last executing test programs: 2.588729384s ago: executing program 2 (id=45): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCGARP(r0, 0x8917, &(0x7f0000000040)={{0x2, 0x4e24, @broadcast}, {0x1e05e27efe5078f7, @remote}, 0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 'syzkaller0\x00'}) 2.336851202s ago: executing program 3 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r0}, 0x0, 0x0}, 0x20) 2.172878937s ago: executing program 0 (id=51): unshare(0x2c020400) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f00000000c0)) 2.068716828s ago: executing program 3 (id=52): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.024840384s ago: executing program 2 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000300)="78ec86a6d33f0aa2be41d78ceca4", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.932957349s ago: executing program 4 (id=55): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1.898496143s ago: executing program 0 (id=56): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0xffffffffffffffa7}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) 1.532968607s ago: executing program 0 (id=58): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) 1.514728796s ago: executing program 1 (id=59): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="183c7613b01d66571e583e7c88a85f6886dd", 0x12, 0x40080, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) 997.664426ms ago: executing program 2 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000003c0)=ANY=[], 0xdc) 944.664295ms ago: executing program 1 (id=61): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x230, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, 0xff, 0xff, 'macvlan0\x00', 'pim6reg\x00', {0xff}, {}, 0x2f, 0x0, 0x11}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="45cc301912a2", 0x64c, 0x9, [0x6, 0x6, 0x37, 0x1f, 0x3b, 0x3, 0x10, 0x2, 0x38, 0x4, 0x18, 0x24, 0x2c, 0x3d, 0x8, 0x27], 0x0, 0x2, 0x101}}}, {{@ip={@multicast1, @rand_addr=0x64010102, 0xffffffff, 0xffffffff, 'ipvlan0\x00', 'macsec0\x00', {0xff}, {0xff}, 0x88}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0xb], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x74, 0x700}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x290) 944.272738ms ago: executing program 4 (id=62): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x0) 920.699168ms ago: executing program 0 (id=63): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 826.523527ms ago: executing program 3 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={0x20, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@void, @val={0xc, 0x99, {0xffffffff, 0x75}}}}}, 0x20}}, 0x20000000) 708.871889ms ago: executing program 4 (id=65): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRES32=r1], 0xffc9) 668.213671ms ago: executing program 1 (id=66): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x14, r2, 0x705, 0x400000, 0x4}, 0x14}}, 0x0) 563.082673ms ago: executing program 4 (id=67): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 444.77901ms ago: executing program 3 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r5, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 444.623507ms ago: executing program 2 (id=69): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x8, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}], 0x20) 444.318791ms ago: executing program 0 (id=70): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 439.917792ms ago: executing program 1 (id=71): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendfile(r3, r1, 0x0, 0x17) 303.486805ms ago: executing program 3 (id=72): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x2, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x800, @local}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffd}}]}, 0x50}}, 0x0) 244.801443ms ago: executing program 4 (id=73): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) 244.644499ms ago: executing program 2 (id=74): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa0) 244.55825ms ago: executing program 1 (id=75): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 199.05307ms ago: executing program 0 (id=76): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 84.96289ms ago: executing program 2 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r1, 0x1d563be06be42943, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 28.87784ms ago: executing program 3 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044081}, 0x20040844) 27.309274ms ago: executing program 1 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 0s ago: executing program 4 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}, 0x1, 0xe0ffff}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts. [ 70.583625][ T5818] cgroup: Unknown subsys name 'net' [ 70.778022][ T5818] cgroup: Unknown subsys name 'cpuset' [ 70.786398][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.148321][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.154744][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.286111][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.737131][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.757746][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.769054][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.777553][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.785599][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.792839][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.810729][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.815434][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.818656][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.832393][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.840508][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.847946][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.848611][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.864189][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.864947][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.883611][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.892244][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.892293][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.899328][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.916330][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.924536][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.925163][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.947119][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.956453][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.965283][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.622834][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 75.644987][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 75.664142][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 75.728192][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 75.831105][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 75.907939][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.915258][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.922500][ T5828] bridge_slave_0: entered allmulticast mode [ 75.929979][ T5828] bridge_slave_0: entered promiscuous mode [ 75.977983][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.985577][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.992737][ T5828] bridge_slave_1: entered allmulticast mode [ 76.000596][ T5828] bridge_slave_1: entered promiscuous mode [ 76.023942][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.031139][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.038654][ T5838] bridge_slave_0: entered allmulticast mode [ 76.045917][ T5838] bridge_slave_0: entered promiscuous mode [ 76.102414][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.109855][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.118012][ T5838] bridge_slave_1: entered allmulticast mode [ 76.125558][ T5838] bridge_slave_1: entered promiscuous mode [ 76.157283][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.164421][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.171837][ T5829] bridge_slave_0: entered allmulticast mode [ 76.179022][ T5829] bridge_slave_0: entered promiscuous mode [ 76.241052][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.251573][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.259010][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.266468][ T5829] bridge_slave_1: entered allmulticast mode [ 76.273648][ T5829] bridge_slave_1: entered promiscuous mode [ 76.295986][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.309175][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.318881][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.326346][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.333476][ T5840] bridge_slave_0: entered allmulticast mode [ 76.341091][ T5840] bridge_slave_0: entered promiscuous mode [ 76.350562][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.404045][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.411459][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.421505][ T5840] bridge_slave_1: entered allmulticast mode [ 76.429014][ T5840] bridge_slave_1: entered promiscuous mode [ 76.449164][ T5828] team0: Port device team_slave_0 added [ 76.466833][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.473932][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.481427][ T5843] bridge_slave_0: entered allmulticast mode [ 76.488727][ T5843] bridge_slave_0: entered promiscuous mode [ 76.523456][ T5828] team0: Port device team_slave_1 added [ 76.545085][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.554329][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.562064][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.569879][ T5843] bridge_slave_1: entered allmulticast mode [ 76.577692][ T5843] bridge_slave_1: entered promiscuous mode [ 76.596688][ T5838] team0: Port device team_slave_0 added [ 76.628055][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.651166][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.662797][ T5838] team0: Port device team_slave_1 added [ 76.683820][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.695768][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.717733][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.725050][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.751362][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.786172][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.822191][ T5840] team0: Port device team_slave_0 added [ 76.830297][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.839640][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.866015][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.889555][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.896549][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.923823][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.948791][ T5840] team0: Port device team_slave_1 added [ 76.963932][ T5829] team0: Port device team_slave_0 added [ 76.971010][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.978578][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.005111][ T5842] Bluetooth: hci1: command tx timeout [ 77.005339][ T5844] Bluetooth: hci3: command tx timeout [ 77.010707][ T5842] Bluetooth: hci0: command tx timeout [ 77.016185][ T5849] Bluetooth: hci2: command tx timeout [ 77.021820][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.045758][ T5843] team0: Port device team_slave_0 added [ 77.064879][ T5844] Bluetooth: hci4: command tx timeout [ 77.079989][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.087344][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.113774][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.127785][ T5829] team0: Port device team_slave_1 added [ 77.158434][ T5843] team0: Port device team_slave_1 added [ 77.187514][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.194457][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.221221][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.259219][ T5838] hsr_slave_0: entered promiscuous mode [ 77.266551][ T5838] hsr_slave_1: entered promiscuous mode [ 77.293004][ T5828] hsr_slave_0: entered promiscuous mode [ 77.301245][ T5828] hsr_slave_1: entered promiscuous mode [ 77.307394][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.315363][ T5828] Cannot create hsr debugfs directory [ 77.321396][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.328774][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.354962][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.380934][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.388118][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.414384][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.426609][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.433558][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.460147][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.471675][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.478675][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.504985][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.630003][ T5840] hsr_slave_0: entered promiscuous mode [ 77.636960][ T5840] hsr_slave_1: entered promiscuous mode [ 77.643047][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.651385][ T5840] Cannot create hsr debugfs directory [ 77.722717][ T5829] hsr_slave_0: entered promiscuous mode [ 77.729110][ T5829] hsr_slave_1: entered promiscuous mode [ 77.735981][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.743540][ T5829] Cannot create hsr debugfs directory [ 77.754392][ T5843] hsr_slave_0: entered promiscuous mode [ 77.761435][ T5843] hsr_slave_1: entered promiscuous mode [ 77.767633][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.775742][ T5843] Cannot create hsr debugfs directory [ 78.223822][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.249823][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.272755][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.289215][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.324807][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.344300][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.354339][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.378622][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.450770][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.461725][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.472829][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.484015][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.584141][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.612561][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.643532][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.671000][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.700747][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.729266][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.740577][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.761988][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.773351][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.802998][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.858886][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.874295][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.881535][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.920549][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.927704][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.942574][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.959292][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.008388][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.015681][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.037521][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.044670][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.064996][ T5849] Bluetooth: hci2: command tx timeout [ 79.070480][ T5844] Bluetooth: hci3: command tx timeout [ 79.076490][ T5849] Bluetooth: hci0: command tx timeout [ 79.076509][ T5837] Bluetooth: hci1: command tx timeout [ 79.113071][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.145671][ T5837] Bluetooth: hci4: command tx timeout [ 79.146344][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.158144][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.170018][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.200350][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.230023][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.237182][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.252649][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.259821][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.340623][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.347775][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.420163][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.521661][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.556968][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.583575][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.590738][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.617813][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.624941][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.669497][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.807940][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.908995][ T5828] veth0_vlan: entered promiscuous mode [ 79.964210][ T5840] veth0_vlan: entered promiscuous mode [ 79.998494][ T5828] veth1_vlan: entered promiscuous mode [ 80.071724][ T5840] veth1_vlan: entered promiscuous mode [ 80.110365][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.137378][ T5828] veth0_macvtap: entered promiscuous mode [ 80.147066][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.206984][ T5828] veth1_macvtap: entered promiscuous mode [ 80.218177][ T5840] veth0_macvtap: entered promiscuous mode [ 80.239868][ T5840] veth1_macvtap: entered promiscuous mode [ 80.301881][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.334016][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.377542][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.404111][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.422870][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.454998][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.464876][ T5838] veth0_vlan: entered promiscuous mode [ 80.479988][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.507782][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.536411][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.547529][ T42] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.557872][ T5838] veth1_vlan: entered promiscuous mode [ 80.571272][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.580327][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.602688][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.700759][ T5843] veth0_vlan: entered promiscuous mode [ 80.722025][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.736502][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.752546][ T5843] veth1_vlan: entered promiscuous mode [ 80.803302][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.803898][ T5838] veth0_macvtap: entered promiscuous mode [ 80.817050][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.830661][ T5829] veth0_vlan: entered promiscuous mode [ 80.850242][ T5838] veth1_macvtap: entered promiscuous mode [ 80.896536][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.904368][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.913787][ T5843] veth0_macvtap: entered promiscuous mode [ 80.930346][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.934473][ T5843] veth1_macvtap: entered promiscuous mode [ 80.949722][ T5829] veth1_vlan: entered promiscuous mode [ 80.955840][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.987717][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.034517][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.063997][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.079952][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.086871][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.131252][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.147153][ T5837] Bluetooth: hci3: command tx timeout [ 81.152578][ T5837] Bluetooth: hci0: command tx timeout [ 81.158337][ T5844] Bluetooth: hci2: command tx timeout [ 81.163750][ T5844] Bluetooth: hci1: command tx timeout [ 81.172380][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.182682][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.197071][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.221114][ T5829] veth0_macvtap: entered promiscuous mode [ 81.235908][ T5844] Bluetooth: hci4: command tx timeout [ 81.258750][ T5829] veth1_macvtap: entered promiscuous mode [ 81.284403][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.313464][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.323212][ T5952] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.324481][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.343872][ T5952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 81.370193][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.390520][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.438355][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.527290][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.585389][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.594105][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.640138][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.682667][ T65] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.694029][ T65] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.875232][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.888967][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.969281][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.004883][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.136077][ T5969] netlink: 'syz.0.8': attribute type 29 has an invalid length. [ 82.146421][ T5968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'. [ 82.183610][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.214434][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.255836][ T5963] netlink: 'syz.0.8': attribute type 29 has an invalid length. [ 82.334860][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.375508][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.544562][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.578826][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.692332][ T5984] netdevsim netdevsim1: Direct firmware load for . [ 82.692332][ T5984] failed with error -2 [ 82.771057][ T5984] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 82.771057][ T5984] [ 82.899912][ T5996] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 83.166941][ T6005] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.226663][ T5844] Bluetooth: hci1: command tx timeout [ 83.226684][ T5837] Bluetooth: hci0: command tx timeout [ 83.232077][ T5844] Bluetooth: hci2: command tx timeout [ 83.232109][ T5844] Bluetooth: hci3: command tx timeout [ 83.305263][ T5844] Bluetooth: hci4: command tx timeout [ 83.423945][ T6010] Illegal XDP return value 4294967294 on prog (id 7) dev N/A, expect packet loss! [ 83.728088][ T6019] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.801089][ T6019] Zero length message leads to an empty skb [ 83.975940][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 84.180059][ T6024] syzkaller1: entered promiscuous mode [ 84.215066][ T6024] syzkaller1: entered allmulticast mode [ 84.534343][ T6050] netlink: 76 bytes leftover after parsing attributes in process `syz.3.31'. [ 84.768646][ T6057] netlink: 'syz.2.34': attribute type 2 has an invalid length. [ 85.079611][ T6077] Cannot find del_set index 0 as target [ 85.286732][ T6084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.43'. [ 85.694242][ T6099] netlink: 96 bytes leftover after parsing attributes in process `syz.4.50'. [ 85.893008][ T6106] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 85.904059][ T6104] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 86.514196][ T49] cfg80211: failed to load regulatory.db [ 87.018018][ T6129] x_tables: duplicate underflow at hook 3 [ 87.076959][ T6125] syzkaller1: entered promiscuous mode [ 87.106420][ T6125] syzkaller1: entered allmulticast mode [ 87.855342][ T6162] ================================================================== [ 87.863443][ T6162] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160 [ 87.871361][ T6162] Read of size 8 at addr ffff88807cfd67b0 by task syz.2.77/6162 [ 87.879003][ T6162] [ 87.881358][ T6162] CPU: 1 UID: 0 PID: 6162 Comm: syz.2.77 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 87.881384][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.881404][ T6162] Call Trace: [ 87.881413][ T6162] [ 87.881422][ T6162] dump_stack_lvl+0x189/0x250 [ 87.881458][ T6162] ? __virt_addr_valid+0x1c8/0x5c0 [ 87.881479][ T6162] ? rcu_is_watching+0x15/0xb0 [ 87.881510][ T6162] ? __kasan_check_byte+0x12/0x40 [ 87.881530][ T6162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.881562][ T6162] ? rcu_is_watching+0x15/0xb0 [ 87.881592][ T6162] ? lock_release+0x4b/0x3e0 [ 87.881622][ T6162] ? __virt_addr_valid+0x1c8/0x5c0 [ 87.881642][ T6162] ? __virt_addr_valid+0x4a5/0x5c0 [ 87.881663][ T6162] print_report+0xd2/0x2b0 [ 87.881689][ T6162] ? pause_parse_request+0x40/0x160 [ 87.881711][ T6162] kasan_report+0x118/0x150 [ 87.881734][ T6162] ? pause_parse_request+0x40/0x160 [ 87.881761][ T6162] ? __pfx_pause_parse_request+0x10/0x10 [ 87.881783][ T6162] pause_parse_request+0x40/0x160 [ 87.881807][ T6162] ? __pfx_pause_parse_request+0x10/0x10 [ 87.881828][ T6162] ethnl_default_set_doit+0x2be/0xa40 [ 87.881856][ T6162] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 87.881893][ T6162] genl_family_rcv_msg_doit+0x212/0x300 [ 87.881928][ T6162] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 87.881982][ T6162] ? bpf_lsm_capable+0x9/0x20 [ 87.882000][ T6162] ? security_capable+0x7e/0x2e0 [ 87.882036][ T6162] genl_rcv_msg+0x60e/0x790 [ 87.882066][ T6162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.882092][ T6162] ? ref_tracker_free+0x63a/0x7d0 [ 87.882116][ T6162] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 87.882140][ T6162] ? __pfx_ref_tracker_free+0x10/0x10 [ 87.882168][ T6162] netlink_rcv_skb+0x208/0x470 [ 87.882189][ T6162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.882216][ T6162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.882245][ T6162] ? down_read+0x1ad/0x2e0 [ 87.882269][ T6162] genl_rcv+0x28/0x40 [ 87.882294][ T6162] netlink_unicast+0x75b/0x8d0 [ 87.882317][ T6162] netlink_sendmsg+0x805/0xb30 [ 87.882342][ T6162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.882366][ T6162] ? aa_sock_msg_perm+0x94/0x160 [ 87.882388][ T6162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 87.882410][ T6162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.882432][ T6162] __sock_sendmsg+0x219/0x270 [ 87.882452][ T6162] ____sys_sendmsg+0x505/0x830 [ 87.882479][ T6162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.882509][ T6162] ? import_iovec+0x74/0xa0 [ 87.882527][ T6162] ___sys_sendmsg+0x21f/0x2a0 [ 87.882553][ T6162] ? __pfx____sys_sendmsg+0x10/0x10 [ 87.882596][ T6162] ? __fget_files+0x2a/0x420 [ 87.882614][ T6162] ? __fget_files+0x3a0/0x420 [ 87.882638][ T6162] __x64_sys_sendmsg+0x19b/0x260 [ 87.882666][ T6162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 87.882697][ T6162] ? rcu_is_watching+0x15/0xb0 [ 87.882725][ T6162] ? do_syscall_64+0xbe/0x3b0 [ 87.882750][ T6162] do_syscall_64+0xfa/0x3b0 [ 87.882770][ T6162] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.882789][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.882806][ T6162] ? clear_bhb_loop+0x60/0xb0 [ 87.882827][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.882845][ T6162] RIP: 0033:0x7f7cdbd8e929 [ 87.882867][ T6162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.882883][ T6162] RSP: 002b:00007f7cdcc61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.882902][ T6162] RAX: ffffffffffffffda RBX: 00007f7cdbfb5fa0 RCX: 00007f7cdbd8e929 [ 87.882915][ T6162] RDX: 0000000000000800 RSI: 0000200000000500 RDI: 0000000000000003 [ 87.882927][ T6162] RBP: 00007f7cdbe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 87.882938][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.882949][ T6162] R13: 0000000000000000 R14: 00007f7cdbfb5fa0 R15: 00007ffdcccf3fc8 [ 87.882969][ T6162] [ 87.882981][ T6162] [ 88.264172][ T6162] Allocated by task 6162: [ 88.268495][ T6162] kasan_save_track+0x3e/0x80 [ 88.273189][ T6162] __kasan_kmalloc+0x93/0xb0 [ 88.277775][ T6162] __kmalloc_noprof+0x27a/0x4f0 [ 88.282623][ T6162] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 88.288689][ T6162] genl_family_rcv_msg_doit+0xb8/0x300 [ 88.294149][ T6162] genl_rcv_msg+0x60e/0x790 [ 88.298661][ T6162] netlink_rcv_skb+0x208/0x470 [ 88.303419][ T6162] genl_rcv+0x28/0x40 [ 88.307401][ T6162] netlink_unicast+0x75b/0x8d0 [ 88.312158][ T6162] netlink_sendmsg+0x805/0xb30 [ 88.316914][ T6162] __sock_sendmsg+0x219/0x270 [ 88.321582][ T6162] ____sys_sendmsg+0x505/0x830 [ 88.326344][ T6162] ___sys_sendmsg+0x21f/0x2a0 [ 88.331025][ T6162] __x64_sys_sendmsg+0x19b/0x260 [ 88.335970][ T6162] do_syscall_64+0xfa/0x3b0 [ 88.340471][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.346362][ T6162] [ 88.348677][ T6162] The buggy address belongs to the object at ffff88807cfd6780 [ 88.348677][ T6162] which belongs to the cache kmalloc-64 of size 64 [ 88.362546][ T6162] The buggy address is located 8 bytes to the right of [ 88.362546][ T6162] allocated 40-byte region [ffff88807cfd6780, ffff88807cfd67a8) [ 88.376938][ T6162] [ 88.379258][ T6162] The buggy address belongs to the physical page: [ 88.385663][ T6162] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cfd6 [ 88.394410][ T6162] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 88.401513][ T6162] page_type: f5(slab) [ 88.405489][ T6162] raw: 00fff00000000000 ffff88801a4418c0 ffffea00009e9300 dead000000000002 [ 88.414066][ T6162] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 88.422640][ T6162] page dumped because: kasan: bad access detected [ 88.429056][ T6162] page_owner tracks the page as allocated [ 88.434755][ T6162] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5203, tgid 5203 (udevd), ts 45670203793, free_ts 45646630607 [ 88.453238][ T6162] post_alloc_hook+0x240/0x2a0 [ 88.458003][ T6162] get_page_from_freelist+0x21e4/0x22c0 [ 88.463564][ T6162] __alloc_frozen_pages_noprof+0x181/0x370 [ 88.469386][ T6162] alloc_pages_mpol+0x232/0x4a0 [ 88.474263][ T6162] allocate_slab+0x8a/0x3b0 [ 88.478772][ T6162] ___slab_alloc+0xbfc/0x1480 [ 88.483444][ T6162] __kmalloc_noprof+0x305/0x4f0 [ 88.488289][ T6162] tomoyo_encode+0x28b/0x550 [ 88.492878][ T6162] tomoyo_realpath_from_path+0x58d/0x5d0 [ 88.498505][ T6162] tomoyo_path_perm+0x213/0x4b0 [ 88.503349][ T6162] security_inode_getattr+0x12f/0x330 [ 88.508726][ T6162] __x64_sys_newfstat+0xfc/0x200 [ 88.513664][ T6162] do_syscall_64+0xfa/0x3b0 [ 88.518163][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.524057][ T6162] page last free pid 5203 tgid 5203 stack trace: [ 88.530376][ T6162] __free_frozen_pages+0xc71/0xe70 [ 88.535488][ T6162] __slab_free+0x326/0x400 [ 88.539902][ T6162] qlist_free_all+0x97/0x140 [ 88.544495][ T6162] kasan_quarantine_reduce+0x148/0x160 [ 88.549952][ T6162] __kasan_slab_alloc+0x22/0x80 [ 88.554798][ T6162] __kmalloc_noprof+0x224/0x4f0 [ 88.559637][ T6162] tomoyo_realpath_from_path+0xe3/0x5d0 [ 88.565187][ T6162] tomoyo_path_number_perm+0x1e8/0x5a0 [ 88.570634][ T6162] security_path_chown+0x13d/0x360 [ 88.575741][ T6162] chown_common+0x3bd/0x5c0 [ 88.580236][ T6162] do_fchownat+0x161/0x270 [ 88.584658][ T6162] __x64_sys_chown+0x82/0xa0 [ 88.589263][ T6162] do_syscall_64+0xfa/0x3b0 [ 88.593775][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.599662][ T6162] [ 88.601983][ T6162] Memory state around the buggy address: [ 88.607606][ T6162] ffff88807cfd6680: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 88.615680][ T6162] ffff88807cfd6700: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 88.623736][ T6162] >ffff88807cfd6780: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 88.631780][ T6162] ^ [ 88.637395][ T6162] ffff88807cfd6800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 88.645445][ T6162] ffff88807cfd6880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 88.653495][ T6162] ================================================================== [ 88.703991][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'. [ 88.725256][ T6162] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.732476][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.2.77 Not tainted 6.16.0-rc3-syzkaller-00904-g7012d4f3c7a8 #0 PREEMPT(full) [ 88.744279][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.754332][ T6162] Call Trace: [ 88.757607][ T6162] [ 88.760540][ T6162] dump_stack_lvl+0x99/0x250 [ 88.765158][ T6162] ? __asan_memcpy+0x40/0x70 [ 88.769755][ T6162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.774967][ T6162] ? __pfx__printk+0x10/0x10 [ 88.779566][ T6162] panic+0x2db/0x790 [ 88.783479][ T6162] ? __pfx_panic+0x10/0x10 [ 88.787898][ T6162] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 88.793782][ T6162] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.800108][ T6162] ? print_memory_metadata+0x314/0x400 [ 88.805577][ T6162] ? pause_parse_request+0x40/0x160 [ 88.810768][ T6162] check_panic_on_warn+0x89/0xb0 [ 88.815711][ T6162] ? pause_parse_request+0x40/0x160 [ 88.820907][ T6162] end_report+0x78/0x160 [ 88.825141][ T6162] kasan_report+0x129/0x150 [ 88.829654][ T6162] ? pause_parse_request+0x40/0x160 [ 88.834857][ T6162] ? __pfx_pause_parse_request+0x10/0x10 [ 88.840489][ T6162] pause_parse_request+0x40/0x160 [ 88.845524][ T6162] ? __pfx_pause_parse_request+0x10/0x10 [ 88.851148][ T6162] ethnl_default_set_doit+0x2be/0xa40 [ 88.856521][ T6162] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 88.862854][ T6162] genl_family_rcv_msg_doit+0x212/0x300 [ 88.868408][ T6162] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 88.874492][ T6162] ? bpf_lsm_capable+0x9/0x20 [ 88.879160][ T6162] ? security_capable+0x7e/0x2e0 [ 88.884095][ T6162] genl_rcv_msg+0x60e/0x790 [ 88.888598][ T6162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.893623][ T6162] ? ref_tracker_free+0x63a/0x7d0 [ 88.898640][ T6162] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 88.904527][ T6162] ? __pfx_ref_tracker_free+0x10/0x10 [ 88.909905][ T6162] netlink_rcv_skb+0x208/0x470 [ 88.914684][ T6162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.919722][ T6162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.925017][ T6162] ? down_read+0x1ad/0x2e0 [ 88.929434][ T6162] genl_rcv+0x28/0x40 [ 88.933421][ T6162] netlink_unicast+0x75b/0x8d0 [ 88.938184][ T6162] netlink_sendmsg+0x805/0xb30 [ 88.942946][ T6162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.948227][ T6162] ? aa_sock_msg_perm+0x94/0x160 [ 88.953160][ T6162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 88.958442][ T6162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.963724][ T6162] __sock_sendmsg+0x219/0x270 [ 88.968394][ T6162] ____sys_sendmsg+0x505/0x830 [ 88.973162][ T6162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.978446][ T6162] ? import_iovec+0x74/0xa0 [ 88.982941][ T6162] ___sys_sendmsg+0x21f/0x2a0 [ 88.987618][ T6162] ? __pfx____sys_sendmsg+0x10/0x10 [ 88.992831][ T6162] ? __fget_files+0x2a/0x420 [ 88.997415][ T6162] ? __fget_files+0x3a0/0x420 [ 89.002090][ T6162] __x64_sys_sendmsg+0x19b/0x260 [ 89.007035][ T6162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 89.012504][ T6162] ? rcu_is_watching+0x15/0xb0 [ 89.017276][ T6162] ? do_syscall_64+0xbe/0x3b0 [ 89.021953][ T6162] do_syscall_64+0xfa/0x3b0 [ 89.026453][ T6162] ? lockdep_hardirqs_on+0x9c/0x150 [ 89.031644][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.037710][ T6162] ? clear_bhb_loop+0x60/0xb0 [ 89.042389][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.048273][ T6162] RIP: 0033:0x7f7cdbd8e929 [ 89.052680][ T6162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.072276][ T6162] RSP: 002b:00007f7cdcc61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.080688][ T6162] RAX: ffffffffffffffda RBX: 00007f7cdbfb5fa0 RCX: 00007f7cdbd8e929 [ 89.088654][ T6162] RDX: 0000000000000800 RSI: 0000200000000500 RDI: 0000000000000003 [ 89.096622][ T6162] RBP: 00007f7cdbe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 89.104586][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.112547][ T6162] R13: 0000000000000000 R14: 00007f7cdbfb5fa0 R15: 00007ffdcccf3fc8 [ 89.120532][ T6162] [ 89.123835][ T6162] Kernel Offset: disabled [ 89.128155][ T6162] Rebooting in 86400 seconds..