last executing test programs: 4.329437493s ago: executing program 0 (id=10671): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x180, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x44}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x6}, @NL80211_ATTR_PEER_MEASUREMENTS={0x144, 0x111, 0x0, 0x1, {0x140, 0x5, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfff}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8001}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x16}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x49}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x7e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}]}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x50844) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x3b, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 2.354211842s ago: executing program 4 (id=10680): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000140)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f00000000c0)=""/126, &(0x7f0000000040)=0x7e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x7a44, 0x1700) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet(0x2, 0x4, 0x3ff) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) 2.281667439s ago: executing program 4 (id=10683): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4bb7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40048}, 0x20000800) 2.145559677s ago: executing program 0 (id=10685): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x130, 0x0, 0x1c8, 0x130, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x48000) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x44080) sendmsg(r6, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05002ebd7000000000000800000008000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000140020203600e4109000800ac00060311000000160012000a00fc000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000001000000500000000040000000200000000000011ffffffff0000000000002e00"], 0x0, 0x2c}, 0x20) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r8, 0x8915, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x300000b, 0x200000005c831, 0xffffffffffffffff, 0x18ba3000) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xd) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000010000104000000000300000000000000", @ANYRES32=r10, @ANYBLOB="24200400858d0000400012800e00010069703665727370616e0000002c000280050016000200000004001200060018030700000014000600fc000000fcffffff000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 2.14276048s ago: executing program 1 (id=10686): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1412, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061044c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='p', 0x1}], 0x1}, 0x0) 2.061962839s ago: executing program 2 (id=10688): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000450018003480080f0100677265000c00028006000e0012000000"], 0x38}}, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (rerun: 32) 2.052218856s ago: executing program 4 (id=10689): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e22}, 0x6e) epoll_pwait(0xffffffffffffffff, &(0x7f0000000740)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000140)={0x0, 0xea60}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) 1.957344953s ago: executing program 1 (id=10691): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) (async, rerun: 32) r0 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x10270000}, @TCA_FQ_FLOW_MAX_RATE={0xfffffffffffffd87, 0x7, 0x3}]}}]}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990041000000600000000800a0007c030000080026009a03000008009f000b"], 0x40}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 1.912098912s ago: executing program 4 (id=10692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a010200e5000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c0001400000000000000008080005400000000114000000110001"], 0xf0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x7c, 0x1, 0x9, 0x801, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_STATUS={0x8}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xcbdd}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x40004) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x20000800) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x8c, r5, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x55, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x6, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0xb08, 0x2, 0xc0}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}}, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r8, &(0x7f0000000240)=@id, &(0x7f0000000440)=0x10) vmsplice(r8, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r9, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r9, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) splice(r7, 0x0, r8, 0x0, 0x10500, 0x0) connect$unix(r8, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1030000080003400000000114000000110007"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 1.789655039s ago: executing program 2 (id=10693): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x808) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80080, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000180)=ANY=[], 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.7038273s ago: executing program 1 (id=10695): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000001a000000bca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff0200007b010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@empty, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, &(0x7f0000000080)={0x0, 0x0, "65db3eab1a15279960b44ed8eb7b260d"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f", 0xb4}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001440)=""/67, 0x43}, {&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000600)=""/249, 0xf9}], 0x3}, 0x40000000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r7, 0x0) 1.675946341s ago: executing program 4 (id=10696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001", @ANYRESOCT=r0, @ANYBLOB="6689580d199e210e5381e2fbd8209ffdff3a812e24a0b1970cc029d04644c6c6d6641649672cc7a41dd19e1a707fd7183050ddd07a42d5408687f3de23f0d052a10c0a4f1aeb411659a6b9ce4f3518301433ba7a9a6c5b4d71c97c54e0ec92db3a2cd8ef7ca47932013314e32d85022eb00c4efad2c922c6ce141b29135327686708e82bfdf995ba5422139da0f623004276630f4a6b008d19905571e9534e2921fb91d1e13196b1355cf2b5b620", @ANYRESOCT=r0], 0xa0}}, 0x0) 1.580963611s ago: executing program 4 (id=10697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) unshare(0x6a040000) 1.492485838s ago: executing program 2 (id=10699): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001440)={0x44, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x6c, 0x1}, {0x6c}, {0xc}, {0x9, 0x1}, {0x16}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000140)={0x0, 0x24, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000020b69c97553002677b00000c0001"], 0x2c}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) (async) r11 = socket$unix(0x1, 0x1, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) (async) close(r13) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$unix(0x1, 0x1, 0x0) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x0, 0x7}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r16, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) (async) sendmsg$kcm(r12, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r16, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.313492804s ago: executing program 2 (id=10702): r0 = socket$igmp6(0xa, 0x3, 0x3a) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000480), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000005c0)={@private2, 0x72, r3}) (async) getsockopt$MRT6(r0, 0x29, 0xd0, 0xffffffffffffffff, &(0x7f0000000640)=0x3) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ifreq(r5, 0x8937, &(0x7f0000000f00)={'team0\x00', @ifru_ivalue=0x6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x3, 0x4, 0xffff24a6, 0x40, @rand_addr=' \x01\x00', @empty, 0x40, 0x700, 0x8, 0x3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000010000000000000bfa497aab36b2e7e8749"], 0x0, 0x100007, 0x0, 0x0, 0x0, 0x8, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) 1.27080563s ago: executing program 0 (id=10703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c000880280000022400010000000000000000000000000000000000000000000000000000000000000000000800050001000000140002007767310000000000000000000000000008000700ff00000014000200776732"], 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000a00000085100000010000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xabe}, 0x94) r4 = socket(0xa, 0x2, 0x0) close(r4) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x21, 0x0, &(0x7f0000003c00)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x541241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="38e6ff00", @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.145668757s ago: executing program 3 (id=10704): ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f0000000300)={0x7, 0x8}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}]}], {0x14}}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x48001) 970.338148ms ago: executing program 2 (id=10705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000015000100faffffff0000002002180000", @ANYRES32=r4, @ANYBLOB="14000300766574683000000058a6000000000000"], 0x2c}}, 0x4000850) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r9, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc3800185}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r6, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x34, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000001}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000002e000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @sk_reuseport=0x27, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0x10}, 0x94) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="34010000", @ANYRES16=r12, @ANYBLOB="0100000000003fc14d7a0100000004000480080002000100000008000100000000000400088008010c8054000b800800090000000000080009000000000008000a0000000000080009000000000008000a00000000000800090000000009"], 0x134}}, 0x0) 920.091668ms ago: executing program 3 (id=10706): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r5, 0x0, &(0x7f00000000c0)) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r7}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0xf, 0x0, &(0x7f0000000200)="63eced8e46dc3f869a91a7644e52fe", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = socket$kcm(0x2, 0x3, 0x106) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r11 = socket$can_raw(0x1d, 0x3, 0x1) (async, rerun: 64) r12 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000280)="270348fc160014000000002f1eafacf706e105000000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0xfc66}], 0x1}, 0x4) (async) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400df001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) sendmsg$inet(r9, &(0x7f0000000300)={&(0x7f0000000380)={0x2, 0x4e9f, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="b9ed02d814a1fbf4e8f747cc8c30bd0840608b59", 0x14}], 0x1}, 0x0) (async, rerun: 32) r13 = socket(0x400000000010, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x9c, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xf, 0xfff3}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffff824}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x9, 0x100000000}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', r4, r14, 0x4, 0x1, 0x5}, 0x50) 785.322153ms ago: executing program 0 (id=10707): r0 = socket$inet_sctp(0x2, 0x400000000001, 0x84) r1 = socket$key(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0x0, 0x2, 0x2}, 0x10}}, 0x0) sendto$inet(r0, &(0x7f0000000800)='u', 0x1, 0x801, &(0x7f0000000040)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda8c) r3 = accept4(r0, &(0x7f0000000340)=@nfc, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r5, 0x700, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) 650.331117ms ago: executing program 3 (id=10708): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) 477.231345ms ago: executing program 0 (id=10709): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x22, @mcast2, 0xd}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendto$inet6(r0, &(0x7f00000001c0)="805ef154", 0x4, 0x3b00, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000069c0)={0x2, {{0xa, 0x4e21, 0x1, @mcast2, 0x1000}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x4, @private1, 0xffffffff}}]}, 0x110) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0010000160001000000000000000000ff010000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff03000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff040000000000000000000000040000001000000000000000000000000000000002000000b1a0010008000c00c40000000c001c00", @ANYRES32=0x0, @ANYBLOB="00000000e4000683"], 0x1f0}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000007600010000000000000000000308000000000000080001"], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x58, 0x5, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40841}, 0x8000) 385.690732ms ago: executing program 3 (id=10710): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x80) connect$phonet_pipe(r0, &(0x7f00000000c0)={0x23, 0x6, 0x2d, 0xff}, 0x10) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000540)=0x7, 0x4) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 384.83691ms ago: executing program 1 (id=10711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x20}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'ip_vti0\x00'}}, 0x1e) socket$tipc(0x1e, 0x2, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'veth1_vlan\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x413b3c1a641b49e4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0xae, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000080)) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000000)=0x800, 0x4) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000940)={{r3, &(0x7f0000000600)='\x00', 0x0, &(0x7f0000000640)={@_ha_fsid={[0x400, 0x4]}, {0x1, 0xfff7, 0x4, 0x5}}, 0xc, &(0x7f0000000680)={@_ha_fsid}, &(0x7f0000000700)=0x6}, 0x2, &(0x7f0000000800)=[{0x3, 0x7, &(0x7f0000000740)='veth1_vlan\x00', &(0x7f0000000780), 0x0, 0x10}, {0x1, 0x2, &(0x7f00000007c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000880)="b921b5acfc6de932c6f1b01cc7d667e6ff6cc2c526af6723fdbc3da01847b0f15e03fff8e75143e10acc32506f95fb54a8ed2cad9c120c58fc8eb43cb07e4936136f451f3ab03ecb13a87fe71ebbf5469442e6257a24483af19fe34e33a465bc0e2d45d4bb4eb00ed18de58897f830c369c8233fc9b594aa25f5df813333853d7c3633dcea4b6af6a445", 0x8a, 0x5c09c20d5f54022c}]}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000009c0)={0x0, 0x4, 0x6, [0xd8ad, 0x28c1, 0x1, 0x2, 0x7, 0xe775]}, &(0x7f0000000a00)=0x14) sendmmsg$inet(r5, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r5, &(0x7f00000000c0)="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", 0xffe3, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206050000000000000000000000000005000400000000000900020073797a32000000000c0007800800174000000000050005000000000005000100060000000d0003006c6973743a7365740000000035a0f136edbb19dc55525e6ae07f82703eee6bbf271f0f5d7c8bd549e4103f5631f5d698a5c747c4790af355e9fc3294d997917b36f817c8af7202d329a006029acc465ad6586fe10b221a2c972c4411"], 0x54}}, 0x0) 300.482683ms ago: executing program 1 (id=10712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0xf2746ee968a4e3}, 0x0) 290.213032ms ago: executing program 2 (id=10713): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001800)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0xfc30) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, 0x0, 0x190) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 210.015566ms ago: executing program 0 (id=10714): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x3d, 0x0, 0x1, 0xffffffff}, {0x0, 0xfe, 0xfd, 0x80000000}, {0x6, 0x0, 0xfc}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="e00500000000fcffffff0c000000"], 0x14}, 0x1, 0x0, 0x0, 0x60008800}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000a001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e00050002800800070000000000"], 0x3c}}, 0x0) listen(r5, 0xfffffffd) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01070000000000000000670000f4070001"], 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r10, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffff076}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x2404c080) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000700)=ANY=[@ANYRESDEC=r10], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r14 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r14, &(0x7f00000000c0)={0x1d, r15, 0x8000000000000003, {}, 0xfd}, 0x18) close(r14) accept4$unix(r14, &(0x7f0000000640), &(0x7f00000006c0)=0x6e, 0x80000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r11, r13, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x8000, 0x519, 0xffff, {{0x20, 0x4, 0x3, 0x39, 0x80, 0x67, 0x0, 0x9, 0x29, 0x0, @loopback, @rand_addr=0x64010100, {[@end, @generic={0x83, 0xb, "f4ef3e16ac69c26566"}, @noop, @timestamp_prespec={0x44, 0x34, 0xd3, 0x3, 0xe, [{@multicast2, 0x2}, {@empty, 0x3ff}, {@multicast2}, {@broadcast, 0x715}, {@multicast1, 0x2}, {@rand_addr=0x64010100, 0x4}]}, @lsrr={0x83, 0x7, 0x6a, [@remote]}, @end, @rr={0x7, 0x17, 0x1a, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @remote]}, @end, @ra={0x94, 0x4}, @generic={0x44, 0x5, "5ce821"}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="9800b2c758a5d2f7cc00007fdea91f8bc4116b4f483fc66d8760aca73c7a3ce1add8abd7c194808d790c8ed1d997e5e714bc643c5dd1e0d74d7792fd2491468e5bd17d4e823946fefda3cdf38adafd9979ab91e4f06e07438e51324548ee3e1d62656d1c1b82bf038a571bf3", @ANYRES16=r4, @ANYBLOB="080025bd7000fbdbdf25160000003c000180080003000100000008000100", @ANYRES32=r13, @ANYBLOB="080003000000000008000300030000000800030003000000080003000200000008000300000000004800018008000100", @ANYRES32=r16, @ANYBLOB="1400020064766d727030000000000000000000001400020070696d726567000000000000000000001400020076657468315f746f5f62617461647600"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYRES64=r1], 0xffffffffffffff4f) 201.614763ms ago: executing program 3 (id=10715): syz_emit_ethernet(0x66, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}, [{0x1, 0x1, "2025b07f3c58"}]}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1591c2a6ec6cc6bb42f98669237875391de3d554b3ee09b9d0cbad593b8eba3a29a8d2613047b5b59f21288f0ce924520fc26cc16237b520298f00506c5eb2b6aa804b5cf904bbf395be54c2745b3dc82212da69b517b529c0a6fc4b5500e380aadae434fced", 0x66}, {&(0x7f0000000080)="8ea8b192f008943be8b091dd75d4651ee78c56d82022c607f9da3735cd8fbadc33515c8d11e358beade08ee5828616fadc6be0cd3efd", 0x36}], 0x2, &(0x7f0000000100)=[{0xa8, 0x562dd9240f782112, 0x0, "28591370c949e3268c3ecbf871a0eed09f39cba966020a669427e6099d7ee572ccf79bcb7be1f9c8c5bb3908f0e563c9c215e4212d74ed012f786f8bd8aadd6fb59d567fd849ae7fdcbc77a50badbc8ce0fc00e116d21e994f28555fefba7e31a36a1252b6dc86c7a3459245008b55f3eac742ee1e2462ec9291b8a6403376fddb3c373725d10523708aadbe75ac07374b15b1939a"}, {0xd8, 0x84, 0xf, "7cb59ae7283546060c80913b32bcf7bc20b955d4d48a4007814e43061246022141ca656ff9da1a6ac279d2028c6979b4b042b38630ed522897d097e23a1414f34f312e8264cd6a49d997895c0cdebc3b47e2ae598cd65022eeb5e62b224b50845ebeed5207eb565b2484699893e3882d1be576a45989bf8275513a31e017c25a0339779cc721da5896726a1f46aa4a4809e81dc4a60bac78149cc11b521e3f0b26df58df1e6fbf7a73c47df2a3971e4d9a88f8e530749f3e10fec2e706db954deb32ef34fc3943"}, {0x88, 0x112, 0x0, "b9efc88c503ec58cf60f04b9c7933024df1b02b02d39b32320809376d4df55c2ecdabbaf64d8cd73c0fe290657210c2df544eeecda99b0e376a0ef3b2ceb225cc91cb079ebdc3372d23bd435b8251b3496f373b7a9def4f58a0814d2c0a03eaffc058f17cb3b4bb1772f7223b4f8859ed594"}, {0x88, 0x29, 0x5, "3a65805101e8d902af29634e948a1f1a60a1309785abd06b663f0639a4dea7d21e96a585423e982deb1f5348781f9f273c951a1e247ab18c091b9df74ab658186c6e9b7a26007f96a2590f26262d46539806d85aed41dc72869a92fb9bb2bcf7bdff0c4a24060740da935504966d019839"}, {0x20, 0x113, 0x8000, "7063d6d67ace199598"}, {0xa0, 0x119, 0x1, "b2f06da33d35d0c25415faff94e7f468828aa914460c8fefb15db122aff92b71e5897dab42c523692e41954519cbabe593371d0d0e0c160c862ac10543655a6d6dcf5635af80f937418f21c5b8d3c62a29a3ed5d23b418d5a43b70ac9ccb3b8bcf9bdc75e722d6943a3bc6f870eddb795b000d37317089d1f2101ca15c8b40755d02e236ece9100f49b636e4e0d0bd"}, {0x68, 0x103, 0x6f9, "7dabf1edd53fd870ebb137734855e1cd1b7bac08a0f1465cd1aaaa9fde31b26d8e2df16d2c5fbdcca9a8644d01ec32a6af8239250fd34eba0847cdb3c3a98947e1c7d40848425dcb38760df29635b8d96d2e00e521"}], 0x3b8}, 0x8810) 136.934943ms ago: executing program 1 (id=10716): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x3}, &(0x7f0000000040)=0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18e6ffffff0008000000008000000000850000007c00000095fdeb8c056c29bee8000402156c0b840000000000000080980b1834fc86b50f497dd65acab7fc1617d6442cea89163a8475eaf88eac8bd48e63c35aa90897697943abcf8db2ced7aff33eaba5f7d05660e298699c1613746f04e678c79f"], &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) getsockopt$nfc_llcp(r0, 0x88, 0x68, 0x0, 0x20000000) 0s ago: executing program 3 (id=10717): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x148}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x0, 0x1}, 0x14}}, 0xc800) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0) splice(r3, 0x0, r5, 0x0, 0x10d00, 0xf) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000001c0)={'veth0_virt_wifi\x00', @local}) (async) r7 = socket(0x840000000002, 0x3, 0x100) (async) close(0x3) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r9, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) listen(r9, 0x80) (async) accept$netrom(r9, 0x0, 0x0) (async) connect$llc(r7, 0x0, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x8, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040f0}, 0x4008000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff8effb70200000800000018230000", @ANYRES64=r0, @ANYRESOCT=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.724176][ T6860] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 825.734135][ T6860] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.744349][ T6860] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 825.753863][ T6860] 44693 total pagecache pages [ 825.764806][ T6860] 0 pages in swap cache [ 825.769906][ T6860] Free swap = 124996kB [ 825.774155][ T6860] Total swap = 124996kB [ 825.778514][ T6860] 2097051 pages RAM [ 825.782428][ T6860] 0 pages HighMem/MovableOnly [ 825.787619][ T6860] 426702 pages reserved [ 825.803217][ T6860] 0 pages cma reserved [ 827.291938][ T6892] tipc: Enabling of bearer rejected, already enabled [ 827.377443][ T7385] IPVS: stop unused estimator thread 0... [ 827.436878][ T51] Bluetooth: hci4: command tx timeout [ 827.563842][ T6908] IPv6: NLM_F_CREATE should be specified when creating new route [ 827.608381][ T6908] 8021q: VLANs not supported on gre0 [ 827.818447][ T6808] chnl_net:caif_netlink_parms(): no params data found [ 828.099710][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.113704][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.133248][ T6948] __nla_validate_parse: 5 callbacks suppressed [ 828.133269][ T6948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9103'. [ 828.149850][ T6808] bridge_slave_0: entered allmulticast mode [ 828.168477][ T6808] bridge_slave_0: entered promiscuous mode [ 828.181896][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9102'. [ 828.226916][ T6808] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.247014][ T6948] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9103'. [ 828.257255][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.264664][ T6808] bridge_slave_1: entered allmulticast mode [ 828.295857][ T6808] bridge_slave_1: entered promiscuous mode [ 828.379479][ T6808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.440018][ T6808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.485768][ T6808] team0: Port device team_slave_0 added [ 828.497673][ T6969] netlink: 'syz.0.9109': attribute type 33 has an invalid length. [ 828.518885][ T6808] team0: Port device team_slave_1 added [ 828.562497][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.572161][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.600688][ T6808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.635088][ T6808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 828.652571][ T6808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.695929][ T6974] --map-set only usable from mangle table [ 828.710247][ T6808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 828.852359][ T6808] hsr_slave_0: entered promiscuous mode [ 828.897717][ T6808] hsr_slave_1: entered promiscuous mode [ 828.929167][ T6988] x_tables: duplicate underflow at hook 1 [ 828.984656][ T6988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9115'. [ 829.008193][ T6990] pimreg: entered allmulticast mode [ 829.080610][ T6996] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 829.285456][ T7010] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9118'. [ 829.343546][ T6808] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.361227][ T6808] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.372466][ T6808] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 829.472165][ T6808] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.519590][ T6808] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.520403][ T51] Bluetooth: hci4: command tx timeout [ 829.533243][ T6808] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 829.662111][ T6808] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.667088][ T7027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9123'. [ 829.693158][ T6808] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.717402][ T6808] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 829.756593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.765374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.775384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.784128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.819616][ T7032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9124'. [ 829.836380][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9125'. [ 829.871227][ T6808] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.894950][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9126'. [ 829.909201][ T6808] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.929664][ T6808] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 829.969302][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9128'. [ 829.990973][ T7045] vlan2: entered allmulticast mode [ 829.997012][ T7045] mac80211_hwsim hwsim68 wlan0: entered allmulticast mode [ 830.159420][ T7058] syzkaller0: entered promiscuous mode [ 830.165199][ T7058] syzkaller0: entered allmulticast mode [ 830.194417][ T6808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 830.212858][ T6808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 830.234190][ T6808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 830.412394][ T6808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 830.492607][ T7080] openvswitch: netlink: Missing valid actions attribute. [ 830.503659][ T7080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 830.665117][ T6808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.727249][ T6808] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.762543][ T7388] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.769743][ T7388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.787243][ T7093] netlink: 'syz.4.9139': attribute type 1 has an invalid length. [ 830.801135][ T7094] syzkaller0: left promiscuous mode [ 830.808837][ T7094] syzkaller0: left allmulticast mode [ 830.848727][ T7388] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.855999][ T7388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.965557][ T6808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 831.420063][ T7137] syzkaller0: entered promiscuous mode [ 831.443738][ T7137] syzkaller0: entered allmulticast mode [ 831.479808][ T6808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.502340][ T7142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.607356][ T51] Bluetooth: hci4: command tx timeout [ 831.648654][ T6808] veth0_vlan: entered promiscuous mode [ 831.718173][ T6808] veth1_vlan: entered promiscuous mode [ 831.868487][ T6808] veth0_macvtap: entered promiscuous mode [ 831.897083][ T6808] veth1_macvtap: entered promiscuous mode [ 831.940368][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.982515][ T6808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.061836][ T7351] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.085776][ T7351] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.095637][ T7351] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.105604][ T7351] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.267360][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.288640][ T7351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.308797][ T7351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.321094][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.359502][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.403481][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.437737][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.459532][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.489749][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.491631][ T7384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.507944][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.512157][ T7384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.523458][ T7184] netlink: 'syz.4.9167': attribute type 10 has an invalid length. [ 832.531071][ T7196] x_tables: duplicate underflow at hook 2 [ 832.860034][ T7205] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 833.397333][T28817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 833.414890][T28817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 833.423563][T28817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 833.437201][T28817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 833.444995][T28817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 833.500999][ T7242] __nla_validate_parse: 13 callbacks suppressed [ 833.501018][ T7242] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9183'. [ 833.520378][ T7244] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9183'. [ 833.602935][ T7236] lo speed is unknown, defaulting to 1000 [ 833.704268][ T7248] syzkaller0: entered promiscuous mode [ 833.710622][ T7248] syzkaller0: entered allmulticast mode [ 834.010755][ T7264] netlink: 'syz.3.9191': attribute type 11 has an invalid length. [ 834.021887][ T7265] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9189'. [ 834.032823][ T7264] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9191'. [ 834.067465][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9190'. [ 834.099010][ T7236] vxcan1 speed is unknown, defaulting to 1000 [ 834.300693][T18448] hid-generic 0005:04F3:7FFF.0001: item fetching failed at offset 0/1 [ 834.334451][T18448] hid-generic 0005:04F3:7FFF.0001: probe with driver hid-generic failed with error -22 [ 834.390484][ T7264] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 834.464504][ T7278] syzkaller0: entered promiscuous mode [ 834.472957][ T7278] syzkaller0: entered allmulticast mode [ 834.502855][ T7280] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 834.551658][ T7278] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9195'. [ 834.561765][ T7277] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9195'. [ 834.631229][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9195'. [ 834.650592][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9195'. [ 834.673114][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9197'. [ 834.764265][ T7236] chnl_net:caif_netlink_parms(): no params data found [ 834.896130][ T7296] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.920868][ T7296] bridge0: entered allmulticast mode [ 834.938089][ T7293] syzkaller0: entered promiscuous mode [ 834.943627][ T7293] syzkaller0: entered allmulticast mode [ 835.190612][ T7318] geneve2: entered promiscuous mode [ 835.195900][ T7318] geneve2: entered allmulticast mode [ 835.235533][ T7384] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 835.244399][ T7384] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 835.253398][ T7384] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 835.275998][ T7384] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 835.334031][ T7236] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.362839][ T7236] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.391229][ T7236] bridge_slave_0: entered allmulticast mode [ 835.424570][ T7236] bridge_slave_0: entered promiscuous mode [ 835.483691][ T7330] syzkaller1: entered promiscuous mode [ 835.507975][ T7330] syzkaller1: entered allmulticast mode [ 835.517394][T28817] Bluetooth: hci0: command tx timeout [ 835.548298][ T7236] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.565865][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.616453][ T7236] bridge_slave_1: entered allmulticast mode [ 835.635492][ T7236] bridge_slave_1: entered promiscuous mode [ 835.774624][ T7236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.807175][ T7236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.981100][ T7236] team0: Port device team_slave_0 added [ 835.993201][ T7236] team0: Port device team_slave_1 added [ 836.113383][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.134444][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.215838][ T7236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.269394][ T7236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.277775][ T7236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.317468][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 836.334500][ T7236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.461579][ T7423] validate_nla: 63 callbacks suppressed [ 836.461594][ T7423] netlink: 'syz.2.9222': attribute type 4 has an invalid length. [ 836.581321][ T7236] hsr_slave_0: entered promiscuous mode [ 836.593957][ T7236] hsr_slave_1: entered promiscuous mode [ 836.617302][ T7236] debugfs: 'hsr0' already exists in 'hsr' [ 836.626577][ T7236] Cannot create hsr debugfs directory [ 836.633078][ T7426] tipc: Enabled bearer , priority 10 [ 836.769773][ T7432] syzkaller0: entered promiscuous mode [ 836.775300][ T7432] syzkaller0: entered allmulticast mode [ 836.849702][ T7444] FAULT_INJECTION: forcing a failure. [ 836.849702][ T7444] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 836.899488][ T7444] CPU: 1 UID: 0 PID: 7444 Comm: syz.0.9226 Not tainted syzkaller #0 PREEMPT(full) [ 836.899522][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 836.899534][ T7444] Call Trace: [ 836.899541][ T7444] [ 836.899550][ T7444] dump_stack_lvl+0xe8/0x150 [ 836.899580][ T7444] should_fail_ex+0x412/0x560 [ 836.899612][ T7444] _copy_from_user+0x2d/0xb0 [ 836.899632][ T7444] __copy_msghdr+0x3c5/0x5b0 [ 836.899666][ T7444] ___sys_sendmsg+0x213/0x360 [ 836.899690][ T7444] ? __lock_acquire+0x6b5/0x2cf0 [ 836.899714][ T7444] ? __pfx____sys_sendmsg+0x10/0x10 [ 836.899772][ T7444] ? __fget_files+0x2a/0x420 [ 836.899789][ T7444] ? __fget_files+0x3a0/0x420 [ 836.899817][ T7444] __x64_sys_sendmsg+0x1bd/0x2a0 [ 836.899843][ T7444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 836.899876][ T7444] ? __pfx_ksys_write+0x10/0x10 [ 836.899910][ T7444] do_syscall_64+0x14d/0xf80 [ 836.899933][ T7444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.899952][ T7444] ? trace_irq_disable+0x37/0x100 [ 836.899973][ T7444] ? clear_bhb_loop+0x40/0x90 [ 836.899994][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.900013][ T7444] RIP: 0033:0x7f835d99bf79 [ 836.900030][ T7444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.900045][ T7444] RSP: 002b:00007f835e88c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 836.900064][ T7444] RAX: ffffffffffffffda RBX: 00007f835dc16090 RCX: 00007f835d99bf79 [ 836.900077][ T7444] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 836.900089][ T7444] RBP: 00007f835e88c090 R08: 0000000000000000 R09: 0000000000000000 [ 836.900101][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.900112][ T7444] R13: 00007f835dc16128 R14: 00007f835dc16090 R15: 00007ffeb4fb94e8 [ 836.900141][ T7444] [ 837.427683][ T7460] xt_hashlimit: size too large, truncated to 1048576 [ 837.439774][ T7236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.480903][ T7236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.610714][T28817] Bluetooth: hci0: command tx timeout [ 837.742092][ T7236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.807506][ T7236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.826258][ T2927] tipc: Node number set to 2803716003 [ 837.901002][ T7472] netlink: 'syz.4.9237': attribute type 6 has an invalid length. [ 837.941489][ T7236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.980653][ T7236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.142777][ T7236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.165391][ T7236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.422258][ T7491] FAULT_INJECTION: forcing a failure. [ 838.422258][ T7491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.442658][ T7488] syzkaller0: entered promiscuous mode [ 838.449475][ T7488] syzkaller0: entered allmulticast mode [ 838.455122][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.2.9241 Not tainted syzkaller #0 PREEMPT(full) [ 838.455149][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 838.455164][ T7491] Call Trace: [ 838.455173][ T7491] [ 838.455183][ T7491] dump_stack_lvl+0xe8/0x150 [ 838.455217][ T7491] should_fail_ex+0x412/0x560 [ 838.455253][ T7491] _copy_from_iter+0x3b0/0x1670 [ 838.455287][ T7491] ? process_measurement+0x195e/0x1c80 [ 838.455320][ T7491] ? __pfx__copy_from_iter+0x10/0x10 [ 838.455357][ T7491] ? dev_get_by_index+0x22/0x2e0 [ 838.455388][ T7491] ? dev_get_by_index+0x22/0x2e0 [ 838.455425][ T7491] packet_sendmsg+0x30b2/0x50f0 [ 838.455459][ T7491] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 838.455489][ T7491] ? __lock_acquire+0x6b5/0x2cf0 [ 838.455523][ T7491] ? unwind_next_frame+0xa5/0x23c0 [ 838.455576][ T7491] ? aa_sk_perm+0x15a/0x960 [ 838.455606][ T7491] ? aa_sk_perm+0x82d/0x960 [ 838.455632][ T7491] ? __pfx_packet_sendmsg+0x10/0x10 [ 838.455667][ T7491] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 838.455707][ T7491] ? aa_sock_msg_perm+0xf1/0x1b0 [ 838.455738][ T7491] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 838.455770][ T7491] ? __pfx_packet_sendmsg+0x10/0x10 [ 838.455794][ T7491] ____sys_sendmsg+0xa68/0xad0 [ 838.455832][ T7491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.455868][ T7491] ? import_iovec+0x73/0xa0 [ 838.455894][ T7491] ___sys_sendmsg+0x2a5/0x360 [ 838.455920][ T7491] ? __lock_acquire+0x6b5/0x2cf0 [ 838.455950][ T7491] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.456014][ T7491] ? __fget_files+0x2a/0x420 [ 838.456034][ T7491] ? __fget_files+0x3a0/0x420 [ 838.456065][ T7491] __x64_sys_sendmsg+0x1bd/0x2a0 [ 838.456095][ T7491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.456134][ T7491] ? __pfx_ksys_write+0x10/0x10 [ 838.456172][ T7491] do_syscall_64+0x14d/0xf80 [ 838.456200][ T7491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.456221][ T7491] ? trace_irq_disable+0x37/0x100 [ 838.456245][ T7491] ? clear_bhb_loop+0x40/0x90 [ 838.456270][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.456292][ T7491] RIP: 0033:0x7f36a4f9bf79 [ 838.456312][ T7491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.456335][ T7491] RSP: 002b:00007f36a5e66028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.456358][ T7491] RAX: ffffffffffffffda RBX: 00007f36a5216090 RCX: 00007f36a4f9bf79 [ 838.456374][ T7491] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 838.456388][ T7491] RBP: 00007f36a5e66090 R08: 0000000000000000 R09: 0000000000000000 [ 838.456400][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.456413][ T7491] R13: 00007f36a5216128 R14: 00007f36a5216090 R15: 00007ffc554eb158 [ 838.456448][ T7491] [ 838.785382][ T7500] netlink: 'syz.3.9244': attribute type 1 has an invalid length. [ 839.686378][T28817] Bluetooth: hci0: command tx timeout [ 840.192088][ T7500] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 840.349883][ T7505] netlink: 'syz.3.9244': attribute type 1 has an invalid length. [ 840.366863][ T7505] netlink: 'syz.3.9244': attribute type 2 has an invalid length. [ 840.395921][ T7236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 840.429610][ T7236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 840.460814][ T7517] tipc: Enabling of bearer rejected, failed to enable media [ 840.487001][ T7236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 840.509869][ T7236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 840.588844][ T7517] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.621510][ T7526] syzkaller0: entered promiscuous mode [ 840.628503][ T7526] syzkaller0: entered allmulticast mode [ 840.705933][ T7534] __nla_validate_parse: 23 callbacks suppressed [ 840.716766][ T7534] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9251'. [ 840.727019][ T7535] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9251'. [ 840.778441][ T7517] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.909250][ T7517] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.941703][ T7548] netlink: 'syz.2.9253': attribute type 1 has an invalid length. [ 841.040873][ T7517] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.098608][ T7236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.107433][ T7554] syzkaller0: entered promiscuous mode [ 841.113450][ T7554] syzkaller0: entered allmulticast mode [ 841.140480][ T7554] FAULT_INJECTION: forcing a failure. [ 841.140480][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 841.175393][ T7236] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.183229][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.4.9256 Not tainted syzkaller #0 PREEMPT(full) [ 841.183253][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 841.183265][ T7554] Call Trace: [ 841.183273][ T7554] [ 841.183280][ T7554] dump_stack_lvl+0xe8/0x150 [ 841.183319][ T7554] should_fail_ex+0x412/0x560 [ 841.183349][ T7554] should_failslab+0xa8/0x100 [ 841.183377][ T7554] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 841.183400][ T7554] ? __alloc_skb+0x186/0x7d0 [ 841.183420][ T7554] ? __alloc_skb+0x1d0/0x7d0 [ 841.183437][ T7554] ? __local_bh_enable_ip+0xd0/0x130 [ 841.183462][ T7554] __alloc_skb+0x1d0/0x7d0 [ 841.183504][ T7554] alloc_skb_with_frags+0xca/0x890 [ 841.183526][ T7554] ? __might_fault+0xaf/0x130 [ 841.183561][ T7554] sock_alloc_send_pskb+0x878/0x990 [ 841.183609][ T7554] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 841.183641][ T7554] ? dev_get_by_index+0x22/0x2e0 [ 841.183668][ T7554] ? dev_get_by_index+0x22/0x2e0 [ 841.183697][ T7554] packet_sendmsg+0x33e5/0x50f0 [ 841.183722][ T7554] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 841.183755][ T7554] ? __lock_acquire+0x6b5/0x2cf0 [ 841.183777][ T7554] ? unwind_next_frame+0xa5/0x23c0 [ 841.183808][ T7554] ? aa_sk_perm+0x15a/0x960 [ 841.183828][ T7554] ? aa_sk_perm+0x82d/0x960 [ 841.183845][ T7554] ? __pfx_packet_sendmsg+0x10/0x10 [ 841.183868][ T7554] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 841.183895][ T7554] ? aa_sock_msg_perm+0xf1/0x1b0 [ 841.183917][ T7554] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 841.183938][ T7554] ? __pfx_packet_sendmsg+0x10/0x10 [ 841.183955][ T7554] ____sys_sendmsg+0xa68/0xad0 [ 841.183980][ T7554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.184005][ T7554] ? import_iovec+0x73/0xa0 [ 841.184023][ T7554] ___sys_sendmsg+0x2a5/0x360 [ 841.184041][ T7554] ? __lock_acquire+0x6b5/0x2cf0 [ 841.184060][ T7554] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.184103][ T7554] ? __fget_files+0x2a/0x420 [ 841.184117][ T7554] ? __fget_files+0x3a0/0x420 [ 841.184138][ T7554] __x64_sys_sendmsg+0x1bd/0x2a0 [ 841.184159][ T7554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.184184][ T7554] ? __pfx_ksys_write+0x10/0x10 [ 841.184210][ T7554] do_syscall_64+0x14d/0xf80 [ 841.184230][ T7554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.184243][ T7554] ? trace_irq_disable+0x37/0x100 [ 841.184260][ T7554] ? clear_bhb_loop+0x40/0x90 [ 841.184277][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.184291][ T7554] RIP: 0033:0x7fc33039bf79 [ 841.184311][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.184323][ T7554] RSP: 002b:00007fc3311df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.184339][ T7554] RAX: ffffffffffffffda RBX: 00007fc330615fa0 RCX: 00007fc33039bf79 [ 841.184350][ T7554] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 841.184359][ T7554] RBP: 00007fc3311df090 R08: 0000000000000000 R09: 0000000000000000 [ 841.184368][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 841.184377][ T7554] R13: 00007fc330616038 R14: 00007fc330615fa0 R15: 00007ffffebd5128 [ 841.184400][ T7554] [ 841.206105][ T7558] xt_hashlimit: size too large, truncated to 1048576 [ 841.585073][ T7384] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.592324][ T7384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.614092][ T7351] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.621288][ T7351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.646528][ T7394] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.669701][ T7394] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.713281][T27730] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.745558][ T7394] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.758082][T28817] Bluetooth: hci0: command tx timeout [ 842.143615][ T7579] netlink: 'syz.2.9263': attribute type 1 has an invalid length. [ 842.204114][ T7580] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9263'. [ 842.240579][ T7579] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.284212][ T7236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.371762][ T7236] veth0_vlan: entered promiscuous mode [ 842.397915][ T7236] veth1_vlan: entered promiscuous mode [ 842.458858][ T7236] veth0_macvtap: entered promiscuous mode [ 842.477870][ T7236] veth1_macvtap: entered promiscuous mode [ 842.513083][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.540164][ T7236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.576606][ T7351] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.600215][ T7351] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.610747][ T7351] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.642188][ T7601] lo speed is unknown, defaulting to 1000 [ 842.661330][ T7384] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.774459][ T7610] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9270'. [ 842.788244][ T7610] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9270'. [ 842.799469][ T7610] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9270'. [ 842.819909][ T7610] netlink: 11 bytes leftover after parsing attributes in process `syz.4.9270'. [ 842.992283][ T7601] vxcan1 speed is unknown, defaulting to 1000 [ 843.069891][ T7619] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 843.098724][ T7619] bond1 (unregistering): Released all slaves [ 843.115298][ T7384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.156304][ T7384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.165653][T27730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.209780][T27730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.324484][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9276'. [ 843.337849][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9276'. [ 843.464299][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9277'. [ 843.501811][ T7642] Cannot find add_set index 65532 as target [ 843.510903][ T7642] sctp: [Deprecated]: syz.1.9180 (pid 7642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 843.510903][ T7642] Use struct sctp_sack_info instead [ 843.539912][ T7636] bond2: Invalid ad_actor_system MAC address. [ 843.547664][ T7636] bond2: option ad_actor_system: invalid value (1) [ 843.562445][ T7636] bond2 (unregistering): Released all slaves [ 843.612838][ T7641] syzkaller0: entered promiscuous mode [ 843.625984][ T7641] syzkaller0: entered allmulticast mode [ 843.698719][ T7647] FAULT_INJECTION: forcing a failure. [ 843.698719][ T7647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.732026][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.0.9279 Not tainted syzkaller #0 PREEMPT(full) [ 843.732053][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 843.732066][ T7647] Call Trace: [ 843.732074][ T7647] [ 843.732083][ T7647] dump_stack_lvl+0xe8/0x150 [ 843.732119][ T7647] should_fail_ex+0x412/0x560 [ 843.732151][ T7647] _copy_from_iter+0x3b0/0x1670 [ 843.732193][ T7647] ? __pfx__copy_from_iter+0x10/0x10 [ 843.732244][ T7647] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 843.732290][ T7647] skb_copy_datagram_from_iter+0xf5/0x710 [ 843.732339][ T7647] ? dev_get_by_index+0x22/0x2e0 [ 843.732369][ T7647] ? skb_put+0x11b/0x210 [ 843.732397][ T7647] packet_sendmsg+0x37e4/0x50f0 [ 843.732436][ T7647] ? __lock_acquire+0x6b5/0x2cf0 [ 843.732469][ T7647] ? unwind_next_frame+0xa5/0x23c0 [ 843.732514][ T7647] ? aa_sk_perm+0x15a/0x960 [ 843.732545][ T7647] ? aa_sk_perm+0x82d/0x960 [ 843.732572][ T7647] ? __pfx_packet_sendmsg+0x10/0x10 [ 843.732606][ T7647] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 843.732644][ T7647] ? aa_sock_msg_perm+0xf1/0x1b0 [ 843.732675][ T7647] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 843.732707][ T7647] ? __pfx_packet_sendmsg+0x10/0x10 [ 843.732733][ T7647] ____sys_sendmsg+0xa68/0xad0 [ 843.732769][ T7647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.732807][ T7647] ? import_iovec+0x73/0xa0 [ 843.732833][ T7647] ___sys_sendmsg+0x2a5/0x360 [ 843.732867][ T7647] ? __lock_acquire+0x6b5/0x2cf0 [ 843.732894][ T7647] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.732958][ T7647] ? __fget_files+0x2a/0x420 [ 843.732979][ T7647] ? __fget_files+0x3a0/0x420 [ 843.733010][ T7647] __x64_sys_sendmsg+0x1bd/0x2a0 [ 843.733040][ T7647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.733077][ T7647] ? __pfx_ksys_write+0x10/0x10 [ 843.733115][ T7647] do_syscall_64+0x14d/0xf80 [ 843.733143][ T7647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.733162][ T7647] ? trace_irq_disable+0x37/0x100 [ 843.733187][ T7647] ? clear_bhb_loop+0x40/0x90 [ 843.733213][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.733234][ T7647] RIP: 0033:0x7f835d99bf79 [ 843.733253][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.733271][ T7647] RSP: 002b:00007f835e88c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.733294][ T7647] RAX: ffffffffffffffda RBX: 00007f835dc16090 RCX: 00007f835d99bf79 [ 843.733311][ T7647] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 843.733325][ T7647] RBP: 00007f835e88c090 R08: 0000000000000000 R09: 0000000000000000 [ 843.733338][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.733351][ T7647] R13: 00007f835dc16128 R14: 00007f835dc16090 R15: 00007ffeb4fb94e8 [ 843.733386][ T7647] [ 843.972404][ T7659] netlink: 'syz.1.9282': attribute type 1 has an invalid length. [ 843.987109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.826524][ T2919] IPVS: starting estimator thread 0... [ 844.836766][ T7682] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 844.926690][ T7684] IPVS: using max 28 ests per chain, 67200 per kthread [ 845.077446][ T7694] veth1_maRvtap: renamed from gretap0 (while UP) [ 845.187161][ T7703] pimreg3: entered allmulticast mode [ 845.331436][ T7710] macvlan2: entered promiscuous mode [ 845.337221][ T7710] macvlan2: entered allmulticast mode [ 845.342982][ T7710] veth0_to_bridge: entered promiscuous mode [ 845.349693][ T7710] veth0_to_bridge: entered allmulticast mode [ 845.395834][ T7710] team0: Port device macvlan2 added [ 845.439544][ T7715] netlink: 'syz.2.9301': attribute type 1 has an invalid length. [ 845.503697][ T7715] bond2: (slave geneve3): making interface the new active one [ 845.512789][ T7715] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 845.523313][ T7715] netlink: 'syz.2.9301': attribute type 1 has an invalid length. [ 845.533142][ T7394] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 845.545770][ T7394] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 845.556209][ T7715] netlink: 'syz.2.9301': attribute type 8 has an invalid length. [ 845.564091][ T7394] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 845.574127][ T7716] netlink: 'syz.2.9301': attribute type 1 has an invalid length. [ 845.582506][ T7394] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 845.592545][ T7716] netlink: 'syz.2.9301': attribute type 8 has an invalid length. [ 845.753954][ T7731] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 845.892121][ T7743] __nla_validate_parse: 14 callbacks suppressed [ 845.892140][ T7743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9310'. [ 845.913511][ T7741] FAULT_INJECTION: forcing a failure. [ 845.913511][ T7741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.942700][ T7741] CPU: 0 UID: 0 PID: 7741 Comm: syz.3.9312 Not tainted syzkaller #0 PREEMPT(full) [ 845.942727][ T7741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 845.942739][ T7741] Call Trace: [ 845.942748][ T7741] [ 845.942757][ T7741] dump_stack_lvl+0xe8/0x150 [ 845.942789][ T7741] should_fail_ex+0x412/0x560 [ 845.942824][ T7741] _copy_from_iter+0x4ff/0x1670 [ 845.942867][ T7741] ? __pfx__copy_from_iter+0x10/0x10 [ 845.942907][ T7741] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 845.942939][ T7741] skb_copy_datagram_from_iter+0xf5/0x710 [ 845.942972][ T7741] ? dev_get_by_index+0x22/0x2e0 [ 845.943001][ T7741] ? skb_put+0x11b/0x210 [ 845.943034][ T7741] packet_sendmsg+0x37e4/0x50f0 [ 845.943071][ T7741] ? __lock_acquire+0x6b5/0x2cf0 [ 845.943104][ T7741] ? unwind_next_frame+0xa5/0x23c0 [ 845.943148][ T7741] ? aa_sk_perm+0x15a/0x960 [ 845.943176][ T7741] ? aa_sk_perm+0x82d/0x960 [ 845.943201][ T7741] ? __pfx_packet_sendmsg+0x10/0x10 [ 845.943235][ T7741] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 845.943273][ T7741] ? aa_sock_msg_perm+0xf1/0x1b0 [ 845.943302][ T7741] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 845.943332][ T7741] ? __pfx_packet_sendmsg+0x10/0x10 [ 845.943356][ T7741] ____sys_sendmsg+0xa68/0xad0 [ 845.943392][ T7741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.943428][ T7741] ? import_iovec+0x73/0xa0 [ 845.943454][ T7741] ___sys_sendmsg+0x2a5/0x360 [ 845.943478][ T7741] ? __lock_acquire+0x6b5/0x2cf0 [ 845.943504][ T7741] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.943567][ T7741] ? __fget_files+0x2a/0x420 [ 845.943587][ T7741] ? __fget_files+0x3a0/0x420 [ 845.943618][ T7741] __x64_sys_sendmsg+0x1bd/0x2a0 [ 845.943647][ T7741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 845.943684][ T7741] ? __pfx_ksys_write+0x10/0x10 [ 845.943727][ T7741] do_syscall_64+0x14d/0xf80 [ 845.943754][ T7741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.943785][ T7741] ? trace_irq_disable+0x37/0x100 [ 845.943806][ T7741] ? clear_bhb_loop+0x40/0x90 [ 845.943829][ T7741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.943847][ T7741] RIP: 0033:0x7f70b379bf79 [ 845.943865][ T7741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.943880][ T7741] RSP: 002b:00007f70b46bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.943900][ T7741] RAX: ffffffffffffffda RBX: 00007f70b3a15fa0 RCX: 00007f70b379bf79 [ 845.943914][ T7741] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 845.943926][ T7741] RBP: 00007f70b46bb090 R08: 0000000000000000 R09: 0000000000000000 [ 845.943938][ T7741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.943949][ T7741] R13: 00007f70b3a16038 R14: 00007f70b3a15fa0 R15: 00007ffc47a82348 [ 845.943980][ T7741] [ 846.118638][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9311'. [ 846.344281][ T7745] bridge_slave_1: left allmulticast mode [ 846.357862][ T7745] bridge_slave_1: left promiscuous mode [ 846.377161][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.389201][ T7745] bridge_slave_0: left allmulticast mode [ 846.394897][ T7745] bridge_slave_0: left promiscuous mode [ 846.403221][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.467412][ T7763] netlink: 'syz.1.9318': attribute type 1 has an invalid length. [ 846.475657][ T7766] netlink: 'syz.3.9319': attribute type 1 has an invalid length. [ 846.508138][ T7766] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9319'. [ 846.526629][ T7763] "syz.1.9318" (7763) uses obsolete ecb(arc4) skcipher [ 846.535764][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9318'. [ 846.749824][ T7777] syzkaller0: entered promiscuous mode [ 846.755556][ T7777] syzkaller0: entered allmulticast mode [ 846.764389][ T7777] FAULT_INJECTION: forcing a failure. [ 846.764389][ T7777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.778411][ T7777] CPU: 1 UID: 0 PID: 7777 Comm: syz.1.9324 Not tainted syzkaller #0 PREEMPT(full) [ 846.778436][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 846.778448][ T7777] Call Trace: [ 846.778456][ T7777] [ 846.778465][ T7777] dump_stack_lvl+0xe8/0x150 [ 846.778496][ T7777] should_fail_ex+0x412/0x560 [ 846.778526][ T7777] _copy_from_iter+0x4ff/0x1670 [ 846.778565][ T7777] ? __pfx__copy_from_iter+0x10/0x10 [ 846.778600][ T7777] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 846.778630][ T7777] skb_copy_datagram_from_iter+0xf5/0x710 [ 846.778660][ T7777] ? dev_get_by_index+0x22/0x2e0 [ 846.778687][ T7777] ? skb_put+0x11b/0x210 [ 846.778712][ T7777] packet_sendmsg+0x37e4/0x50f0 [ 846.778747][ T7777] ? __lock_acquire+0x6b5/0x2cf0 [ 846.778777][ T7777] ? unwind_next_frame+0xa5/0x23c0 [ 846.778818][ T7777] ? aa_sk_perm+0x15a/0x960 [ 846.778857][ T7777] ? aa_sk_perm+0x82d/0x960 [ 846.778881][ T7777] ? __pfx_packet_sendmsg+0x10/0x10 [ 846.778919][ T7777] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 846.778954][ T7777] ? aa_sock_msg_perm+0xf1/0x1b0 [ 846.778983][ T7777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 846.779011][ T7777] ? __pfx_packet_sendmsg+0x10/0x10 [ 846.779033][ T7777] ____sys_sendmsg+0xa68/0xad0 [ 846.779066][ T7777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 846.779100][ T7777] ? import_iovec+0x73/0xa0 [ 846.779123][ T7777] ___sys_sendmsg+0x2a5/0x360 [ 846.779147][ T7777] ? __lock_acquire+0x6b5/0x2cf0 [ 846.779171][ T7777] ? __pfx____sys_sendmsg+0x10/0x10 [ 846.779230][ T7777] ? __fget_files+0x2a/0x420 [ 846.779249][ T7777] ? __fget_files+0x3a0/0x420 [ 846.779278][ T7777] __x64_sys_sendmsg+0x1bd/0x2a0 [ 846.779305][ T7777] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 846.779339][ T7777] ? __pfx_ksys_write+0x10/0x10 [ 846.779374][ T7777] do_syscall_64+0x14d/0xf80 [ 846.779400][ T7777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.779418][ T7777] ? trace_irq_disable+0x37/0x100 [ 846.779441][ T7777] ? clear_bhb_loop+0x40/0x90 [ 846.779463][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.779480][ T7777] RIP: 0033:0x7fc64a39bf79 [ 846.779497][ T7777] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.779513][ T7777] RSP: 002b:00007fc64b26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 846.779533][ T7777] RAX: ffffffffffffffda RBX: 00007fc64a615fa0 RCX: 00007fc64a39bf79 [ 846.779547][ T7777] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 846.779560][ T7777] RBP: 00007fc64b26d090 R08: 0000000000000000 R09: 0000000000000000 [ 846.779572][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.779584][ T7777] R13: 00007fc64a616038 R14: 00007fc64a615fa0 R15: 00007ffd987a17f8 [ 846.779615][ T7777] [ 847.384824][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 847.414597][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 847.422661][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 847.432902][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 847.442838][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.564353][ T7793] lo speed is unknown, defaulting to 1000 [ 847.659725][ T7795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 848.073152][ T7793] vxcan1 speed is unknown, defaulting to 1000 [ 848.099200][ T7833] syzkaller0: entered promiscuous mode [ 848.104740][ T7833] syzkaller0: entered allmulticast mode [ 848.138207][ T7833] FAULT_INJECTION: forcing a failure. [ 848.138207][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 848.154358][ T7837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.161731][ T7837] IPv6: NLM_F_CREATE should be set when creating new route [ 848.169171][ T7837] IPv6: NLM_F_CREATE should be set when creating new route [ 848.176452][ T7837] IPv6: NLM_F_CREATE should be set when creating new route [ 848.181740][ T7833] CPU: 0 UID: 0 PID: 7833 Comm: syz.2.9339 Not tainted syzkaller #0 PREEMPT(full) [ 848.181812][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 848.181844][ T7833] Call Trace: [ 848.181865][ T7833] [ 848.181895][ T7833] dump_stack_lvl+0xe8/0x150 [ 848.181980][ T7833] should_fail_ex+0x412/0x560 [ 848.182093][ T7833] _copy_to_user+0x31/0xb0 [ 848.182195][ T7833] simple_read_from_buffer+0xe1/0x170 [ 848.182303][ T7833] proc_fail_nth_read+0x1bb/0x230 [ 848.182385][ T7833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.182479][ T7833] ? rw_verify_area+0x2a6/0x4d0 [ 848.182559][ T7833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 848.182626][ T7833] vfs_read+0x20c/0xa70 [ 848.182680][ T7833] ? fdget_pos+0x246/0x320 [ 848.182749][ T7833] ? __pfx___mutex_lock+0x10/0x10 [ 848.182823][ T7833] ? __pfx_vfs_read+0x10/0x10 [ 848.182895][ T7833] ? __fget_files+0x2a/0x420 [ 848.182958][ T7833] ? __fget_files+0x3a0/0x420 [ 848.183009][ T7833] ? __fget_files+0x2a/0x420 [ 848.183089][ T7833] ksys_read+0x150/0x270 [ 848.183171][ T7833] ? __pfx_ksys_read+0x10/0x10 [ 848.183265][ T7833] do_syscall_64+0x14d/0xf80 [ 848.183337][ T7833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.183389][ T7833] ? trace_irq_disable+0x37/0x100 [ 848.183451][ T7833] ? clear_bhb_loop+0x40/0x90 [ 848.183513][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.183560][ T7833] RIP: 0033:0x7f36a4f5c84e [ 848.183611][ T7833] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 848.183654][ T7833] RSP: 002b:00007f36a5e86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 848.183693][ T7833] RAX: ffffffffffffffda RBX: 00007f36a5e876c0 RCX: 00007f36a4f5c84e [ 848.183745][ T7833] RDX: 000000000000000f RSI: 00007f36a5e870a0 RDI: 000000000000000a [ 848.183792][ T7833] RBP: 00007f36a5e87090 R08: 0000000000000000 R09: 0000000000000000 [ 848.183841][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 848.183880][ T7833] R13: 00007f36a5216038 R14: 00007f36a5215fa0 R15: 00007ffc554eb158 [ 848.183973][ T7833] [ 848.393422][ T7831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 848.531521][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9338'. [ 848.638980][ T7837] syzkaller0: entered promiscuous mode [ 848.644583][ T7837] syzkaller0: entered allmulticast mode [ 849.090637][T19238] lec:lec_start_xmit: lec0:No lecd attached [ 849.529214][ T51] Bluetooth: hci1: command tx timeout [ 850.361865][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9347'. [ 850.371489][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9347'. [ 850.435628][ T7867] netlink: 'syz.0.9347': attribute type 14 has an invalid length. [ 850.451339][ T7871] netlink: 'syz.0.9347': attribute type 12 has an invalid length. [ 850.461663][ T7867] netlink: 'syz.0.9347': attribute type 13 has an invalid length. [ 850.775889][ T7793] chnl_net:caif_netlink_parms(): no params data found [ 850.915053][ T7895] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 851.096410][ T7913] netlink: 'syz.4.9358': attribute type 3 has an invalid length. [ 851.099432][ T7793] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.121984][ T7793] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.125197][ T7913] netlink: 'syz.4.9358': attribute type 1 has an invalid length. [ 851.130453][ T7793] bridge_slave_0: entered allmulticast mode [ 851.147120][ T7793] bridge_slave_0: entered promiscuous mode [ 851.159626][ T7793] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.167643][ T7793] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.176291][ T7793] bridge_slave_1: entered allmulticast mode [ 851.181402][ T7913] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9358'. [ 851.191478][ T7793] bridge_slave_1: entered promiscuous mode [ 851.264749][ T7913] syzkaller0: entered promiscuous mode [ 851.271549][ T7913] syzkaller0: entered allmulticast mode [ 851.290893][ T7793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.311102][ T7793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.355469][ T7913] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9358'. [ 851.379440][ T7913] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9358'. [ 851.401022][ T7793] team0: Port device team_slave_0 added [ 851.420104][ T7793] team0: Port device team_slave_1 added [ 851.473426][ T7924] netlink: 'syz.0.9360': attribute type 9 has an invalid length. [ 851.496726][ T7924] netlink: 'syz.0.9360': attribute type 11 has an invalid length. [ 851.522583][ T7924] netlink: 'syz.0.9360': attribute type 12 has an invalid length. [ 851.541392][ T7924] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.9360'. [ 851.551651][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.559382][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.585464][ T7929] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9362'. [ 851.626133][ T51] Bluetooth: hci1: command tx timeout [ 851.647043][ T7793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.660134][ T7929] syzkaller1: entered promiscuous mode [ 851.665744][ T7929] syzkaller1: entered allmulticast mode [ 851.674134][ T7793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.696138][ T7793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.758718][ T7793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.781061][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9362'. [ 851.814658][ T5335] IPVS: starting estimator thread 0... [ 851.846229][ T7934] bond1: entered promiscuous mode [ 851.851420][ T7934] bond1: entered allmulticast mode [ 851.859043][ T7934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 851.907475][ T7942] IPVS: using max 32 ests per chain, 76800 per kthread [ 851.988189][ T7945] bridge4: entered promiscuous mode [ 851.993583][ T7945] bridge4: entered allmulticast mode [ 852.061139][ T7793] hsr_slave_0: entered promiscuous mode [ 852.087682][ T7793] hsr_slave_1: entered promiscuous mode [ 852.106556][ T7793] debugfs: 'hsr0' already exists in 'hsr' [ 852.121243][ T7793] Cannot create hsr debugfs directory [ 852.174371][ T7929] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9362'. [ 853.083334][ T7997] 5gQ[: renamed from lo (while UP) [ 853.211936][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9382'. [ 853.231216][ T8007] netlink: 'syz.4.9382': attribute type 7 has an invalid length. [ 853.240082][ T8007] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9382'. [ 853.371401][ T8017] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9383'. [ 853.548010][ T8023] netlink: 'syz.1.9383': attribute type 2 has an invalid length. [ 853.589199][ T7793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 853.604991][ T7793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 853.630219][ T7793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 853.643781][ T7793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 853.679988][ T51] Bluetooth: hci1: command tx timeout [ 853.814023][ T7793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.854439][ T7793] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.902381][ T7394] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.909637][ T7394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.929534][ T7384] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.936759][ T7384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.672947][ T8082] bond3: option packets_per_slave: invalid value (18446744073709551615) [ 854.693974][ T8082] bond3: option packets_per_slave: allowed values 0 - 65535 [ 854.705378][ T8082] bond3 (unregistering): Released all slaves [ 854.796039][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5710 ms [ 854.804151][ C1] lec:lec_tx_timeout: lec0 [ 854.815709][ T7793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.924310][ T7793] veth0_vlan: entered promiscuous mode [ 854.959745][ T7793] veth1_vlan: entered promiscuous mode [ 855.066412][ T7793] veth0_macvtap: entered promiscuous mode [ 855.081418][ T7793] veth1_macvtap: entered promiscuous mode [ 855.150870][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.188624][ T7793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.232325][ T7379] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.246340][ T7379] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.274931][ T7379] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.287575][ T7379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.478111][ T7384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.490341][ T7384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.578030][ T8132] validate_nla: 3 callbacks suppressed [ 855.578049][ T8132] netlink: 'syz.4.9407': attribute type 1 has an invalid length. [ 855.611300][ T7394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.620063][ T8132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.630833][ T7394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.757091][ T51] Bluetooth: hci1: command tx timeout [ 855.840081][ T8134] netlink: 'syz.2.9408': attribute type 1 has an invalid length. [ 855.915032][ T8134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 855.980050][ T8154] delete_channel: no stack [ 855.983990][ T8157] tipc: Enabling of bearer rejected, failed to enable media [ 856.035897][ T8134] bond3: (slave gretap1): making interface the new active one [ 856.049890][ T8134] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 856.205023][ T8170] tipc: Enabling of bearer rejected, failed to enable media [ 856.241480][ T8167] syzkaller0: entered promiscuous mode [ 856.266111][ T8167] syzkaller0: entered allmulticast mode [ 856.788159][ T8200] __nla_validate_parse: 11 callbacks suppressed [ 856.788181][ T8200] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9424'. [ 856.937089][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9426'. [ 856.949644][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9426'. [ 856.959393][ T8205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9426'. [ 857.009292][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9426'. [ 857.045242][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9426'. [ 857.060425][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9426'. [ 865.059716][ T7385] erspan0 (unregistering): left promiscuous mode [ 865.462635][ T7385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.472929][ T7385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.483265][ T7385] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 865.493407][ T7385] bond0 (unregistering): (slave team0): Releasing backup interface [ 865.504728][ T7385] bond0 (unregistering): Released all slaves [ 865.515498][ T7385] bond1 (unregistering): Released all slaves [ 865.531959][ T7385] bond2 (unregistering): (slave lo): Releasing backup interface [ 865.541476][ T7385] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 865.555481][ T7385] bond2 (unregistering): Released all slaves [ 865.575429][ T7385] bond3 (unregistering): Released all slaves [ 865.590676][ T7385] bond4 (unregistering): Released all slaves [ 865.604448][ T7385] bond5 (unregistering): Released all slaves [ 865.625476][ T2927] lo speed is unknown, defaulting to 1000 [ 865.631946][ T2927] syz0: Port: 1 Link DOWN [ 865.640373][ T795] lo speed is unknown, defaulting to 1000 [ 875.199478][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 875.211324][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 875.217847][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 880.069812][ T8215] x_tables: duplicate underflow at hook 3 [ 880.112613][ T8217] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 880.126827][ T8217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 880.179293][ T8215] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9430'. [ 880.312155][ T8233] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 880.350612][ T8238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9437'. [ 880.520759][ T8250] netlink: 'syz.3.9440': attribute type 4 has an invalid length. [ 880.573001][ T8252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9441'. [ 880.694919][ T8262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9444'. [ 880.795955][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms [ 880.804040][ C1] lec:lec_tx_timeout: lec0 [ 881.156704][ T8288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.318489][ T8304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9453'. [ 881.390331][ T8304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 881.569236][ T8319] syzkaller0: entered promiscuous mode [ 881.574834][ T8319] syzkaller0: entered allmulticast mode [ 881.730235][ T8326] syzkaller0: entered promiscuous mode [ 881.735784][ T8326] syzkaller0: entered allmulticast mode [ 881.812075][ T8330] x_tables: ip_tables: osf match: only valid for protocol 6 [ 882.012405][ T8339] syzkaller0: entered promiscuous mode [ 882.036308][ T8339] syzkaller0: entered allmulticast mode [ 882.230865][ T8352] netlink: 116 bytes leftover after parsing attributes in process `syz.0.9470'. [ 882.317402][ T8362] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9472'. [ 882.370565][ T8354] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9472'. [ 882.773423][ T8393] syzkaller0: entered promiscuous mode [ 882.779598][ T8393] syzkaller0: entered allmulticast mode [ 883.033932][ T8397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9482'. [ 883.160134][ T8410] netlink: 'syz.4.9485': attribute type 1 has an invalid length. [ 883.198821][ T8410] 8021q: adding VLAN 0 to HW filter on device bond6 [ 883.368705][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9489'. [ 883.600722][ T8438] netlink: 'syz.4.9491': attribute type 4 has an invalid length. [ 883.637163][ T8437] netlink: 'syz.4.9491': attribute type 4 has an invalid length. [ 885.649543][ T8386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 885.791820][ T8440] __nla_validate_parse: 2 callbacks suppressed [ 885.791839][ T8440] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.9492'. [ 885.844721][ T8440] netlink: 4552 bytes leftover after parsing attributes in process `syz.3.9492'. [ 885.853062][ T8445] syzkaller0: entered promiscuous mode [ 885.860808][ T8445] syzkaller0: entered allmulticast mode [ 885.985043][ T8452] netlink: 31 bytes leftover after parsing attributes in process `syz.1.9496'. [ 886.111063][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9499'. [ 886.152896][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9499'. [ 886.171850][ T8456] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9497'. [ 886.199761][ T8459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9499'. [ 886.470697][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.532907][ T8488] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20004 [ 886.707649][ T8499] syzkaller0: entered promiscuous mode [ 886.713767][ T8499] syzkaller0: entered allmulticast mode [ 886.928356][ T8512] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 887.149447][ T8529] sctp: [Deprecated]: syz.4.9518 (pid 8529) Use of int in maxseg socket option. [ 887.149447][ T8529] Use struct sctp_assoc_value instead [ 887.218417][ T8523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 887.452922][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9521'. [ 887.465824][ T8543] netlink: 'syz.3.9521': attribute type 7 has an invalid length. [ 887.532090][ T7388] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.553572][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9521'. [ 887.579288][ T7388] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.597585][ T8543] netlink: 'syz.3.9521': attribute type 7 has an invalid length. [ 887.605596][ T7388] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.628040][ T7388] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 887.664135][ T8549] Bluetooth: MGMT ver 1.23 [ 887.918427][ T8566] netlink: 'syz.2.9529': attribute type 1 has an invalid length. [ 888.169579][ T8580] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 888.249569][ T8589] netlink: 'syz.3.9536': attribute type 11 has an invalid length. [ 888.325880][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9536'. [ 888.535701][ T8595] batman_adv: batadv0: Adding interface: gretap0 [ 888.542823][ T8595] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.582976][ T8595] batman_adv: batadv0: Interface activated: gretap0 [ 888.600939][ T8608] pimreg: entered allmulticast mode [ 888.810086][ T8621] macvtap1: entered promiscuous mode [ 888.815714][ T8621] macvtap1: entered allmulticast mode [ 888.822476][ T8621] veth1_vlan: entered allmulticast mode [ 888.914705][ T8624] netlink: 'syz.2.9548': attribute type 1 has an invalid length. [ 888.964833][ T8624] 8021q: adding VLAN 0 to HW filter on device bond4 [ 888.978604][ T8630] bond4: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 889.173937][ T8641] netlink: 'syz.2.9553': attribute type 2 has an invalid length. [ 889.198461][ T8643] netlink: 'syz.1.9554': attribute type 1 has an invalid length. [ 889.401302][ T8651] netlink: 'syz.3.9559': attribute type 6 has an invalid length. [ 889.624275][ T8669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.722866][ T8682] IPVS: length: 4096 != 8 [ 889.739353][ T8683] netlink: 'syz.2.9567': attribute type 10 has an invalid length. [ 889.788911][ T8683] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 889.951453][ T8691] macvtap1: entered allmulticast mode [ 889.957072][ T8691] veth0_macvtap: entered allmulticast mode [ 889.980062][ T8696] netlink: 'syz.4.9572': attribute type 83 has an invalid length. [ 890.144797][ T8705] 5gQ[: renamed from lo (while UP) [ 890.207525][ T8707] syzkaller0: entered promiscuous mode [ 890.218254][ T8707] syzkaller0: entered allmulticast mode [ 890.269738][ T8710] xfrm1: entered allmulticast mode [ 890.480582][ T8729] xt_l2tp: v2 sid > 0xffff: 1114112 [ 890.704517][ T8751] xt_l2tp: missing protocol rule (udp|l2tpip) [ 890.779596][ T8746] xt_CT: No such helper "pptp" [ 890.837936][ T8763] xt_l2tp: v2 doesn't support IP mode [ 891.054336][ T8772] __nla_validate_parse: 12 callbacks suppressed [ 891.054356][ T8772] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9597'. [ 891.193830][ T8779] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9599'. [ 891.233674][ T8782] netlink: 'syz.1.9600': attribute type 1 has an invalid length. [ 891.243710][ T8782] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9600'. [ 891.418365][ T8799] xt_l2tp: invalid flags combination: 0 [ 891.540179][ T7384] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6c [ 891.613408][ T8806] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 891.780946][ T8815] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9610'. [ 891.878439][ T8820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 891.924457][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9614'. [ 891.942923][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9614'. [ 892.109485][ T8834] bridge1: entered promiscuous mode [ 892.114755][ T8834] bridge1: entered allmulticast mode [ 892.251771][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9622'. [ 892.270333][ T8845] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 892.306801][ T8845] team1: entered promiscuous mode [ 892.311979][ T8845] team1: entered allmulticast mode [ 892.460177][ T8860] 8021q: VLANs not supported on gre0 [ 892.536854][ T8863] block nbd5: Unsupported socket: should be TCP or UNIX. [ 892.597461][ T8867] block nbd6: Unsupported socket: should be TCP or UNIX. [ 892.758194][ T8875] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.9628'. [ 893.047773][ T8899] validate_nla: 3 callbacks suppressed [ 893.047855][ T8899] netlink: 'syz.3.9637': attribute type 13 has an invalid length. [ 893.129838][ T8899] gretap0: refused to change device tx_queue_len [ 893.146940][ T8899] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 893.415863][T28817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 893.427340][T28817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 893.435537][T28817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 893.462790][T28817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 893.471262][T28817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 893.524232][ T8917] lo speed is unknown, defaulting to 1000 [ 893.594964][ T8922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9643'. [ 893.806889][ T8922] 8021q: adding VLAN 0 to HW filter on device bond6 [ 893.960198][ T8917] vxcan1 speed is unknown, defaulting to 1000 [ 893.988461][ T8937] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9648'. [ 894.542501][ T8977] netlink: 'syz.3.9659': attribute type 5 has an invalid length. [ 894.583900][ T8977] geneve2: entered promiscuous mode [ 894.591115][ T8977] geneve2: entered allmulticast mode [ 894.620718][ T7384] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 894.630684][ T7384] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 894.651766][ T7384] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 894.661051][ T7384] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 895.001991][ T9000] openvswitch: netlink: Message has -2 unknown bytes. [ 895.052590][ T8917] chnl_net:caif_netlink_parms(): no params data found [ 895.219184][ T9008] xt_socket: unknown flags 0xe4 [ 895.320289][ T8917] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.324347][ T9016] netlink: 'syz.0.9671': attribute type 2 has an invalid length. [ 895.335804][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.354798][ T8917] bridge_slave_0: entered allmulticast mode [ 895.383736][ T8917] bridge_slave_0: entered promiscuous mode [ 895.451542][ T9015] syzkaller0: entered promiscuous mode [ 895.476636][ T9015] syzkaller0: entered allmulticast mode [ 895.484782][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.495844][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.511593][ T8917] bridge_slave_1: entered allmulticast mode [ 895.522650][T28817] Bluetooth: hci5: command tx timeout [ 895.524593][ T8917] bridge_slave_1: entered promiscuous mode [ 897.215630][ T8917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 897.240575][ T8917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 897.351858][ T9043] syzkaller0: entered promiscuous mode [ 897.366676][ T9043] syzkaller0: entered allmulticast mode [ 897.378121][ T9043] netlink: 'syz.0.9677': attribute type 8 has an invalid length. [ 897.423704][ T8917] team0: Port device team_slave_0 added [ 897.444327][ T8917] team0: Port device team_slave_1 added [ 897.541331][ T9060] __nla_validate_parse: 9 callbacks suppressed [ 897.541351][ T9060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9680'. [ 897.543008][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.576614][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.609658][T28817] Bluetooth: hci5: command tx timeout [ 897.627071][ T8917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.659390][ T8917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.698362][ T8917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.761629][ T8917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.798691][ T9066] syzkaller0: entered promiscuous mode [ 897.804631][ T9066] syzkaller0: entered allmulticast mode [ 897.959085][ T8917] hsr_slave_0: entered promiscuous mode [ 897.971136][ T8917] hsr_slave_1: entered promiscuous mode [ 897.988195][ T8917] debugfs: 'hsr0' already exists in 'hsr' [ 897.993968][ T8917] Cannot create hsr debugfs directory [ 898.333699][ T9086] pimreg3: entered allmulticast mode [ 898.911125][ T9114] xt_TCPMSS: Only works on TCP SYN packets [ 898.936269][ T9114] netlink: 748 bytes leftover after parsing attributes in process `syz.1.9698'. [ 899.263090][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9699'. [ 899.301378][ T8917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 899.321523][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9699'. [ 899.338208][ T8917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 899.470378][ T9141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.512959][ T8917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 899.605760][ T9146] veth3: entered allmulticast mode [ 899.647030][ T8917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 899.672453][ T9149] syzkaller0: entered promiscuous mode [ 899.684130][ T9149] syzkaller0: entered allmulticast mode [ 899.689281][T28817] Bluetooth: hci5: command tx timeout [ 899.697063][ T9148] 0: reclassify loop, rule prio 0, protocol 800 [ 899.855581][ T9152] syzkaller1: entered promiscuous mode [ 899.862323][ T9152] syzkaller1: entered allmulticast mode [ 899.990581][ T9169] netlink: 192 bytes leftover after parsing attributes in process `syz.3.9709'. [ 900.107067][ T9179] netlink: 'syz.2.9712': attribute type 21 has an invalid length. [ 900.122157][ T8917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.134342][ T9178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9713'. [ 900.184041][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9713'. [ 900.213567][ T8917] 8021q: adding VLAN 0 to HW filter on device team0 [ 900.239393][ T9178] tipc: Started in network mode [ 900.244699][ T9178] tipc: Node identity ac14140f, cluster identity 4711 [ 900.253616][ T9178] tipc: New replicast peer: 255.255.255.255 [ 900.260895][ T9178] tipc: Enabled bearer , priority 10 [ 900.272509][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.279770][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 900.291421][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9714'. [ 900.304473][ T9185] bridge1: entered promiscuous mode [ 900.314938][ T9185] bridge1: entered allmulticast mode [ 900.327017][ T9185] team0: Port device bridge1 added [ 900.372652][ T9178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9713'. [ 900.383280][ T9187] bridge0: port 1(team0) entered blocking state [ 900.397580][ T9187] bridge0: port 1(team0) entered disabled state [ 900.414399][ T9187] team0: entered allmulticast mode [ 900.438766][ T9187] team_slave_0: entered allmulticast mode [ 900.444624][ T9187] team_slave_1: entered allmulticast mode [ 900.456955][ T9187] team0: entered promiscuous mode [ 900.462110][ T9187] team_slave_0: entered promiscuous mode [ 900.470688][ T9187] team_slave_1: entered promiscuous mode [ 900.511641][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.518892][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.691798][ T9202] tipc: Enabling of bearer rejected, failed to enable media [ 900.950841][ T9222] netlink: 'syz.2.9722': attribute type 10 has an invalid length. [ 901.002409][ T9222] team0: Device veth1_macvtap failed to register rx_handler [ 901.070847][ T9230] xt_TPROXY: Can be used only with -p tcp or -p udp [ 901.142819][ T8917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.287354][ T9243] netlink: 'syz.3.9727': attribute type 1 has an invalid length. [ 901.341317][ T9243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 901.387941][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.428961][ T9233] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9724'. [ 901.464203][ T9251] vlan2: entered promiscuous mode [ 901.484406][ T9251] bond2: entered promiscuous mode [ 901.493911][ T9251] vlan2: entered allmulticast mode [ 901.503978][ T9251] bond2: entered allmulticast mode [ 901.522512][T18448] tipc: Node number set to 2886997007 [ 901.761312][T28817] Bluetooth: hci5: command tx timeout [ 902.085872][ T9279] openvswitch: netlink: Invalid VLAN frame [ 902.119344][ T8917] veth0_vlan: entered promiscuous mode [ 902.150193][ T8917] veth1_vlan: entered promiscuous mode [ 902.208400][ T9281] vlan3: entered promiscuous mode [ 902.213664][ T9281] vlan3: entered allmulticast mode [ 902.232122][ T9281] hsr_slave_1: entered allmulticast mode [ 902.334868][ T8917] veth0_macvtap: entered promiscuous mode [ 902.352647][ T8917] veth1_macvtap: entered promiscuous mode [ 902.415802][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 902.437296][ T8917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.489668][ T7388] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.517455][ T7388] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.569729][ T7388] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.638491][ T7388] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.814620][T27730] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.827747][T27730] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.914616][ T7384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.927695][ T9311] syzkaller0: entered promiscuous mode [ 902.933221][ T9311] syzkaller0: entered allmulticast mode [ 902.943058][ T7384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.081731][ T9314] __nla_validate_parse: 5 callbacks suppressed [ 903.081748][ T9314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9746'. [ 903.100771][ T9315] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9746'. [ 903.733984][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9757'. [ 903.791449][ T9358] netlink: 'syz.1.9760': attribute type 3 has an invalid length. [ 903.969316][ T9371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9763'. [ 904.019007][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9763'. [ 904.054714][ T9372] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9763'. [ 904.184786][ T9377] bond0: entered promiscuous mode [ 904.204434][ T9377] bond_slave_0: entered promiscuous mode [ 904.210961][ T9377] bond_slave_1: entered promiscuous mode [ 904.870235][ T9417] syzkaller0: entered promiscuous mode [ 904.875795][ T9417] syzkaller0: entered allmulticast mode [ 904.977727][ T9422] lo speed is unknown, defaulting to 1000 [ 905.119876][ T9432] xt_hashlimit: size too large, truncated to 1048576 [ 905.377808][ T9422] vxcan1 speed is unknown, defaulting to 1000 [ 905.527939][ T9446] netlink: 'syz.4.9785': attribute type 1 has an invalid length. [ 905.604530][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9786'. [ 905.782819][ T9460] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 905.831169][ T9464] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9788'. [ 905.931174][ T9466] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9789'. [ 905.984195][ T9466] bond0: entered promiscuous mode [ 906.006907][ T9466] bond_slave_0: entered promiscuous mode [ 906.012918][ T9466] bond_slave_1: entered promiscuous mode [ 906.026864][ T9466] gretap0: entered promiscuous mode [ 906.048217][ T9466] hsr1: entered promiscuous mode [ 906.104749][ T9468] syzkaller0: entered promiscuous mode [ 906.110759][ T9468] syzkaller0: entered allmulticast mode [ 906.174834][ T9468] tipc: Started in network mode [ 906.180433][ T9468] tipc: Node identity d2edd6fe95ec, cluster identity 4711 [ 906.189963][ T9468] tipc: Enabled bearer , priority 0 [ 906.212701][ T9468] tipc: Resetting bearer [ 906.255147][ T9467] tipc: Resetting bearer [ 906.295131][ T9467] tipc: Disabling bearer [ 906.412979][ T9487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9795'. [ 906.848615][ T9518] netlink: 'syz.3.9804': attribute type 11 has an invalid length. [ 906.869604][ T9518] netlink: 'syz.3.9804': attribute type 4 has an invalid length. [ 906.909397][ T9524] openvswitch: netlink: Missing key (keys=40, expected=80) [ 908.003214][ T9588] : entered promiscuous mode [ 908.871929][ T9632] __nla_validate_parse: 2 callbacks suppressed [ 908.871949][ T9632] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9837'. [ 908.946997][ T9637] netlink: 'syz.4.9834': attribute type 3 has an invalid length. [ 909.242050][ T9645] x_tables: duplicate underflow at hook 1 [ 909.748831][ T9662] netlink: 'syz.3.9844': attribute type 21 has an invalid length. [ 909.781645][ T9664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9845'. [ 909.790119][ T9662] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9844'. [ 909.825579][ T9665] netlink: 'syz.3.9844': attribute type 21 has an invalid length. [ 909.853149][ T9668] nbd: nbd0 already in use [ 909.859018][ T9665] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9844'. [ 909.875772][ T9668] block nbd0: NBD_DISCONNECT [ 909.887381][ T9668] block nbd0: Send disconnect failed -32 [ 909.950230][ T9674] netlink: 'syz.4.9848': attribute type 1 has an invalid length. [ 910.051206][ T9674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 910.253836][ T9692] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9851'. [ 910.308032][ T9697] xt_TCPMSS: Only works on TCP SYN packets [ 910.330379][ T9217] udevd[9217]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 910.352279][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9851'. [ 910.373120][ T9697] veth0: entered promiscuous mode [ 910.474731][ T9697] veth0: left promiscuous mode [ 910.663743][ T9716] Cannot find add_set index 1 as target [ 910.889921][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9863'. [ 911.089199][ T9741] netlink: 'syz.2.9869': attribute type 1 has an invalid length. [ 911.114784][ T9741] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9869'. [ 911.150949][ T9751] netlink: 'syz.3.9868': attribute type 21 has an invalid length. [ 911.513950][ T9777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 911.542497][ T9765] netlink: 'syz.1.9871': attribute type 10 has an invalid length. [ 911.579626][ T9777] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9876'. [ 911.883501][ T9794] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 911.915440][ T9794] bond2 (unregistering): Released all slaves [ 912.061380][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9886'. [ 912.307514][ T9836] xfrm1: entered promiscuous mode [ 912.325481][ T9836] xfrm1: entered allmulticast mode [ 912.358893][ T9819] syzkaller1: entered promiscuous mode [ 912.367951][ T9819] syzkaller1: entered allmulticast mode [ 912.380580][ T9841] xt_CT: You must specify a L4 protocol and not use inversions on it [ 912.508721][T19238] lec:lec_start_xmit: lec0:No lecd attached [ 912.668706][ T9862] netlink: 'syz.4.9898': attribute type 2 has an invalid length. [ 912.982589][ T9898] openvswitch: netlink: Key type 220 is out of range max 32 [ 913.198423][ T9916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.539299][ T9941] syzkaller0: create flow: hash 1257327341 index 1 [ 913.634684][ T7394] syzkaller0: tun_net_xmit 76 [ 913.645226][ T7394] syzkaller0: tun_net_xmit 48 [ 913.656789][ T2927] syzkaller0: tun_net_xmit 76 [ 913.948764][ T9959] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 914.198245][ T9967] __nla_validate_parse: 71 callbacks suppressed [ 914.198264][ T9967] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9925'. [ 914.215604][ T9967] xt_l2tp: missing protocol rule (udp|l2tpip) [ 914.347135][ T9971] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 914.366329][ T5337] syzkaller0: tun_net_xmit 76 [ 914.393483][ T9923] syzkaller0: delete flow: hash 1257327341 index 1 [ 914.531542][ T9984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9930'. [ 916.172852][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9932'. [ 916.459748][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9937'. [ 916.502310][T10023] : entered promiscuous mode [ 916.584209][T10029] netlink: 'syz.0.9940': attribute type 1 has an invalid length. [ 916.620793][T10029] 8021q: adding VLAN 0 to HW filter on device bond2 [ 916.649839][T10029] bond2: (slave geneve2): making interface the new active one [ 916.665596][T10029] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 917.601582][ T9990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 917.643053][T10041] netlink: 'syz.0.9943': attribute type 2 has an invalid length. [ 917.676643][T10041] netlink: 'syz.0.9943': attribute type 1 has an invalid length. [ 917.773235][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9943'. [ 917.806544][T10042] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 917.825169][T10045] netlink: 58 bytes leftover after parsing attributes in process `syz.4.9944'. [ 917.836204][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms [ 917.844245][ C1] lec:lec_tx_timeout: lec0 [ 917.860129][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9944'. [ 917.898494][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9944'. [ 918.005739][T10061] netlink: 'syz.0.9948': attribute type 7 has an invalid length. [ 918.038603][T10061] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9948'. [ 918.361745][T10080] bond2: entered promiscuous mode [ 918.367718][T10080] bond2: entered allmulticast mode [ 918.373740][T10080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 918.433476][T10070] syzkaller0: entered promiscuous mode [ 918.439802][T10070] syzkaller0: entered allmulticast mode [ 918.448804][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9951'. [ 918.522133][T10072] tipc: Started in network mode [ 918.536682][T10072] tipc: Node identity 76061f614dcf, cluster identity 4711 [ 918.554732][T10072] tipc: Enabled bearer , priority 0 [ 918.603962][T10069] tipc: Resetting bearer [ 918.630351][T10100] netlink: 'syz.4.9959': attribute type 10 has an invalid length. [ 918.658449][T10069] tipc: Disabling bearer [ 918.767531][T10100] team0 (unregistering): Port device team_slave_0 removed [ 918.800141][T10100] team0 (unregistering): Port device team_slave_1 removed [ 918.818592][T10116] netlink: 'syz.2.9963': attribute type 21 has an invalid length. [ 919.100800][T10131] netlink: 'syz.0.9968': attribute type 1 has an invalid length. [ 919.120628][T10131] netlink: 'syz.0.9968': attribute type 1 has an invalid length. [ 919.519446][T10152] __nla_validate_parse: 6 callbacks suppressed [ 919.519465][T10152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9973'. [ 919.724269][T10135] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.732079][T10135] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.148783][T10164] netlink: 'syz.2.9975': attribute type 3 has an invalid length. [ 920.280229][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.310051][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.927996][T10135] veth1_vlan: left allmulticast mode [ 921.117705][T10169] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9977'. [ 921.142175][ T7384] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.151693][ T7384] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.161942][ T7384] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 921.171812][ T7384] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.183613][ T7384] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.192810][ T7384] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 921.236329][ T7384] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.261067][ T7384] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.275824][ T7384] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 921.321158][ T7384] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 921.341003][ T7384] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.350817][ T7384] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 921.449707][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9980'. [ 921.608022][T10187] syzkaller0: entered promiscuous mode [ 921.613562][T10187] syzkaller0: entered allmulticast mode [ 921.631379][T10191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9983'. [ 921.772019][T10197] netlink: 'syz.3.9986': attribute type 10 has an invalid length. [ 921.789253][T10197] team0: Device ipvlan1 failed to register rx_handler [ 921.869798][T10197] netlink: 'syz.3.9986': attribute type 10 has an invalid length. [ 921.892099][T10197] team0: Device ipvlan1 failed to register rx_handler [ 921.946631][T10203] dvmrp0: entered allmulticast mode [ 922.220929][T10236] netlink: 'syz.2.9996': attribute type 1 has an invalid length. [ 922.301453][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9995'. [ 922.338661][T10236] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 922.341953][T10240] netlink: 'syz.0.9995': attribute type 30 has an invalid length. [ 922.359667][T10227] erspan0: entered promiscuous mode [ 922.370291][T10227] erspan0: entered allmulticast mode [ 922.452728][T10238] veth3: entered promiscuous mode [ 922.661259][T10257] netlink: 'syz.1.9999': attribute type 9 has an invalid length. [ 922.675540][T10257] netlink: 'syz.1.9999': attribute type 11 has an invalid length. [ 922.683959][T10246] syzkaller0: entered promiscuous mode [ 922.683984][T10246] syzkaller0: entered allmulticast mode [ 922.706579][T10257] netlink: 'syz.1.9999': attribute type 12 has an invalid length. [ 922.714438][T10257] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.9999'. [ 922.789772][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9999'. [ 922.961697][T10269] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.10002'. [ 923.054134][T10272] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.10004'. [ 924.553429][T10227] bond0: Caught tx_queue_len zero misconfig [ 924.618835][T10280] 5gQ[: entered promiscuous mode [ 924.663451][T10280] tunl0: entered promiscuous mode [ 924.680798][T10280] gre0: entered promiscuous mode [ 924.707973][T10280] batman_adv: batadv0: Interface deactivated: gretap0 [ 924.730171][T10280] gretap0: entered promiscuous mode [ 924.757747][T10280] erspan0: entered promiscuous mode [ 924.772254][T10280] ip_vti0: entered promiscuous mode [ 924.808665][T10287] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 924.925709][T10300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.288979][T10327] openvswitch: netlink: IPv6 tunnel dst address is zero [ 925.565564][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10025'. [ 925.803158][T10355] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10026'. [ 925.913001][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10031'. [ 925.923360][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10031'. [ 926.040343][T10379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 926.201052][T10386] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 926.243197][T10386] ip6erspan0: entered promiscuous mode [ 926.269123][T10392] netlink: 'syz.2.10037': attribute type 1 has an invalid length. [ 926.294981][T10390] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 926.314091][T10398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10039'. [ 926.466656][T10398] nbd5: detected capacity change from 0 to 127 [ 926.500972][T10413] IPVS: set_ctl: invalid protocol: 255 172.30.0.3:20004 [ 926.532791][T28817] block nbd5: Receive control failed (result -32) [ 926.543633][T10416] block nbd5: Dead connection, failed to find a fallback [ 926.580759][T10416] block nbd5: shutting down sockets [ 926.612060][T10416] blk_print_req_error: 138 callbacks suppressed [ 926.612079][T10416] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 926.649010][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10042'. [ 926.678006][T10421] bridge_slave_1: left allmulticast mode [ 926.686579][T10416] buffer_io_error: 138 callbacks suppressed [ 926.686598][T10416] Buffer I/O error on dev nbd5, logical block 0, async page read [ 926.739111][T10421] bridge_slave_1: left promiscuous mode [ 926.744952][T10421] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.758657][T10416] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 926.779033][T10416] Buffer I/O error on dev nbd5, logical block 1, async page read [ 926.789825][T10421] bridge_slave_0: left allmulticast mode [ 926.806995][T10416] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 926.829216][T10416] Buffer I/O error on dev nbd5, logical block 2, async page read [ 926.836280][T10421] bridge_slave_0: left promiscuous mode [ 926.846757][T10416] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 926.851683][T10421] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.869334][T10416] Buffer I/O error on dev nbd5, logical block 3, async page read [ 926.888198][T10416] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 926.898756][T10416] Buffer I/O error on dev nbd5, logical block 0, async page read [ 926.907387][T10416] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 926.919344][T10416] Buffer I/O error on dev nbd5, logical block 1, async page read [ 926.935566][T10416] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 926.986590][T10416] Buffer I/O error on dev nbd5, logical block 2, async page read [ 927.011869][T10416] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 927.023845][T10437] Cannot find add_set index 65532 as target [ 927.039206][T10416] Buffer I/O error on dev nbd5, logical block 3, async page read [ 927.053787][T10416] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 927.085564][T10416] Buffer I/O error on dev nbd5, logical block 0, async page read [ 927.106356][T10440] nbd: must specify a size in bytes for the device [ 927.113964][T10416] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 927.137644][T10440] netlink: 'syz.2.10048': attribute type 10 has an invalid length. [ 927.145802][T10416] Buffer I/O error on dev nbd5, logical block 1, async page read [ 927.190592][T10416] ldm_validate_partition_table(): Disk read failed. [ 927.227052][T10416] Dev nbd5: unable to read RDB block 0 [ 927.239436][T10416] nbd5: unable to read partition table [ 927.270475][T10416] ldm_validate_partition_table(): Disk read failed. [ 927.292944][T10445] netlink: 'syz.3.10050': attribute type 1 has an invalid length. [ 927.308835][T10416] Dev nbd5: unable to read RDB block 0 [ 927.320813][T10416] nbd5: unable to read partition table [ 927.414706][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10051'. [ 927.439518][T10445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10050'. [ 927.474301][T10452] veth3: entered promiscuous mode [ 927.489240][T10452] bond6: (slave veth3): Enslaving as a backup interface with a down link [ 927.558194][T10445] 8021q: adding VLAN 0 to HW filter on device bond6 [ 927.715107][T10471] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10054'. [ 927.750373][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10054'. [ 927.910243][T10475] lo speed is unknown, defaulting to 1000 [ 928.145109][T10494] netlink: 'syz.1.10062': attribute type 1 has an invalid length. [ 928.164341][T10494] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 928.164911][T10491] 8021q: VLANs not supported on ip6tnl0 [ 928.382047][T10509] syzkaller1: entered promiscuous mode [ 928.429125][T10509] syzkaller1: entered allmulticast mode [ 928.547991][T10475] vxcan1 speed is unknown, defaulting to 1000 [ 928.603566][T10519] : entered promiscuous mode [ 928.687491][T10515] tap0: tun_chr_ioctl cmd 1074025676 [ 928.692843][T10515] tap0: owner set to 0 [ 928.855436][T10531] syzkaller0: entered promiscuous mode [ 928.871419][T10531] syzkaller0: entered allmulticast mode [ 929.024266][T10539] netlink: 'syz.4.10075': attribute type 4 has an invalid length. [ 929.297234][T10556] netlink: 'syz.1.10079': attribute type 1 has an invalid length. [ 929.305114][T10556] netlink: 'syz.1.10079': attribute type 2 has an invalid length. [ 929.379136][T10545] xt_NFQUEUE: number of total queues is 0 [ 929.418973][T10566] openvswitch: netlink: Multiple metadata blocks provided [ 929.688800][T10581] netlink: 'syz.3.10087': attribute type 16 has an invalid length. [ 929.703327][T10581] netlink: 'syz.3.10087': attribute type 17 has an invalid length. [ 929.868942][T10581] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.884082][T10581] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 930.085662][T10590] syzkaller0: entered promiscuous mode [ 930.091994][T10590] syzkaller0: entered allmulticast mode [ 930.102587][T10605] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 931.953379][T10618] __nla_validate_parse: 7 callbacks suppressed [ 931.953399][T10618] netlink: 240 bytes leftover after parsing attributes in process `syz.0.10097'. [ 932.245410][T10634] syzkaller0: entered promiscuous mode [ 932.255518][T10634] syzkaller0: entered allmulticast mode [ 932.443784][T10656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10109'. [ 932.576956][T10662] IPVS: Unknown mcast interface: syzkaller1 [ 932.724902][T10674] xt_nat: multiple ranges no longer supported [ 932.738338][T10674] netlink: 'syz.0.10113': attribute type 1 has an invalid length. [ 932.750423][T10673] syzkaller0: entered promiscuous mode [ 932.766631][T10673] syzkaller0: entered allmulticast mode [ 932.769936][T10674] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10113'. [ 932.795627][T10676] netlink: 'syz.3.10115': attribute type 3 has an invalid length. [ 932.811976][T10674] NCSI netlink: No device for ifindex 0 [ 933.049751][T10691] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 933.815516][T10713] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10126'. [ 934.089371][T10728] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10131'. [ 934.108955][T10726] syzkaller0: entered promiscuous mode [ 934.117774][T10728] nbd: illegal input index -8454144 [ 934.123956][T10726] syzkaller0: entered allmulticast mode [ 934.357773][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10136'. [ 934.441525][T10748] netlink: 232 bytes leftover after parsing attributes in process `syz.0.10137'. [ 934.488798][T10753] netlink: 'syz.2.10139': attribute type 9 has an invalid length. [ 934.518604][T10753] netlink: 'syz.2.10139': attribute type 11 has an invalid length. [ 934.537215][T10753] netlink: 'syz.2.10139': attribute type 12 has an invalid length. [ 934.549210][T10753] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.10139'. [ 934.602525][T10760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 934.748232][T10765] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10144'. [ 934.813222][T10767] tipc: Enabling of bearer rejected, failed to enable media [ 934.956375][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10149'. [ 935.029343][T10785] ipt_REJECT: TCP_RESET invalid for non-tcp [ 935.051009][T10785] openvswitch: netlink: Key type 31 is not supported [ 935.068437][T10783] syzkaller0: entered promiscuous mode [ 935.074829][T10783] syzkaller0: entered allmulticast mode [ 935.700791][T10825] ip6t_srh: unknown srh invflags 4000 [ 935.853915][T10836] netlink: 'syz.4.10167': attribute type 8 has an invalid length. [ 935.874803][T10836] C: renamed from lo (while UP) [ 935.889347][T10836] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 935.943733][T10840] mac80211_hwsim hwsim95 syzkaller0: entered promiscuous mode [ 935.968778][T10840] mac80211_hwsim hwsim95 syzkaller0: entered allmulticast mode [ 936.004587][T10836] openvswitch: netlink: Missing valid actions attribute. [ 936.048827][T10836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.276755][T10861] netlink: 'syz.2.10172': attribute type 1 has an invalid length. [ 936.640564][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 936.653785][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 936.660431][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 936.667572][T10892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.771771][T10904] syzkaller0: entered promiscuous mode [ 936.778155][T10904] syzkaller0: entered allmulticast mode [ 937.068657][T10919] __nla_validate_parse: 10 callbacks suppressed [ 937.068678][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10190'. [ 937.157566][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10189'. [ 937.368638][T10931] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10193'. [ 937.503845][T10943] Can't find ip_set type [ 937.725807][T10963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10201'. [ 937.761766][T10965] IPVS: set_ctl: invalid protocol: 44 172.30.0.3:20001 [ 937.793083][T10965] netlink: 'syz.2.10204': attribute type 1 has an invalid length. [ 937.810353][T10965] netlink: 760 bytes leftover after parsing attributes in process `syz.2.10204'. [ 937.827512][T10965] netlink: 1 bytes leftover after parsing attributes in process `syz.2.10204'. [ 937.842486][T10965] netlink: 'syz.2.10204': attribute type 58 has an invalid length. [ 937.851436][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10204'. [ 937.922063][T10974] syzkaller0: entered promiscuous mode [ 937.928455][T10974] syzkaller0: entered allmulticast mode [ 938.086955][T10993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10211'. [ 938.480775][T11017] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 938.522685][T11013] sch_fq: defrate 0 ignored. [ 938.617441][T11021] netlink: 'syz.0.10218': attribute type 29 has an invalid length. [ 938.626999][T11019] sctp: [Deprecated]: syz.3.10215 (pid 11019) Use of int in maxseg socket option. [ 938.626999][T11019] Use struct sctp_assoc_value instead [ 938.677122][T11023] netlink: 'syz.0.10218': attribute type 29 has an invalid length. [ 938.689482][T11021] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10218'. [ 938.726990][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 939.127097][T11037] netlink: 'syz.2.10223': attribute type 32 has an invalid length. [ 939.165612][T11036] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10222'. [ 939.490225][T11045] syzkaller0: entered promiscuous mode [ 939.519125][T11045] syzkaller0: entered allmulticast mode [ 939.766783][T11063] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.146585][T11077] lo speed is unknown, defaulting to 1000 [ 940.340867][T11088] bond3: entered allmulticast mode [ 940.587913][T11097] tipc: Failed to obtain node identity [ 940.617382][T11097] tipc: Enabling of bearer rejected, failed to enable media [ 940.697706][T11077] vxcan1 speed is unknown, defaulting to 1000 [ 941.150812][T11121] xt_hashlimit: overflow, rate too high: 0 [ 941.580226][T11140] netlink: 'syz.1.10255': attribute type 1 has an invalid length. [ 941.789291][T11152] Unknown options in mask b7f2 [ 941.836067][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 941.844165][ C1] lec:lec_tx_timeout: lec0 [ 941.913779][T11153] xt_policy: too many policy elements [ 942.459878][T11161] __nla_validate_parse: 9 callbacks suppressed [ 942.459896][T11161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10261'. [ 942.863504][T11180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 943.079242][T11197] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10272'. [ 943.117236][T11194] Bluetooth: MGMT ver 1.23 [ 943.151561][T11200] veth5: entered promiscuous mode [ 943.160734][T11200] veth5: entered allmulticast mode [ 943.240843][T11204] netlink: 'syz.4.10274': attribute type 21 has an invalid length. [ 943.280712][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10276'. [ 943.289812][T11204] IPv6: NLM_F_CREATE should be specified when creating new route [ 943.478042][T27730] bond0: (slave bond_slave_0): interface is now down [ 943.499884][T27730] bond0: (slave bond_slave_1): interface is now down [ 943.520595][T27730] bond0: now running without any active interface! [ 943.583262][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10281'. [ 943.721728][T11233] bond4: entered promiscuous mode [ 943.730757][T11233] bond4: entered allmulticast mode [ 943.738603][T11233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 943.819354][T11245] lo speed is unknown, defaulting to 1000 [ 943.881134][T11247] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 944.091064][T11258] tunl0: entered promiscuous mode [ 944.111614][T11258] netlink: 'syz.1.10287': attribute type 3 has an invalid length. [ 944.120951][T11258] netlink: 9 bytes leftover after parsing attributes in process `syz.1.10287'. [ 944.203873][T11260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10288'. [ 944.214356][T11245] vxcan1 speed is unknown, defaulting to 1000 [ 944.657967][T11281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.710907][T11283] netlink: 'syz.1.10296': attribute type 178 has an invalid length. [ 944.841617][T11286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 944.908136][T11290] x_tables: duplicate underflow at hook 1 [ 944.983476][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10301'. [ 945.423956][T11320] 5gQ[: left promiscuous mode [ 945.489401][T11320] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 945.858352][T11337] : renamed from veth1_vlan (while UP) [ 946.033024][T11344] veth7: entered allmulticast mode [ 946.044202][T11353] netlink: 92 bytes leftover after parsing attributes in process `syz.2.10322'. [ 946.062458][T11349] tipc: Started in network mode [ 946.074327][T11349] tipc: Node identity f2d87a77b711, cluster identity 4711 [ 946.099638][T11349] tipc: Enabled bearer , priority 0 [ 946.174553][T11353] netlink: 'syz.2.10322': attribute type 10 has an invalid length. [ 946.209277][T11364] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10324'. [ 946.219126][T11353] team0: Device ipvlan1 failed to register rx_handler [ 946.294520][T11349] tipc: Disabling bearer [ 946.327910][T11364] syzkaller0: entered promiscuous mode [ 946.333548][T11364] syzkaller0: entered allmulticast mode [ 946.626185][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10330'. [ 947.411294][T11436] netlink: 'syz.2.10343': attribute type 3 has an invalid length. [ 947.468082][T11440] __nla_validate_parse: 4 callbacks suppressed [ 947.468102][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10342'. [ 947.543925][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10346'. [ 948.956474][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 949.675786][T11400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 949.875096][T11465] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 949.978927][T11484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10353'. [ 950.075034][T11481] 8021q: adding VLAN 0 to HW filter on device bond5 [ 950.133197][T11491] netlink: 'syz.2.10360': attribute type 8 has an invalid length. [ 950.151050][T11492] syzkaller0: entered promiscuous mode [ 950.169401][T11492] syzkaller0: entered allmulticast mode [ 950.208076][T11494] netlink: 'syz.4.10361': attribute type 1 has an invalid length. [ 950.222292][T11497] syzkaller0: entered promiscuous mode [ 950.238807][T11494] netlink: 228 bytes leftover after parsing attributes in process `syz.4.10361'. [ 950.258303][T11497] syzkaller0: entered allmulticast mode [ 950.267484][T11496] tipc: Enabled bearer , priority 0 [ 950.340231][T11504] syzkaller0: entered promiscuous mode [ 950.348687][T11504] syzkaller0: entered allmulticast mode [ 950.372695][T11496] tipc: Resetting bearer [ 950.429120][T11496] tipc: Disabling bearer [ 950.611782][T11520] xt_TCPMSS: Only works on TCP SYN packets [ 950.741431][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10371'. [ 950.759574][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10371'. [ 950.778643][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10371'. [ 950.809514][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10371'. [ 950.845008][T11541] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 950.881539][T11543] netlink: 'syz.2.10374': attribute type 9 has an invalid length. [ 950.890553][T11543] netlink: 'syz.2.10374': attribute type 11 has an invalid length. [ 950.900918][T11543] netlink: 'syz.2.10374': attribute type 12 has an invalid length. [ 950.924242][T11543] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.10374'. [ 950.945520][T11543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10374'. [ 950.968766][T11546] "syz.2.10374" (11546) uses obsolete ecb(arc4) skcipher [ 951.381838][T11574] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 951.397053][T11574] syzkaller1: Linktype set failed because interface is up [ 951.419465][T11574] veth0: entered promiscuous mode [ 951.430254][ T5335] syzkaller1: tun_net_xmit 90 [ 951.698805][T11595] ip6t_srh: unknown srh match flags 5F28 [ 951.735458][T11595] xt_TCPMSS: Only works on TCP SYN packets [ 952.032117][T11608] netlink: 'syz.1.10394': attribute type 1 has an invalid length. [ 952.067042][T11608] netlink: 'syz.1.10394': attribute type 1 has an invalid length. [ 952.613867][T11649] netlink: 'syz.2.10409': attribute type 29 has an invalid length. [ 952.647540][T11649] netlink: 'syz.2.10409': attribute type 29 has an invalid length. [ 952.690103][T11649] __nla_validate_parse: 6 callbacks suppressed [ 952.690124][T11649] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10409'. [ 952.892324][T11659] netlink: 'syz.4.10414': attribute type 12 has an invalid length. [ 952.901146][T11659] netlink: 148 bytes leftover after parsing attributes in process `syz.4.10414'. [ 952.913177][T11659] netlink: 51 bytes leftover after parsing attributes in process `syz.4.10414'. [ 953.001377][T11666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10416'. [ 953.152615][T11675] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 953.332927][T11671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 953.465044][T11690] netlink: 280 bytes leftover after parsing attributes in process `syz.0.10424'. [ 953.483653][T11691] xt_cluster: node mask cannot exceed total number of nodes [ 953.621398][T11695] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.10428'. [ 953.764605][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10429'. [ 953.774015][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10429'. [ 954.076324][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10433'. [ 954.085780][T11731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10433'. [ 954.621065][T11768] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 954.893933][T11780] erspan0: entered promiscuous mode [ 954.901214][T11780] gretap0: entered promiscuous mode [ 954.907657][T11780] debugfs: 'hsr1' already exists in 'hsr' [ 954.913574][T11780] Cannot create hsr debugfs directory [ 954.921643][T11784] bond0: (slave gre0): Error: Device type is different from other slaves [ 955.193802][T11802] netem: incorrect ge model size [ 955.203235][T11802] netem: change failed [ 955.261509][T11800] syzkaller0: entered promiscuous mode [ 955.271127][T11800] syzkaller0: entered allmulticast mode [ 955.533484][T11817] bridge3: entered promiscuous mode [ 955.539439][T11817] bridge3: entered allmulticast mode [ 955.551601][T11822] validate_nla: 10 callbacks suppressed [ 955.551619][T11822] netlink: 'syz.4.10471': attribute type 1 has an invalid length. [ 955.552211][T11817] team0: Port device bridge3 added [ 955.559669][T11822] netlink: 'syz.4.10471': attribute type 3 has an invalid length. [ 955.598453][T11824] xt_HMARK: spi-set and port-set can't be combined [ 955.631303][T11824] vlan2: entered promiscuous mode [ 955.637490][T11824] bridge0: entered promiscuous mode [ 955.911872][T11837] syzkaller1: entered promiscuous mode [ 955.928867][T11837] syzkaller1: entered allmulticast mode [ 956.017278][T11847] sctp_setsockopt_maxburst: 23 callbacks suppressed [ 956.017297][T11847] sctp: [Deprecated]: syz.3.10480 (pid 11847) Use of int in max_burst socket option deprecated. [ 956.017297][T11847] Use struct sctp_assoc_value instead [ 956.088935][T11845] syzkaller0: entered promiscuous mode [ 956.094539][T11845] syzkaller0: entered allmulticast mode [ 956.228475][T11856] netlink: 'syz.4.10485': attribute type 39 has an invalid length. [ 956.532978][T11867] bond4: invalid ARP target 0.0.0.0 specified for addition [ 956.540827][T11867] bond4: option arp_ip_target: invalid value (0) [ 956.551839][T11867] bond4 (unregistering): Released all slaves [ 958.580342][T11908] netlink: 'syz.0.10499': attribute type 10 has an invalid length. [ 958.589998][T11908] __nla_validate_parse: 14 callbacks suppressed [ 958.590016][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10499'. [ 958.619002][T11908] dummy0: entered promiscuous mode [ 958.624727][T11908] bridge0: port 3(dummy0) entered blocking state [ 958.632354][T11908] bridge0: port 3(dummy0) entered disabled state [ 958.641149][T11908] dummy0: entered allmulticast mode [ 958.651272][T11908] bridge0: port 3(dummy0) entered blocking state [ 958.657772][T11908] bridge0: port 3(dummy0) entered forwarding state [ 958.880697][T11920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10505'. [ 958.910483][T11920] netlink: 'syz.3.10505': attribute type 11 has an invalid length. [ 958.947871][T11920] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10505'. [ 959.062593][T11935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10508'. [ 959.087830][T11936] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10508'. [ 959.480862][T11956] syzkaller0: entered promiscuous mode [ 959.492182][T11961] netlink: 88 bytes leftover after parsing attributes in process `syz.1.10516'. [ 959.506585][T11956] syzkaller0: entered allmulticast mode [ 959.612086][T11967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10514'. [ 959.688139][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10518'. [ 959.763606][T11980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10520'. [ 960.153111][T12003] bridge0: port 3(batadv1) entered blocking state [ 960.173438][T12003] bridge0: port 3(batadv1) entered disabled state [ 960.191745][T12003] batadv1: entered allmulticast mode [ 960.224549][T12003] batadv1: entered promiscuous mode [ 960.266111][T12012] delete_channel: no stack [ 960.460661][T12019] dvmrp0: entered allmulticast mode [ 960.643932][ T7379] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 960.653806][ T7379] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 960.749480][T12039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 960.827451][T12039] team0 (unregistering): Port device team_slave_0 removed [ 960.871543][T12039] team0 (unregistering): Port device team_slave_1 removed [ 960.969455][T12061] netlink: 'syz.2.10546': attribute type 21 has an invalid length. [ 960.991956][T12062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10547'. [ 961.042053][T12061] netlink: 'syz.2.10546': attribute type 5 has an invalid length. [ 961.512561][T12101] syzkaller1: entered promiscuous mode [ 961.525450][T12101] syzkaller1: entered allmulticast mode [ 961.649417][T12116] netlink: 'syz.1.10561': attribute type 9 has an invalid length. [ 961.667658][T12118] netlink: 'syz.0.10557': attribute type 1 has an invalid length. [ 961.769877][T12118] 8021q: adding VLAN 0 to HW filter on device bond3 [ 962.049839][T12143] netlink: 'syz.4.10569': attribute type 27 has an invalid length. [ 962.059026][T12143] netlink: 'syz.4.10569': attribute type 1 has an invalid length. [ 962.072188][T12143] netlink: 'syz.4.10569': attribute type 27 has an invalid length. [ 962.110174][T12144] netlink: 'syz.3.10568': attribute type 1 has an invalid length. [ 962.163494][T12154] IPv6: addrconf: prefix option has invalid lifetime [ 962.202384][T12155] bond7: (slave gretap1): making interface the new active one [ 962.211498][T12155] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 962.408230][T12159] xt_ecn: cannot match TCP bits for non-tcp packets [ 962.421536][T12165] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 962.434825][T12169] netlink: 'syz.1.10576': attribute type 1 has an invalid length. [ 962.552260][T12169] 8021q: adding VLAN 0 to HW filter on device bond6 [ 962.693368][T12182] netlink: 'syz.4.10580': attribute type 16 has an invalid length. [ 962.872631][T12195] openvswitch: netlink: Multiple metadata blocks provided [ 962.909976][T12182] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.917728][T12182] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.994439][T12182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.010607][T12182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.172124][T12209] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 963.208659][ T7388] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.229520][ T7388] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.245566][ T7388] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.306251][ T7388] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.529860][T12219] bond8: (slave gretap2): making interface the new active one [ 963.542214][T12219] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 963.552851][T12224] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 963.608254][T12225] __nla_validate_parse: 12 callbacks suppressed [ 963.608275][T12225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10591'. [ 963.665857][T12236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10594'. [ 963.757537][T12198] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 963.850900][T12245] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 963.861518][T12245] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 963.873869][T12245] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 963.905413][T12252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10600'. [ 963.921449][T12253] xt_HMARK: spi-set and port-set can't be combined [ 963.966998][T12252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10600'. [ 964.111702][T12264] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10602'. [ 964.132109][T12264] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10602'. [ 964.162141][T12264] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10602'. [ 964.192994][T12269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 964.256570][T12259] A link change request failed with some changes committed already. Interface 5gQ[ may have been left with an inconsistent configuration, please check. [ 964.394792][T12277] can: request_module (can-proto-3) failed. [ 964.757076][T12297] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10612'. [ 964.882236][T12292] delete_channel: no stack [ 964.975046][T12309] x_tables: duplicate underflow at hook 2 [ 965.008251][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10617'. [ 965.251851][ T30] audit: type=1800 audit(1770989796.836:8): pid=12322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.10622" name="memory.events" dev="tmpfs" ino=1765 res=0 errno=0 [ 965.307768][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10623'. [ 965.327995][T12327] chnl_net:caif_netlink_parms(): no params data found [ 965.346345][ T30] audit: type=1804 audit(1770989796.836:9): pid=12322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.10622" name="/newroot/343/memory.events" dev="tmpfs" ino=1765 res=1 errno=0 [ 965.371249][T12328] Cannot find del_set index 65531 as target [ 966.143884][T12373] syzkaller0: entered promiscuous mode [ 966.161161][T12373] syzkaller0: entered allmulticast mode [ 966.246277][T12380] openvswitch: netlink: Key type 220 is out of range max 32 [ 966.357331][T12385] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 966.539669][T12399] openvswitch: netlink: IP tunnel dst address not specified [ 966.650207][T12401] veth0: entered promiscuous mode [ 966.657774][T12400] veth0: left promiscuous mode [ 966.811651][T12419] gtp0: entered promiscuous mode [ 966.824686][T12419] syzkaller0: entered promiscuous mode [ 966.830734][T12419] syzkaller0: entered allmulticast mode [ 966.852243][T12422] netem: change failed [ 966.933538][T12425] syzkaller0: entered promiscuous mode [ 966.940717][T12425] syzkaller0: entered allmulticast mode [ 967.262015][T12444] validate_nla: 5 callbacks suppressed [ 967.262031][T12444] netlink: 'syz.2.10656': attribute type 17 has an invalid length. [ 967.304927][T12438] syzkaller0: entered promiscuous mode [ 967.316076][T12438] syzkaller0: entered allmulticast mode [ 967.506703][T12448] netlink: 'syz.2.10658': attribute type 1 has an invalid length. [ 967.523943][T12450] netlink: 'syz.1.10659': attribute type 6 has an invalid length. [ 967.557133][T12453] tipc: Trying to set illegal importance in message [ 967.595297][T12454] netlink: 'syz.1.10659': attribute type 6 has an invalid length. [ 969.358875][T12474] netlink: 'syz.2.10662': attribute type 6 has an invalid length. [ 969.636454][T12490] tipc: Failed to remove unknown binding: 66,0,0/0:4126298868/4126298869 [ 969.723492][T12499] tipc: Failed to remove unknown binding: 66,0,0/0:4126298868/4126298869 [ 969.908769][T12505] netlink: 'syz.2.10672': attribute type 1 has an invalid length. [ 969.934318][T12505] __nla_validate_parse: 10 callbacks suppressed [ 969.934336][T12505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10672'. [ 969.950474][T12508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10671'. [ 969.978317][T12507] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10673'. [ 970.014208][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10674'. [ 970.042869][T12513] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10675'. [ 971.693485][T12521] netlink: 'syz.3.10676': attribute type 5 has an invalid length. [ 971.968295][T12553] s5: renamed from vlan1 (while UP) [ 972.114861][T12564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10685'. [ 972.213666][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10690'. [ 972.242036][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10690'. [ 972.254062][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10690'. [ 972.314607][T12582] netlink: 'syz.4.10692': attribute type 2 has an invalid length. [ 972.428523][T12586] macsec2: entered promiscuous mode [ 972.528552][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10694'. [ 972.735090][T12604] netlink: 'syz.2.10699': attribute type 1 has an invalid length. [ 972.747187][T12599] lo speed is unknown, defaulting to 1000 [ 972.900843][T12607] xt_l2tp: v2 doesn't support IP mode [ 973.384416][T12599] vxcan1 speed is unknown, defaulting to 1000 [ 973.790192][T12649] unsupported nla_type 33542 [ 973.989458][T12660] netlink: 'syz.0.10714': attribute type 1 has an invalid length. [ 974.120925][T12665] ------------[ cut here ]------------ [ 974.126842][T12665] msk->pm.local_addr_used == 0 [ 974.126868][T12665] WARNING: net/mptcp/pm_kernel.c:1070 at mptcp_pm_nl_del_addr_doit+0xfb1/0x1430, CPU#1: syz.1.10716/12665 [ 974.143089][T12665] Modules linked in: [ 974.147444][T12665] CPU: 1 UID: 0 PID: 12665 Comm: syz.1.10716 Not tainted syzkaller #0 PREEMPT(full) [ 974.157006][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 974.167157][T12665] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 974.173730][T12665] Code: 01 00 00 49 89 c6 e8 ee bd 36 f6 e9 28 fb ff ff e8 e4 bd 36 f6 48 89 df be 03 00 00 00 e8 57 5f 17 f9 eb a4 e8 d0 bd 36 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 974.193443][T12665] RSP: 0018:ffffc9000e8ff160 EFLAGS: 00010287 [ 974.199589][T12665] RAX: ffffffff8b8d7d00 RBX: 0000000000000000 RCX: 0000000000080000 [ 974.207645][T12665] RDX: ffffc90014a10000 RSI: 00000000000006fb RDI: 00000000000006fc [ 974.215647][T12665] RBP: ffffc9000e8ff3b0 R08: ffff88809cd13107 R09: 1ffff110139a2620 [ 974.223716][T12665] R10: dffffc0000000000 R11: ffffed10139a2621 R12: 1ffff110139a261f [ 974.231753][T12665] R13: ffff88808ef77a80 R14: ffff88809cd12640 R15: ffff88809cd130f8 [ 974.239796][T12665] FS: 00007fc64b26d6c0(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 974.248793][T12665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 974.255416][T12665] CR2: 00007ff773d456b8 CR3: 00000000683e0000 CR4: 00000000003526f0 [ 974.263490][T12665] Call Trace: [ 974.266856][T12665] [ 974.269837][T12665] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 974.276107][T12665] ? rcu_is_watching+0x15/0xb0 [ 974.280927][T12665] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 974.287372][T12665] genl_family_rcv_msg_doit+0x22a/0x330 [ 974.292991][T12665] ? __asan_memcpy+0x40/0x70 [ 974.297699][T12665] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 974.303826][T12665] ? bpf_lsm_capable+0x9/0x20 [ 974.308586][T12665] ? security_capable+0x7e/0x2c0 [ 974.313572][T12665] genl_rcv_msg+0x61c/0x7a0 [ 974.318149][T12665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.323214][T12665] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 974.329477][T12665] ? __pfx_ref_tracker_free+0x10/0x10 [ 974.334901][T12665] netlink_rcv_skb+0x232/0x4b0 [ 974.339762][T12665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.344845][T12665] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.350215][T12665] ? genl_rcv+0x19/0x40 [ 974.354455][T12665] ? down_read+0x272/0x2e0 [ 974.358966][T12665] ? genl_rcv+0xd/0x40 [ 974.363082][T12665] genl_rcv+0x28/0x40 [ 974.367193][T12665] netlink_unicast+0x80f/0x9b0 [ 974.372025][T12665] ? __pfx_netlink_unicast+0x10/0x10 [ 974.377432][T12665] ? netlink_sendmsg+0x650/0xb40 [ 974.382431][T12665] ? skb_put+0x11b/0x210 [ 974.386776][T12665] netlink_sendmsg+0x813/0xb40 [ 974.391590][T12665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.397011][T12665] ? aa_sock_msg_perm+0xf1/0x1b0 [ 974.401994][T12665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 974.407372][T12665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.412743][T12665] ____sys_sendmsg+0xa68/0xad0 [ 974.417650][T12665] ? __might_fault+0xaf/0x130 [ 974.422381][T12665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.427789][T12665] ? import_iovec+0x73/0xa0 [ 974.432350][T12665] ___sys_sendmsg+0x2a5/0x360 [ 974.437122][T12665] ? __lock_acquire+0x6b5/0x2cf0 [ 974.442101][T12665] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.447392][T12665] ? futex_wake+0x4ac/0x580 [ 974.451956][T12665] ? __fget_files+0x2a/0x420 [ 974.456624][T12665] ? __fget_files+0x3a0/0x420 [ 974.461369][T12665] __x64_sys_sendmsg+0x1bd/0x2a0 [ 974.466419][T12665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.471940][T12665] ? rcu_is_watching+0x15/0xb0 [ 974.476826][T12665] do_syscall_64+0x14d/0xf80 [ 974.481485][T12665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.487657][T12665] ? trace_irq_disable+0x37/0x100 [ 974.492732][T12665] ? clear_bhb_loop+0x40/0x90 [ 974.497500][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.503488][T12665] RIP: 0033:0x7fc64a39bf79 [ 974.508002][T12665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.527876][T12665] RSP: 002b:00007fc64b26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.536388][T12665] RAX: ffffffffffffffda RBX: 00007fc64a615fa0 RCX: 00007fc64a39bf79 [ 974.544489][T12665] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 974.552686][T12665] RBP: 00007fc64a4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 974.560738][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 974.568801][T12665] R13: 00007fc64a616038 R14: 00007fc64a615fa0 R15: 00007ffd987a17f8 [ 974.576889][T12665] [ 974.579956][T12665] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 974.587271][T12665] CPU: 1 UID: 0 PID: 12665 Comm: syz.1.10716 Not tainted syzkaller #0 PREEMPT(full) [ 974.596776][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 974.606888][T12665] Call Trace: [ 974.610219][T12665] [ 974.613178][T12665] vpanic+0x1e0/0x670 [ 974.617218][T12665] panic+0xc5/0xd0 [ 974.620988][T12665] ? __pfx_panic+0x10/0x10 [ 974.625496][T12665] __warn+0x315/0x4a0 [ 974.629518][T12665] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 974.635455][T12665] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 974.641397][T12665] __report_bug+0x29a/0x540 [ 974.645943][T12665] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 974.651863][T12665] ? __pfx___report_bug+0x10/0x10 [ 974.656928][T12665] ? __lock_acquire+0x6b5/0x2cf0 [ 974.661889][T12665] ? reacquire_held_locks+0x104/0x190 [ 974.667368][T12665] ? __lock_sock_fast+0x45/0xe0 [ 974.672343][T12665] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 974.678280][T12665] report_bug+0x16a/0x220 [ 974.682648][T12665] ? mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 974.688566][T12665] ? mptcp_pm_nl_del_addr_doit+0xfb3/0x1430 [ 974.694493][T12665] handle_bug+0x98/0x200 [ 974.698791][T12665] exc_invalid_op+0x1a/0x50 [ 974.703321][T12665] asm_exc_invalid_op+0x1a/0x20 [ 974.708183][T12665] RIP: 0010:mptcp_pm_nl_del_addr_doit+0xfb1/0x1430 [ 974.714708][T12665] Code: 01 00 00 49 89 c6 e8 ee bd 36 f6 e9 28 fb ff ff e8 e4 bd 36 f6 48 89 df be 03 00 00 00 e8 57 5f 17 f9 eb a4 e8 d0 bd 36 f6 90 <0f> 0b 90 e9 ad fe ff ff 89 d9 80 e1 07 38 c1 0f 8c 14 fb ff ff 48 [ 974.734406][T12665] RSP: 0018:ffffc9000e8ff160 EFLAGS: 00010287 [ 974.740576][T12665] RAX: ffffffff8b8d7d00 RBX: 0000000000000000 RCX: 0000000000080000 [ 974.748563][T12665] RDX: ffffc90014a10000 RSI: 00000000000006fb RDI: 00000000000006fc [ 974.756547][T12665] RBP: ffffc9000e8ff3b0 R08: ffff88809cd13107 R09: 1ffff110139a2620 [ 974.764548][T12665] R10: dffffc0000000000 R11: ffffed10139a2621 R12: 1ffff110139a261f [ 974.772534][T12665] R13: ffff88808ef77a80 R14: ffff88809cd12640 R15: ffff88809cd130f8 [ 974.780529][T12665] ? mptcp_pm_nl_del_addr_doit+0xfb0/0x1430 [ 974.786479][T12665] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 974.792680][T12665] ? rcu_is_watching+0x15/0xb0 [ 974.797498][T12665] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 974.803850][T12665] genl_family_rcv_msg_doit+0x22a/0x330 [ 974.809418][T12665] ? __asan_memcpy+0x40/0x70 [ 974.814042][T12665] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 974.820172][T12665] ? bpf_lsm_capable+0x9/0x20 [ 974.824866][T12665] ? security_capable+0x7e/0x2c0 [ 974.829829][T12665] genl_rcv_msg+0x61c/0x7a0 [ 974.834452][T12665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.839496][T12665] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 974.845682][T12665] ? __pfx_ref_tracker_free+0x10/0x10 [ 974.851088][T12665] netlink_rcv_skb+0x232/0x4b0 [ 974.855874][T12665] ? __pfx_genl_rcv_msg+0x10/0x10 [ 974.861017][T12665] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 974.866343][T12665] ? genl_rcv+0x19/0x40 [ 974.870534][T12665] ? down_read+0x272/0x2e0 [ 974.874969][T12665] ? genl_rcv+0xd/0x40 [ 974.879066][T12665] genl_rcv+0x28/0x40 [ 974.883095][T12665] netlink_unicast+0x80f/0x9b0 [ 974.887910][T12665] ? __pfx_netlink_unicast+0x10/0x10 [ 974.893261][T12665] ? netlink_sendmsg+0x650/0xb40 [ 974.898219][T12665] ? skb_put+0x11b/0x210 [ 974.902501][T12665] netlink_sendmsg+0x813/0xb40 [ 974.907281][T12665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.912586][T12665] ? aa_sock_msg_perm+0xf1/0x1b0 [ 974.917553][T12665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 974.922863][T12665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 974.928157][T12665] ____sys_sendmsg+0xa68/0xad0 [ 974.932950][T12665] ? __might_fault+0xaf/0x130 [ 974.937660][T12665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.942982][T12665] ? import_iovec+0x73/0xa0 [ 974.947525][T12665] ___sys_sendmsg+0x2a5/0x360 [ 974.952319][T12665] ? __lock_acquire+0x6b5/0x2cf0 [ 974.957317][T12665] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.962542][T12665] ? futex_wake+0x4ac/0x580 [ 974.967096][T12665] ? __fget_files+0x2a/0x420 [ 974.971711][T12665] ? __fget_files+0x3a0/0x420 [ 974.976411][T12665] __x64_sys_sendmsg+0x1bd/0x2a0 [ 974.981373][T12665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.986883][T12665] ? rcu_is_watching+0x15/0xb0 [ 974.991718][T12665] do_syscall_64+0x14d/0xf80 [ 974.996384][T12665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.002478][T12665] ? trace_irq_disable+0x37/0x100 [ 975.007573][T12665] ? clear_bhb_loop+0x40/0x90 [ 975.012284][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.018191][T12665] RIP: 0033:0x7fc64a39bf79 [ 975.022653][T12665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 975.042278][T12665] RSP: 002b:00007fc64b26d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 975.050715][T12665] RAX: ffffffffffffffda RBX: 00007fc64a615fa0 RCX: 00007fc64a39bf79 [ 975.058727][T12665] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 975.066725][T12665] RBP: 00007fc64a4327e0 R08: 0000000000000000 R09: 0000000000000000 [ 975.074709][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 975.082700][T12665] R13: 00007fc64a616038 R14: 00007fc64a615fa0 R15: 00007ffd987a17f8 [ 975.090703][T12665] [ 975.094364][T12665] Kernel Offset: disabled [ 975.098700][T12665] Rebooting in 86400 seconds..