last executing test programs: 1m21.998573626s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 1m10.205539035s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 1m0.287023984s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 49.778794698s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 47.945428207s ago: executing program 2 (id=794): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000ffff0f000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x1, 0xffffffff}, 0x0, 0x0, 0x4, 0x8, 0x80000001, 0x14, 0x0, 0x0, 0x0, 0x0, {0x0, 0x400000, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000540)=""/237, 0xed, 0x0, &(0x7f0000002400)=""/4096, 0x1000}}, 0x10) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) r8 = socket(0x10, 0x2, 0x0) write(r8, &(0x7f0000000800)="240000001e005f0314f90408faac470002000000010000000000080008000dc013000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x81, 0x4, 0x7, 0x3, 0xb}, @alu={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffec, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000140)='syzkaller\x00', 0xf6, 0xe5, &(0x7f0000000440)=""/229, 0x41100, 0x24, '\x00', r4, @fallback=0x4, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x7, 0x0, &(0x7f0000000680)=[{0x5, 0x4, 0x3, 0x6}, {0x2, 0x1, 0xd, 0x2}, {0x3, 0x1, 0x2}, {0x3, 0x3, 0x4}, {0x8, 0x4, 0xe, 0x6}, {0x5, 0x4, 0xe, 0x7}, {0x1, 0x5, 0x9, 0xb}], 0x10, 0x8, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xffffdd1c, 0x0, 0x1, 0x4, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r10, 0x0, 0x0, 0x40008001) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xf, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f8}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1a, 0x0, &(0x7f0000000180)) 47.6986561s ago: executing program 2 (id=797): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0xc, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe4, &(0x7f0000000500)=""/228, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) 47.440547767s ago: executing program 2 (id=798): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e24, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x40, 0x0, 0xffffffffffffffff}, 0x40000}}, 0xb8}}, 0xc844) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) 46.143551382s ago: executing program 2 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b402000000000000611116020100000085000000d10000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7f, 0x5, 0x1, 0x10040, r2, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x4, @void, @value, @value=r3}, 0x50) (async) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) 34.023231105s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 32.67552924s ago: executing program 2 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b402000000000000611116020100000085000000d10000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7f, 0x5, 0x1, 0x10040, r2, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x4, @void, @value, @value=r3}, 0x50) (async) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) 7.712775622s ago: executing program 3 (id=66): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 7.694070756s ago: executing program 2 (id=803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b402000000000000611116020100000085000000d10000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.events.local\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7f, 0x5, 0x1, 0x10040, r2, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0x4, @void, @value, @value=r3}, 0x50) (async) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) 4.996779175s ago: executing program 1 (id=984): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x48, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, @in={0x2, 0x4e23, @multicast2}]}, &(0x7f0000000180)=0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0xe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4, 0x1}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.771458142s ago: executing program 1 (id=986): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc18"], 0xdd12}], 0x1}, 0x20040051) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @broadcast}, 0x10, 0x0}, 0x4000040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20044810) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5411, 0x0) socket(0x11, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00'}) (async) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc18"], 0xdd12}], 0x1}, 0x20040051) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @broadcast}, 0x10, 0x0}, 0x4000040) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x14, r5, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20044810) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5411, 0x0) (async) 4.655492754s ago: executing program 1 (id=988): r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f0000000080)={0x6, 0x6, 0xffffffffffff1a5f, 0x7, 0x1, 0xc819, 0x2, 0x6}, &(0x7f0000000240)={0x2, 0xffffffff, 0x0, 0xcd, 0x2, 0xa, 0x1e, 0x8000}, &(0x7f0000000280)={0xa9, 0x400, 0xffffffffffffe8da, 0x4e, 0x200, 0x8, 0x8, 0x54ca}, &(0x7f00000002c0), &(0x7f0000000340)={&(0x7f0000000300), 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r5, 0x29, 0x11, 0x0, &(0x7f0000000140)) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x48, &(0x7f0000000000)=@srh={0x3a, 0x8, 0x4, 0x4, 0xf7, 0x40, 0x4, [@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x5, 0x8}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f00000003c0)={r4, r6}, 0xc) 4.553347203s ago: executing program 1 (id=991): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000005200010005bd7000040000000200000008000100", @ANYRES32], 0x1c}}, 0x800) (async) read(r0, &(0x7f0000000080)=""/186, 0xba) unshare(0x26020480) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 4.422665476s ago: executing program 1 (id=993): socket$netlink(0x10, 0x3, 0x10) (async) r0 = socket$netlink(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x10) (async) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000003c0)=@ethtool_rxnfc={0x2e, 0xd, 0x6, {0x1, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4, 0x5}, {0x0, @broadcast, 0x8, 0x5, [0xf, 0x9]}, 0xff, 0x3}}}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048804}, 0x40) (async) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r3, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048804}, 0x40) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) unshare(0x26020480) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x190, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd329}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x400}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x955}}]}, 0x190}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20000001) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000280)={&(0x7f0000000540)={0x190, r5, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xd329}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x400}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0xffffffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x955}}]}, 0x190}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20000001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r6, 0x0}, 0x20) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x785, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000c40)=[{0x8, 0x3, 0x6, 0x6}, {0x5, 0x1, 0xb, 0x9}, {0x100001, 0x1, 0x4, 0xb}], 0x10, 0x3, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000010000000000000000000000611224000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) 3.757289525s ago: executing program 0 (id=999): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000540), 0xff, r1}, 0x38) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) unshare(0x24020400) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x44040}, 0x0) 3.593568908s ago: executing program 0 (id=1001): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001e000504000000000000000004"], 0x114}], 0x1}, 0x10) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x6}, 0x8) (async) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, &(0x7f0000000000)={0x6, 'tunl0\x00', {0x1}, 0x3}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x0, 'dummy0\x00', {0x4}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000440)=0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) writev(r5, &(0x7f00000003c0)=[{&(0x7f00000000c0)="90da00ad", 0x4}, {&(0x7f0000000040)='\x00\x00', 0x2}], 0x2) (async) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x800}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x77c8, 0x0, 0x0, 0x0, 0xc847}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f0000000180)='syzkaller\x00', 0xff, 0x3b, &(0x7f00000001c0)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xf, 0x3ff, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[r3, r3, r3, r3, r3, r3], &(0x7f0000000340)=[{0x5, 0x4, 0x9, 0x4}, {0x5, 0x4, 0xe}, {0x3, 0x1, 0x3, 0x2}, {0x5, 0x3, 0xb, 0xc}, {0x5, 0x1, 0xd, 0x7}, {0x0, 0x1, 0x0, 0x3}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='ext4_journal_start_reserved\x00', r8, 0x0, 0x80000001}, 0x18) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r9) socket$inet_mptcp(0x2, 0x1, 0x106) 3.525632919s ago: executing program 0 (id=1002): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000100005ff05dc0000072d3c45108a3af2", @ANYRES32=0x0, @ANYBLOB="018000000000000020001280080001007369740014000280050005001000000005000400fd000000"], 0x40}}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000019c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="0dbbd90d32cd18f95986e11e9590861e092ffab576dff9db68a2fdc0c67da3f8f1e1e3bb94522f8b979161a13652b3179b16cd54d8bf4580e459b0f96046c702e69f5d78e867018e9b00", 0x4a}], 0x1, &(0x7f00000006c0)=[@iv={0x118, 0x117, 0x2, 0xfd, "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"}, @op={0x18}, @iv={0x58, 0x117, 0x2, 0x44, "438e15584d4a94932a4ac71dd7f24a84c71b814d17fd209e46f402cdeffa3ad33a4e04443452dd8650890cf71c65b634ef6c8640bfefb06cb5d4f07dd6be69ca3a533d9c"}, @iv={0x28, 0x117, 0x2, 0x14, "68dd60534b67422b242f59f46b686865ea9487fd"}, @assoc={0x18, 0x117, 0x4, 0x5c}], 0x1c8, 0x4000081}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f00000004c0)="dbedfe149f4d5c6091d9862a30d412dd8d2dfc1729a25e9f015e5010a0a38d9ccb6b6812ff9b121c1875caa793aa34ff40c4a81f44879627f22a610e514b097b8a3dc3a340de0e9dfb5fe55e", 0x4c}, {&(0x7f0000000580)="a782fa7e21e2ad355a4bc50c5dd20ad5a9731fde118de99b8ffca0021bf42211b9794739af63b4fccc84a0a46f6e92d65076fb5996be755e57de71b2a73ac8217bc9f242c99516325119e018d2aa5c3ce89b3a6bdf25194853f7188c68297da384234ad7c39d413fe6e4b0ab8f", 0x6d}, {&(0x7f0000000a40)="e696a5d588303a682423c5703d767a6f51e0f0b850f733b7bb8fdb4ea6d0ccc9ee3da91096c892da52c7558d066445491d887e874b371dd06c46bdf8c2a3b64e71ee199115242c06b7e19e2176ddf91999828054783e8ba71b850cda647e94af60f48756548ace1d41bb4347c4d3055379496b33204fb0900bb996ef62027ad1dfc1180a65f8bf34eb9bc54149ba9ed21ed9a013bcb00d27b3af194fa3779ec596717d7bcc15d1de9c387e93a4e260e7f37046f63dfafbb966d79dee4d99acd043317ed093", 0xc5}, {&(0x7f0000000600), 0xfffffffffffffcf9}, {&(0x7f00000008c0)="e96905674c85bd09becbb8696c31c0755cb2fd68b91a22db86a1fcce3f290550867b0d0ba3e8e0954f72cf64f51c42f7a963bb29ac861dc0ad5834632659b34952bd80d9cb5404cf04dda21e0f76ce856989bc885ae6d07d629d383b91bdc530b892e95fe2213b87", 0x68}, {&(0x7f0000000b40)="135af82ab99f11ce80c79635869e25912c209d5c41f7cbfdf2ba93a641f71865ad38fdd3475556664a7f5a597230c02d137c25f24375a59ed1d14b13319bbf31ea2268a8fe6f6cf42df9bfe1b2d11db4d6aec697c8367a68989287cd8013749bd267fdcd3410247c39eaae0cd7b5b2090d6eb88d35447f778a7b52c46e95a46e7471dffb898e344770fcb25fd958f6d80d17d2dca14481f7ceac1008d99d151a7c0c2d95a3773bb50fe2d6c380acffa9c7066891a6d37b076b103b14a1fd684e", 0xc0}, {&(0x7f0000000c00)="ef12ae5886e3b51708bea6dd5b6bf3f2bd45139d86cde226ce5670110d312fabfa57b9c04f572941505d66c3520175eee8802da452dd0324d91247f7b46a8daa9ddd0362ef26477d5ca76764bd09665110b621c98f7104eae10d493c67d012044d07d085cec3d850397cc92752ced15bc34484ccd0d69b5f4a12c228f4e5ce0b0041ea467267c00ff524", 0x8a}], 0x7, &(0x7f0000000d40), 0x0, 0x4000040}, {0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000d80)="8f8ad931b70980a15f9637a0a18a499ceeabee1e95d36d2e6050f33eb129f3c46899c31426ea70da1ac21f738cb52c22434d62399be9451e92f9a7a76918d069cc0347fcc9ad6e29123f96d44f68a8f2d7ec31d9872dbb77d73d5d0dd17ab582e1494b1acc0181b8906d133a2cce620882b691b96dd6255dfffba0d814d1cb8fab92ad", 0x83}, {&(0x7f0000001c40)="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", 0x1000}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000000e40)="4a548d7cb12d00d69d7d9693fa0fd95644b04bead7fce62e426507ad44717553d5c6fd88ea05e72c5ac8be75c98da6aae2845796f2fdef23894b95f277ce1e2ad3a38cc4d9b4068a1b1723a3bc519c", 0x4f}, {&(0x7f0000000ec0)="d92c2c23969ea18bec40a585f276c32afcc2e42abf2dd38ec8932464dd59fb6342e115c830482a74274cea493331b1b98ec9425dbebb0178472c2c41a8034309fccb8cd5aab4d7be4928378935a2be1369bc7b97e59e8f3137eec9a331ad2833c7ca97a9905501a39e661034e344d46ca8b2b89be0c1f17f8eb74a18d1a158ea1429e7679f4f5cce8ab368bba0951dfc8458a76c71f049552fb26a717c78ec31d7c200e302ca47f7e609", 0xaa}], 0x5, &(0x7f0000001000)=[@iv={0x20, 0x117, 0x2, 0xc, "7d29f5841fb58d72c76d4c03"}, @iv={0x110, 0x117, 0x2, 0xf7, "24e5e763017284b2612c9f965885256917b137bd9a6ae8812b9629955c33637971cc7e0e7f4af6f17cca2810a4cb501159bcb28d92a8c43c51290dc513107b66d2d5977701fb30c612530b23fbc693551fe93481d930b24c781ecffd95ff463483225811f28b84dbda72c36d27351ef54c91dca733bb966e240774e24b2a8eb8138c84620b2ae5bbc4044485b6de48e3afad92130f6e009a4f13b17313680b2c1806423633c26417dba131b5412aedab161f4cbb1afaaeaa78a0aed18797cd1dd519d3165763ad854a3228ac12f7484603f9c42621ccd01caf036c416b7594567f34da87e8d62ecdcab51b42070d7efbd8637f77ff957a"}, @op={0x18}, @assoc={0x18}, @iv={0xc8, 0x117, 0x2, 0xae, "91b2daa0b8b70864c06a4b5f9e3dee4eb965e8973560420cc856d936ac915097b1df58e8fc46c2b5945af18f1f9b4affab46c6d85c38a3a0d3519f1d19bf3adf696cbe0ae45c119ee4625bd0f34e86c477d798ad5ca54e1bfd520b44a10ac031680773175326624073e9d50d320c0c5ef81fe54d99503b5113d118a24de384da975644e204177f420075fd3145d76538699646fcdf67c09522f8a6f3bcdcdab6aaae108c8790b937668a2b3529da"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffc01}, @assoc={0x18, 0x117, 0x4, 0x4}], 0x288, 0x40040c1}, {0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000012c0)="0e33a7bf3caf726c87665f04b97ebf73b535b1c2a3fa290855971e09351288304393b61fc92ac68f53a45a2f6f02203562c33674c72455ed09c1b621e9c8fdad5e74d5bb0539bc09a228ae18aeb033320d472366e29c2e02768dbdbf6670ff1697f5ab9b43b5bffe1efa30d252a815d73c5980b5dbb188", 0x77}, {&(0x7f0000001340)="f9dafc3ca7a022bb22f5d8c85a9b50899eae7dbbbe74d66346d9b01a8ca9ee106117c261e01d64e3715f007117835c93950c11dc92537cdcd007dc4e6734995c5850eb8bbc5bb54ec6dcf15eb3e65cfa89aa568d4e37acbeaf5882ecddf87a3c7066a3dbedcbb29172e3ca9f68d083d1492a46a8d62293725d133002675bbace282911fc15499df8ea", 0x89}, {&(0x7f0000003c40)="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", 0x1000}, {&(0x7f0000001400)}, {&(0x7f0000001440)="9148fab1224205fc39d5abcbc8843332a0e1543c3948a1ce540e7fc705b375621751816cfa2384c65772a6078280299d0a0cf8c440c7306644a76270b011daaf160fe1620a6d916b2db7400f4ff99b375d4b728656b76d7cfa2f3c8abca36a3380aa4de3bd7d3b8ab38a553d98d28beef32d531f80288279948458990195ad06b9bce793765e7a7a8aacb185686d16c73a1ca72bb9d231b5b84e3a505d388446e3da90bc9e030ed98d6d36fe7f520ee0aff26ba037ce9f470a3174086b05713dcbfc9e458ad986ee71edd1a0e59232780c92df0b3de14346810318c31e1e74", 0xdf}, {&(0x7f0000001540)="bab3701aba3a402b69e3c459d4eaa156d1b0a2c0269489eb6914d2711c01629f130e8a35fe2acae888400caf1d81db017a5519de5ee59220a50250aaf87554ad93645a6e468c236d", 0x48}, {&(0x7f00000015c0)="e114066a4021de9cea23a5887f93ff07679691e8763066f357d0b8f509c7141d7da860146536d8055b03f54948253881ba73c0964a61cb91c6399d4146f2347107668557cfc040d0d5bc9843c3340b63677888e8dc551953911b8c0c41b4c867de90e7afdf41d0205112f32ad306f07000433135c65667952b33d7396b296768401164d76e58f79589eac1351f60efefe758119d663671c2347d2dbf34", 0x9d}, {&(0x7f0000001680)="c5576f779207652591e79221f67cda63883de7f3581823649d9da57c64d24d46d4434526108ea1365c4d3b8e9713217d4966b58651e9bcbbe3e3af4ed494793356d10c6fde51eecf0129782b13174d412bd170abbe5f4ff7f2a73ec8e0e66eb44a4438f62426ef5c33262c585cf8c3841646d9317f431abec901a8b94f8f9ebe23b72722ff72a721f9ba57a00b79cf6bda5d39a80e17581a0b573ccbf514eebcb5ed13a2eb869b1432958eabc10df8e7e66a7dd6d83bbb63559b130aeacbb78c8c048394e1a096e184f760346fb165d9418ea6f690424b3db2bd40ab6ae255e90c37a07ca74dad1f03a72d0675", 0xed}, {&(0x7f0000001780)="d273920f24511675d013", 0xa}], 0x9, &(0x7f0000001880)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x0, 0x117, 0x3, 0x1}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x47, "794f77039a84d1f6965355f4b7b42f85cb1b2720b7cd2ca44435dba9c59592738c2915a8f1f2208b5b2aeee0c2dc007fa4939c090d24dbc856f09a66fcb3fcdf74a4dd028bc99c"}, @iv={0x50, 0x117, 0x2, 0x39, "2842e0a4058d29464580b0d8960a166d6657c23fbc1d5800e82f022fe5dae45e8b942364610fda2419c6360dfddc20248440284c857e885b39"}], 0x140, 0x80}], 0x4, 0x20040080) recvmsg$unix(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/96, 0x60}], 0x1}, 0x2) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000400)={r9, @in={{0x2, 0x4e24, @empty}}, 0x1, 0xf58}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.794814031s ago: executing program 4 (id=1006): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x4}]}, 0x24}}, 0x4004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000300)={0x1, 'pimreg1\x00', {}, 0x39}) listen(r3, 0xe00) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x2, 0x4, 0x46e8, 0x8000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xf, @value=r6, @void, @void, @value}, 0x50) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0xffffffffffffff0b}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e0001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.527446146s ago: executing program 0 (id=1007): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x4c, 0x0, 0x4) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x52, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r7 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000040)={0x24, 0xe, 0x335, 0x0, 0x0, "", [@typed={0x14, 0x5, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}]}, 0x24}], 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=@updpolicy={0x3d0, 0x19, 0x400, 0x70bd28, 0x25dfdbfb, {{@in6=@mcast1, @in6=@local, 0x4e22, 0x7ff, 0x4e22, 0x5, 0x2, 0x9b65a6a790ae2c3b, 0x0, 0x0, 0x0, r8}, {0x4000000000000, 0xc9c, 0xfffffffffffffffa, 0x7, 0xa, 0x17d, 0x6, 0x87a}, {0x1, 0x0, 0x8, 0x3}, 0x154, 0x6e6bb5, 0x2, 0x1, 0x1}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd2a, 0x70bd27, 0x70bd26, 0x70bd27, 0x9, [0x3ff, 0x400]}}, @lifetime_val={0x24, 0x9, {0x9, 0x3, 0x1000, 0x8}}, @migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@loopback, @in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x33, 0x3, 0x0, 0x3503, 0x2, 0xa}, {@in=@private=0xa010100, @in6=@loopback, @in6=@empty, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0xff, 0x2, 0x0, 0x3507, 0xa, 0x2}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, 0x6c, 0x3, 0x0, 0x3504, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in=@private=0xa010102, @in=@local, @in=@remote, 0x2b, 0x1, 0x0, 0x3502, 0x2, 0xa}, {@in6=@empty, @in6=@private0, @in=@empty, @in6=@mcast1, 0x6c, 0x2, 0x0, 0x3500, 0xa, 0x2}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010100, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@private1, 0xff, 0x3, 0x0, 0x3503, 0xa}]}, @algo_comp={0x103, 0x3, {{'lzs\x00'}, 0x5d8, "9a8e3d2790088e543cbf1b03f635b7820bcfdfab76c3eae80988e01b8aa7be72b5de9b1198e16b771c7623d6fcc0ede032e23b0a7d1f9c8a01721c68043066e8e42a102d38bae942f40cc32a4c0730b6b2b68f1dd38faf8ea2cbcbe75a7ba545e806d4cf63619b4e6be4351633e2b956e4b1b2c9f0abde7a3c0d97795a9243a4e3f7adcd555d61fb4bfd62319150f69b5bf0f0594cac7c19519023172e70f0ad8ee4bc381caaec503728df7b0ed5a27a89115bb68e1f987bea442a"}}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x30}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r4, r4, &(0x7f00000004c0), 0x8000000000000001) write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2d, 'devices'}]}, 0x9) ppoll(&(0x7f0000000140)=[{r9, 0x270}], 0x1, 0x0, 0x0, 0x0) writev(r9, &(0x7f0000004680)=[{&(0x7f00000044c0)="c0", 0x1}], 0x1) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r10, 0x325}, 0x14}}, 0x0) 2.066502283s ago: executing program 4 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (rerun: 32) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x8000000, 0x0, @void, @value=r1}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x2}]}, 0x44}}, 0x8000) 1.764005952s ago: executing program 4 (id=1009): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r3], 0x40}}, 0x4008054) 1.635560908s ago: executing program 0 (id=1010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) unshare(0x28020480) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELTABLE={0x40, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x1d, 0x6, "db546f60a298d9042c41839e88ecd76e428895b96dba3c7837"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}}, 0x0) 1.50607089s ago: executing program 4 (id=1011): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, &(0x7f0000001f40)=""/4089, 0x26, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000034c000480240001800b000100736f636b657400001400028008000240000000030800014000000001240001800a00010071756575650000001400028008000440000000100600034023fd06840900010073797a30000000000900020073797a32"], 0xa0}}, 0x0) socket(0x2, 0x80805, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.278799649s ago: executing program 4 (id=1012): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)=0xffff, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010200000000000000000000000805000100070000000900020073797a30000000000c00078008001240fffffdfe050004000000000011000300686173683a6e65742c6e657400000000050005000a000000"], 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) r4 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x20000042, 0x1, 0x3}, 0x10) close(0x3) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x6, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5], &(0x7f0000000100), 0x10, 0xa, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r8, 0x0, 0x60, 0xfe, &(0x7f00000003c0)="6a7231497980f0898d41ec78a373d3fa31bc32b47b3a3d76cc59df75d871a5e27620bfbf5524c3ef147e334b993dd025faeeeee2e88061198ff49f6ab77a9011ccf524e3582d1eb3c6d65c0984b0bd9e0773d0ba688dea23f28cdd067c991d26", &(0x7f0000000640)=""/254, 0xff, 0x0, 0x25, 0xff3, &(0x7f0000000500)="6625a27f4b7e2a4f4d701e4f6a40000000ced7bbf9ffc5bd739cd003b84760ac20b870be44", &(0x7f0000000b40)="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", 0x0, 0x0, 0x1ff}, 0x50) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @empty, 0x7}}, 0x24) connect$rxrpc(r9, &(0x7f0000000040)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x10001}}, 0x24) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000500)={r10, 0x7}, 0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e23, @multicast1}}, [0x2, 0x80, 0x9, 0x401, 0x5, 0x6, 0x613b, 0x19e2, 0x9, 0x1, 0x1, 0x4, 0x8000, 0x3b49c9c5, 0xdb2a]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000440)={r10, 0x6, 0x7, 0x8, 0x0, 0x9, 0x7f, 0x1a, {0x0, @in6={{0xa, 0x4e20, 0xfffffe00, @loopback, 0x5}}, 0x1ff, 0x4, 0x2, 0x3, 0x3}}, &(0x7f0000000880)=0xb0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r12, @ANYRES32=r12], 0x44}}, 0x0) 163.248516ms ago: executing program 4 (id=1013): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000200)={@multicast2, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d844167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000700)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e099c8718cd7c81a759ec5d541757c", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xffffffffffffffd5, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRESOCT=r3], 0x7c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r4, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r4, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$TUNSETLINK(r2, 0x400454cd, 0x207) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f00002b2000/0xc00000)=nil, 0x200000, 0x0, 0x12, r6, 0x0) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000480)={0x0, 0x10}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xe, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r9}, @call={0x85, 0x0, 0x0, 0xc0}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xc}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x49}, @generic={0x7, 0x9, 0x1, 0x9, 0x3}]}, &(0x7f0000000180)='GPL\x00', 0x9ce, 0xa1, &(0x7f0000000280)=""/161, 0x41000, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x3, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r6, r7, r8, r9, 0x1], &(0x7f0000000580)=[{0x2, 0x3, 0x8, 0xb}], 0x10, 0xf, @void, @value}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 160.93014ms ago: executing program 0 (id=1014): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) close(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b40), 0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061107800765a6d"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe9, @void, @value}, 0x94) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffed9fff, 0x1000, 0xffffffff}, 0x20) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c00000094820065f2ffffff6370000000800000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB="00000200"/14, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r4, 0x0, 0xd, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a40), 0x0, 0x10103, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r5) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa08001900e000000214001b00171b3f00"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x400d0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r8, &(0x7f00000000c0), 0x9) sendfile(r8, r7, 0x0, 0x10000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 0s ago: executing program 1 (id=1015): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000085000000a000000095", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000085000000a000000095", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) kernel console output (not intermixed with test programs): 6266][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 126.035217][ T7298] bridge_slave_1: left allmulticast mode [ 126.068222][ T7298] bridge_slave_1: left promiscuous mode [ 126.083820][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.135375][ T7298] bridge_slave_0: left promiscuous mode [ 126.142409][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.181249][ T7298] bridge0 (unregistering): left allmulticast mode [ 126.272069][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.300894][ T7313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 126.758036][ T36] bridge_slave_1: left allmulticast mode [ 126.763734][ T36] bridge_slave_1: left promiscuous mode [ 126.791256][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.820583][ T36] bridge_slave_0: left allmulticast mode [ 126.826916][ T36] bridge_slave_0: left promiscuous mode [ 126.833491][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.230824][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.242014][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.252109][ T36] bond0 (unregistering): Released all slaves [ 127.528033][ T7346] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 127.705207][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 127.736880][ T51] Bluetooth: hci4: command tx timeout [ 127.841097][ T7355] pimreg: entered allmulticast mode [ 127.851749][ T7358] pimreg: left allmulticast mode [ 128.005210][ T36] hsr_slave_0: left promiscuous mode [ 128.024195][ T36] hsr_slave_1: left promiscuous mode [ 128.030361][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.038231][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.047547][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.055645][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.081497][ T36] veth1_macvtap: left promiscuous mode [ 128.093534][ T36] veth0_macvtap: left promiscuous mode [ 128.099414][ T36] veth1_vlan: left promiscuous mode [ 128.104765][ T36] veth0_vlan: left promiscuous mode [ 128.268144][ T7365] netlink: 'syz.0.310': attribute type 9 has an invalid length. [ 128.555168][ T36] team0 (unregistering): Port device team_slave_1 removed [ 128.589993][ T36] team0 (unregistering): Port device team_slave_0 removed [ 129.190325][ T7380] __nla_validate_parse: 4 callbacks suppressed [ 129.190345][ T7380] netlink: 168 bytes leftover after parsing attributes in process `syz.2.314'. [ 129.221447][ T7384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 129.224140][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.261440][ T7382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 129.265141][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.290528][ T7291] bridge_slave_0: entered allmulticast mode [ 129.300100][ T7291] bridge_slave_0: entered promiscuous mode [ 129.413526][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.428706][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.436516][ T7291] bridge_slave_1: entered allmulticast mode [ 129.444746][ T7291] bridge_slave_1: entered promiscuous mode [ 129.741679][ T7397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.753856][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.770292][ T7397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 129.789463][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.815923][ T51] Bluetooth: hci4: command tx timeout [ 129.828077][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 129.830364][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.864466][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 129.943136][ T7291] team0: Port device team_slave_0 added [ 129.978414][ T7291] team0: Port device team_slave_1 added [ 130.042857][ T7417] wg2: entered promiscuous mode [ 130.050887][ T7422] TCP: TCP_TX_DELAY enabled [ 130.190063][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.215048][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.240962][ T7437] netlink: 168 bytes leftover after parsing attributes in process `syz.1.329'. [ 130.285868][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.356660][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.363648][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.431872][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.453579][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.333'. [ 130.599173][ T7291] hsr_slave_0: entered promiscuous mode [ 130.623080][ T7291] hsr_slave_1: entered promiscuous mode [ 130.630030][ T7291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.637847][ T7291] Cannot create hsr debugfs directory [ 130.711824][ T7460] netlink: 'syz.4.338': attribute type 3 has an invalid length. [ 130.725669][ T7460] netlink: 'syz.4.338': attribute type 3 has an invalid length. [ 130.864427][ T7471] netlink: 168 bytes leftover after parsing attributes in process `syz.2.342'. [ 130.937168][ T7466] sock: sock_timestamping_bind_phc: sock not bind to device [ 130.949739][ T7472] syzkaller0: entered promiscuous mode [ 130.955252][ T7472] syzkaller0: entered allmulticast mode [ 131.066230][ T7477] netlink: 'syz.4.341': attribute type 4 has an invalid length. [ 131.434096][ T7490] netlink: 'syz.2.346': attribute type 1 has an invalid length. [ 131.467874][ T7490] netlink: 224 bytes leftover after parsing attributes in process `syz.2.346'. [ 131.896708][ T51] Bluetooth: hci4: command tx timeout [ 132.784498][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.791289][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.175139][ T7523] netlink: 168 bytes leftover after parsing attributes in process `syz.0.353'. [ 133.201165][ T7525] netlink: 'syz.2.354': attribute type 9 has an invalid length. [ 133.210132][ T7525] netlink: 'syz.2.354': attribute type 6 has an invalid length. [ 133.237769][ T7525] netlink: 'syz.2.354': attribute type 7 has an invalid length. [ 133.255659][ T7525] netlink: 'syz.2.354': attribute type 8 has an invalid length. [ 133.371130][ T7532] Bluetooth: MGMT ver 1.23 [ 133.399957][ T7532] geneve2: entered promiscuous mode [ 133.409903][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.426912][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.439427][ T66] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.476429][ T2988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.538786][ T7539] netlink: 'syz.2.359': attribute type 10 has an invalid length. [ 133.606654][ T7539] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 133.774022][ T7291] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 133.868418][ T7291] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 133.880481][ T7291] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 133.888897][ T7553] FAULT_INJECTION: forcing a failure. [ 133.888897][ T7553] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 133.902150][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: syz.2.364 Not tainted 6.16.0-rc2-syzkaller-00592-g0289c51f889e #0 PREEMPT(full) [ 133.902174][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.902200][ T7553] Call Trace: [ 133.902210][ T7553] [ 133.902218][ T7553] dump_stack_lvl+0x189/0x250 [ 133.902257][ T7553] ? __pfx____ratelimit+0x10/0x10 [ 133.902275][ T7553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.902302][ T7553] ? __pfx__printk+0x10/0x10 [ 133.902321][ T7553] ? __might_fault+0xb0/0x130 [ 133.902347][ T7553] should_fail_ex+0x414/0x560 [ 133.902374][ T7553] _copy_from_user+0x2d/0xb0 [ 133.902393][ T7553] __sys_bpf+0x1ed/0x860 [ 133.902417][ T7553] ? __pfx___sys_bpf+0x10/0x10 [ 133.902453][ T7553] ? ksys_write+0x22a/0x250 [ 133.902472][ T7553] ? __pfx_ksys_write+0x10/0x10 [ 133.902485][ T7553] ? rcu_is_watching+0x15/0xb0 [ 133.902519][ T7553] __x64_sys_bpf+0x7c/0x90 [ 133.902540][ T7553] do_syscall_64+0xfa/0x3b0 [ 133.902557][ T7553] ? lockdep_hardirqs_on+0x9c/0x150 [ 133.902573][ T7553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.902590][ T7553] ? clear_bhb_loop+0x60/0xb0 [ 133.902610][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.902633][ T7553] RIP: 0033:0x7f066498e929 [ 133.902652][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.902672][ T7553] RSP: 002b:00007f06627f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.902690][ T7553] RAX: ffffffffffffffda RBX: 00007f0664bb5fa0 RCX: 00007f066498e929 [ 133.902702][ T7553] RDX: 0000000000000010 RSI: 00002000000003c0 RDI: 0000000000000008 [ 133.902712][ T7553] RBP: 00007f06627f6090 R08: 0000000000000000 R09: 0000000000000000 [ 133.902722][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.902731][ T7553] R13: 0000000000000000 R14: 00007f0664bb5fa0 R15: 00007ffdf3d66d08 [ 133.902758][ T7553] [ 134.120013][ T51] Bluetooth: hci4: command tx timeout [ 134.126161][ T7291] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 134.303273][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.331937][ T7566] batadv0: entered promiscuous mode [ 134.337739][ T7566] macsec1: entered promiscuous mode [ 134.345322][ T7566] batadv0: left promiscuous mode [ 134.382903][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.425523][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.432720][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.478803][ T7573] Driver unsupported XDP return value 0 on prog (id 155) dev N/A, expect packet loss! [ 134.497210][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.504449][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.631601][ T7578] __nla_validate_parse: 1 callbacks suppressed [ 134.631620][ T7578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.373'. [ 135.089904][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.152851][ T7594] ipvlan2: entered promiscuous mode [ 135.172587][ T7594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'. [ 135.313786][ T7291] veth0_vlan: entered promiscuous mode [ 135.357697][ T7291] veth1_vlan: entered promiscuous mode [ 135.387935][ T7291] veth0_macvtap: entered promiscuous mode [ 135.409228][ T7291] veth1_macvtap: entered promiscuous mode [ 135.445653][ T7601] netlink: 'syz.0.377': attribute type 10 has an invalid length. [ 135.462992][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.477923][ T7601] veth1_vlan: entered allmulticast mode [ 135.499293][ T7601] team0: Device veth1_vlan failed to register rx_handler [ 135.532710][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.601308][ T2966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.632893][ T2966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.662731][ T2966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.691909][ T2966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.796280][ T7607] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 135.831139][ T7611] netlink: 20 bytes leftover after parsing attributes in process `syz.2.382'. [ 135.892394][ T7607] team0: Port device geneve1 added [ 135.963522][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.990402][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.389682][ T7607] syz.0.380 (7607) used greatest stack depth: 18496 bytes left [ 136.390565][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.516374][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.666551][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.387'. [ 136.716338][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.388'. [ 137.026267][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 137.042687][ T7633] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 137.718943][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.347349][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.556055][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.626829][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.782341][ T7656] raw_sendmsg: syz.4.397 forgot to set AF_INET. Fix it! [ 138.795935][ T7654] netlink: 'syz.0.395': attribute type 11 has an invalid length. [ 138.819594][ T7654] netlink: 224 bytes leftover after parsing attributes in process `syz.0.395'. [ 138.901253][ T7654] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 138.961114][ T7658] tipc: Started in network mode [ 138.971553][ T7658] tipc: Node identity ac14140f, cluster identity 4711 [ 139.027468][ T7658] tipc: New replicast peer: 255.255.255.255 [ 139.126181][ T7658] tipc: Enabled bearer , priority 10 [ 139.140505][ T49] bridge_slave_1: left allmulticast mode [ 139.171284][ T49] bridge_slave_1: left promiscuous mode [ 139.189010][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.227987][ T49] bridge_slave_0: left allmulticast mode [ 139.256002][ T49] bridge_slave_0: left promiscuous mode [ 139.275631][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.570744][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.587123][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.594830][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.608209][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.622757][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.660758][ T7664] netlink: 'syz.4.398': attribute type 15 has an invalid length. [ 139.671690][ T7664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 139.947960][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.960200][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.971611][ T49] bond0 (unregistering): Released all slaves [ 139.985184][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 139.994701][ T7659] tipc: Disabling bearer [ 140.249638][ T7690] xt_hashlimit: size too large, truncated to 1048576 [ 140.301931][ T7688] netlink: 'syz.4.404': attribute type 2 has an invalid length. [ 140.319349][ T7689] xt_TCPMSS: Only works on TCP SYN packets [ 140.684014][ T49] hsr_slave_0: left promiscuous mode [ 140.704373][ T49] hsr_slave_1: left promiscuous mode [ 140.714201][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.726373][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.735626][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.749616][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.785103][ T49] veth1_macvtap: left promiscuous mode [ 140.791377][ T49] veth0_macvtap: left promiscuous mode [ 140.797565][ T49] veth1_vlan: left promiscuous mode [ 140.803095][ T49] veth0_vlan: left promiscuous mode [ 141.432153][ T49] team0 (unregistering): Port device team_slave_1 removed [ 141.467332][ T49] team0 (unregistering): Port device team_slave_0 removed [ 141.657489][ T51] Bluetooth: hci4: command tx timeout [ 141.904241][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'. [ 141.937972][ T7723] netlink: 20 bytes leftover after parsing attributes in process `syz.2.410'. [ 142.048250][ T7661] chnl_net:caif_netlink_parms(): no params data found [ 142.474390][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.483345][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.491612][ T7661] bridge_slave_0: entered allmulticast mode [ 142.499913][ T7661] bridge_slave_0: entered promiscuous mode [ 142.515553][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.522900][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.530216][ T7661] bridge_slave_1: entered allmulticast mode [ 142.538772][ T7661] bridge_slave_1: entered promiscuous mode [ 142.654642][ T7755] netlink: 'syz.0.418': attribute type 8 has an invalid length. [ 142.677985][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 142.728981][ T7661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.757450][ T7661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.814592][ T7760] netlink: 168 bytes leftover after parsing attributes in process `syz.1.419'. [ 142.816779][ T7743] bond_slave_0: entered promiscuous mode [ 142.829465][ T7743] bond_slave_1: entered promiscuous mode [ 142.856236][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 142.873077][ T7743] macvlan0: entered allmulticast mode [ 142.883073][ T7743] bond0: entered allmulticast mode [ 142.891791][ T7743] bond_slave_0: entered allmulticast mode [ 142.905503][ T7743] bond_slave_1: entered allmulticast mode [ 142.923890][ T7743] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 142.947530][ T7743] bond0: left allmulticast mode [ 142.952533][ T7743] bond_slave_0: left allmulticast mode [ 142.958158][ T7743] bond_slave_1: left allmulticast mode [ 142.963860][ T7743] bond_slave_0: left promiscuous mode [ 142.969379][ T7743] bond_slave_1: left promiscuous mode [ 143.023654][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 143.121327][ T7661] team0: Port device team_slave_0 added [ 143.130377][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 143.138495][ T7661] team0: Port device team_slave_1 added [ 143.202329][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 143.235016][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.244969][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.272018][ T7661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.314807][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.336861][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.378166][ T7661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.404209][ T7773] netlink: 'syz.4.422': attribute type 13 has an invalid length. [ 143.426417][ T7773] macvtap0: entered promiscuous mode [ 143.433825][ T7773] macvtap0: refused to change device tx_queue_len [ 143.607471][ T7661] hsr_slave_0: entered promiscuous mode [ 143.613865][ T7661] hsr_slave_1: entered promiscuous mode [ 143.621155][ T7661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.628814][ T7661] Cannot create hsr debugfs directory [ 143.736848][ T51] Bluetooth: hci4: command tx timeout [ 144.976922][ T7661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 144.988150][ T7661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 145.001596][ T7661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 145.014720][ T7661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 145.182253][ T7837] __nla_validate_parse: 56 callbacks suppressed [ 145.182271][ T7837] netlink: 168 bytes leftover after parsing attributes in process `syz.2.437'. [ 145.188062][ T7839] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 145.274441][ T7842] netlink: 'syz.4.438': attribute type 10 has an invalid length. [ 145.285881][ T7842] netlink: 40 bytes leftover after parsing attributes in process `syz.4.438'. [ 145.322707][ T7843] bond2: (slave geneve3): making interface the new active one [ 145.332219][ T7843] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 145.347882][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.356885][ T66] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.375821][ T7839] netlink: 28 bytes leftover after parsing attributes in process `syz.1.436'. [ 145.390960][ T66] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.421806][ T7839] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.450181][ T7661] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.457382][ T66] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.479132][ T66] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 145.530214][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.537531][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.661968][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.669187][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.816953][ T51] Bluetooth: hci4: command tx timeout [ 146.239537][ T7866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.441'. [ 146.600283][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 146.698094][ T7892] netlink: 'syz.0.448': attribute type 1 has an invalid length. [ 146.760545][ T7661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.803571][ T7661] veth0_vlan: entered promiscuous mode [ 146.816233][ T7661] veth1_vlan: entered promiscuous mode [ 146.863621][ T7661] veth0_macvtap: entered promiscuous mode [ 147.050552][ T7661] veth1_macvtap: entered promiscuous mode [ 147.127176][ T7898] netlink: 'syz.1.452': attribute type 10 has an invalid length. [ 147.150819][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.1.452'. [ 147.172200][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'. [ 147.194233][ T7898] dummy0: entered promiscuous mode [ 147.200727][ T7898] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 147.271314][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.331507][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.465259][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.488727][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.574097][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.596009][ T1114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.896155][ T51] Bluetooth: hci4: command tx timeout [ 148.169896][ T7936] netlink: 'syz.1.461': attribute type 21 has an invalid length. [ 148.365031][ T7936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.461'. [ 148.396412][ T7936] netlink: 'syz.1.461': attribute type 1 has an invalid length. [ 148.419336][ T7936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 148.553414][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.585475][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.692850][ T7950] netlink: 168 bytes leftover after parsing attributes in process `syz.1.465'. [ 148.781949][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.820419][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.457245][ T7962] x_tables: duplicate underflow at hook 1 [ 149.534957][ T7962] pim6reg1: entered allmulticast mode [ 149.615368][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.732659][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.822944][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.906000][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.022883][ T12] bridge_slave_1: left allmulticast mode [ 150.028717][ T12] bridge_slave_1: left promiscuous mode [ 150.034535][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.043897][ T12] bridge_slave_0: left allmulticast mode [ 150.052308][ T12] bridge_slave_0: left promiscuous mode [ 150.059290][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.420414][ T7987] __nla_validate_parse: 1 callbacks suppressed [ 150.420447][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.476'. [ 150.532558][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.560927][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.583821][ T12] bond0 (unregistering): Released all slaves [ 150.679179][ T7984] C: renamed from team_slave_0 (while UP) [ 150.693797][ T7984] netlink: 'syz.0.473': attribute type 8 has an invalid length. [ 150.705936][ T7984] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 150.747486][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.756009][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.766338][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.777003][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.785028][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.855472][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.481'. [ 150.869423][ T8001] netlink: 'syz.4.481': attribute type 3 has an invalid length. [ 151.182054][ T8008] netlink: 136 bytes leftover after parsing attributes in process `syz.1.480'. [ 151.193880][ T8008] openvswitch: netlink: Flow key attr not present in new flow. [ 151.429604][ T12] hsr_slave_0: left promiscuous mode [ 151.439832][ T12] hsr_slave_1: left promiscuous mode [ 151.449384][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.463198][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.472742][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.480351][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.524958][ T12] veth1_macvtap: left promiscuous mode [ 151.539309][ T12] veth0_macvtap: left promiscuous mode [ 151.550665][ T12] veth1_vlan: left promiscuous mode [ 151.566406][ T12] veth0_vlan: left promiscuous mode [ 152.019508][ T12] team0 (unregistering): Port device team_slave_1 removed [ 152.051883][ T12] team0 (unregistering): Port device team_slave_0 removed [ 152.414240][ T8037] pimreg3: entered allmulticast mode [ 152.440793][ T8043] netlink: 96 bytes leftover after parsing attributes in process `syz.1.490'. [ 152.479734][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.484'. [ 152.497591][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.491'. [ 152.507180][ T8037] pimreg3: left allmulticast mode [ 152.521042][ T8046] netlink: 76 bytes leftover after parsing attributes in process `syz.0.491'. [ 152.856636][ T5844] Bluetooth: hci4: command tx timeout [ 153.018194][ T8066] No such timeout policy "syz0" [ 153.041170][ T8067] No such timeout policy "syz0" [ 153.071684][ T8066] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 153.090624][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.497'. [ 153.111283][ T7997] chnl_net:caif_netlink_parms(): no params data found [ 153.129180][ T8068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.156958][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.2.497'. [ 153.392751][ T8088] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 153.425849][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.431415][ T8085] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.499'. [ 153.437147][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.460211][ T7997] bridge_slave_0: entered allmulticast mode [ 153.471289][ T7997] bridge_slave_0: entered promiscuous mode [ 153.670008][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.677495][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.684717][ T7997] bridge_slave_1: entered allmulticast mode [ 153.700378][ T7997] bridge_slave_1: entered promiscuous mode [ 153.853547][ T7997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.938637][ T7997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.082170][ T7997] team0: Port device team_slave_0 added [ 154.109562][ T7997] team0: Port device team_slave_1 added [ 154.154684][ T8111] vlan0: entered promiscuous mode [ 154.271994][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.296780][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.354716][ T7997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.423798][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.430988][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.642361][ T7997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.892668][ T8132] xt_CT: No such helper "pptp" [ 154.921651][ T8134] syzkaller0: entered promiscuous mode [ 154.927791][ T8134] syzkaller0: entered allmulticast mode [ 154.939224][ T51] Bluetooth: hci4: command tx timeout [ 154.961360][ T7997] hsr_slave_0: entered promiscuous mode [ 154.969480][ T7997] hsr_slave_1: entered promiscuous mode [ 154.975617][ T7997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.983864][ T7997] Cannot create hsr debugfs directory [ 156.950681][ T8180] __nla_validate_parse: 7 callbacks suppressed [ 156.950701][ T8180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.520'. [ 157.015850][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 157.191480][ T8189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.524'. [ 157.213483][ T8192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.524'. [ 157.666827][ T7997] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 157.755551][ T7997] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 157.981567][ T7997] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.008059][ T8233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.016552][ T8233] batadv_slave_1: entered promiscuous mode [ 158.032112][ T8232] pim6reg: entered allmulticast mode [ 158.058310][ T7997] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.335636][ T8251] No such timeout policy "syz0" [ 158.346830][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.378376][ T7997] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.414955][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.422288][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.468480][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.475709][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.551100][ T8259] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 158.915538][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 158.935296][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 158.956012][ T7997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.970391][ T8274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.542'. [ 158.986104][ T8274] netlink: 'syz.2.542': attribute type 12 has an invalid length. [ 159.008813][ T8274] netlink: 'syz.2.542': attribute type 11 has an invalid length. [ 159.042650][ T7997] veth0_vlan: entered promiscuous mode [ 159.056732][ T7997] veth1_vlan: entered promiscuous mode [ 159.096719][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 159.124339][ T7997] veth0_macvtap: entered promiscuous mode [ 159.163614][ T7997] veth1_macvtap: entered promiscuous mode [ 159.230591][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.238668][ T8281] netlink: 68 bytes leftover after parsing attributes in process `syz.0.544'. [ 159.263815][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.326837][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.355428][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.400543][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.414450][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.743106][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.766119][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.828380][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.860130][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.961741][ T8323] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 161.242138][ T2966] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.859631][ T2966] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.910172][ T2966] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.967927][ T2966] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.075490][ T2966] bridge_slave_1: left allmulticast mode [ 162.082335][ T2966] bridge_slave_1: left promiscuous mode [ 162.088927][ T2966] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.099493][ T2966] bridge_slave_0: left allmulticast mode [ 162.105163][ T2966] bridge_slave_0: left promiscuous mode [ 162.133670][ T2966] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.157397][ T8336] Bluetooth: MGMT ver 1.23 [ 162.204635][ T8338] IPv6: addrconf: prefix option has invalid lifetime [ 162.351315][ T8345] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.563'. [ 162.651629][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.663766][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.672238][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.685175][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.694363][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.758326][ T2966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.771558][ T2966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.782621][ T2966] bond0 (unregistering): Released all slaves [ 162.962233][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.1.565'. [ 163.113793][ T8361] netlink: 104 bytes leftover after parsing attributes in process `syz.4.568'. [ 163.166158][ T8353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 163.185827][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.565'. [ 163.241623][ T8363] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 163.402570][ T2966] hsr_slave_0: left promiscuous mode [ 163.417177][ T2966] hsr_slave_1: left promiscuous mode [ 163.424867][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.432990][ T2966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.442052][ T2966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.453012][ T2966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.492679][ T2966] veth1_macvtap: left promiscuous mode [ 163.502083][ T2966] veth0_macvtap: left promiscuous mode [ 163.512292][ T2966] veth1_vlan: left promiscuous mode [ 163.518734][ T2966] veth0_vlan: left promiscuous mode [ 164.014721][ T2966] team0 (unregistering): Port device team_slave_1 removed [ 164.047444][ T2966] team0 (unregistering): Port device team_slave_0 removed [ 164.673610][ T8351] chnl_net:caif_netlink_parms(): no params data found [ 164.776678][ T51] Bluetooth: hci4: command tx timeout [ 164.793302][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.581'. [ 165.206250][ T8351] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.233725][ T8351] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.245479][ T8351] bridge_slave_0: entered allmulticast mode [ 165.262644][ T8351] bridge_slave_0: entered promiscuous mode [ 165.339397][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 165.390046][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.585'. [ 165.481267][ T8351] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.494542][ T8351] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.502019][ T8351] bridge_slave_1: entered allmulticast mode [ 165.510001][ T8351] bridge_slave_1: entered promiscuous mode [ 165.704278][ T8351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.729185][ T8351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.183182][ T8351] team0: Port device team_slave_0 added [ 166.211423][ T8351] team0: Port device team_slave_1 added [ 166.329844][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.348458][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.384204][ T8351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.414656][ T8351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.426315][ T8351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.469677][ T8351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.567008][ T8448] IPv6: Can't replace route, no match found [ 166.602045][ T8351] hsr_slave_0: entered promiscuous mode [ 166.632752][ T8351] hsr_slave_1: entered promiscuous mode [ 166.646483][ T8351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.672181][ T8351] Cannot create hsr debugfs directory [ 166.856053][ T51] Bluetooth: hci4: command tx timeout [ 166.942914][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 166.956356][ T8464] netlink: 'syz.1.593': attribute type 9 has an invalid length. [ 167.160794][ T8464] macvlan0: entered allmulticast mode [ 167.175482][ T8464] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 167.336682][ T8469] syzkaller0: entered promiscuous mode [ 167.342278][ T8469] syzkaller0: entered allmulticast mode [ 167.366623][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'. [ 168.713520][ T8488] netlink: 'syz.2.599': attribute type 21 has an invalid length. [ 168.936111][ T51] Bluetooth: hci4: command tx timeout [ 169.352440][ T8493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.601'. [ 169.703900][ T8500] netlink: 88 bytes leftover after parsing attributes in process `syz.2.604'. [ 169.712527][ T8351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.735928][ T8351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.752886][ T8351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.801112][ T8351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.994769][ T8351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.066595][ T8351] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.094660][ T8531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.612'. [ 170.095966][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.110873][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.157819][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.165013][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.240223][ T8535] netlink: 'syz.1.612': attribute type 12 has an invalid length. [ 170.248383][ T8351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.301536][ T8534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.417875][ T8543] veth0: entered promiscuous mode [ 170.427407][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.617'. [ 170.484253][ T8542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.617'. [ 170.519144][ T8543] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 170.534301][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 170.673982][ T8551] gretap1: entered promiscuous mode [ 170.723362][ T8351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.798751][ T8351] veth0_vlan: entered promiscuous mode [ 170.858468][ T8351] veth1_vlan: entered promiscuous mode [ 171.004636][ T8351] veth0_macvtap: entered promiscuous mode [ 171.016015][ T51] Bluetooth: hci4: command tx timeout [ 171.147346][ T8351] veth1_macvtap: entered promiscuous mode [ 171.250003][ T8537] veth0: left promiscuous mode [ 171.352246][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.397862][ T8351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.450537][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.486313][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.547580][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.575307][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.584124][ T8566] netlink: 'syz.0.623': attribute type 303 has an invalid length. [ 171.598513][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 171.785909][ T8566] syz.0.623 (8566) used greatest stack depth: 16184 bytes left [ 171.821326][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.831671][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.918477][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.940953][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.330004][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 172.344767][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.629'. [ 172.579907][ T8592] netlink: 'syz.1.631': attribute type 11 has an invalid length. [ 172.608617][ T8592] __nla_validate_parse: 2 callbacks suppressed [ 172.608639][ T8592] netlink: 140 bytes leftover after parsing attributes in process `syz.1.631'. [ 172.714902][ T8592] netlink: 20 bytes leftover after parsing attributes in process `syz.1.631'. [ 172.744287][ T8592] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 173.022541][ T8602] Cannot find set identified by id 0 to match [ 173.102899][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.442255][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.549689][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.599021][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.703780][ T12] bridge_slave_1: left allmulticast mode [ 173.709729][ T12] bridge_slave_1: left promiscuous mode [ 173.715435][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.726572][ T12] bridge_slave_0: left allmulticast mode [ 173.732239][ T12] bridge_slave_0: left promiscuous mode [ 173.738719][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.228344][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.255282][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.271194][ T12] bond0 (unregistering): Released all slaves [ 174.438354][ T8627] netlink: 248 bytes leftover after parsing attributes in process `syz.4.640'. [ 174.522162][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 174.533180][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 174.542335][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 174.553887][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 174.559085][ T8627] netlink: 248 bytes leftover after parsing attributes in process `syz.4.640'. [ 174.571417][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 174.669414][ T8627] netlink: 248 bytes leftover after parsing attributes in process `syz.4.640'. [ 174.747443][ T8627] netlink: 248 bytes leftover after parsing attributes in process `syz.4.640'. [ 174.770536][ T12] hsr_slave_0: left promiscuous mode [ 174.782819][ T12] hsr_slave_1: left promiscuous mode [ 174.809256][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.829965][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.833808][ T8638] netlink: 168 bytes leftover after parsing attributes in process `syz.0.643'. [ 174.851799][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.870290][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.938129][ T12] veth1_macvtap: left promiscuous mode [ 174.952714][ T12] veth0_macvtap: left promiscuous mode [ 174.960369][ T12] veth1_vlan: left promiscuous mode [ 174.969191][ T12] veth0_vlan: left promiscuous mode [ 175.391048][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.431388][ T12] team0 (unregistering): Port device team_slave_0 removed [ 175.763016][ T8645] bond_slave_0: entered promiscuous mode [ 175.768756][ T8645] bond_slave_1: entered promiscuous mode [ 175.787262][ T8645] macsec1: entered allmulticast mode [ 175.792568][ T8645] bond0: entered allmulticast mode [ 175.797859][ T8645] bond_slave_0: entered allmulticast mode [ 175.803595][ T8645] bond_slave_1: entered allmulticast mode [ 175.813424][ T8645] bond0: left allmulticast mode [ 175.818575][ T8645] bond_slave_0: left allmulticast mode [ 175.824035][ T8645] bond_slave_1: left allmulticast mode [ 175.829961][ T8645] bond_slave_0: left promiscuous mode [ 175.835452][ T8645] bond_slave_1: left promiscuous mode [ 176.117152][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 176.214458][ T8630] chnl_net:caif_netlink_parms(): no params data found [ 176.376892][ T8670] netlink: 'syz.0.652': attribute type 39 has an invalid length. [ 176.423152][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.460475][ T8677] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.496635][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.526048][ T8630] bridge_slave_0: entered allmulticast mode [ 176.532783][ T8677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.653'. [ 176.555294][ T8630] bridge_slave_0: entered promiscuous mode [ 176.611124][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.633515][ T5844] Bluetooth: hci4: command tx timeout [ 176.636007][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.661754][ T8630] bridge_slave_1: entered allmulticast mode [ 176.685857][ T8630] bridge_slave_1: entered promiscuous mode [ 177.227211][ T8691] netlink: 21 bytes leftover after parsing attributes in process `syz.4.655'. [ 177.252340][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.310779][ T8694] trusted_key: syz.1.656 sent an empty control message without MSG_MORE. [ 177.322746][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.497850][ T8630] team0: Port device team_slave_0 added [ 177.510165][ T8630] team0: Port device team_slave_1 added [ 177.523932][ T8704] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 177.626026][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.645389][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.677512][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.689172][ T8709] netlink: 'syz.0.661': attribute type 1 has an invalid length. [ 177.698958][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.699406][ T8709] netlink: 236 bytes leftover after parsing attributes in process `syz.0.661'. [ 177.721815][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.765049][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.909217][ T8720] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 177.922525][ T8719] netlink: 'syz.2.667': attribute type 4 has an invalid length. [ 177.953673][ T8630] hsr_slave_0: entered promiscuous mode [ 177.990898][ T8630] hsr_slave_1: entered promiscuous mode [ 178.010253][ T8630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.025427][ T8630] Cannot create hsr debugfs directory [ 178.100291][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 178.130884][ T8727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.166774][ T8730] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 178.240500][ T8727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.263300][ T8736] netlink: 36 bytes leftover after parsing attributes in process `syz.1.671'. [ 178.418774][ T8739] openvswitch: netlink: Message has 20 unknown bytes. [ 178.432270][ T8739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.462961][ T8727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.581789][ T8727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.699679][ T5844] Bluetooth: hci4: command tx timeout [ 178.873194][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.952949][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.998147][ T8760] netlink: 44 bytes leftover after parsing attributes in process `syz.4.678'. [ 179.015115][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.079042][ T8764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 179.140959][ T8748] infiniband syz0: set down [ 179.148543][ T8748] infiniband syz0: added batadv_slave_1 [ 179.159197][ T1114] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.172105][ T8765] netlink: 32 bytes leftover after parsing attributes in process `syz.4.678'. [ 179.444666][ T8748] RDS/IB: syz0: added [ 179.484524][ T8748] smc: adding ib device syz0 with port count 1 [ 179.530227][ T8748] smc: ib device syz0 port 1 has pnetid [ 179.532296][ T8630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.554799][ T8630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.749014][ T8630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.806402][ T8630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 180.006193][ T8805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.687'. [ 180.090918][ T8630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.151381][ T8630] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.186440][ T8814] netlink: 168 bytes leftover after parsing attributes in process `syz.4.689'. [ 180.200388][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.207663][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.232626][ T5844] Bluetooth: hci0: command tx timeout [ 180.277137][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.284257][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.420303][ T8819] netlink: 'syz.1.691': attribute type 1 has an invalid length. [ 180.649937][ T8829] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 180.667327][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.1.692'. [ 180.707241][ T8829] netlink: 'syz.1.692': attribute type 7 has an invalid length. [ 180.745336][ T8829] netlink: 'syz.1.692': attribute type 8 has an invalid length. [ 180.775565][ T8834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.695'. [ 180.786879][ T5844] Bluetooth: hci4: command tx timeout [ 180.976491][ T8840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.001356][ T8630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.194154][ T8630] veth0_vlan: entered promiscuous mode [ 181.227883][ T8630] veth1_vlan: entered promiscuous mode [ 181.259307][ T8850] netlink: 'syz.1.698': attribute type 30 has an invalid length. [ 181.300561][ T8630] veth0_macvtap: entered promiscuous mode [ 181.438688][ T8630] veth1_macvtap: entered promiscuous mode [ 181.523018][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.615358][ T8630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.723022][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.755385][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.792337][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.825627][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.025017][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.067151][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.148498][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.173830][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.751728][ T8896] __nla_validate_parse: 2 callbacks suppressed [ 182.751774][ T8896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.712'. [ 182.775319][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.714'. [ 182.967165][ T1094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.141064][ T1094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.430336][ T1094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.489951][ T1094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.629878][ T1094] bridge_slave_1: left allmulticast mode [ 183.635555][ T1094] bridge_slave_1: left promiscuous mode [ 183.641451][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.655061][ T1094] bridge_slave_0: left allmulticast mode [ 183.661214][ T1094] bridge_slave_0: left promiscuous mode [ 183.667579][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.985497][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.013142][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.038481][ T1094] bond0 (unregistering): Released all slaves [ 184.297297][ T8929] netlink: 168 bytes leftover after parsing attributes in process `syz.0.722'. [ 184.395280][ T8932] netlink: 'syz.4.724': attribute type 6 has an invalid length. [ 184.521635][ T8940] openvswitch: netlink: Message has 8 unknown bytes. [ 184.551473][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 184.596688][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.611335][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.620090][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.642663][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.656024][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.545389][ T1094] hsr_slave_0: left promiscuous mode [ 185.567624][ T1094] hsr_slave_1: left promiscuous mode [ 185.585299][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.618194][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.644414][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.666626][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.742915][ T1094] veth1_macvtap: left promiscuous mode [ 185.760742][ T1094] veth0_macvtap: left promiscuous mode [ 185.774387][ T1094] veth1_vlan: left promiscuous mode [ 185.784558][ T1094] veth0_vlan: left promiscuous mode [ 186.354899][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.735'. [ 186.369105][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 186.403472][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 186.696089][ T51] Bluetooth: hci4: command tx timeout [ 186.718210][ T8953] netlink: 96 bytes leftover after parsing attributes in process `syz.1.730'. [ 187.213776][ T8944] chnl_net:caif_netlink_parms(): no params data found [ 187.435051][ T8944] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.442437][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.454118][ T8944] bridge_slave_0: entered allmulticast mode [ 187.463323][ T8944] bridge_slave_0: entered promiscuous mode [ 187.471925][ T8944] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.479524][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.486776][ T8944] bridge_slave_1: entered allmulticast mode [ 187.494426][ T8944] bridge_slave_1: entered promiscuous mode [ 187.538572][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 187.550131][ T8944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.562618][ T8944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.613779][ T8944] team0: Port device team_slave_0 added [ 187.635463][ T8944] team0: Port device team_slave_1 added [ 187.941072][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.956528][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.999988][ T8944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.028036][ T9030] netlink: 'syz.0.750': attribute type 1 has an invalid length. [ 188.029572][ T8944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.058446][ T8944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.110898][ T8944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.171703][ T9030] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.218827][ T9034] bond2: (slave gretap2): making interface the new active one [ 188.272937][ T9034] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 188.409759][ T8944] hsr_slave_0: entered promiscuous mode [ 188.423686][ T8944] hsr_slave_1: entered promiscuous mode [ 188.431403][ T8944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.439441][ T8944] Cannot create hsr debugfs directory [ 188.643435][ T9049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.754'. [ 188.664605][ T9048] ÿÿÿÿ: tun_chr_ioctl cmd 2147767520 [ 188.775971][ T51] Bluetooth: hci4: command tx timeout [ 189.922856][ T8944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.942832][ T8944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.976347][ T8944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.009854][ T8944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.165477][ T9108] netlink: 20 bytes leftover after parsing attributes in process `syz.1.767'. [ 190.174836][ T9108] netlink: 32 bytes leftover after parsing attributes in process `syz.1.767'. [ 190.318717][ T8944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.362933][ T8944] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.383208][ T9110] netlink: 'syz.1.768': attribute type 1 has an invalid length. [ 190.386760][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.398040][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.401722][ T9110] netlink: 'syz.1.768': attribute type 2 has an invalid length. [ 190.441884][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.449077][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.866468][ T51] Bluetooth: hci4: command tx timeout [ 191.309744][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.397215][ T9118] dvmrp1: entered allmulticast mode [ 191.459697][ T9120] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 191.605695][ T8944] veth0_vlan: entered promiscuous mode [ 191.663851][ T8944] veth1_vlan: entered promiscuous mode [ 191.760439][ T8944] veth0_macvtap: entered promiscuous mode [ 191.782959][ T8944] veth1_macvtap: entered promiscuous mode [ 191.810305][ T9133] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.832384][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.844111][ T9134] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.867142][ T8944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.879549][ T9133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.886854][ T9133] IPv6: NLM_F_CREATE should be set when creating new route [ 191.929242][ T9134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 191.970163][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.983991][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.010041][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.043027][ T1114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.176696][ T9140] bridge_slave_0: default FDB implementation only supports local addresses [ 192.205297][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.231736][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.323393][ T2988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.344436][ T2988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.527903][ T9158] netlink: 'syz.2.779': attribute type 30 has an invalid length. [ 192.742982][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.783'. [ 192.776251][ T9175] netlink: 76 bytes leftover after parsing attributes in process `syz.2.784'. [ 192.848903][ T9168] xt_CT: No such helper "syz0" [ 192.889091][ T9181] veth0: entered promiscuous mode [ 192.956863][ T9169] netlink: 20 bytes leftover after parsing attributes in process `syz.4.782'. [ 193.498431][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.609583][ T9170] veth0: left promiscuous mode [ 193.940774][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.226068][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.243324][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.316946][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.435885][ T12] bridge_slave_1: left allmulticast mode [ 194.441571][ T12] bridge_slave_1: left promiscuous mode [ 194.451344][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.462697][ T12] bridge_slave_0: left allmulticast mode [ 194.469729][ T12] bridge_slave_0: left promiscuous mode [ 194.475416][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.737336][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.749828][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.760513][ T12] bond0 (unregistering): Released all slaves [ 194.886507][ T9212] syzkaller1: entered promiscuous mode [ 194.892030][ T9212] syzkaller1: entered allmulticast mode [ 195.376755][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 195.389175][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 195.401720][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.414597][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.431578][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.581103][ T9235] netlink: 32 bytes leftover after parsing attributes in process `syz.4.796'. [ 195.989096][ T12] hsr_slave_0: left promiscuous mode [ 196.004879][ T12] hsr_slave_1: left promiscuous mode [ 196.017113][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.034814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.057226][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.064988][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.115565][ T12] veth1_macvtap: left promiscuous mode [ 196.121999][ T12] veth0_macvtap: left promiscuous mode [ 196.128546][ T12] veth1_vlan: left promiscuous mode [ 196.133942][ T12] veth0_vlan: left promiscuous mode [ 196.508426][ T12] team0 (unregistering): Port device team_slave_1 removed [ 196.545485][ T12] team0 (unregistering): Port device team_slave_0 removed [ 197.319111][ T9231] chnl_net:caif_netlink_parms(): no params data found [ 197.496060][ T51] Bluetooth: hci4: command tx timeout [ 197.567812][ T9231] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.574999][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.600693][ T9231] bridge_slave_0: entered allmulticast mode [ 197.611193][ T9231] bridge_slave_0: entered promiscuous mode [ 197.637128][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 197.664455][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 197.719175][ T9231] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.735493][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.777615][ T9231] bridge_slave_1: entered allmulticast mode [ 197.807370][ T9231] bridge_slave_1: entered promiscuous mode [ 197.926862][ T9275] netlink: 168 bytes leftover after parsing attributes in process `syz.1.807'. [ 198.037442][ T9231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.065216][ T9231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.145623][ T9231] team0: Port device team_slave_0 added [ 198.176685][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.198750][ T9231] team0: Port device team_slave_1 added [ 198.211121][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.222525][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.240021][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.256274][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.319613][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.346460][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.400142][ T9231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.451329][ T9231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.458956][ T9231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.490733][ T9231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.939651][ T9231] hsr_slave_0: entered promiscuous mode [ 198.961505][ T9231] hsr_slave_1: entered promiscuous mode [ 198.978005][ T9231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.985611][ T9231] Cannot create hsr debugfs directory [ 199.321860][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.333985][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.355934][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 199.364486][ T12] bond0 (unregistering): Released all slaves [ 199.447921][ T12] bond1 (unregistering): Released all slaves [ 199.490805][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 199.578779][ T5844] Bluetooth: hci4: command tx timeout [ 199.624116][ T12] tipc: Left network mode [ 199.655267][ T12] IPVS: stopping backup sync thread 8704 ... [ 199.832269][ T9325] Cannot find del_set index 0 as target [ 199.945845][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 199.977730][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'. [ 200.096842][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'. [ 200.296739][ T5844] Bluetooth: hci1: command tx timeout [ 200.442431][ T9342] x_tables: duplicate underflow at hook 2 [ 200.926652][ T12] hsr_slave_0: left promiscuous mode [ 200.937556][ T12] hsr_slave_1: left promiscuous mode [ 200.943328][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.968720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.268895][ T49] smc: removing ib device syz0 [ 201.418729][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 201.418755][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 201.657250][ T51] Bluetooth: hci4: command tx timeout [ 201.715286][ T9367] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 201.887367][ T9374] netlink: 168 bytes leftover after parsing attributes in process `syz.1.835'. [ 201.951082][ T9280] chnl_net:caif_netlink_parms(): no params data found [ 202.117450][ T9231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.143984][ T9231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.228922][ T9231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.273225][ T9387] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.289623][ T9231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.312789][ T9387] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.333753][ T9387] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 202.376880][ T51] Bluetooth: hci1: command tx timeout [ 202.702413][ T9280] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.715866][ T9280] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.723104][ T9280] bridge_slave_0: entered allmulticast mode [ 202.753737][ T9280] bridge_slave_0: entered promiscuous mode [ 202.782840][ T9280] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.792629][ T9280] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.801767][ T9280] bridge_slave_1: entered allmulticast mode [ 202.823701][ T9280] bridge_slave_1: entered promiscuous mode [ 202.880098][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 202.894928][ T9411] netlink: 20 bytes leftover after parsing attributes in process `syz.1.843'. [ 202.922680][ T9411] netlink: 40 bytes leftover after parsing attributes in process `syz.1.843'. [ 202.950951][ T9415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 202.980678][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.843'. [ 202.998689][ T9415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.843'. [ 203.088226][ T9280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.114118][ T9280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.290493][ T9280] team0: Port device team_slave_0 added [ 203.323719][ T9280] team0: Port device team_slave_1 added [ 203.540396][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.556072][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.603950][ T9280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.629721][ T9280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.641620][ T9280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.673910][ T9280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.736100][ T51] Bluetooth: hci4: command tx timeout [ 203.806803][ T9425] netlink: 168 bytes leftover after parsing attributes in process `syz.0.847'. [ 203.834818][ T9280] hsr_slave_0: entered promiscuous mode [ 203.841857][ T9280] hsr_slave_1: entered promiscuous mode [ 203.850072][ T9280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.858861][ T9280] Cannot create hsr debugfs directory [ 204.064350][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.424263][ T9438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.465526][ T51] Bluetooth: hci1: command tx timeout [ 204.519244][ T9231] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.642375][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.649732][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.750402][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.854'. [ 204.763732][ T9449] nbd: illegal input index -381222912 [ 204.790936][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.798171][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.820923][ T9434] netlink: 'syz.0.849': attribute type 4 has an invalid length. [ 204.857675][ T9446] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.897887][ T9446] netlink: 'syz.1.853': attribute type 13 has an invalid length. [ 204.914717][ T9446] netlink: 'syz.1.853': attribute type 17 has an invalid length. [ 205.050793][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.855'. [ 205.139804][ T9446] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 205.229970][ T9460] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.759183][ T9280] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.829853][ T9483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.849318][ T9483] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 205.872490][ T9280] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.026425][ T9280] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.073665][ T9483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.111606][ T9483] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.156069][ T9280] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.167985][ T9494] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 206.204476][ T9483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.215115][ T9483] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.311903][ T9483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.350664][ T9483] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 206.395241][ T9508] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 206.480827][ T9521] Cannot find set identified by id 0 to match [ 206.537910][ T51] Bluetooth: hci1: command tx timeout [ 206.754752][ T9231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.799490][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.810552][ T36] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.819850][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.828376][ T36] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.877089][ T3021] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.887727][ T3021] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 206.919455][ T3021] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 206.928157][ T3021] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 207.010375][ T9231] veth0_vlan: entered promiscuous mode [ 207.040009][ T9231] veth1_vlan: entered promiscuous mode [ 207.080156][ T9280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.169679][ T9231] veth0_macvtap: entered promiscuous mode [ 207.197480][ T9280] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.211531][ T9231] veth1_macvtap: entered promiscuous mode [ 207.267764][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.274986][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.310020][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.317245][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.355135][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.424959][ T9231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.482453][ T2966] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.240962][ T2966] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.281349][ T2966] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.300356][ T2966] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.397861][ T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.425506][ T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.460358][ T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.494643][ T9555] bridge0: port 3(syz_tun) entered blocking state [ 208.507219][ T9555] bridge0: port 3(syz_tun) entered disabled state [ 208.514583][ T9555] syz_tun: entered allmulticast mode [ 208.522045][ T9555] syz_tun: entered promiscuous mode [ 208.528626][ T9555] bridge0: port 3(syz_tun) entered blocking state [ 208.535279][ T9555] bridge0: port 3(syz_tun) entered forwarding state [ 208.551860][ T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.583081][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.610490][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.698387][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.735725][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.894337][ T9280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.999958][ T9580] __nla_validate_parse: 3 callbacks suppressed [ 208.999980][ T9580] netlink: 40 bytes leftover after parsing attributes in process `syz.0.879'. [ 209.054538][ T9280] veth0_vlan: entered promiscuous mode [ 209.075010][ T9280] veth1_vlan: entered promiscuous mode [ 209.208853][ T3021] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.258384][ T9280] veth0_macvtap: entered promiscuous mode [ 209.301099][ T3021] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.323360][ T9280] veth1_macvtap: entered promiscuous mode [ 209.361844][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.418255][ T3021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.449897][ T9280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.468784][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.481471][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.500734][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.527513][ T3021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.545279][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.641859][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.654049][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.699978][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.715926][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.068077][ T3021] bridge_slave_1: left allmulticast mode [ 210.079203][ T3021] bridge_slave_1: left promiscuous mode [ 210.084961][ T3021] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.094895][ T3021] bridge_slave_0: left allmulticast mode [ 210.103002][ T3021] bridge_slave_0: left promiscuous mode [ 210.109373][ T3021] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.411606][ T3021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.422626][ T3021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.432784][ T3021] bond0 (unregistering): Released all slaves [ 211.128757][ T3021] hsr_slave_0: left promiscuous mode [ 211.140744][ T3021] hsr_slave_1: left promiscuous mode [ 211.147512][ T3021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.155350][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.178339][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.183447][ T9614] netlink: 'syz.1.886': attribute type 1 has an invalid length. [ 211.196220][ T3021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.205136][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.209965][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.230871][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.245359][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.286623][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.294078][ T3021] veth1_macvtap: left promiscuous mode [ 211.325323][ T3021] veth0_macvtap: left promiscuous mode [ 211.345999][ T3021] veth1_vlan: left promiscuous mode [ 211.351360][ T3021] veth0_vlan: left promiscuous mode [ 211.632184][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.652223][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.662289][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.679763][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.702622][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.977309][ T3021] team0 (unregistering): Port device team_slave_1 removed [ 212.014721][ T3021] team0 (unregistering): Port device team_slave_0 removed [ 212.371876][ T9614] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 212.613377][ T9644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'. [ 213.023567][ T9664] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'. [ 213.144079][ T9669] vxcan0: entered promiscuous mode [ 213.164249][ T9664] netlink: 'syz.4.899': attribute type 1 has an invalid length. [ 213.172342][ T9664] netlink: 220 bytes leftover after parsing attributes in process `syz.4.899'. [ 213.219782][ T9613] chnl_net:caif_netlink_parms(): no params data found [ 213.311509][ T9632] chnl_net:caif_netlink_parms(): no params data found [ 213.336004][ T5838] Bluetooth: hci1: command tx timeout [ 213.367789][ T9679] netlink: 28 bytes leftover after parsing attributes in process `syz.4.904'. [ 213.442138][ T3021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.453998][ T9684] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 213.618981][ T3021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.634724][ T9691] netlink: 'syz.1.905': attribute type 4 has an invalid length. [ 213.648706][ T9691] netlink: 3581 bytes leftover after parsing attributes in process `syz.1.905'. [ 213.730969][ T3021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.747098][ T5838] Bluetooth: hci4: command tx timeout [ 213.812029][ T9691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 213.824985][ T9691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.905'. [ 213.840380][ T9613] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.848452][ T9613] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.857058][ T9613] bridge_slave_0: entered allmulticast mode [ 213.865122][ T9613] bridge_slave_0: entered promiscuous mode [ 213.887191][ T9632] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.894309][ T9632] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.903776][ T9632] bridge_slave_0: entered allmulticast mode [ 213.911094][ T9632] bridge_slave_0: entered promiscuous mode [ 213.921021][ T9685] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 213.930627][ T9613] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.938090][ T9613] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.945403][ T9613] bridge_slave_1: entered allmulticast mode [ 213.952625][ T9613] bridge_slave_1: entered promiscuous mode [ 213.993614][ T3021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.045171][ T9698] netlink: 196 bytes leftover after parsing attributes in process `syz.1.906'. [ 214.048798][ T9632] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.076196][ T9632] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.084169][ T9632] bridge_slave_1: entered allmulticast mode [ 214.097327][ T9632] bridge_slave_1: entered promiscuous mode [ 214.121351][ T9700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.196220][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.907'. [ 214.225268][ T9632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.256845][ T9700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.907'. [ 214.292197][ T9613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.310361][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.908'. [ 214.345476][ T9632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.407844][ T9613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.528920][ T9632] team0: Port device team_slave_0 added [ 214.541889][ T9632] team0: Port device team_slave_1 added [ 214.644420][ T9709] macsec1: entered promiscuous mode [ 214.650288][ T9709] macsec1: entered allmulticast mode [ 214.664796][ T9613] team0: Port device team_slave_0 added [ 214.699406][ T9613] team0: Port device team_slave_1 added [ 214.724599][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.743751][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.786993][ T9632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.800757][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 214.809972][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 214.827689][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 214.836656][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 214.871528][ T9613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.883387][ T9613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.911824][ T9613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.931322][ T9632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.943253][ T9632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.969762][ T9632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.011273][ T9613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.020418][ T9613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.049984][ T9613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.098321][ T3021] bridge_slave_1: left allmulticast mode [ 215.104016][ T3021] bridge_slave_1: left promiscuous mode [ 215.126042][ T3021] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.147673][ T3021] bridge_slave_0: left allmulticast mode [ 215.153352][ T3021] bridge_slave_0: left promiscuous mode [ 215.184049][ T3021] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.299943][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.915'. [ 215.425024][ T5838] Bluetooth: hci1: command tx timeout [ 215.817118][ T5838] Bluetooth: hci4: command tx timeout [ 215.962704][ T3021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.979605][ T3021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.995529][ T3021] bond0 (unregistering): Released all slaves [ 216.133851][ T9736] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 216.140820][ T9632] hsr_slave_0: entered promiscuous mode [ 216.149830][ T9632] hsr_slave_1: entered promiscuous mode [ 216.156217][ T9632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.163813][ T9632] Cannot create hsr debugfs directory [ 216.171160][ T9736] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 216.181156][ T9736] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 216.219040][ T9613] hsr_slave_0: entered promiscuous mode [ 216.232258][ T9613] hsr_slave_1: entered promiscuous mode [ 216.246846][ T9613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.280591][ T9613] Cannot create hsr debugfs directory [ 216.714521][ T3021] hsr_slave_0: left promiscuous mode [ 216.722661][ T3021] hsr_slave_1: left promiscuous mode [ 216.730303][ T3021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.742256][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.756645][ T3021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.767070][ T3021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.803875][ T3021] veth1_macvtap: left promiscuous mode [ 216.809710][ T3021] veth0_macvtap: left promiscuous mode [ 216.815406][ T3021] veth1_vlan: left promiscuous mode [ 216.825650][ T3021] veth0_vlan: left promiscuous mode [ 216.932070][ T9790] syz.4.930: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 216.967791][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.4.930 Not tainted 6.16.0-rc2-syzkaller-00592-g0289c51f889e #0 PREEMPT(full) [ 216.967820][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.967832][ T9790] Call Trace: [ 216.967840][ T9790] [ 216.967849][ T9790] dump_stack_lvl+0x189/0x250 [ 216.967886][ T9790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.967915][ T9790] ? __pfx__printk+0x10/0x10 [ 216.967936][ T9790] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.967957][ T9790] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 216.967979][ T9790] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 216.968002][ T9790] warn_alloc+0x214/0x310 [ 216.968023][ T9790] ? stack_depot_save_flags+0x40/0x900 [ 216.968051][ T9790] ? __pfx_warn_alloc+0x10/0x10 [ 216.968074][ T9790] ? kasan_save_track+0x4f/0x80 [ 216.968102][ T9790] ? xskq_create+0x56/0x170 [ 216.968117][ T9790] ? xsk_init_queue+0xb0/0x110 [ 216.968140][ T9790] ? xsk_setsockopt+0x43f/0x710 [ 216.968163][ T9790] ? do_sock_setsockopt+0x257/0x3e0 [ 216.968198][ T9790] ? __x64_sys_setsockopt+0x18b/0x220 [ 216.968222][ T9790] ? do_syscall_64+0xfa/0x3b0 [ 216.968239][ T9790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.968266][ T9790] __vmalloc_node_range_noprof+0x125/0x12f0 [ 216.968316][ T9790] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.968342][ T9790] ? __kasan_kmalloc+0x93/0xb0 [ 216.968363][ T9790] vmalloc_user_noprof+0xad/0xf0 [ 216.968383][ T9790] ? xskq_create+0xbf/0x170 [ 216.968401][ T9790] xskq_create+0xbf/0x170 [ 216.968420][ T9790] xsk_init_queue+0xb0/0x110 [ 216.968450][ T9790] xsk_setsockopt+0x43f/0x710 [ 216.968480][ T9790] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.968505][ T9790] ? __lock_acquire+0xab9/0xd20 [ 216.968540][ T9790] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 216.968563][ T9790] ? __pfx_xsk_setsockopt+0x10/0x10 [ 216.968591][ T9790] do_sock_setsockopt+0x257/0x3e0 [ 216.968620][ T9790] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 216.968650][ T9790] ? __fget_files+0x2a/0x420 [ 216.968679][ T9790] __x64_sys_setsockopt+0x18b/0x220 [ 216.968711][ T9790] do_syscall_64+0xfa/0x3b0 [ 216.968731][ T9790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.968747][ T9790] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 216.968764][ T9790] ? clear_bhb_loop+0x60/0xb0 [ 216.968786][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.968803][ T9790] RIP: 0033:0x7fbdb658e929 [ 216.968829][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.968845][ T9790] RSP: 002b:00007fbdb734b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.968865][ T9790] RAX: ffffffffffffffda RBX: 00007fbdb67b5fa0 RCX: 00007fbdb658e929 [ 216.968879][ T9790] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 216.968891][ T9790] RBP: 00007fbdb6610b39 R08: 0000000000000004 R09: 0000000000000000 [ 216.968902][ T9790] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.968913][ T9790] R13: 0000000000000000 R14: 00007fbdb67b5fa0 R15: 00007ffd9b2624c8 [ 216.968942][ T9790] [ 216.968954][ T9790] Mem-Info: [ 217.282736][ T9790] active_anon:6670 inactive_anon:0 isolated_anon:0 [ 217.282736][ T9790] active_file:1651 inactive_file:39906 isolated_file:0 [ 217.282736][ T9790] unevictable:768 dirty:207 writeback:0 [ 217.282736][ T9790] slab_reclaimable:11842 slab_unreclaimable:117402 [ 217.282736][ T9790] mapped:31371 shmem:3298 pagetables:987 [ 217.282736][ T9790] sec_pagetables:0 bounce:0 [ 217.282736][ T9790] kernel_misc_reclaimable:0 [ 217.282736][ T9790] free:1308736 free_pcp:15826 free_cma:0 [ 217.346823][ T9790] Node 0 active_anon:27280kB inactive_anon:0kB active_file:6604kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126184kB dirty:828kB writeback:0kB shmem:12356kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12316kB pagetables:3812kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.415976][ T9790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 217.454254][ T9790] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.498101][ T5838] Bluetooth: hci1: command tx timeout [ 217.504029][ T9790] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 217.513310][ T9790] Node 0 DMA32 free:1317180kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30236kB inactive_anon:0kB active_file:6604kB inactive_file:157588kB unevictable:1536kB writepending:824kB present:3129332kB managed:2561012kB mlocked:0kB bounce:0kB free_pcp:43632kB local_pcp:16720kB free_cma:0kB [ 217.546302][ T9790] lowmem_reserve[]: 0 0 1 1 1 [ 217.551639][ T9790] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 217.581343][ T9790] lowmem_reserve[]: 0 0 0 0 0 [ 217.587981][ T9790] Node 1 Normal free:3902388kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:16172kB local_pcp:9288kB free_cma:0kB [ 217.630837][ T9790] lowmem_reserve[]: 0 0 0 0 0 [ 217.635599][ T9790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.654546][ T9790] Node 0 DMA32: 0*4kB 2*8kB (ME) 1*16kB (U) 1*32kB (E) 7*64kB (M) 50*128kB (UME) 64*256kB (UM) 77*512kB (UM) 45*1024kB (UME) 4*2048kB (UME) 293*4096kB (M) = 1317120kB [ 217.671847][ T9790] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 217.684128][ T9790] Node 1 Normal: 189*4kB (U) 38*8kB (UME) 45*16kB (UME) 94*32kB (UME) 32*64kB (UME) 8*128kB (UME) 7*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3902388kB [ 217.702789][ T9790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.712749][ T9790] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.722128][ T9790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 217.731729][ T9790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 217.741957][ T9790] 45777 total pagecache pages [ 217.746765][ T9790] 0 pages in swap cache [ 217.750926][ T9790] Free swap = 124996kB [ 217.758935][ T9790] Total swap = 124996kB [ 217.763130][ T9790] 2097051 pages RAM [ 217.767148][ T9790] 0 pages HighMem/MovableOnly [ 217.771877][ T9790] 424692 pages reserved [ 217.776287][ T9790] 0 pages cma reserved [ 217.899683][ T5838] Bluetooth: hci4: command tx timeout [ 217.983315][ T3021] team0 (unregistering): Port device team_slave_1 removed [ 218.019245][ T3021] team0 (unregistering): Port device team_slave_0 removed [ 218.475410][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 218.804517][ T9804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.816722][ T9804] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.942361][ T9804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.953973][ T9804] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.987404][ T9812] sit1: entered promiscuous mode [ 219.082213][ T9804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.099187][ T9804] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.135071][ T9815] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 219.149481][ T9815] __nla_validate_parse: 2 callbacks suppressed [ 219.149495][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 219.192005][ T9804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.202433][ T9804] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.393952][ T9613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.410948][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.422005][ T36] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.445322][ T9613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.486219][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.494946][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.510288][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.522598][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.531122][ T9613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.561714][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.574677][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.582996][ T5838] Bluetooth: hci1: command tx timeout [ 219.601166][ T9613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.972385][ T9613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.982341][ T5838] Bluetooth: hci4: command tx timeout [ 220.038871][ T9842] sctp: [Deprecated]: syz.1.943 (pid 9842) Use of int in max_burst socket option. [ 220.038871][ T9842] Use struct sctp_assoc_value instead [ 220.048383][ T9632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.076464][ T9632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.090150][ T9613] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.097927][ T9632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.102756][ T9842] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 220.123633][ T9632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.138200][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.145330][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.151374][ T9842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 220.188856][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.196064][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.499015][ T9632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.629518][ T9869] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 220.670397][ T9632] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.735609][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.742843][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.803557][ T9855] pim6reg1: entered allmulticast mode [ 220.835755][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.842946][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.235610][ T9613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.294030][ T9888] bond0: (slave bond_slave_0): Releasing backup interface [ 221.334215][ T9888] bond0: (slave bond_slave_1): Releasing backup interface [ 221.381691][ T9888] team0: Port device team_slave_0 removed [ 221.402677][ T9888] team0: Port device team_slave_1 removed [ 221.413271][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.422067][ T9888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.436700][ T9888] team0: Port device geneve1 removed [ 221.456347][ T9888] bond2: (slave geneve3): Releasing active interface [ 221.519580][ T49] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.560037][ T49] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.647228][ T49] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.674803][ T49] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 221.928532][ T9632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.941433][ T9909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.954'. [ 221.962420][ T9912] netlink: 348 bytes leftover after parsing attributes in process `syz.4.953'. [ 221.971826][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.954'. [ 221.974322][ T9613] veth0_vlan: entered promiscuous mode [ 222.001885][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.953'. [ 222.060760][ T9915] netlink: 'syz.1.954': attribute type 4 has an invalid length. [ 222.070639][ T6983] IPVS: starting estimator thread 0... [ 222.115581][ T9909] netlink: 'syz.1.954': attribute type 4 has an invalid length. [ 222.147534][ T9613] veth1_vlan: entered promiscuous mode [ 222.170377][ T9916] IPVS: using max 45 ests per chain, 108000 per kthread [ 222.361459][ T9613] veth0_macvtap: entered promiscuous mode [ 222.392229][ T9613] veth1_macvtap: entered promiscuous mode [ 222.420736][ T9632] veth0_vlan: entered promiscuous mode [ 222.494910][ T9613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.530617][ T9632] veth1_vlan: entered promiscuous mode [ 222.615310][ T9926] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 222.634416][ T9921] dvmrp8: entered allmulticast mode [ 222.652127][ T9613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.690453][ T9920] dvmrp8: left allmulticast mode [ 222.721060][ T9928] netlink: 'syz.4.957': attribute type 11 has an invalid length. [ 222.729274][ T9928] netlink: 140 bytes leftover after parsing attributes in process `syz.4.957'. [ 222.831743][ T1114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.859263][ T1114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.921025][ T9632] veth0_macvtap: entered promiscuous mode [ 222.958031][ T9632] veth1_macvtap: entered promiscuous mode [ 222.975878][ T1114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.980681][ T9935] netlink: 'syz.0.961': attribute type 10 has an invalid length. [ 222.997282][ T3021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.021857][ T9935] netlink: 40 bytes leftover after parsing attributes in process `syz.0.961'. [ 223.063295][ T9935] veth0_vlan: entered allmulticast mode [ 223.077268][ T9935] bridge0: port 4(veth0_vlan) entered blocking state [ 223.106510][ T9935] bridge0: port 4(veth0_vlan) entered disabled state [ 223.136638][ T9935] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 223.211855][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.474159][ T9632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.525458][ T3021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.544386][ T9943] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 234.558068][ T3021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.567730][ T9943] netlink: 20 bytes leftover after parsing attributes in process `syz.0.964'. [ 234.582902][ T9941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.963'. [ 234.599586][ T3021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.619824][ T3021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.664913][ T9941] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 234.753854][ T2988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.775186][ T2988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.918408][ T3021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.944235][ T3021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.962379][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.981225][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.048233][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.073361][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.195483][ T9967] tap0: tun_chr_ioctl cmd 1074025677 [ 235.206477][ T9967] tap0: linktype set to 823 [ 235.214300][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 235.395018][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.973'. [ 235.523707][ T5918] IPVS: starting estimator thread 0... [ 235.562483][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.675792][ T9989] IPVS: using max 29 ests per chain, 69600 per kthread [ 235.687787][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.819012][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.881516][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.003936][ T49] bridge_slave_1: left allmulticast mode [ 236.010101][ T49] bridge_slave_1: left promiscuous mode [ 236.018904][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.028267][ T49] bridge_slave_0: left allmulticast mode [ 236.033916][ T49] bridge_slave_0: left promiscuous mode [ 236.040156][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.315443][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.328775][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.338814][ T49] bond0 (unregistering): Released all slaves [ 236.561719][ T49] hsr_slave_0: left promiscuous mode [ 236.568011][ T49] hsr_slave_1: left promiscuous mode [ 236.573805][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.581339][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.589181][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.600940][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.620827][ T49] veth1_macvtap: left promiscuous mode [ 236.626623][ T49] veth0_macvtap: left promiscuous mode [ 236.632309][ T49] veth1_vlan: left promiscuous mode [ 236.641717][ T49] veth0_vlan: left promiscuous mode [ 237.010014][ T9994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.976'. [ 237.187238][ T30] audit: type=1800 audit(1750550679.219:4): pid=9999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.977" name="memory.events" dev="tmpfs" ino=1329 res=0 errno=0 [ 237.317103][ T49] team0 (unregistering): Port device team_slave_1 removed [ 237.391629][ T49] team0 (unregistering): Port device team_slave_0 removed [ 237.524944][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 237.541483][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 237.551283][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 237.562187][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 237.569728][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.586341][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.588859][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.608363][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.618115][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.627235][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.009520][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 238.132194][T10012] netlink: 228 bytes leftover after parsing attributes in process `syz.4.981'. [ 238.562610][ T30] audit: type=1800 audit(1750550680.589:5): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.989" name="memory.events" dev="tmpfs" ino=1432 res=0 errno=0 [ 238.637563][T10006] chnl_net:caif_netlink_parms(): no params data found [ 238.657274][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.991'. [ 238.720716][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.952477][T10059] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.032831][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.072615][T10069] netlink: 'syz.0.995': attribute type 8 has an invalid length. [ 239.086939][T10059] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.116883][T10005] chnl_net:caif_netlink_parms(): no params data found [ 239.204219][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.250472][T10059] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.427882][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.469838][T10059] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 239.505509][T10089] netlink: 'syz.4.1000': attribute type 2 has an invalid length. [ 239.514558][T10006] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.524291][T10006] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.526496][T10091] netlink: 'syz.0.1001': attribute type 1 has an invalid length. [ 239.539159][T10006] bridge_slave_0: entered allmulticast mode [ 239.541182][T10006] bridge_slave_0: entered promiscuous mode [ 239.559538][T10006] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.568054][T10006] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.569883][T10091] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1001'. [ 239.575564][T10006] bridge_slave_1: entered allmulticast mode [ 239.597269][T10006] bridge_slave_1: entered promiscuous mode [ 239.623580][T10089] : entered promiscuous mode [ 239.660100][ T5844] Bluetooth: hci4: command tx timeout [ 239.660142][ T5847] Bluetooth: hci1: command tx timeout [ 239.732340][T10006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.742625][T10101] netlink: 'syz.4.1003': attribute type 3 has an invalid length. [ 239.793946][T10006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.803538][T10101] bridge_slave_0: invalid flags given to default FDB implementation [ 239.837981][T10105] netlink: 'syz.0.1002': attribute type 10 has an invalid length. [ 239.841668][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.850237][T10105] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1002'. [ 239.853422][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.869835][T10005] bridge_slave_0: entered allmulticast mode [ 239.878797][T10005] bridge_slave_0: entered promiscuous mode [ 239.902438][T10101] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 239.926689][ T2988] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.935036][ T2988] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.945531][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.958373][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.968504][T10005] bridge_slave_1: entered allmulticast mode [ 239.980003][T10005] bridge_slave_1: entered promiscuous mode [ 240.046884][T10006] team0: Port device team_slave_0 added [ 240.055216][ T2988] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.094942][T10006] team0: Port device team_slave_1 added [ 240.176589][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.188682][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.206834][T10060] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.228022][T10006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.237943][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.267399][T10006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.283612][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.336598][T10006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.354845][T10006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.402915][T10006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.412924][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1006'. [ 240.435493][T10060] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.466854][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 240.476095][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1006'. [ 240.505234][ T49] bridge_slave_1: left allmulticast mode [ 240.511155][ T49] bridge_slave_1: left promiscuous mode [ 240.517224][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.531223][ T49] bridge_slave_0: left allmulticast mode [ 240.537484][ T49] bridge_slave_0: left promiscuous mode [ 240.543285][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.549337][T10119] netlink: 'syz.4.1006': attribute type 1 has an invalid length. [ 240.558626][T10119] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1006'. [ 240.891025][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.904011][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.915080][ T49] bond0 (unregistering): Released all slaves [ 240.934287][T10060] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.993230][T10121] 8021q: adding VLAN 0 to HW filter on device bond6 [ 241.009886][T10121] bond5: (slave bond6): Enslaving as an active interface with an up link [ 241.032727][T10005] team0: Port device team_slave_0 added [ 241.048086][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 241.057685][T10123] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 241.132896][T10060] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.204231][T10005] team0: Port device team_slave_1 added [ 241.418149][T10006] hsr_slave_0: entered promiscuous mode [ 241.424966][T10006] hsr_slave_1: entered promiscuous mode [ 241.445237][T10006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.458043][T10006] Cannot create hsr debugfs directory [ 241.470604][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.498045][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.553657][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.568404][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.575463][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.605645][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.736156][ T5847] Bluetooth: hci1: command tx timeout [ 241.736163][ T5844] Bluetooth: hci4: command tx timeout [ 241.785562][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.883771][ T49] hsr_slave_0: left promiscuous mode [ 241.899172][ T49] hsr_slave_1: left promiscuous mode [ 241.904983][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.915140][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.926652][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 241.938200][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.945604][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.971847][ T49] veth1_macvtap: left promiscuous mode [ 241.981106][ T49] veth0_macvtap: left promiscuous mode [ 241.988769][ T49] veth1_vlan: left promiscuous mode [ 241.994136][ T49] veth0_vlan: left promiscuous mode [ 242.405268][ T49] team0 (unregistering): Port device team_slave_1 removed [ 242.443526][ T49] team0 (unregistering): Port device team_slave_0 removed [ 242.801496][ T36] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.873974][T10147] 8021q: adding VLAN 0 to HW filter on device team1 [ 242.910446][T10005] hsr_slave_0: entered promiscuous mode [ 242.929690][T10005] hsr_slave_1: entered promiscuous mode [ 242.944833][T10005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.967077][T10005] Cannot create hsr debugfs directory [ 243.050879][T10153] syz_tun: entered allmulticast mode [ 243.061025][ T1157] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.125021][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.147731][ C1] ------------[ cut here ]------------ [ 243.153434][ C1] WARNING: CPU: 1 PID: 5849 at net/ipv4/ipmr.c:2302 ip_mr_output+0xbb1/0xe70 [ 243.162266][ C1] Modules linked in: [ 243.166362][ C1] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00592-g0289c51f889e #0 PREEMPT(full) [ 243.178569][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.188670][ C1] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 243.194013][ C1] Code: df e9 63 f6 ff ff e8 ce 33 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 9a 09 4c ff e9 45 f6 ff ff e8 b0 33 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 a2 33 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 243.213673][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010246 [ 243.219800][ C1] RAX: ffffffff89fa28a0 RBX: ffff888031736b40 RCX: ffff88807bea0000 [ 243.227859][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.235881][ C1] RBP: ffffc90000a08a10 R08: ffff88807bea0000 R09: 0000000000000004 [ 243.243872][ C1] R10: 0000000000000003 R11: ffffffff89fa1cf0 R12: 0000000000000010 [ 243.251918][ C1] R13: dffffc0000000000 R14: ffff888054088200 R15: 0000000000000000 [ 243.260027][ C1] FS: 0000555586e94500(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000 [ 243.269003][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 243.275605][ C1] CR2: 00007fc168d7e2d8 CR3: 0000000032e66000 CR4: 00000000003526f0 [ 243.283630][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 243.291662][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 243.299695][ C1] Call Trace: [ 243.302999][ C1] [ 243.305885][ C1] ? __pfx_dst_output+0x10/0x10 [ 243.310764][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 243.316196][ C1] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 243.322295][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 243.327373][ C1] ? skb_dst+0x4f/0xd0 [ 243.331600][ C1] ? dst_output+0x177/0x1c0 [ 243.336173][ C1] igmp_send_report+0x89e/0xdb0 [ 243.341063][ C1] ? __pfx_igmp_send_report+0x10/0x10 [ 243.346507][ C1] ? igmp_start_timer+0x211/0x2b0 [ 243.351585][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 243.356838][ C1] igmp_timer_expire+0x204/0x510 [ 243.361817][ C1] call_timer_fn+0x17e/0x5f0 [ 243.366547][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 243.372041][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.377280][ C1] ? call_timer_fn+0xbe/0x5f0 [ 243.381983][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 243.387175][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 243.392677][ C1] __run_timer_base+0x61a/0x860 [ 243.397578][ C1] ? ktime_get+0x3e/0x1f0 [ 243.401958][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 243.407473][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 243.413769][ C1] run_timer_softirq+0xb7/0x180 [ 243.418667][ C1] handle_softirqs+0x286/0x870 [ 243.423502][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 243.428342][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 243.433844][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 243.439120][ C1] __irq_exit_rcu+0xca/0x1f0 [ 243.443752][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 243.449019][ C1] irq_exit_rcu+0x9/0x30 [ 243.453315][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 243.459004][ C1] [ 243.461953][ C1] [ 243.464897][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.470929][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 243.477490][ C1] Code: 74 05 e8 ab fc 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 e8 27 f6 65 8b 05 3c 24 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 243.497165][ C1] RSP: 0018:ffffc900047df700 EFLAGS: 00000206 [ 243.503269][ C1] RAX: 16b4b07ec8403a00 RBX: 0000000000000a02 RCX: 16b4b07ec8403a00 [ 243.511294][ C1] RDX: 0000000000000006 RSI: ffffffff8d984a0d RDI: 0000000000000001 [ 243.519330][ C1] RBP: ffffc900047df790 R08: ffffffff8fa11ff7 R09: 1ffffffff1f423fe [ 243.527367][ C1] R10: dffffc0000000000 R11: fffffbfff1f423ff R12: dffffc0000000000 [ 243.535383][ C1] R13: ffff888056d97000 R14: ffffffff99d66540 R15: 1ffff920008fbee0 [ 243.543456][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 243.549882][ C1] debug_check_no_obj_freed+0x451/0x470 [ 243.555466][ C1] ? __page_table_check_zero+0xba/0x530 [ 243.561064][ C1] ? __page_table_check_zero+0xba/0x530 [ 243.566868][ C1] __free_frozen_pages+0x509/0xe70 [ 243.572027][ C1] vfree+0x25a/0x400 [ 243.575973][ C1] do_ip6t_get_ctl+0xeb0/0x1180 [ 243.580868][ C1] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 243.586234][ C1] ? __mutex_trylock_common+0x153/0x260 [ 243.591808][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 243.597760][ C1] ? __x64_sys_socket+0x7a/0x90 [ 243.602635][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.608758][ C1] ? rcu_is_watching+0x15/0xb0 [ 243.613578][ C1] ? nf_getsockopt+0x224/0x290 [ 243.618404][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 243.624082][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 243.629154][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.635164][ C1] ? __might_fault+0xb0/0x130 [ 243.639915][ C1] nf_getsockopt+0x26e/0x290 [ 243.644559][ C1] ipv6_getsockopt+0x1ed/0x290 [ 243.649381][ C1] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 243.654698][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 243.660136][ C1] do_sock_getsockopt+0x360/0x650 [ 243.665204][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 243.670984][ C1] ? do_syscall_64+0x80/0x3b0 [ 243.675705][ C1] ? fd_install+0x97/0x540 [ 243.680166][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 243.685401][ C1] ? do_syscall_64+0x80/0x3b0 [ 243.690138][ C1] ? do_syscall_64+0x80/0x3b0 [ 243.694853][ C1] do_syscall_64+0xfa/0x3b0 [ 243.699409][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.704682][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.710798][ C1] ? clear_bhb_loop+0x60/0xb0 [ 243.715588][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.721544][ C1] RIP: 0033:0x7fc168b9066a [ 243.726025][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 243.745783][ C1] RSP: 002b:00007ffddc8b8e08 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 243.754228][ C1] RAX: ffffffffffffffda RBX: 00007ffddc8b8e90 RCX: 00007fc168b9066a [ 243.762328][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 243.770350][ C1] RBP: 0000000000000003 R08: 00007ffddc8b8e2c R09: 0079746972756365 [ 243.778392][ C1] R10: 00007ffddc8b8e90 R11: 0000000000000216 R12: 00007fc168d80340 [ 243.786417][ C1] R13: 00007ffddc8b8e2c R14: 0000000000000000 R15: 00007fc168d81e40 [ 243.794454][ C1] [ 243.797544][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 243.804846][ C1] CPU: 1 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00592-g0289c51f889e #0 PREEMPT(full) [ 243.817013][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.827094][ C1] Call Trace: [ 243.830398][ C1] [ 243.833263][ C1] dump_stack_lvl+0x99/0x250 [ 243.837888][ C1] ? __asan_memcpy+0x40/0x70 [ 243.842508][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.847737][ C1] ? __pfx__printk+0x10/0x10 [ 243.852361][ C1] panic+0x2db/0x790 [ 243.856291][ C1] ? __pfx_panic+0x10/0x10 [ 243.860734][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 243.865991][ C1] __warn+0x31b/0x4b0 [ 243.870014][ C1] ? ip_mr_output+0xbb1/0xe70 [ 243.874744][ C1] ? ip_mr_output+0xbb1/0xe70 [ 243.879461][ C1] report_bug+0x2be/0x4f0 [ 243.883818][ C1] ? ip_mr_output+0xbb1/0xe70 [ 243.888538][ C1] ? ip_mr_output+0xbb1/0xe70 [ 243.893239][ C1] ? ip_mr_output+0xbb3/0xe70 [ 243.897940][ C1] handle_bug+0x84/0x160 [ 243.902296][ C1] exc_invalid_op+0x1a/0x50 [ 243.906819][ C1] asm_exc_invalid_op+0x1a/0x20 [ 243.911685][ C1] RIP: 0010:ip_mr_output+0xbb1/0xe70 [ 243.917000][ C1] Code: df e9 63 f6 ff ff e8 ce 33 c6 f7 48 8b 74 24 18 45 31 f6 31 ff ba 02 00 00 00 e8 9a 09 4c ff e9 45 f6 ff ff e8 b0 33 c6 f7 90 <0f> 0b 90 e9 94 f5 ff ff e8 a2 33 c6 f7 90 0f 0b 90 42 80 3c 2b 00 [ 243.936621][ C1] RSP: 0018:ffffc90000a08900 EFLAGS: 00010246 [ 243.942728][ C1] RAX: ffffffff89fa28a0 RBX: ffff888031736b40 RCX: ffff88807bea0000 [ 243.950766][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 243.958848][ C1] RBP: ffffc90000a08a10 R08: ffff88807bea0000 R09: 0000000000000004 [ 243.966834][ C1] R10: 0000000000000003 R11: ffffffff89fa1cf0 R12: 0000000000000010 [ 243.974825][ C1] R13: dffffc0000000000 R14: ffff888054088200 R15: 0000000000000000 [ 243.982830][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 243.987903][ C1] ? ip_mr_output+0xbb0/0xe70 [ 243.992617][ C1] ? __pfx_dst_output+0x10/0x10 [ 243.997509][ C1] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 244.002915][ C1] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 244.009014][ C1] ? __pfx_ip_mr_output+0x10/0x10 [ 244.014096][ C1] ? skb_dst+0x4f/0xd0 [ 244.018194][ C1] ? dst_output+0x177/0x1c0 [ 244.022737][ C1] igmp_send_report+0x89e/0xdb0 [ 244.027659][ C1] ? __pfx_igmp_send_report+0x10/0x10 [ 244.033078][ C1] ? igmp_start_timer+0x211/0x2b0 [ 244.038152][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 244.043384][ C1] igmp_timer_expire+0x204/0x510 [ 244.048364][ C1] call_timer_fn+0x17e/0x5f0 [ 244.053074][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 244.058567][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.063937][ C1] ? call_timer_fn+0xbe/0x5f0 [ 244.068673][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 244.073852][ C1] ? __pfx_igmp_timer_expire+0x10/0x10 [ 244.079365][ C1] __run_timer_base+0x61a/0x860 [ 244.084261][ C1] ? ktime_get+0x3e/0x1f0 [ 244.088634][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 244.094038][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 244.100349][ C1] run_timer_softirq+0xb7/0x180 [ 244.105258][ C1] handle_softirqs+0x286/0x870 [ 244.110085][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 244.114913][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 244.120247][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 244.125477][ C1] __irq_exit_rcu+0xca/0x1f0 [ 244.130172][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 244.135383][ C1] irq_exit_rcu+0x9/0x30 [ 244.139627][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 244.145270][ C1] [ 244.148198][ C1] [ 244.151123][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.157102][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 244.163620][ C1] Code: 74 05 e8 ab fc 5e f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 53 e8 27 f6 65 8b 05 3c 24 34 07 85 c0 74 40 48 c7 04 24 0e 36 [ 244.183224][ C1] RSP: 0018:ffffc900047df700 EFLAGS: 00000206 [ 244.189294][ C1] RAX: 16b4b07ec8403a00 RBX: 0000000000000a02 RCX: 16b4b07ec8403a00 [ 244.197263][ C1] RDX: 0000000000000006 RSI: ffffffff8d984a0d RDI: 0000000000000001 [ 244.205311][ C1] RBP: ffffc900047df790 R08: ffffffff8fa11ff7 R09: 1ffffffff1f423fe [ 244.213276][ C1] R10: dffffc0000000000 R11: fffffbfff1f423ff R12: dffffc0000000000 [ 244.221238][ C1] R13: ffff888056d97000 R14: ffffffff99d66540 R15: 1ffff920008fbee0 [ 244.229219][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 244.235593][ C1] debug_check_no_obj_freed+0x451/0x470 [ 244.241151][ C1] ? __page_table_check_zero+0xba/0x530 [ 244.246705][ C1] ? __page_table_check_zero+0xba/0x530 [ 244.252247][ C1] __free_frozen_pages+0x509/0xe70 [ 244.257490][ C1] vfree+0x25a/0x400 [ 244.261413][ C1] do_ip6t_get_ctl+0xeb0/0x1180 [ 244.266272][ C1] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 244.271572][ C1] ? __mutex_trylock_common+0x153/0x260 [ 244.277132][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 244.283041][ C1] ? __x64_sys_socket+0x7a/0x90 [ 244.287897][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.293968][ C1] ? rcu_is_watching+0x15/0xb0 [ 244.298761][ C1] ? nf_getsockopt+0x224/0x290 [ 244.303566][ C1] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 244.309213][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 244.314255][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.320240][ C1] ? __might_fault+0xb0/0x130 [ 244.324938][ C1] nf_getsockopt+0x26e/0x290 [ 244.329585][ C1] ipv6_getsockopt+0x1ed/0x290 [ 244.334360][ C1] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 244.339648][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 244.345025][ C1] do_sock_getsockopt+0x360/0x650 [ 244.350061][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 244.355633][ C1] ? do_syscall_64+0x80/0x3b0 [ 244.360322][ C1] ? fd_install+0x97/0x540 [ 244.364749][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 244.369974][ C1] ? do_syscall_64+0x80/0x3b0 [ 244.374653][ C1] ? do_syscall_64+0x80/0x3b0 [ 244.379343][ C1] do_syscall_64+0xfa/0x3b0 [ 244.383888][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.389086][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.395148][ C1] ? clear_bhb_loop+0x60/0xb0 [ 244.399853][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.405756][ C1] RIP: 0033:0x7fc168b9066a [ 244.410173][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 244.429784][ C1] RSP: 002b:00007ffddc8b8e08 EFLAGS: 00000216 ORIG_RAX: 0000000000000037 [ 244.438216][ C1] RAX: ffffffffffffffda RBX: 00007ffddc8b8e90 RCX: 00007fc168b9066a [ 244.446205][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 244.454187][ C1] RBP: 0000000000000003 R08: 00007ffddc8b8e2c R09: 0079746972756365 [ 244.462157][ C1] R10: 00007ffddc8b8e90 R11: 0000000000000216 R12: 00007fc168d80340 [ 244.470124][ C1] R13: 00007ffddc8b8e2c R14: 0000000000000000 R15: 00007fc168d81e40 [ 244.478116][ C1] [ 244.481511][ C1] Kernel Offset: disabled [ 244.485843][ C1] Rebooting in 86400 seconds..