last executing test programs: 1m4.883429024s ago: executing program 1 (id=1229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x80000001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffea2, &(0x7f0000000180)={&(0x7f00000020c0)=@getroute={0x0, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}}, 0x4011) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0xffffffff, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x40000000000004, 0x5, 0x0, 0x7f}, {0x0, 0x8, 0xcf}, {0xf6}, 0x0, 0x200000, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "409e18"}}]}, 0x140}}, 0x804) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000003c000000fc00000000000000fdffffffffffffff0000000000000000800000000000000000000000000000000000000000000000020000000000800000000000000000000000000000001000000000000000000000000000000000b54d438f3034258a00000000fcff00000000000000000000000000000000000000000000002cbd7000000000000200000000000000000000004c001400686d616328736861312d6e656f6e29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008be0a59ba2911e3053767b0353a367e1c6ae4d5898b272eeb69b267a02ff0d1ba87a32811ae11e7eb8c90dafdd7f59760676a0bbde923b7f1f9995f3b174c9b8ba017870240071e4272fe1b3ae73321d269e4e716db7c3b1f4f8273d56a4"], 0x13c}}, 0x4854) 54.137462307s ago: executing program 1 (id=1229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x80000001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffea2, &(0x7f0000000180)={&(0x7f00000020c0)=@getroute={0x0, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}}, 0x4011) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0xffffffff, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x40000000000004, 0x5, 0x0, 0x7f}, {0x0, 0x8, 0xcf}, {0xf6}, 0x0, 0x200000, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "409e18"}}]}, 0x140}}, 0x804) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x4854) 44.068538249s ago: executing program 1 (id=1229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x80000001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffea2, &(0x7f0000000180)={&(0x7f00000020c0)=@getroute={0x0, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}}, 0x4011) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0xffffffff, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x40000000000004, 0x5, 0x0, 0x7f}, {0x0, 0x8, 0xcf}, {0xf6}, 0x0, 0x200000, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "409e18"}}]}, 0x140}}, 0x804) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x4854) 34.084985527s ago: executing program 1 (id=1229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x80000001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffea2, &(0x7f0000000180)={&(0x7f00000020c0)=@getroute={0x0, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}}, 0x4011) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0xffffffff, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x40000000000004, 0x5, 0x0, 0x7f}, {0x0, 0x8, 0xcf}, {0xf6}, 0x0, 0x200000, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "409e18"}}]}, 0x140}}, 0x804) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x4854) 23.186747222s ago: executing program 1 (id=1229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x80000001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffea2, &(0x7f0000000180)={&(0x7f00000020c0)=@getroute={0x0, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}}, 0x4011) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0xffffffff, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x40000000000004, 0x5, 0x0, 0x7f}, {0x0, 0x8, 0xcf}, {0xf6}, 0x0, 0x200000, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "409e18"}}]}, 0x140}}, 0x804) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x4854) 10.43875834s ago: executing program 1 (id=1229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x80002, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xe}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x80000001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20001810}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffea2, &(0x7f0000000180)={&(0x7f00000020c0)=@getroute={0x0, 0x1a, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}}, 0x4011) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x140, 0x10, 0x413, 0x70bd28, 0xffffffff, {{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@private=0xa010100, {0x0, 0x7, 0x0, 0x40000000000004, 0x5, 0x0, 0x7f}, {0x0, 0x8, 0xcf}, {0xf6}, 0x0, 0x200000, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "409e18"}}]}, 0x140}}, 0x804) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000000000000000e0000002000000000000000000000000e000000100000000000000000000000000000000fffc00000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x4854) 2.837795635s ago: executing program 0 (id=2188): r0 = socket(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x500, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc0c4}, 0x10) (async, rerun: 64) r4 = socket(0x1e, 0x1, 0x0) (rerun: 64) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004380)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a200000000e0a01080000000000000000020000060900020073827a3200000000140000001100010000000000007785000000000a"], 0x48}, 0x1, 0x0, 0x0, 0x40480c4}, 0x20000800) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r0}, 0x20) 2.412199044s ago: executing program 0 (id=2193): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delnexthop={0x50, 0x69, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.396971242s ago: executing program 2 (id=2194): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_getnexthop={0x1c, 0x6a, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x1c, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'erspan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x24044800) 2.221223692s ago: executing program 0 (id=2197): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) (async) shutdown(r0, 0x1) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x7, 0x4, {{0x3a, 0x4, 0x1, 0x7, 0xe8, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010100, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x22, 0x3, 0x4, [{@loopback, 0x1}, {@broadcast, 0x5}, {@private=0xa010102, 0xfffff001}]}, @timestamp_prespec={0x44, 0x44, 0x91, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x14}, 0x100}, {@broadcast, 0xa}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@multicast1, 0x5}, {@rand_addr=0x64010101, 0x9}, {@loopback, 0x6}, {@multicast2, 0xfffffff8}, {@loopback, 0x8}]}, @timestamp={0x44, 0x10, 0x36, 0x0, 0x2, [0xc, 0xfffffff8, 0x5]}, @noop, @cipso={0x86, 0x52, 0xffffffffffffffff, [{0x2, 0xe, "1e4d08d26a88eb512f8b8b05"}, {0x6, 0xa, "a2c2e5fdf52109a6"}, {0x2, 0x9, "9f8a17fbe6d9ae"}, {0x0, 0x4, "b8f6"}, {0x2941d4f441cd1e69, 0x2}, {0x2, 0x2}, {0x1, 0xa, "45ae96931e122aac"}, {0x6, 0x8, "18d89c1e10c5"}, {0x7, 0x2}, {0x2, 0xf, "bc211b778cc58b37eb020f0baf"}]}, @timestamp={0x44, 0x8, 0xa0, 0x0, 0x2, [0x1]}, @timestamp={0x44, 0x8, 0x70, 0x0, 0x6, [0x46]}, @noop]}}}}}) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f00010000f7ffffffffffffffeae7ff07000100", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=@newpolicy={0xdc, 0x13, 0x400, 0x70bd25, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, r3, r5}, {0x9, 0x1fbf, 0x582d, 0x5, 0x1, 0xc, 0x40, 0x4d7bbdf7}, {0x6, 0x9, 0xcd, 0x4}, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1}, [@tfcpad={0x8, 0x16, 0x2}, @encap={0x1c, 0x4, {0x0, 0x4e22, 0x4e22, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x5}, 0x24010000) r6 = socket$inet6(0xa, 0x5, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000091101f0098d04c000000009500000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x15) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="000000000000000009000100"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x118, 0x208, 0xffffffff, 0x208, 0x320, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, &(0x7f0000000680), {[{{@ipv6={@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xffffff00, 0x1a82ab015c5482fe], [0xffffffff, 0xffffffff, 0xff000000], 'macvlan0\x00', 'pimreg0\x00', {}, {}, 0x67, 0x80, 0x0, 0xa}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"338f", 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x5, @ipv4=@broadcast, @ipv6=@private2, @port=0x4e23, @port=0x4e23}}}, {{@ipv6={@local, @mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xffff00, 0xffffff00, 0xffffffff], 'wg0\x00', 'ipvlan0\x00', {}, {}, 0x2f, 0x4, 0x1, 0x55}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x10, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv6=@local, @gre_key=0x1, @icmp_id=0x68}}}, {{@ipv6={@empty, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xff, 0xffffffff, 0xff], 'veth0_macvtap\x00', 'veth0_to_batadv\x00', {}, {}, 0x3b, 0x40, 0x3, 0x20}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x1}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x65adb5994ef6219e, @ipv4=@multicast1, @ipv4=@private=0xa010101, @gre_key=0x8000, @gre_key=0x4}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @local, [0xff000000, 0x0, 0xff, 0xffffffff], [0xffffff, 0x1fe000000, 0xff000000], 'veth1_to_batadv\x00', 'macvlan0\x00', {0xff}, {0xff}, 0x21, 0xcc, 0x3, 0x22}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x5}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@broadcast, @ipv4=@broadcast, @port=0x4e24, @gre_key=0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) (async) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x400000000000003, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x60}}, 0x0) close(r9) (async) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x80, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.00823406s ago: executing program 2 (id=2199): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000080)='veth0_to_team\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='pids.current\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000180)={@remote, @broadcast, @empty}, &(0x7f00000001c0)=0xc) 2.00700022s ago: executing program 0 (id=2200): r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) bind$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket(0x10, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_ID={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x6c}}, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000340)=""/15, 0x211000, 0x1000}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0xd1383000) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000080)=0x240e4, 0x4) poll(&(0x7f00000001c0)=[{r3, 0x2000}], 0x1, 0xfc6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$pppl2tp(r4, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @multicast2}, 0x0, 0x4, 0x4, 0x3}}, 0x26) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1.840452751s ago: executing program 4 (id=2201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0xfff}]}, 0x48}}, 0x0) (async, rerun: 64) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) (async) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="02", 0x1}], 0x1}}], 0x1, 0x20048041) 1.839718492s ago: executing program 2 (id=2202): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900010073797a300000000028000480080002400000000008000140000000050400040076657468315f746f5f62617461647600090003"], 0xa4}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000ffffffff000000a900", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000090"], 0x48}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) read(r0, &(0x7f0000000180)=""/78, 0x4e) 1.535303308s ago: executing program 4 (id=2205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x2f, 0x84, 0x8f, 0x8, 0x2c, @private1={0xfc, 0x1, '\x00', 0x2}, @remote, 0x8000, 0x8000, 0x80000000, 0x4}}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000000066490000000000000000000000000000000000000002"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="050000000000000000000f000000080003009a2ff6d07d4b8fc3948af78a3d4166f3425beb97fae10d45b2ec635f29d34c143ae51ddc597b1d22f28377758919548ac9c19080e404f03f5bdb341e22f8b0581344a482", @ANYRES32=0x0, @ANYBLOB="55000e0080000000080211000000080211000001505050505050000000000000000000009d92fd67da8a"], 0xcc}, 0x1, 0x0, 0x0, 0x881}, 0x40) 1.359551858s ago: executing program 4 (id=2207): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delnexthop={0x50, 0x69, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{0x8}, {0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.247121396s ago: executing program 3 (id=2208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030106000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4040000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) 1.228604348s ago: executing program 4 (id=2209): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, '\x00', "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) (async) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r1], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r1], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) (async) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@map=r6, r7, 0xa, 0x6, 0x4000, @void, @value=r6}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x881) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1.135704934s ago: executing program 4 (id=2210): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @random="be9689ce9f88", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2d, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0x11, 0x0, 0x0, 0x3, 0xccce, {0x5, 0x4, 0x2, 0x1, 0xff, 0x67, 0x3, 0xe7, 0x33, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote}}}}}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x14, 0x1, 0x8001, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x0, 0x0}, 0x8) r5 = accept4$rose(r1, &(0x7f0000000300)=@full={0xb, @dev, @default, 0x0, [@null, @remote, @bcast, @netrom, @remote, @null]}, &(0x7f0000000340)=0x40, 0x80000) listen(r5, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@ifindex=r3, r0, 0x2f, 0x20, 0x0, @void, @void, @void, @value=r4, r2}, 0x20) 1.072191632s ago: executing program 3 (id=2211): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r0, r1}) (async) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0xa7, 0x4) 1.036493381s ago: executing program 0 (id=2212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x4, 0x4) r1 = socket(0x22, 0x2, 0x4) bind$bt_hci(r1, &(0x7f00000001c0)={0x22, 0x4, 0x4}, 0x6) (async) r2 = accept4$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14, 0x80000) r3 = accept4$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0xffffff27, 0x80800) sendmsg(r3, &(0x7f0000000300)={&(0x7f0000000140)=@nfc={0x27, 0x0, 0x0, 0x2}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4dcfbdf73bcf7eed2027157b3aaa7efc48c8d9e780612cdb8132512b6a8c1ee3fc63d703950e33d0cc245e5cf1d15e3a9d64f9d990309b73e622d0555173a607566d5a85a14d4225ee869c1ced30e83865f94d34e4d7f1ca776736392ebe1a3a2c3c2385d46b668ee7486846b9ab7ed8fe00eb5af5ef53684bf7adf5e3b2938aa328f7754405d5fb56d3b276640d60025ac15463ba90a358cb5b8d9b5f020b5b40bacf8cfb47bfeff574c50fc7549385ccf7a537389bb45a86cba775b7b6cc1809081839f8484d071ac62816827b8d265b1707bfb9255fbb5d3d401cce54603303bb99f9c2954fbc5f13a26180e9", 0xee}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x2c0}, 0x8040) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, 0x0, &(0x7f0000001340)) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38) 876.04056ms ago: executing program 2 (id=2213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 804.229013ms ago: executing program 3 (id=2214): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000fcffffff791000000013ae000000950074000000"], &(0x7f0000002580)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x800) recvmsg(r1, &(0x7f0000002540)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/241, 0xf1}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/114, 0x72}, {&(0x7f0000000340)=""/228, 0xe4}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/95, 0x5f}], 0x6, &(0x7f0000001540)=""/4096, 0x1000}, 0x10142) 789.100414ms ago: executing program 2 (id=2215): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0xa, 0x0) (async) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000340)) (async) getsockopt$sock_int(r2, 0x1, 0x22, 0x0, &(0x7f0000000340)) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x6, @broadcast}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) (async) sendto$inet6(r0, &(0x7f0000000280)='S', 0x1, 0x8000, 0x0, 0x0) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000880)=ANY=[], 0x18) (async) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000880)=ANY=[], 0x18) connect$inet6(r7, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) (async) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010300000000000000000200000000000000000000fa0b0018"], 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {0x7, r11}, [@MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x0, 0x0, {@ip4=@empty}}}]}, 0x38}}, 0x0) socket(0x10, 0x2, 0x0) 698.799674ms ago: executing program 4 (id=2216): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r0, 0x6}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.events.local\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140)="0f953534c1ad3b77220447f2269d3f60e06af17857e3bde16ae2648bacf898089b6e01c553a1db8a75a93967b484edd92e5c2b7115357ea4e0a43f7098e6f6f29fc09a33650fda5d55cce004c54d007be9b9a7da69d1b16d3f89131c45eb74136ad6afdc922e4f2d89cf8e0d3f9b26f7315bed7b8feaee0c920a1995bd815dd94552de5c7bdf5631e00079dc039d", &(0x7f0000000200)=@udp=r2, 0x1}, 0x20) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r0, 0xb}, 0x8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20080000}, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) r6 = accept4$bt_l2cap(r1, &(0x7f0000000440)={0x1f, 0x0, @none}, &(0x7f0000000480)=0xe, 0x800) accept4$bt_l2cap(r6, &(0x7f00000004c0)={0x1f, 0x0, @none}, &(0x7f0000000500)=0xe, 0x80000) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000540)={@initdev, @dev, 0x0}, &(0x7f0000000580)=0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x1ff, '\x00', r7, r1, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x4c011) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000800)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000840)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f0000000900)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x3c, r10, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r1) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000b80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x120, r14, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x7ff, 0x3}}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe7, 0xbe, "fdca3772843d1fd687e324954c33ff6ff01bcb8d4629924d5f3f84e0966c6b13354b7c6aaa945ab5e1206b300ff4964cb19584a360e3c85cbbeded0a618d335a810397aa691cd634a3b9baddc923d4160985212ed697f1aa23e9368d592e7358193bce7be14023ba72691eb5ef087ea8e0505cf7177782ef9e46cf8745807f4ff40a36c592504e9dba5f2e23c19953258b798a3d0cbec44188ec77e239e56ef642998cdc9c9a6cdc9ef7607dab6b0b0005dc3ccf0a6f117d5b7d734f6c9a44b2b44fef17d1291403b91e7a5d996339b6ef2f6896e323851f883baf6dfbb04957c84d1c"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2000}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xf}]}, 0x120}}, 0x4000804) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000bc0)) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000c00)) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f0000000cc0)=@security={'security\x00', 0xe, 0x4, 0x4b0, 0xffffffff, 0x130, 0x2c0, 0x2c0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, &(0x7f0000000c80), {[{{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffff00, 0xffffffff, 0xff000000], [0xff, 0x0, 0xff000000, 0xffffffff], 'macvlan0\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x3a, 0x5, 0x3, 0x8}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x5, 0x1, [0x3, 0xfff1, 0x2, 0xf6, 0x3, 0xd17, 0x221, 0x1, 0x5, 0xe, 0x1, 0xa19, 0x8, 0x1, 0x1000, 0x6], 0xb}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x4, "71ae4ce74f77b50066fb3c5efb4d65a4fab285a2100c166444191ed5afe9"}}}, {{@uncond, 0x0, 0x120, 0x190, 0x0, {}, [@common=@srh={{0x30}, {0x2e, 0x8, 0x3b, 0x0, 0x2, 0x218, 0x4}}, @common=@hbh={{0x48}, {0x9, 0x4, 0x1, [0x2, 0x40, 0x7fff, 0x0, 0x9, 0x4, 0xffff, 0xe, 0x59, 0xffff, 0x3, 0x40, 0x2, 0xc215, 0x3, 0xff59], 0x3}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0xff, 0x3, 0x0, 0x0, "d937b241665b6d8cc1b6a3756768277504b524a33077677ca7173df55b56cb993b7c14db44bd2f6c5afe5a959eff1353e3964b76e98df16d5e953e17c4d170a0"}}}, {{@ipv6={@private0, @loopback, [0xffffff00, 0x0, 0xff000000, 0xffffffff], [0xff], 'veth1_to_team\x00', 'syz_tun\x00', {}, {}, 0x11, 0x4, 0x4, 0x39}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x5, 'aZ', 0x1}}, @common=@mh={{0x28}, {'tI'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x5, 0x24, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x1ff5}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x4, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000001340)='syzkaller\x00', 0x23, 0xd5, &(0x7f0000001380)=""/213, 0x40f00, 0xd, '\x00', r7, @fallback=0x1e, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001480)={0x0, 0x8, 0x9, 0xb99}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000001540)=[r8, 0x1, 0xffffffffffffffff, r1], &(0x7f0000001580)=[{0x5, 0x2, 0x7, 0x3}], 0x10, 0x5, @void, @value}, 0x94) 640.716188ms ago: executing program 3 (id=2217): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d40)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x2, 0x0, {0x7, 0x0, 0x0, r2, 0x3, 0x96, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040051}, 0x4048080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x30, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xb5e2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c88c}, 0x44010) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = getuid() sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4408}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getrule={0x1c, 0x22, 0x21a, 0x70bd26, 0x25dfdbff, {0x2, 0x20, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x6, 0x8}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) r9 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @multicast1}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000d80)=@security={'security\x00', 0x44, 0x4, 0x478, 0xffffffff, 0x2a0, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0xa8, 0x1d0, 0x8502}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x11}}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [], 0x0, 0x0, 0x4e23}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x0, 0x1f0, 0x1f0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback, @mcast1, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0x0, 0xffffffff, 0xff, 0xff], 'bond0\x00', 'gre0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x0, 0x5c}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0xf7}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xd1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], [0xffffffff, 0xff, 0x2cfd78767c810f0d, 0xffffffff], 'syzkaller0\x00', 'hsr0\x00', {}, {0xff}, 0x32, 0x0, 0x2, 0x29}, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@owner={{0x38}, {r6, r8, r9, r10, 0x2}}, @common=@icmp6={{0x28}, {0xc, "d4a4"}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0xfffffffffffff800}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 277.172072ms ago: executing program 2 (id=2218): r0 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xab2fefcb01b6f6b2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x541241, 0x0) (async, rerun: 32) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x2) (async, rerun: 32) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/500], 0x23c}}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000080)=@framed={{0x85, 0x0, 0x0, 0x0, 0xba, 0x27}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) (async, rerun: 32) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000f52dfdff9a500065000000003e04fefc0000e7000000000000000000000000fc0100000000000000000000000000000000000000000000571c3c69c1683c0d77f4c56b4bd36c420c2b72fb8363950c7922a055a50184636a971d037ab5eea139a80d0546187320c2324ed5f4b34e5b52904b379aa690a454f2bc5188fceadcb9bf850c74c619"], 0x78) (rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x11, &(0x7f00000000c0)=0xfffffffe, 0x4) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$nfc_llcp(r5, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) (async) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc, 0x0, 0x3, 0x18000}, 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) 272.335066ms ago: executing program 3 (id=2219): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 128.258624ms ago: executing program 3 (id=2220): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x8, 0xe, 0x0, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0 (id=2221): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) (async) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000200)=0x1000003) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, 0x0) pwritev(r6, &(0x7f0000000380)=[{&(0x7f0000000780)="42aaea14c940000000000000000000c52e8ee8c3f2820d9602b66153539ee99b925f3053be7666e818a1f66cbe4c57d9e7f966e90c4b1531ee8618d0fe8629a87d574a5f261780638f874c77a8332467fe553ef01915af754ea0c2fe44987c762bf87b2e6e91f08b13815b8db294020be3e10e8e7590df5f1f68eca259bd26ee19f8b7b779a4948a12c5f5e9f28b75dc", 0x90}, {&(0x7f0000000a40)="abffa99a7d6ed2dcacc958fd3a5c773e03b4a54890c6ba34d4a318f17925141e844a5882851431385aa863defbc0d479f945bbd8eb945276a091970bbeccd52a559731b33c20fd6eb7d6adb5ba81c0eccf6ee0dfd3f702812d39c7853360046b50ad6a4436d4247a5e920c58f140a138faa35246b17306e25f6e34b456ccefe6c20a544cb784ec517071b8f1563bb232c4019084d9003f1a2832609a0e8eb141c1ded373dd38c0e827721ecab5570c9b", 0xb0}, {&(0x7f0000000240)="43e51f1bce2ede7abb6a4b66c403f7e047ecee20f0c2fcb0e9a0fa457ecafec104711845155c12d3083c2643fa79d4831d46244b8543a725fd5366f46c47f28a49d9cd9504e8fcb98c7295b91fddb7740713db6271cd2cabd133fcda03c5c0f034350170b69e304f501b3d0b0adab4ab55293a945272119c6c039f8290df879fff628d42f94b5057e51e8a86a1879350d393acc57a51418944c4ebd0bc038ee67565694f4a4a655c4c280a6c171c3d9f3526cd4edb361a", 0xb7}, {&(0x7f0000000300)="f2671cb24621eed7e7a51d5659a146245add4a2f90cb80f9129d9a161de443485cc5ee75345f3572a222faec0745c7d800937747222bbd7f4dc9514a4799640f8255dc6a4743dab90efdb54b411a188a4e021ae5b392d4de7029e547a196c8990184ef06499677b80d5e21e063b3e263e1b2d2df8b2200a968be53e544fc", 0x7e}], 0x4, 0x5, 0xfffffffc) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078000050b722a35a66c5c51b6c3188dfe180ab58906a3166dd24c6f0f915f1a1f18548da5286995a000000000000000000004000"/75], 0x0) (async) syz_emit_ethernet(0x38, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002a000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffeaa780000696e", @ANYRES16=r6, @ANYRES8=r0], 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000000d14080058040000fddbdf25080003000000000008003e000100000008003e004300000008003e000500000008003e000500000008003e000100000008000100000000000800ac2e56ac23030003000000e78fb1cb111d78c148579809116550b37362eb60ed17563140de084918bf7d72ce59066af763ddc9ac5f7973ddd996fec2ac45e8d9cb18af251a21cb379c20b3c479b5a2aac2b484422ffa11d24b6f683f57b9bd24fc3fecd84610c8473deead2c3b333c8f464843a53306adea7b3f39a1c094852d489660c93936"], 0x50}}, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x4048045, &(0x7f0000000180)={0xa, 0x4e23, 0x8be6, @mcast2, 0x9}, 0x1c) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@func={0x0, 0x0, 0x0, 0x90, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0x64, "36a8fe5f8870718aedb69e1323f7b711ea35b8db32e041ac55156ec7677605b6834395d35d2da999dc02a9caae135ab7dff102230a981d07d147a4f444fe4e3f559523183aa6fd6e5ae0fa98d153863a22c31212d85026fb19ef7ebadeb35702728b2b4f"}, &(0x7f00000002c0)=0x6c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000340)={r8, 0x3c, "da4f9cf4415c9a6bd364df96c19074ea4ef1e7af01a30d642a3948a8ab627527611ed44579b767343841d64a75703973a3d8612be259539aca08d67f"}, &(0x7f0000000440)=0x44) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r7, 0xf517, 0x0) (async) sendto$inet6(r1, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000600)=""/138, 0x8a}], 0x1}, 0x4}], 0x1, 0x140, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000540)={0x8}, 0x8) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.4.1147'. [ 202.752394][ T9766] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.947350][ T9766] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.964240][ T9791] netlink: 'syz.3.1151': attribute type 11 has an invalid length. [ 203.016389][ T9766] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.026150][ T9795] netlink: zone id is out of range [ 203.044450][ T9795] netlink: zone id is out of range [ 203.054742][ C1] syz_tun: tun_net_xmit 118 [ 203.067997][ T9795] netlink: zone id is out of range [ 203.089763][ T9766] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.104712][ T9795] netlink: zone id is out of range [ 203.115028][ T9795] netlink: zone id is out of range [ 203.139292][ T9795] netlink: zone id is out of range [ 203.149812][ T9766] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.167600][ T9801] gtp0: entered promiscuous mode [ 203.177297][ T9801] gtp0: entered allmulticast mode [ 203.417485][ T9814] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1155'. [ 203.460939][ T9817] Cannot find set identified by id 752 to match [ 203.503804][ T9819] Unsupported ieee802154 address type: 0 [ 203.527294][ T9819] SET target dimension over the limit! [ 203.575953][ T9817] netlink: 'syz.2.1158': attribute type 11 has an invalid length. [ 203.714774][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1163'. [ 203.739351][ T9833] netlink: 'syz.1.1162': attribute type 58 has an invalid length. [ 203.747802][ T9833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'. [ 204.053649][ T9845] netlink: 'syz.2.1168': attribute type 39 has an invalid length. [ 204.094858][ C1] syz_tun: tun_net_xmit 118 [ 204.145037][ T9851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1169'. [ 204.155933][ T9845] veth0_macvtap: left promiscuous mode [ 204.157684][ T9851] netlink: 'syz.3.1169': attribute type 3 has an invalid length. [ 204.381852][ T9858] vlan2: entered promiscuous mode [ 204.391617][ T9858] bond0: entered promiscuous mode [ 204.501416][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1173'. [ 204.520800][ T9862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1174'. [ 204.574375][ T9862] veth1_to_team: entered promiscuous mode [ 204.709244][ T9871] netlink: 'syz.0.1177': attribute type 6 has an invalid length. [ 204.929822][ T9871] bond1: entered promiscuous mode [ 204.952687][ T9871] bond1: entered allmulticast mode [ 204.994184][ T9871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.134761][ C1] syz_tun: tun_net_xmit 118 [ 205.277550][ T9871] bond1 (unregistering): Released all slaves [ 205.328553][ T9888] validate_nla: 1 callbacks suppressed [ 205.328572][ T9888] netlink: 'syz.2.1180': attribute type 3 has an invalid length. [ 205.497622][ T9892] net_ratelimit: 398 callbacks suppressed [ 205.497657][ T9892] netlink: zone id is out of range [ 205.536242][ T9892] netlink: get zone limit has 8 unknown bytes [ 205.857267][ T9918] netlink: 'syz.3.1189': attribute type 15 has an invalid length. [ 205.920278][ T9921] netlink: 'syz.2.1187': attribute type 28 has an invalid length. [ 205.929455][ T9921] netlink: 'syz.2.1187': attribute type 3 has an invalid length. [ 205.947757][ T9918] netlink: 'syz.3.1189': attribute type 1 has an invalid length. [ 206.035592][ T9926] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 206.122766][ T9918] 8021q: adding VLAN 0 to HW filter on device bond4 [ 206.173797][ T9927] veth3: entered promiscuous mode [ 206.179193][ C1] syz_tun: tun_net_xmit 118 [ 206.213230][ T9926] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 206.917822][ T9959] x_tables: duplicate underflow at hook 1 [ 206.940281][ T9959] sctp: [Deprecated]: syz.3.1198 (pid 9959) Use of int in maxseg socket option. [ 206.940281][ T9959] Use struct sctp_assoc_value instead [ 207.214782][ C1] syz_tun: tun_net_xmit 118 [ 207.608409][ T9991] pimreg3: entered allmulticast mode [ 207.637207][ T9991] __nla_validate_parse: 10 callbacks suppressed [ 207.637228][ T9991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1207'. [ 207.988134][T10006] netlink: 'syz.0.1210': attribute type 3 has an invalid length. [ 208.227411][T10016] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1213'. [ 208.246182][T10017] xt_addrtype: ipv6 does not support BROADCAST matching [ 208.255078][ C1] syz_tun: tun_net_xmit 118 [ 208.522362][T10027] unsupported nlmsg_type 40 [ 208.819040][T10043] syzkaller0 speed is unknown, defaulting to 1000 [ 209.277349][T10060] sctp: [Deprecated]: syz.0.1223 (pid 10060) Use of int in max_burst socket option. [ 209.277349][T10060] Use struct sctp_assoc_value instead [ 209.304740][ C1] syz_tun: tun_net_xmit 118 [ 210.177608][T10087] netlink: 'syz.0.1228': attribute type 12 has an invalid length. [ 210.186783][T10087] netlink: 'syz.0.1228': attribute type 29 has an invalid length. [ 210.204815][T10087] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1228'. [ 210.205179][T10090] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1228'. [ 210.269929][T10087] netlink: 'syz.0.1228': attribute type 2 has an invalid length. [ 210.284653][T10087] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1228'. [ 210.335240][ C1] syz_tun: tun_net_xmit 118 [ 210.392851][ T773] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.606705][ T773] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.712839][ T773] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.868920][ T773] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.951854][T10097] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1232'. [ 210.989795][T10097] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 211.032085][T10103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 211.201382][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1234'. [ 211.374736][ C1] syz_tun: tun_net_xmit 118 [ 211.398477][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 211.456527][T10113] geneve2: entered promiscuous mode [ 211.642270][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.654250][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.663800][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.688681][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.699442][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.857371][ T5150] Bluetooth: hci0: command 0x0406 tx timeout [ 211.863546][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 211.869811][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 211.873726][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 212.044254][T10133] IPv6: Can't replace route, no match found [ 212.123922][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 212.424749][ C1] syz_tun: tun_net_xmit 118 [ 212.639829][ T773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.649542][ T773] bond_slave_0: left promiscuous mode [ 212.660585][ T773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.670032][ T773] bond_slave_1: left promiscuous mode [ 212.679448][ T773] bond0 (unregistering): (slave macvlan3): Releasing backup interface [ 212.690780][ T773] batadv0: left promiscuous mode [ 212.701757][ T773] bond0 (unregistering): Released all slaves [ 212.722950][ T773] bond1 (unregistering): Released all slaves [ 212.989218][T10118] syzkaller0 speed is unknown, defaulting to 1000 [ 213.146922][T10158] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1246'. [ 213.185067][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 213.464738][ C1] syz_tun: tun_net_xmit 118 [ 213.590166][T10169] validate_nla: 1 callbacks suppressed [ 213.590188][T10169] netlink: 'syz.4.1254': attribute type 6 has an invalid length. [ 213.782710][ T5831] Bluetooth: hci4: command tx timeout [ 213.821368][ T773] batman_adv: batadv0: Interface deactivated: wlan0 [ 213.932384][ T773] batman_adv: batadv0: Removing interface: wlan0 [ 213.975082][T10176] netlink: 'syz.3.1255': attribute type 4 has an invalid length. [ 213.979199][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 214.262176][ T773] hsr_slave_0: left promiscuous mode [ 214.271099][T10193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1259'. [ 214.288350][ T773] hsr_slave_1: left promiscuous mode [ 214.305447][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.333261][ T773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.360069][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.373459][ T773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.461016][ T773] veth1_macvtap: left promiscuous mode [ 214.478261][ T773] ‡: left promiscuous mode [ 214.486475][ T773] veth0_vlan: left promiscuous mode [ 214.494716][ C1] syz_tun: tun_net_xmit 118 [ 214.683777][ T773] pimreg3 (unregistering): left allmulticast mode [ 214.898835][ C1] syz_tun: tun_net_xmit 42 [ 215.306917][ T773] team0 (unregistering): Port device team_slave_1 removed [ 215.356777][ T773] team0 (unregistering): Port device team_slave_0 removed [ 215.537003][ C1] syz_tun: tun_net_xmit 118 [ 215.855186][ T5831] Bluetooth: hci4: command tx timeout [ 215.934708][ C1] syz_tun: tun_net_xmit 42 [ 215.971574][T10205] tc_dump_action: action bad kind [ 216.019664][T10118] chnl_net:caif_netlink_parms(): no params data found [ 216.167099][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1265'. [ 216.308744][T10213] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 216.332200][T10213] netlink: 'syz.4.1265': attribute type 2 has an invalid length. [ 216.575029][ C1] syz_tun: tun_net_xmit 118 [ 216.710790][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.746278][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.755257][T10118] bridge_slave_0: entered allmulticast mode [ 216.780900][T10118] bridge_slave_0: entered promiscuous mode [ 216.838057][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.861088][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.890668][T10118] bridge_slave_1: entered allmulticast mode [ 216.939556][T10118] bridge_slave_1: entered promiscuous mode [ 216.974722][ C1] syz_tun: tun_net_xmit 42 [ 217.076583][ T773] IPVS: stop unused estimator thread 0... [ 217.138841][T10256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 217.141306][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.235640][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.378426][T10265] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1279'. [ 217.419805][T10118] team0: Port device team_slave_0 added [ 217.465565][T10118] team0: Port device team_slave_1 added [ 217.614733][ C1] syz_tun: tun_net_xmit 118 [ 217.631720][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.654709][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.722990][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.759350][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.779141][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.832019][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.847477][T10253] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 217.935345][ T5831] Bluetooth: hci4: command tx timeout [ 218.148767][T10118] hsr_slave_0: entered promiscuous mode [ 218.183025][T10118] hsr_slave_1: entered promiscuous mode [ 218.219720][T10118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.251516][T10118] Cannot create hsr debugfs directory [ 218.457465][T10310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1290'. [ 218.489503][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1289'. [ 218.542574][T10316] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1291'. [ 218.654880][ C1] syz_tun: tun_net_xmit 118 [ 218.687253][T10323] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 218.783705][T10323] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 218.798754][T10323] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 219.020929][T10334] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 219.106452][T10335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1297'. [ 219.227037][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1296'. [ 219.694836][ C1] syz_tun: tun_net_xmit 118 [ 219.798798][T10118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.833292][T10118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.851240][T10362] netlink: 'syz.4.1307': attribute type 21 has an invalid length. [ 219.872823][T10358] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1305'. [ 219.886665][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 219.903182][T10118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.924041][T10118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.969781][T10365] netlink: 'syz.0.1305': attribute type 12 has an invalid length. [ 220.023886][ T5831] Bluetooth: hci4: command tx timeout [ 220.173060][ T8721] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.199774][ T2152] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.210195][ T8721] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 220.217944][T10376] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1312'. [ 220.248082][T10376] geneve1: entered promiscuous mode [ 220.287930][T10376] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 220.555834][T10118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.734852][ C1] syz_tun: tun_net_xmit 118 [ 220.780357][T10118] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.827736][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.835251][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.882378][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.889676][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.977721][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.049254][T10393] x_tables: duplicate underflow at hook 1 [ 221.059212][T10118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.075205][ T5881] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.225665][T10406] netlink: 'syz.0.1319': attribute type 5 has an invalid length. [ 221.233558][T10406] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1319'. [ 221.515400][T10422] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1324'. [ 221.666992][T10118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.775069][ C1] syz_tun: tun_net_xmit 162 [ 221.866784][T10437] tipc: Trying to set illegal importance in message [ 221.892715][T10118] veth0_vlan: entered promiscuous mode [ 221.913105][T10442] bridge0: entered allmulticast mode [ 221.923670][T10442] bridge_slave_1: left allmulticast mode [ 221.952900][T10442] bridge_slave_1: left promiscuous mode [ 221.959062][T10442] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.976472][T10442] bridge_slave_0: left allmulticast mode [ 221.992456][T10442] bridge_slave_0: left promiscuous mode [ 221.998688][T10442] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.063352][T10442] bridge0 (unregistering): left allmulticast mode [ 222.128372][T10450] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.147549][T10118] veth1_vlan: entered promiscuous mode [ 222.154946][T10450] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.189558][T10118] veth0_macvtap: entered promiscuous mode [ 222.219136][T10450] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.221498][T10118] veth1_macvtap: entered promiscuous mode [ 222.261433][T10450] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 222.323434][T10118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.351868][T10118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.383933][T10450] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.388962][T10118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.412854][T10118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.425871][T10118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.434859][T10118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.472564][T10450] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.522789][T10450] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.589303][T10450] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.610083][T10450] virt_wifi0 speed is unknown, defaulting to 1000 [ 222.729437][ T30] audit: type=1107 audit(1748532074.263:3): pid=10464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!V "¡õ%ö“¨' [ 222.756894][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.770450][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.815172][ C1] syz_tun: tun_net_xmit 162 [ 222.908078][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.920327][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.012201][T10471] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 223.797882][ T8721] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.855309][ C1] syz_tun: tun_net_xmit 162 [ 223.981421][ T8721] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.094826][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 224.178280][T10529] netlink: 'syz.0.1356': attribute type 2 has an invalid length. [ 224.179609][ T8721] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.202903][T10529] __nla_validate_parse: 3 callbacks suppressed [ 224.202923][T10529] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1356'. [ 224.249784][T10531] team0: Device ip6gretap1 is up. Set it down before adding it as a team port [ 224.389936][ T8721] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.461920][T10536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1360'. [ 224.703768][ T8721] bridge_slave_1: left allmulticast mode [ 224.724941][ T8721] bridge_slave_1: left promiscuous mode [ 224.746203][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.785836][ T8721] bridge_slave_0: left allmulticast mode [ 224.815109][ T8721] bridge_slave_0: left promiscuous mode [ 224.821946][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.895860][ C1] syz_tun: tun_net_xmit 162 [ 224.927759][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 224.938640][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 224.947574][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 224.957102][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 224.986278][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 225.337047][T10561] xt_TCPMSS: Only works on TCP SYN packets [ 225.499259][ T8721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.512138][ T8721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.524374][ T8721] bond0 (unregistering): Released all slaves [ 225.654256][T10550] syzkaller0 speed is unknown, defaulting to 1000 [ 225.686400][T10550] virt_wifi0 speed is unknown, defaulting to 1000 [ 225.944896][ C1] syz_tun: tun_net_xmit 162 [ 226.062613][ T8721] hsr_slave_0: left promiscuous mode [ 226.078321][ T8721] hsr_slave_1: left promiscuous mode [ 226.086930][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.096088][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.126624][ T8721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.134733][ T8721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.191608][ T8721] veth1_macvtap: left promiscuous mode [ 226.197942][ T8721] veth0_macvtap: left promiscuous mode [ 226.203855][ T8721] veth1_vlan: left promiscuous mode [ 226.210016][ T8721] veth0_vlan: left promiscuous mode [ 226.250863][T10601] IPVS: set_ctl: invalid protocol: 103 255.255.255.255:20004 [ 226.341212][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 226.885563][ T8721] team0 (unregistering): Port device team_slave_1 removed [ 226.929541][ T8721] team0 (unregistering): Port device team_slave_0 removed [ 226.974857][ C1] syz_tun: tun_net_xmit 162 [ 227.145895][ T5831] Bluetooth: hci4: command tx timeout [ 227.412868][T10605] tap0: tun_chr_ioctl cmd 2148553947 [ 227.607996][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1386'. [ 227.811158][T10636] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1388'. [ 227.823687][T10636] nbd: illegal input index 61504 [ 227.877336][T10550] chnl_net:caif_netlink_parms(): no params data found [ 228.014917][ C1] syz_tun: tun_net_xmit 162 [ 228.214507][T10550] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.223859][T10550] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.235454][T10550] bridge_slave_0: entered allmulticast mode [ 228.248072][T10550] bridge_slave_0: entered promiscuous mode [ 228.266941][T10550] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.275396][T10550] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.285887][T10550] bridge_slave_1: entered allmulticast mode [ 228.294011][T10550] bridge_slave_1: entered promiscuous mode [ 228.393284][T10550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.420424][T10550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.489317][T10660] Cannot find add_set index 4 as target [ 228.520130][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1396'. [ 228.551415][T10550] team0: Port device team_slave_0 added [ 228.565804][T10550] team0: Port device team_slave_1 added [ 228.653329][T10550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.678892][T10550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.743426][T10676] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 228.750293][T10550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.759578][T10672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1402'. [ 228.782014][T10677] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 228.807084][T10550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.814088][T10550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.899045][T10550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.944252][T10681] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1403'. [ 228.980472][T10683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.053764][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 229.063054][ C1] syz_tun: tun_net_xmit 162 [ 229.078629][T10690] netlink: 'syz.3.1407': attribute type 5 has an invalid length. [ 229.087185][T10550] hsr_slave_0: entered promiscuous mode [ 229.089190][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1407'. [ 229.094503][T10550] hsr_slave_1: entered promiscuous mode [ 229.132657][T10550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.150230][T10550] Cannot create hsr debugfs directory [ 229.165860][T10690] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 229.181322][T10690] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 229.190257][T10690] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 229.199412][T10690] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 229.208902][T10690] geneve2: entered promiscuous mode [ 229.214353][T10690] geneve2: entered allmulticast mode [ 229.229904][ T5831] Bluetooth: hci4: command tx timeout [ 229.588570][T10710] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.867560][T10721] netlink: 'syz.2.1419': attribute type 2 has an invalid length. [ 229.869775][T10724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1418'. [ 229.892552][T10724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 229.902985][T10721] netlink: 'syz.2.1419': attribute type 2 has an invalid length. [ 229.903106][T10724] netlink: 'syz.0.1418': attribute type 13 has an invalid length. [ 229.922566][T10725] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 229.931480][T10725] netlink: set zone limit has 8 unknown bytes [ 229.945923][T10727] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 230.102305][T10732] tipc: Started in network mode [ 230.105091][ C1] syz_tun: tun_net_xmit 162 [ 230.145531][T10732] tipc: Node identity c62d2a92919e, cluster identity 4711 [ 230.153423][T10732] tipc: Enabled bearer , priority 0 [ 230.183580][T10731] syzkaller0: entered promiscuous mode [ 230.196232][T10731] syzkaller0: entered allmulticast mode [ 230.352117][T10731] tipc: Resetting bearer [ 230.397810][T10731] tipc: Disabling bearer [ 230.427516][T10743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 230.464268][T10550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.526235][T10550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.572269][T10550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.637670][T10550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.648807][T10761] atomic_op ffff88807b97b198 conn xmit_atomic 0000000000000000 [ 230.657126][T10758] atomic_op ffff88807b97a198 conn xmit_atomic 0000000000000000 [ 230.852508][T10771] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1430'. [ 230.954117][T10752] syzkaller0 speed is unknown, defaulting to 1000 [ 230.993383][T10550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.039322][T10752] virt_wifi0 speed is unknown, defaulting to 1000 [ 231.124053][T10550] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.144920][ C1] syz_tun: tun_net_xmit 162 [ 231.203574][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.210825][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.294801][ T5831] Bluetooth: hci4: command tx timeout [ 231.342602][ T773] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.349947][ T773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.373161][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 231.393182][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1434'. [ 231.840903][T10550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.982122][T10820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1443'. [ 232.040480][T10820] netlink: 'syz.3.1443': attribute type 7 has an invalid length. [ 232.043514][T10823] netlink: 'syz.4.1444': attribute type 1 has an invalid length. [ 232.072842][T10820] netlink: 'syz.3.1443': attribute type 8 has an invalid length. [ 232.106110][T10820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1443'. [ 232.108247][ T5880] syz_tun: tun_net_xmit 90 [ 232.167213][T10820] gretap0: entered promiscuous mode [ 232.174914][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 232.183148][ C1] syz_tun: tun_net_xmit 162 [ 232.189792][ T5880] syz_tun: tun_net_xmit 130 [ 232.195827][T10820] gretap0: left promiscuous mode [ 232.255774][ T2152] syz_tun: tun_net_xmit 130 [ 232.305235][ T2152] syz_tun: tun_net_xmit 110 [ 232.528680][T10550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.726856][T10550] veth0_vlan: entered promiscuous mode [ 232.758195][T10550] veth1_vlan: entered promiscuous mode [ 232.888371][T10550] veth0_macvtap: entered promiscuous mode [ 232.928662][T10550] veth1_macvtap: entered promiscuous mode [ 232.950750][T10852] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 232.985613][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1451'. [ 233.020872][T10852] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1452'. [ 233.027771][T10550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.076912][T10550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.107777][T10859] mac80211_hwsim hwsim9 ÿ: renamed from wlan1 (while UP) [ 233.187667][T10550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.212807][T10550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.222033][ C1] syz_tun: tun_net_xmit 162 [ 233.254653][T10550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.276475][T10550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.319464][T10864] netlink: 'syz.4.1454': attribute type 2 has an invalid length. [ 233.378225][ T5831] Bluetooth: hci4: command tx timeout [ 233.391150][T10864] netlink: 'syz.4.1454': attribute type 2 has an invalid length. [ 233.585504][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.623990][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.731766][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.762602][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.254973][ C1] syz_tun: tun_net_xmit 162 [ 234.345840][T10890] tipc: Started in network mode [ 234.350993][T10890] tipc: Node identity 080211000001, cluster identity 4711 [ 234.358514][T10890] tipc: Enabled bearer , priority 0 [ 234.649931][ T773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.820705][ T773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.120512][T10911] __nla_validate_parse: 6 callbacks suppressed [ 235.120533][T10911] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1467'. [ 235.294869][ C1] syz_tun: tun_net_xmit 162 [ 235.309717][ T773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.355106][ T5836] tipc: Node number set to 134418688 [ 235.429019][T10918] syz_tun: tun_net_xmit 42 [ 235.530628][T10921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.544525][ T773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.619257][T10918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.733310][T10918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.837288][ T773] bridge_slave_1: left allmulticast mode [ 235.843057][ T773] bridge_slave_1: left promiscuous mode [ 235.867608][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.895300][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.920738][ T773] bridge_slave_0: left allmulticast mode [ 235.935633][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.944664][ T773] bridge_slave_0: left promiscuous mode [ 235.950496][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.960434][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.972807][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.981366][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 236.261970][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 236.335329][ C1] syz_tun: tun_net_xmit 162 [ 236.494834][ C0] syz_tun: tun_net_xmit 42 [ 236.702260][ T773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.715977][ T773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.728847][ T773] bond0 (unregistering): Released all slaves [ 236.845591][T10932] syzkaller0 speed is unknown, defaulting to 1000 [ 236.853866][T10932] virt_wifi0 speed is unknown, defaulting to 1000 [ 237.163193][T10961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 237.374978][ C1] syz_tun: tun_net_xmit 162 [ 237.475524][ T773] hsr_slave_0: left promiscuous mode [ 237.495608][ T773] hsr_slave_1: left promiscuous mode [ 237.501764][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.509491][ T773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.517733][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.525302][ T773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.535329][ C0] syz_tun: tun_net_xmit 42 [ 237.580113][ T773] veth1_macvtap: left promiscuous mode [ 237.594743][ T773] veth0_macvtap: left promiscuous mode [ 237.600496][ T773] veth1_vlan: left promiscuous mode [ 237.614781][ T773] veth0_vlan: left promiscuous mode [ 237.909761][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1484'. [ 237.972311][T10979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 238.016930][ T5842] Bluetooth: hci4: command tx timeout [ 238.418804][ C1] syz_tun: tun_net_xmit 162 [ 238.519397][ T773] team0 (unregistering): Port device team_slave_1 removed [ 238.568443][ T773] team0 (unregistering): Port device team_slave_0 removed [ 238.577364][T10983] siw: device registration error -23 [ 239.455144][ C1] syz_tun: tun_net_xmit 162 [ 239.511521][T10932] chnl_net:caif_netlink_parms(): no params data found [ 239.892593][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 239.908602][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1492'. [ 240.094998][ T5842] Bluetooth: hci4: command tx timeout [ 240.111060][T11014] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1493'. [ 240.165894][T11017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1493'. [ 240.166504][T10932] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.210488][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.244196][T10932] bridge_slave_0: entered allmulticast mode [ 240.280363][T10932] bridge_slave_0: entered promiscuous mode [ 240.321722][T10932] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.349758][T10932] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.370769][T10932] bridge_slave_1: entered allmulticast mode [ 240.407051][T10932] bridge_slave_1: entered promiscuous mode [ 240.496054][ C1] syz_tun: tun_net_xmit 162 [ 240.710285][T10932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.747990][T10932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.869243][T11043] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 240.946298][T11043] team0: Port device hsr_slave_0 added [ 241.031321][T10932] team0: Port device team_slave_0 added [ 241.103168][T10932] team0: Port device team_slave_1 added [ 241.442856][T11062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1506'. [ 241.467973][T11069] xt_nat: multiple ranges no longer supported [ 241.501388][T11063] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 241.545005][ C1] syz_tun: tun_net_xmit 162 [ 241.681148][T11062] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 241.689086][T10932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.704495][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.736401][T10932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.783254][T10932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.795981][T10932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.864798][T10932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.948723][T11079] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1508'. [ 241.998935][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1508'. [ 242.009547][T11081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1509'. [ 242.029640][T11081] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1509'. [ 242.074059][T10932] hsr_slave_0: entered promiscuous mode [ 242.081767][T10932] hsr_slave_1: entered promiscuous mode [ 242.093753][T10932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.113164][T10932] Cannot create hsr debugfs directory [ 242.121273][T11087] unknown channel width for channel at 909000KHz? [ 242.176483][ T5842] Bluetooth: hci4: command tx timeout [ 242.190627][T11089] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1508'. [ 242.549465][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1510'. [ 242.574912][ C1] syz_tun: tun_net_xmit 162 [ 242.595466][T11101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.629951][T11092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.733269][T11092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.856303][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1514'. [ 243.295274][T11119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1517'. [ 243.566480][T11133] x_tables: duplicate underflow at hook 2 [ 243.624856][ C1] syz_tun: tun_net_xmit 162 [ 243.764001][T11140] netlink: 'syz.3.1523': attribute type 10 has an invalid length. [ 243.827417][T10932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 243.866494][T10932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 243.931247][T10932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 243.978823][T10932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 244.254797][ T5842] Bluetooth: hci4: command tx timeout [ 244.534408][T10932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.589549][T10932] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.632270][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.639501][ T8716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.654866][ C1] syz_tun: tun_net_xmit 162 [ 244.701953][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.709239][ T6490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.767219][T11186] bridge4: entered allmulticast mode [ 245.079098][T11204] netlink: 'syz.4.1540': attribute type 2 has an invalid length. [ 245.296505][T11209] netlink: 'syz.2.1542': attribute type 10 has an invalid length. [ 245.330263][T11209] team0: Device hsr_slave_0 failed to register rx_handler [ 245.474102][T11217] netlink: 'syz.4.1545': attribute type 1 has an invalid length. [ 245.501732][T11217] __nla_validate_parse: 12 callbacks suppressed [ 245.501753][T11217] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1545'. [ 245.610201][T11220] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 245.670585][T10932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.695021][ C1] syz_tun: tun_net_xmit 162 [ 245.723048][T11224] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 245.953972][T10932] veth0_vlan: entered promiscuous mode [ 246.029497][T10932] veth1_vlan: entered promiscuous mode [ 246.270053][T10932] veth0_macvtap: entered promiscuous mode [ 246.342125][T10932] veth1_macvtap: entered promiscuous mode [ 246.436176][T10932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.468299][T11259] netlink: 'syz.4.1556': attribute type 2 has an invalid length. [ 246.478008][T11258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.501939][T11257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.521919][T10932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.589083][T10932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.620417][T10932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.646112][T10932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.664682][T10932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.735257][ C1] syz_tun: tun_net_xmit 162 [ 246.867614][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.884826][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.928390][ T6329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.944744][ T6329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.147702][T11276] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1560'. [ 247.340409][T11279] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 247.353916][T11279] netlink: 'syz.3.1561': attribute type 1 has an invalid length. [ 247.451159][ T773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.505676][T11286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1563'. [ 247.517270][T11286] netlink: 'syz.0.1563': attribute type 7 has an invalid length. [ 247.529267][T11286] netlink: 'syz.0.1563': attribute type 8 has an invalid length. [ 247.543275][T11286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1563'. [ 247.600768][ T773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.643679][T11286] gretap0: entered promiscuous mode [ 247.653221][T11286] gretap0: left promiscuous mode [ 247.703820][ T773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.784845][ C1] syz_tun: tun_net_xmit 162 [ 247.797822][ T773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.952942][ T773] bridge_slave_1: left allmulticast mode [ 247.958708][ T773] bridge_slave_1: left promiscuous mode [ 247.964429][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.975229][ T773] bridge_slave_0: left allmulticast mode [ 247.980917][ T773] bridge_slave_0: left promiscuous mode [ 247.987404][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.184761][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.348871][T11299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 248.384302][T11299] netlink: 'syz.0.1564': attribute type 2 has an invalid length. [ 248.431359][T11299] netlink: 'syz.0.1564': attribute type 1 has an invalid length. [ 248.464042][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 248.786463][ T773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.815002][ C1] syz_tun: tun_net_xmit 162 [ 248.823722][ T773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.846998][ T773] bond0 (unregistering): Released all slaves [ 248.962985][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 248.980803][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.008059][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.045029][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.053012][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 249.086268][T11321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1574'. [ 249.122893][T11321] netlink: 'syz.2.1574': attribute type 7 has an invalid length. [ 249.131043][T11321] netlink: 'syz.2.1574': attribute type 8 has an invalid length. [ 249.139620][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 249.156887][T11325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 249.198076][T11318] syzkaller0 speed is unknown, defaulting to 1000 [ 249.212052][T11321] gretap0: entered promiscuous mode [ 249.223486][T11321] gretap0: left promiscuous mode [ 249.252595][T11318] virt_wifi0 speed is unknown, defaulting to 1000 [ 249.279607][ T5881] syz_tun: tun_net_xmit 90 [ 249.297054][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1576'. [ 249.324973][ T5880] syz_tun: tun_net_xmit 130 [ 249.455687][ T10] syz_tun: tun_net_xmit 130 [ 249.542426][ T773] hsr_slave_0: left promiscuous mode [ 249.552352][ T773] hsr_slave_1: left promiscuous mode [ 249.565081][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.582734][ T773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.597437][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.615159][ T773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.683184][ T773] veth1_macvtap: left promiscuous mode [ 249.699283][ T773] veth0_macvtap: left promiscuous mode [ 249.713965][ T773] veth1_vlan: left promiscuous mode [ 249.732232][ T773] veth0_vlan: left promiscuous mode [ 249.864791][ C1] syz_tun: tun_net_xmit 162 [ 250.303005][ T773] team0 (unregistering): Port device team_slave_1 removed [ 250.349456][ T773] team0 (unregistering): Port device team_slave_0 removed [ 250.495117][ T10] syz_tun: tun_net_xmit 110 [ 250.894925][ C1] syz_tun: tun_net_xmit 162 [ 251.117671][T11378] vlan2: left promiscuous mode [ 251.122864][T11378] bond0: left promiscuous mode [ 251.128040][T11378] bond_slave_0: left promiscuous mode [ 251.133815][T11378] bond_slave_1: left promiscuous mode [ 251.137772][ T5842] Bluetooth: hci4: command tx timeout [ 251.140045][T11378] bridge0: port 3(vlan2) entered disabled state [ 251.163335][T11378] bridge_slave_1: left allmulticast mode [ 251.186439][T11378] bridge_slave_1: left promiscuous mode [ 251.206422][T11378] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.218417][T11378] bridge_slave_0: left allmulticast mode [ 251.224437][T11378] bridge_slave_0: left promiscuous mode [ 251.230849][T11378] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.269980][T11387] __nla_validate_parse: 3 callbacks suppressed [ 251.270003][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1595'. [ 251.348249][T11389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'. [ 251.360169][T11390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'. [ 251.456984][T11390] netlink: 'syz.2.1596': attribute type 21 has an invalid length. [ 251.482489][T11389] netlink: 'syz.2.1596': attribute type 21 has an invalid length. [ 251.534941][T11318] chnl_net:caif_netlink_parms(): no params data found [ 251.672763][T11401] netlink: 'syz.4.1598': attribute type 4 has an invalid length. [ 251.851727][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.882712][T11318] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.908526][T11318] bridge_slave_0: entered allmulticast mode [ 251.921211][T11318] bridge_slave_0: entered promiscuous mode [ 251.934920][ C1] syz_tun: tun_net_xmit 162 [ 251.948008][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.959979][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 251.961610][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.977370][T11318] bridge_slave_1: entered allmulticast mode [ 251.985708][T11318] bridge_slave_1: entered promiscuous mode [ 251.989696][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1602'. [ 252.118785][T11318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.146178][T11318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.240134][T11431] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1607'. [ 252.258253][T11318] team0: Port device team_slave_0 added [ 252.278983][T11318] team0: Port device team_slave_1 added [ 252.367813][T11438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1609'. [ 252.380237][T11318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.394635][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.426705][T11318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.454089][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 252.477031][T11438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1609'. [ 252.489195][T11318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.496644][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.550076][T11318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.735952][T11318] hsr_slave_0: entered promiscuous mode [ 252.752385][T11318] hsr_slave_1: entered promiscuous mode [ 252.759287][T11453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1612'. [ 252.768012][T11318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.793124][T11318] Cannot create hsr debugfs directory [ 252.903935][T11457] block nbd3: not configured, cannot reconfigure [ 252.975127][ C1] syz_tun: tun_net_xmit 162 [ 253.215091][ T5842] Bluetooth: hci4: command tx timeout [ 253.253319][T11480] netlink: 'syz.4.1620': attribute type 18 has an invalid length. [ 253.351082][T11487] netlink: 'syz.0.1622': attribute type 7 has an invalid length. [ 253.359349][T11487] netlink: 'syz.0.1622': attribute type 8 has an invalid length. [ 253.430262][T11488] xt_CT: No such helper "snmp" [ 253.485546][T11489] xt_CT: No such helper "snmp" [ 253.509217][T11487] gretap0: entered promiscuous mode [ 253.550085][T11487] gretap0: left promiscuous mode [ 253.643179][T11499] bridge0: entered promiscuous mode [ 253.858317][T11511] C: entered allmulticast mode [ 253.869268][T11511] C: left allmulticast mode [ 253.909074][T11511] 8021q: VLANs not supported on ip6gre0 [ 253.928302][T11510] netlink: 'syz.2.1628': attribute type 10 has an invalid length. [ 253.967075][T11510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.989325][T11510] batadv0: entered promiscuous mode [ 254.011059][T11510] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 254.025863][ C1] syz_tun: tun_net_xmit 162 [ 254.055078][T11510] netlink: 'syz.2.1628': attribute type 7 has an invalid length. [ 254.062872][T11510] netlink: 'syz.2.1628': attribute type 8 has an invalid length. [ 254.152311][T11318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 254.166452][T11318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 254.214659][T11318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 254.238495][T11318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.257021][T11534] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 254.302793][T11537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 254.450315][T11318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.512469][T11543] veth1_macvtap: left promiscuous mode [ 254.603155][T11542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.622748][T11550] netlink: 'syz.4.1638': attribute type 2 has an invalid length. [ 254.633862][T11542] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 254.669430][T11318] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.710256][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.717576][ T4501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.782951][T11542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.820720][T11542] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 254.854841][T11556] xt_l2tp: v2 doesn't support IP mode [ 254.868268][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.875467][ T6490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.966413][T11542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.976985][T11542] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 255.054886][ C1] syz_tun: tun_net_xmit 162 [ 255.119743][T11542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.130697][T11542] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 255.295105][ T5842] Bluetooth: hci4: command tx timeout [ 255.413312][T11542] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 255.444781][T11542] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 255.490182][T11542] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 255.515072][T11542] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 255.598587][ T5917] IPVS: starting estimator thread 0... [ 255.671039][T11542] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 255.687911][T11585] IPVS: using max 24 ests per chain, 57600 per kthread [ 255.694729][T11542] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 255.730621][T11542] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 255.743030][T11542] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 255.806938][T11318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.865635][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872017][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.937750][T11318] veth0_vlan: entered promiscuous mode [ 255.988240][T11318] veth1_vlan: entered promiscuous mode [ 256.094861][ C1] syz_tun: tun_net_xmit 162 [ 256.340312][T11318] veth0_macvtap: entered promiscuous mode [ 256.399075][T11318] veth1_macvtap: entered promiscuous mode [ 256.529964][T11318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.561881][T11613] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 256.601121][T11318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.615539][T11613] netlink: 'syz.4.1657': attribute type 1 has an invalid length. [ 256.629762][T11613] netlink: 'syz.4.1657': attribute type 3 has an invalid length. [ 256.644915][T11613] __nla_validate_parse: 12 callbacks suppressed [ 256.644936][T11613] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1657'. [ 256.650133][T11318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.706352][T11318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.727443][T11318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.746222][T11318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.843282][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1659'. [ 256.949217][ T6490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.968326][ T6490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.047025][ T4501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.067089][ T4501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.145353][ C1] syz_tun: tun_net_xmit 162 [ 257.668095][T11661] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 258.171951][ T6490] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.182655][ C1] syz_tun: tun_net_xmit 162 [ 258.581818][ T6490] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.642560][ T6490] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.719893][ T6490] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.830956][ T6490] bridge_slave_1: left allmulticast mode [ 258.836728][ T6490] bridge_slave_1: left promiscuous mode [ 258.842641][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.852173][ T6490] bridge_slave_0: left allmulticast mode [ 258.858135][ T6490] bridge_slave_0: left promiscuous mode [ 258.863889][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.996637][T11697] netlink: 'syz.0.1678': attribute type 7 has an invalid length. [ 259.216523][ C1] syz_tun: tun_net_xmit 162 [ 259.483321][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.492429][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.501598][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.511610][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.540015][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.633653][ T6490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.646427][ T6490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.656838][ T6490] bond0 (unregistering): Released all slaves [ 259.688319][T11712] tun0: tun_chr_ioctl cmd 1074025675 [ 259.697560][T11712] tun0: persist disabled [ 259.900519][T11718] syzkaller0 speed is unknown, defaulting to 1000 [ 259.987061][T11718] virt_wifi0 speed is unknown, defaulting to 1000 [ 259.996157][T11731] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1687'. [ 260.130542][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1689'. [ 260.259081][ C1] syz_tun: tun_net_xmit 162 [ 260.380026][ T6490] hsr_slave_0: left promiscuous mode [ 260.391921][ T6490] hsr_slave_1: left promiscuous mode [ 260.402789][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.411097][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.423481][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.442566][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.472579][T11752] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1691'. [ 260.477722][ T6490] veth1_macvtap: left promiscuous mode [ 260.487962][ T6490] veth0_macvtap: left promiscuous mode [ 260.493660][ T6490] veth1_vlan: left promiscuous mode [ 260.499383][ T6490] veth0_vlan: left promiscuous mode [ 260.515759][T11753] IPv6: Can't replace route, no match found [ 260.985921][ T6490] team0 (unregistering): Port device team_slave_1 removed [ 261.024350][ T6490] team0 (unregistering): Port device team_slave_0 removed [ 261.295147][ C1] syz_tun: tun_net_xmit 162 [ 261.455111][T11750] tc_dump_action: action bad kind [ 261.614903][ T5842] Bluetooth: hci4: command tx timeout [ 261.642903][T11757] syz.4.1695 uses old SIOCAX25GETINFO [ 261.695545][T11718] chnl_net:caif_netlink_parms(): no params data found [ 262.001204][T11775] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 262.038174][T11775] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1700'. [ 262.211057][T11798] delete_channel: no stack [ 262.243733][T11718] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.263487][T11718] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.272079][T11718] bridge_slave_0: entered allmulticast mode [ 262.297102][T11718] bridge_slave_0: entered promiscuous mode [ 262.322961][T11718] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.330728][T11718] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.339448][T11718] bridge_slave_1: entered allmulticast mode [ 262.344842][ C1] syz_tun: tun_net_xmit 162 [ 262.347777][T11718] bridge_slave_1: entered promiscuous mode [ 262.480260][T11718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.529095][T11718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.670543][T11718] team0: Port device team_slave_0 added [ 262.768590][T11718] team0: Port device team_slave_1 added [ 262.920515][T11718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.945075][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.003955][T11718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.030068][T11718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.052358][T11718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.118659][T11718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.311519][T11856] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1720'. [ 263.329509][T11718] hsr_slave_0: entered promiscuous mode [ 263.338011][T11860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1723'. [ 263.344619][T11718] hsr_slave_1: entered promiscuous mode [ 263.354345][T11718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.368966][T11718] Cannot create hsr debugfs directory [ 263.374745][ C1] syz_tun: tun_net_xmit 162 [ 263.694867][ T5842] Bluetooth: hci4: command tx timeout [ 264.176089][T11895] delete_channel: no stack [ 264.362561][T11904] x_tables: duplicate underflow at hook 1 [ 264.414821][ C1] syz_tun: tun_net_xmit 162 [ 264.732030][T11718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 264.748933][T11718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 264.769219][T11718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.777932][T11922] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1741'. [ 264.792449][T11718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.793204][T11922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1741'. [ 265.001708][T11930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1746'. [ 265.012563][T11931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1744'. [ 265.019547][T11718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.043252][T11931] netlink: 'syz.4.1744': attribute type 7 has an invalid length. [ 265.070243][T11931] netlink: 'syz.4.1744': attribute type 8 has an invalid length. [ 265.096588][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1744'. [ 265.158198][T11931] gretap0: entered promiscuous mode [ 265.175669][T11931] gretap0: left promiscuous mode [ 265.240796][T11718] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.257824][T11939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1747'. [ 265.267284][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.267453][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.300412][ T6329] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.307821][ T6329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.411237][T11939] netlink: 'syz.2.1747': attribute type 15 has an invalid length. [ 265.461341][T11939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1747'. [ 265.465198][ C1] syz_tun: tun_net_xmit 162 [ 265.775281][ T5842] Bluetooth: hci4: command tx timeout [ 265.880024][T11971] netlink: 'syz.0.1757': attribute type 1 has an invalid length. [ 265.903626][T11971] netlink: 'syz.0.1757': attribute type 3 has an invalid length. [ 266.137176][T11718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.285338][T11718] veth0_vlan: entered promiscuous mode [ 266.298790][T11988] openvswitch: netlink: Flow key attr not present in new flow. [ 266.337326][T11718] veth1_vlan: entered promiscuous mode [ 266.471155][T11718] veth0_macvtap: entered promiscuous mode [ 266.489477][T11718] veth1_macvtap: entered promiscuous mode [ 266.495749][ C1] syz_tun: tun_net_xmit 162 [ 266.622803][T11718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.672371][T11718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.741625][T11718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.753541][T11718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.762579][T11718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.781004][T11718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.876896][T12012] openvswitch: netlink: IP tunnel dst address not specified [ 266.886756][T12012] ipt_ECN: cannot use operation on non-tcp rule [ 266.943414][T12017] xt_hashlimit: overflow, rate too high: 0 [ 267.080757][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.102879][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.171896][T12022] __nla_validate_parse: 9 callbacks suppressed [ 267.171916][T12022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1774'. [ 267.180093][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.244331][T12031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1776'. [ 267.251739][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.266020][T12031] netlink: 'syz.3.1776': attribute type 5 has an invalid length. [ 267.312940][T12031] netlink: 'syz.3.1776': attribute type 7 has an invalid length. [ 267.357232][T12031] netlink: 'syz.3.1776': attribute type 8 has an invalid length. [ 267.371071][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1776'. [ 267.458541][T12035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1777'. [ 267.534842][ C1] syz_tun: tun_net_xmit 162 [ 268.207400][T12081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1789'. [ 268.226508][T12081] netlink: 'syz.3.1789': attribute type 7 has an invalid length. [ 268.260852][T12081] netlink: 'syz.3.1789': attribute type 7 has an invalid length. [ 268.289381][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 268.313611][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.560277][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.584882][ C1] syz_tun: tun_net_xmit 162 [ 268.792417][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.862234][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.970957][ T49] bridge_slave_1: left allmulticast mode [ 268.976840][ T49] bridge_slave_1: left promiscuous mode [ 268.982574][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.992658][ T49] bridge_slave_0: left allmulticast mode [ 268.998653][ T49] bridge_slave_0: left promiscuous mode [ 269.004429][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.182788][T12096] SET target dimension over the limit! [ 269.262755][T12108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1794'. [ 269.615395][ C1] syz_tun: tun_net_xmit 162 [ 269.711796][T12121] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1799'. [ 269.759432][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.770322][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.770333][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.788877][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.799376][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.800539][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.818653][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.823082][ T49] bond0 (unregistering): Released all slaves [ 269.973600][T12126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1799'. [ 270.046958][T12131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 270.185225][T12137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1804'. [ 270.193324][T12122] syzkaller0 speed is unknown, defaulting to 1000 [ 270.207645][T12122] virt_wifi0 speed is unknown, defaulting to 1000 [ 270.217501][T12136] tipc: Enabling of bearer rejected, already enabled [ 270.238833][ T49] hsr_slave_0: left promiscuous mode [ 270.248879][ T49] hsr_slave_1: left promiscuous mode [ 270.255972][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.263689][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.273256][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.281405][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.304059][ T49] veth1_macvtap: left promiscuous mode [ 270.309844][ T49] veth0_macvtap: left promiscuous mode [ 270.315748][ T49] veth1_vlan: left promiscuous mode [ 270.321064][ T49] veth0_vlan: left promiscuous mode [ 270.655970][ C1] syz_tun: tun_net_xmit 162 [ 270.679052][T12142] validate_nla: 3 callbacks suppressed [ 270.679073][T12142] netlink: 'syz.0.1805': attribute type 7 has an invalid length. [ 270.693587][T12142] netlink: 'syz.0.1805': attribute type 8 has an invalid length. [ 270.902442][ T49] team0 (unregistering): Port device team_slave_1 removed [ 270.950982][ T49] team0 (unregistering): Port device team_slave_0 removed [ 271.694750][ C1] syz_tun: tun_net_xmit 162 [ 271.854855][ T5842] Bluetooth: hci4: command tx timeout [ 272.038272][T12122] chnl_net:caif_netlink_parms(): no params data found [ 272.125908][T12174] netlink: 'syz.4.1814': attribute type 3 has an invalid length. [ 272.328665][T12186] __nla_validate_parse: 3 callbacks suppressed [ 272.328687][T12186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1817'. [ 272.361565][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 272.373268][T12186] netlink: 'syz.0.1817': attribute type 14 has an invalid length. [ 272.383217][T12186] netlink: 'syz.0.1817': attribute type 13 has an invalid length. [ 272.436647][T12122] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.444459][T12192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1818'. [ 272.478492][T12122] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.491533][T12122] bridge_slave_0: entered allmulticast mode [ 272.498702][T12192] netlink: 'syz.2.1818': attribute type 7 has an invalid length. [ 272.524624][T12192] netlink: 'syz.2.1818': attribute type 8 has an invalid length. [ 272.529174][T12122] bridge_slave_0: entered promiscuous mode [ 272.538721][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1818'. [ 272.549742][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 272.610676][T12122] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.631394][T12122] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.658539][T12122] bridge_slave_1: entered allmulticast mode [ 272.673644][T12122] bridge_slave_1: entered promiscuous mode [ 272.734765][ C1] syz_tun: tun_net_xmit 162 [ 272.799275][T12122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.829349][T12122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.038079][T12122] team0: Port device team_slave_0 added [ 273.096228][T12122] team0: Port device team_slave_1 added [ 273.151856][T12221] syz_tun: tun_net_xmit 42 [ 273.227526][T12218] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1823'. [ 273.316721][T12122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.339602][T12122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.403353][T12122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.430825][T12122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.456089][T12122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.503619][T12122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.758983][T12122] hsr_slave_0: entered promiscuous mode [ 273.772713][T12122] hsr_slave_1: entered promiscuous mode [ 273.778638][ C1] syz_tun: tun_net_xmit 162 [ 273.791199][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 273.804152][T12122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.814408][T12122] Cannot create hsr debugfs directory [ 273.859305][T12242] netlink: 'syz.2.1829': attribute type 19 has an invalid length. [ 273.943094][ T5831] Bluetooth: hci4: command tx timeout [ 274.040649][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1828'. [ 274.145787][T12255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1832'. [ 274.155557][T12255] netlink: 'syz.3.1832': attribute type 7 has an invalid length. [ 274.164038][T12255] netlink: 'syz.3.1832': attribute type 8 has an invalid length. [ 274.174684][ C1] syz_tun: tun_net_xmit 42 [ 274.177120][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 274.537541][T12273] bond3: (slave gretap2): making interface the new active one [ 274.546794][T12273] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 274.703366][T12278] can: request_module (can-proto-0) failed. [ 274.802482][T12287] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.818204][ C1] syz_tun: tun_net_xmit 162 [ 274.865791][T12297] 8021q: adding VLAN 0 to HW filter on device bond7 [ 274.879069][T12297] bond7: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 274.906542][T12297] bond7: (slave ip6tnl1): Error -95 calling set_mac_address [ 274.960450][T12287] veth5: entered promiscuous mode [ 274.973951][T12287] bond7: (slave veth5): Enslaving as an active interface with a down link [ 274.999602][T12307] erspan0: entered allmulticast mode [ 275.059407][T12307] bond7: (slave erspan0): making interface the new active one [ 275.082914][T12307] erspan0: entered promiscuous mode [ 275.093660][T12307] bond7: (slave erspan0): Enslaving as an active interface with an up link [ 275.208404][T12313] net veth1_virt_wifi : renamed from virt_wifi0 [ 275.215373][ C1] syz_tun: tun_net_xmit 42 [ 275.285411][T12122] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 275.298031][T12122] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 275.326880][T12122] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 275.348927][T12122] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 275.564237][T12122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.622457][T12122] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.660018][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.667259][ T8716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.694343][T12336] raw_sendmsg: syz.3.1857 forgot to set AF_INET. Fix it! [ 275.715151][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.722358][ T6490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.770134][T12339] validate_nla: 5 callbacks suppressed [ 275.770153][T12339] netlink: 'syz.4.1858': attribute type 7 has an invalid length. [ 275.791646][T12339] netlink: 'syz.4.1858': attribute type 8 has an invalid length. [ 275.854745][ C1] syz_tun: tun_net_xmit 162 [ 276.021138][ T5831] Bluetooth: hci4: command tx timeout [ 276.273872][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888032f31400: rx timeout, send abort [ 276.282983][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888032f31400: 0x3ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 276.357070][T12122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.438258][T12122] veth0_vlan: entered promiscuous mode [ 276.473148][T12122] veth1_vlan: entered promiscuous mode [ 276.499727][T12365] x_tables: unsorted entry at hook 1 [ 276.607729][T12122] veth0_macvtap: entered promiscuous mode [ 276.643735][T12122] veth1_macvtap: entered promiscuous mode [ 276.740064][T12122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.793802][T12382] netlink: 'syz.4.1870': attribute type 7 has an invalid length. [ 276.795425][T12122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.829406][T12382] netlink: 'syz.4.1870': attribute type 8 has an invalid length. [ 276.849611][T12122] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.868758][T12122] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.879556][T12122] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.889059][T12122] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.898602][ C1] syz_tun: tun_net_xmit 162 [ 276.903760][T12386] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20004 [ 276.937569][T12386] netlink: 'syz.0.1871': attribute type 1 has an invalid length. [ 277.139896][ T6490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.162599][ T6490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.253226][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.277166][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.344825][T12400] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 277.441350][T12400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 277.580680][T12404] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 277.600501][T12413] __nla_validate_parse: 15 callbacks suppressed [ 277.600524][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1880'. [ 277.630579][T12404] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 277.640844][T12404] gretap1: entered promiscuous mode [ 277.640981][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'. [ 277.647045][T12404] gretap1: entered allmulticast mode [ 277.672452][T12413] netlink: 'syz.0.1880': attribute type 20 has an invalid length. [ 277.812605][T12420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1881'. [ 277.869649][T12420] netlink: 'syz.4.1881': attribute type 5 has an invalid length. [ 277.926925][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1884'. [ 277.936309][ C1] syz_tun: tun_net_xmit 162 [ 277.952190][T12427] netlink: 'syz.0.1884': attribute type 7 has an invalid length. [ 277.963145][T12427] netlink: 'syz.0.1884': attribute type 8 has an invalid length. [ 277.978061][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1884'. [ 278.009682][T12427] gretap0: entered promiscuous mode [ 278.082790][T12427] gretap0: left promiscuous mode [ 278.254742][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 278.369895][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.692227][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.862163][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.974720][ C1] syz_tun: tun_net_xmit 162 [ 279.278155][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.321405][T12454] tipc: Enabling of bearer rejected, failed to enable media [ 279.460777][T12462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1890'. [ 279.569320][T12468] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1894'. [ 279.744943][ T59] bridge_slave_1: left allmulticast mode [ 279.764654][ T59] bridge_slave_1: left promiscuous mode [ 279.785380][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.899636][ T59] bridge_slave_0: left allmulticast mode [ 279.930402][ T59] bridge_slave_0: left promiscuous mode [ 279.950300][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.015002][T12487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1898'. [ 280.025656][ C1] syz_tun: tun_net_xmit 162 [ 280.039675][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 280.061993][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 280.072567][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.082014][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.091664][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.101329][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.211408][T12494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1900'. [ 280.466090][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.481170][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.491828][ T59] bond0 (unregistering): Released all slaves [ 280.513399][T12487] gretap0: entered promiscuous mode [ 280.522431][T12487] gretap0: left promiscuous mode [ 280.555069][T12494] xfrm1: entered promiscuous mode [ 280.560703][T12494] xfrm1: entered allmulticast mode [ 280.844228][T12488] syzkaller0 speed is unknown, defaulting to 1000 [ 281.010262][T12517] Cannot find set identified by id 0 to match [ 281.021578][T12517] validate_nla: 4 callbacks suppressed [ 281.021597][T12517] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 281.054833][ C1] syz_tun: tun_net_xmit 162 [ 281.158168][T12488] virt_wifi0 speed is unknown, defaulting to 1000 [ 281.277345][ T59] hsr_slave_0: left promiscuous mode [ 281.293929][ T59] hsr_slave_1: left promiscuous mode [ 281.301444][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.316703][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.331214][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.339143][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.373407][ T59] veth1_macvtap: left promiscuous mode [ 281.381815][ T59] veth0_macvtap: left promiscuous mode [ 281.387968][ T59] veth1_vlan: left promiscuous mode [ 281.393477][ T59] veth0_vlan: left promiscuous mode [ 281.870196][ T59] team0 (unregistering): Port device team_slave_1 removed [ 281.911054][ T59] team0 (unregistering): Port device team_slave_0 removed [ 282.094959][ C1] syz_tun: tun_net_xmit 162 [ 282.180808][ T5842] Bluetooth: hci4: command tx timeout [ 282.348121][T12533] netlink: 'syz.2.1912': attribute type 30 has an invalid length. [ 282.430253][T12533] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.439326][T12533] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.448282][T12533] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.456894][T12533] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 282.496997][T12533] netlink: 'syz.2.1912': attribute type 30 has an invalid length. [ 282.595015][T12545] tipc: Enabled bearer , priority 12 [ 282.623081][T12548] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 282.760900][T12554] __nla_validate_parse: 5 callbacks suppressed [ 282.760922][T12554] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1917'. [ 283.112764][T12488] chnl_net:caif_netlink_parms(): no params data found [ 283.135579][ C1] syz_tun: tun_net_xmit 162 [ 283.348368][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.360090][T12488] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.367473][T12488] bridge_slave_0: entered allmulticast mode [ 283.383493][T12488] bridge_slave_0: entered promiscuous mode [ 283.392548][T12488] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.400239][T12488] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.408388][T12488] bridge_slave_1: entered allmulticast mode [ 283.416459][T12488] bridge_slave_1: entered promiscuous mode [ 283.464081][T12488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.479836][T12584] netlink: 'syz.4.1927': attribute type 2 has an invalid length. [ 283.487795][T12488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.558445][T12488] team0: Port device team_slave_0 added [ 283.580370][T12488] team0: Port device team_slave_1 added [ 283.673639][T12488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.685631][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.723666][T12488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.738668][T12488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.745806][T12488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.798725][T12488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.829459][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1930'. [ 283.852387][T12591] netlink: 'syz.3.1930': attribute type 7 has an invalid length. [ 283.879246][T12591] netlink: 'syz.3.1930': attribute type 8 has an invalid length. [ 283.888492][T12591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1930'. [ 283.907884][T12488] hsr_slave_0: entered promiscuous mode [ 283.915238][T12488] hsr_slave_1: entered promiscuous mode [ 283.921966][T12488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.931184][T12488] Cannot create hsr debugfs directory [ 284.120250][T12600] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1933'. [ 284.174727][ C1] syz_tun: tun_net_xmit 162 [ 284.261986][ T5842] Bluetooth: hci4: command tx timeout [ 284.264932][T12607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1935'. [ 284.626588][T12631] IPVS: set_ctl: invalid protocol: 99 100.1.1.1:20004 [ 284.643345][T12630] IPVS: set_ctl: invalid protocol: 99 100.1.1.1:20004 [ 284.657021][T12628] syzkaller1: entered promiscuous mode [ 284.662655][T12628] syzkaller1: entered allmulticast mode [ 284.793966][T12634] team_slave_0: entered promiscuous mode [ 284.799997][T12634] team_slave_1: entered promiscuous mode [ 284.856642][T12634] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 284.886936][T12634] team0: Device macvtap0 is already an upper device of the team interface [ 284.914656][T12634] team_slave_0: left promiscuous mode [ 284.920173][T12634] team_slave_1: left promiscuous mode [ 284.956413][T12646] netlink: 'syz.2.1945': attribute type 10 has an invalid length. [ 284.970011][T12646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1945'. [ 284.975093][T12647] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 284.979489][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1945'. [ 285.001084][T12646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 285.018142][T12650] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1944'. [ 285.028158][T12650] netlink: 'syz.4.1944': attribute type 7 has an invalid length. [ 285.041753][T12650] netlink: 'syz.4.1944': attribute type 8 has an invalid length. [ 285.049596][T12650] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1944'. [ 285.128655][T12653] x_tables: duplicate entry at hook 3 [ 285.214873][ C1] syz_tun: tun_net_xmit 162 [ 285.391906][T12488] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.438718][T12488] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.464130][T12488] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.492018][T12488] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.515671][T12670] netlink: 'syz.4.1950': attribute type 1 has an invalid length. [ 285.560610][T12670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.823791][T12488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.903435][T12488] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.974309][T12694] gretap0: entered promiscuous mode [ 285.991721][T12694] gretap0: left promiscuous mode [ 286.019953][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.027200][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.125461][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.132683][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.264740][ C1] syz_tun: tun_net_xmit 162 [ 286.344636][ T5842] Bluetooth: hci4: command tx timeout [ 286.928523][T12488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.112086][T12488] veth0_vlan: entered promiscuous mode [ 287.138872][T12740] validate_nla: 2 callbacks suppressed [ 287.138893][T12740] netlink: 'syz.0.1971': attribute type 7 has an invalid length. [ 287.153701][T12488] veth1_vlan: entered promiscuous mode [ 287.170079][T12740] netlink: 'syz.0.1971': attribute type 8 has an invalid length. [ 287.193835][ T773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.209607][ T773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.246810][T12740] gretap0: entered promiscuous mode [ 287.270631][T12740] gretap0: left promiscuous mode [ 287.304820][ C1] syz_tun: tun_net_xmit 162 [ 287.348041][T12488] veth0_macvtap: entered promiscuous mode [ 287.382422][T12488] veth1_macvtap: entered promiscuous mode [ 287.452762][T12488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.497673][T12488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.540167][T12488] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.547650][T12753] syz_tun: tun_net_xmit 42 [ 287.586862][T12488] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.613556][T12488] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.633265][T12488] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.808319][T12760] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 287.835681][T12760] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 287.927476][ T6329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.950517][ T6329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.036439][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.062028][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.207312][T12779] xt_bpf: check failed: parse error [ 288.207999][T12780] __nla_validate_parse: 6 callbacks suppressed [ 288.208018][T12780] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1983'. [ 288.235623][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1983'. [ 288.340174][ C1] syz_tun: tun_net_xmit 162 [ 288.417231][T12789] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 288.584719][ C1] syz_tun: tun_net_xmit 42 [ 288.781783][T12804] geneve3: entered promiscuous mode [ 288.787334][T12804] geneve3: entered allmulticast mode [ 288.858483][T12807] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.868994][T12807] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.905762][T12808] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 288.988578][T12807] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.034680][T12807] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.147719][T12807] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.176174][T12807] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.243160][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.272285][T12807] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.282775][T12807] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.368768][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.379355][ C1] syz_tun: tun_net_xmit 162 [ 289.427918][T12807] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.436559][T12807] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.467289][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.489112][T12807] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.497767][T12807] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.517928][T12807] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.527755][T12807] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.544751][T12807] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.552975][T12807] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.614769][ C1] syz_tun: tun_net_xmit 42 [ 289.795311][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.893836][ T59] bridge_slave_1: left allmulticast mode [ 289.900050][ T59] bridge_slave_1: left promiscuous mode [ 289.906547][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.916574][ T59] bridge_slave_0: left allmulticast mode [ 289.922247][ T59] bridge_slave_0: left promiscuous mode [ 289.929120][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.412810][T12835] netlink: 58 bytes leftover after parsing attributes in process `syz.3.2000'. [ 290.424796][ C1] syz_tun: tun_net_xmit 162 [ 290.437887][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.455458][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.467592][ T59] bond0 (unregistering): Released all slaves [ 290.811530][T12856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2007'. [ 290.844499][T12856] netlink: 'syz.3.2007': attribute type 7 has an invalid length. [ 290.884124][T12856] netlink: 'syz.3.2007': attribute type 8 has an invalid length. [ 290.908531][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2007'. [ 290.952457][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 290.960859][T12860] netlink: 'syz.2.2008': attribute type 23 has an invalid length. [ 290.965352][T12856] gretap0: entered promiscuous mode [ 290.976664][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 290.985900][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 290.993625][T12856] gretap0: left promiscuous mode [ 291.000227][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.017764][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.206852][T12861] syzkaller0 speed is unknown, defaulting to 1000 [ 291.226012][T12861] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.264585][ T59] hsr_slave_0: left promiscuous mode [ 291.276319][ T59] hsr_slave_1: left promiscuous mode [ 291.282507][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.316243][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.328056][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.336790][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.388433][ T59] veth1_macvtap: left promiscuous mode [ 291.390609][T12870] netlink: 'syz.3.2011': attribute type 2 has an invalid length. [ 291.394028][ T59] veth0_macvtap: left promiscuous mode [ 291.441291][ T59] veth1_vlan: left promiscuous mode [ 291.454697][ C1] syz_tun: tun_net_xmit 162 [ 291.460940][ T59] veth0_vlan: left promiscuous mode [ 291.799526][T12886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2013'. [ 292.089962][ T59] team0 (unregistering): Port device team_slave_1 removed [ 292.130083][ T59] team0 (unregistering): Port device team_slave_0 removed [ 292.498427][ C1] syz_tun: tun_net_xmit 162 [ 293.055317][ T5842] Bluetooth: hci4: command tx timeout [ 293.142870][T12861] chnl_net:caif_netlink_parms(): no params data found [ 293.301579][T12907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2020'. [ 293.348477][T12907] netlink: 'syz.4.2020': attribute type 7 has an invalid length. [ 293.372772][T12907] netlink: 'syz.4.2020': attribute type 8 has an invalid length. [ 293.403825][T12907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2020'. [ 293.406735][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2022'. [ 293.449138][T12907] gretap0: entered promiscuous mode [ 293.458470][T12907] gretap0: left promiscuous mode [ 293.489185][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.502666][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.528032][T12861] bridge_slave_0: entered allmulticast mode [ 293.544855][ C1] syz_tun: tun_net_xmit 162 [ 293.552492][T12861] bridge_slave_0: entered promiscuous mode [ 293.579989][T12861] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.624834][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.632141][T12861] bridge_slave_1: entered allmulticast mode [ 293.651708][T12861] bridge_slave_1: entered promiscuous mode [ 293.747196][T12931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2026'. [ 293.828740][T12861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.859031][T12861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.048334][T12861] team0: Port device team_slave_0 added [ 294.073294][T12861] team0: Port device team_slave_1 added [ 294.101345][ T43] IPVS: starting estimator thread 0... [ 294.208334][T12961] xt_l2tp: v2 tid > 0xffff: 150994944 [ 294.225668][T12954] IPVS: using max 26 ests per chain, 62400 per kthread [ 294.236105][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2033'. [ 294.263376][T12949] netlink: 304 bytes leftover after parsing attributes in process `syz.4.2033'. [ 294.295515][T12951] tipc: Enabled bearer , priority 10 [ 294.326671][T12861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.358054][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.393139][T12861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.407722][T12861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.418832][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.447993][T12861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.479429][T12959] syzkaller0: entered promiscuous mode [ 294.488203][T12959] syzkaller0: entered allmulticast mode [ 294.574831][ C1] syz_tun: tun_net_xmit 162 [ 294.663927][T12861] hsr_slave_0: entered promiscuous mode [ 294.677828][T12861] hsr_slave_1: entered promiscuous mode [ 294.685340][T12861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.696248][T12861] Cannot create hsr debugfs directory [ 294.907997][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2043'. [ 295.003254][T12992] : entered promiscuous mode [ 295.092639][T13003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2046'. [ 295.139323][T12999] unknown channel width for channel at 909000KHz? [ 295.148778][ T5842] Bluetooth: hci4: command tx timeout [ 295.322465][T13010] netlink: 'syz.3.2049': attribute type 2 has an invalid length. [ 295.349462][T13010] veth0: entered promiscuous mode [ 295.356505][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 295.457551][T13009] veth0: left promiscuous mode [ 295.614742][ C1] syz_tun: tun_net_xmit 162 [ 295.733339][T13029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 295.807247][T13029] netlink: 'syz.0.2057': attribute type 7 has an invalid length. [ 295.851234][T13029] netlink: 'syz.0.2057': attribute type 8 has an invalid length. [ 295.927113][T13029] gretap0: entered promiscuous mode [ 296.067840][T13029] gretap0: left promiscuous mode [ 296.126268][T13036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.138836][T13036] batadv_slave_1: entered promiscuous mode [ 296.180398][T12861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 296.242893][T12861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 296.310641][T12861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 296.357054][T12861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 296.544446][T13053] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 296.654724][ C1] syz_tun: tun_net_xmit 162 [ 296.919743][T12861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.973762][T12861] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.007336][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.014566][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.067813][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.075052][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.196485][T12861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.217343][ T5842] Bluetooth: hci4: command tx timeout [ 297.238831][T13087] netlink: 'syz.2.2071': attribute type 7 has an invalid length. [ 297.280390][T13087] netlink: 'syz.2.2071': attribute type 8 has an invalid length. [ 297.353499][T13087] gretap0: entered promiscuous mode [ 297.371143][T13087] gretap0: left promiscuous mode [ 297.417479][T13088] syzkaller0 speed is unknown, defaulting to 1000 [ 297.430788][T13100] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 297.435282][T13088] virt_wifi0 speed is unknown, defaulting to 1000 [ 297.694734][ C1] syz_tun: tun_net_xmit 162 [ 297.750637][T13111] netlink: 'syz.2.2076': attribute type 10 has an invalid length. [ 297.930372][T13115] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.937721][T13115] IPv6: NLM_F_CREATE should be set when creating new route [ 298.011606][T12861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.158567][T12861] veth0_vlan: entered promiscuous mode [ 298.223039][T12861] veth1_vlan: entered promiscuous mode [ 298.291229][T13136] netlink: 'syz.3.2086': attribute type 7 has an invalid length. [ 298.325392][T13136] netlink: 'syz.3.2086': attribute type 8 has an invalid length. [ 298.333188][T13136] __nla_validate_parse: 10 callbacks suppressed [ 298.333207][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2086'. [ 298.362647][T12861] veth0_macvtap: entered promiscuous mode [ 298.397561][T12861] veth1_macvtap: entered promiscuous mode [ 298.425860][T13136] gretap0: entered promiscuous mode [ 298.482059][T13136] gretap0: left promiscuous mode [ 298.637617][T13146] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 298.643149][T12861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.667872][T13146] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2089'. [ 298.696740][T13146] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 298.709505][T13148] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 298.725699][T13146] netlink: 'syz.4.2089': attribute type 2 has an invalid length. [ 298.725726][T13146] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2089'. [ 298.743456][ C1] syz_tun: tun_net_xmit 162 [ 298.770048][T12861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.792388][T12861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.807172][T12861] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.826291][T12861] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.851063][T12861] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.860652][T13158] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 298.870984][T13158] netlink: 'syz.2.2090': attribute type 1 has an invalid length. [ 298.955934][T13148] bond4: entered promiscuous mode [ 298.961024][T13148] bond4: entered allmulticast mode [ 298.971178][T13148] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.160151][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.176841][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.188740][T13172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 299.232609][T13172] netlink: 'syz.0.2096': attribute type 15 has an invalid length. [ 299.241459][T13172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2096'. [ 299.252362][ T6490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.267594][ T6490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.298875][ T5842] Bluetooth: hci4: command tx timeout [ 299.533006][T13192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2102'. [ 299.551891][T13192] netlink: 'syz.0.2102': attribute type 7 has an invalid length. [ 299.559851][T13192] netlink: 'syz.0.2102': attribute type 8 has an invalid length. [ 299.568807][T13192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2102'. [ 299.585401][T13192] gretap0: entered promiscuous mode [ 299.592477][T13192] gretap0: left promiscuous mode [ 299.774844][ C1] syz_tun: tun_net_xmit 162 [ 299.829698][T13210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2106'. [ 300.314467][T13236] syz_tun: tun_net_xmit 42 [ 300.319816][T13236] syz_tun: tun_net_xmit 42 [ 300.324905][T13236] syz_tun: tun_net_xmit 42 [ 300.329785][T13236] syz_tun: tun_net_xmit 42 [ 300.335276][T13236] syz_tun: tun_net_xmit 42 [ 300.340180][T13236] syz_tun: tun_net_xmit 42 [ 300.349125][T13236] syz_tun: tun_net_xmit 42 [ 300.353993][T13236] syz_tun: tun_net_xmit 42 [ 300.359167][T13236] syz_tun: tun_net_xmit 42 [ 300.364023][T13236] syz_tun: tun_net_xmit 42 [ 300.386145][T13236] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 300.388716][T13240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2116'. [ 300.412743][T13240] netlink: 'syz.0.2116': attribute type 7 has an invalid length. [ 300.437807][T13240] netlink: 'syz.0.2116': attribute type 8 has an invalid length. [ 300.456839][T13243] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 300.462935][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 300.503987][T13243] syzkaller1: entered promiscuous mode [ 300.519379][T13243] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 300.532894][T13240] gretap0: entered promiscuous mode [ 300.555962][T13240] gretap0: left promiscuous mode [ 300.722382][T13252] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 300.732613][T13252] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 300.749968][T13252] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 300.759089][T13252] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 300.771967][T13252] geneve2: entered promiscuous mode [ 300.778284][T13252] geneve2: entered allmulticast mode [ 300.814825][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.376925][T13279] wireguard: wg0: Could not create IPv4 socket [ 301.406933][T13279] openvswitch: netlink: Flow key attr not present in new flow. [ 301.455494][ T5831] Bluetooth: hci4: command 0x0405 tx timeout [ 301.473098][T13288] gretap0: entered promiscuous mode [ 301.529453][T13288] gretap0: left promiscuous mode [ 301.854834][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 301.951158][ T773] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.145474][ T773] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.290189][ T773] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.397199][ T773] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.524404][ T773] bridge_slave_1: left allmulticast mode [ 302.531151][ T773] bridge_slave_1: left promiscuous mode [ 302.540284][ T773] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.551772][ T773] bridge_slave_0: left allmulticast mode [ 302.561447][ T773] bridge_slave_0: left promiscuous mode [ 302.568414][ T773] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.897876][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 302.933742][ T773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.947056][ T773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.957970][ T773] bond0 (unregistering): Released all slaves [ 303.206057][ T773] hsr_slave_0: left promiscuous mode [ 303.213232][ T773] hsr_slave_1: left promiscuous mode [ 303.255621][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.263104][ T773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.307442][ T773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.341633][ T773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.407437][ T773] veth1_macvtap: left promiscuous mode [ 303.413317][ T773] veth0_macvtap: left promiscuous mode [ 303.419305][ T773] veth1_vlan: left promiscuous mode [ 303.425013][ T773] veth0_vlan: left promiscuous mode [ 303.720017][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.739510][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 303.755553][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 303.763968][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 303.784474][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 303.944690][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 304.024188][ T773] team0 (unregistering): Port device team_slave_1 removed [ 304.069239][ T773] team0 (unregistering): Port device team_slave_0 removed [ 304.534858][T13328] syzkaller0 speed is unknown, defaulting to 1000 [ 304.543268][T13328] virt_wifi0 speed is unknown, defaulting to 1000 [ 304.690246][T13335] __nla_validate_parse: 6 callbacks suppressed [ 304.690270][T13335] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2142'. [ 304.721115][T13336] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 304.974746][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 305.245252][T13328] chnl_net:caif_netlink_parms(): no params data found [ 305.310078][T13366] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 305.335511][ T5932] syz_tun: tun_net_xmit 110 [ 305.525249][ T5932] syz_tun: tun_net_xmit 110 [ 305.583229][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.606982][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.622621][T13328] bridge_slave_0: entered allmulticast mode [ 305.638529][T13328] bridge_slave_0: entered promiscuous mode [ 305.652708][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.662866][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.672804][T13328] bridge_slave_1: entered allmulticast mode [ 305.683175][T13328] bridge_slave_1: entered promiscuous mode [ 305.767011][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.793652][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.854706][ T5842] Bluetooth: hci4: command tx timeout [ 305.888758][T13328] team0: Port device team_slave_0 added [ 305.926116][T13328] team0: Port device team_slave_1 added [ 305.934951][T13388] validate_nla: 3 callbacks suppressed [ 305.934972][T13388] netlink: 'syz.0.2157': attribute type 2 has an invalid length. [ 306.008227][T13390] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2158'. [ 306.018019][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 306.084009][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2158'. [ 306.090007][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.094160][T13390] netlink: 'syz.3.2158': attribute type 3 has an invalid length. [ 306.100815][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.139894][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.160169][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.161011][T13393] netlink: 'syz.0.2159': attribute type 13 has an invalid length. [ 306.168579][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.259166][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.479874][T13404] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 306.511052][T13328] hsr_slave_0: entered promiscuous mode [ 306.518601][T13328] hsr_slave_1: entered promiscuous mode [ 306.525789][T13328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.532076][T13404] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2160'. [ 306.539100][T13328] Cannot create hsr debugfs directory [ 306.605189][T13409] netlink: 'syz.2.2162': attribute type 1 has an invalid length. [ 306.721607][T13409] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.794055][T13414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.823341][T13414] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 306.852694][T13414] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 306.992491][T13420] veth7: entered promiscuous mode [ 307.004425][T13420] bond5: (slave veth7): Enslaving as an active interface with a down link [ 307.033814][T13409] vlan0: entered allmulticast mode [ 307.039260][T13409] bond5: entered allmulticast mode [ 307.054752][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.210087][T13437] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2169'. [ 307.241408][T13437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2169'. [ 307.507200][T13459] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 307.661193][T13466] netlink: 'syz.3.2176': attribute type 15 has an invalid length. [ 307.687153][T13466] netlink: 'syz.3.2176': attribute type 3 has an invalid length. [ 307.934983][ T5842] Bluetooth: hci4: command tx timeout [ 308.083348][T13482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2179'. [ 308.104764][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 308.546758][T13461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.818716][T13461] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.828888][T13461] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.841607][T13461] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.850351][T13461] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.014063][T13461] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.023227][T13461] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.031711][T13461] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.040382][T13461] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.134716][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 309.241489][T13492] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2183'. [ 309.270355][T13493] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2184'. [ 309.308804][T13492] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 309.491666][T13503] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2186'. [ 309.580482][T13505] netlink: 'syz.0.2188': attribute type 4 has an invalid length. [ 309.679036][T13328] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 309.717676][T13328] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 309.750427][T13328] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 309.789410][T13328] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 309.818343][T13526] netlink: 'syz.4.2192': attribute type 1 has an invalid length. [ 310.015574][ T5842] Bluetooth: hci4: command tx timeout [ 310.043024][T13532] veth9: entered promiscuous mode [ 310.080949][T13535] erspan0: entered allmulticast mode [ 310.174692][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 310.191528][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.278493][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.323519][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.330807][ T8716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.361057][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.368444][ T8716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.458597][T13555] __nla_validate_parse: 3 callbacks suppressed [ 310.458619][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2200'. [ 310.549420][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 310.563252][T13563] netlink: 'syz.3.2203': attribute type 12 has an invalid length. [ 310.592353][T13564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2202'. [ 310.602630][T13563] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 310.794147][T13572] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2205'. [ 310.868003][T13576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 310.968048][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.077527][T13328] veth0_vlan: entered promiscuous mode [ 311.103339][T13328] veth1_vlan: entered promiscuous mode [ 311.169661][T13328] veth0_macvtap: entered promiscuous mode [ 311.184404][T13328] veth1_macvtap: entered promiscuous mode [ 311.215456][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 311.223322][T13589] netlink: 'syz.3.2211': attribute type 10 has an invalid length. [ 311.238927][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.263827][T13589] bridge0: port 1(team0) entered blocking state [ 311.271727][T13589] bridge0: port 1(team0) entered disabled state [ 311.278337][T13589] team0: entered allmulticast mode [ 311.283709][T13589] hsr_slave_0: entered allmulticast mode [ 311.293061][T13589] team0: entered promiscuous mode [ 311.298882][T13589] hsr_slave_0: entered promiscuous mode [ 311.308031][T13589] bridge0: port 1(team0) entered blocking state [ 311.314441][T13589] bridge0: port 1(team0) entered forwarding state [ 311.407688][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.421624][T13328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.450861][T13328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.460642][T13328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.472561][T13328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.483369][T13597] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2214'. [ 311.646725][ T6329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.671596][ T6329] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 311.699792][T13605] bridge_slave_0: default FDB implementation only supports local addresses [ 311.747477][T13605] xt_SECMARK: invalid mode: 0 [ 311.752747][T13605] x_tables: duplicate underflow at hook 2 [ 311.772340][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.788112][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.810803][ T6329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.823797][ T6329] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 311.893967][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.909413][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.921969][ T6329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.937719][ T6329] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 312.080872][ T6329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.098853][ T5842] Bluetooth: hci4: command tx timeout [ 312.118660][ T6329] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 312.254636][ C1] ------------[ cut here ]------------ [ 312.260436][ C1] refcount_t: addition on 0; use-after-free. [ 312.267257][ C1] WARNING: CPU: 1 PID: 13606 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 312.276727][ C1] Modules linked in: [ 312.280696][ C1] CPU: 1 UID: 0 PID: 13606 Comm: syz-executor Not tainted 6.15.0-syzkaller-07777-g271683bb2cf3 #0 PREEMPT(full) [ 312.292251][T13620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 312.292954][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.311919][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 312.318348][ C1] Code: 00 00 e8 d9 72 00 fd 5b 41 5e e9 01 cf a6 06 cc e8 cb 72 00 fd c6 05 67 23 cb 0a 01 90 48 c7 c7 80 19 e2 8b e8 17 5f c4 fc 90 <0f> 0b 90 90 eb d7 e8 ab 72 00 fd c6 05 48 23 cb 0a 01 90 48 c7 c7 [ 312.338054][ C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246 [ 312.344178][ C1] RAX: b31c76c70ffa2300 RBX: 0000000000000002 RCX: ffff8880443ada00 [ 312.352231][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 312.360306][ C1] RBP: ffffc90000a089b0 R08: 0000000000000003 R09: 0000000000000004 [ 312.368378][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: ffff88805e0ec100 [ 312.376434][ C1] R13: dffffc0000000000 R14: ffff88805e0ec26c R15: ffff88807baa9400 [ 312.384455][ C1] FS: 000055559117d500(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 312.393477][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.400159][ C1] CR2: 00007fe7d43f5f98 CR3: 0000000082bee000 CR4: 00000000003526f0 [ 312.403253][T13625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2222'. [ 312.408194][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.408215][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 312.408233][ C1] Call Trace: [ 312.408244][ C1] [ 312.408256][ C1] tipc_crypto_xmit+0x1820/0x22c0 [ 312.425742][T13625] bridge0: entered allmulticast mode [ 312.433285][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 312.433342][ C1] tipc_bearer_xmit_skb+0x245/0x400 [ 312.438982][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2222'. [ 312.439514][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 312.444733][T13625] team0: left allmulticast mode [ 312.449855][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 312.449904][ C1] tipc_disc_timeout+0x580/0x6d0 [ 312.456441][T13625] hsr_slave_0: left allmulticast mode [ 312.460606][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 312.469767][T13625] team0: left promiscuous mode [ 312.475208][ C1] call_timer_fn+0x17e/0x5f0 [ 312.475245][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 312.475272][ C1] ? call_timer_fn+0xbe/0x5f0 [ 312.475300][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 312.475340][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 312.475369][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.475395][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 312.475423][ C1] __run_timer_base+0x61a/0x860 [ 312.475451][ C1] ? ktime_get+0x3e/0x1f0 [ 312.490062][T13625] hsr_slave_0: left promiscuous mode [ 312.491015][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 312.497435][T13625] bridge0: port 1(team0) entered disabled state [ 312.501970][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 312.502026][ C1] run_timer_softirq+0xb7/0x180 [ 312.579940][ C1] handle_softirqs+0x286/0x870 [ 312.584762][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 312.589592][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 312.594934][ C1] __irq_exit_rcu+0xca/0x1f0 [ 312.599646][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 312.604908][ C1] irq_exit_rcu+0x9/0x30 [ 312.609166][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 312.614845][ C1] [ 312.617821][ C1] [ 312.620764][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 312.626800][ C1] RIP: 0010:unwind_next_frame+0x395/0x2390 [ 312.632637][ C1] Code: e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 80 19 00 00 41 0f b6 44 24 01 <83> e0 07 0f 84 75 15 00 00 83 f8 01 4c 8b 7c 24 48 48 bd 00 00 00 [ 312.652405][ C1] RSP: 0018:ffffc900041ef438 EFLAGS: 00000246 [ 312.658526][ C1] RAX: 0000000000000002 RBX: ffffffff8fbe6d5c RCX: ffffffff8fbe6d64 [ 312.666547][ C1] RDX: ffffffff903eb766 RSI: ffffffff903eb766 RDI: ffffffff8be263a0 [ 312.674581][ C1] RBP: dffffc0000000000 R08: 000000000000000e R09: ffffffff81724865 [ 312.682590][ C1] R10: ffffc900041ef558 R11: ffffffff81ac9920 R12: ffffffff903eb76a [ 312.690698][ C1] R13: ffffffff903eb76b R14: ffffc900041ef508 R15: ffffffff8fbe6d60 [ 312.698765][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 312.704960][ C1] ? unwind_next_frame+0xa5/0x2390 [ 312.710199][ C1] ? unwind_next_frame+0xd4/0x2390 [ 312.715382][ C1] ? unwind_next_frame+0xa5/0x2390 [ 312.720528][ C1] ? __se_sys_ioctl+0xf9/0x170 [ 312.725435][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 312.731782][ C1] arch_stack_walk+0x11c/0x150 [ 312.736614][ C1] ? __se_sys_ioctl+0xf9/0x170 [ 312.741487][ C1] stack_trace_save+0x9c/0xe0 [ 312.746197][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 312.751588][ C1] save_stack+0xf5/0x1f0 [ 312.755873][ C1] ? __pfx_save_stack+0x10/0x10 [ 312.760738][ C1] ? post_alloc_hook+0x240/0x2a0 [ 312.765726][ C1] ? get_page_from_freelist+0x21e0/0x22c0 [ 312.771456][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 312.777466][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 312.782505][ C1] ? alloc_pages_noprof+0xa9/0x190 [ 312.787667][ C1] ? __vmalloc_node_range_noprof+0x97d/0x1340 [ 312.793858][ C1] ? vmalloc_user_noprof+0xad/0xf0 [ 312.799266][ C1] ? kcov_ioctl+0x55/0x640 [ 312.803699][ C1] ? __se_sys_ioctl+0xf9/0x170 [ 312.808505][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 312.814808][ C1] __set_page_owner+0x8d/0x4a0 [ 312.819641][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 312.825584][ C1] post_alloc_hook+0x240/0x2a0 [ 312.830373][ C1] get_page_from_freelist+0x21e0/0x22c0 [ 312.835999][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 312.841906][ C1] ? prepare_alloc_pages+0x213/0x610 [ 312.847230][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 312.853120][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 312.859526][ C1] ? policy_nodemask+0x27c/0x720 [ 312.864544][ C1] ? __pfx___might_resched+0x10/0x10 [ 312.870058][ C1] alloc_pages_mpol+0x232/0x4a0 [ 312.874966][ C1] alloc_pages_noprof+0xa9/0x190 [ 312.879955][ C1] __vmalloc_node_range_noprof+0x97d/0x1340 [ 312.885954][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 312.892321][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 312.897221][ C1] vmalloc_user_noprof+0xad/0xf0 [ 312.902183][ C1] ? kcov_ioctl+0x55/0x640 [ 312.906680][ C1] kcov_ioctl+0x55/0x640 [ 312.910947][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 312.915925][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 312.920797][ C1] __se_sys_ioctl+0xf9/0x170 [ 312.925425][ C1] do_syscall_64+0xfa/0x3b0 [ 312.929942][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.935214][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.941292][ C1] ? clear_bhb_loop+0x60/0xb0 [ 312.946007][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.951933][ C1] RIP: 0033:0x7fec2338e56b [ 312.956376][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 312.976020][ C1] RSP: 002b:00007ffdbebe41b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.984478][ C1] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fec2338e56b [ 312.992512][ C1] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da [ 313.000525][ C1] RBP: 00007fec235b61f8 R08: 00000000000000d9 R09: 0000000000000000 [ 313.008566][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.016594][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 313.024630][ C1] [ 313.027682][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 313.034968][ C1] CPU: 1 UID: 0 PID: 13606 Comm: syz-executor Not tainted 6.15.0-syzkaller-07777-g271683bb2cf3 #0 PREEMPT(full) [ 313.046888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.056965][ C1] Call Trace: [ 313.060267][ C1] [ 313.063132][ C1] dump_stack_lvl+0x99/0x250 [ 313.067748][ C1] ? __asan_memcpy+0x40/0x70 [ 313.072361][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.077578][ C1] ? __pfx__printk+0x10/0x10 [ 313.082205][ C1] panic+0x2db/0x790 [ 313.086135][ C1] ? __pfx_panic+0x10/0x10 [ 313.090565][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 313.095803][ C1] __warn+0x31b/0x4b0 [ 313.099799][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 313.105275][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 313.110744][ C1] report_bug+0x2be/0x4f0 [ 313.115085][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 313.120547][ C1] ? refcount_warn_saturate+0xfa/0x1d0 [ 313.126010][ C1] ? refcount_warn_saturate+0xfc/0x1d0 [ 313.131482][ C1] handle_bug+0x84/0x160 [ 313.135751][ C1] exc_invalid_op+0x1a/0x50 [ 313.140268][ C1] asm_exc_invalid_op+0x1a/0x20 [ 313.145127][ C1] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 313.151199][ C1] Code: 00 00 e8 d9 72 00 fd 5b 41 5e e9 01 cf a6 06 cc e8 cb 72 00 fd c6 05 67 23 cb 0a 01 90 48 c7 c7 80 19 e2 8b e8 17 5f c4 fc 90 <0f> 0b 90 90 eb d7 e8 ab 72 00 fd c6 05 48 23 cb 0a 01 90 48 c7 c7 [ 313.170819][ C1] RSP: 0018:ffffc90000a08828 EFLAGS: 00010246 [ 313.176990][ C1] RAX: b31c76c70ffa2300 RBX: 0000000000000002 RCX: ffff8880443ada00 [ 313.184985][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 313.193060][ C1] RBP: ffffc90000a089b0 R08: 0000000000000003 R09: 0000000000000004 [ 313.201046][ C1] R10: dffffc0000000000 R11: fffffbfff1bfa66c R12: ffff88805e0ec100 [ 313.209038][ C1] R13: dffffc0000000000 R14: ffff88805e0ec26c R15: ffff88807baa9400 [ 313.217043][ C1] ? refcount_warn_saturate+0xf9/0x1d0 [ 313.222551][ C1] tipc_crypto_xmit+0x1820/0x22c0 [ 313.227630][ C1] ? __pfx_tipc_crypto_xmit+0x10/0x10 [ 313.233060][ C1] tipc_bearer_xmit_skb+0x245/0x400 [ 313.238293][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 313.243591][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 313.249333][ C1] tipc_disc_timeout+0x580/0x6d0 [ 313.254294][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 313.259779][ C1] call_timer_fn+0x17e/0x5f0 [ 313.264379][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 313.269844][ C1] ? call_timer_fn+0xbe/0x5f0 [ 313.274550][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 313.279699][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 313.284905][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.290113][ C1] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 313.295581][ C1] __run_timer_base+0x61a/0x860 [ 313.300438][ C1] ? ktime_get+0x3e/0x1f0 [ 313.304783][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 313.310165][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 313.316426][ C1] run_timer_softirq+0xb7/0x180 [ 313.321291][ C1] handle_softirqs+0x286/0x870 [ 313.326082][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 313.330871][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 313.336180][ C1] __irq_exit_rcu+0xca/0x1f0 [ 313.340779][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 313.345994][ C1] irq_exit_rcu+0x9/0x30 [ 313.350251][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 313.355897][ C1] [ 313.358831][ C1] [ 313.361763][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 313.367750][ C1] RIP: 0010:unwind_next_frame+0x395/0x2390 [ 313.373568][ C1] Code: e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 6d 19 00 00 4c 89 e8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 80 19 00 00 41 0f b6 44 24 01 <83> e0 07 0f 84 75 15 00 00 83 f8 01 4c 8b 7c 24 48 48 bd 00 00 00 [ 313.393191][ C1] RSP: 0018:ffffc900041ef438 EFLAGS: 00000246 [ 313.399288][ C1] RAX: 0000000000000002 RBX: ffffffff8fbe6d5c RCX: ffffffff8fbe6d64 [ 313.407289][ C1] RDX: ffffffff903eb766 RSI: ffffffff903eb766 RDI: ffffffff8be263a0 [ 313.415285][ C1] RBP: dffffc0000000000 R08: 000000000000000e R09: ffffffff81724865 [ 313.423271][ C1] R10: ffffc900041ef558 R11: ffffffff81ac9920 R12: ffffffff903eb76a [ 313.431258][ C1] R13: ffffffff903eb76b R14: ffffc900041ef508 R15: ffffffff8fbe6d60 [ 313.439254][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.445420][ C1] ? unwind_next_frame+0xa5/0x2390 [ 313.450552][ C1] ? unwind_next_frame+0xd4/0x2390 [ 313.455788][ C1] ? unwind_next_frame+0xa5/0x2390 [ 313.460968][ C1] ? __se_sys_ioctl+0xf9/0x170 [ 313.465747][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 313.471907][ C1] arch_stack_walk+0x11c/0x150 [ 313.476701][ C1] ? __se_sys_ioctl+0xf9/0x170 [ 313.481501][ C1] stack_trace_save+0x9c/0xe0 [ 313.486190][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 313.491581][ C1] save_stack+0xf5/0x1f0 [ 313.495840][ C1] ? __pfx_save_stack+0x10/0x10 [ 313.500704][ C1] ? post_alloc_hook+0x240/0x2a0 [ 313.505654][ C1] ? get_page_from_freelist+0x21e0/0x22c0 [ 313.511381][ C1] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 313.517367][ C1] ? alloc_pages_mpol+0x232/0x4a0 [ 313.522405][ C1] ? alloc_pages_noprof+0xa9/0x190 [ 313.527527][ C1] ? __vmalloc_node_range_noprof+0x97d/0x1340 [ 313.533610][ C1] ? vmalloc_user_noprof+0xad/0xf0 [ 313.538724][ C1] ? kcov_ioctl+0x55/0x640 [ 313.543147][ C1] ? __se_sys_ioctl+0xf9/0x170 [ 313.547925][ C1] ? seqcount_lockdep_reader_access+0x102/0x180 [ 313.554184][ C1] __set_page_owner+0x8d/0x4a0 [ 313.558993][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 313.564413][ C1] post_alloc_hook+0x240/0x2a0 [ 313.569227][ C1] get_page_from_freelist+0x21e0/0x22c0 [ 313.574850][ C1] ? __pfx_get_page_from_freelist+0x10/0x10 [ 313.580767][ C1] ? prepare_alloc_pages+0x213/0x610 [ 313.586077][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 313.591895][ C1] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 313.598415][ C1] ? policy_nodemask+0x27c/0x720 [ 313.603377][ C1] ? __pfx___might_resched+0x10/0x10 [ 313.608859][ C1] alloc_pages_mpol+0x232/0x4a0 [ 313.613729][ C1] alloc_pages_noprof+0xa9/0x190 [ 313.618686][ C1] __vmalloc_node_range_noprof+0x97d/0x1340 [ 313.624642][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.631187][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 313.636059][ C1] vmalloc_user_noprof+0xad/0xf0 [ 313.641047][ C1] ? kcov_ioctl+0x55/0x640 [ 313.645503][ C1] kcov_ioctl+0x55/0x640 [ 313.649765][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 313.654717][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 313.659588][ C1] __se_sys_ioctl+0xf9/0x170 [ 313.664195][ C1] do_syscall_64+0xfa/0x3b0 [ 313.668707][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.673911][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.679981][ C1] ? clear_bhb_loop+0x60/0xb0 [ 313.684688][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.690616][ C1] RIP: 0033:0x7fec2338e56b [ 313.695081][ C1] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 313.714880][ C1] RSP: 002b:00007ffdbebe41b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 313.723336][ C1] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fec2338e56b [ 313.731423][ C1] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da [ 313.739584][ C1] RBP: 00007fec235b61f8 R08: 00000000000000d9 R09: 0000000000000000 [ 313.747650][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.755625][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 313.763625][ C1] [ 313.766963][ C1] Kernel Offset: disabled [ 313.771306][ C1] Rebooting in 86400 seconds..