth1_macvtap: entered promiscuous mode [ 77.034682][ T5862] veth1_macvtap: entered promiscuous mode [ 77.046431][ T5882] Bluetooth: hci3: command tx timeout [ 77.051897][ T5876] Bluetooth: hci1: command tx timeout [ 77.051931][ T5866] Bluetooth: hci2: command tx timeout [ 77.062865][ T5880] Bluetooth: hci0: command tx timeout [ 77.083363][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.091349][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.111174][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.126952][ T5880] Bluetooth: hci4: command tx timeout [ 77.136788][ T5867] veth0_vlan: entered promiscuous mode [ 77.148161][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.199624][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.213729][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.228542][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.240350][ T5869] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.248976][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.276892][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.288587][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.301885][ T5867] veth1_vlan: entered promiscuous mode [ 77.358775][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.384201][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.393062][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.402625][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.465707][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.480416][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.609089][ T199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.610971][ T5867] veth0_macvtap: entered promiscuous mode [ 77.624571][ T199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.657900][ T5867] veth1_macvtap: entered promiscuous mode [ 77.674418][ T5982] warning: `syz.0.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.704456][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.721748][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.802602][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.843416][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.871427][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.879879][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.910156][ T3562] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.931324][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.941786][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.982398][ T3562] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.004419][ T3562] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.066817][ T3562] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.119343][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.159353][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.213414][ T6000] veth0: entered promiscuous mode [ 78.279878][ T5999] veth0: left promiscuous mode [ 78.290340][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.299549][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.466799][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.479275][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.589470][ T6011] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10'. [ 78.882450][ T6025] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 79.126272][ T5880] Bluetooth: hci1: command tx timeout [ 79.131720][ T5880] Bluetooth: hci0: command tx timeout [ 79.137905][ T5866] Bluetooth: hci2: command tx timeout [ 79.143373][ T5866] Bluetooth: hci3: command tx timeout [ 79.206069][ T5866] Bluetooth: hci4: command tx timeout [ 79.285391][ T6043] Zero length message leads to an empty skb [ 79.422857][ T6045] syz.1.19 uses old SIOCAX25GETINFO [ 79.521852][ T6051] netlink: 'syz.2.22': attribute type 10 has an invalid length. [ 79.588880][ T6051] bridge0: port 3(team0) entered blocking state [ 79.631310][ T6051] bridge0: port 3(team0) entered disabled state [ 79.664532][ T6051] team0: entered allmulticast mode [ 79.684377][ T6051] team_slave_0: entered allmulticast mode [ 79.693826][ T6051] team_slave_1: entered allmulticast mode [ 79.709333][ T6051] team0: entered promiscuous mode [ 79.718435][ T6051] team_slave_0: entered promiscuous mode [ 79.724324][ T6051] team_slave_1: entered promiscuous mode [ 79.733150][ T6051] bridge0: port 3(team0) entered blocking state [ 79.739676][ T6051] bridge0: port 3(team0) entered forwarding state [ 79.739796][ T6062] netlink: 'syz.4.26': attribute type 11 has an invalid length. [ 79.802210][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 79.838320][ T6062] netlink: 'syz.4.26': attribute type 11 has an invalid length. [ 79.869806][ T6062] netlink: 224 bytes leftover after parsing attributes in process `syz.4.26'. [ 79.898373][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 80.023019][ T6075] bridge_slave_0: left allmulticast mode [ 80.031030][ T6075] bridge_slave_0: left promiscuous mode [ 80.040382][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.071657][ T6075] bridge_slave_1: left allmulticast mode [ 80.130059][ T6075] bridge_slave_1: left promiscuous mode [ 80.148570][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.161508][ T6088] syz.0.32 uses obsolete (PF_INET,SOCK_PACKET) [ 80.198038][ T6075] bond0: (slave bond_slave_0): Releasing backup interface [ 80.257097][ T6075] bond0: (slave bond_slave_1): Releasing backup interface [ 80.315490][ T6075] team0: Port device team_slave_0 removed [ 80.335240][ T6075] team0: Port device team_slave_1 removed [ 80.342093][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.350870][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.362002][ T6075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.371036][ T6075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.028798][ T6125] netlink: 60 bytes leftover after parsing attributes in process `syz.3.42'. [ 81.076056][ T6126] syzkaller0: entered promiscuous mode [ 81.081573][ T6126] syzkaller0: entered allmulticast mode [ 81.133195][ T6126] netlink: 212320 bytes leftover after parsing attributes in process `syz.0.40'. [ 81.472241][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.48'. [ 81.647590][ T6164] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.025523][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 82.073833][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 82.093639][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.56'. [ 82.110821][ T6180] netlink: zone id is out of range [ 82.116826][ T6180] netlink: del zone limit has 4 unknown bytes [ 82.371774][ T6186] vlan2: entered allmulticast mode [ 82.380201][ T6186] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 82.508467][ T6195] xfrm0: entered promiscuous mode [ 82.513541][ T6195] xfrm0: entered allmulticast mode [ 83.218258][ T6225] trusted_key: syz.3.73 sent an empty control message without MSG_MORE. [ 83.366080][ T6229] netlink: zone id is out of range [ 83.394627][ T6229] netlink: get zone limit has 8 unknown bytes [ 83.407169][ T6230] Bluetooth: MGMT ver 1.23 [ 83.480766][ T6238] tipc: MTU too low for tipc bearer [ 83.505532][ T6236] tipc: MTU too low for tipc bearer [ 83.602896][ T6244] __nla_validate_parse: 3 callbacks suppressed [ 83.602916][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.2.79'. [ 83.757344][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 83.779208][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 83.881477][ T6253] batadv_slave_0: entered promiscuous mode [ 83.993343][ T6252] batadv_slave_0: left promiscuous mode [ 84.280883][ T6274] syzkaller0: entered promiscuous mode [ 84.294872][ T6277] raw_sendmsg: syz.3.91 forgot to set AF_INET. Fix it! [ 84.304158][ T6274] syzkaller0: entered allmulticast mode [ 84.468831][ T6285] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.542298][ T6287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.94'. [ 84.719057][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 84.754970][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 84.789320][ T6289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'. [ 84.907799][ T6305] netlink: 36 bytes leftover after parsing attributes in process `syz.2.100'. [ 85.142713][ T6318] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 85.194875][ T6320] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 85.216313][ T6318] bridge0: port 3(team0) entered disabled state [ 85.279773][ T6318] team0: left allmulticast mode [ 85.298179][ T6318] team_slave_0: left allmulticast mode [ 85.303832][ T6318] team_slave_1: left allmulticast mode [ 85.331094][ T6318] team0: left promiscuous mode [ 85.338048][ T6318] team_slave_0: left promiscuous mode [ 85.344544][ T6318] team_slave_1: left promiscuous mode [ 85.345152][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.107'. [ 85.360363][ T6318] bridge0: port 3(team0) entered disabled state [ 85.385175][ T6318] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.429640][ T6318] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.444453][ T6316] netlink: 'syz.1.106': attribute type 29 has an invalid length. [ 85.541600][ T6337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.111'. [ 85.651116][ T6348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.661773][ T6328] syzkaller0: entered promiscuous mode [ 85.710214][ T6328] syzkaller0: entered allmulticast mode [ 86.822980][ T1177] cfg80211: failed to load regulatory.db [ 87.392576][ T6388] syz_tun: entered allmulticast mode [ 87.423246][ T6388] syz_tun: left allmulticast mode [ 87.585399][ T6407] nbd: must specify a device to reconfigure [ 88.004197][ T6421] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.244487][ T6443] Bluetooth: MGMT ver 1.23 [ 88.286923][ T6443] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 88.458185][ T6453] : renamed from bridge_slave_0 (while UP) [ 88.510199][ T6454] ip6gre1: entered allmulticast mode [ 88.600047][ T6460] bond0: entered promiscuous mode [ 88.643009][ T6460] bond_slave_0: entered promiscuous mode [ 88.687328][ T6460] bond_slave_1: entered promiscuous mode [ 88.712291][ T6460] bond0: left promiscuous mode [ 88.714290][ T6467] __nla_validate_parse: 14 callbacks suppressed [ 88.714306][ T6467] netlink: 40 bytes leftover after parsing attributes in process `syz.3.147'. [ 88.721694][ T6460] bond_slave_0: left promiscuous mode [ 88.751734][ T6460] bond_slave_1: left promiscuous mode [ 89.416656][ T6494] tipc: Started in network mode [ 89.421571][ T6494] tipc: Node identity 76ba043d558c, cluster identity 4711 [ 89.472806][ T6494] tipc: Enabled bearer , priority 0 [ 89.518331][ T6500] syzkaller0: entered promiscuous mode [ 89.526548][ T6500] syzkaller0: entered allmulticast mode [ 89.534209][ T6498] tipc: Started in network mode [ 89.539486][ T6498] tipc: Node identity 1221a154a5df, cluster identity 4711 [ 89.547821][ T6498] tipc: Enabled bearer , priority 0 [ 89.558232][ T6501] tipc: Enabling of bearer rejected, already enabled [ 89.576518][ T6494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.155'. [ 89.583517][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 89.607046][ T6498] syzkaller0: entered promiscuous mode [ 89.621786][ T6498] syzkaller0: entered allmulticast mode [ 89.653279][ T6494] tipc: Enabling of bearer rejected, already enabled [ 89.827231][ T6500] veth1_to_hsr: entered allmulticast mode [ 89.839417][ T6517] tipc: Failed to obtain node identity [ 89.858587][ T6517] tipc: Enabling of bearer rejected, failed to enable media [ 89.881192][ T6515] tipc: Resetting bearer [ 89.920642][ T6515] tipc: Disabling bearer [ 89.992006][ T6493] tipc: Resetting bearer [ 90.045972][ T6493] tipc: Disabling bearer [ 90.143208][ T5963] IPVS: starting estimator thread 0... [ 90.151282][ T6526] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 90.272826][ T6529] IPVS: using max 30 ests per chain, 72000 per kthread [ 90.682322][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'. [ 90.702589][ T6554] delete_channel: no stack [ 90.868585][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.177'. [ 91.037358][ T6573] tipc: Started in network mode [ 91.104821][ T6573] tipc: Node identity , cluster identity 4711 [ 91.146156][ T6573] tipc: Failed to obtain node identity [ 91.174946][ T6573] tipc: Enabling of bearer rejected, failed to enable media [ 91.581409][ T6588] ipvlan2: entered promiscuous mode [ 91.949334][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 91.960990][ T6603] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 91.994056][ T6605] tipc: Enabling of bearer rejected, failed to enable media [ 92.179702][ T6611] netlink: 104 bytes leftover after parsing attributes in process `syz.4.192'. [ 92.561563][ T6631] netlink: 144 bytes leftover after parsing attributes in process `syz.4.199'. [ 92.751935][ T6640] syzkaller0: entered promiscuous mode [ 92.772904][ T6640] syzkaller0: entered allmulticast mode [ 92.815061][ T6640] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 92.861702][ T6650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.203'. [ 93.025922][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'. [ 93.346400][ T6667] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 93.485379][ T6667] bond1: entered promiscuous mode [ 93.491006][ T6667] bond1: entered allmulticast mode [ 93.556402][ T6667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.805098][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 94.067759][ T6719] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.296673][ T6711] netlink: 'syz.3.221': attribute type 1 has an invalid length. [ 94.487540][ T6735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'. [ 94.534449][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 94.661810][ T6742] netlink: 'syz.1.231': attribute type 1 has an invalid length. [ 94.670620][ T6742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 94.680270][ T6738] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 94.689097][ T6738] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.229'. [ 94.817391][ T6754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.160398][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'. [ 95.218787][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 95.370907][ T6778] netlink: 40 bytes leftover after parsing attributes in process `syz.4.239'. [ 95.411348][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'. [ 95.438667][ T6773] netlink: 'syz.2.241': attribute type 10 has an invalid length. [ 95.457954][ T6787] team0: Device gtp0 is of different type [ 95.632630][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.246'. [ 95.655110][ T6773] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.058225][ T6822] netlink: 'syz.2.251': attribute type 3 has an invalid length. [ 96.078421][ T6822] netlink: 'syz.2.251': attribute type 1 has an invalid length. [ 96.194051][ T6822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.215285][ T6815] netlink: 'syz.4.249': attribute type 1 has an invalid length. [ 96.285860][ T6822] veth7: entered promiscuous mode [ 96.603548][ T6843] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 96.737512][ T6854] netlink: 'syz.1.261': attribute type 5 has an invalid length. [ 96.872864][ T6865] netlink: 'syz.0.266': attribute type 11 has an invalid length. [ 97.394180][ T6892] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.700602][ T6913] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 97.877168][ T30] audit: type=1804 audit(1758776427.985:2): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.282" name="/newroot/56/cgroup.controllers" dev="tmpfs" ino=303 res=1 errno=0 [ 97.941263][ T30] audit: type=1800 audit(1758776427.985:3): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="cgroup.controllers" dev="tmpfs" ino=303 res=0 errno=0 [ 97.964541][ T30] audit: type=1800 audit(1758776427.985:4): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="cgroup.controllers" dev="tmpfs" ino=303 res=0 errno=0 [ 98.085076][ T6935] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 98.422573][ T6958] : entered promiscuous mode [ 98.493337][ T6965] netlink: 'syz.3.295': attribute type 1 has an invalid length. [ 98.774428][ T6978] netlink: 'syz.2.302': attribute type 7 has an invalid length. [ 98.785697][ T6977] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 98.825392][ T6978] netlink: 'syz.2.302': attribute type 8 has an invalid length. [ 98.833088][ T6978] __nla_validate_parse: 23 callbacks suppressed [ 98.833104][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.302'. [ 99.125322][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.760871][ T7014] netlink: 36 bytes leftover after parsing attributes in process `syz.0.311'. [ 99.906886][ T7020] netlink: 24 bytes leftover after parsing attributes in process `syz.4.312'. [ 100.197478][ T7035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.315'. [ 100.650038][ T7063] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.810741][ T5866] Bluetooth: hci4: command tx timeout [ 101.020115][ T7082] IPVS: set_ctl: invalid protocol: 12 10.1.1.2:20002 [ 101.049194][ T7084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.326'. [ 101.104771][ T7084] netlink: 43 bytes leftover after parsing attributes in process `syz.0.326'. [ 101.129906][ T7084] netlink: 'syz.0.326': attribute type 5 has an invalid length. [ 101.162678][ T7084] netlink: 43 bytes leftover after parsing attributes in process `syz.0.326'. [ 101.316144][ T7097] netlink: 'syz.1.332': attribute type 1 has an invalid length. [ 101.342248][ T7097] netlink: 184 bytes leftover after parsing attributes in process `syz.1.332'. [ 101.372332][ T7097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.332'. [ 101.453068][ T7097] netlink: 'syz.1.332': attribute type 21 has an invalid length. [ 101.491442][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.332'. [ 102.507900][ T7129] "syz.3.341" (7129) uses obsolete ecb(arc4) skcipher [ 102.884919][ T5866] Bluetooth: hci4: command tx timeout [ 103.135332][ T7158] 8021q: VLANs not supported on ip_vti0 [ 104.050560][ T7193] __nla_validate_parse: 3 callbacks suppressed [ 104.050579][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.361'. [ 104.340323][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 104.372630][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 104.468107][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 104.761232][ T7225] tap0: tun_chr_ioctl cmd 2148553947 [ 105.144967][ T7210] sctp: [Deprecated]: syz.3.369 (pid 7210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.144967][ T7210] Use struct sctp_sack_info instead [ 105.181581][ T7242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 105.554923][ T7257] netlink: 'syz.1.379': attribute type 39 has an invalid length. [ 105.636171][ T7264] netlink: 32 bytes leftover after parsing attributes in process `syz.3.381'. [ 105.712478][ T7269] netlink: 44 bytes leftover after parsing attributes in process `syz.4.383'. [ 105.916466][ T7281] tipc: Can't bind to reserved service type 0 [ 106.285361][ T7290] nbd3: detected capacity change from 0 to 63 [ 106.308896][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.391'. [ 106.341210][ T7298] block nbd3: NBD_DISCONNECT [ 106.380411][ T7298] block nbd3: Disconnected due to user request. [ 106.405686][ T7298] block nbd3: shutting down sockets [ 106.414827][ T5884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.467102][ T5884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 106.482478][ T7309] syzkaller0: entered promiscuous mode [ 106.537724][ T7309] syzkaller0: entered allmulticast mode [ 106.555205][ T95] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 106.574721][ T95] Buffer I/O error on dev nbd3, logical block 1, async page read [ 106.582669][ T95] Buffer I/O error on dev nbd3, logical block 2, async page read [ 106.590967][ T95] Buffer I/O error on dev nbd3, logical block 3, async page read [ 106.625116][ T5884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.717628][ T5884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 106.772923][ T5884] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.798271][ T5884] Buffer I/O error on dev nbd3, logical block 1, async page read [ 106.831206][ T5884] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.868999][ T5884] Buffer I/O error on dev nbd3, logical block 2, async page read [ 106.909687][ T5884] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.922139][ T5884] Buffer I/O error on dev nbd3, logical block 3, async page read [ 106.934793][ T5884] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 106.953475][ T5884] Buffer I/O error on dev nbd3, logical block 0, async page read [ 106.964219][ T7330] netlink: 52 bytes leftover after parsing attributes in process `syz.0.398'. [ 106.984001][ T5884] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.012335][ T5884] Buffer I/O error on dev nbd3, logical block 1, async page read [ 107.045036][ T5884] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.054265][ T5884] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.128854][ T5884] ldm_validate_partition_table(): Disk read failed. [ 107.156610][ T5884] Dev nbd3: unable to read RDB block 0 [ 107.197864][ T5884] nbd3: unable to read partition table [ 107.229582][ T5884] ldm_validate_partition_table(): Disk read failed. [ 107.238248][ T5884] Dev nbd3: unable to read RDB block 0 [ 107.272546][ T5884] nbd3: unable to read partition table [ 107.323488][ T7346] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 107.670812][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 107.756095][ T7366] openvswitch: netlink: Flow actions attr not present in new flow. [ 107.902982][ T7377] openvswitch: netlink: Actions may not be safe on all matching packets [ 108.082634][ T7383] netlink: 'syz.4.417': attribute type 17 has an invalid length. [ 108.181685][ T7392] netlink: 'syz.3.421': attribute type 33 has an invalid length. [ 108.185717][ T7383] gretap0: entered promiscuous mode [ 108.241831][ T7383] gretap0: left promiscuous mode [ 108.292872][ T7402] netlink: 'syz.0.422': attribute type 15 has an invalid length. [ 108.609990][ T7418] netlink: 'syz.4.426': attribute type 3 has an invalid length. [ 108.674017][ T7421] netlink: 'syz.1.428': attribute type 6 has an invalid length. [ 108.736614][ T7421] netlink: 'syz.1.428': attribute type 5 has an invalid length. [ 108.745595][ T7425] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 108.779630][ T7428] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 108.884204][ T7436] openvswitch: netlink: Flow key attr not present in new flow. [ 108.969220][ T7440] sctp: [Deprecated]: syz.3.435 (pid 7440) Use of int in maxseg socket option. [ 108.969220][ T7440] Use struct sctp_assoc_value instead [ 109.170069][ T7443] netlink: 'syz.0.436': attribute type 2 has an invalid length. [ 109.359753][ T7457] __nla_validate_parse: 12 callbacks suppressed [ 109.359772][ T7457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 109.442310][ T7463] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 109.490396][ T7465] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 110.033255][ T7484] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.449'. [ 110.238918][ T7498] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 110.277691][ T7498] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 110.289560][ T7498] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 111.147212][ T7543] validate_nla: 2 callbacks suppressed [ 111.147231][ T7543] netlink: 'syz.1.463': attribute type 10 has an invalid length. [ 111.180717][ T7543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.463'. [ 111.196541][ T7543] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 111.243273][ T7543] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 111.284248][ T7543] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 111.460941][ T7557] netlink: 300 bytes leftover after parsing attributes in process `syz.4.466'. [ 111.586942][ T7564] netlink: 'syz.0.470': attribute type 9 has an invalid length. [ 111.591496][ T7562] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.469'. [ 111.609997][ T7562] netlink: 68 bytes leftover after parsing attributes in process `syz.3.469'. [ 111.644145][ T7564] netlink: 'syz.0.470': attribute type 9 has an invalid length. [ 111.722863][ T7569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.472'. [ 111.808679][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.473'. [ 111.921021][ T7576] pimreg3: entered allmulticast mode [ 112.334549][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.482'. [ 112.352801][ T7606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.482'. [ 112.785058][ T7629] netlink: 'syz.4.489': attribute type 29 has an invalid length. [ 113.000447][ T7641] xt_socket: unknown flags 0xe4 [ 113.058984][ T7646] netlink: 'syz.2.493': attribute type 21 has an invalid length. [ 113.059888][ T7649] openvswitch: netlink: IP tunnel TTL not specified. [ 113.077245][ T7646] IPv6: NLM_F_CREATE should be specified when creating new route [ 113.116658][ T7646] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.124135][ T7646] IPv6: NLM_F_CREATE should be set when creating new route [ 113.131610][ T7646] IPv6: NLM_F_CREATE should be set when creating new route [ 113.138905][ T7646] IPv6: NLM_F_CREATE should be set when creating new route [ 113.337862][ T7666] netlink: 'syz.0.499': attribute type 8 has an invalid length. [ 113.628598][ T7676] atomic_op ffff888022b22198 conn xmit_atomic 0000000000000000 [ 113.948902][ T7690] tipc: Started in network mode [ 113.967499][ T7690] tipc: Node identity 22530e07a0b9, cluster identity 4711 [ 113.991493][ T7690] tipc: Enabled bearer , priority 0 [ 114.043411][ T7696] syzkaller0: entered promiscuous mode [ 114.074828][ T7696] syzkaller0: entered allmulticast mode [ 114.152790][ T7689] tipc: Resetting bearer [ 114.227774][ T7689] tipc: Disabling bearer [ 114.583418][ T7729] __nla_validate_parse: 6 callbacks suppressed [ 114.583437][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 114.629299][ T7734] af_packet: tpacket_rcv: packet too big, clamped from 3614 to 4294967272. macoff=96 [ 114.656140][ T7738] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 114.781930][ T7735] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 115.150433][ T7762] netlink: 108 bytes leftover after parsing attributes in process `syz.2.526'. [ 115.295071][ T7768] netlink: 'syz.2.526': attribute type 10 has an invalid length. [ 115.390199][ T7768] team0: Device veth1_macvtap failed to register rx_handler [ 115.462432][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 115.484427][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 115.592452][ T59] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.625419][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.666652][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.718903][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.798280][ T7793] netlink: 'syz.1.534': attribute type 10 has an invalid length. [ 115.830960][ T7793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.534'. [ 115.882390][ T7793] dummy0: entered promiscuous mode [ 115.900097][ T7793] bridge0: port 3(dummy0) entered blocking state [ 115.932155][ T7793] bridge0: port 3(dummy0) entered disabled state [ 115.984163][ T7793] dummy0: entered allmulticast mode [ 116.014215][ T7793] bridge0: port 3(dummy0) entered blocking state [ 116.020789][ T7793] bridge0: port 3(dummy0) entered forwarding state [ 116.579236][ T7847] netlink: 'syz.4.545': attribute type 1 has an invalid length. [ 116.705512][ T7850] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.546'. [ 116.712517][ T7847] netlink: 224 bytes leftover after parsing attributes in process `syz.4.545'. [ 116.875335][ T5866] Bluetooth: hci4: link tx timeout [ 116.881037][ T5866] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.116537][ T7872] tipc: Enabling of bearer rejected, failed to enable media [ 117.281783][ T7882] netlink: 'syz.2.553': attribute type 21 has an invalid length. [ 117.305203][ T7882] netlink: 156 bytes leftover after parsing attributes in process `syz.2.553'. [ 117.352045][ T5880] Bluetooth: hci4: link tx timeout [ 117.358362][ T7886] netlink: 'syz.4.556': attribute type 42 has an invalid length. [ 117.365236][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.376212][ T5880] Bluetooth: hci4: link tx timeout [ 117.381351][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 117.609710][ T7896] netlink: 'syz.4.559': attribute type 1 has an invalid length. [ 117.651036][ T7896] netlink: 244 bytes leftover after parsing attributes in process `syz.4.559'. [ 117.941097][ T7910] geneve2: entered promiscuous mode [ 118.032590][ T7915] netlink: 'syz.2.565': attribute type 2 has an invalid length. [ 118.247370][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.273701][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.311603][ T5880] Bluetooth: hci4: link tx timeout [ 118.319031][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.334726][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.349456][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.359128][ T5880] Bluetooth: hci4: link tx timeout [ 118.365794][ T5880] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 118.967631][ T5880] Bluetooth: hci4: command 0x0406 tx timeout [ 119.177617][ T7979] team_slave_0: entered promiscuous mode [ 119.183531][ T7979] team_slave_1: entered promiscuous mode [ 119.208880][ T7979] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 119.237291][ T7979] team0: Device macvtap1 is already an upper device of the team interface [ 119.249771][ T7979] team_slave_0: left promiscuous mode [ 119.255329][ T7979] team_slave_1: left promiscuous mode [ 119.323905][ T7997] netlink: 'syz.0.581': attribute type 12 has an invalid length. [ 120.317793][ T8031] __nla_validate_parse: 12 callbacks suppressed [ 120.317812][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 120.358620][ T8031] netlink: 4 bytes leftover after parsing attributes in process `syz.0.589'. [ 120.366999][ T8033] tipc: Enabling of bearer rejected, failed to enable media [ 122.497737][ T8133] netlink: 'syz.2.611': attribute type 10 has an invalid length. [ 122.750175][ T5928] IPVS: starting estimator thread 0... [ 122.854843][ T8145] IPVS: using max 32 ests per chain, 76800 per kthread [ 122.861794][ T8151] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 123.381649][ T8166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.619'. [ 123.480644][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.622'. [ 123.508891][ T8173] netlink: 12 bytes leftover after parsing attributes in process `syz.4.622'. [ 123.670430][ T8182] netlink: 'syz.4.625': attribute type 1 has an invalid length. [ 123.687268][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 124.063445][ T8202] netlink: 24 bytes leftover after parsing attributes in process `syz.2.631'. [ 124.449991][ T8222] macsec0: entered promiscuous mode [ 124.465029][ T8222] macsec0: entered allmulticast mode [ 124.506776][ T8223] veth1_macvtap: entered allmulticast mode [ 124.512820][ T8223] macsec0: left promiscuous mode [ 124.528774][ T8223] macsec0: left allmulticast mode [ 124.533844][ T8223] veth1_macvtap: left allmulticast mode [ 124.739110][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.638'. [ 125.163187][ T8246] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.642'. [ 125.201686][ T8246] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.642'. [ 125.305516][ T8251] netlink: 'syz.3.644': attribute type 2 has an invalid length. [ 125.415456][ T8256] __nla_validate_parse: 1 callbacks suppressed [ 125.415475][ T8256] netlink: 10 bytes leftover after parsing attributes in process `syz.0.646'. [ 125.715808][ T8270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.649'. [ 126.220201][ T8288] syzkaller1: entered promiscuous mode [ 126.236101][ T8288] syzkaller1: entered allmulticast mode [ 126.416963][ T8292] netlink: 156 bytes leftover after parsing attributes in process `syz.3.657'. [ 126.435222][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 126.672934][ T8298] syzkaller1: entered promiscuous mode [ 126.692089][ T8298] syzkaller1: entered allmulticast mode [ 127.045293][ T8321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.665'. [ 127.064812][ T8321] netlink: 'syz.0.665': attribute type 7 has an invalid length. [ 127.072481][ T8321] netlink: 'syz.0.665': attribute type 8 has an invalid length. [ 127.104748][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.665'. [ 127.126482][ T8328] netlink: 'syz.2.666': attribute type 3 has an invalid length. [ 127.175604][ T8329] netlink: 'syz.3.667': attribute type 6 has an invalid length. [ 127.212906][ T8329] netlink: 'syz.3.667': attribute type 6 has an invalid length. [ 127.220942][ T8331] netlink: 'syz.4.668': attribute type 11 has an invalid length. [ 127.236205][ T8331] netlink: 'syz.4.668': attribute type 11 has an invalid length. [ 127.245756][ T8331] netlink: 224 bytes leftover after parsing attributes in process `syz.4.668'. [ 127.383159][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.672'. [ 127.684590][ T8372] syzkaller1: entered promiscuous mode [ 127.714827][ T8372] syzkaller1: entered allmulticast mode [ 127.774065][ T5965] IPVS: starting estimator thread 0... [ 127.866125][ T8379] IPVS: using max 34 ests per chain, 81600 per kthread [ 128.252066][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 129.166369][ T8442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.692'. [ 130.173577][ T8480] tipc: Enabled bearer , priority 0 [ 130.212058][ T8472] tipc: Resetting bearer [ 130.621498][ T8503] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 130.628335][ T8511] __nla_validate_parse: 13 callbacks suppressed [ 130.628354][ T8511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.707'. [ 131.205959][ T5963] tipc: Node number set to 3086917972 [ 133.114500][ T8472] tipc: Disabling bearer [ 133.431511][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 133.878598][ T8575] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 133.921640][ T8575] netlink: 232 bytes leftover after parsing attributes in process `syz.2.718'. [ 133.936703][ T8575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.718'. [ 133.969629][ T8576] netlink: 12 bytes leftover after parsing attributes in process `syz.3.719'. [ 134.148374][ T8589] : left allmulticast mode [ 134.168571][ T8589] : left promiscuous mode [ 134.173272][ T8589] bridge0: port 1() entered disabled state [ 134.200748][ T8595] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 134.263066][ T8589] bridge_slave_1: left allmulticast mode [ 134.313134][ T8589] bridge_slave_1: left promiscuous mode [ 134.353954][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.395947][ T8589] bond0: (slave bond_slave_0): Releasing backup interface [ 134.421594][ T8589] bond0: (slave bond_slave_1): Releasing backup interface [ 134.455917][ T8589] team0: Port device team_slave_0 removed [ 134.491739][ T8589] team0: Port device team_slave_1 removed [ 134.509701][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.532531][ T8589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.557384][ T8589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.574719][ T8589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.896970][ T8614] syzkaller1: entered promiscuous mode [ 134.902486][ T8614] syzkaller1: entered allmulticast mode [ 134.956672][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 134.976501][ T8630] netlink: 'syz.1.727': attribute type 33 has an invalid length. [ 134.979635][ T8624] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 134.991365][ T8630] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.727'. [ 135.019040][ T8624] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 135.040396][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 135.197796][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'. [ 135.225771][ T8639] netlink: 'syz.3.731': attribute type 4 has an invalid length. [ 135.409272][ T8645] netlink: 24 bytes leftover after parsing attributes in process `syz.1.734'. [ 135.538098][ T8657] netlink: 'syz.2.737': attribute type 1 has an invalid length. [ 135.739888][ T8663] netlink: 'syz.3.740': attribute type 13 has an invalid length. [ 135.747886][ T8663] __nla_validate_parse: 4 callbacks suppressed [ 135.747900][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 135.786685][ T8668] openvswitch: netlink: IPv4 tun info is not correct [ 135.810067][ T3562] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.824961][ T8663] netlink: 'syz.3.740': attribute type 13 has an invalid length. [ 135.850145][ T3562] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.865190][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 135.895216][ T3562] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.904969][ T8353] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.921624][ T8671] netlink: 'syz.1.744': attribute type 29 has an invalid length. [ 135.935149][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.744'. [ 136.022016][ T8677] bridge_slave_0: default FDB implementation only supports local addresses [ 136.131012][ T8682] nbd: device at index 1 is going down [ 136.152135][ T8684] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 136.185139][ T8684] netlink: 224 bytes leftover after parsing attributes in process `syz.3.749'. [ 136.240140][ T8684] nbd: illegal input index 1048576 [ 136.248790][ T8689] sit1: entered promiscuous mode [ 136.259641][ T8694] netlink: 'syz.0.752': attribute type 33 has an invalid length. [ 136.280329][ T8689] sit1: entered allmulticast mode [ 136.290716][ T8690] netlink: 'syz.4.751': attribute type 11 has an invalid length. [ 136.342870][ T8690] netlink: 224 bytes leftover after parsing attributes in process `syz.4.751'. [ 136.433667][ T5863] udevd[5863]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 136.573280][ T8709] veth5: entered allmulticast mode [ 136.672945][ T8710] smc: net device erspan0 applied user defined pnetid SYZ0 [ 136.723760][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.754'. [ 136.831593][ T8723] netlink: 'syz.0.757': attribute type 12 has an invalid length. [ 136.845128][ T8725] openvswitch: netlink: IPv4 tun info is not correct [ 137.172046][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 137.701564][ T8774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.766'. [ 137.854781][ T8784] netlink: 11 bytes leftover after parsing attributes in process `syz.0.770'. [ 137.909897][ T8785] netlink: 144268 bytes leftover after parsing attributes in process `syz.0.770'. [ 138.371789][ T8809] syzkaller1: entered promiscuous mode [ 138.389340][ T8809] syzkaller1: entered allmulticast mode [ 138.991413][ T8835] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 139.174793][ T8847] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 139.473941][ T8851] dvmrp1: entered allmulticast mode [ 140.010450][ T8880] validate_nla: 2 callbacks suppressed [ 140.010469][ T8880] netlink: 'syz.4.793': attribute type 1 has an invalid length. [ 140.034964][ T8880] nbd: error processing sock list [ 140.040137][ T8880] block nbd0: shutting down sockets [ 140.738969][ T8910] syzkaller0: entered promiscuous mode [ 140.754489][ T8910] syzkaller0: entered allmulticast mode [ 140.793430][ T8921] __nla_validate_parse: 74 callbacks suppressed [ 140.793448][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.1.807'. [ 142.289322][ T8939] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.812'. [ 142.542894][ T8956] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 142.563483][ T8956] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.615310][ T8956] bond0: (slave team0): Enslaving as an active interface with an up link [ 142.646529][ T8952] wg2: entered promiscuous mode [ 142.678918][ T8952] wg2: entered allmulticast mode [ 142.871709][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 142.935001][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 143.020552][ T8980] netlink: 'syz.3.825': attribute type 5 has an invalid length. [ 143.052259][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 143.063376][ T8983] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 143.074535][ T8983] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 143.084530][ T8983] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 143.098239][ T8983] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 143.110962][ T8983] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 143.138549][ T8983] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 143.182472][ T8983] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 143.388870][ T8996] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'. [ 143.606690][ T8997] veth9: entered promiscuous mode [ 143.705009][ T9008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.832'. [ 143.734009][ T9012] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 143.760472][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.836'. [ 143.769333][ T9015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.834'. [ 144.044295][ T9026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.838'. [ 144.533211][ T9055] team0: No ports can be present during mode change [ 144.902846][ T9055] infiniband syz0: set down [ 144.908692][ T9055] infiniband syz0: added ipvlan1 [ 144.968558][ T9055] RDS/IB: syz0: added [ 144.973280][ T9055] smc: adding ib device syz0 with port count 1 [ 144.979829][ T9055] smc: ib device syz0 port 1 has pnetid [ 145.606343][ T9092] FAULT_INJECTION: forcing a failure. [ 145.606343][ T9092] name failslab, interval 1, probability 0, space 0, times 1 [ 145.686202][ T9092] CPU: 1 UID: 0 PID: 9092 Comm: syz.2.860 Not tainted syzkaller #0 PREEMPT(full) [ 145.686227][ T9092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 145.686244][ T9092] Call Trace: [ 145.686251][ T9092] [ 145.686259][ T9092] dump_stack_lvl+0x189/0x250 [ 145.686288][ T9092] ? __pfx____ratelimit+0x10/0x10 [ 145.686306][ T9092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.686325][ T9092] ? __pfx__printk+0x10/0x10 [ 145.686352][ T9092] ? __pfx___might_resched+0x10/0x10 [ 145.686373][ T9092] should_fail_ex+0x414/0x560 [ 145.686401][ T9092] should_failslab+0xa8/0x100 [ 145.686425][ T9092] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 145.686447][ T9092] ? __alloc_skb+0x112/0x2d0 [ 145.686470][ T9092] __alloc_skb+0x112/0x2d0 [ 145.686491][ T9092] netlink_sendmsg+0x5c6/0xb30 [ 145.686520][ T9092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.686541][ T9092] ? aa_sock_msg_perm+0xf1/0x1d0 [ 145.686559][ T9092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.686575][ T9092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.686592][ T9092] __sock_sendmsg+0x219/0x270 [ 145.686616][ T9092] ____sys_sendmsg+0x505/0x830 [ 145.686640][ T9092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.686669][ T9092] ? import_iovec+0x74/0xa0 [ 145.686691][ T9092] ___sys_sendmsg+0x21f/0x2a0 [ 145.686714][ T9092] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.686768][ T9092] ? __fget_files+0x2a/0x420 [ 145.686782][ T9092] ? __fget_files+0x3a0/0x420 [ 145.686807][ T9092] __x64_sys_sendmsg+0x19b/0x260 [ 145.686828][ T9092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.686857][ T9092] ? __pfx_ksys_write+0x10/0x10 [ 145.686874][ T9092] ? rcu_is_watching+0x15/0xb0 [ 145.686895][ T9092] ? do_syscall_64+0xbe/0x3b0 [ 145.686916][ T9092] do_syscall_64+0xfa/0x3b0 [ 145.686932][ T9092] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.686949][ T9092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.686965][ T9092] ? clear_bhb_loop+0x60/0xb0 [ 145.686981][ T9092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.686997][ T9092] RIP: 0033:0x7fa9b898eec9 [ 145.687019][ T9092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.687030][ T9092] RSP: 002b:00007fa9b9812038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.687053][ T9092] RAX: ffffffffffffffda RBX: 00007fa9b8be5fa0 RCX: 00007fa9b898eec9 [ 145.687062][ T9092] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 145.687071][ T9092] RBP: 00007fa9b9812090 R08: 0000000000000000 R09: 0000000000000000 [ 145.687079][ T9092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.687086][ T9092] R13: 00007fa9b8be6038 R14: 00007fa9b8be5fa0 R15: 00007ffe3ada1fa8 [ 145.687105][ T9092] [ 145.968237][ T9097] __nla_validate_parse: 8 callbacks suppressed [ 145.968252][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.862'. [ 145.983377][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.862'. [ 146.233564][ T9104] validate_nla: 26 callbacks suppressed [ 146.233582][ T9104] netlink: 'syz.0.864': attribute type 2 has an invalid length. [ 146.349690][ T9112] batadv_slave_0: entered promiscuous mode [ 146.595765][ T9124] IPv6: sit1: Disabled Multicast RS [ 146.709551][ T9110] batadv_slave_0: left promiscuous mode [ 147.149512][ T9152] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 147.381720][ T9153] bond3: (slave bridge1): making interface the new active one [ 147.407112][ T9153] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 147.942803][ T9197] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 147.961855][ T9177] veth0_to_team: entered promiscuous mode [ 147.989778][ T9177] veth0_to_team: entered allmulticast mode [ 148.190898][ T9208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.890'. [ 148.211936][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.890'. [ 148.232574][ T9208] netlink: 31 bytes leftover after parsing attributes in process `syz.0.890'. [ 148.263090][ T9208] netlink: 'syz.0.890': attribute type 3 has an invalid length. [ 148.288341][ T9208] netlink: 31 bytes leftover after parsing attributes in process `syz.0.890'. [ 148.410117][ T10] IPVS: starting estimator thread 0... [ 148.514855][ T9214] IPVS: using max 29 ests per chain, 69600 per kthread [ 148.695153][ T10] IPVS: starting estimator thread 0... [ 148.794890][ T9229] IPVS: using max 33 ests per chain, 79200 per kthread [ 148.821982][ T9235] gretap0: entered promiscuous mode [ 148.834294][ T9235] vlan2: entered promiscuous mode [ 148.970263][ T8353] wlan1: Trigger new scan to find an IBSS to join [ 149.150768][ T9247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.900'. [ 149.620567][ T9272] netlink: 'syz.0.908': attribute type 11 has an invalid length. [ 149.658256][ T9272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.908'. [ 149.669063][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 149.683845][ T9270] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 149.701062][ T9270] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 149.742831][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.909'. [ 149.781188][ T9270] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 149.868726][ T9282] delete_channel: no stack [ 150.693994][ T9323] Unsupported ieee802154 address type: 0 [ 150.722172][ T9322] netlink: 'syz.2.923': attribute type 2 has an invalid length. [ 150.777070][ T9324] Bluetooth: MGMT ver 1.23 [ 150.845220][ T9323] erspan0: entered promiscuous mode [ 151.032130][ T9343] __nla_validate_parse: 3 callbacks suppressed [ 151.032148][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 151.084968][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 151.128205][ T9343] netlink: 'syz.4.930': attribute type 14 has an invalid length. [ 151.180871][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 151.250718][ T9343] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 151.450198][ T9361] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 151.459465][ T9361] netlink: 236 bytes leftover after parsing attributes in process `syz.1.935'. [ 151.794172][ T9378] netlink: 'syz.1.941': attribute type 11 has an invalid length. [ 151.817217][ T9378] netlink: 'syz.1.941': attribute type 11 has an invalid length. [ 151.838371][ T9378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.941'. [ 151.941529][ T9384] tipc: Started in network mode [ 151.947547][ T9384] tipc: Node identity 3294e3ca723e, cluster identity 4711 [ 151.963933][ T9384] tipc: Enabled bearer , priority 0 [ 151.982553][ T9384] syzkaller0: entered promiscuous mode [ 151.998356][ T9384] syzkaller0: entered allmulticast mode [ 152.019899][ T9384] tipc: Resetting bearer [ 152.078608][ T9381] tipc: Resetting bearer [ 152.159624][ T9381] tipc: Disabling bearer [ 152.493282][ T9408] netlink: 'syz.0.949': attribute type 21 has an invalid length. [ 152.546546][ T9408] netlink: 128 bytes leftover after parsing attributes in process `syz.0.949'. [ 152.588493][ T9408] netlink: 3 bytes leftover after parsing attributes in process `syz.0.949'. [ 152.673708][ T9423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.949'. [ 152.939820][ T9433] Illegal XDP return value 2567114062 on prog (id 189) dev syz_tun, expect packet loss! [ 153.460038][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 153.502302][ T9456] veth1_macvtap: left promiscuous mode [ 153.591055][ T9466] netlink: 180 bytes leftover after parsing attributes in process `syz.3.962'. [ 153.869304][ T9478] veth0: entered promiscuous mode [ 153.889759][ T9479] veth0: left promiscuous mode [ 153.985006][ T9477] veth0: entered promiscuous mode [ 154.059977][ T9475] veth0: left promiscuous mode [ 155.291387][ T9511] netlink: 'syz.4.974': attribute type 1 has an invalid length. [ 155.353639][ T9511] netlink: 'syz.4.974': attribute type 11 has an invalid length. [ 155.899266][ T9526] netlink: 'syz.4.978': attribute type 17 has an invalid length. [ 156.341542][ T9546] __nla_validate_parse: 8 callbacks suppressed [ 156.341561][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.983'. [ 156.539960][ T9557] netlink: 104 bytes leftover after parsing attributes in process `syz.3.986'. [ 156.574607][ T9563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 156.769456][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055914800: rx timeout, send abort [ 156.779163][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055916000: rx timeout, send abort [ 156.789298][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055914800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 156.804918][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055916000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 156.955905][ T9576] netlink: 'syz.1.992': attribute type 7 has an invalid length. [ 156.976215][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 157.045038][ T9576] netlink: 'syz.1.992': attribute type 8 has an invalid length. [ 157.079068][ T9585] netlink: 'syz.2.996': attribute type 22 has an invalid length. [ 157.092784][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 157.163426][ T9587] netlink: 64 bytes leftover after parsing attributes in process `syz.4.995'. [ 157.222142][ T9585] netlink: 'syz.2.996': attribute type 22 has an invalid length. [ 157.245462][ T8353] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.257970][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.996'. [ 157.273214][ T8353] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.326617][ T8353] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.350928][ T9594] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 157.379437][ T9598] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 157.397822][ T8353] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 157.482347][ T9601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 157.500200][ T9606] netlink: 'syz.2.1001': attribute type 16 has an invalid length. [ 157.508224][ T9606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1001'. [ 157.527560][ T9598] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 158.183331][ T9642] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.1012'. [ 158.803362][ T9682] vlan3: entered promiscuous mode [ 158.820747][ T9682] vlan3: entered allmulticast mode [ 158.839520][ T9682] hsr_slave_1: entered allmulticast mode [ 159.271081][ T9702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 159.278369][ T9702] IPv6: NLM_F_CREATE should be set when creating new route [ 159.478853][ T9708] IPVS: stopping backup sync thread 9712 ... [ 159.478887][ T9712] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 160.241237][ T9748] netlink: 'syz.3.1047': attribute type 21 has an invalid length. [ 160.286341][ T9748] netlink: 'syz.3.1047': attribute type 5 has an invalid length. [ 160.505184][ T9758] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 160.748018][ T9772] ªªªªªª: renamed from vlan0 (while UP) [ 161.505796][ T9798] FAULT_INJECTION: forcing a failure. [ 161.505796][ T9798] name failslab, interval 1, probability 0, space 0, times 0 [ 161.547846][ T9798] CPU: 0 UID: 0 PID: 9798 Comm: syz.2.1063 Not tainted syzkaller #0 PREEMPT(full) [ 161.547869][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.547878][ T9798] Call Trace: [ 161.547886][ T9798] [ 161.547893][ T9798] dump_stack_lvl+0x189/0x250 [ 161.547918][ T9798] ? __pfx____ratelimit+0x10/0x10 [ 161.547937][ T9798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.547956][ T9798] ? __pfx__printk+0x10/0x10 [ 161.547984][ T9798] ? __pfx___might_resched+0x10/0x10 [ 161.547999][ T9798] ? fs_reclaim_acquire+0x7d/0x100 [ 161.548020][ T9798] should_fail_ex+0x414/0x560 [ 161.548048][ T9798] should_failslab+0xa8/0x100 [ 161.548072][ T9798] __kmalloc_cache_noprof+0x70/0x3d0 [ 161.548100][ T9798] ? nft_trans_rule_add+0x59/0x440 [ 161.548127][ T9798] nft_trans_rule_add+0x59/0x440 [ 161.548152][ T9798] nf_tables_newrule+0x1b5e/0x2890 [ 161.548189][ T9798] ? __pfx_nf_tables_newrule+0x10/0x10 [ 161.548211][ T9798] ? nfnl_pernet+0x23/0x240 [ 161.548243][ T9798] ? __nla_parse+0x40/0x60 [ 161.548266][ T9798] nfnetlink_rcv+0x112f/0x2520 [ 161.548321][ T9798] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.548361][ T9798] ? ref_tracker_free+0x63a/0x7d0 [ 161.548405][ T9798] ? __netlink_deliver_tap+0x807/0x850 [ 161.548424][ T9798] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.548460][ T9798] netlink_unicast+0x82f/0x9e0 [ 161.548491][ T9798] ? __pfx_netlink_unicast+0x10/0x10 [ 161.548516][ T9798] ? netlink_sendmsg+0x642/0xb30 [ 161.548532][ T9798] ? skb_put+0x11b/0x210 [ 161.548554][ T9798] netlink_sendmsg+0x805/0xb30 [ 161.548582][ T9798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.548603][ T9798] ? aa_sock_msg_perm+0xf1/0x1d0 [ 161.548622][ T9798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.548640][ T9798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.548659][ T9798] __sock_sendmsg+0x219/0x270 [ 161.548686][ T9798] ____sys_sendmsg+0x505/0x830 [ 161.548712][ T9798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.548741][ T9798] ? import_iovec+0x74/0xa0 [ 161.548766][ T9798] ___sys_sendmsg+0x21f/0x2a0 [ 161.548788][ T9798] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.548845][ T9798] ? __fget_files+0x2a/0x420 [ 161.548859][ T9798] ? __fget_files+0x3a0/0x420 [ 161.548885][ T9798] __x64_sys_sendmsg+0x19b/0x260 [ 161.548909][ T9798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.548939][ T9798] ? __pfx_ksys_write+0x10/0x10 [ 161.548957][ T9798] ? rcu_is_watching+0x15/0xb0 [ 161.548980][ T9798] ? do_syscall_64+0xbe/0x3b0 [ 161.549002][ T9798] do_syscall_64+0xfa/0x3b0 [ 161.549018][ T9798] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.549035][ T9798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.549051][ T9798] ? clear_bhb_loop+0x60/0xb0 [ 161.549072][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.549093][ T9798] RIP: 0033:0x7fa9b898eec9 [ 161.549109][ T9798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.549122][ T9798] RSP: 002b:00007fa9b9812038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.549140][ T9798] RAX: ffffffffffffffda RBX: 00007fa9b8be5fa0 RCX: 00007fa9b898eec9 [ 161.549153][ T9798] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 161.549163][ T9798] RBP: 00007fa9b9812090 R08: 0000000000000000 R09: 0000000000000000 [ 161.549174][ T9798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.549183][ T9798] R13: 00007fa9b8be6038 R14: 00007fa9b8be5fa0 R15: 00007ffe3ada1fa8 [ 161.549213][ T9798] [ 162.139375][ T9803] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 162.150501][ T9803] bond1: left allmulticast mode [ 162.212079][ T9815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.221760][ T9821] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20003 [ 162.299957][ T9803] __nla_validate_parse: 19 callbacks suppressed [ 162.299975][ T9803] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1065'. [ 162.510936][ T9831] pim6reg1: entered promiscuous mode [ 162.517679][ T9831] pim6reg1: entered allmulticast mode [ 162.555775][ T9833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1072'. [ 162.740123][ T9837] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 163.181557][ T9847] vlan2: entered promiscuous mode [ 163.210831][ T9847] vlan2: entered allmulticast mode [ 163.250997][ T9847] hsr_slave_1: entered allmulticast mode [ 163.546930][ T9873] tipc: Enabling of bearer rejected, failed to enable media [ 163.842755][ T9890] validate_nla: 1 callbacks suppressed [ 163.842773][ T9890] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 164.002592][ T9899] IPVS: wlc: TCP 172.20.20.170:0 - no destination available [ 164.024261][ T9899] IPVS: wlc: TCP 172.20.20.170:0 - no destination available [ 164.078587][ T9903] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 164.089994][ T9890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.096925][ T9904] netlink: 'syz.4.1095': attribute type 4 has an invalid length. [ 164.097615][ T9904] GUP no longer grows the stack in syz.4.1095 (9904): 200000006000-200000008000 (200000005000) [ 164.114039][ T9890] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1091'. [ 164.130924][ T9904] CPU: 0 UID: 0 PID: 9904 Comm: syz.4.1095 Not tainted syzkaller #0 PREEMPT(full) [ 164.130948][ T9904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.130958][ T9904] Call Trace: [ 164.130965][ T9904] [ 164.130973][ T9904] dump_stack_lvl+0x189/0x250 [ 164.131000][ T9904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.131018][ T9904] ? __pfx__printk+0x10/0x10 [ 164.131037][ T9904] ? find_vma+0xe7/0x160 [ 164.131075][ T9904] __get_user_pages+0x24d0/0x2ce0 [ 164.131094][ T9904] ? __lock_acquire+0xab9/0xd20 [ 164.131145][ T9904] ? __gup_longterm_locked+0xc68/0x1660 [ 164.131173][ T9904] __gup_longterm_locked+0xde9/0x1660 [ 164.131208][ T9904] ? sanity_check_pinned_pages+0x123a/0x1300 [ 164.131238][ T9904] gup_fast_fallback+0x1e6a/0x2010 [ 164.131294][ T9904] ? __pfx_gup_fast_fallback+0x10/0x10 [ 164.131329][ T9904] ? pin_user_pages_fast+0x4d/0xb0 [ 164.131350][ T9904] iov_iter_extract_pages+0x35a/0x5e0 [ 164.131380][ T9904] extract_iter_to_sg+0xe46/0x24e0 [ 164.131414][ T9904] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 164.131434][ T9904] ? __local_bh_enable_ip+0x12d/0x1c0 [ 164.131451][ T9904] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.131471][ T9904] ? __local_bh_enable_ip+0x12d/0x1c0 [ 164.131488][ T9904] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 164.131512][ T9904] ? __asan_memset+0x22/0x50 [ 164.131534][ T9904] hash_sendmsg+0x4f4/0x11d0 [ 164.131581][ T9904] ? __pfx_hash_sendmsg+0x10/0x10 [ 164.131604][ T9904] __sock_sendmsg+0x219/0x270 [ 164.131630][ T9904] ____sys_sendmsg+0x52d/0x830 [ 164.131657][ T9904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.131688][ T9904] ? import_iovec+0x74/0xa0 [ 164.131712][ T9904] ___sys_sendmsg+0x21f/0x2a0 [ 164.131745][ T9904] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.131806][ T9904] ? __fget_files+0x2a/0x420 [ 164.131821][ T9904] ? __fget_files+0x3a0/0x420 [ 164.131849][ T9904] __sys_sendmmsg+0x227/0x430 [ 164.131876][ T9904] ? __pfx___sys_sendmmsg+0x10/0x10 [ 164.131893][ T9904] ? do_futex+0x333/0x420 [ 164.131923][ T9904] ? fd_install+0x97/0x540 [ 164.131967][ T9904] ? rcu_is_watching+0x15/0xb0 [ 164.131991][ T9904] __x64_sys_sendmmsg+0xa0/0xc0 [ 164.132014][ T9904] do_syscall_64+0xfa/0x3b0 [ 164.132031][ T9904] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.132048][ T9904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.132065][ T9904] ? clear_bhb_loop+0x60/0xb0 [ 164.132087][ T9904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.132103][ T9904] RIP: 0033:0x7fcd1818eec9 [ 164.132119][ T9904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.132133][ T9904] RSP: 002b:00007fcd1908f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 164.132153][ T9904] RAX: ffffffffffffffda RBX: 00007fcd183e5fa0 RCX: 00007fcd1818eec9 [ 164.132166][ T9904] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 000000000000000d [ 164.132177][ T9904] RBP: 00007fcd18211f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.132188][ T9904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.132199][ T9904] R13: 00007fcd183e6038 R14: 00007fcd183e5fa0 R15: 00007ffe636eed58 [ 164.132229][ T9904] [ 164.459752][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1095'. [ 164.473799][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 164.541344][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 164.650121][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1097'. [ 164.848537][ T8352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.870987][ T8352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.160385][ T9941] IPVS: set_ctl: invalid protocol: 43 10.1.1.1:20001 [ 165.607236][ T9953] syzkaller1: entered promiscuous mode [ 165.612748][ T9953] syzkaller1: entered allmulticast mode [ 165.651900][ T9953] netlink: 'syz.2.1111': attribute type 2 has an invalid length. [ 165.700547][ T9961] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 165.717033][ T9962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1112'. [ 165.717403][ T9961] netlink: 'syz.0.1113': attribute type 11 has an invalid length. [ 165.762551][ T9961] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1113'. [ 165.985924][ T9974] veth0: entered promiscuous mode [ 165.999710][ T9968] tipc: Enabled bearer , priority 0 [ 166.007575][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 166.008316][ T9968] syzkaller0: entered promiscuous mode [ 166.030893][ T9968] syzkaller0: entered allmulticast mode [ 166.220666][ T9968] tipc: Resetting bearer [ 166.247662][ T9967] tipc: Resetting bearer [ 166.354194][ T9967] tipc: Disabling bearer [ 166.680547][T10009] netlink: 'syz.3.1128': attribute type 10 has an invalid length. [ 167.002025][T10009] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 167.439015][ T3562] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.625898][ T3562] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.773548][ T3562] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.057673][ T3562] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.120319][T10061] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.146913][T10063] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 168.319525][T10067] sit0: entered promiscuous mode [ 168.364066][T10067] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 168.415204][T10067] __nla_validate_parse: 3 callbacks suppressed [ 168.415221][T10067] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1143'. [ 168.509303][T10073] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 168.595161][T10075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 168.722576][ T5880] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.738375][ T5880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 168.740712][T10073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 168.746946][ T5880] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.753820][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 168.769287][ T5880] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.772034][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 168.788640][ T5880] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.791265][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 168.803995][ T5880] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.805580][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.989303][T10076] bond4: (slave veth0_to_bond): making interface the new active one [ 169.042102][T10076] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 169.277878][ T3562] dummy0: left allmulticast mode [ 169.298783][ T3562] bridge0: port 3(dummy0) entered disabled state [ 169.328475][T10103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 169.406313][ T3562] bridge_slave_1: left allmulticast mode [ 169.427673][ T3562] bridge_slave_1: left promiscuous mode [ 169.433731][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.467195][T10106] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1151'. [ 169.519448][ T3562] bridge_slave_0: left allmulticast mode [ 169.549920][ T3562] bridge_slave_0: left promiscuous mode [ 169.578028][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.818482][T10121] FAULT_INJECTION: forcing a failure. [ 169.818482][T10121] name failslab, interval 1, probability 0, space 0, times 0 [ 169.863079][T10121] CPU: 1 UID: 0 PID: 10121 Comm: syz.0.1154 Not tainted syzkaller #0 PREEMPT(full) [ 169.863105][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.863115][T10121] Call Trace: [ 169.863122][T10121] [ 169.863130][T10121] dump_stack_lvl+0x189/0x250 [ 169.863154][T10121] ? __pfx____ratelimit+0x10/0x10 [ 169.863173][T10121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.863192][T10121] ? __pfx__printk+0x10/0x10 [ 169.863216][T10121] ? __pfx___might_resched+0x10/0x10 [ 169.863232][T10121] ? fs_reclaim_acquire+0x7d/0x100 [ 169.863253][T10121] should_fail_ex+0x414/0x560 [ 169.863280][T10121] should_failslab+0xa8/0x100 [ 169.863303][T10121] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 169.863324][T10121] ? __alloc_skb+0x112/0x2d0 [ 169.863345][T10121] __alloc_skb+0x112/0x2d0 [ 169.863367][T10121] nf_tables_rule_notify+0xc0/0x570 [ 169.863398][T10121] nf_tables_commit+0x1b06/0x8710 [ 169.863446][T10121] ? __pfx_nf_tables_commit+0x10/0x10 [ 169.863472][T10121] ? free_large_kmalloc+0x13a/0x1f0 [ 169.863497][T10121] ? nf_tables_newrule+0x23bc/0x2890 [ 169.863533][T10121] ? __pfx_nf_tables_newrule+0x10/0x10 [ 169.863576][T10121] nfnetlink_rcv+0x1a4e/0x2520 [ 169.863630][T10121] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 169.863670][T10121] ? ref_tracker_free+0x63a/0x7d0 [ 169.863717][T10121] ? __netlink_deliver_tap+0x807/0x850 [ 169.863736][T10121] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.863772][T10121] netlink_unicast+0x82f/0x9e0 [ 169.863802][T10121] ? __pfx_netlink_unicast+0x10/0x10 [ 169.863827][T10121] ? netlink_sendmsg+0x642/0xb30 [ 169.863842][T10121] ? skb_put+0x11b/0x210 [ 169.863865][T10121] netlink_sendmsg+0x805/0xb30 [ 169.863901][T10121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.863921][T10121] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.863940][T10121] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.863958][T10121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.863975][T10121] __sock_sendmsg+0x219/0x270 [ 169.864002][T10121] ____sys_sendmsg+0x505/0x830 [ 169.864029][T10121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.864057][T10121] ? import_iovec+0x74/0xa0 [ 169.864084][T10121] ___sys_sendmsg+0x21f/0x2a0 [ 169.864107][T10121] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.864162][T10121] ? __fget_files+0x2a/0x420 [ 169.864174][T10121] ? __fget_files+0x3a0/0x420 [ 169.864196][T10121] __x64_sys_sendmsg+0x19b/0x260 [ 169.864218][T10121] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.864248][T10121] ? __pfx_ksys_write+0x10/0x10 [ 169.864266][T10121] ? rcu_is_watching+0x15/0xb0 [ 169.864287][T10121] ? do_syscall_64+0xbe/0x3b0 [ 169.864310][T10121] do_syscall_64+0xfa/0x3b0 [ 169.864326][T10121] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.864344][T10121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.864359][T10121] ? clear_bhb_loop+0x60/0xb0 [ 169.864379][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.864393][T10121] RIP: 0033:0x7f5129f8eec9 [ 169.864409][T10121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.864422][T10121] RSP: 002b:00007f512ae44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.864441][T10121] RAX: ffffffffffffffda RBX: 00007f512a1e5fa0 RCX: 00007f5129f8eec9 [ 169.864453][T10121] RDX: 0000000000040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 169.864464][T10121] RBP: 00007f512ae44090 R08: 0000000000000000 R09: 0000000000000000 [ 169.864474][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.864484][T10121] R13: 00007f512a1e6038 R14: 00007f512a1e5fa0 R15: 00007ffc0b30f928 [ 169.864514][T10121] [ 170.490388][T10136] netlink: 'syz.0.1158': attribute type 1 has an invalid length. [ 170.746005][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.758053][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.769790][ T3562] bond0 (unregistering): Released all slaves [ 170.782431][ T3562] bond1 (unregistering): Released all slaves [ 170.795488][ T3562] bond2 (unregistering): Released all slaves [ 170.809016][ T3562] bond3 (unregistering): Released all slaves [ 170.822858][ T3562] bond4 (unregistering): Released all slaves [ 170.839275][ T3562] bond5 (unregistering): Released all slaves [ 170.854220][ T3562] bond6 (unregistering): Released all slaves [ 170.871773][ T3562] bond7 (unregistering): Released all slaves [ 170.886028][ T5882] Bluetooth: hci0: command tx timeout [ 170.887592][ T3562] bond8 (unregistering): Released all slaves [ 170.892256][ T5866] Bluetooth: hci4: command tx timeout [ 170.922584][ T3562] bond9 (unregistering): Released all slaves [ 170.942056][ T3562] bond10 (unregistering): Released all slaves [ 170.955480][ T3562] bond11 (unregistering): Released all slaves [ 170.969929][ T3562] bond12 (unregistering): Released all slaves [ 170.982836][ T3562] bond13 (unregistering): Released all slaves [ 170.998693][ T3562] bond14 (unregistering): Released all slaves [ 171.026222][T10124] veth0: entered promiscuous mode [ 171.052283][T10136] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 171.198779][T10128] veth0: left promiscuous mode [ 171.260881][ T3562] tipc: Left network mode [ 171.447738][T10147] veth3: entered allmulticast mode [ 171.972476][T10178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1163'. [ 172.591132][T10195] netlink: 'syz.4.1167': attribute type 6 has an invalid length. [ 172.663987][T10077] chnl_net:caif_netlink_parms(): no params data found [ 172.786637][T10211] xt_l2tp: v2 sid > 0xffff: 1114112 [ 172.964773][ T5882] Bluetooth: hci0: command tx timeout [ 172.980170][ T5882] Bluetooth: hci4: command tx timeout [ 173.209519][T10214] syzkaller1: entered promiscuous mode [ 173.224842][T10214] syzkaller1: entered allmulticast mode [ 173.283930][ T3562] hsr_slave_0: left promiscuous mode [ 173.296940][T10237] netlink: 'syz.3.1174': attribute type 1 has an invalid length. [ 173.306202][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.313625][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.320884][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'. [ 173.340308][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.354951][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.470276][ T3562] veth1_macvtap: left promiscuous mode [ 173.476385][ T3562] veth0_macvtap: left promiscuous mode [ 173.485428][ T3562] veth1_vlan: left promiscuous mode [ 173.490843][ T3562] veth0_vlan: left promiscuous mode [ 173.801466][ T12] smc: removing ib device syz0 [ 174.185264][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 174.253250][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 174.304512][T10250] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1176'. [ 174.678158][ T5965] ================================================================== [ 174.686260][ T5965] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 174.695025][ T5965] Read of size 8 at addr ffff888056a642e8 by task kworker/0:7/5965 [ 174.702919][ T5965] [ 174.705242][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 174.705264][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.705276][ T5965] Workqueue: events smc_ib_port_event_work [ 174.705304][ T5965] Call Trace: [ 174.705311][ T5965] [ 174.705320][ T5965] dump_stack_lvl+0x189/0x250 [ 174.705339][ T5965] ? rcu_is_watching+0x15/0xb0 [ 174.705354][ T5965] ? __kasan_check_byte+0x12/0x40 [ 174.705375][ T5965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.705392][ T5965] ? rcu_is_watching+0x15/0xb0 [ 174.705408][ T5965] ? lock_release+0x4b/0x3e0 [ 174.705430][ T5965] ? __virt_addr_valid+0x1c8/0x5c0 [ 174.705449][ T5965] ? __virt_addr_valid+0x4a5/0x5c0 [ 174.705468][ T5965] print_report+0xca/0x240 [ 174.705484][ T5965] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 174.705503][ T5965] kasan_report+0x118/0x150 [ 174.705524][ T5965] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 174.705547][ T5965] __ethtool_get_link_ksettings+0x6e/0x190 [ 174.705567][ T5965] ib_get_eth_speed+0x15e/0x7b0 [ 174.705587][ T5965] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 174.705615][ T5965] ? do_raw_spin_unlock+0x122/0x240 [ 174.705637][ T5965] rxe_query_port+0x93/0x3b0 [ 174.705655][ T5965] ib_query_port+0x16d/0x830 [ 174.705678][ T5965] smc_ib_port_event_work+0x15a/0x940 [ 174.705704][ T5965] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.705719][ T5965] ? process_scheduled_works+0x9ef/0x17b0 [ 174.705735][ T5965] ? process_scheduled_works+0x9ef/0x17b0 [ 174.705751][ T5965] process_scheduled_works+0xae1/0x17b0 [ 174.705779][ T5965] ? __pfx_process_scheduled_works+0x10/0x10 [ 174.705802][ T5965] worker_thread+0x8a0/0xda0 [ 174.705819][ T5965] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.705844][ T5965] ? __kthread_parkme+0x7b/0x200 [ 174.705865][ T5965] kthread+0x70e/0x8a0 [ 174.705885][ T5965] ? __pfx_worker_thread+0x10/0x10 [ 174.705900][ T5965] ? __pfx_kthread+0x10/0x10 [ 174.705918][ T5965] ? _raw_spin_unlock_irq+0x23/0x50 [ 174.705933][ T5965] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.705949][ T5965] ? __pfx_kthread+0x10/0x10 [ 174.705966][ T5965] ret_from_fork+0x439/0x7d0 [ 174.705983][ T5965] ? __pfx_ret_from_fork+0x10/0x10 [ 174.706001][ T5965] ? __switch_to_asm+0x39/0x70 [ 174.706019][ T5965] ? __switch_to_asm+0x33/0x70 [ 174.706036][ T5965] ? __pfx_kthread+0x10/0x10 [ 174.706054][ T5965] ret_from_fork_asm+0x1a/0x30 [ 174.706079][ T5965] [ 174.706085][ T5965] [ 174.938821][ T5965] Allocated by task 5862: [ 174.943130][ T5965] kasan_save_track+0x3e/0x80 [ 174.947794][ T5965] __kasan_kmalloc+0x93/0xb0 [ 174.952368][ T5965] __kvmalloc_node_noprof+0x30d/0x5f0 [ 174.957731][ T5965] alloc_netdev_mqs+0xa3/0x11b0 [ 174.962568][ T5965] rtnl_create_link+0x31f/0xd10 [ 174.967404][ T5965] rtnl_newlink_create+0x25c/0xb00 [ 174.972497][ T5965] rtnl_newlink+0x16d6/0x1c70 [ 174.977151][ T5965] rtnetlink_rcv_msg+0x7cf/0xb70 [ 174.982069][ T5965] netlink_rcv_skb+0x208/0x470 [ 174.986812][ T5965] netlink_unicast+0x82f/0x9e0 [ 174.991567][ T5965] netlink_sendmsg+0x805/0xb30 [ 174.996310][ T5965] __sock_sendmsg+0x219/0x270 [ 175.000972][ T5965] __sys_sendto+0x3bd/0x520 [ 175.005461][ T5965] __x64_sys_sendto+0xde/0x100 [ 175.010232][ T5965] do_syscall_64+0xfa/0x3b0 [ 175.014732][ T5965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.020630][ T5965] [ 175.022936][ T5965] Freed by task 3562: [ 175.026895][ T5965] kasan_save_track+0x3e/0x80 [ 175.031561][ T5965] kasan_save_free_info+0x46/0x50 [ 175.036576][ T5965] __kasan_slab_free+0x5b/0x80 [ 175.041327][ T5965] kfree+0x18e/0x440 [ 175.045204][ T5965] device_release+0x9c/0x1c0 [ 175.049785][ T5965] kobject_put+0x22b/0x480 [ 175.054184][ T5965] netdev_run_todo+0xd2e/0xea0 [ 175.058931][ T5965] default_device_exit_batch+0x81e/0x890 [ 175.064542][ T5965] ops_undo_list+0x525/0x990 [ 175.069124][ T5965] cleanup_net+0x4c5/0x800 [ 175.073521][ T5965] process_scheduled_works+0xae1/0x17b0 [ 175.079047][ T5965] worker_thread+0x8a0/0xda0 [ 175.083615][ T5965] kthread+0x70e/0x8a0 [ 175.087663][ T5965] ret_from_fork+0x439/0x7d0 [ 175.092236][ T5965] ret_from_fork_asm+0x1a/0x30 [ 175.096985][ T5965] [ 175.099300][ T5965] The buggy address belongs to the object at ffff888056a64000 [ 175.099300][ T5965] which belongs to the cache kmalloc-cg-4k of size 4096 [ 175.113596][ T5965] The buggy address is located 744 bytes inside of [ 175.113596][ T5965] freed 4096-byte region [ffff888056a64000, ffff888056a65000) [ 175.127468][ T5965] [ 175.129781][ T5965] The buggy address belongs to the physical page: [ 175.136181][ T5965] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56a60 [ 175.144929][ T5965] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 175.153421][ T5965] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 175.160952][ T5965] page_type: f5(slab) [ 175.164919][ T5965] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 175.173480][ T5965] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 175.182043][ T5965] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 175.190697][ T5965] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 175.199347][ T5965] head: 00fff00000000003 ffffea00015a9801 00000000ffffffff 00000000ffffffff [ 175.208000][ T5965] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 175.216648][ T5965] page dumped because: kasan: bad access detected [ 175.223050][ T5965] page_owner tracks the page as allocated [ 175.228741][ T5965] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5872, tgid 5872 (syz-executor), ts 73939649073, free_ts 22333374721 [ 175.250078][ T5965] post_alloc_hook+0x240/0x2a0 [ 175.254832][ T5965] get_page_from_freelist+0x21e4/0x22c0 [ 175.260355][ T5965] __alloc_frozen_pages_noprof+0x181/0x370 [ 175.266139][ T5965] alloc_pages_mpol+0x232/0x4a0 [ 175.270970][ T5965] allocate_slab+0x8a/0x370 [ 175.275451][ T5965] ___slab_alloc+0xbeb/0x1420 [ 175.280123][ T5965] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 175.286520][ T5965] kmemdup_noprof+0x2b/0x70 [ 175.291008][ T5965] __addrconf_sysctl_register+0x9e/0x4c0 [ 175.296625][ T5965] addrconf_sysctl_register+0x168/0x1c0 [ 175.302413][ T5965] ipv6_add_dev+0xd46/0x1370 [ 175.306983][ T5965] addrconf_notify+0x794/0x1010 [ 175.311837][ T5965] notifier_call_chain+0x1b3/0x3e0 [ 175.316934][ T5965] register_netdevice+0x1608/0x1ae0 [ 175.322133][ T5965] macvlan_common_newlink+0x120a/0x1980 [ 175.327665][ T5965] rtnl_newlink_create+0x310/0xb00 [ 175.332758][ T5965] page last free pid 1 tgid 1 stack trace: [ 175.338546][ T5965] __free_frozen_pages+0xbc4/0xd30 [ 175.343643][ T5965] free_contig_range+0x1bd/0x4a0 [ 175.348562][ T5965] destroy_args+0x69/0x660 [ 175.352958][ T5965] debug_vm_pgtable+0x39f/0x3b0 [ 175.357791][ T5965] do_one_initcall+0x233/0x820 [ 175.362565][ T5965] do_initcall_level+0x104/0x190 [ 175.367482][ T5965] do_initcalls+0x59/0xa0 [ 175.371790][ T5965] kernel_init_freeable+0x334/0x4b0 [ 175.376974][ T5965] kernel_init+0x1d/0x1d0 [ 175.381285][ T5965] ret_from_fork+0x439/0x7d0 [ 175.385854][ T5965] ret_from_fork_asm+0x1a/0x30 [ 175.390612][ T5965] [ 175.392916][ T5965] Memory state around the buggy address: [ 175.398524][ T5965] ffff888056a64180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.406568][ T5965] ffff888056a64200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.414609][ T5965] >ffff888056a64280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.422655][ T5965] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 175.430092][ T5965] ffff888056a64300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.438144][ T5965] ffff888056a64380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 175.446186][ T5965] ================================================================== [ 175.473617][ T5882] Bluetooth: hci4: command tx timeout [ 175.479321][ T5882] Bluetooth: hci0: command tx timeout [ 175.494759][ T5965] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 175.501983][ T5965] CPU: 0 UID: 0 PID: 5965 Comm: kworker/0:7 Not tainted syzkaller #0 PREEMPT(full) [ 175.511355][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 175.521417][ T5965] Workqueue: events smc_ib_port_event_work [ 175.527246][ T5965] Call Trace: [ 175.530534][ T5965] [ 175.533472][ T5965] dump_stack_lvl+0x99/0x250 [ 175.538074][ T5965] ? __asan_memcpy+0x40/0x70 [ 175.542670][ T5965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.547868][ T5965] ? __pfx__printk+0x10/0x10 [ 175.552469][ T5965] vpanic+0x281/0x750 [ 175.556453][ T5965] ? preempt_schedule+0xae/0xc0 [ 175.561296][ T5965] ? __pfx_vpanic+0x10/0x10 [ 175.565784][ T5965] ? preempt_schedule_common+0x83/0xd0 [ 175.571225][ T5965] ? preempt_schedule+0xae/0xc0 [ 175.576056][ T5965] ? __pfx_preempt_schedule+0x10/0x10 [ 175.581410][ T5965] panic+0xb9/0xc0 [ 175.585121][ T5965] ? __pfx_panic+0x10/0x10 [ 175.589535][ T5965] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 175.595418][ T5965] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 175.601392][ T5965] check_panic_on_warn+0x89/0xb0 [ 175.606321][ T5965] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 175.612312][ T5965] end_report+0x78/0x160 [ 175.616544][ T5965] kasan_report+0x129/0x150 [ 175.621045][ T5965] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 175.627032][ T5965] __ethtool_get_link_ksettings+0x6e/0x190 [ 175.632839][ T5965] ib_get_eth_speed+0x15e/0x7b0 [ 175.637680][ T5965] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 175.643044][ T5965] ? do_raw_spin_unlock+0x122/0x240 [ 175.648236][ T5965] rxe_query_port+0x93/0x3b0 [ 175.652853][ T5965] ib_query_port+0x16d/0x830 [ 175.657443][ T5965] smc_ib_port_event_work+0x15a/0x940 [ 175.662811][ T5965] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.667993][ T5965] ? process_scheduled_works+0x9ef/0x17b0 [ 175.673696][ T5965] ? process_scheduled_works+0x9ef/0x17b0 [ 175.679509][ T5965] process_scheduled_works+0xae1/0x17b0 [ 175.685239][ T5965] ? __pfx_process_scheduled_works+0x10/0x10 [ 175.691209][ T5965] worker_thread+0x8a0/0xda0 [ 175.695788][ T5965] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 175.702109][ T5965] ? __kthread_parkme+0x7b/0x200 [ 175.707052][ T5965] kthread+0x70e/0x8a0 [ 175.711109][ T5965] ? __pfx_worker_thread+0x10/0x10 [ 175.716204][ T5965] ? __pfx_kthread+0x10/0x10 [ 175.720783][ T5965] ? _raw_spin_unlock_irq+0x23/0x50 [ 175.725965][ T5965] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.731153][ T5965] ? __pfx_kthread+0x10/0x10 [ 175.735730][ T5965] ret_from_fork+0x439/0x7d0 [ 175.740333][ T5965] ? __pfx_ret_from_fork+0x10/0x10 [ 175.745427][ T5965] ? __switch_to_asm+0x39/0x70 [ 175.750176][ T5965] ? __switch_to_asm+0x33/0x70 [ 175.754922][ T5965] ? __pfx_kthread+0x10/0x10 [ 175.759495][ T5965] ret_from_fork_asm+0x1a/0x30 [ 175.764259][ T5965] [ 175.767526][ T5965] Kernel Offset: disabled [ 175.771837][ T5965] Rebooting in 86400 seconds..