last executing test programs: 1m0.78552743s ago: executing program 2 (id=2345): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, 0x0, &(0x7f0000000040)) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r0, 0x0, 0x10000) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) 59.594077026s ago: executing program 2 (id=2357): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x31a39}}, 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x240400c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x840}, 0x0) 59.211216449s ago: executing program 2 (id=2361): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r4, 0x4, r4}, 0x5) 58.841308849s ago: executing program 2 (id=2364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x9, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x1, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0xe, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0x2, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x800, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x7, 0x1, 0x3, 0x98, 0x12, 0x8, 0x40, 0x9, 0x202}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r12 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f00000007c0)}, 0x20004014) 58.576960535s ago: executing program 2 (id=2366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x3c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) 58.347728319s ago: executing program 2 (id=2369): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 43.058864197s ago: executing program 32 (id=2369): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 9.71423843s ago: executing program 5 (id=2691): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0xbe, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x8, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x9, 0x101, 0x3094e04a, 0x3, 0x3}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000340)={0x6, 0x5c, 0x204, 0x401, 0x80000000, 0xb2b, 0x400, 0x0, r2}, &(0x7f0000000480)=0x20) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={r7, 0x3, 0x4}, 0xc) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_audit(0x10, 0x3, 0x9) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3f9d00000000fedbdf251800000008000300", @ANYRES32=r10, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a28000180080001"], 0x64}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe8000", @ANYRES32=0x2, @ANYBLOB], 0x60}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101000007"], 0x60}}, 0x0) unshare(0x22020400) socket(0x23, 0x4, 0x800) unshare(0xe00) 9.648585425s ago: executing program 4 (id=2692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, 0x6, 0x1) 9.134156022s ago: executing program 5 (id=2695): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000c000000aa00000000000000180000000000000010010000010000000000000000529870d4e9ab866a0000001000000000000000"], 0x40}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x78, 0x44, 0x1, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x64, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1e2fc71ca09de48d27f4529f315fa1aeab3018edc394863c"]}]}, 0x78}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg(r5, &(0x7f0000000340)=[{{&(0x7f00000002c0)=@xdp={0x2c, 0xa888, r7, 0x7}, 0x14, 0x0}}], 0x1, 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getchain={0x34, 0x66, 0x8, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf, 0x2}, {0xffff, 0x8}, {0x5}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 8.25281993s ago: executing program 1 (id=2696): gettid() r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x15809}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_TTL={0x5, 0x8, 0x80}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x70bd2e, 0x25dfdbfe, {0xa, 0x0, 0x0, r3, 0x40, 0x10, 0x72748f52b8af0932}, [@NDA_DST_IPV6={0x14, 0x1, @mcast1}, @NDA_LLADDR={0xa, 0x2, @remote}]}, 0x3c}}, 0x20024090) 5.984151899s ago: executing program 5 (id=2697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.764630977s ago: executing program 1 (id=2700): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 5.73540061s ago: executing program 4 (id=2701): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee7, 0x8031, 0xffffffffffffffff, 0x9c7ab000) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000500)=""/145, 0x91}, {0x0}], 0x2, 0x11c2, 0x9) 5.62463773s ago: executing program 3 (id=2703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30b) r1 = socket(0x400000000010, 0x3, 0x0) bind(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 5.434483707s ago: executing program 5 (id=2704): epoll_create1(0x80000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f000000c880)=[{{0x0, 0x0, &(0x7f000000a580)=[{&(0x7f0000009580)="2a4b951691", 0x5}], 0x1}}], 0x1, 0x4000000) 5.191690646s ago: executing program 5 (id=2706): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x1d, &(0x7f0000000940)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) sendmmsg(r0, &(0x7f0000006840)=[{{&(0x7f0000000740)=@ll={0x11, 0x10, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000002f00)}, {&(0x7f0000003f80)="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", 0x1b0}], 0x2, &(0x7f0000004fc0)=ANY=[], 0x12d0}}], 0x1, 0x40) 5.18993535s ago: executing program 3 (id=2707): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x7) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 4.888735512s ago: executing program 0 (id=2708): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x94}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.804683274s ago: executing program 5 (id=2709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000015002927000000000000008b050021"], 0x38}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pipe(0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) connect$inet(r2, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$cgroup_type(r7, &(0x7f00000000c0), 0x9) sendfile(r7, r3, 0x0, 0x10000) openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x5000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20000890) 4.654305747s ago: executing program 3 (id=2710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/11, 0xb}, {&(0x7f00000000c0)=""/238, 0xee}], 0x2, 0x0, 0x1) 4.58241943s ago: executing program 1 (id=2711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdrlabel={0x30, 0x49, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0xe}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099, 0x4}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000080)=ANY=[], 0x6) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00000000c0)={0x2000}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) unshare(0x20000400) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x81}}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x18}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x10) ioctl$BTRFS_IOC_SPACE_INFO(r7, 0xc0109414, &(0x7f00000004c0)={0x81c, 0x2, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) listen(r1, 0x0) syz_emit_ethernet(0x75, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x3f, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"43943dcfc26104897fbf779b02e68dd984cdab6041f484e3207fa0e33e52b9184f175b39108c2d12c61ebd"}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000400)={r8, 0x9c, &(0x7f000000c780)=[@in6={0xa, 0x4621, 0xfee, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, @in6={0xa, 0x4e21, 0x2, @private0, 0x9}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x800}, @in6={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2}, @in6={0xa, 0x4e22, 0x6c02, @empty, 0x4}]}, &(0x7f0000000440)=0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffc, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x5, 0x0, 0xf500}}}}}}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x3c, r10, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 4.172531586s ago: executing program 4 (id=2712): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180001f2010605000000000000000000a7b96db5"], 0x18}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 3.513494381s ago: executing program 0 (id=2713): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="200000001000ffff28bd7000fb64ef2500000000b992e44c45ecb6493ad1ece39251e8ebc703e62ae30a833c99eb48223e05614231144d4822c17a4b0cfe1fe65d6a1f35bca01c0ddb1a10f2cb758185b6f6602445f523967c2a61cfe465f211a2e638de1d7467f51488ac0fcfd800df604f876a622c14447dc641f8ea00a19417b9be4ca53ef78e443c3f199435ee8426a532647561b45b412f083a8915a87ecb67e042b262ef417d0ceebd8f7384de2faf0af81b7c822f9e419907330a00f915e29434f8e2b5bdbd9f17837775eca8a4c919f05f118791a3d49c9d24a793a41d610df375074143ccaf6742362b4c1c74f5b48ad27a92a615a5a7df0e2100614a39dfe66370bcaf9d7f7b3ccd11c1fe4d", @ANYRESDEC=r0, @ANYBLOB='W \x00\x00! \x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x108) close(r1) r5 = openat$cgroup_ro(r4, &(0x7f0000000540)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x402, 0x12) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="86ae7ae3f53aca5aeb6857b9d7b9168397711407f5f2f321ac655cebc266df84a71e8fae0b882d1774158b2387b42d774f626a032b9d5f5cb82baa3e87bfb7ffe66beef9013c745a7d7a83e2a691930d76b0b6c1f1fafe93df29", 0x5a}, {&(0x7f0000000700)="74adf3039f01162cdc1a938f34b0b90309078b4ee0e55382d9129e0af8b38412ac8b4f94557c7ecb0f48c1a8ab58f94cb6bc87", 0x33}, {&(0x7f0000000b00)="5f7e2deeac0f820d8bfa26c88de87bdc8af5b1d77e728715a413495407edc4643bec20d2742f92154f68a088c444dea64d7d0e6684fff07d2db5b6867d263bda1fb1b81b1c36de1f2d2496bd42f3879bdba96c301a58a7c040afa35ebcc46e497787d8f2535e23672611b9c9ad3cfac2c663130aecb703e4f3a2b3a840f92a53b090453fadd72f313c2bd14ba2ffbbbbea0b9d2fa2982f5fa7ce6d5220fb3840b562744b51f25bf49ce298a13d828abcd1444eecbec18b5c166bf462b9239fa120ecdd47d4e1aa87da2b741301337b152d8e832325dbf74846e84e2c9cf0", 0xde}, {&(0x7f0000000c00)="a569c7a3b986842901051774d47b89ba6490be1a2c6cc4cbd2182db962514511d48fa12066975e945e0b5a1e173fbddfacef8efff0d5009507074c112295c65a8a9c", 0x42}, {&(0x7f0000000c80)="a2ccb700b3ee60ee299be92dc3572c1f496dc8145bf2b794628516a7e5d88f744b612b6df6c79650e16ac65ababa735cb3247924902f1aaafe4ee18a9b9b0bb6769c2760fb1e4a065b53165a48bd1e2599ff61a14b0a329a9ac38c110b16c8336480df8028e0a7aab102cd9098e4fdf6e0867b72e9f1081d9b996cd3024ce7d602a2c9d3c2d9240213e456f32fc2c28a469854f70fce4ed86babb848bd8afaf721c4c822496365f69cee18fff4cfe9d78c88453ce347c15dc2d240ecdff14573896c746a9d3b4ecc4fd5adb8e29fc8e1f54c3f187866b5", 0xd7}], 0x5}, 0xc851) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0x279, @remote}}, 0x1000, 0xffff}, 0x90) sendfile(0xffffffffffffffff, r2, 0x0, 0x2) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r5, 0x0, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x4, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x85, &(0x7f0000000180)=""/133, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000d80)=ANY=[@ANYRES64=r9, @ANYRES8=r6, @ANYRESOCT=r5], 0x20) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f00000004c0)={0x2, 0x4e20, @broadcast}, 0x10) r11 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r11, &(0x7f0000000040)={0x1f, @any, 0x1}, 0xa) r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r12, &(0x7f0000005dc0)={0x1f, @any, 0x15}, 0xa) shutdown(r11, 0x1) 3.30556681s ago: executing program 3 (id=2714): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaa0300bb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x8c1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x40050) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x20000880) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x80, &(0x7f0000000180), 0x4) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r8, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902"], 0x10}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'tunl0\x00', 0x0}) recvmsg(r9, &(0x7f0000002840)={&(0x7f0000000080)=@caif=@util, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/253, 0xfd}, {&(0x7f0000002340)=""/236, 0xec}, {&(0x7f0000002440)=""/223, 0xdf}, {&(0x7f0000002540)=""/107, 0x6b}, {&(0x7f00000025c0)=""/178, 0xb2}], 0x9, &(0x7f0000002740)=""/247, 0xf7}, 0x40012140) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x6, 0x2, [0x4782]}}]}]}, 0x58}}, 0x4000010) 3.074417838s ago: executing program 0 (id=2715): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 3.067042671s ago: executing program 4 (id=2716): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r0, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 2.933023607s ago: executing program 1 (id=2717): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0xd4, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 2.835228794s ago: executing program 1 (id=2718): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000500)={r4, 0x6, 0x4279, 0x6, 0x2, 0x5}, 0x14) socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000000340)='<', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) getsockopt$SO_COOKIE(r5, 0x1, 0x39, &(0x7f0000000280), &(0x7f00000002c0)=0x8) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hl={{0x28}, {0x4, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000900)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r8, &(0x7f00000002c0)="b9ba48", 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='yeah', 0x4) 1.925942697s ago: executing program 1 (id=2719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400ff2340834b80040d8c560a067f0258ff0000000000000006000000000000005f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810ee0000408c56040000", 0x58}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfb, {0xa, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x20048024}, 0x4008030) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r6, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x4}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x20004004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084) r9 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r9, &(0x7f00000001c0)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r9, 0x6, 0xc, &(0x7f0000000100)=0x8, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_buf(r10, 0x29, 0x1b, &(0x7f0000000540)="598db5038ec9c37e4409c3d6abb333c2b1651bc3", 0x14) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000000)) 1.910724689s ago: executing program 0 (id=2720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) readv(r1, &(0x7f0000002180)=[{&(0x7f0000001000)=""/4096, 0x1000}, {0x0}], 0x2) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050) 1.473107987s ago: executing program 3 (id=2721): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1.472728352s ago: executing program 4 (id=2722): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 1.160323668s ago: executing program 4 (id=2723): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) pipe(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080012400000000305001500090000000500010006000000050005000a00000005000400000000000900020073798530000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e0000001004e214e2204b1907840740e234b310000"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$cgroup_int(r3, &(0x7f0000000200)=0x10001, 0x12) sendfile(r3, r2, 0x0, 0xf03a0005) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x14, 0x32, 0x9e54f29ff072a93b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$cgroup_type(r9, &(0x7f00000000c0), 0x9) sendfile(r9, r6, 0x0, 0x10000) 800.020222ms ago: executing program 0 (id=2724): r0 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000300)={0x0, 0x1, 0x80, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000880)={0x0, 0x8001, 0x0, [0x1ff, 0xd, 0xfffffffffffff801, 0x6, 0x800], [0xf5a, 0x4, 0xffffffff, 0x0, 0x1cf7, 0x6, 0x3, 0x4, 0x3, 0x0, 0x7, 0x7b, 0x3, 0x0, 0x2, 0x5, 0x5, 0x8, 0x9, 0xffff, 0x0, 0x0, 0xffff, 0x50, 0x1, 0xffffffffffffffff, 0x4, 0xfffffffffffffff7, 0x7, 0x0, 0x8, 0x8000000000000001, 0x3, 0x400, 0x175f, 0x4, 0x7fffffff, 0xafe, 0x5, 0x4, 0x6, 0x0, 0x5, 0x8, 0x0, 0x100000001, 0x1000, 0x0, 0x3b6d, 0x25c8d34, 0x9, 0x4, 0x6, 0xe, 0xfffffffffffffffb, 0x4, 0xffff, 0x8000, 0xa, 0x7ffffffd, 0x40, 0x1, 0x1, 0x100, 0x7000000000000000, 0xffffffff80000001, 0xb, 0x5, 0x1000, 0x5, 0xc3a, 0xdb, 0xae52, 0x40000005, 0x40, 0x5, 0x1, 0x3, 0x0, 0x8001, 0x3, 0x0, 0xde, 0x33d55b1f, 0xff, 0x0, 0xc, 0x2, 0x0, 0x7, 0x2, 0x8, 0x7, 0x7, 0x7, 0x7ff, 0xfffffffffffffffd, 0x4, 0x1, 0x4, 0x4, 0x4aa, 0x3, 0x7, 0x9, 0x7, 0x1, 0x9d, 0x3, 0x51, 0x8, 0x800, 0x3, 0x100000001, 0x1, 0x9, 0x7, 0x3, 0x50c5, 0xb903, 0xfffffffffffffffe]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000cc0)={0x15, 0x2, {0x8, @usage=0x1, 0x0, 0xffffffffffffffff, 0x7, 0xfffffffffffff800, 0x28ba, 0x6, 0x40, @usage=0x5, 0x3, 0x629, [0x9, 0x5, 0x7, 0x40, 0x0, 0xfb7]}, {0x10000, @struct={0x6, 0x1}, r1, 0x4, 0x2, 0x4, 0x9, 0x7, 0x10, @usage, 0x2, 0x5, [0x6, 0x7ff, 0x6, 0x6, 0x3, 0x8]}, {0x1, @usage, r2, 0x2, 0x100, 0x6, 0x3, 0xfff, 0x422, @usage=0x6, 0x200, 0x9, [0xffffffffffff62b4, 0x9, 0x88, 0x15d, 0x4, 0xdbc]}, {0x2, 0x6, 0x6}}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = socket(0x8, 0x4, 0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) recvfrom(r4, 0x0, 0x0, 0x142, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r3, 0x40106183, &(0x7f0000000280)={r4, 0x0, 0x488000, 0x0, 0x0, 0x0, 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x14}, {0x3, 0xfff1}, {0xc, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20018880}, 0x800) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000001000010428bd", @ANYRESHEX=r5, @ANYRES16=r5], 0x54}, 0x1, 0x0, 0x0, 0x2000c834}, 0x48c0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x2, 0x3, 0xd, 0x4101}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 199.872083ms ago: executing program 0 (id=2725): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r0, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r0, 0x5) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) accept$phonet_pipe(r0, 0x0, 0x0) 0s ago: executing program 3 (id=2726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f00000004c0)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "3eda35701bfb0bc2"}}}}}, 0x36) kernel console output (not intermixed with test programs): 10781] Call Trace: [ 280.648518][T10781] [ 280.648543][T10781] dump_stack_lvl+0xe8/0x150 [ 280.648677][T10781] warn_alloc+0x24d/0x270 [ 280.648744][T10781] ? kasan_save_track+0x4f/0x80 [ 280.648801][T10781] ? kasan_save_track+0x3e/0x80 [ 280.648876][T10781] ? __pfx_warn_alloc+0x10/0x10 [ 280.648915][T10781] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 280.648992][T10781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.649099][T10781] __vmalloc_node_range_noprof+0x127/0x1540 [ 280.649264][T10781] ? rcu_is_watching+0x16/0xb0 [ 280.649352][T10781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 280.649447][T10781] ? __kmalloc_cache_noprof+0x321/0x600 [ 280.649519][T10781] ? __kmalloc_cache_noprof+0x14d/0x600 [ 280.649597][T10781] ? xskq_create+0x56/0x220 [ 280.649691][T10781] xskq_create+0x148/0x220 [ 280.649767][T10781] ? xsk_init_queue+0x8a/0xe0 [ 280.649850][T10781] xsk_init_queue+0x8a/0xe0 [ 280.649925][T10781] xsk_setsockopt+0x52a/0x960 [ 280.650003][T10781] ? __pfx_xsk_setsockopt+0x10/0x10 [ 280.650064][T10781] ? __pfx_aa_sk_perm+0x10/0x10 [ 280.650172][T10781] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 280.650250][T10781] ? __pfx_xsk_setsockopt+0x10/0x10 [ 280.650317][T10781] do_sock_setsockopt+0x17c/0x1b0 [ 280.650412][T10781] __x64_sys_setsockopt+0x13d/0x1b0 [ 280.650519][T10781] do_syscall_64+0x166/0x520 [ 280.650596][T10781] ? trace_irq_disable+0x3b/0x140 [ 280.650654][T10781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.650720][T10781] ? clear_bhb_loop+0x70/0xc0 [ 280.650802][T10781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.650865][T10781] RIP: 0033:0x7fc2a979e159 [ 280.650936][T10781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.651004][T10781] RSP: 002b:00007fc2aa59f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.651061][T10781] RAX: ffffffffffffffda RBX: 00007fc2a9a25fa0 RCX: 00007fc2a979e159 [ 280.651107][T10781] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 280.651142][T10781] RBP: 00007fc2a983506b R08: 0000000000000004 R09: 0000000000000000 [ 280.651182][T10781] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.651219][T10781] R13: 00007fc2a9a26038 R14: 00007fc2a9a25fa0 R15: 00007ffd869975d8 [ 280.651324][T10781] [ 280.672517][T10781] Mem-Info: [ 280.672555][T10781] active_anon:5998 inactive_anon:0 isolated_anon:0 [ 280.672555][T10781] active_file:0 inactive_file:43332 isolated_file:0 [ 280.672555][T10781] unevictable:0 dirty:449 writeback:0 [ 280.672555][T10781] slab_reclaimable:10398 slab_unreclaimable:99986 [ 280.672555][T10781] mapped:36951 shmem:520 pagetables:1262 [ 280.672555][T10781] sec_pagetables:0 bounce:0 [ 280.672555][T10781] kernel_misc_reclaimable:0 [ 280.672555][T10781] free:1328954 free_pcp:8177 free_cma:0 [ 280.672742][T10781] Node 0 active_anon:23992kB inactive_anon:0kB active_file:0kB inactive_file:173136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147804kB dirty:1792kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14072kB pagetables:4884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 280.672913][T10781] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 280.673063][T10781] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.673232][T10781] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 280.673342][T10781] Node 0 DMA32 free:1356248kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23992kB inactive_anon:0kB active_file:0kB inactive_file:173136kB unevictable:0kB writepending:1792kB zspages:0kB present:3129332kB managed:2546852kB mlocked:0kB bounce:0kB free_pcp:32708kB local_pcp:17232kB free_cma:0kB [ 280.673524][T10781] lowmem_reserve[]: 0 0 0 0 0 [ 280.673630][T10781] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.673794][T10781] lowmem_reserve[]: 0 0 0 0 0 [ 280.673900][T10781] Node 1 Normal free:3944208kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 280.681245][T10781] lowmem_reserve[]: 0 0 0 0 0 [ 280.681398][T10781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 280.681792][T10781] Node 0 DMA32: 1738*4kB (UME) 1980*8kB (UM) 787*16kB (UM) 401*32kB (UME) 103*64kB (UME) 49*128kB (UME) 29*256kB (UM) 15*512kB (UM) 4*1024kB (UM) 5*2048kB (UME) 309*4096kB (UM) = 1356184kB [ 280.747658][T10781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 280.747970][T10781] Node 1 Normal: 2*4kB (M) 1*8kB (M) 6*16kB (UM) 13*32kB (UM) 8*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944208kB [ 280.748565][T10781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.752065][T10781] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.757310][T10781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 280.757375][T10781] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 280.757427][T10781] 43848 total pagecache pages [ 280.757450][T10781] 0 pages in swap cache [ 280.757472][T10781] Free swap = 124996kB [ 280.757504][T10781] Total swap = 124996kB [ 280.757531][T10781] 2097051 pages RAM [ 280.757554][T10781] 0 pages HighMem/MovableOnly [ 280.757575][T10781] 428722 pages reserved [ 280.757596][T10781] 0 pages cma reserved [ 281.068070][T10779] syzkaller1: entered promiscuous mode [ 281.068143][T10779] syzkaller1: entered allmulticast mode [ 281.354070][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 281.383820][T10781] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 281.436433][T10788] netlink: 'syz.4.979': attribute type 4 has an invalid length. [ 283.345967][T10788] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 283.423397][T10803] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 283.562176][T10806] lo: entered promiscuous mode [ 283.594124][T10806] tunl0: entered promiscuous mode [ 283.598623][T10806] gre0: entered promiscuous mode [ 283.671119][T10806] gretap0: entered promiscuous mode [ 283.699643][T10809] __nla_validate_parse: 6 callbacks suppressed [ 283.699665][T10809] netlink: 516 bytes leftover after parsing attributes in process `syz.3.983'. [ 283.777712][ T6401] tipc: Subscription rejected, illegal request [ 283.885869][T10806] ip_vti0: entered promiscuous mode [ 283.912060][T10806] ip6_vti0: entered promiscuous mode [ 283.934554][T10806] sit0: entered promiscuous mode [ 283.967724][T10806] ip6tnl0: entered promiscuous mode [ 284.054667][T10806] ip6gre0: entered promiscuous mode [ 284.076286][ T1033] tipc: Subscription rejected, illegal request [ 284.086679][T10806] ip6gretap0: entered promiscuous mode [ 284.110082][T10806] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.110727][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.112984][T10806] bridge0: entered promiscuous mode [ 284.163911][T10806] vcan0: entered promiscuous mode [ 284.212082][T10806] nlmon0: entered promiscuous mode [ 284.232573][T10806] batadv0: entered promiscuous mode [ 284.252893][T10806] vxcan0: entered promiscuous mode [ 284.279298][T10806] vxcan1: entered promiscuous mode [ 284.297573][T10806] veth0: entered promiscuous mode [ 284.323394][T10806] veth1: entered promiscuous mode [ 284.372260][T10806] wg0: entered promiscuous mode [ 284.399356][T10806] wg1: entered promiscuous mode [ 284.419223][T10806] wg2: entered promiscuous mode [ 284.434208][T10806] veth0_to_bridge: entered promiscuous mode [ 284.469724][T10806] veth1_to_bridge: entered promiscuous mode [ 284.516944][T10806] veth0_to_bond: entered promiscuous mode [ 284.561060][T10806] veth1_to_bond: entered promiscuous mode [ 284.596757][T10806] veth1_to_team: entered promiscuous mode [ 284.614357][T10806] team_slave_1: entered promiscuous mode [ 284.638821][T10806] veth0_to_batadv: entered promiscuous mode [ 284.664420][T10806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.677975][T10806] batadv_slave_0: entered promiscuous mode [ 284.697190][T10806] veth1_to_batadv: entered promiscuous mode [ 284.728781][T10806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.728846][T10806] batadv_slave_1: entered promiscuous mode [ 284.751122][T10806] xfrm0: entered promiscuous mode [ 284.800533][T10806] veth0_to_hsr: entered promiscuous mode [ 284.809365][T10816] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 284.809443][T10816] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 284.809465][T10816] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 285.135092][T10835] tipc: New replicast peer: 255.255.255.255 [ 285.146171][T10835] tipc: Enabled bearer , priority 26 [ 285.281338][T10839] syzkaller0: entered promiscuous mode [ 285.281374][T10839] syzkaller0: entered allmulticast mode [ 285.787029][T10861] netlink: zone id is out of range [ 285.787041][T10861] netlink: zone id is out of range [ 285.787048][T10861] netlink: zone id is out of range [ 285.787054][T10861] netlink: zone id is out of range [ 285.787059][T10861] netlink: zone id is out of range [ 285.787065][T10861] netlink: zone id is out of range [ 285.787074][T10861] netlink: zone id is out of range [ 285.787080][T10861] netlink: zone id is out of range [ 285.787085][T10861] netlink: zone id is out of range [ 285.787091][T10861] netlink: zone id is out of range [ 285.832659][T10851] netlink: 27 bytes leftover after parsing attributes in process `syz.4.994'. [ 286.025642][T10865] netlink: 44 bytes leftover after parsing attributes in process `syz.2.996'. [ 286.025666][T10865] netlink: 192 bytes leftover after parsing attributes in process `syz.2.996'. [ 287.631562][T10869] netlink: 516 bytes leftover after parsing attributes in process `syz.3.997'. [ 287.930678][T10879] xt_hl: Unknown Hop Limit match mode: 4 [ 288.007988][ T6403] tipc: Subscription rejected, illegal request [ 288.022349][T10878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 288.115480][T10879] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.750881][T10918] lo: left promiscuous mode [ 288.759234][T10918] tunl0: left promiscuous mode [ 288.783834][T10918] gre0: left promiscuous mode [ 288.798450][T10918] gretap0: left promiscuous mode [ 288.814014][T10918] erspan0: left promiscuous mode [ 288.825936][T10918] ip_vti0: left promiscuous mode [ 288.837144][T10918] ip6_vti0: left promiscuous mode [ 288.846708][T10918] sit0: left promiscuous mode [ 288.873262][T10918] ip6tnl0: left promiscuous mode [ 288.875102][T10918] ip6gre0: left promiscuous mode [ 288.891715][T10918] syz_tun: left promiscuous mode [ 288.911984][T10918] ip6gretap0: left promiscuous mode [ 288.931907][T10918] bridge0: left promiscuous mode [ 288.934258][T10918] bridge0: port 6(bond0) entered blocking state [ 288.934383][T10918] bridge0: port 6(bond0) entered forwarding state [ 288.934738][T10918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.935934][T10918] team0: left promiscuous mode [ 288.939046][T10918] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.978493][T10918] dummy0: left promiscuous mode [ 288.978868][T10918] batman_adv: batadv0: Interface activated: dummy0 [ 289.022174][T10918] nlmon0: left promiscuous mode [ 289.023608][T10918] batadv0: left promiscuous mode [ 289.025110][T10918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.025987][T10918] vxcan0: left promiscuous mode [ 289.053601][T10918] vxcan1: left promiscuous mode [ 289.066168][T10918] veth1: left promiscuous mode [ 289.082345][T10918] wg0: left promiscuous mode [ 289.134638][T10918] wg1: left promiscuous mode [ 289.217298][T10918] wg2: left promiscuous mode [ 289.245447][T10918] veth0_to_bridge: left promiscuous mode [ 289.272409][T10918] veth1_to_bridge: left promiscuous mode [ 289.297659][T10931] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1010'. [ 289.297685][T10931] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1010'. [ 289.297737][T10931] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1010'. [ 289.436079][T10918] veth1_to_bond: left promiscuous mode [ 289.483260][T10918] veth1_to_team: left promiscuous mode [ 289.500685][T10918] team_slave_1: left promiscuous mode [ 289.506019][T10918] veth0_to_batadv: left promiscuous mode [ 289.559502][T10918] batadv_slave_0: left promiscuous mode [ 289.568915][T10918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.608332][T10918] veth1_to_batadv: left promiscuous mode [ 289.631902][T10918] batadv_slave_1: left promiscuous mode [ 289.640461][T10918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.753575][T10935] netlink: 516 bytes leftover after parsing attributes in process `syz.4.1011'. [ 289.886988][T10918] xfrm0: left promiscuous mode [ 289.894556][T10918] veth0_to_hsr: left promiscuous mode [ 289.939767][T10918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 290.003122][T10918] veth1_vlan: left promiscuous mode [ 290.018048][T10918] veth0_vlan: left promiscuous mode [ 290.029978][T10918] veth0_vlan: entered promiscuous mode [ 290.038664][T10918] veth1_vlan: entered promiscuous mode [ 290.091344][T10918] veth1_macvtap: left promiscuous mode [ 290.096336][T10918] veth0_macvtap: left promiscuous mode [ 290.099317][T10918] veth0_macvtap: entered promiscuous mode [ 290.105639][T10918] veth1_macvtap: entered promiscuous mode [ 290.151671][T10918] geneve0: left promiscuous mode [ 290.168950][T10918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.183795][T10918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.185139][T10918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.188042][T10918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.252771][T10918] bridge0: port 3(gretap1) entered blocking state [ 290.252939][T10918] bridge0: port 3(gretap1) entered forwarding state [ 290.259929][ T5815] lo speed is unknown, defaulting to 1000 [ 290.259983][ T5815] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 290.262966][ T6635] bridge0: entered promiscuous mode [ 290.272473][ T1215] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.272609][ T1215] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.281891][ T1215] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.282075][ T1215] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.341643][ T59] bridge0: port 4(veth0) entered blocking state [ 290.341780][ T59] bridge0: port 4(veth0) entered forwarding state [ 290.343343][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.343488][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.348283][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.348430][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.410974][ T59] bridge0: port 5(veth0_virt_wifi) entered blocking state [ 290.411100][ T59] bridge0: port 5(veth0_virt_wifi) entered forwarding state [ 290.913359][ T1177] net_ratelimit: 275 callbacks suppressed [ 290.913383][ T1177] bond2: (slave syz_tun): failed to get link speed/duplex [ 290.938907][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1020'. [ 290.990698][T10960] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 291.022162][ T1177] bond2: (slave syz_tun): failed to get link speed/duplex [ 291.047003][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 291.080315][ T1177] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 291.192026][ T6402] bond2: (slave syz_tun): failed to get link speed/duplex [ 291.290610][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 291.312425][ T1177] bond2: (slave syz_tun): failed to get link speed/duplex [ 291.421143][ T6402] bond2: (slave syz_tun): failed to get link speed/duplex [ 291.531261][ T1177] bond2: (slave syz_tun): failed to get link speed/duplex [ 291.591043][T10979] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1024'. [ 291.591119][T10979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1024'. [ 291.591736][ T6402] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 291.634763][T10984] netlink: 492 bytes leftover after parsing attributes in process `syz.0.1025'. [ 291.644200][ T1177] bond2: (slave syz_tun): failed to get link speed/duplex [ 291.665243][T10966] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 291.678422][T10966] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 291.754302][ T6404] bond2: (slave syz_tun): failed to get link speed/duplex [ 291.869210][T10987] x_tables: duplicate entry at hook 1 [ 292.174701][T10987] netlink: 'syz.3.1026': attribute type 1 has an invalid length. [ 293.783642][T11036] bridge0: port 6(bond0) entered disabled state [ 293.783990][T11036] bridge0: port 5(veth0_virt_wifi) entered disabled state [ 293.786095][T11036] bridge0: port 4(veth0) entered disabled state [ 293.786416][T11036] bridge0: port 3(gretap1) entered disabled state [ 293.786677][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.787049][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.887817][T11036] batman_adv: batadv0: Interface deactivated: dummy0 [ 294.892187][T11036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.945548][T11036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.441655][T11084] netlink: 'syz.2.1049': attribute type 21 has an invalid length. [ 295.441692][T11084] __nla_validate_parse: 13 callbacks suppressed [ 295.441707][T11084] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1049'. [ 295.749318][ T30] lo speed is unknown, defaulting to 1000 [ 295.749369][ T30] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 295.762259][ T79] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.762446][ T79] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.762546][ T79] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.763350][ T79] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.920978][T11095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1050'. [ 296.009552][T11084] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 296.009576][T11084] netlink: 'syz.2.1049': attribute type 3 has an invalid length. [ 296.009592][T11084] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1049'. [ 296.188185][T11096] tipc: Resetting bearer [ 296.238237][ T8384] syz1: Port: 1 Link DOWN [ 296.448023][T11110] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1052'. [ 296.448175][T11110] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1052'. [ 296.691539][T11114] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1053'. [ 296.691563][T11114] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1053'. [ 296.691619][T11114] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1053'. [ 296.844449][T11120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1055'. [ 297.013815][T11120] : renamed from lo [ 297.312984][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1060'. [ 297.826144][T11138] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 298.351636][T11156] syzkaller1: entered promiscuous mode [ 298.351699][T11156] syzkaller1: entered allmulticast mode [ 298.649696][T11138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 300.581631][T11208] __nla_validate_parse: 6 callbacks suppressed [ 300.581660][T11208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1082'. [ 300.947425][T11210] bond4: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 300.985040][T11210] bond4: (slave ip6tnl1): Error -95 calling set_mac_address [ 301.013269][T11208] netlink: 'syz.2.1082': attribute type 1 has an invalid length. [ 301.013296][T11208] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1082'. [ 301.026468][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1085'. [ 301.026521][T11216] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1085'. [ 301.026673][T11216] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1085'. [ 301.123716][T11217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1086'. [ 301.838291][T11245] net_ratelimit: 16 callbacks suppressed [ 301.838315][T11245] netlink: zone id is out of range [ 301.838325][T11245] netlink: zone id is out of range [ 301.838335][T11245] netlink: zone id is out of range [ 301.838344][T11245] netlink: zone id is out of range [ 301.838354][T11245] netlink: zone id is out of range [ 301.838520][T11245] netlink: zone id is out of range [ 301.838531][T11245] netlink: zone id is out of range [ 301.838540][T11245] netlink: zone id is out of range [ 301.919343][T11242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.933877][T11242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.288730][T11242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.314744][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 302.319494][T11242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.359404][T11242] veth1_vlan: left promiscuous mode [ 302.374392][T11242] veth0_vlan: left promiscuous mode [ 302.389664][T11242] veth0_vlan: entered promiscuous mode [ 302.432130][T11242] veth1_vlan: entered promiscuous mode [ 302.515390][T11242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.546911][T11242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.562414][T11242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 302.569590][T11242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 302.592653][T11242] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 302.616749][T11242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 302.630176][T11242] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 302.688211][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.688449][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.739636][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.739857][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.941032][ T6404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.941073][ T6404] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.941145][ T6404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.941174][ T6404] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.941214][ T6404] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.941242][ T6404] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 302.941282][ T6404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.941310][ T6404] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 303.092491][T11257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.153994][T11257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.478746][T11264] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1098'. [ 303.497141][T11273] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1101'. [ 303.497166][T11273] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1101'. [ 303.809865][T11279] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 304.189488][T11291] Cannot find map_set index 2 as target [ 304.403052][T11298] bond5: option primary_reselect: invalid value (6) [ 304.405664][T11298] bond5 (unregistering): Released all slaves [ 304.467407][T11303] netlink: 'syz.4.1108': attribute type 21 has an invalid length. [ 304.467499][T11303] netlink: 'syz.4.1108': attribute type 4 has an invalid length. [ 304.467515][T11303] netlink: 'syz.4.1108': attribute type 3 has an invalid length. [ 304.631393][T11279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.566491][T11319] bond5 (unregistering): Released all slaves [ 305.644381][T11330] __nla_validate_parse: 7 callbacks suppressed [ 305.644403][T11330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1118'. [ 305.644420][T11330] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1118'. [ 305.644488][T11330] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1118'. [ 305.797639][T11336] batman_adv: batadv0: Interface deactivated: dummy0 [ 305.797669][T11336] batman_adv: batadv0: Removing interface: dummy0 [ 305.833765][T11327] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1116'. [ 306.122067][T11339] bridge2: left promiscuous mode [ 306.238774][ T40] tipc: Subscription rejected, illegal request [ 306.342642][T11339] netlink: zone id is out of range [ 306.595559][ T6404] tipc: Subscription rejected, illegal request [ 307.076572][T11365] : entered promiscuous mode [ 307.077746][T11365] tunl0: entered promiscuous mode [ 307.090338][T11365] gre0: entered promiscuous mode [ 307.102061][T11365] gretap0: entered promiscuous mode [ 307.106158][T11365] erspan0: entered promiscuous mode [ 307.107180][T11365] ip_vti0: entered promiscuous mode [ 307.139750][T11365] ip6_vti0: entered promiscuous mode [ 307.149257][T11365] sit0: entered promiscuous mode [ 307.169406][T11365] ip6tnl0: entered promiscuous mode [ 307.181478][T11365] ip6gre0: entered promiscuous mode [ 307.181831][T11365] ip6gretap0: entered promiscuous mode [ 307.182189][T11365] bridge0: entered promiscuous mode [ 307.182334][T11365] vcan0: entered promiscuous mode [ 307.203408][T11365] bond0: entered promiscuous mode [ 307.203474][T11365] bond_slave_0: entered promiscuous mode [ 307.204829][T11365] team0: entered promiscuous mode [ 307.204883][T11365] team_slave_1: entered promiscuous mode [ 307.308985][T11365] dummy0: entered promiscuous mode [ 307.309179][T11365] nlmon0: entered promiscuous mode [ 307.309350][T11365] veth0: entered promiscuous mode [ 307.309551][T11365] veth1: entered promiscuous mode [ 307.309714][T11365] wg0: entered promiscuous mode [ 307.309944][T11365] wg1: entered promiscuous mode [ 307.341905][T11365] wg2: entered promiscuous mode [ 307.342110][T11365] veth0_to_bridge: entered promiscuous mode [ 307.342403][T11365] veth1_to_bridge: entered promiscuous mode [ 307.343114][T11365] veth0_to_bond: entered promiscuous mode [ 307.343429][T11365] C: entered promiscuous mode [ 307.343735][T11365] veth0_to_batadv: entered promiscuous mode [ 307.343992][T11365] batadv_slave_0: entered promiscuous mode [ 307.344152][T11365] veth1_to_batadv: entered promiscuous mode [ 307.344312][T11365] batadv_slave_1: entered promiscuous mode [ 307.344473][T11365] xfrm0: entered promiscuous mode [ 307.344637][T11365] veth0_to_hsr: entered promiscuous mode [ 307.627256][T11372] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1129'. [ 307.627283][T11372] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1129'. [ 307.627343][T11372] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1129'. [ 308.098599][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 308.359494][T11388] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1134'. [ 308.468508][T11385] net_ratelimit: 502 callbacks suppressed [ 308.468532][T11385] netlink: zone id is out of range [ 308.468542][T11385] netlink: zone id is out of range [ 308.468551][T11385] netlink: zone id is out of range [ 308.468561][T11385] netlink: zone id is out of range [ 308.468570][T11385] netlink: zone id is out of range [ 308.468579][T11385] netlink: zone id is out of range [ 308.468593][T11385] netlink: zone id is out of range [ 308.468602][T11385] netlink: zone id is out of range [ 308.468611][T11385] netlink: zone id is out of range [ 308.468619][T11385] netlink: zone id is out of range [ 308.738634][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 308.820608][T11392] tc_dump_action: action bad kind [ 309.270113][T11413] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 309.416339][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.466216][T11398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.865571][T11398] bond3: left allmulticast mode [ 309.867251][T11398] erspan1: left allmulticast mode [ 309.935544][T11411] lo: entered promiscuous mode [ 309.935729][T11411] tunl0: entered promiscuous mode [ 309.935901][T11411] gre0: entered promiscuous mode [ 309.936029][T11411] gretap0: entered promiscuous mode [ 309.936165][T11411] erspan0: entered promiscuous mode [ 309.936291][T11411] ip_vti0: entered promiscuous mode [ 309.937683][T11411] ip6_vti0: entered promiscuous mode [ 309.937817][T11411] sit0: entered promiscuous mode [ 309.937946][T11411] ip6tnl0: entered promiscuous mode [ 309.938082][T11411] ip6gre0: entered promiscuous mode [ 309.938764][T11411] syz_tun: entered promiscuous mode [ 309.938903][T11411] ip6gretap0: entered promiscuous mode [ 309.939308][T11411] team0: entered promiscuous mode [ 309.939326][T11411] team_slave_1: entered promiscuous mode [ 310.019527][T11411] dummy0: entered promiscuous mode [ 310.034593][T11411] nlmon0: entered promiscuous mode [ 310.046951][T11411] batadv0: entered promiscuous mode [ 310.058882][T11411] vxcan0: entered promiscuous mode [ 310.059331][T11411] vxcan1: entered promiscuous mode [ 310.072713][T11411] veth1: entered promiscuous mode [ 310.073162][T11411] wg0: entered promiscuous mode [ 310.073558][T11411] wg1: entered promiscuous mode [ 310.074223][T11411] wg2: entered promiscuous mode [ 310.074644][T11411] veth0_to_bridge: entered promiscuous mode [ 310.088726][T11411] veth1_to_bridge: entered promiscuous mode [ 310.089534][T11411] veth1_to_bond: entered promiscuous mode [ 310.110717][T11411] veth1_to_team: entered promiscuous mode [ 310.117385][T11411] veth0_to_batadv: entered promiscuous mode [ 310.117819][T11411] batadv_slave_0: entered promiscuous mode [ 310.136313][T11411] veth1_to_batadv: entered promiscuous mode [ 310.137596][T11411] batadv_slave_1: entered promiscuous mode [ 310.138029][T11411] xfrm0: entered promiscuous mode [ 310.138523][T11411] veth0_to_hsr: entered promiscuous mode [ 310.611676][ T1215] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.611716][ T1215] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 310.611777][ T1215] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.611806][ T1215] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 310.611844][ T1215] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.611872][ T1215] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 310.611918][ T1215] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.611946][ T1215] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 310.956069][T11428] lo: left promiscuous mode [ 310.978986][T11428] tunl0: left promiscuous mode [ 311.016161][T11428] gre0: left promiscuous mode [ 311.031543][T11428] gretap0: left promiscuous mode [ 311.057340][T11428] erspan0: left promiscuous mode [ 311.088444][T11428] ip_vti0: left promiscuous mode [ 311.103225][T11428] ip6_vti0: left promiscuous mode [ 311.108130][T11428] sit0: left promiscuous mode [ 311.140308][T11428] ip6tnl0: left promiscuous mode [ 311.145314][T11428] ip6gre0: left promiscuous mode [ 311.148835][T11428] syz_tun: left promiscuous mode [ 311.179972][T11428] ip6gretap0: left promiscuous mode [ 311.215126][T11428] bridge0: left promiscuous mode [ 311.227449][T11428] bridge0: port 6(bond0) entered blocking state [ 311.227619][T11428] bridge0: port 6(bond0) entered forwarding state [ 311.245346][T11428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.247733][T11428] team0: left promiscuous mode [ 311.249589][T11428] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.373910][T11428] dummy0: left promiscuous mode [ 311.376713][T11428] batman_adv: batadv0: Interface activated: dummy0 [ 311.377311][T11428] nlmon0: left promiscuous mode [ 311.378738][T11428] batadv0: left promiscuous mode [ 311.407376][T11428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.418279][T11428] vxcan0: left promiscuous mode [ 311.439942][T11428] vxcan1: left promiscuous mode [ 311.472889][T11428] veth1: left promiscuous mode [ 311.496463][T11428] wg0: left promiscuous mode [ 311.527154][T11428] wg1: left promiscuous mode [ 311.554574][T11428] wg2: left promiscuous mode [ 311.557101][T11428] veth0_to_bridge: left promiscuous mode [ 311.596858][T11428] veth1_to_bridge: left promiscuous mode [ 311.638254][T11428] veth1_to_bond: left promiscuous mode [ 311.687350][T11428] veth1_to_team: left promiscuous mode [ 311.716275][T11428] team_slave_1: left promiscuous mode [ 311.719370][T11428] veth0_to_batadv: left promiscuous mode [ 311.757696][T11428] batadv_slave_0: left promiscuous mode [ 311.758628][T11428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.759165][T11428] veth1_to_batadv: left promiscuous mode [ 311.804824][T11428] batadv_slave_1: left promiscuous mode [ 311.806966][T11428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.807522][T11428] xfrm0: left promiscuous mode [ 311.833927][T11428] veth0_to_hsr: left promiscuous mode [ 311.858107][T11428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.045772][T11428] veth1_vlan: left promiscuous mode [ 312.072592][T11428] veth0_vlan: left promiscuous mode [ 312.078761][T11428] veth0_vlan: entered promiscuous mode [ 312.103700][T11428] veth1_vlan: entered promiscuous mode [ 312.162260][T11428] veth1_macvtap: left promiscuous mode [ 312.201626][T11428] veth0_macvtap: left promiscuous mode [ 312.206842][ T40] tipc: Subscription rejected, illegal request [ 312.207085][T11428] veth0_macvtap: entered promiscuous mode [ 312.316390][T11428] veth1_macvtap: entered promiscuous mode [ 312.538174][T11428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 312.573145][T11428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 312.596413][T11428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.633536][T11428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 312.728286][T11428] bridge0: port 3(gretap1) entered blocking state [ 312.728436][T11428] bridge0: port 3(gretap1) entered forwarding state [ 312.748106][ T8384] lo speed is unknown, defaulting to 1000 [ 312.748154][ T8384] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 312.777781][T11452] x_tables: duplicate underflow at hook 1 [ 312.779799][ T5815] bridge0: entered promiscuous mode [ 312.819047][ T6404] bridge0: port 4(veth0) entered blocking state [ 312.819189][ T6404] bridge0: port 4(veth0) entered forwarding state [ 312.834071][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.834232][ T6404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.836516][ T6404] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.836666][ T6404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.919616][ T6404] bridge0: port 5(veth0_virt_wifi) entered blocking state [ 312.919876][ T6404] bridge0: port 5(veth0_virt_wifi) entered forwarding state [ 313.186055][T11462] : entered allmulticast mode [ 313.207812][T11465] netlink: 'syz.0.1153': attribute type 21 has an invalid length. [ 313.207840][T11465] __nla_validate_parse: 3 callbacks suppressed [ 313.207854][T11465] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1153'. [ 313.276884][ T6403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.276995][ T6403] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.277064][ T6403] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.277126][ T6403] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.347049][T11460] dvmrp6: entered allmulticast mode [ 313.362119][T11465] netlink: 'syz.0.1153': attribute type 4 has an invalid length. [ 313.362162][T11465] netlink: 'syz.0.1153': attribute type 3 has an invalid length. [ 313.362214][T11465] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1153'. [ 313.888969][ T5815] lo speed is unknown, defaulting to 1000 [ 313.898703][T11474] lo: entered promiscuous mode [ 313.898881][T11474] tunl0: entered promiscuous mode [ 313.899051][T11474] gre0: entered promiscuous mode [ 313.899178][T11474] 0{X: entered promiscuous mode [ 313.899303][T11474] erspan0: entered promiscuous mode [ 313.899432][T11474] ip_vti0: entered promiscuous mode [ 313.899602][T11474] ip6_vti0: entered promiscuous mode [ 313.899721][T11474] sit0: entered promiscuous mode [ 313.899845][T11474] ip6tnl0: entered promiscuous mode [ 313.899978][T11474] ip6gre0: entered promiscuous mode [ 313.900103][T11474] syz_tun: entered promiscuous mode [ 313.900254][T11474] ip6gretap0: entered promiscuous mode [ 313.900384][T11474] vcan0: entered promiscuous mode [ 313.900528][T11474] bond0: entered promiscuous mode [ 313.900543][T11474] bond_slave_0: entered promiscuous mode [ 313.900742][T11474] bond_slave_1: entered promiscuous mode [ 313.930345][T11474] team0: entered promiscuous mode [ 313.930420][T11474] team_slave_1: entered promiscuous mode [ 314.013263][T11474] dummy0: entered promiscuous mode [ 314.018228][T11474] batadv0: entered promiscuous mode [ 314.019489][T11474] vxcan0: entered promiscuous mode [ 314.019673][T11474] vxcan1: entered promiscuous mode [ 314.019834][T11474] veth0: entered promiscuous mode [ 314.020124][T11474] veth1: entered promiscuous mode [ 314.053917][T11474] wg0: entered promiscuous mode [ 314.054091][T11474] wg1: entered promiscuous mode [ 314.054564][T11474] wg2: entered promiscuous mode [ 314.091466][T11474] veth0_to_bridge: entered promiscuous mode [ 314.093000][T11474] bridge_slave_0: entered promiscuous mode [ 314.093193][T11474] veth1_to_bridge: entered promiscuous mode [ 314.093376][T11474] bridge_slave_1: entered promiscuous mode [ 314.093535][T11474] veth0_to_bond: entered promiscuous mode [ 314.094111][T11474] veth1_to_bond: entered promiscuous mode [ 314.094482][T11474] veth1_to_team: entered promiscuous mode [ 314.094782][T11474] veth0_to_batadv: entered promiscuous mode [ 314.094944][T11474] batadv_slave_0: entered promiscuous mode [ 314.095123][T11474] veth1_to_batadv: entered promiscuous mode [ 314.095341][T11474] batadv_slave_1: entered promiscuous mode [ 314.097981][T11474] xfrm0: entered promiscuous mode [ 314.098190][T11474] veth0_to_hsr: entered promiscuous mode [ 314.128869][T11456] : left allmulticast mode [ 314.642369][T11485] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1158'. [ 314.642434][T11485] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1158'. [ 315.445682][T11508] tc_dump_action: action bad kind [ 315.917223][T11516] netlink: 'syz.0.1177': attribute type 3 has an invalid length. [ 315.917284][T11516] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1177'. [ 316.214855][T11518] : left promiscuous mode [ 316.215289][T11518] tunl0: left promiscuous mode [ 316.215637][T11518] gre0: left promiscuous mode [ 316.215938][T11518] gretap0: left promiscuous mode [ 316.216233][T11518] erspan0: left promiscuous mode [ 316.216631][T11518] ip_vti0: left promiscuous mode [ 316.230823][T11523] netlink: 'syz.0.1169': attribute type 1 has an invalid length. [ 316.230846][T11523] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1169'. [ 316.241362][T11518] ip6_vti0: left promiscuous mode [ 316.241580][T11518] sit0: left promiscuous mode [ 316.241742][T11518] ip6tnl0: left promiscuous mode [ 316.241899][T11518] ip6gre0: left promiscuous mode [ 316.242057][T11518] ip6gretap0: left promiscuous mode [ 316.242213][T11518] bridge0: left promiscuous mode [ 316.242392][T11518] vcan0: left promiscuous mode [ 316.242683][T11518] bond0: left promiscuous mode [ 316.243849][T11518] team0: left promiscuous mode [ 316.248685][T11518] dummy0: left promiscuous mode [ 316.249249][T11518] nlmon0: left promiscuous mode [ 316.262877][T11518] veth0: left promiscuous mode [ 316.263367][T11518] veth1: left promiscuous mode [ 316.263878][T11518] wg0: left promiscuous mode [ 316.264432][T11518] wg1: left promiscuous mode [ 316.265055][T11518] wg2: left promiscuous mode [ 316.327872][T11518] veth0_to_bridge: left promiscuous mode [ 316.329059][T11518] veth1_to_bridge: left promiscuous mode [ 316.329970][T11518] veth0_to_bond: left promiscuous mode [ 316.371079][T11518] bond_slave_0: left promiscuous mode [ 316.371367][T11518] C: left promiscuous mode [ 316.371572][T11518] team_slave_1: left promiscuous mode [ 316.371760][T11518] veth0_to_batadv: left promiscuous mode [ 316.371950][T11518] batadv_slave_0: left promiscuous mode [ 316.372135][T11518] veth1_to_batadv: left promiscuous mode [ 316.372329][T11518] batadv_slave_1: left promiscuous mode [ 316.411464][T11518] xfrm0: left promiscuous mode [ 316.412057][T11518] veth0_to_hsr: left promiscuous mode [ 316.433800][T11524] net_ratelimit: 652 callbacks suppressed [ 316.433846][T11524] netlink: zone id is out of range [ 316.433858][T11524] netlink: zone id is out of range [ 316.433887][T11524] netlink: zone id is out of range [ 316.433915][T11524] netlink: zone id is out of range [ 316.433925][T11524] netlink: zone id is out of range [ 316.433983][T11524] netlink: zone id is out of range [ 316.434016][T11524] netlink: zone id is out of range [ 316.434025][T11524] netlink: zone id is out of range [ 316.434054][T11524] netlink: zone id is out of range [ 316.434084][T11524] netlink: zone id is out of range [ 316.975470][T11530] syzkaller0: entered promiscuous mode [ 316.975496][T11530] syzkaller0: entered allmulticast mode [ 317.187726][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.560215][T11546] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.569719][ T6406] tipc: Subscription rejected, illegal request [ 317.943358][T11553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1176'. [ 317.943425][T11553] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1176'. [ 317.943558][T11553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1176'. [ 318.327607][T11562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1180'. [ 318.662886][T11566] tc_dump_action: action bad kind [ 319.619358][ T79] tipc: Subscription rejected, illegal request [ 319.731991][T11592] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1191'. [ 319.732018][T11592] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1191'. [ 319.732077][T11592] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1191'. [ 320.417238][T11599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1194'. [ 320.504817][T11612] lo: left promiscuous mode [ 320.521302][T11616] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1199'. [ 320.521328][T11616] netlink: 192 bytes leftover after parsing attributes in process `syz.4.1199'. [ 320.521382][T11616] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1199'. [ 320.579357][T11612] tunl0: left promiscuous mode [ 320.592689][T11612] gre0: left promiscuous mode [ 320.634591][T11612] gretap0: left promiscuous mode [ 320.767156][T11622] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1197'. [ 320.832984][T11612] ip_vti0: left promiscuous mode [ 320.875577][T11612] ip6_vti0: left promiscuous mode [ 320.906026][T11612] sit0: left promiscuous mode [ 320.962191][T11612] ip6tnl0: left promiscuous mode [ 321.082848][T11616] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1199'. [ 321.214879][T11612] ip6gre0: left promiscuous mode [ 321.406346][T11612] ip6gretap0: left promiscuous mode [ 321.434974][T11612] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.435630][T11612] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.436367][T11612] bridge0: left promiscuous mode [ 321.489458][T11612] vcan0: left promiscuous mode [ 321.563101][T11612] nlmon0: left promiscuous mode [ 321.597819][T11612] batadv0: left promiscuous mode [ 321.638750][T11612] vxcan0: left promiscuous mode [ 321.655096][T11612] vxcan1: left promiscuous mode [ 321.838610][T11612] veth0: left promiscuous mode [ 321.923840][ T6406] tipc: Subscription rejected, illegal request [ 321.926071][T11612] veth1: left promiscuous mode [ 322.073562][T11612] wg0: left promiscuous mode [ 322.093943][T11612] wg1: left promiscuous mode [ 322.097746][T11612] wg2: left promiscuous mode [ 322.100014][T11612] veth0_to_bridge: left promiscuous mode [ 322.124164][T11612] veth1_to_bridge: left promiscuous mode [ 322.224422][T11612] veth0_to_bond: left promiscuous mode [ 322.251864][T11612] veth1_to_bond: left promiscuous mode [ 322.269294][T11612] veth1_to_team: left promiscuous mode [ 322.280163][T11612] team_slave_1: left promiscuous mode [ 322.285437][T11612] veth0_to_batadv: left promiscuous mode [ 322.304834][T11612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.305199][T11612] batadv_slave_0: left promiscuous mode [ 322.464933][T11612] veth1_to_batadv: left promiscuous mode [ 322.491772][T11612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.491843][T11612] batadv_slave_1: left promiscuous mode [ 322.528569][T11612] xfrm0: left promiscuous mode [ 322.567358][T11612] veth0_to_hsr: left promiscuous mode [ 322.911939][T11612] tipc: Resetting bearer [ 322.914981][T11612] syzkaller0: left promiscuous mode [ 322.915005][T11612] syzkaller0: left allmulticast mode [ 322.967764][T11612] bond3: left promiscuous mode [ 322.967794][T11612] bond3: left allmulticast mode [ 322.980516][ T40] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.980554][ T40] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.981482][ T40] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.981512][ T40] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.981552][ T40] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.981595][ T40] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.981633][ T40] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.981662][ T40] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 322.986478][T11638] tc_dump_action: action bad kind [ 323.228709][T11656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.237718][T11656] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.247056][T11656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.293004][T11656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.295406][T11656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.298538][T11656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 323.328055][T11656] net_ratelimit: 1017 callbacks suppressed [ 323.328076][T11656] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 323.584718][T11680] __nla_validate_parse: 5 callbacks suppressed [ 323.584740][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 323.616178][T11665] syzkaller0: entered promiscuous mode [ 323.616203][T11665] syzkaller0: entered allmulticast mode [ 323.660545][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1215'. [ 323.660643][T11685] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1215'. [ 323.660699][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1215'. [ 323.727650][T11683] xt_hl: Unknown Hop Limit match mode: 4 [ 323.779057][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1215'. [ 323.779082][T11685] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1215'. [ 323.779141][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1215'. [ 323.894944][T11679] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.978034][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1215'. [ 323.978061][T11685] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1215'. [ 323.978118][T11685] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1215'. [ 324.046582][ T6402] tipc: Subscription rejected, illegal request [ 324.218710][T11698] tc_dump_action: action bad kind [ 325.069206][T11715] tc_dump_action: action bad kind [ 325.069892][T11714] tc_dump_action: action bad kind [ 325.236192][T11729] netlink: zone id is out of range [ 325.236209][T11729] netlink: zone id is out of range [ 325.236219][T11729] netlink: zone id is out of range [ 325.236228][T11729] netlink: zone id is out of range [ 325.236236][T11729] netlink: zone id is out of range [ 325.236245][T11729] netlink: zone id is out of range [ 325.236258][T11729] netlink: zone id is out of range [ 325.236267][T11729] netlink: zone id is out of range [ 325.236277][T11729] netlink: zone id is out of range [ 325.345847][T11717] bridge2: port 1(erspan0) entered disabled state [ 326.191777][T11717] bond1: left allmulticast mode [ 326.191807][T11717] bridge1: left allmulticast mode [ 326.199667][T11717] vlan2: left allmulticast mode [ 326.199693][T11717] bridge2: left allmulticast mode [ 326.240480][ T40] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.240519][ T40] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.240563][ T40] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.240591][ T40] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.240630][ T40] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.240657][ T40] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.240696][ T40] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.240729][ T40] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.598634][ T40] tipc: Subscription rejected, illegal request [ 327.008553][T11757] tc_dump_action: action bad kind [ 327.076646][T11764] tc_dump_action: action bad kind [ 327.259243][T11773] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 327.268208][T11773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 327.633897][ T40] tipc: Subscription rejected, illegal request [ 329.086339][T11836] __nla_validate_parse: 11 callbacks suppressed [ 329.086363][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1265'. [ 329.279022][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 329.968315][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1279'. [ 329.968341][T11871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 329.974246][T11871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1279'. [ 330.170865][ T6402] tipc: Subscription rejected, illegal request [ 330.337946][T11882] netlink: 'syz.4.1283': attribute type 3 has an invalid length. [ 330.375681][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1283'. [ 330.548034][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 330.548062][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1284'. [ 330.568625][T11886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1284'. [ 330.776264][T11891] net_ratelimit: 496 callbacks suppressed [ 330.776287][T11891] netlink: zone id is out of range [ 330.776296][T11891] netlink: zone id is out of range [ 330.776304][T11891] netlink: zone id is out of range [ 330.776312][T11891] netlink: zone id is out of range [ 330.776320][T11891] netlink: zone id is out of range [ 330.776328][T11891] netlink: zone id is out of range [ 330.776340][T11891] netlink: zone id is out of range [ 330.776348][T11891] netlink: zone id is out of range [ 330.776357][T11891] netlink: zone id is out of range [ 330.776365][T11891] netlink: zone id is out of range [ 330.955869][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1288'. [ 331.000682][T11900] syzkaller1: entered promiscuous mode [ 331.000708][T11900] syzkaller1: entered allmulticast mode [ 331.425726][ T79] tipc: Subscription rejected, illegal request [ 332.206661][T11942] lo: entered promiscuous mode [ 332.206864][T11942] tunl0: entered promiscuous mode [ 332.206997][T11942] gre0: entered promiscuous mode [ 332.215772][T11942] gretap0: entered promiscuous mode [ 332.216278][T11942] ip_vti0: entered promiscuous mode [ 332.222242][T11942] ip6_vti0: entered promiscuous mode [ 332.226652][T11942] sit0: entered promiscuous mode [ 332.227076][T11942] ip6tnl0: entered promiscuous mode [ 332.227402][T11942] ip6gre0: entered promiscuous mode [ 332.227701][T11942] ip6gretap0: entered promiscuous mode [ 332.231838][T11942] bridge0: entered promiscuous mode [ 332.232284][T11942] vcan0: entered promiscuous mode [ 332.241231][T11942] nlmon0: entered promiscuous mode [ 332.241714][T11942] batadv0: entered promiscuous mode [ 332.244550][T11942] vxcan0: entered promiscuous mode [ 332.244710][T11942] vxcan1: entered promiscuous mode [ 332.247153][T11942] veth0: entered promiscuous mode [ 332.247444][T11942] veth1: entered promiscuous mode [ 332.247855][T11942] wg0: entered promiscuous mode [ 332.263594][T11942] wg1: entered promiscuous mode [ 332.264096][T11942] wg2: entered promiscuous mode [ 332.267404][T11942] veth0_to_bridge: entered promiscuous mode [ 332.284226][T11942] veth1_to_bridge: entered promiscuous mode [ 332.284744][T11942] veth0_to_bond: entered promiscuous mode [ 332.308693][T11942] veth1_to_bond: entered promiscuous mode [ 332.309581][T11942] veth1_to_team: entered promiscuous mode [ 332.337136][T11942] team_slave_1: entered promiscuous mode [ 332.337666][T11942] veth0_to_batadv: entered promiscuous mode [ 332.338096][T11942] batadv_slave_0: entered promiscuous mode [ 332.346600][T11942] veth1_to_batadv: entered promiscuous mode [ 332.347134][T11942] batadv_slave_1: entered promiscuous mode [ 332.353609][T11942] xfrm0: entered promiscuous mode [ 332.361400][T11942] veth0_to_hsr: entered promiscuous mode [ 332.889401][ T79] tipc: Subscription rejected, illegal request [ 333.158410][T11961] batman_adv: batadv0: Adding interface: dummy0 [ 333.158432][T11961] batman_adv: batadv0: The MTU of interface dummy0 is too small (1504) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 333.158467][T11961] batman_adv: batadv0: Interface activated: dummy0 [ 333.609944][T11977] lo: entered promiscuous mode [ 333.618242][T11977] tunl0: entered promiscuous mode [ 333.626226][T11977] gre0: entered promiscuous mode [ 333.626364][T11977] gretap0: entered promiscuous mode [ 333.626610][T11977] ip_vti0: entered promiscuous mode [ 333.626795][T11977] ip6_vti0: entered promiscuous mode [ 333.626921][T11977] sit0: entered promiscuous mode [ 333.627044][T11977] ip6tnl0: entered promiscuous mode [ 333.627162][T11977] ip6gre0: entered promiscuous mode [ 333.674081][T11977] syz_tun: entered promiscuous mode [ 333.674239][T11977] ip6gretap0: entered promiscuous mode [ 333.674370][T11977] bridge0: entered promiscuous mode [ 333.679336][T11977] vcan0: entered promiscuous mode [ 333.722558][T11977] bond0: entered promiscuous mode [ 333.722584][T11977] bond_slave_0: entered promiscuous mode [ 333.722782][T11977] bond_slave_1: entered promiscuous mode [ 333.723104][T11977] team0: entered promiscuous mode [ 333.723123][T11977] team_slave_1: entered promiscuous mode [ 333.725739][T11977] dummy0: entered promiscuous mode [ 333.726218][T11977] nlmon0: entered promiscuous mode [ 333.726627][T11977] vxcan0: entered promiscuous mode [ 333.727029][T11977] vxcan1: entered promiscuous mode [ 333.727431][T11977] veth0: entered promiscuous mode [ 333.727836][T11977] veth1: entered promiscuous mode [ 333.728246][T11977] wg0: entered promiscuous mode [ 333.728640][T11977] wg1: entered promiscuous mode [ 333.729053][T11977] wg2: entered promiscuous mode [ 333.729456][T11977] veth0_to_bridge: entered promiscuous mode [ 333.766047][T11977] veth1_to_bridge: entered promiscuous mode [ 333.767001][T11977] veth0_to_bond: entered promiscuous mode [ 333.831746][T11977] veth1_to_bond: entered promiscuous mode [ 333.832415][T11977] veth1_to_team: entered promiscuous mode [ 333.832970][T11977] veth0_to_batadv: entered promiscuous mode [ 333.833377][T11977] batadv_slave_0: entered promiscuous mode [ 333.833771][T11977] xfrm0: entered promiscuous mode [ 333.834178][T11977] veth0_to_hsr: entered promiscuous mode [ 333.834980][T11977] veth1_to_hsr: entered promiscuous mode [ 333.891376][T11981] syzkaller0: entered promiscuous mode [ 333.891402][T11981] syzkaller0: entered allmulticast mode [ 334.231964][T11997] __nla_validate_parse: 8 callbacks suppressed [ 334.231988][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 334.232006][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 334.276358][T11997] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1320'. [ 334.856495][T12021] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 335.503306][T12027] batman_adv: batadv0: Interface deactivated: dummy0 [ 336.307577][ T1215] tipc: Subscription rejected, illegal request [ 336.326419][T12027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.396921][T12027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.477893][T12023] tc_dump_action: action bad kind [ 336.526293][T12058] net_ratelimit: 514 callbacks suppressed [ 336.526317][T12058] syzkaller0: mtu less than device minimum [ 336.709434][T12073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 336.709462][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1339'. [ 336.729284][T12073] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1339'. [ 337.226521][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 337.226584][T12099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1348'. [ 337.238523][T12099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1348'. [ 337.249283][T12099] syzkaller1: entered promiscuous mode [ 337.249338][T12099] syzkaller1: entered allmulticast mode [ 337.552504][T12106] netlink: 'syz.0.1351': attribute type 1 has an invalid length. [ 337.619337][T12106] lo: entered promiscuous mode [ 337.643357][T12106] tunl0: entered promiscuous mode [ 337.676151][T12106] gre0: entered promiscuous mode [ 337.705033][T12106] gretap0: entered promiscuous mode [ 337.776254][T12106] erspan0: entered promiscuous mode [ 337.793403][T12106] ip_vti0: entered promiscuous mode [ 337.831830][T12106] ip6_vti0: entered promiscuous mode [ 337.851177][T12106] sit0: entered promiscuous mode [ 337.883735][T12106] ip6tnl0: entered promiscuous mode [ 338.036341][T12106] ip6gre0: entered promiscuous mode [ 338.115967][T12106] syz_tun: entered promiscuous mode [ 338.218883][T12106] ip6gretap0: entered promiscuous mode [ 338.281851][T12106] bridge0: port 6(bond0) entered disabled state [ 338.282172][T12106] bridge0: port 5(veth0_virt_wifi) entered disabled state [ 338.282676][T12106] bridge0: port 4(veth0) entered disabled state [ 338.282962][T12106] bridge0: port 3(gretap1) entered disabled state [ 338.283161][T12106] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.283466][T12106] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.383076][T12106] team0: entered promiscuous mode [ 338.383102][T12106] team_slave_1: entered promiscuous mode [ 338.435579][T12106] batman_adv: batadv0: Interface deactivated: dummy0 [ 338.435640][T12106] dummy0: entered promiscuous mode [ 338.481449][T12106] nlmon0: entered promiscuous mode [ 338.485227][T12106] batadv0: entered promiscuous mode [ 338.527975][T12106] vxcan0: entered promiscuous mode [ 338.609420][T12106] vxcan1: entered promiscuous mode [ 338.740687][T12106] veth1: entered promiscuous mode [ 338.790552][T12106] wg0: entered promiscuous mode [ 338.823606][T12106] wg1: entered promiscuous mode [ 338.866039][T12106] wg2: entered promiscuous mode [ 338.886503][T12106] veth0_to_bridge: entered promiscuous mode [ 338.932674][T12106] veth1_to_bridge: entered promiscuous mode [ 338.995949][T12106] veth1_to_bond: entered promiscuous mode [ 339.042606][T12106] veth1_to_team: entered promiscuous mode [ 339.072707][T12106] veth0_to_batadv: entered promiscuous mode [ 339.089738][T12106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.089786][T12106] batadv_slave_0: entered promiscuous mode [ 339.117759][T12106] veth1_to_batadv: entered promiscuous mode [ 339.136924][T12106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.136972][T12106] batadv_slave_1: entered promiscuous mode [ 339.156606][T12106] xfrm0: entered promiscuous mode [ 339.179159][T12106] veth0_to_hsr: entered promiscuous mode [ 339.220392][ T6617] lo speed is unknown, defaulting to 1000 [ 339.221370][ T6617] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 339.221506][T12114] tc_dump_action: action bad kind [ 339.353765][T12139] syzkaller0: entered promiscuous mode [ 339.353790][T12139] syzkaller0: entered allmulticast mode [ 340.146521][ T6402] tipc: Subscription rejected, illegal request [ 340.871946][T12216] syzkaller0: mtu less than device minimum [ 341.142720][T12227] xt_hl: Unknown Hop Limit match mode: 4 [ 341.279395][T12227] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.352642][T12241] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1391'. [ 341.805024][T12258] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1395'. [ 341.916857][T12267] ip_tables: iptables: counters copy to user failed while replacing table [ 342.048172][T12271] : entered promiscuous mode [ 342.048373][T12271] tunl0: entered promiscuous mode [ 342.048542][T12271] gre0: entered promiscuous mode [ 342.049385][T12271] gretap0: entered promiscuous mode [ 342.049520][T12271] erspan0: entered promiscuous mode [ 342.049648][T12271] ip_vti0: entered promiscuous mode [ 342.049824][T12271] ip6_vti0: entered promiscuous mode [ 342.049982][T12271] sit0: entered promiscuous mode [ 342.100640][T12271] ip6tnl0: entered promiscuous mode [ 342.100793][T12271] ip6gre0: entered promiscuous mode [ 342.100921][T12271] ip6gretap0: entered promiscuous mode [ 342.101046][T12271] bridge0: entered promiscuous mode [ 342.101194][T12271] vcan0: entered promiscuous mode [ 342.101355][T12271] bond0: entered promiscuous mode [ 342.101388][T12271] bond_slave_0: entered promiscuous mode [ 342.101697][T12271] team0: entered promiscuous mode [ 342.101713][T12271] team_slave_1: entered promiscuous mode [ 342.111475][T12271] dummy0: entered promiscuous mode [ 342.141679][T12271] nlmon0: entered promiscuous mode [ 342.142179][T12271] veth0: entered promiscuous mode [ 342.146859][T12271] veth1: entered promiscuous mode [ 342.178608][T12271] wg0: entered promiscuous mode [ 342.179055][T12271] wg1: entered promiscuous mode [ 342.179479][T12271] wg2: entered promiscuous mode [ 342.191277][T12271] veth0_to_bridge: entered promiscuous mode [ 342.191958][T12271] veth1_to_bridge: entered promiscuous mode [ 342.218785][T12271] veth0_to_bond: entered promiscuous mode [ 342.219119][T12271] C: entered promiscuous mode [ 342.219439][T12271] veth0_to_batadv: entered promiscuous mode [ 342.229621][T12271] batadv_slave_0: entered promiscuous mode [ 342.245436][T12271] veth1_to_batadv: entered promiscuous mode [ 342.245627][T12271] batadv_slave_1: entered promiscuous mode [ 342.245790][T12271] xfrm0: entered promiscuous mode [ 342.245956][T12271] veth0_to_hsr: entered promiscuous mode [ 342.998889][T12301] tc_dump_action: action bad kind [ 344.313317][T12354] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1425'. [ 344.725780][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1433'. [ 344.725810][T12374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1433'. [ 344.756282][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 344.784099][T12374] syzkaller1: entered promiscuous mode [ 344.784123][T12374] syzkaller1: entered allmulticast mode [ 345.648039][T12412] ip_tables: iptables: counters copy to user failed while replacing table [ 345.702975][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'. [ 346.116046][T12434] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1451'. [ 346.324297][T12445] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1458'. [ 346.344627][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1459'. [ 346.637025][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1463'. [ 346.637051][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1463'. [ 346.638001][T12458] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1463'. [ 346.711826][T12463] netlink: Conntrack attr has 4 unknown bytes [ 347.592240][T12496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 347.595768][T12498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1482'. [ 347.710560][T12501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1481'. [ 347.859586][T12503] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 348.022052][T12516] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1489'. [ 348.056834][T12517] tc_dump_action: action bad kind [ 348.275922][T12528] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1490'. [ 348.278364][T12526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1490'. [ 348.278387][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1490'. [ 348.315350][T12530] netlink: ct_mark mask cannot be 0 [ 348.315374][T12530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.656601][T12540] ieee802154 phy1 wpan1: encryption failed: -22 [ 348.884869][T12547] syzkaller0: entered promiscuous mode [ 348.884887][T12547] syzkaller0: entered allmulticast mode [ 349.146476][T12556] tc_dump_action: action bad kind [ 349.621149][T12575] tc_dump_action: action bad kind [ 349.869708][T12587] syzkaller0: entered promiscuous mode [ 349.869732][T12587] syzkaller0: entered allmulticast mode [ 350.295415][T12597] tc_dump_action: action bad kind [ 350.934513][T12623] syzkaller0: entered promiscuous mode [ 350.934540][T12623] syzkaller0: entered allmulticast mode [ 351.356931][T12641] tc_dump_action: action bad kind [ 352.091535][T12667] __nla_validate_parse: 8 callbacks suppressed [ 352.091559][T12667] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1544'. [ 352.163724][T12669] netlink: zone id is out of range [ 352.163743][T12669] netlink: zone id is out of range [ 352.163754][T12669] netlink: zone id is out of range [ 352.163763][T12669] netlink: zone id is out of range [ 352.163773][T12669] netlink: zone id is out of range [ 352.163782][T12669] netlink: zone id is out of range [ 352.163790][T12669] netlink: zone id is out of range [ 352.163799][T12669] netlink: zone id is out of range [ 352.166324][T12664] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.010626][T12701] tc_dump_action: action bad kind [ 353.612526][T12732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1571'. [ 353.642706][T12734] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1574'. [ 353.834140][T12743] net_ratelimit: 1 callbacks suppressed [ 353.834163][T12743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.955040][T12744] syzkaller0: entered promiscuous mode [ 353.955067][T12744] syzkaller0: entered allmulticast mode [ 353.976753][T12744] tipc: Enabling of bearer rejected, failed to enable media [ 354.275622][T12759] ip_tables: iptables: counters copy to user failed while replacing table [ 354.857412][T12788] tc_dump_action: action bad kind [ 354.957218][T12789] syzkaller0: entered promiscuous mode [ 354.957261][T12789] syzkaller0: entered allmulticast mode [ 354.987209][T12789] tipc: Enabling of bearer rejected, failed to enable media [ 355.792253][T12818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 356.018582][T12826] tc_dump_action: action bad kind [ 356.071210][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 356.130798][T12831] vlan3: entered allmulticast mode [ 356.194565][T12841] syzkaller0: entered promiscuous mode [ 356.194591][T12841] syzkaller0: entered allmulticast mode [ 356.230275][T12827] tipc: Enabling of bearer rejected, failed to enable media [ 356.717060][T12856] tc_dump_action: action bad kind [ 357.140141][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 357.140167][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1624'. [ 357.148107][T12873] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1624'. [ 357.485405][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'. [ 357.705248][T12892] netlink: 'syz.0.1633': attribute type 3 has an invalid length. [ 357.705273][T12892] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1633'. [ 357.708655][T12888] tipc: Enabling of bearer rejected, failed to enable media [ 357.735755][T12888] syzkaller0: mtu less than device minimum [ 357.928025][T12895] tc_dump_action: action bad kind [ 358.338503][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1641'. [ 358.358346][T12915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 358.376532][T12922] netlink: 'syz.0.1643': attribute type 1 has an invalid length. [ 358.402118][T12913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1641'. [ 358.448834][T12925] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1644'. [ 358.642822][T12928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1645'. [ 358.691613][T12929] syzkaller0: entered promiscuous mode [ 358.691640][T12929] syzkaller0: entered allmulticast mode [ 358.732906][T12929] tipc: Enabling of bearer rejected, failed to enable media [ 359.208493][T12953] netlink: 'syz.1.1655': attribute type 4 has an invalid length. [ 359.425986][T12961] tc_dump_action: action bad kind [ 359.838941][T12980] tipc: Enabling of bearer rejected, failed to enable media [ 359.858319][T12980] syzkaller0: mtu less than device minimum [ 360.289452][T12993] netlink: zone id is out of range [ 360.516347][T12996] ieee802154 phy1 wpan1: encryption failed: -22 [ 360.618049][T13006] syzkaller0: entered promiscuous mode [ 360.618074][T13006] syzkaller0: entered allmulticast mode [ 360.709064][T13006] tipc: Enabling of bearer rejected, failed to enable media [ 360.727812][T13004] xt_hl: Unknown Hop Limit match mode: 4 [ 360.822521][T13004] ieee802154 phy1 wpan1: encryption failed: -22 [ 360.968975][T13022] ipvlan2: entered promiscuous mode [ 361.002989][T13022] team0: Device ipvlan2 failed to register rx_handler [ 361.097517][T13030] tc_dump_action: action bad kind [ 362.074969][T13064] syzkaller0: entered promiscuous mode [ 362.074995][T13064] syzkaller0: entered allmulticast mode [ 362.938958][T13097] xt_hl: Unknown Hop Limit match mode: 4 [ 362.979248][T13100] __nla_validate_parse: 4 callbacks suppressed [ 362.979353][T13100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1703'. [ 363.053150][T13097] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.164570][T13102] tc_dump_action: action bad kind [ 363.532257][T13125] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1710'. [ 364.056517][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1715'. [ 364.493210][T13160] xt_hl: Unknown Hop Limit match mode: 4 [ 364.568547][T13160] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.608507][T13168] tc_dump_action: action bad kind [ 364.836763][T13173] gretap0: left promiscuous mode [ 364.837294][T13173] netlink: 964 bytes leftover after parsing attributes in process `syz.2.1722'. [ 364.837316][T13173] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 365.056040][T13178] tc_dump_action: action bad kind [ 365.438153][T13200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1726'. [ 365.793907][T13212] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1731'. [ 365.819802][T13214] netlink: zone id is out of range [ 365.819819][T13214] netlink: zone id is out of range [ 365.819829][T13214] netlink: zone id is out of range [ 365.819837][T13214] netlink: zone id is out of range [ 365.819846][T13214] netlink: zone id is out of range [ 365.819855][T13214] netlink: zone id is out of range [ 365.819863][T13214] netlink: zone id is out of range [ 365.819872][T13214] netlink: zone id is out of range [ 365.872984][T13214] Set syz1 is full, maxelem 1029 reached [ 366.606403][T13241] syzkaller0: entered promiscuous mode [ 366.606430][T13241] syzkaller0: entered allmulticast mode [ 366.719940][T13221] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1734'. [ 366.897439][T13258] tc_dump_action: action bad kind [ 367.158703][T13267] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1748'. [ 367.232327][ T12] tipc: Subscription rejected, illegal request [ 367.483945][T13279] syzkaller0: entered promiscuous mode [ 367.485342][T13279] syzkaller0: entered allmulticast mode [ 367.769402][T13285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1756'. [ 368.647189][T13316] xt_hl: Unknown Hop Limit match mode: 4 [ 368.719211][T13295] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1760'. [ 368.990615][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 369.103240][T13334] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1772'. [ 369.104756][T13333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1771'. [ 369.104777][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1771'. [ 369.105561][T13333] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1771'. [ 369.353957][T13344] tc_dump_action: action bad kind [ 369.631382][T13353] ieee802154 phy1 wpan1: encryption failed: -22 [ 370.157443][T13361] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1782'. [ 370.809241][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 370.809270][T13393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1793'. [ 370.809901][T13393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1793'. [ 371.789080][T13425] netlink: zone id is out of range [ 371.789099][T13425] netlink: zone id is out of range [ 371.789109][T13425] netlink: zone id is out of range [ 371.789118][T13425] netlink: zone id is out of range [ 371.789127][T13425] netlink: zone id is out of range [ 371.789137][T13425] netlink: zone id is out of range [ 371.789145][T13425] netlink: zone id is out of range [ 371.789154][T13425] netlink: zone id is out of range [ 372.715170][T13466] netlink: zone id is out of range [ 372.715188][T13466] netlink: zone id is out of range [ 373.839831][T13504] dummy0: left promiscuous mode [ 373.843461][T13504] batman_adv: batadv0: Interface activated: dummy0 [ 373.921230][T13504] batman_adv: batadv0: Interface deactivated: dummy0 [ 373.921259][T13504] batman_adv: batadv0: Removing interface: dummy0 [ 374.285078][T13499] __nla_validate_parse: 9 callbacks suppressed [ 374.285102][T13499] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1834'. [ 374.540503][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1845'. [ 374.698377][T13530] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.793418][T13540] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1847'. [ 375.186849][T13553] tc_dump_action: action bad kind [ 375.534717][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1857'. [ 375.549550][T13563] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1857'. [ 376.378507][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 376.607817][T13600] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.055765][T13621] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1872'. [ 377.080414][T13623] tc_dump_action: action bad kind [ 377.175234][T13624] tun1: tun_chr_ioctl cmd 1074025677 [ 377.175382][T13624] tun1: linktype set to 0 [ 377.818129][T13643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 378.192515][T13653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 378.192541][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1881'. [ 378.295627][T13661] sch_tbf: burst 0 is lower than device lo mtu (1518) ! [ 378.623179][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.133256][T13696] xt_hl: Unknown Hop Limit match mode: 4 [ 379.173581][T13696] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.523866][T13707] __nla_validate_parse: 5 callbacks suppressed [ 379.523889][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 379.523943][T13707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1905'. [ 379.563004][T13707] macvlan2: entered allmulticast mode [ 379.563031][T13707] gretap0: entered allmulticast mode [ 379.716483][T13712] net_ratelimit: 78 callbacks suppressed [ 379.716509][T13712] ip_tables: iptables: counters copy to user failed while replacing table [ 379.918671][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1908'. [ 379.918696][T13717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 379.942694][T13717] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1908'. [ 379.953123][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1910'. [ 379.981545][T13725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1913'. [ 379.985319][T13725] netlink: zone id is out of range [ 379.985335][T13725] netlink: zone id is out of range [ 379.985344][T13725] netlink: zone id is out of range [ 379.985353][T13725] netlink: zone id is out of range [ 379.985362][T13725] netlink: zone id is out of range [ 379.985371][T13725] netlink: zone id is out of range [ 379.985380][T13725] netlink: zone id is out of range [ 379.985389][T13725] netlink: zone id is out of range [ 380.523355][T13747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1921'. [ 380.932743][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1927'. [ 381.164594][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 381.298161][T13774] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 381.841645][T13792] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.699002][T13836] xt_hl: Unknown Hop Limit match mode: 4 [ 382.759537][T13836] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.140208][T13861] netlink: zone id is out of range [ 383.798274][T13892] syzkaller0: entered promiscuous mode [ 383.798301][T13892] syzkaller0: entered allmulticast mode [ 383.812406][T13892] tipc: Enabled bearer , priority 0 [ 383.824578][T13892] tipc: Resetting bearer [ 383.844127][T13891] tipc: Resetting bearer [ 383.908799][T13891] tipc: Disabling bearer [ 384.591704][T13928] __nla_validate_parse: 31 callbacks suppressed [ 384.591728][T13928] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1992'. [ 384.591788][T13928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1992'. [ 384.648279][T13930] tipc: Enabling of bearer rejected, already enabled [ 384.695510][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 384.696345][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 384.696671][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 384.696967][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 384.697361][T13934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 384.859850][T13936] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1997'. [ 385.008033][T13944] tc_dump_action: action bad kind [ 385.279161][T13959] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2004'. [ 385.385920][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 385.632629][T13972] syzkaller0: entered promiscuous mode [ 385.632654][T13972] syzkaller0: entered allmulticast mode [ 385.663435][T13972] tipc: Enabled bearer , priority 0 [ 385.691077][T13972] tipc: Resetting bearer [ 385.737042][T13971] tipc: Resetting bearer [ 385.780579][T13971] tipc: Disabling bearer [ 386.453103][T14008] net_ratelimit: 18 callbacks suppressed [ 386.453129][T14008] netlink: zone id is out of range [ 386.453140][T14008] netlink: zone id is out of range [ 386.453150][T14008] netlink: zone id is out of range [ 386.453159][T14008] netlink: zone id is out of range [ 386.453168][T14008] netlink: zone id is out of range [ 386.453177][T14008] netlink: zone id is out of range [ 386.453186][T14008] netlink: zone id is out of range [ 386.453194][T14008] netlink: zone id is out of range [ 386.513623][T14008] Set syz1 is full, maxelem 1029 reached [ 387.082193][T14024] tc_dump_action: action bad kind [ 387.616609][T14041] netlink: zone id is out of range [ 388.054520][T14062] xt_hl: Unknown Hop Limit match mode: 4 [ 388.159402][T14062] ieee802154 phy1 wpan1: encryption failed: -22 [ 389.603511][T14122] __nla_validate_parse: 9 callbacks suppressed [ 389.603532][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2055'. [ 389.640876][T14120] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2055'. [ 389.857345][T14131] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2056'. [ 390.485798][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 390.485830][T14158] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2064'. [ 390.489087][T14158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2064'. [ 390.489824][T14158] syzkaller1: entered promiscuous mode [ 390.489844][T14158] syzkaller1: entered allmulticast mode [ 391.285750][T14197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2072'. [ 391.492914][T14206] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2078'. [ 392.455581][T14225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 392.455614][T14225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2085'. [ 392.487487][T14225] syzkaller1: entered promiscuous mode [ 392.487513][T14225] syzkaller1: entered allmulticast mode [ 392.637846][T14236] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 392.716753][T14243] dummy0: entered promiscuous mode [ 392.934457][T14241] tc_dump_action: action bad kind [ 392.993310][T14251] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.800225][T14283] tap0: tun_chr_ioctl cmd 1074025672 [ 393.800250][T14283] tap0: ignored: set checksum disabled [ 394.372874][T14301] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.481092][T14305] tipc: Enabling of bearer rejected, already enabled [ 394.487485][T14305] net_ratelimit: 24 callbacks suppressed [ 394.487505][T14305] syzkaller0: mtu less than device minimum [ 394.637373][T14304] __nla_validate_parse: 4 callbacks suppressed [ 394.637396][T14304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 394.837528][T14316] syzkaller0: entered promiscuous mode [ 394.840476][T14316] syzkaller0: entered allmulticast mode [ 394.913967][T14320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 395.243058][T14333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 395.365190][T14324] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2119'. [ 396.277565][T14371] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2134'. [ 396.278120][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2134'. [ 396.686477][ T31] audit: type=1107 audit(1790296997.264:7): pid=14392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='f 7' [ 396.858037][T14395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2140'. [ 396.858065][T14395] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2140'. [ 397.007156][T14399] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'. [ 397.027877][T14387] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2137'. [ 397.071825][T14403] batman_adv: batadv0: Adding interface: dummy0 [ 397.071853][T14403] batman_adv: batadv0: The MTU of interface dummy0 is too small (1504) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 397.071883][T14403] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 397.453127][T14411] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2145'. [ 398.295865][T14456] syzkaller0: entered promiscuous mode [ 398.295890][T14456] syzkaller0: entered allmulticast mode [ 399.056607][T14486] tc_dump_action: action bad kind [ 399.643825][T14516] __nla_validate_parse: 15 callbacks suppressed [ 399.643849][T14516] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2178'. [ 399.646514][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2178'. [ 400.120641][T14531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2182'. [ 400.120696][T14531] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2182'. [ 400.549417][T14539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2185'. [ 400.569815][T14545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2187'. [ 400.972613][T14559] tc_dump_action: action bad kind [ 401.012749][T14558] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.388832][T14573] xt_hl: Unknown Hop Limit match mode: 4 [ 401.479339][T14573] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.703838][T14583] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2200'. [ 401.745454][T14583] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2200'. [ 402.286237][T14612] ieee802154 phy1 wpan1: encryption failed: -22 [ 402.347597][T14615] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2205'. [ 402.363258][T14619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.578508][T14623] tc_dump_action: action bad kind [ 402.866498][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 403.635191][T14655] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.638545][T14658] hsr0: entered allmulticast mode [ 403.638585][T14658] hsr_slave_0: entered allmulticast mode [ 403.638604][T14658] hsr_slave_1: entered allmulticast mode [ 403.688571][T14658] hsr0 (unregistering): left allmulticast mode [ 404.247890][T14681] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 404.247947][T14681] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 404.252157][T14681] tipc: Enabled bearer , priority 0 [ 404.277061][T14681] tipc: Resetting bearer [ 404.354530][T14683] tc_dump_action: action bad kind [ 404.357756][T14686] ieee802154 phy1 wpan1: encryption failed: -22 [ 404.825416][T14709] __nla_validate_parse: 2 callbacks suppressed [ 404.825438][T14709] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2234'. [ 405.222853][T14718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 405.464276][T14738] netlink: 'syz.4.2241': attribute type 11 has an invalid length. [ 405.482226][T14738] netlink: 'syz.4.2241': attribute type 11 has an invalid length. [ 405.482250][T14738] netlink: 43 bytes leftover after parsing attributes in process `syz.4.2241'. [ 405.866967][T14743] syzkaller1: entered promiscuous mode [ 405.866996][T14743] syzkaller1: entered allmulticast mode [ 405.978942][T14744] syzkaller0: entered promiscuous mode [ 405.978968][T14744] syzkaller0: entered allmulticast mode [ 406.000464][T14747] tipc: Enabled bearer , priority 0 [ 406.054337][T14744] tipc: Resetting bearer [ 406.099147][T14742] tipc: Resetting bearer [ 406.192075][T14742] tipc: Disabling bearer [ 406.215821][T14751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2246'. [ 406.516102][T14765] xt_hl: Unknown Hop Limit match mode: 4 [ 406.628567][T14765] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.649330][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2252'. [ 406.649362][T14764] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2252'. [ 406.697245][T14764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2252'. [ 406.715759][T14764] syzkaller1: entered promiscuous mode [ 406.715786][T14764] syzkaller1: entered allmulticast mode [ 407.360350][T14794] tipc: Enabling of bearer rejected, already enabled [ 407.866423][T14811] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2263'. [ 408.048018][T14814] xt_hl: Unknown Hop Limit match mode: 4 [ 408.195871][T14814] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.236724][T14823] tc_dump_action: action bad kind [ 408.554419][T14830] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2274'. [ 408.554447][T14830] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2274'. [ 408.878771][T14836] Set syz0 is full, maxelem 0 reached [ 409.351480][T14853] xt_hl: Unknown Hop Limit match mode: 4 [ 409.428230][T14853] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.624928][T14866] netlink: 'syz.0.2290': attribute type 1 has an invalid length. [ 409.624956][T14866] netlink: 'syz.0.2290': attribute type 2 has an invalid length. [ 409.852680][T14876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 410.027046][T14882] __nla_validate_parse: 5 callbacks suppressed [ 410.027069][T14882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2296'. [ 410.046469][T14882] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2296'. [ 410.046492][T14882] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2296'. [ 410.079064][T14885] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2292'. [ 410.135584][T14884] tc_dump_action: action bad kind [ 410.423254][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2301'. [ 410.546271][T14894] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2303'. [ 410.546296][T14894] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2303'. [ 410.622809][T14895] xt_hl: Unknown Hop Limit match mode: 4 [ 410.728324][T14895] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.748902][T14898] tc_dump_action: action bad kind [ 414.628204][T14939] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2315'. [ 414.628227][T14939] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2315'. [ 414.672456][T14942] xt_hl: Unknown Hop Limit match mode: 4 [ 414.756128][T14942] ieee802154 phy1 wpan1: encryption failed: -22 [ 415.446260][T14975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2327'. [ 415.553340][T14979] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2328'. [ 415.553367][T14979] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2328'. [ 415.590965][T14978] tc_dump_action: action bad kind [ 415.885429][T14986] xt_hl: Unknown Hop Limit match mode: 4 [ 415.958009][T14986] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.376888][T15005] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2336'. [ 416.635479][T15010] syzkaller0: entered promiscuous mode [ 416.635507][T15010] syzkaller0: entered allmulticast mode [ 417.241066][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2344'. [ 417.357870][T15037] xt_hl: Unknown Hop Limit match mode: 4 [ 417.489623][T15037] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.749355][T15051] syzkaller0: entered promiscuous mode [ 417.749383][T15051] syzkaller0: entered allmulticast mode [ 417.763879][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 418.544466][T15081] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.610997][T15086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2358'. [ 419.087218][T15098] xt_hl: Unknown Hop Limit match mode: 4 [ 419.122360][T15102] xt_hl: Unknown Hop Limit match mode: 4 [ 419.144125][T15098] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.196848][T15102] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.433135][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2368'. [ 420.097691][T15139] xt_hl: Unknown Hop Limit match mode: 4 [ 420.129129][T15140] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2375'. [ 420.176974][T15139] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.010180][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2382'. [ 421.933250][T15189] xt_hl: Unknown Hop Limit match mode: 4 [ 422.053377][T15189] ieee802154 phy1 wpan1: encryption failed: -22 [ 422.088502][T15196] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2393'. [ 422.112025][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2393'. [ 422.274984][T15202] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2392'. [ 422.468090][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2396'. [ 423.207885][T15231] veth1_virt_wifi: entered promiscuous mode [ 423.225410][T15231] veth0_virt_wifi: entered promiscuous mode [ 423.319219][T15233] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 423.551709][T15241] netlink: 'syz.4.2406': attribute type 3 has an invalid length. [ 424.444798][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2417'. [ 424.444826][T15271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2417'. [ 424.444844][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2417'. [ 424.445045][T15271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2417'. [ 426.259103][T15326] xt_hashlimit: size too large, truncated to 1048576 [ 426.727105][T15250] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 427.406833][T15288] Set syz1 is full, maxelem 1029 reached [ 428.022172][T15378] netlink: 'syz.4.2449': attribute type 16 has an invalid length. [ 428.022197][T15378] netlink: 'syz.4.2449': attribute type 17 has an invalid length. [ 428.022315][T15378] lo: left promiscuous mode [ 428.026266][T15378] tunl0: left promiscuous mode [ 428.029679][T15378] gre0: left promiscuous mode [ 428.056731][T15378] gretap0: left promiscuous mode [ 428.096913][T15378] ip_vti0: left promiscuous mode [ 428.105668][T15378] ip6_vti0: left promiscuous mode [ 428.123099][T15378] sit0: left promiscuous mode [ 428.156376][T15378] ip6tnl0: left promiscuous mode [ 428.171555][T15378] ip6gre0: left promiscuous mode [ 428.199372][T15378] ip6gretap0: left promiscuous mode [ 428.228039][T15378] bridge0: left promiscuous mode [ 428.251999][T15378] vcan0: left promiscuous mode [ 428.266693][T15378] bond0: left promiscuous mode [ 428.266981][T15378] syz_tun: left promiscuous mode [ 428.267969][T15378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.301296][T15378] team0: left promiscuous mode [ 428.302261][T15378] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.312481][T15378] dummy0: left promiscuous mode [ 428.326094][T15378] nlmon0: left promiscuous mode [ 428.338342][T15378] vxcan0: left promiscuous mode [ 428.345366][T15378] vxcan1: left promiscuous mode [ 428.346532][T15378] veth0: left promiscuous mode [ 428.364180][T15378] veth1: left promiscuous mode [ 428.381342][T15378] wg0: left promiscuous mode [ 428.398056][T15378] wg1: left promiscuous mode [ 428.417014][T15378] wg2: left promiscuous mode [ 428.428194][T15378] veth0_to_bridge: left promiscuous mode [ 428.439226][T15378] veth1_to_bridge: left promiscuous mode [ 428.457573][T15378] veth0_to_bond: left promiscuous mode [ 428.472195][T15378] bond_slave_0: left promiscuous mode [ 428.478286][T15378] veth1_to_bond: left promiscuous mode [ 428.496541][T15378] bond_slave_1: left promiscuous mode [ 428.504333][T15378] veth1_to_team: left promiscuous mode [ 428.516155][T15378] team_slave_1: left promiscuous mode [ 428.516886][T15395] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2452'. [ 428.529581][T15378] veth0_to_batadv: left promiscuous mode [ 428.547163][T15378] batadv_slave_0: left promiscuous mode [ 428.554848][T15378] xfrm0: left promiscuous mode [ 428.581232][T15378] veth0_to_hsr: left promiscuous mode [ 428.596565][T15378] hsr_slave_0: left promiscuous mode [ 428.601320][T15378] veth1_to_hsr: left promiscuous mode [ 428.628621][T15378] hsr_slave_1: left promiscuous mode [ 428.649313][T15378] veth1_virt_wifi: left promiscuous mode [ 428.662714][T15378] veth0_virt_wifi: left promiscuous mode [ 428.681410][T15378] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 428.735464][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.735579][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.759672][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.759870][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.394832][T15417] xt_hl: Unknown Hop Limit match mode: 4 [ 429.496307][T15417] ieee802154 phy1 wpan1: encryption failed: -22 [ 431.428823][T15415] Set syz1 is full, maxelem 1029 reached [ 431.712026][T15469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2467'. [ 431.810423][T15473] xt_hl: Unknown Hop Limit match mode: 4 [ 431.903617][T15473] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.336436][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 433.519744][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2479'. [ 433.519944][T15511] netlink: 'syz.1.2479': attribute type 1 has an invalid length. [ 433.736808][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2482'. [ 434.065270][T15532] netlink: 'syz.0.2488': attribute type 1 has an invalid length. [ 434.144150][T15532] 8021q: adding VLAN 0 to HW filter on device bond3 [ 434.354153][T15535] Set syz1 is full, maxelem 1029 reached [ 434.441362][T15542] dummy0: left promiscuous mode [ 434.441647][T15542] batman_adv: batadv0: Interface activated: dummy0 [ 434.441667][T15542] batadv0: mtu less than device minimum [ 434.443220][T15542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.444697][T15542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.446241][T15542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.447731][T15542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.449340][T15542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.450938][T15542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.452447][T15542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.453956][T15542] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 434.580972][T15523] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2485'. [ 434.590796][T15542] batman_adv: batadv0: Interface deactivated: dummy0 [ 434.590825][T15542] batman_adv: batadv0: Removing interface: dummy0 [ 435.158309][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2495'. [ 435.271837][T15561] tc_dump_action: action bad kind [ 435.308735][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 435.319806][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 435.327697][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 435.338546][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 435.339742][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 436.519344][T15560] lo speed is unknown, defaulting to 1000 [ 437.207731][T15560] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.207917][T15560] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.208062][T15560] bridge_slave_0: entered allmulticast mode [ 437.211169][T15560] bridge_slave_0: entered promiscuous mode [ 437.219257][T15560] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.219780][T15560] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.221889][T15560] bridge_slave_1: entered allmulticast mode [ 437.226068][T15560] bridge_slave_1: entered promiscuous mode [ 437.303795][T15560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.316478][T15560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.402017][T15560] team0: Port device team_slave_0 added [ 437.406789][T15560] team0: Port device team_slave_1 added [ 437.433969][ T4936] Bluetooth: hci5: command tx timeout [ 437.473540][T15560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.473561][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.474290][T15560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.478488][T15560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.478504][T15560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.478533][T15560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.712528][T15560] hsr_slave_0: entered promiscuous mode [ 437.715305][T15560] hsr_slave_1: entered promiscuous mode [ 437.717557][T15560] debugfs: 'hsr0' already exists in 'hsr' [ 437.717605][T15560] Cannot create hsr debugfs directory [ 437.866024][T15625] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2504'. [ 438.404803][T15634] xt_hl: Unknown Hop Limit match mode: 4 [ 438.438621][T15634] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.555495][T15637] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2508'. [ 439.469426][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2512'. [ 439.469459][T15655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2512'. [ 439.484342][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 439.500694][ T4936] Bluetooth: hci5: command tx timeout [ 439.520516][T15595] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 439.551779][T15560] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 439.592810][T15560] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.593769][T15560] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 439.707065][T15560] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.722079][T15560] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 439.771367][T15560] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.772740][T15560] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 439.815053][T15560] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.062019][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.093841][T15672] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2514'. [ 440.134313][T15560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.187449][T15560] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.247477][ T1215] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.247592][ T1215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.298839][ T1215] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.298955][ T1215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.639421][T15682] xt_hl: Unknown Hop Limit match mode: 4 [ 440.736198][T15682] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.394767][T15708] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2520'. [ 441.582455][ T4936] Bluetooth: hci5: command tx timeout [ 441.989794][T15730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2525'. [ 441.989827][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2525'. [ 442.012796][T15560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.048740][T15730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2525'. [ 442.254312][T15739] xt_hl: Unknown Hop Limit match mode: 4 [ 442.324393][T15741] dummy0: entered promiscuous mode [ 442.347741][T15739] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.805054][T15754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2530'. [ 442.829937][T15754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 443.018843][T15560] veth0_vlan: entered promiscuous mode [ 443.063804][T15560] veth1_vlan: entered promiscuous mode [ 443.298233][T15560] veth0_macvtap: entered promiscuous mode [ 443.322939][T15560] veth1_macvtap: entered promiscuous mode [ 443.418674][T15560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.527245][T15560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.612182][ T6402] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.615179][ T6402] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.615225][ T6402] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.615262][ T6402] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.661157][ T4936] Bluetooth: hci5: command tx timeout [ 444.020351][T15784] net_ratelimit: 13 callbacks suppressed [ 444.020373][T15784] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 444.107800][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.107824][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.324764][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.324788][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.534375][T15795] xt_hl: Unknown Hop Limit match mode: 4 [ 444.590691][T15795] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.845363][T15803] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2539'. [ 445.061798][T15813] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 445.387431][T15817] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2545'. [ 445.387686][T15817] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2545'. [ 445.484296][T15825] ipvlan2: entered allmulticast mode [ 445.484323][T15825] macvlan1: entered allmulticast mode [ 445.663363][T15827] ipvlan2: entered allmulticast mode [ 446.452158][T15854] xt_hl: Unknown Hop Limit match mode: 4 [ 446.517419][T15865] tc_dump_action: action bad kind [ 446.614927][T15854] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.697846][T15864] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2556'. [ 446.784259][T15864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2556'. [ 447.082677][T15887] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 447.082706][T15887] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 447.181850][T15890] netlink: 'syz.1.2561': attribute type 4 has an invalid length. [ 447.373504][T15895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2562'. [ 447.602681][T15896] syzkaller1: entered promiscuous mode [ 447.602707][T15896] syzkaller1: entered allmulticast mode [ 448.077072][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2567'. [ 448.106792][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2568'. [ 448.120719][T15908] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2567'. [ 448.156220][T15911] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2568'. [ 448.258149][T15922] bridge0: port 5(veth0_virt_wifi) entered blocking state [ 448.258284][T15922] bridge0: port 5(veth0_virt_wifi) entered forwarding state [ 448.258751][T15922] bridge0: port 3(gretap1) entered blocking state [ 448.258885][T15922] bridge0: port 3(gretap1) entered forwarding state [ 448.296356][T15922] bridge0: port 6(bond0) entered blocking state [ 448.296487][T15922] bridge0: port 6(bond0) entered forwarding state [ 448.296780][T15922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.298633][T15922] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.342518][T15922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.428812][T15922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.439358][T15922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.468602][T15922] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 448.468672][ T6635] lo speed is unknown, defaulting to 1000 [ 448.468728][ T6635] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 448.524097][ T6404] bridge0: port 4(veth0) entered blocking state [ 448.524269][ T6404] bridge0: port 4(veth0) entered forwarding state [ 448.543987][ T6404] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.544152][ T6404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.262274][T15978] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 450.355110][T15984] netlink: 'syz.1.2582': attribute type 2 has an invalid length. [ 450.355135][T15984] __nla_validate_parse: 2 callbacks suppressed [ 450.355148][T15984] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2582'. [ 450.427701][T15986] netlink: 'syz.1.2582': attribute type 2 has an invalid length. [ 450.427726][T15986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2582'. [ 451.956124][T16029] tc_dump_action: action bad kind [ 452.019317][T16032] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 452.178528][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880121ca400: rx timeout, send abort [ 452.678595][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880121ca400: abort rx timeout. Force session deactivation [ 452.683149][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880121ca000: rx timeout, send abort [ 453.183243][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880121ca000: abort rx timeout. Force session deactivation [ 454.988421][T16044] Set syz0 is full, maxelem 0 reached [ 455.103851][T16102] netlink: zone id is out of range [ 455.103868][T16102] netlink: zone id is out of range [ 455.103879][T16102] netlink: zone id is out of range [ 455.103888][T16102] netlink: zone id is out of range [ 455.103897][T16102] netlink: zone id is out of range [ 455.103906][T16102] netlink: zone id is out of range [ 455.103915][T16102] netlink: zone id is out of range [ 455.103924][T16102] netlink: zone id is out of range [ 455.725926][T16125] batman_adv: batadv0: Adding interface: syzkaller0 [ 455.725951][T16125] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 455.726056][T16125] batman_adv: batadv0: Interface activated: syzkaller0 [ 455.964084][T16120] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 456.148313][T16120] batman_adv: batadv0: Removing interface: syzkaller0 [ 456.713654][T16144] vlan3: entered promiscuous mode [ 456.713687][T16144] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 457.395005][T16160] xt_hl: Unknown Hop Limit match mode: 4 [ 457.468023][T16160] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.863754][T16169] veth1_to_bond: entered allmulticast mode [ 457.866162][T16169] veth1_to_bond: entered promiscuous mode [ 457.866930][T16169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2638'. [ 457.906642][T16171] netlink: 'syz.0.2639': attribute type 3 has an invalid length. [ 457.907416][T16169] veth1_to_bond (unregistering): left promiscuous mode [ 457.907460][T16169] veth1_to_bond (unregistering): left allmulticast mode [ 457.933863][T16169] bond0: (slave bond_slave_1): Releasing backup interface [ 458.577198][T16183] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2645'. [ 458.577375][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2645'. [ 459.006818][T16189] xt_hl: Unknown Hop Limit match mode: 4 [ 459.073418][T16189] ieee802154 phy1 wpan1: encryption failed: -22 [ 459.203743][T16102] Set syz1 is full, maxelem 1029 reached [ 460.000133][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2655'. [ 460.000164][T16208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2655'. [ 460.008016][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 460.051855][T16208] syzkaller1: entered promiscuous mode [ 460.051910][T16208] syzkaller1: entered allmulticast mode [ 460.108371][T16214] tc_dump_action: action bad kind [ 461.198176][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2657'. [ 461.526366][T16230] batman_adv: batadv0: Adding interface: dummy0 [ 461.526387][T16230] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.526479][T16230] batman_adv: batadv0: Interface activated: dummy0 [ 461.615944][T16233] net_ratelimit: 1 callbacks suppressed [ 461.615970][T16233] batadv0: mtu less than device minimum [ 461.617527][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.619063][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.621633][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.625866][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.633941][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.637990][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.641848][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.645484][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 461.649473][T16233] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 463.339208][T16248] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2662'. [ 463.362631][T16248] ip6gre1: entered promiscuous mode [ 463.362655][T16248] ip6gre1: entered allmulticast mode [ 463.988822][T16268] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 464.129796][T16280] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2668'. [ 464.186214][T16268] bond5: entered promiscuous mode [ 464.186631][T16268] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.438276][T16277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 464.443194][T16277] bond5: (slave gre3): The slave device specified does not support setting the MAC address [ 464.443221][T16277] bond5: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 464.504807][T16277] bond5: (slave gre3): making interface the new active one [ 464.504837][T16277] gre3: entered promiscuous mode [ 464.563424][T16277] bond5: (slave gre3): Enslaving as an active interface with an up link [ 464.841530][T16297] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2674'. [ 465.173737][T16308] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2677'. [ 466.276216][T16326] tc_dump_action: action bad kind [ 467.284008][T16285] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.869354][T16351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2687'. [ 468.300795][T16357] syzkaller0: entered promiscuous mode [ 468.300823][T16357] syzkaller0: entered allmulticast mode [ 468.369031][T16369] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2691'. [ 468.952385][T16386] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2695'. [ 471.551450][T16387] net_ratelimit: 29 callbacks suppressed [ 471.551477][T16387] Set syz1 is full, maxelem 1029 reached [ 472.606405][T16411] xt_hl: Unknown Hop Limit match mode: 4 [ 472.756570][T16411] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.331941][T16429] tc_dump_action: action bad kind [ 475.086158][T16466] xt_hl: Unknown Hop Limit match mode: 4 [ 475.171834][T16466] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.223498][T16477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 476.384919][T16479] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2719'. [ 476.512056][T16483] netlink: 'syz.3.2721': attribute type 16 has an invalid length. [ 476.512083][T16483] netlink: 'syz.3.2721': attribute type 17 has an invalid length. [ 476.512224][T16483] lo: left promiscuous mode [ 476.519409][T16483] tunl0: left promiscuous mode [ 476.551600][T16483] gre0: left promiscuous mode [ 476.565321][T16483] 0{X: left promiscuous mode [ 476.567806][T16483] erspan0: left promiscuous mode [ 476.580886][T16483] ip_vti0: left promiscuous mode [ 476.582735][T16483] ip6_vti0: left promiscuous mode [ 476.584875][T16483] sit0: left promiscuous mode [ 476.610954][T16483] ip6tnl0: left promiscuous mode [ 476.618469][T16483] ip6gre0: left promiscuous mode [ 476.632588][T16483] syz_tun: left promiscuous mode [ 476.634865][T16483] ip6gretap0: left promiscuous mode [ 476.637065][T16483] vcan0: left promiscuous mode [ 476.670332][T16483] bond0: left promiscuous mode [ 476.671671][T16483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.674271][T16483] team0: left promiscuous mode [ 476.675343][T16483] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.676558][T16483] dummy0: left promiscuous mode [ 476.676978][T16483] batman_adv: batadv0: Interface activated: dummy0 [ 476.678369][T16483] batadv0: left promiscuous mode [ 476.679285][T16483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.729914][T16483] vxcan0: left promiscuous mode [ 476.737782][T16483] vxcan1: left promiscuous mode [ 476.738886][T16483] veth0: left promiscuous mode [ 476.750437][T16483] veth1: left promiscuous mode [ 476.754741][T16483] wg0: left promiscuous mode [ 476.787736][T16483] wg1: left promiscuous mode [ 476.812982][T16483] wg2: left promiscuous mode [ 476.835593][T16483] veth0_to_bridge: left promiscuous mode [ 476.852454][T16483] bridge_slave_0: left promiscuous mode [ 476.855977][T16483] veth1_to_bridge: left promiscuous mode [ 476.874641][T16483] bridge_slave_1: left promiscuous mode [ 476.884194][T16483] veth0_to_bond: left promiscuous mode [ 476.911225][T16483] bond_slave_0: left promiscuous mode [ 476.917009][T16483] veth1_to_bond: left promiscuous mode [ 476.935407][T16483] bond_slave_1: left promiscuous mode [ 476.950711][T16483] veth1_to_team: left promiscuous mode [ 476.957658][T16483] team_slave_1: left promiscuous mode [ 476.974225][T16483] veth0_to_batadv: left promiscuous mode [ 476.998581][T16483] batadv_slave_0: left promiscuous mode [ 477.018342][T16483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.050354][T16483] veth1_to_batadv: left promiscuous mode [ 477.058651][T16483] batadv_slave_1: left promiscuous mode [ 477.072950][T16483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.073936][T16483] xfrm0: left promiscuous mode [ 477.106641][T16483] veth0_to_hsr: left promiscuous mode [ 477.162280][T16483] veth1_vlan: left promiscuous mode [ 477.169377][T16483] veth0_vlan: left promiscuous mode [ 477.211517][T16483] veth0_vlan: entered promiscuous mode [ 477.260301][T16483] veth1_vlan: entered promiscuous mode [ 477.362462][T16483] geneve0: entered promiscuous mode [ 477.392859][T16483] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 477.409317][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.422854][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.428750][T16483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.467255][T16483] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.517824][T16483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 477.532792][T16483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 477.729266][T16483] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.747794][T16483] ip6gre1: left promiscuous mode [ 477.747820][T16483] ip6gre1: left allmulticast mode [ 477.761548][T16483] bond5: left promiscuous mode [ 477.761573][T16483] gre3: left promiscuous mode [ 477.932171][T16491] tc_dump_action: action bad kind [ 478.029843][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 478.070751][ T6402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.070789][ T6402] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.071236][ T6402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.071268][ T6402] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.071494][ T6402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.071523][ T6402] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.071846][ T6402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.071875][ T6402] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 478.079699][ T6402] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 478.079936][ T6402] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 478.108585][ T6635] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 478.114389][ T6635] [ 478.182869][ T6635] ====================================================== [ 478.189932][ T6635] WARNING: possible circular locking dependency detected [ 478.196999][ T6635] syzkaller #0 Not tainted [ 478.201448][ T6635] ------------------------------------------------------ [ 478.208504][ T6635] kworker/1:16/6635 is trying to acquire lock: [ 478.214682][ T6635] ffff88807d599070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 478.223951][ T6635] [ 478.223951][ T6635] but task is already holding lock: [ 478.231356][ T6635] ffff88806858a958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 478.241401][ T6635] [ 478.241401][ T6635] which lock already depends on the new lock. [ 478.241401][ T6635] [ 478.251844][ T6635] [ 478.251844][ T6635] the existing dependency chain (in reverse order) is: [ 478.260923][ T6635] [ 478.260923][ T6635] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 478.269240][ T6635] _raw_spin_lock+0x2e/0x40 [ 478.274414][ T6635] sch_direct_xmit+0x15f/0x4c0 [ 478.279767][ T6635] __dev_queue_xmit+0x177f/0x3820 [ 478.285493][ T6635] hsr_forward_skb+0x1701/0x2b70 [ 478.291029][ T6635] hsr_dev_xmit+0x242/0x360 [ 478.296101][ T6635] dev_hard_start_xmit+0x2cd/0x830 [ 478.301790][ T6635] __dev_queue_xmit+0x14c0/0x3820 [ 478.307386][ T6635] ip6_output+0x337/0x540 [ 478.312395][ T6635] NF_HOOK+0x177/0x4f0 [ 478.317102][ T6635] mld_sendpack+0x890/0xe10 [ 478.322176][ T6635] mld_ifc_work+0x842/0xd60 [ 478.327241][ T6635] process_scheduled_works+0xc3d/0x1630 [ 478.333429][ T6635] worker_thread+0xa47/0xfb0 [ 478.338606][ T6635] kthread+0x38b/0x480 [ 478.343243][ T6635] ret_from_fork+0x514/0xb70 [ 478.348528][ T6635] ret_from_fork_asm+0x1a/0x30 [ 478.353924][ T6635] [ 478.353924][ T6635] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 478.361712][ T6635] __lock_acquire+0x164c/0x2de0 [ 478.367178][ T6635] lock_acquire+0x115/0x350 [ 478.372245][ T6635] _raw_spin_lock_bh+0x36/0x50 [ 478.377576][ T6635] hsr_dev_xmit+0x237/0x360 [ 478.382646][ T6635] dev_hard_start_xmit+0x2cd/0x830 [ 478.388334][ T6635] __dev_queue_xmit+0x14c0/0x3820 [ 478.393938][ T6635] NF_HOOK+0x33a/0x3c0 [ 478.398689][ T6635] arp_xmit+0x16c/0x270 [ 478.403412][ T6635] arp_solicit+0xbdc/0xe40 [ 478.408472][ T6635] __neigh_event_send+0xf0c/0x1510 [ 478.414227][ T6635] neigh_resolve_output+0x1a1/0x720 [ 478.420006][ T6635] ip_finish_output2+0xc4b/0x10b0 [ 478.425696][ T6635] ip_output+0x29f/0x450 [ 478.430499][ T6635] iptunnel_xmit+0x626/0xd10 [ 478.435733][ T6635] ip_tunnel_xmit+0x195b/0x2040 [ 478.441217][ T6635] erspan_xmit+0xb6a/0x1620 [ 478.446380][ T6635] dev_hard_start_xmit+0x2cd/0x830 [ 478.452082][ T6635] sch_direct_xmit+0x257/0x4c0 [ 478.457414][ T6635] __dev_queue_xmit+0x177f/0x3820 [ 478.463018][ T6635] ip6_output+0x337/0x540 [ 478.467914][ T6635] NF_HOOK+0x177/0x4f0 [ 478.472562][ T6635] mld_sendpack+0x890/0xe10 [ 478.477635][ T6635] mld_ifc_work+0x842/0xd60 [ 478.482712][ T6635] process_scheduled_works+0xc3d/0x1630 [ 478.488825][ T6635] worker_thread+0xa47/0xfb0 [ 478.494001][ T6635] kthread+0x38b/0x480 [ 478.498635][ T6635] ret_from_fork+0x514/0xb70 [ 478.503789][ T6635] ret_from_fork_asm+0x1a/0x30 [ 478.509131][ T6635] [ 478.509131][ T6635] other info that might help us debug this: [ 478.509131][ T6635] [ 478.519391][ T6635] Possible unsafe locking scenario: [ 478.519391][ T6635] [ 478.526885][ T6635] CPU0 CPU1 [ 478.532284][ T6635] ---- ---- [ 478.537681][ T6635] lock(&qdisc_xmit_lock_key#4); [ 478.542759][ T6635] lock(&hsr->seqnr_lock); [ 478.549854][ T6635] lock(&qdisc_xmit_lock_key#4); [ 478.557455][ T6635] lock(&hsr->seqnr_lock); [ 478.562009][ T6635] [ 478.562009][ T6635] *** DEADLOCK *** [ 478.562009][ T6635] [ 478.570188][ T6635] locks held by kworker/1:16/6635: 13, last CPU#1: [ 478.576730][ T6635] #0: ffff88803265bd40 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 478.587509][ T6635] #1: ffffc9000330fc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 478.600713][ T6635] #2: ffff88801265d530 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xd60 [ 478.610037][ T6635] #3: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x206/0xe10 [ 478.619332][ T6635] #4: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 478.628456][ T6635] #5: ffffffff8ed5c980 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 478.638450][ T6635] #6: ffff888035f84228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 478.651161][ T6635] #7: ffff88806858a958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 478.661506][ T6635] #8: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 478.670448][ T6635] #9: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 478.680250][ T6635] #10: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 478.689188][ T6635] #11: ffffffff8ed5c980 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 478.699274][ T6635] #12: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 478.708578][ T6635] [ 478.708578][ T6635] stack backtrace: [ 478.714523][ T6635] CPU: 1 UID: 0 PID: 6635 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 478.724034][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 478.734149][ T6635] Workqueue: mld mld_ifc_work [ 478.738897][ T6635] Call Trace: [ 478.742223][ T6635] [ 478.745184][ T6635] dump_stack_lvl+0xe8/0x150 [ 478.749825][ T6635] print_circular_bug+0x2e2/0x300 [ 478.754901][ T6635] check_noncircular+0x12f/0x150 [ 478.759893][ T6635] __lock_acquire+0x164c/0x2de0 [ 478.764819][ T6635] ? __siphash_unaligned+0x28d/0x3e0 [ 478.770294][ T6635] ? skb_network_protocol+0x23d/0x400 [ 478.775717][ T6635] lock_acquire+0x115/0x350 [ 478.780262][ T6635] ? hsr_dev_xmit+0x237/0x360 [ 478.785025][ T6635] ? hsr_dev_xmit+0x237/0x360 [ 478.789741][ T6635] _raw_spin_lock_bh+0x36/0x50 [ 478.794586][ T6635] ? hsr_dev_xmit+0x237/0x360 [ 478.799301][ T6635] hsr_dev_xmit+0x237/0x360 [ 478.803843][ T6635] ? hsr_dev_xmit+0x2d/0x360 [ 478.808470][ T6635] dev_hard_start_xmit+0x2cd/0x830 [ 478.813636][ T6635] __dev_queue_xmit+0x14c0/0x3820 [ 478.818738][ T6635] ? __dev_queue_xmit+0x29b/0x3820 [ 478.823905][ T6635] ? __lock_acquire+0x747/0x2de0 [ 478.828884][ T6635] ? arpt_do_table+0x25b/0x1f90 [ 478.833900][ T6635] ? __pfx___dev_queue_xmit+0x10/0x10 [ 478.839333][ T6635] ? __pfx_arpt_do_table+0x10/0x10 [ 478.844510][ T6635] ? NF_HOOK+0xa2/0x3c0 [ 478.848711][ T6635] NF_HOOK+0x33a/0x3c0 [ 478.852818][ T6635] ? __pfx_arp_xmit_finish+0x10/0x10 [ 478.858144][ T6635] ? NF_HOOK+0xa2/0x3c0 [ 478.862351][ T6635] ? __pfx_NF_HOOK+0x10/0x10 [ 478.866986][ T6635] ? lock_acquire+0x115/0x350 [ 478.871715][ T6635] ? __pfx_arp_xmit_finish+0x10/0x10 [ 478.877044][ T6635] ? inet_addr_type_dev_table+0x25/0x190 [ 478.882821][ T6635] arp_xmit+0x16c/0x270 [ 478.887016][ T6635] ? arp_xmit+0x23/0x270 [ 478.891305][ T6635] arp_solicit+0xbdc/0xe40 [ 478.895767][ T6635] ? __pfx_arp_solicit+0x10/0x10 [ 478.900743][ T6635] ? __neigh_event_send+0xea4/0x1510 [ 478.906075][ T6635] ? __pfx_arp_solicit+0x10/0x10 [ 478.911050][ T6635] __neigh_event_send+0xf0c/0x1510 [ 478.916255][ T6635] neigh_resolve_output+0x1a1/0x720 [ 478.921523][ T6635] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 478.926594][ T6635] ? ip_finish_output2+0x3de/0x10b0 [ 478.931857][ T6635] ip_finish_output2+0xc4b/0x10b0 [ 478.936933][ T6635] ? ip_skb_dst_mtu+0x811/0xa50 [ 478.941824][ T6635] ? ip_finish_output2+0x3de/0x10b0 [ 478.947066][ T6635] ? ip_finish_output+0x40b/0x530 [ 478.952134][ T6635] ip_output+0x29f/0x450 [ 478.956420][ T6635] ? ip_output+0x5a/0x450 [ 478.960788][ T6635] iptunnel_xmit+0x626/0xd10 [ 478.965450][ T6635] ip_tunnel_xmit+0x195b/0x2040 [ 478.970352][ T6635] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 478.975615][ T6635] ? __gre_xmit+0x106/0x1a0 [ 478.980180][ T6635] erspan_xmit+0xb6a/0x1620 [ 478.984744][ T6635] ? __pfx_erspan_xmit+0x10/0x10 [ 478.989726][ T6635] ? __lock_acquire+0x747/0x2de0 [ 478.994702][ T6635] dev_hard_start_xmit+0x2cd/0x830 [ 478.999868][ T6635] sch_direct_xmit+0x257/0x4c0 [ 479.004731][ T6635] ? __pfx_sch_direct_xmit+0x10/0x10 [ 479.010067][ T6635] __dev_queue_xmit+0x177f/0x3820 [ 479.015147][ T6635] ? __dev_queue_xmit+0x29b/0x3820 [ 479.020346][ T6635] ? ___neigh_create+0x1d0c/0x2310 [ 479.025503][ T6635] ? __pfx___dev_queue_xmit+0x10/0x10 [ 479.030935][ T6635] ? neigh_resolve_output+0x428/0x720 [ 479.036358][ T6635] ? eth_header+0x11b/0x200 [ 479.040899][ T6635] ? __asan_memcpy+0x40/0x70 [ 479.045607][ T6635] ? ip6_output+0x11e/0x540 [ 479.050147][ T6635] ip6_output+0x337/0x540 [ 479.054519][ T6635] ? __pfx_ip6_output+0x10/0x10 [ 479.059408][ T6635] NF_HOOK+0x177/0x4f0 [ 479.063514][ T6635] ? __pfx_NF_HOOK+0x10/0x10 [ 479.068137][ T6635] ? icmp6_dst_alloc+0x39b/0x430 [ 479.073232][ T6635] ? __pfx_dst_output+0x10/0x10 [ 479.078135][ T6635] ? __local_bh_enable_ip+0xd6/0x140 [ 479.083499][ T6635] ? icmp6_dst_alloc+0x39b/0x430 [ 479.088487][ T6635] ? icmp6_dst_alloc+0x39b/0x430 [ 479.093473][ T6635] mld_sendpack+0x890/0xe10 [ 479.098041][ T6635] ? mld_sendpack+0x206/0xe10 [ 479.102761][ T6635] ? __pfx_mld_sendpack+0x10/0x10 [ 479.107845][ T6635] mld_ifc_work+0x842/0xd60 [ 479.112397][ T6635] ? process_scheduled_works+0x97a/0x1630 [ 479.118226][ T6635] process_scheduled_works+0xc3d/0x1630 [ 479.123852][ T6635] ? __pfx_process_scheduled_works+0x10/0x10 [ 479.129912][ T6635] ? assign_work+0x3cf/0x5d0 [ 479.134572][ T6635] worker_thread+0xa47/0xfb0 [ 479.139280][ T6635] kthread+0x38b/0x480 [ 479.143391][ T6635] ? __pfx_worker_thread+0x10/0x10 [ 479.148549][ T6635] ? __pfx_kthread+0x10/0x10 [ 479.153184][ T6635] ret_from_fork+0x514/0xb70 [ 479.157811][ T6635] ? __pfx_ret_from_fork+0x10/0x10 [ 479.162961][ T6635] ? __switch_to+0xc89/0x1420 [ 479.167731][ T6635] ? __pfx_kthread+0x10/0x10 [ 479.172362][ T6635] ret_from_fork_asm+0x1a/0x30 [ 479.177185][ T6635] [ 479.180391][ T6635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.186767][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 479.211716][ T6635] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 479.212159][ T6635] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 480.220239][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 481.820134][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 484.390540][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 485.420260][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 486.460280][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node