last executing test programs: 1m22.040598863s ago: executing program 2 (id=1199): r0 = socket$kcm(0x10, 0x8, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x36) close(r3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) 1m7.6723089s ago: executing program 2 (id=1199): r0 = socket$kcm(0x10, 0x8, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x36) close(r3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124b00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00'}, 0x90) 54.223244275s ago: executing program 2 (id=1199): r0 = socket$kcm(0x10, 0x8, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x36) close(r3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) 36.961739732s ago: executing program 2 (id=1199): r0 = socket$kcm(0x10, 0x8, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x36) close(r3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) 24.822607898s ago: executing program 2 (id=1199): r0 = socket$kcm(0x10, 0x8, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x36) close(r3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) 11.943329434s ago: executing program 2 (id=1199): r0 = socket$kcm(0x10, 0x8, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4008854}, 0x20000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000000000000000000000000000000001"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000000}, 0x48) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0x36) close(r3) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xf, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) 1.609383662s ago: executing program 1 (id=2063): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x87, &(0x7f0000000000), &(0x7f0000000080)=0x4) listen(0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x17, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESOCT, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x90) readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/8, 0x8}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='hugetlb.2MB.usage_in_bytes\x00', 0x7a05, 0x1700) r2 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000300)=0x16, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597749c2d79c6fc26f7fbda34fb8825f80200e3c0aba61f6304000000ffffca88facae8d966310a2fd74133bb"], 0xdd12}, {&(0x7f0000004e00)=ANY=[], 0x22f0}, {&(0x7f00000073c0)=ANY=[], 0x10}], 0x3, 0x0, 0x0, 0x8084}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000004000000000065547d0b0500"/26], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000400000000001e000000850000000e00000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x8, 0x50, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5, 0x700, 0x4065, 0x6}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10802240}, 0xc, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="577d0000028000e53002fd5a1932ed6630acbe629d001314b9daa94b55a5e7c8af2f13bdd91da3aff7e6b47c76b2efc459c8cf5eb6c8b15f188f0478aa6c8bc58507bd99959347d30695d0641261faf230fb567323b1e0a687e0ce18228b5907923078cd27c7da45600245ae92b8d37445532cbb1792b17710b613017e67deb6565d2cd0f6e8d4b4b6d7c3bf9bc466877685ffeab1bca2b54c55b73817b01e645c3d3b83d4fa6b2398f7", @ANYBLOB="200000006d0000032dbd7000fcdbdf2500000000", @ANYRES32=r6, @ANYRESDEC=r1, @ANYBLOB="48f714ef87589dae9d01512f64e209d442cdcf8febe2607263b39742667757bf45b706d5a02d35541d0e558840127248541dc5ec094e9e817d4cc6d9492725516a1bb8689029ec921165e33a6531fbb32a12440038e9917e288fb341f66a30ba8797a80d5cab88d88642ee353dff72166fcd23c1b6c62a49718cb9faae513e4d38b9061fe9a296a2882979cb8f58b1"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4000040) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0xffffffffffffffbb) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000100039040000000000000000000003e4", @ANYRESOCT, @ANYRES64=0x0, @ANYRES32=r8, @ANYBLOB='?\x00\x00'], 0x58}, 0x1, 0x0, 0x0, 0x8000801}, 0x24004050) socket$alg(0x26, 0x5, 0x0) 1.457282581s ago: executing program 1 (id=2066): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e24, 0x9, @loopback, 0x1}, 0x1c) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd60, 0x4000f5, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getspdinfo={0x14, 0x25, 0x4, 0x70bd2d, 0x25dfdbfe, 0xea8, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x40000) 1.386834673s ago: executing program 1 (id=2067): socket$tipc(0x1e, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001140)=ANY=[@ANYBLOB="9feb0100180000000000000078000000000000000c040000000a0000000000000904000000090000000000000b0200000003000000060004a5fdffff0d00000003000000610000000300000004000000060000000e00000004000000ff7f00000200b684a7b10000080000000d00000005000000f9000000090000000300000003000000005f00300000"], &(0x7f0000001200)=""/104, 0x95, 0x68, 0x0, 0x5}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x10, 0x800, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="200001010000000000000000000000000a00000804800800014000000200aead5265a9e1931d8b7a5ba7955bf6f18b3a9e54338991ef2cc11de4996ad749ed0908aa2be0859b4d7881d0b53c3a3b73755092071747f65a3cc1ff0d23d91feefd0dbda3ce72"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f00000013c0)="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", 0x22d) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRESOCT=r5], 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x22, &(0x7f00000001c0)={&(0x7f0000002600)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRESOCT=r1, @ANYBLOB="010000000000000000000800000008000300", @ANYBLOB="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", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x5) socket$inet6(0xa, 0x1, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000001300)={'#! ', '', [], 0xa, "41645137536dd606d3a0300af16491c26fa94ac7e11e99ea0d98e024cde122abb88cc85c76989d29bafea6c4459d824b224f54b59b29aa9d3db7d01468e7f0ed3e54ef98ff906d72f792f687b05b9b909c139d"}, 0x57) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000300)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) 1.336285999s ago: executing program 0 (id=2068): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) ioctl$TUNSETOFFLOAD(r0, 0x40047451, 0x2000000a) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000000400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0xd, &(0x7f0000000040)={0x0, 0x1bc}, 0x8) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x7b, &(0x7f0000000000), 0x8) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000100c21400002f", 0xd}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb4}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000100)={0xa, 0xa, @private=0xa010100}, 0x5, &(0x7f0000000180)=[{&(0x7f00000001c0)="00c88787ccfa450b1729232e452da783b72831814ada5c5e63d9638771a196d0d0a8bc9151fdce28308bb6dddc", 0x20010030}], 0x4, 0x0, 0x0, 0xa6820000}, 0xfe80) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4) (async) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) close(r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000340)='%+9llu \x00'}, 0x20) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) 1.244750458s ago: executing program 3 (id=2072): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000080)=0x8, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001000000000030"], 0x58}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc3}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000006"], 0x24d8}], 0x1}, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x84, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x6f76, @local, 0x1000}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x6, @remote, 0x4}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x80000000, @rand_addr=' \x01\x00', 0x3ff}, @in={0x2, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000280)=0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x150, 0x11, 0x148, 0x150, 0x10, 0x280, 0x2a8, 0x2a8, 0x280, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0xf0, 0x150, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x1, 0x0, 0xffffffff, 0x7}}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x378) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000400)={r2, 0x1, 0x47, "ca5665585f13439c9d9125a9a8708bb492db965cbf2856bd6b5245768f423342426d32f1cfe71ee66fd8abd20293ee22f1eed9384e98f8700b98745febd5370a5d6958d63ada5c"}, 0x4f) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000006b40)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010001040000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0800034000000004"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)={0xd4, 0x0, 0x1, 0x801, 0x0, 0x0, {0x9, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xe}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2a7fbbcd}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.184204483s ago: executing program 1 (id=2073): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x10, 0x0, 0x0, @prog_fd}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2000400) bind$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @local}}, 0x1e) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x84, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x10001}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x81}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}}}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8044}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002c40)={&(0x7f0000002b40)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x52}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x68, 0x5, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x30, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x21}]}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSET={0x44, 0xb, 0xa, 0x601, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x25}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x14}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x20000001}, 0x39088aa18634d940) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r4, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x38}}, 0x0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d00), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, r7, 0x503, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0xc75}]}, 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x28, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x28}, 0x1, 0x0, 0x0, 0x14010}, 0x10) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000200000000000000000000000800030045d1"], 0x2c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1.177901132s ago: executing program 0 (id=2074): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x266, &(0x7f0000000440)={@local, @local, @val, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1501e7", 0x228, 0x6, 0x0, @local, @local, {[@srh={0x89, 0x6, 0x4, 0x3, 0xc6, 0x50, 0x0, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1]}, @routing={0x2f, 0x0, 0x2, 0x6}, @dstopts={0x87, 0x12, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @generic={0x3, 0x6f, "345917b986831a34046964b8a4686afa44fede48f02573d88bc5ae4ba7a5564cb86488ca53911ebbda8210281af100f484ca07bb1518d4adcc267887bb668675e7bed6dbb0bcde13354df7555832b7753fbbe8b06b51a5129a6139d221b8df1c23aa093a0c36b16f7de37d77f88c76"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x6fb, [0x8, 0x6e, 0x2]}}]}, @routing={0x2c, 0x2, 0x0, 0xfb, 0x0, [@remote]}, @dstopts={0x32, 0x1b, '\x00', [@generic={0x8, 0x8a, "1c88948a884d70557feb80e9a897e377dff04ad155075d3f30fd65542c48f667c6a883ba6040a4f23a1e17f19112a7ebac713439bd1c337e162d4dede0bed45d16fe7cb678c8ee8ff6aea1f6bd99fe32b295318d00fb2ff9ae29ba88c40fd7260b6f47700c60c1d420e361f5c8d60fad8d59b9964a69916a0409fb14b4cbbd64a633a0b0f41818a4e3c5"}, @enc_lim={0x4, 0x1, 0xec}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x5, [0x0, 0x3, 0x8, 0xb6]}}, @ra={0x5, 0x2, 0x401}, @calipso={0x7, 0x18, {0x0, 0x4, 0x8, 0x30, [0x3, 0x3]}}, @enc_lim]}, @routing={0x6c, 0x4, 0x0, 0x6, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 1.032372205s ago: executing program 1 (id=2076): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000200)=""/97, 0x61}], 0x1, 0x8, 0x4) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x41}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4804", @ANYRES16=r7, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r6, @ANYBLOB="2c0433"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @private}, @mcast1, @mcast1, 0x0, 0x100}) 1.031947797s ago: executing program 0 (id=2077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'wlan0\x00', 0x400}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000380)={0x1, 0x0, 0x1000, 0xe9, &(0x7f0000000280)="9ec38955dbdcfdc880b36cf5d95e70e8f7b5b055650d56e58056142e1ddc303d60d52673cf6bcbe5f1d96247bad77624e7bcb35d682a44a3951c3a4fde0890e4c575b4853f0c5330c0e7abbcebeffa430774f4e8a9227b8e75645e656f9bf51c46857eb92b7995974128bf779662c22dabc0de7ae997a6be06138198ad949799447a8fe0e437ca525cb1a7e348d16013382f59f9c02383a76528a6eb89947a02de9598619ca916a2aa91423a14812e3c79dd6934f138bb177181f733e2d7b27a6ae8d6072fba4554411a37275fb3bc202c67bd2420ab59e9ce477f7ff9b994afda2930bd8213a031b4", 0xb8, 0x0, &(0x7f0000000100)="5d6960450264c0cd698908a6d4fa756a31484a1d503b4cad99d7e6b996a8dac7c1d7f07c1920d288b20fbe385cc164ec22d3528b69aa19d92e72382783cc6eb5cba39e596c808a4fa1eb270b331720857028131f5c00d3c380c5d31ccf1237269807b827c6a977db41b78df10df240e5ac47bd4c3fc466a2f6bd28edecf8c5daae40c06e28849145536609d5cd8a5617371066c7138ce2ba8969d45d66ae8ef888feb4977d1c89722e4c6968524ef213cf53552c5cb7064c"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r1, 0x400454ce, r2) close(r0) 1.025005949s ago: executing program 3 (id=2078): socket$key(0xf, 0x3, 0x2) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x90) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x89a0, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{0x0}], 0x1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x2000000c) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r8, 0x0, 0x7, 0x0) close(r7) (async) write$binfmt_misc(r8, &(0x7f0000000040)={'syz1'}, 0x4) (async) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}], 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) 931.112549ms ago: executing program 0 (id=2079): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x804}}, 0x26) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc601000020010000000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) close(r3) 852.352459ms ago: executing program 4 (id=2080): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0'}, 0xb) recvmmsg(r0, &(0x7f0000010bc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000d80)=""/155, 0x9b}], 0x1}}], 0x1, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0xc0, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x98, 0x16, 0x0, 0x1, [{0x4}, {0x90, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x3e2, 0x2}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xcaf9, 0x207, 0x1ff, 0x8100}}, {0x14, 0x1, {0x5f, 0xe0, 0x80, 0x8100}}, {0x14, 0x1, {0xdeb7, 0x3b0, 0x5, 0x8100}}, {0x14, 0x1, {0x96f, 0xe48, 0x2, 0x8100}}, {0x14, 0x1, {0x3, 0x13e, 0x9, 0x8100}}, {0x14, 0x1, {0x5, 0xb24, 0x1, 0x88a8}}]}]}]}, @IFLA_GROUP={0x8}]}, 0xc0}}, 0x0) 851.955935ms ago: executing program 3 (id=2081): r0 = socket$inet(0x2, 0x3, 0x4) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01070000000000000000060000000800030049"], 0x1c}}, 0x0) (async) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRES64=r3], 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private}, @address_request}}}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e000058"}}}]}, 0x48}}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x40, 0x1, 0x7, @ipv4={'\x00', '\xff\xff', @local}, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x80, 0x1, 0x2, 0xfff}}) (rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000540)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8}, @TCA_PIE_ALPHA={0x8}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r15}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r15}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x480000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x168, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4004041}, 0x4000011) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[], 0x0) (async) r16 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) 742.462251ms ago: executing program 4 (id=2082): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a0000000001fe0000000000fe00486924050db248069353dc2552f46f1ccf7fad56a44d9ede081f6c3e379b25fccdbba991cd752dc784ad2f0b438fd687fe631d3b16288704e819970e2c543fde869760ed6c80da6b77daceb11337fefa44aa891c669d737a6420992955a576842f4a9b3a1cf90178890148ec02a3f8ddd77f2399fde26e67430dea1ed828487b5e62f5a4a43a5cb046a8fd"], 0x1c}}, 0x0) socket$inet6(0xa, 0x3, 0xdf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x8}, @NFTA_LOG_GROUP={0x6}]}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000480)=""/232, 0xe8, 0x40000160, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200b4e36966b955e978009304c5aaec060000aaa8aaaaaaaa86dd0000000000000000000000000000ff0200000000000000"], 0x0) r4 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r9, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x4c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x11a, 0x5a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x4c}}, 0x4008004) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x13, r0, 0x6c803000) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x488, 0x0, 0xb, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x2d0, 0x338, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x21, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) 634.893782ms ago: executing program 0 (id=2083): socket(0x22, 0x2, 0x0) (async) socket(0x22, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000010205000000000000d290000a00000003dd084000000002"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000000000afd866c5a11b65a98b0a"], 0x7c}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000000280)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0x8, @mcast2, 0x7fff}}}, &(0x7f0000000380)=0x84) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000005940)={&(0x7f0000000380)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, &(0x7f00000058c0)=[{&(0x7f0000005840)='|', 0x1}], 0x1, &(0x7f0000005900)=[@hoplimit_2292={{0x14}}], 0x18}, 0x818) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x15, 0x80000, 0x0, &(0x7f0000000000)) (async) socketpair(0x15, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x10, 0x7, 0x5d9bbe91, 0x7c, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x66, 0x0, 0x81, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@end, @ssrr={0x89, 0x1f, 0xe8, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @private=0xa010101, @local, @broadcast, @local]}, @timestamp_addr={0x44, 0xc, 0x42, 0x1, 0xd, [{@broadcast}]}, @rr={0x7, 0xb, 0xc7, [@loopback, @empty]}, @end]}}}}}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r7, 0x6b, 0x4, &(0x7f0000000200)=0x80000000, 0x4) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) splice(r9, 0x0, r10, 0x0, 0x4ffe2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x15, 0x0, 0x101, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x15, 0x0, 0x101, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) (async) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000780)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000680)={@cgroup=r8, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @link_fd=r9, r11}, 0x20) 508.518117ms ago: executing program 3 (id=2084): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x41071, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20008805, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 473.629586ms ago: executing program 4 (id=2085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}]}]}, 0xcc}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a00)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}]}, 0x60}}, 0x0) 424.793776ms ago: executing program 0 (id=2086): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14, 0x10}}, 0xc0}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r2, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x2}, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6(0xa, 0x0, 0x6) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfdef) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003b0007010000000000010000027c0000040000000c000180060017"], 0x24}}, 0x0) 296.144391ms ago: executing program 4 (id=2087): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x48, r1, 0x925, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x31, 0x7, 'system_u:object_r:systemd_tmpfiles_exec_t:s0\x00'}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0x12, 0x0, 0xffffffff, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x81, 0x0, 0x0, 0x70bd25, 0x3506}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}}]}, 0x90}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001580)={r5, &(0x7f0000001440), 0x0}, 0x20) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x19, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, 0x0, &(0x7f0000000080)) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="14000300000000000000760000a2100000000000"], 0x2c}}, 0x0) close(0x3) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) ppoll(&(0x7f00000000c0)=[{r8}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) write$binfmt_script(r8, &(0x7f0000000100), 0x61) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "872c7a9900fe0ab4", "99fbb40009a6705c4824d1d5b7e73c24", "843d78f6", "521e00102e612abd"}, 0x28) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0xc}, 0x1c) 294.524148ms ago: executing program 3 (id=2088): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @rose}, [@netrom, @remote, @null, @rose, @default, @null, @null]}, &(0x7f0000000580)=0x48) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={'nr', 0x0}, 0x3, 'syz0\x00', @null, 0x8d4, 0x8, [@default, @default, @bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) (async, rerun: 64) shutdown(r0, 0x1) (async, rerun: 64) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x401) listen(r1, 0x0) (async, rerun: 64) shutdown(r0, 0x0) (async, rerun: 64) r2 = socket(0x2a, 0x2, 0x0) (async) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='nicvf0\x00') sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd28, 0x25dfdbfc}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff5}, {}, {0xc}}, [@filter_kind_options=@f_fw={{0x5c}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800000000000000018000000002c000280080005400000000008000140000000030800044000000003080003400000000408000240000000120900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x12) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept$alg(r6, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000000600), 0xfec8) (async) recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}], 0x3, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) (async) r8 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r5) bind$alg(r8, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)="f8f29a127d6b2bae52a0935b59e078cd337a3aca7e450141b01161b9299207c6ce179c590c603f55988a039aec5d911089de991dba47d443d73d37d1e1e52475bfbcc279c3062091c7b315f72307bee61fe01d", 0x53}, {&(0x7f0000000380)="e880f1e69bdfea1952195ac78a9d4694907714484bcf35916cba78e107840b6f567524e7eda891e8cc03cf826f0ac62eb6e21c860eec1d1794b98f9c8131fa0c362e369f5d1acd576ac265841d3dd24d67e854d8373d127646c755537938020a15e787a443275afa8445c4cbace0741c6540b5b16e7a932935186780e9c7a74df7f454e7b75ab73cd2d91d30326c281a6e25e616bb94da03", 0x98}, {&(0x7f0000000440)="6289cbf2976e380a80d990a94d7c873a081aa5de308b4a033bba6a6b58713562b3907a534d7846b67bca9c610eb0cda27a265deca3930b4d2607c562717f6b701d19ac18c85a90e939e44576eb1418fb85e75e9f8106e8485909347de98658e7ba331b9e8b4962bf1d7f36ff8705e3051087ef9b8f769a10f2d1d840085fe3019aebc0959e6b929a1a781b6181c43f1b4cba4672dc", 0x95}, {&(0x7f0000000100)="f6", 0x1}], 0x4}}], 0x1, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 155.715465ms ago: executing program 4 (id=2089): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x78}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf, r0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000ca00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x480, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}}, 0x0) 135.123218ms ago: executing program 1 (id=2090): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a01040000000000000000020000000900010073797a30000000000900020073797aff0f00000030000000050a01030002000000000000020000000900010073797a30000000000900030073797a3200000000040004"], 0x84}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x4b, 0x0, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x600000a, 0x8032, 0xffffffffffffffff, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40}, 0x4}}, 0x10) 235.526µs ago: executing program 3 (id=2091): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x9, 0x10}, 0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x36, '\x00', 0x0, r5, 0x0, 0x5, 0x2}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@private1, 0x0}, &(0x7f00000004c0)=0x14) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000080000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="00000000008500000086000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"/64], &(0x7f00000001c0)='GPL\x00', 0xf8, 0xc8, &(0x7f00000003c0)=""/200, 0x40f00, 0xc, '\x00', r7, 0x1a, r4, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x4a5, 0x3}, 0x10, 0x2de98, r5, 0x5, &(0x7f0000000640)=[r8, r5, r5, r5, r9], &(0x7f0000000680)=[{0x2, 0x5, 0x2, 0xc}, {0x2, 0x1, 0x1, 0x2}, {0x2, 0x4, 0x8, 0x1}, {0x3}, {0x3, 0x4, 0x6, 0xa}], 0x10, 0x80000001}, 0x90) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x4, 0x21, 0x0, 0x7, 0x70, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x10, 0xf48, 0x7, 0x9}}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r13, &(0x7f0000000100), &(0x7f0000000080)=@tcp=r12}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r13, &(0x7f0000000280), &(0x7f00000002c0)=""/60}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x4, 0x0, 0x1, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000ff00000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b70200000f000000b70300000000000085000000830000ec0c61be000000800055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0xf9, &(0x7f00000003c0)=""/249}, 0x90) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x14, 0x7, 0x9, 0x7fff, 0x1258, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48) r17 = socket(0x10, 0x3, 0x0) write(r17, &(0x7f0000000000)="1c0000001a005f0414f9f40700090400810080ffffff0000585b0000", 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r15, &(0x7f0000000100)="422d84bf295766581bad708517e628ecb440e17ec0be069b700f6df82ccf814e0d971b81d538a7d5480bd371c7", &(0x7f0000000140)=@tcp6=r17}, 0x20) r18 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0), 0x4) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r18, 0xfffffffd, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000800000500000000130e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018670000030000000000000008000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0xa9a, 0x8a, &(0x7f0000000440)=""/138, 0x41100, 0x20, '\x00', r11, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x5, 0x80000000, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000008c0)=[r13, r14, 0xffffffffffffffff, r15, 0xffffffffffffffff, r16, 0xffffffffffffffff, r19], &(0x7f0000000900)=[{0x3, 0x3, 0x3}, {0x5, 0x5, 0x5, 0x8}, {0x4, 0x5, 0x1, 0x2}], 0x10, 0x8}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000020000000000000008000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff070000850000000600000018120000", @ANYRES32=r2, @ANYBLOB="0000000040000000b70300000000000085006f740c000000b700000000009af80000000000000000000000000000000003290400fcffffff501b020001000000180000000e0000000000000000800000853506000300ffff9500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, &(0x7f00000003c0)=""/172, 0x41100, 0x14, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x0, 0x10, &(0x7f00000004c0)={0x1, 0x3, 0x8001, 0x81}, 0x0, 0x3b1, r10, 0x0, &(0x7f0000000500)=[0x1, r1, r16, r1, r1, r1, r1], &(0x7f0000000540)=[{0x4, 0x3, 0xf, 0x1}, {0x3, 0x5, 0x3, 0xa}], 0x10, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001b000000000000000040000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000019000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="900000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000600012800b0001006772657461700000500002800800140006000000050016000200000006000e0000000000060018000400000004001200050013"], 0x90}, 0x1, 0x0, 0x0, 0x1080}, 0x40408c4) 0s ago: executing program 4 (id=2092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2, 0x17292}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x12}]}}}]}, 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) setsockopt$sock_int(r6, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r6, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r7}}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): ous mode [ 117.434196][ T9] IPVS: starting estimator thread 0... [ 117.445401][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 117.472331][ T8107] pimreg: entered allmulticast mode [ 117.486707][ T8114] pimreg: left allmulticast mode [ 117.534164][ T8112] IPVS: using max 20 ests per chain, 48000 per kthread [ 117.605352][ T8121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 117.678675][ T2544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 117.701767][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 117.711447][ T8126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.748'. [ 117.720844][ T8128] netlink: 'syz.4.750': attribute type 8 has an invalid length. [ 117.720869][ T8128] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.750'. [ 117.749771][ T8131] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 118.588396][ T8188] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 119.043240][ T8206] xt_bpf: check failed: parse error [ 119.317602][ T8233] ipt_ECN: cannot use operation on non-tcp rule [ 119.320055][ T8234] netlink: 'syz.1.779': attribute type 1 has an invalid length. [ 119.346220][ T5238] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.592233][ T7667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.499927][ T8299] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 120.600514][ T8299] bridge0: entered allmulticast mode [ 120.857436][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.944583][ T8321] __nla_validate_parse: 9 callbacks suppressed [ 120.944604][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.800'. [ 121.143807][ T8333] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 121.181328][ T8333] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 121.425933][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 121.475350][ T8358] trusted_key: syz.0.810 sent an empty control message without MSG_MORE. [ 121.567503][ T8366] sctp: [Deprecated]: syz.2.813 (pid 8366) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.567503][ T8366] Use struct sctp_sack_info instead [ 121.780567][ T8384] syzkaller0: entered allmulticast mode [ 122.054586][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.062071][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.105004][ T8394] bridge0: entered allmulticast mode [ 122.143866][ T8404] sch_tbf: burst 5 is lower than device team0 mtu (1514) ! [ 122.293612][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.3.827'. [ 122.464341][ T8420] netlink: 277 bytes leftover after parsing attributes in process `syz.3.830'. [ 122.909662][ T8429] netlink: 68 bytes leftover after parsing attributes in process `syz.0.832'. [ 122.964796][ T8437] netlink: 'syz.2.831': attribute type 3 has an invalid length. [ 123.050734][ T8408] xt_recent: Unsupported userspace flags (00000042) [ 123.133626][ T8437] netlink: 'syz.2.831': attribute type 3 has an invalid length. [ 123.218945][ T8451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.836'. [ 123.277962][ T8452] netlink: 'syz.0.837': attribute type 3 has an invalid length. [ 123.306102][ T8452] netlink: 666 bytes leftover after parsing attributes in process `syz.0.837'. [ 123.353831][ T52] tipc: Subscription rejected, illegal request [ 123.382833][ T8455] veth0_to_batadv: entered promiscuous mode [ 123.409403][ T8455] veth0_to_batadv: entered allmulticast mode [ 123.427589][ T7656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 123.599851][ T8473] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 123.620152][ T8468] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.698591][ T8483] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.829441][ T8491] netlink: 64 bytes leftover after parsing attributes in process `syz.2.848'. [ 123.870939][ T8493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.849'. [ 124.032853][ T8503] bridge1: entered promiscuous mode [ 124.038685][ T8503] bridge1: entered allmulticast mode [ 124.052590][ T8503] team0: Port device bridge1 added [ 124.061085][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.855'. [ 124.217733][ T8518] netlink: 'syz.3.858': attribute type 4 has an invalid length. [ 124.239875][ T8518] ipt_REJECT: ECHOREPLY no longer supported. [ 124.473792][ T8529] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 125.116340][ T8588] netlink: 'syz.1.882': attribute type 8 has an invalid length. [ 125.332476][ T8606] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 125.354507][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 125.434244][ T8609] nlmon0: Master is either lo or non-ether device [ 126.037595][ T8652] __nla_validate_parse: 15 callbacks suppressed [ 126.037616][ T8652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.900'. [ 126.083184][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.901'. [ 126.205892][ T8657] xt_cgroup: path and classid specified [ 126.253735][ T8657] netlink: 'syz.4.903': attribute type 1 has an invalid length. [ 126.313749][ T8666] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 126.344497][ T8668] netlink: 292 bytes leftover after parsing attributes in process `syz.0.907'. [ 126.375182][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.907'. [ 126.408450][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.907'. [ 126.424310][ T8668] netlink: 68 bytes leftover after parsing attributes in process `syz.0.907'. [ 126.472929][ T8668] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 126.485237][ T8668] netlink: 224 bytes leftover after parsing attributes in process `syz.0.907'. [ 126.523296][ T8676] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 126.639824][ T8686] netlink: 76 bytes leftover after parsing attributes in process `syz.2.914'. [ 126.655151][ T8686] ÊügáG: entered promiscuous mode [ 126.801336][ T8690] netlink: 596 bytes leftover after parsing attributes in process `syz.1.915'. [ 126.900013][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.915'. [ 126.983668][ T8701] ipvlan2: entered allmulticast mode [ 127.010104][ T8701] veth0_vlan: entered allmulticast mode [ 127.273060][ T8719] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.282004][ T8719] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.290871][ T8719] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.300202][ T8719] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.325486][ T8719] vxlan0: entered promiscuous mode [ 127.771458][ T8736] tun1: tun_chr_ioctl cmd 1074025681 [ 127.986499][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.241655][ T8770] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 128.277523][ T8770] bond5: entered promiscuous mode [ 128.330346][ T8770] lo: entered promiscuous mode [ 128.370724][ T8770] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 128.416032][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.427023][ T8770] bond5: (slave lo): making interface the new active one [ 128.438509][ T8770] bond5: (slave lo): Enslaving as an active interface with an up link [ 128.464451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.545311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.565318][ T7667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.689852][ T8800] netlink: 'syz.3.944': attribute type 10 has an invalid length. [ 129.025989][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.093846][ T8822] xt_hashlimit: max too large, truncated to 1048576 [ 129.198242][ T8835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.207033][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 129.217112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.305816][ T8841] netlink: 'syz.4.958': attribute type 10 has an invalid length. [ 129.370426][ T8841] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 129.839344][ T8870] tipc: Started in network mode [ 129.861400][ T8870] tipc: Node identity ac1414aa, cluster identity 4711 [ 129.930819][ T8870] tipc: Enabled bearer , priority 10 [ 130.040626][ T8880] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 130.224415][ T5238] Bluetooth: hci5: command tx timeout [ 130.900711][ T8937] net_ratelimit: 8 callbacks suppressed [ 130.900731][ T8937] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 130.925061][ T941] tipc: Node number set to 2886997162 [ 131.042370][ T8945] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 131.106683][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 131.107004][ T2544] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.128033][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.145785][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.159540][ T5282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.256446][ T8955] __nla_validate_parse: 13 callbacks suppressed [ 131.256464][ T8955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.995'. [ 131.301105][ T8955] netlink: 40 bytes leftover after parsing attributes in process `syz.2.995'. [ 131.318942][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 131.403183][ T8969] dccp_v6_rcv: dropped packet with invalid checksum [ 131.472706][ T8963] can: request_module (can-proto-0) failed. [ 131.704776][ T8984] xt_connbytes: Forcing CT accounting to be enabled [ 131.711417][ T8984] x_tables: ip_tables: osf match: only valid for protocol 6 [ 131.766341][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1006'. [ 131.807811][ T8984] ip6tnl0: mtu less than device minimum [ 132.019625][ T9008] netlink: 'syz.3.1011': attribute type 10 has an invalid length. [ 132.082339][ T9008] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 132.144637][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.150512][ T9016] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1014'. [ 132.304243][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.574683][ T9055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.766516][ T9067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1027'. [ 132.781770][ T9067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1027'. [ 132.942285][ T9084] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1031'. [ 133.031643][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.039519][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.719561][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1046'. [ 133.911507][ T9152] netlink: 'syz.3.1050': attribute type 5 has an invalid length. [ 133.999273][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1053'. [ 134.043644][ T9162] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 134.138951][ T9173] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 134.305384][ T7656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 134.542450][ T9200] delete_channel: no stack [ 134.600036][ T9199] lo speed is unknown, defaulting to 1000 [ 134.632917][ T9199] lo speed is unknown, defaulting to 1000 [ 134.648653][ T9199] lo speed is unknown, defaulting to 1000 [ 134.928915][ T5351] lo speed is unknown, defaulting to 1000 [ 134.935295][ T9199] infiniband syz0: set active [ 134.951585][ T9199] infiniband syz0: added lo [ 135.057551][ T9199] RDS/IB: syz0: added [ 135.073309][ T9199] smc: adding ib device syz0 with port count 1 [ 135.080815][ T9199] smc: ib device syz0 port 1 has pnetid [ 135.091503][ T5351] lo speed is unknown, defaulting to 1000 [ 135.127473][ T9199] lo speed is unknown, defaulting to 1000 [ 135.151091][ T9229] netlink: 'syz.2.1073': attribute type 21 has an invalid length. [ 135.179771][ T9229] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.640535][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.660637][ T9199] lo speed is unknown, defaulting to 1000 [ 135.669727][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.677068][ T9256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.962213][ T5351] IPVS: starting estimator thread 0... [ 136.070348][ T9274] IPVS: using max 18 ests per chain, 43200 per kthread [ 136.088108][ T9199] lo speed is unknown, defaulting to 1000 [ 136.274036][ C1] hrtimer: interrupt took 5415641 ns [ 136.306507][ T7656] net_ratelimit: 11 callbacks suppressed [ 136.306529][ T7656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.327258][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.342142][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.764862][ T9199] lo speed is unknown, defaulting to 1000 [ 136.862826][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.885793][ T7656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 136.904321][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.941392][ T9293] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.046805][ T9292] __nla_validate_parse: 11 callbacks suppressed [ 137.046840][ T9292] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1091'. [ 137.140527][ T9292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.162497][ T9292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.173637][ T9292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.206012][ T9292] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.224860][ T9302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 137.250358][ T9302] netlink: 'syz.2.1094': attribute type 15 has an invalid length. [ 137.284192][ T9199] lo speed is unknown, defaulting to 1000 [ 137.640640][ T9317] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1098'. [ 137.832385][ T9199] lo speed is unknown, defaulting to 1000 [ 138.081810][ T9333] netlink: 'syz.0.1104': attribute type 3 has an invalid length. [ 138.106157][ T9333] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1104'. [ 138.442691][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1108'. [ 138.576813][ T9350] netlink: 'syz.0.1110': attribute type 11 has an invalid length. [ 139.408144][ T9377] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1116'. [ 139.470237][ T9377] netlink: 'syz.2.1116': attribute type 9 has an invalid length. [ 139.531529][ T9377] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1116'. [ 139.533607][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 139.565756][ T9377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1116'. [ 139.622382][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1120'. [ 140.074997][ T7656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 140.182810][ T9402] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.194879][ T9402] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.208796][ T9402] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.220322][ T9402] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.614901][ T9423] netlink: 'syz.2.1128': attribute type 43 has an invalid length. [ 140.734301][ T9426] Bluetooth: hci3: invalid len left 7, exp >= 43 [ 140.911971][ T9431] lo speed is unknown, defaulting to 1000 [ 141.114831][ T9440] bridge0: port 3(syz_tun) entered disabled state [ 141.236492][ T9440] syz_tun (unregistering): left allmulticast mode [ 141.266957][ T9440] syz_tun (unregistering): left promiscuous mode [ 141.276587][ T9440] bridge0: port 3(syz_tun) entered disabled state [ 141.585353][ T25] net_ratelimit: 175 callbacks suppressed [ 141.585378][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.685864][ T9458] tipc: Enabling of bearer rejected, failed to enable media [ 141.890110][ T9462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.932959][ T9462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.959719][ T9462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.982050][ T9462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.996296][ T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.012537][ T5281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.021976][ T5281] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.043072][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.313128][ T9474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.487812][ T9478] rdma_op ffff8880647f19f0 conn xmit_rdma 0000000000000000 [ 142.628755][ T7656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 143.648895][ T9521] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.884851][ T9531] netlink: 'syz.3.1172': attribute type 2 has an invalid length. [ 143.926314][ T9531] openvswitch: : Dropping previously announced user features [ 144.252508][ T9544] pim6reg1: entered promiscuous mode [ 144.296944][ T9544] pim6reg1: entered allmulticast mode [ 144.343724][ T9546] __nla_validate_parse: 3 callbacks suppressed [ 144.343743][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1178'. [ 144.611279][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'. [ 145.187206][ T9584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 145.762051][ T9610] can: request_module (can-proto-0) failed. [ 145.824484][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 146.407541][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.448631][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.465283][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.477326][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.489402][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.497885][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.568381][ T9623] lo speed is unknown, defaulting to 1000 [ 147.043054][ T9623] chnl_net:caif_netlink_parms(): no params data found [ 147.266820][ T25] net_ratelimit: 19 callbacks suppressed [ 147.266843][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.394664][ T9623] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.402086][ T9623] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.441896][ T9623] bridge_slave_0: entered allmulticast mode [ 147.463056][ T9623] bridge_slave_0: entered promiscuous mode [ 147.484709][ T9623] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.510349][ T9623] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.526848][ T9623] bridge_slave_1: entered allmulticast mode [ 147.547295][ T9623] bridge_slave_1: entered promiscuous mode [ 147.662931][ T9623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.702932][ T9623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.821738][ T9623] team0: Port device team_slave_0 added [ 147.847798][ T9623] team0: Port device team_slave_1 added [ 147.867709][ T9683] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 147.972280][ T9688] netlink: 'syz.4.1218': attribute type 27 has an invalid length. [ 147.994251][ T9688] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1218'. [ 148.017787][ T9688] A link change request failed with some changes committed already. Interface ÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 148.043147][ T9623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.053712][ T9623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.081972][ T9623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.104527][ T9688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'. [ 148.117294][ T9623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.131773][ T9623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.183561][ T9623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.215525][ T9691] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1218'. [ 148.226749][ T9702] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1217'. [ 148.252373][ T9701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 148.263055][ T9702] sctp: [Deprecated]: syz.3.1217 (pid 9702) Use of int in max_burst socket option deprecated. [ 148.263055][ T9702] Use struct sctp_assoc_value instead [ 148.304688][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.328518][ T9701] netlink: 'syz.0.1220': attribute type 4 has an invalid length. [ 148.369867][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 148.397135][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.410067][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 148.422788][ T9623] hsr_slave_0: entered promiscuous mode [ 148.436238][ T9623] hsr_slave_1: entered promiscuous mode [ 148.545040][ T5238] Bluetooth: hci5: command tx timeout [ 148.625135][ T9713] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1224'. [ 148.681515][ T9716] sctp: [Deprecated]: syz.1.1225 (pid 9716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.681515][ T9716] Use struct sctp_sack_info instead [ 148.738624][ T9623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.760975][ T9623] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.812341][ T9718] IPv6: NLM_F_REPLACE set, but no existing node found! [ 148.829993][ T9718] netlink: 'syz.0.1226': attribute type 6 has an invalid length. [ 148.942873][ T9623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.957092][ T9623] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.981208][ T9720] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 149.029781][ T941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.107228][ T9623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.131284][ T9623] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.283224][ T9623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 149.313380][ T9623] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.352180][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.448604][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1233'. [ 149.475081][ T9749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1233'. [ 149.648152][ T9757] xt_hashlimit: max too large, truncated to 1048576 [ 149.665408][ T5351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.789572][ T9760] syzkaller0: entered promiscuous mode [ 149.796888][ T9760] syzkaller0: entered allmulticast mode [ 149.838062][ T9623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 150.073716][ T9769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1240'. [ 150.086226][ T9623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 150.391620][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.630233][ T5238] Bluetooth: hci5: command 0x041b tx timeout [ 151.430119][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.591231][ T7656] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.466278][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.641073][ T9777] netlink: 'syz.1.1242': attribute type 1 has an invalid length. [ 152.650518][ T9623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.705357][ T9623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.714878][ T54] Bluetooth: hci5: command 0x041b tx timeout [ 152.829891][ T9782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1244'. [ 152.849004][ T9788] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 152.860595][ T9788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.990203][ T9623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.048906][ T9623] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.084061][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.091284][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.128221][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.135474][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.226635][ T9804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1252'. [ 153.262458][ T9807] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 153.280248][ T9807] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 153.289644][ T9807] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.1253'. [ 153.301309][ T9807] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 153.469388][ T9623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.506533][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.536694][ T9623] veth0_vlan: entered promiscuous mode [ 153.542427][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 153.552364][ T9623] veth1_vlan: entered promiscuous mode [ 153.613204][ T9623] veth0_macvtap: entered promiscuous mode [ 153.629722][ T9623] veth1_macvtap: entered promiscuous mode [ 153.659569][ T9818] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 153.695393][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.717291][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.748581][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.775603][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.791676][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.813263][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.845296][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.868873][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.881323][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.896879][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.911038][ T9829] netlink: 'syz.3.1259': attribute type 20 has an invalid length. [ 153.921324][ T9623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.996415][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.032314][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.074240][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.106752][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.120382][ T9836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1262'. [ 154.141074][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.151376][ T7667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.163367][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.187214][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.212845][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.233468][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.246330][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.257401][ T9623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.268040][ T9623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.282261][ T9623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.295460][ T9846] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1263'. [ 154.358858][ T9623] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.396131][ T9623] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.419512][ T9852] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.428471][ T9623] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.429990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.461133][ T9623] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.546765][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.667031][ T9865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.676338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.705019][ T7656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.712903][ T7656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.784999][ T54] Bluetooth: hci5: command 0x041b tx timeout [ 154.818608][ T9868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.835177][ T7656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.854903][ T7656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.959906][ T9871] infiniband syz0: set down [ 155.057327][ T9879] netlink: 'syz.0.1273': attribute type 1 has an invalid length. [ 155.131753][ T9874] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:e000:0002 [ 155.171209][ T9874] tipc: Enabled bearer , priority 10 [ 155.182782][ T5281] lo speed is unknown, defaulting to 1000 [ 155.265793][ T9883] netlink: 'syz.3.1274': attribute type 3 has an invalid length. [ 155.363688][ T5281] lo speed is unknown, defaulting to 1000 [ 155.600344][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.743340][ T9902] xt_CT: No such helper "syz1" [ 156.098568][ T9945] lo speed is unknown, defaulting to 1000 [ 156.739644][ T9984] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.761009][ T9984] netlink: 183228 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.777768][ T9984] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.815727][ T9984] netlink: 183228 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.853000][ T9984] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.870541][ T9984] netlink: 183228 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.892855][ T9984] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.917334][ T9984] netlink: 183228 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.935006][ T9984] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1298'. [ 156.955032][ T9984] netlink: 183228 bytes leftover after parsing attributes in process `syz.4.1298'. [ 157.345433][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 157.412855][T10001] netlink: 'syz.1.1301': attribute type 3 has an invalid length. [ 157.443612][T10001] netlink: 'syz.1.1301': attribute type 2 has an invalid length. [ 157.542162][T10005] batadv_slave_1: default FDB implementation only supports local addresses [ 157.675103][ T25] net_ratelimit: 17 callbacks suppressed [ 157.675132][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.920562][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.955230][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.980951][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.024813][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.077877][T10012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.163242][T10011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.163974][ T2544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.225192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.247093][T10023] batadv0: entered promiscuous mode [ 158.421491][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.436414][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.446674][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.459735][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.477062][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 158.486616][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.622095][T10032] lo speed is unknown, defaulting to 1000 [ 158.706717][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.936165][ T2544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.975235][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.033268][T10065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.093890][ T2544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.219509][ T2544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.265057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.285313][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.614679][T10032] chnl_net:caif_netlink_parms(): no params data found [ 159.682833][ T2544] bridge_slave_1: left allmulticast mode [ 159.700075][ T2544] bridge_slave_1: left promiscuous mode [ 159.716364][ T2544] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.780323][ T2544] bridge_slave_0: left allmulticast mode [ 159.810136][ T2544] bridge_slave_0: left promiscuous mode [ 159.826045][ T2544] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.998148][T10097] netlink: 'syz.4.1328': attribute type 9 has an invalid length. [ 160.578306][ T54] Bluetooth: hci5: command tx timeout [ 160.624352][T10094] syz.3.1327 (10094) used greatest stack depth: 18320 bytes left [ 160.794784][ T2544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.814593][ T2544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.836455][ T2544] bond0 (unregistering): Released all slaves [ 160.921030][T10096] gtp0: entered promiscuous mode [ 160.939916][T10096] gtp0: entered allmulticast mode [ 161.834613][T10032] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.858079][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.872361][T10032] bridge_slave_0: entered allmulticast mode [ 161.908287][T10032] bridge_slave_0: entered promiscuous mode [ 161.920259][T10032] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.935153][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.945336][T10032] bridge_slave_1: entered allmulticast mode [ 161.968831][T10032] bridge_slave_1: entered promiscuous mode [ 162.162617][T10145] __nla_validate_parse: 128 callbacks suppressed [ 162.162639][T10145] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1340'. [ 162.195643][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'. [ 162.219627][ T2544] hsr_slave_0: left promiscuous mode [ 162.266194][ T2544] hsr_slave_1: left promiscuous mode [ 162.285537][ T2544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.307342][ T2544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.327831][ T2544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.341691][ T2544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.423655][ T2544] veth1_macvtap: left promiscuous mode [ 162.426391][T10150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1341'. [ 162.435464][ T2544] veth0_macvtap: left promiscuous mode [ 162.462306][ T2544] veth1_vlan: left promiscuous mode [ 162.466418][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.471238][ T2544] veth0_vlan: left promiscuous mode [ 162.585616][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 162.627262][ T54] Bluetooth: hci5: command tx timeout [ 162.865014][ T5246] net_ratelimit: 7 callbacks suppressed [ 162.865034][ T5246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.442089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.582482][ T2544] team0 (unregistering): Port device team_slave_1 removed [ 163.678463][ T2544] team0 (unregistering): Port device team_slave_0 removed [ 163.754218][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.922870][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.473343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.508676][T10032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.541437][T10149] netlink: 'syz.4.1342': attribute type 49 has an invalid length. [ 164.569141][T10161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 164.646657][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1345'. [ 164.703783][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 164.724622][ T54] Bluetooth: hci5: command tx timeout [ 164.873837][T10032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.919830][T10175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1349'. [ 164.944992][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.034846][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.064842][T10183] xt_bpf: check failed: parse error [ 165.103536][T10183] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1351'. [ 165.130925][T10032] team0: Port device team_slave_0 added [ 165.188656][T10185] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 165.201472][T10032] team0: Port device team_slave_1 added [ 165.391207][T10183] ÊügáG: entered promiscuous mode [ 165.488263][T10032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.505062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.511136][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.555987][T10032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.575824][T10032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.586702][T10032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.619643][T10032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.686308][T10202] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1356'. [ 165.821240][T10032] hsr_slave_0: entered promiscuous mode [ 165.831972][T10032] hsr_slave_1: entered promiscuous mode [ 165.984580][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.098774][T10212] netlink: 'syz.1.1359': attribute type 1 has an invalid length. [ 166.129583][T10212] netlink: 'syz.1.1359': attribute type 4 has an invalid length. [ 166.176421][T10216] ipt_ECN: cannot use operation on non-tcp rule [ 166.554489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.650789][T10032] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 166.671480][T10032] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 166.707573][T10032] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 166.731546][T10233] pim6reg1: entered promiscuous mode [ 166.743130][T10233] pim6reg1: entered allmulticast mode [ 166.755555][T10032] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.785484][ T54] Bluetooth: hci5: command tx timeout [ 167.025487][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.121667][T10032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.194776][T10032] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.227391][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.234695][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.275985][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.283457][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.438478][T10032] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.568859][T10258] __nla_validate_parse: 5 callbacks suppressed [ 167.568884][T10258] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1373'. [ 167.587895][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.629854][T10258] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1373'. [ 167.706285][T10260] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1374'. [ 167.909520][T10270] netlink: 'syz.0.1376': attribute type 1 has an invalid length. [ 167.944899][T10032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.959607][T10270] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.1376'. [ 168.016356][T10274] xt_ecn: cannot match TCP bits for non-tcp packets [ 168.033724][T10274] netlink: 'syz.1.1377': attribute type 21 has an invalid length. [ 168.066298][T10274] netlink: 'syz.1.1377': attribute type 20 has an invalid length. [ 168.067820][ T25] net_ratelimit: 2 callbacks suppressed [ 168.067842][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.107077][T10274] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.219716][T10285] netlink: 'syz.0.1380': attribute type 9 has an invalid length. [ 168.233719][T10032] veth0_vlan: entered promiscuous mode [ 168.240632][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.264301][T10285] netlink: 'syz.0.1380': attribute type 7 has an invalid length. [ 168.273001][T10285] netlink: 'syz.0.1380': attribute type 8 has an invalid length. [ 168.316026][T10032] veth1_vlan: entered promiscuous mode [ 168.360252][T10291] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 168.433671][T10032] veth0_macvtap: entered promiscuous mode [ 168.501720][T10032] veth1_macvtap: entered promiscuous mode [ 168.559992][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.612116][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.625204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.643116][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.665010][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.675912][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.704436][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.724905][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.764101][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.782342][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.796223][T10316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1388'. [ 168.815589][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.830230][T10032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.863476][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.883932][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.896491][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.918497][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.929910][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.942016][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.956797][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.968820][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.979496][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.990918][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.004274][T10032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.021063][T10032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.043690][T10032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.052281][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 169.078759][T10325] netlink: 'syz.4.1389': attribute type 4 has an invalid length. [ 169.098453][T10313] lo speed is unknown, defaulting to 1000 [ 169.101249][T10032] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.113673][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.123479][T10032] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.141034][T10032] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.154649][T10032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.355566][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.365511][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.445329][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.453887][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.607610][T10328] lo speed is unknown, defaulting to 1000 [ 169.664577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.969872][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1397'. [ 170.060281][T10351] tipc: Started in network mode [ 170.074591][T10351] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 170.085051][T10351] tipc: Enabling of bearer rejected, failed to enable media [ 170.150028][ T61] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.162015][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.351623][T10361] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 170.403765][T10363] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20004 [ 170.556074][T10374] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20002 [ 170.714377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.790922][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.871400][T10381] veth0_vlan: entered allmulticast mode [ 170.991906][T10388] veth0_vlan: left promiscuous mode [ 171.006254][T10388] veth0_vlan: entered promiscuous mode [ 171.324988][T10399] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1413'. [ 171.570166][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 171.647837][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1416'. [ 171.661559][T10384] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 171.768767][T10426] IPVS: stopping backup sync thread 8131 ... [ 172.058545][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.276941][T10443] smc: removing ib device syz0 [ 172.546191][T10446] netlink: 'syz.1.1426': attribute type 3 has an invalid length. [ 172.663636][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 172.683901][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 172.700572][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 172.719808][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 172.740721][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 172.748838][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 172.833276][T10459] netlink: 'syz.1.1430': attribute type 2 has an invalid length. [ 172.842900][T10459] __nla_validate_parse: 3 callbacks suppressed [ 172.842920][T10459] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1430'. [ 172.867295][T10459] netlink: 'syz.1.1430': attribute type 12 has an invalid length. [ 172.876228][T10459] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1430'. [ 173.128143][T10463] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.1431'. [ 173.265405][ T5342] net_ratelimit: 4 callbacks suppressed [ 173.265427][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.346716][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.475499][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.786725][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.824725][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.886445][T10480] netlink: 'syz.0.1434': attribute type 21 has an invalid length. [ 174.016871][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.308071][T10452] chnl_net:caif_netlink_parms(): no params data found [ 174.314815][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.485033][ T61] bridge_slave_1: left allmulticast mode [ 174.490767][ T61] bridge_slave_1: left promiscuous mode [ 174.508365][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.550621][ T61] bridge_slave_0: left allmulticast mode [ 174.571462][ T61] bridge_slave_0: left promiscuous mode [ 174.611770][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.717330][T10512] Bluetooth: MGMT ver 1.23 [ 174.864519][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.872953][ T5238] Bluetooth: hci5: command tx timeout [ 175.366111][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.485164][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.499312][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.512080][ T61] bond0 (unregistering): Released all slaves [ 175.628562][T10519] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.683022][T10542] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1448'. [ 175.904659][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.007117][T10452] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.074475][T10452] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.081899][T10452] bridge_slave_0: entered allmulticast mode [ 176.135825][T10452] bridge_slave_0: entered promiscuous mode [ 176.166427][T10452] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.173618][T10452] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.189809][T10452] bridge_slave_1: entered allmulticast mode [ 176.200344][T10452] bridge_slave_1: entered promiscuous mode [ 176.282158][T10572] netlink: 'syz.0.1458': attribute type 4 has an invalid length. [ 176.315363][T10572] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1458'. [ 176.339691][T10572] netlink: 'syz.0.1458': attribute type 3 has an invalid length. [ 176.349484][T10572] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1458'. [ 176.365829][T10578] netlink: 'syz.0.1458': attribute type 4 has an invalid length. [ 176.390529][T10578] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1458'. [ 176.392030][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.421617][T10584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1459'. [ 176.474209][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 176.486513][T10588] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1462'. [ 176.501068][T10452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.510726][T10588] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 176.528789][T10452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.547299][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.565873][ T61] hsr_slave_0: left promiscuous mode [ 176.572673][ T61] hsr_slave_1: left promiscuous mode [ 176.581664][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.590521][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.607414][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.611850][T10591] xt_ecn: cannot match TCP bits for non-tcp packets [ 176.621003][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.625099][T10590] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 176.661959][ T61] veth1_macvtap: left promiscuous mode [ 176.672759][ T61] veth0_macvtap: left promiscuous mode [ 176.679971][ T61] veth1_vlan: left promiscuous mode [ 176.689423][ T61] veth0_vlan: left promiscuous mode [ 176.945661][ T5238] Bluetooth: hci5: command tx timeout [ 177.439706][ T61] team0 (unregistering): Port device team_slave_1 removed [ 177.549621][ T61] team0 (unregistering): Port device team_slave_0 removed [ 178.230383][T10581] pim6reg1: entered allmulticast mode [ 178.286899][T10607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1466'. [ 178.333794][T10452] team0: Port device team_slave_0 added [ 178.346990][T10452] team0: Port device team_slave_1 added [ 178.466585][T10452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.473800][ T5246] net_ratelimit: 4 callbacks suppressed [ 178.473815][ T5246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.490645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.513382][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.612506][T10452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.625378][ T5238] Bluetooth: hci0: command tx timeout [ 178.639628][T10452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.683500][T10452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.737784][T10452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.839154][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.847909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.923283][T10636] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1474'. [ 179.024374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.028505][T10452] hsr_slave_0: entered promiscuous mode [ 179.033708][ T5238] Bluetooth: hci5: command tx timeout [ 179.100740][T10452] hsr_slave_1: entered promiscuous mode [ 179.105891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.216766][T10642] netlink: 'syz.0.1477': attribute type 10 has an invalid length. [ 179.245265][T10642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1477'. [ 179.271953][T10654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1480'. [ 179.272501][T10642] team0: entered promiscuous mode [ 179.312621][T10642] team_slave_1: entered promiscuous mode [ 179.329340][T10642] team0: entered allmulticast mode [ 179.344340][T10642] team_slave_1: entered allmulticast mode [ 179.355148][T10642] bridge0: port 3(team0) entered blocking state [ 179.372466][T10642] bridge0: port 3(team0) entered disabled state [ 179.505188][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.876066][T10680] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1488'. [ 180.064728][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.160123][T10685] IPv6: Can't replace route, no match found [ 180.347515][T10691] xt_policy: too many policy elements [ 180.359925][T10691] xt_policy: too many policy elements [ 180.443967][T10701] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.1494'. [ 180.458795][T10702] netlink: 300 bytes leftover after parsing attributes in process `syz.1.1492'. [ 180.472286][T10701] netlink: 'syz.0.1494': attribute type 1 has an invalid length. [ 180.485273][T10702] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1492'. [ 180.498533][T10701] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1494'. [ 180.513663][T10452] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.548356][ T5342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.551631][T10452] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.591096][T10452] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.610004][T10452] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.746376][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1496'. [ 180.802381][T10708] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.905497][T10452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.962783][T10452] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.016007][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.023377][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.077648][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.085225][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.114431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.123259][ T5249] Bluetooth: hci5: command tx timeout [ 181.188230][ T5249] Bluetooth: hci2: command 0x0406 tx timeout [ 181.196176][ T5249] Bluetooth: hci3: command 0x0406 tx timeout [ 181.202296][ T5243] Bluetooth: hci1: command 0x0406 tx timeout [ 181.461537][T10452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.524793][T10746] Cannot find set identified by id 0 to match [ 181.570411][T10452] veth0_vlan: entered promiscuous mode [ 181.605964][T10452] veth1_vlan: entered promiscuous mode [ 181.687534][T10452] veth0_macvtap: entered promiscuous mode [ 181.712325][T10452] veth1_macvtap: entered promiscuous mode [ 181.760456][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.784156][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.797785][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.808762][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.818819][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.844077][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.865131][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.888631][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.913540][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.944214][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.968468][T10452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.037002][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.086034][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.119647][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.142064][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.170427][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.194406][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.218891][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.257583][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.282505][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.295498][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.309022][T10452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.320516][T10452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.333559][T10452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.390225][T10452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.408663][T10452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.421325][T10452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.444275][T10452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.506425][T10782] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 182.508883][T10790] ebt_among: dst integrity fail: 101 [ 182.529253][T10793] netlink: 'syz.1.1516': attribute type 8 has an invalid length. [ 182.531242][T10789] ebt_among: dst integrity fail: 101 [ 182.793467][T10801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.813493][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.834946][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.912496][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.929878][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.161000][T10824] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 183.170884][T10824] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 183.198430][T10827] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 183.222192][T10827] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 183.373394][T10836] __nla_validate_parse: 11 callbacks suppressed [ 183.373413][T10836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 183.399816][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1530'. [ 183.510867][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 183.668653][ T25] net_ratelimit: 11 callbacks suppressed [ 183.668673][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.724437][T10853] netlink: 'syz.3.1536': attribute type 3 has an invalid length. [ 183.732360][T10853] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1536'. [ 183.778846][T10854] netdevsim netdevsim4 ÿÿÿÿ: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.806891][T10854] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.834457][T10854] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.863927][T10854] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 183.883872][T10854] geneve2: entered promiscuous mode [ 183.890022][T10854] geneve2: entered allmulticast mode [ 183.902577][T10854] netdevsim netdevsim4 ÿÿÿÿ: unset [1, 1] type 2 family 0 port 20000 - 0 [ 183.941921][T10854] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 183.953760][T10854] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 183.995495][T10854] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 184.227401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.384887][T10874] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 184.437916][T10869] IPVS: stopping backup sync thread 10874 ... [ 184.512246][T10869] veth1_to_bond: entered allmulticast mode [ 184.546294][T10878] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1542'. [ 184.972935][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1546'. [ 185.032875][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1548'. [ 185.100747][T10907] xt_NFQUEUE: number of total queues is 0 [ 185.589184][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.157452][T10941] can: request_module (can-proto-4) failed. [ 186.318989][T10946] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1561'. [ 186.349263][T10949] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1563'. [ 186.434550][T10956] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1565'. [ 186.596984][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 186.608125][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 186.618397][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 186.627754][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.645642][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 186.660253][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 186.669483][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 186.739079][T10971] Bluetooth: hci3: invalid length 0, exp 2 for type 21 [ 186.776563][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.963689][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.135724][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.252972][T10999] netlink: 'syz.1.1577': attribute type 13 has an invalid length. [ 187.262222][T10999] veth0_macvtap: left promiscuous mode [ 187.270139][T10999] macvtap0: entered allmulticast mode [ 187.283131][T10999] macvtap0: refused to change device tx_queue_len [ 187.437304][T11006] syzkaller0: entered promiscuous mode [ 187.442845][T11006] syzkaller0: entered allmulticast mode [ 188.708024][ T54] Bluetooth: hci5: command tx timeout [ 189.960527][ T52] bridge_slave_1: left allmulticast mode [ 189.972453][ T52] bridge_slave_1: left promiscuous mode [ 189.985072][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.036546][ T52] bridge_slave_0: left allmulticast mode [ 190.048373][ T52] bridge_slave_0: left promiscuous mode [ 190.061852][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.079139][T11051] __nla_validate_parse: 5 callbacks suppressed [ 190.079163][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1590'. [ 190.154245][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.630287][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.643557][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.660354][ T52] bond0 (unregistering): Released all slaves [ 190.790860][ T54] Bluetooth: hci5: command tx timeout [ 191.074538][T10963] chnl_net:caif_netlink_parms(): no params data found [ 191.237811][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1603'. [ 191.386925][T11102] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1605'. [ 191.561897][ T52] hsr_slave_0: left promiscuous mode [ 191.587455][ T52] hsr_slave_1: left promiscuous mode [ 191.605333][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.616081][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.633699][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.641748][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.663978][ T52] veth1_macvtap: left promiscuous mode [ 191.676856][ T52] veth0_macvtap: left promiscuous mode [ 191.682725][ T52] veth1_vlan: left promiscuous mode [ 191.693020][ T52] veth0_vlan: left promiscuous mode [ 192.260515][ T52] team0 (unregistering): Port device team_slave_1 removed [ 192.319699][ T52] team0 (unregistering): Port device team_slave_0 removed [ 192.864637][ T54] Bluetooth: hci5: command tx timeout [ 192.880561][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.891049][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.899106][T10963] bridge_slave_0: entered allmulticast mode [ 192.906701][T10963] bridge_slave_0: entered promiscuous mode [ 192.916724][T10963] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.923961][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.932224][T10963] bridge_slave_1: entered allmulticast mode [ 192.941568][T10963] bridge_slave_1: entered promiscuous mode [ 193.120459][T10963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.150982][T10963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.303754][T10963] team0: Port device team_slave_0 added [ 193.366672][T11142] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 193.382094][T10963] team0: Port device team_slave_1 added [ 193.559682][T10963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.577340][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.645814][T10963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.663085][T10963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.672322][T10963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.701071][T10963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.728459][T11157] bridge0: port 1(team0) entered blocking state [ 193.747040][T11157] bridge0: port 1(team0) entered disabled state [ 193.756257][T11154] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.1620'. [ 193.773791][T11154] netlink: 128864 bytes leftover after parsing attributes in process `syz.0.1620'. [ 193.778447][T11169] netlink: 'syz.1.1624': attribute type 7 has an invalid length. [ 193.793063][T11169] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1624'. [ 193.810432][T11157] team0: entered allmulticast mode [ 193.816304][T11157] team_slave_0: entered allmulticast mode [ 193.822214][T11157] team_slave_1: entered allmulticast mode [ 193.832990][T11157] team0: entered promiscuous mode [ 193.838740][T11157] team_slave_0: entered promiscuous mode [ 193.853760][T11157] team_slave_1: entered promiscuous mode [ 193.862819][T11164] netlink: 'syz.0.1620': attribute type 2 has an invalid length. [ 193.891622][T11164] netlink: 'syz.0.1620': attribute type 4 has an invalid length. [ 193.913329][T11164] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1620'. [ 194.026840][T10963] hsr_slave_0: entered promiscuous mode [ 194.033441][T11181] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1627'. [ 194.033875][T10963] hsr_slave_1: entered promiscuous mode [ 194.058448][T11182] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 194.103549][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 194.187704][T11184] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1628'. [ 194.253735][T11189] tun0: tun_chr_ioctl cmd 1074025692 [ 194.470645][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.477944][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.944685][ T54] Bluetooth: hci5: command tx timeout [ 195.121250][T11226] __nla_validate_parse: 3 callbacks suppressed [ 195.121273][T11226] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1640'. [ 195.143954][T11226] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1640'. [ 195.185406][T11225] pimreg: left allmulticast mode [ 195.328336][T10963] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 195.353503][T10963] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 195.373967][T10963] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 195.405828][T10963] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 195.550046][T10963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.609407][T10963] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.631498][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1645'. [ 195.704687][T11250] netlink: 'syz.1.1643': attribute type 29 has an invalid length. [ 195.762239][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.769492][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.873579][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.880903][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.117728][T11254] syzkaller0: entered promiscuous mode [ 196.123506][T11254] syzkaller0: entered allmulticast mode [ 199.298621][T11276] netlink: 'syz.3.1651': attribute type 10 has an invalid length. [ 199.312711][T11276] bond0: (slave netdevsim0): Releasing backup interface [ 199.323663][T11276] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 199.338556][T11276] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 199.347059][T11276] team0: Port device netdevsim0 added [ 199.516703][T10963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.535887][T11290] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 199.717341][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1659'. [ 199.796286][T11303] tls_set_device_offload_rx: netdev not found [ 199.942522][T11313] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1663'. [ 200.015252][T11312] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1663'. [ 200.069166][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1665'. [ 200.132634][T10963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.312325][T10963] veth0_vlan: entered promiscuous mode [ 200.351569][T10963] veth1_vlan: entered promiscuous mode [ 200.432274][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1670'. [ 200.686936][T10963] veth0_macvtap: entered promiscuous mode [ 200.771488][T10963] veth1_macvtap: entered promiscuous mode [ 200.873343][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.899273][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.917622][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.954161][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.979131][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 200.999962][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.012795][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.024404][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.037126][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.048888][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.061487][T10963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.092408][T11362] netlink: 'syz.3.1675': attribute type 5 has an invalid length. [ 201.115021][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.153556][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.172887][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.178171][T11375] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 201.186951][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.205932][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.216560][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.226704][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.239120][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.251367][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.261892][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.276235][T10963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.288140][T10963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.302527][T10963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.315335][T10963] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.324673][T10963] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.333609][T10963] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.357888][T10963] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.407355][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 201.549430][ T7464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.569525][ T7464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.639891][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.677417][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.727746][T11395] batadv_slave_1: entered promiscuous mode [ 201.871965][T11386] batadv_slave_1: left promiscuous mode [ 202.234578][T11417] IPVS: Error joining to the multicast group [ 202.292436][T11418] veth1_to_bond: left allmulticast mode [ 202.830147][ T7464] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.920875][T11448] veth1_macvtap: left promiscuous mode [ 202.940486][T11448] macsec0: entered promiscuous mode [ 202.960747][T11448] macsec0: entered allmulticast mode [ 203.121156][ T7464] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.308316][ T7464] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.412688][ T7464] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.502483][ T7464] bridge_slave_1: left allmulticast mode [ 203.509200][ T7464] bridge_slave_1: left promiscuous mode [ 203.517933][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.527169][ T7464] bridge_slave_0: left allmulticast mode [ 203.532905][ T7464] bridge_slave_0: left promiscuous mode [ 203.539101][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.023726][ T5237] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.048844][ T5237] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.058548][ T5237] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.073608][ T5237] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.082225][ T5237] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.094790][ T5237] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.256332][ T7464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.269560][ T7464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.280753][ T7464] bond0 (unregistering): Released all slaves [ 204.316166][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1699'. [ 204.650587][T11479] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1705'. [ 204.862567][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 204.931087][T11489] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1708'. [ 204.980171][T11502] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 204.991436][T11489] netlink: 183228 bytes leftover after parsing attributes in process `syz.0.1708'. [ 205.086225][ T7464] hsr_slave_0: left promiscuous mode [ 205.093002][ T7464] hsr_slave_1: left promiscuous mode [ 205.111724][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.124271][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 205.155198][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.171136][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.185078][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.250926][ T7464] veth1_macvtap: left promiscuous mode [ 205.274993][ T7464] veth0_macvtap: left promiscuous mode [ 205.282370][ T7464] veth1_vlan: left promiscuous mode [ 205.299669][ T7464] veth0_vlan: left promiscuous mode [ 206.001937][ T7464] team0 (unregistering): Port device team_slave_1 removed [ 206.049982][ T7464] team0 (unregistering): Port device team_slave_0 removed [ 206.229897][ T5237] Bluetooth: hci5: command tx timeout [ 206.588685][T11534] IPv6: sit2: Disabled Multicast RS [ 206.597909][T11531] netlink: 'syz.4.1721': attribute type 19 has an invalid length. [ 206.620534][T11537] C: renamed from team_slave_0 (while UP) [ 206.673686][T11537] netlink: 'syz.1.1722': attribute type 1 has an invalid length. [ 206.682565][T11542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'. [ 206.692518][T11537] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.701663][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 206.720178][T11542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1723'. [ 206.771484][T11545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1724'. [ 206.879280][T11470] chnl_net:caif_netlink_parms(): no params data found [ 207.478389][T11575] netlink: 'syz.4.1731': attribute type 13 has an invalid length. [ 207.492322][T11575] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1731'. [ 207.506244][T11575] syz_tun: refused to change device tx_queue_len [ 207.512630][T11575] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 207.540185][T11470] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.564665][T11470] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.585025][T11470] bridge_slave_0: entered allmulticast mode [ 207.618189][T11470] bridge_slave_0: entered promiscuous mode [ 207.651571][T11583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1734'. [ 207.655377][T11470] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.706285][T11470] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.731836][T11470] bridge_slave_1: entered allmulticast mode [ 207.761596][T11470] bridge_slave_1: entered promiscuous mode [ 207.928522][T11470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.972526][T11470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.128350][T11470] team0: Port device team_slave_0 added [ 208.153783][T11470] team0: Port device team_slave_1 added [ 208.213730][T11606] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1739'. [ 208.245824][T11606] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1739'. [ 208.266824][T11606] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1739'. [ 208.304257][ T5237] Bluetooth: hci5: command tx timeout [ 208.332135][T11470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.349495][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.376283][T11470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.390810][T11614] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 208.391689][T11470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.406287][T11470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.442629][T11470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.492182][T11616] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1743'. [ 208.633866][T11470] hsr_slave_0: entered promiscuous mode [ 208.650656][T11470] hsr_slave_1: entered promiscuous mode [ 208.999050][T11646] batadv_slave_1: entered promiscuous mode [ 209.342638][T11470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.360698][T11470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.385371][T11470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.408294][T11470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.625588][T11673] netlink: 'syz.0.1760': attribute type 1 has an invalid length. [ 209.667793][T11470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.715756][T11470] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.743922][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.751263][ T7667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.788825][T11645] batadv_slave_1: left promiscuous mode [ 209.828872][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.836172][ T7667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.879011][T11684] delete_channel: no stack [ 209.885048][T11678] can: request_module (can-proto-0) failed. [ 209.930541][T11680] netlink: 'syz.0.1762': attribute type 4 has an invalid length. [ 210.090214][T11690] openvswitch: netlink: Message has 16 unknown bytes. [ 210.135814][T11694] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 210.236783][T11697] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 210.384322][ T5237] Bluetooth: hci5: command tx timeout [ 210.479993][T11470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.671833][T11470] veth0_vlan: entered promiscuous mode [ 210.692414][T11470] veth1_vlan: entered promiscuous mode [ 210.783811][T11470] veth0_macvtap: entered promiscuous mode [ 210.838067][T11470] veth1_macvtap: entered promiscuous mode [ 210.885461][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.915720][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.932572][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.962461][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.994554][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.021652][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.054700][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.088926][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.114924][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.138289][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.189063][T11470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.232297][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.262953][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.306814][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.346250][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.374034][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.404436][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.429012][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.452656][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.478587][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.497629][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.517022][T11470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.533778][T11470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.547039][T11470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.581168][T11470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.591453][T11470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.601640][T11470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.618581][T11470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.768749][T11762] __nla_validate_parse: 9 callbacks suppressed [ 211.768772][T11762] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.1779'. [ 211.794074][T11762] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1779'. [ 212.076031][ T7667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.095869][ T7667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.134183][T11774] netlink: 'syz.3.1782': attribute type 1 has an invalid length. [ 212.252219][T11780] netlink: 'syz.0.1785': attribute type 1 has an invalid length. [ 212.261250][T11780] netlink: 'syz.0.1785': attribute type 2 has an invalid length. [ 212.299387][T11774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 212.337792][ T7656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.348371][T11774] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1782'. [ 212.362836][T11788] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1788'. [ 212.370052][ T7656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.466081][ T5237] Bluetooth: hci5: command tx timeout [ 212.612907][T11798] sctp: [Deprecated]: syz.0.1790 (pid 11798) Use of int in max_burst socket option deprecated. [ 212.612907][T11798] Use struct sctp_assoc_value instead [ 212.634924][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 212.733878][T11800] batadv_slave_1: entered promiscuous mode [ 212.759107][T11796] batadv_slave_1: left promiscuous mode [ 212.859209][T11805] xt_CT: No such helper "snmp_trap" [ 213.049321][T11820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1798'. [ 213.128730][T11825] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1801'. [ 213.427208][T11835] xt_time: unknown flags 0x4 [ 213.738516][T11851] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.855805][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'. [ 213.868156][T11854] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 214.005132][T11860] rdma_op ffff8880295679f0 conn xmit_rdma 0000000000000000 [ 214.311668][T11879] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1816'. [ 214.325391][T11881] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 214.772504][T11907] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1827'. [ 214.778390][T11908] Bluetooth: hci3: unsupported parameter 64512 [ 214.799218][T11908] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 214.885700][ T7656] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.985462][T11914] netlink: 'syz.3.1829': attribute type 30 has an invalid length. [ 216.124621][ T7656] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.270459][ T7656] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.282921][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.302327][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.311768][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.324291][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.336197][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 216.343697][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.476473][ T7656] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.503059][T11949] netlink: 'syz.1.1840': attribute type 4 has an invalid length. [ 216.618064][T11956] netlink: 'syz.1.1840': attribute type 4 has an invalid length. [ 216.856815][T11969] __nla_validate_parse: 4 callbacks suppressed [ 216.856835][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1846'. [ 216.900994][ T7656] bridge_slave_1: left allmulticast mode [ 216.908972][ T7656] bridge_slave_1: left promiscuous mode [ 216.916117][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.940080][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 216.951035][T11975] xt_limit: Overflow, try lower: 2147483649/128 [ 216.980624][ T7656] bridge_slave_0: left allmulticast mode [ 216.988878][ T7656] bridge_slave_0: left promiscuous mode [ 216.995320][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.044881][T11982] netlink: 'syz.4.1848': attribute type 3 has an invalid length. [ 217.059910][T11982] netlink: 91672 bytes leftover after parsing attributes in process `syz.4.1848'. [ 217.480767][ T7656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.493552][ T7656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.507394][ T7656] bond0 (unregistering): Released all slaves [ 217.553291][T11983] macvlan0: entered promiscuous mode [ 217.939062][T11942] chnl_net:caif_netlink_parms(): no params data found [ 218.014927][ T7656] hsr_slave_0: left promiscuous mode [ 218.022886][ T7656] hsr_slave_1: left promiscuous mode [ 218.031612][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.041477][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.051018][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.059656][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.097025][ T7656] veth1_macvtap: left promiscuous mode [ 218.102805][ T7656] veth0_macvtap: left promiscuous mode [ 218.108653][ T7656] veth1_vlan: left promiscuous mode [ 218.114446][ T7656] veth0_vlan: left promiscuous mode [ 218.475182][ T5237] Bluetooth: hci5: command tx timeout [ 218.579023][T12019] ebtables: ebtables: counters copy to user failed while replacing table [ 218.874968][ T7656] team0 (unregistering): Port device team_slave_1 removed [ 218.929099][ T7656] team0 (unregistering): Port device team_slave_0 removed [ 219.716868][T12027] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 219.726496][T12027] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.1859'. [ 219.747803][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.765040][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.781816][T12027] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 219.784592][T11942] bridge_slave_0: entered allmulticast mode [ 219.801720][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1859'. [ 219.807933][T11942] bridge_slave_0: entered promiscuous mode [ 219.836284][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'. [ 219.945121][T11942] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.961022][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.981219][T11942] bridge_slave_1: entered allmulticast mode [ 220.013912][T11942] bridge_slave_1: entered promiscuous mode [ 220.028858][T12049] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1865'. [ 220.051571][T12049] netlink: 'syz.0.1865': attribute type 2 has an invalid length. [ 220.063516][T12030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1860'. [ 220.131941][T11942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.178626][T11942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.289550][T12057] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1869'. [ 220.311311][T11942] team0: Port device team_slave_0 added [ 220.328601][T12045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.360485][T11942] team0: Port device team_slave_1 added [ 220.482901][T12063] tipc: Enabled bearer , priority 0 [ 220.524749][T11942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.547766][ T5237] Bluetooth: hci5: command tx timeout [ 220.552301][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.658028][T11942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.709535][T11942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.729415][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.757068][T11942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.843600][T12075] netlink: 'syz.3.1873': attribute type 1 has an invalid length. [ 220.854107][T12075] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1873'. [ 220.896765][T11942] hsr_slave_0: entered promiscuous mode [ 220.926655][T11942] hsr_slave_1: entered promiscuous mode [ 220.986418][T12080] hsr0: entered promiscuous mode [ 221.099219][T12058] tipc: Disabling bearer [ 221.658004][T12107] netlink: 'syz.0.1883': attribute type 1 has an invalid length. [ 221.953021][T12133] __nla_validate_parse: 2 callbacks suppressed [ 221.953041][T12133] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1888'. [ 222.109819][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1892'. [ 222.109931][T11942] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.145410][T11942] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.178383][T11942] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.215206][T11942] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.484754][T12161] xt_limit: Overflow, try lower: 0/0 [ 222.524752][T12161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1896'. [ 222.535214][T11942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.621354][T11942] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.627031][ T5237] Bluetooth: hci5: command tx timeout [ 222.636291][T12168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1898'. [ 222.651568][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.658791][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.745342][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.752574][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.913322][T11942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.030796][T12185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'. [ 223.258736][T12195] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1907'. [ 223.321711][T12196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1906'. [ 223.332225][T12196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 223.451117][T11942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.690236][T11942] veth0_vlan: entered promiscuous mode [ 223.720068][T12224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1915'. [ 223.721161][T11942] veth1_vlan: entered promiscuous mode [ 223.855007][T11942] veth0_macvtap: entered promiscuous mode [ 223.883241][T11942] veth1_macvtap: entered promiscuous mode [ 223.940799][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.961377][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.984448][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.018529][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.041051][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.048663][T12238] netlink: 211388 bytes leftover after parsing attributes in process `syz.3.1918'. [ 224.062692][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.081365][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.093369][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.104385][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.115901][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.129693][T11942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.197708][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.227744][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.267062][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.289658][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.301094][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.320278][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.342248][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.374276][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.405432][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.424267][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.444271][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.465829][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.483908][T11942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.509148][T11942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.520849][T11942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.541157][T11942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.562408][T11942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.582311][T12254] xt_TPROXY: Can be used only with -p tcp or -p udp [ 224.705896][ T5237] Bluetooth: hci5: command tx timeout [ 224.889682][T12247] syzkaller1: entered promiscuous mode [ 224.903736][T12247] syzkaller1: entered allmulticast mode [ 225.094701][T12266] netlink: 'syz.4.1926': attribute type 3 has an invalid length. [ 225.108467][ T7667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.146981][ T7667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.221319][ T7667] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.238711][ T7667] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.867580][T12301] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 225.905179][T12301] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 226.491353][T12337] netlink: 'syz.1.1944': attribute type 2 has an invalid length. [ 226.956332][T12363] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 226.990160][T12368] netlink: 'syz.1.1955': attribute type 29 has an invalid length. [ 227.017625][T12368] netlink: 'syz.1.1955': attribute type 29 has an invalid length. [ 227.033767][T12368] netlink: 'syz.1.1955': attribute type 29 has an invalid length. [ 227.061586][T12374] netlink: 'syz.1.1955': attribute type 29 has an invalid length. [ 227.074714][T12368] netlink: 'syz.1.1955': attribute type 29 has an invalid length. [ 227.539853][T12404] netlink: 'syz.1.1967': attribute type 1 has an invalid length. [ 227.819850][ T7656] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.864882][T12421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1971'. [ 227.954356][T12420] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1971'. [ 228.557320][ T7656] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.617216][ T7656] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.719545][ T7656] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.909709][ T7656] bridge_slave_1: left allmulticast mode [ 228.924393][ T7656] bridge_slave_1: left promiscuous mode [ 228.932762][T12432] netlink: 'syz.4.1976': attribute type 1 has an invalid length. [ 228.956839][ T7656] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.969076][T12432] netlink: 3440 bytes leftover after parsing attributes in process `syz.4.1976'. [ 228.983483][ T7656] bridge_slave_0: left allmulticast mode [ 228.995976][ T7656] bridge_slave_0: left promiscuous mode [ 229.020866][ T7656] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.075935][T12437] netlink: 'syz.1.1974': attribute type 1 has an invalid length. [ 229.226007][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.238279][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.255168][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.291552][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.299777][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.310358][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 229.743731][ T7656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.758232][ T7656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.781861][ T7656] bond0 (unregistering): Released all slaves [ 230.241429][T12448] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.260523][T12448] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.279506][T12448] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.301022][T12448] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.323955][T12448] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.337459][T12448] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.347182][T12448] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.358826][T12448] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 230.375095][T12448] geneve2: entered promiscuous mode [ 230.382419][T12448] geneve2: entered allmulticast mode [ 230.459669][T12468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 230.481051][T12468] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1984'. [ 230.531475][T12471] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1985'. [ 230.543764][ T7656] hsr_slave_0: left promiscuous mode [ 230.573619][ T7656] hsr_slave_1: left promiscuous mode [ 230.593396][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.606465][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.640044][ T7656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.656127][ T7656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.690670][ T7656] veth1_macvtap: left promiscuous mode [ 230.696824][ T7656] veth0_macvtap: left promiscuous mode [ 230.703421][ T7656] veth1_vlan: left promiscuous mode [ 230.722059][ T7656] veth0_vlan: left promiscuous mode [ 231.077488][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1990'. [ 231.423099][ T7656] team0 (unregistering): Port device team_slave_1 removed [ 231.424396][ T54] Bluetooth: hci5: command tx timeout [ 231.482310][ T7656] team0 (unregistering): Port device team_slave_0 removed [ 232.311234][T12441] chnl_net:caif_netlink_parms(): no params data found [ 232.596843][T12441] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.605323][T12441] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.612820][T12441] bridge_slave_0: entered allmulticast mode [ 232.620579][T12441] bridge_slave_0: entered promiscuous mode [ 232.649665][T12441] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.674686][T12441] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.685968][T12441] bridge_slave_1: entered allmulticast mode [ 232.715609][T12441] bridge_slave_1: entered promiscuous mode [ 232.757878][T12522] wg2: entered promiscuous mode [ 232.762830][T12522] wg2: entered allmulticast mode [ 232.771161][T12524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1997'. [ 232.828406][T12441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.850259][T12441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.921751][T12441] team0: Port device team_slave_0 added [ 232.941319][T12441] team0: Port device team_slave_1 added [ 233.019875][T12441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.033617][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.060749][T12441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.076806][T12441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.084380][T12441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.112441][T12441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.129575][T12532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 233.199555][T12441] hsr_slave_0: entered promiscuous mode [ 233.225326][T12441] hsr_slave_1: entered promiscuous mode [ 233.298441][T12536] netlink: 'syz.3.2001': attribute type 1 has an invalid length. [ 233.459753][T12519] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.504429][ T54] Bluetooth: hci5: command tx timeout [ 233.697438][T12555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2006'. [ 233.887179][T12555] bond4: entered promiscuous mode [ 233.892271][T12555] bond4: entered allmulticast mode [ 233.910099][T12555] 8021q: adding VLAN 0 to HW filter on device bond4 [ 234.041594][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 234.130831][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 234.165467][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 234.182552][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 234.192902][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 234.222082][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 234.321914][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2010'. [ 234.362968][T12578] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2013'. [ 234.475293][T12441] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.479658][T12585] netlink: 'syz.4.2016': attribute type 1 has an invalid length. [ 234.517418][T12441] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.538725][T12441] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.566901][T12441] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 234.939582][T12441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.000780][T12441] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.045915][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.053101][ T7656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.140759][ T7656] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.147995][ T7656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.585094][ T54] Bluetooth: hci5: command tx timeout [ 235.677006][T12624] netem: change failed [ 235.737446][T12441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.923030][T12441] veth0_vlan: entered promiscuous mode [ 235.976426][T12441] veth1_vlan: entered promiscuous mode [ 236.011936][T12652] IPv6: NLM_F_CREATE should be specified when creating new route [ 236.035448][T12652] IPv6: Can't replace route, no match found [ 236.112184][T12441] veth0_macvtap: entered promiscuous mode [ 236.197287][T12441] veth1_macvtap: entered promiscuous mode [ 236.236543][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.259652][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.271819][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.287699][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.297957][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.311471][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.321814][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.333820][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.352971][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.364598][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.396382][T12441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.471131][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.504706][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.530925][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.552596][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.556162][T12683] xt_TCPMSS: Only works on TCP SYN packets [ 236.564612][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.585827][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.598033][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.609319][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.619972][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.631679][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.643356][T12441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.654811][T12441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.668280][T12441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.679137][T12682] netlink: 'syz.4.2041': attribute type 7 has an invalid length. [ 236.708269][T12441] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.722032][T12441] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.747295][T12441] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.782833][T12441] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.033219][T12699] netlink: 'syz.1.2047': attribute type 10 has an invalid length. [ 237.042661][T12699] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 237.058837][T12699] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 237.079386][T12699] team0: Port device netdevsim0 removed [ 237.089675][T12699] bond0: (slave netdevsim0): no link monitoring support [ 237.101102][T12699] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 237.136169][T12699] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 237.246447][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.269604][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.356267][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.379470][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.506646][T12728] tipc: Started in network mode [ 237.530220][T12728] tipc: Node identity 1, cluster identity 4711 [ 237.561328][T12728] tipc: Node number set to 1 [ 237.577197][T12728] tipc: Cannot configure node identity twice [ 237.800879][T12743] atomic_op ffff8880652bf198 conn xmit_atomic 0000000000000000 [ 238.431332][T12781] netlink: 'syz.3.2072': attribute type 1 has an invalid length. [ 238.462411][T12781] __nla_validate_parse: 40 callbacks suppressed [ 238.462434][T12781] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.2072'. [ 238.481698][T12781] netlink: 'syz.3.2072': attribute type 2 has an invalid length. [ 238.490196][T12781] netlink: 'syz.3.2072': attribute type 1 has an invalid length. [ 238.871815][T12814] netlink: 'syz.0.2079': attribute type 2 has an invalid length. [ 238.897290][T12814] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2079'. [ 239.043445][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2082'. [ 239.070698][T12823] xt_bpf: check failed: parse error [ 239.085549][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2083'. [ 239.476247][T12839] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2088'. [ 239.514498][T12839] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2088'. [ 239.646811][T12847] bond5: Unknown bonding mode 6 for xdp xmit [ 239.653341][T12847] ------------[ cut here ]------------ [ 239.658971][T12847] WARNING: CPU: 0 PID: 12847 at drivers/net/bonding/bond_main.c:5541 bond_xdp_get_xmit_slave+0x519/0x690 [ 239.670878][T12847] Modules linked in: [ 239.674883][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.3.2091 Not tainted 6.11.0-rc5-syzkaller-00151-gfe1910f9337b #0 [ 239.685724][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 239.695865][T12847] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 239.702165][T12847] Code: be 90 13 00 00 48 c7 c2 80 5b 96 8c e8 90 31 13 fb eb 98 e8 f9 8f 36 fb 4c 89 e7 48 c7 c6 80 7a 96 8c 89 da e8 e8 f7 5b 05 90 <0f> 0b 90 eb a6 e8 dd 8f 36 fb 48 85 db 74 0a e8 d3 8f 36 fb e9 72 [ 239.722046][T12847] RSP: 0018:ffffc90003407648 EFLAGS: 00010246 [ 239.728247][T12847] RAX: 4cf3210f86ec3b00 RBX: 0000000000000006 RCX: 4cf3210f86ec3b00 [ 239.736320][T12847] RDX: ffffc9000a16b000 RSI: 0000000000002e68 RDI: 0000000000002e69 [ 239.744396][T12847] RBP: ffff888033c5b038 R08: ffffffff8174013c R09: 1ffff92000680e44 [ 239.752412][T12847] R10: dffffc0000000000 R11: fffff52000680e45 R12: ffff888065ae0000 [ 239.760497][T12847] R13: ffff888065ae0000 R14: ffff888065ae0cc0 R15: dffffc0000000000 [ 239.768551][T12847] FS: 00007fefa22cf6c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 239.777571][T12847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 239.784220][T12847] CR2: 000000110c27789b CR3: 000000002512c000 CR4: 00000000003506f0 [ 239.792234][T12847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 239.800303][T12847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 239.808356][T12847] Call Trace: [ 239.811670][T12847] [ 239.814672][T12847] ? __warn+0x163/0x4e0 [ 239.818858][T12847] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 239.824586][T12847] ? report_bug+0x2b3/0x500 [ 239.829136][T12847] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 239.833364][T12854] sctp: [Deprecated]: syz.0.2086 (pid 12854) Use of int in maxseg socket option. [ 239.833364][T12854] Use struct sctp_assoc_value instead [ 239.834846][T12847] ? handle_bug+0x3e/0x70 [ 239.834875][T12847] ? exc_invalid_op+0x1a/0x50 [ 239.834898][T12847] ? asm_exc_invalid_op+0x1a/0x20 [ 239.834928][T12847] ? __wake_up_klogd+0xcc/0x110 [ 239.834956][T12847] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 239.834983][T12847] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 239.835012][T12847] xdp_master_redirect+0x143/0x2d0 [ 239.885133][T12847] bpf_test_run_xdp_live+0x1793/0x2110 [ 239.890670][T12847] ? bpf_test_run_xdp_live+0x5bf/0x2110 [ 239.896335][T12847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 239.902358][T12847] ? mark_lock+0x9a/0x350 [ 239.906828][T12847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 239.911307][T12859] bridge0: entered allmulticast mode [ 239.912837][T12847] ? __might_fault+0xaa/0x120 [ 239.922901][T12847] ? __might_fault+0xc6/0x120 [ 239.927683][T12847] ? _copy_from_user+0xa6/0xe0 [ 239.932482][T12847] ? bpf_test_init+0x15a/0x180 [ 239.937387][T12847] ? xdp_convert_md_to_buff+0x1bf/0x330 [ 239.943016][T12847] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 239.948495][T12847] ? __pfx_lock_release+0x10/0x10 [ 239.953574][T12847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 239.959467][T12847] ? __fget_files+0x29/0x470 [ 239.964148][T12847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 239.969998][T12847] bpf_prog_test_run+0x33a/0x3b0 [ 239.975034][T12847] __sys_bpf+0x48d/0x810 [ 239.979317][T12847] ? __pfx___sys_bpf+0x10/0x10 [ 239.984257][T12847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.990281][T12847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.996705][T12847] ? do_syscall_64+0x100/0x230 [ 240.001508][T12847] __x64_sys_bpf+0x7c/0x90 [ 240.006038][T12847] do_syscall_64+0xf3/0x230 [ 240.010579][T12847] ? clear_bhb_loop+0x35/0x90 [ 240.015347][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.021365][T12847] RIP: 0033:0x7fefa1579eb9 [ 240.025871][T12847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.045585][T12847] RSP: 002b:00007fefa22cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.054115][T12847] RAX: ffffffffffffffda RBX: 00007fefa1715f80 RCX: 00007fefa1579eb9 [ 240.062143][T12847] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 000000000000000a [ 240.070242][T12847] RBP: 00007fefa15e793e R08: 0000000000000000 R09: 0000000000000000 [ 240.078312][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.086387][T12847] R13: 0000000000000000 R14: 00007fefa1715f80 R15: 00007ffe8bbaaa78 [ 240.094544][T12847] [ 240.097586][T12847] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.104893][T12847] CPU: 0 UID: 0 PID: 12847 Comm: syz.3.2091 Not tainted 6.11.0-rc5-syzkaller-00151-gfe1910f9337b #0 [ 240.115783][T12847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.126054][T12847] Call Trace: [ 240.129360][T12847] [ 240.132315][T12847] dump_stack_lvl+0x241/0x360 [ 240.137179][T12847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.142447][T12847] ? __pfx__printk+0x10/0x10 [ 240.147089][T12847] ? vscnprintf+0x5d/0x90 [ 240.151447][T12847] panic+0x349/0x860 [ 240.155370][T12847] ? __warn+0x172/0x4e0 [ 240.159556][T12847] ? __pfx_panic+0x10/0x10 [ 240.164013][T12847] __warn+0x346/0x4e0 [ 240.168033][T12847] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 240.173701][T12847] report_bug+0x2b3/0x500 [ 240.178041][T12847] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 240.183686][T12847] handle_bug+0x3e/0x70 [ 240.187841][T12847] exc_invalid_op+0x1a/0x50 [ 240.192338][T12847] asm_exc_invalid_op+0x1a/0x20 [ 240.197193][T12847] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 240.203433][T12847] Code: be 90 13 00 00 48 c7 c2 80 5b 96 8c e8 90 31 13 fb eb 98 e8 f9 8f 36 fb 4c 89 e7 48 c7 c6 80 7a 96 8c 89 da e8 e8 f7 5b 05 90 <0f> 0b 90 eb a6 e8 dd 8f 36 fb 48 85 db 74 0a e8 d3 8f 36 fb e9 72 [ 240.223059][T12847] RSP: 0018:ffffc90003407648 EFLAGS: 00010246 [ 240.229234][T12847] RAX: 4cf3210f86ec3b00 RBX: 0000000000000006 RCX: 4cf3210f86ec3b00 [ 240.237233][T12847] RDX: ffffc9000a16b000 RSI: 0000000000002e68 RDI: 0000000000002e69 [ 240.245403][T12847] RBP: ffff888033c5b038 R08: ffffffff8174013c R09: 1ffff92000680e44 [ 240.253380][T12847] R10: dffffc0000000000 R11: fffff52000680e45 R12: ffff888065ae0000 [ 240.261434][T12847] R13: ffff888065ae0000 R14: ffff888065ae0cc0 R15: dffffc0000000000 [ 240.269407][T12847] ? __wake_up_klogd+0xcc/0x110 [ 240.274267][T12847] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 240.279902][T12847] xdp_master_redirect+0x143/0x2d0 [ 240.285018][T12847] bpf_test_run_xdp_live+0x1793/0x2110 [ 240.290496][T12847] ? bpf_test_run_xdp_live+0x5bf/0x2110 [ 240.296039][T12847] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 240.301837][T12847] ? mark_lock+0x9a/0x350 [ 240.306248][T12847] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 240.312316][T12847] ? __might_fault+0xaa/0x120 [ 240.317020][T12847] ? __might_fault+0xc6/0x120 [ 240.322052][T12847] ? _copy_from_user+0xa6/0xe0 [ 240.326823][T12847] ? bpf_test_init+0x15a/0x180 [ 240.331623][T12847] ? xdp_convert_md_to_buff+0x1bf/0x330 [ 240.337171][T12847] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 240.342628][T12847] ? __pfx_lock_release+0x10/0x10 [ 240.347657][T12847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 240.353457][T12847] ? __fget_files+0x29/0x470 [ 240.358055][T12847] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 240.363853][T12847] bpf_prog_test_run+0x33a/0x3b0 [ 240.368805][T12847] __sys_bpf+0x48d/0x810 [ 240.373047][T12847] ? __pfx___sys_bpf+0x10/0x10 [ 240.377814][T12847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.383795][T12847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.390120][T12847] ? do_syscall_64+0x100/0x230 [ 240.394881][T12847] __x64_sys_bpf+0x7c/0x90 [ 240.399291][T12847] do_syscall_64+0xf3/0x230 [ 240.403784][T12847] ? clear_bhb_loop+0x35/0x90 [ 240.408466][T12847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.414354][T12847] RIP: 0033:0x7fefa1579eb9 [ 240.418762][T12847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.438361][T12847] RSP: 002b:00007fefa22cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.446882][T12847] RAX: ffffffffffffffda RBX: 00007fefa1715f80 RCX: 00007fefa1579eb9 [ 240.454869][T12847] RDX: 0000000000000048 RSI: 0000000020000040 RDI: 000000000000000a [ 240.462842][T12847] RBP: 00007fefa15e793e R08: 0000000000000000 R09: 0000000000000000 [ 240.470828][T12847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.478811][T12847] R13: 0000000000000000 R14: 00007fefa1715f80 R15: 00007ffe8bbaaa78 [ 240.486797][T12847] [ 240.490075][T12847] Kernel Offset: disabled [ 240.494435][T12847] Rebooting in 86400 seconds..