last executing test programs: 6.470266676s ago: executing program 2 (id=1701): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 4.447215424s ago: executing program 2 (id=1721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900"], 0x5c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) pselect6(0xfffffef9, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0xfffffffffffffffa}, 0x0, 0x0) clock_gettime(0x37ad3e8caf423423, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) 3.966947091s ago: executing program 2 (id=1726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104d0000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r1 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) ioctl$TUNSETTXFILTER(r1, 0x401054d5, &(0x7f0000000380)=ANY=[]) r2 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2f, 0x1, 0x0, 0x25dfdbfd}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.575058342s ago: executing program 2 (id=1732): bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000400)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) socket(0x1e, 0x805, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket(0x10, 0x3, 0x0) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.084913025s ago: executing program 1 (id=1737): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000480)) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0x5, &(0x7f0000000340)=0x4) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2720, 0x0, &(0x7f00000000c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2e, 0x9, 0x70bf27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1}, 0xb}], 0x1, 0x50, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000010000d042abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="d4010500400000002c0012800c0001006d6163766c616e001c0002800800090000ffffff08000100010000000800070007000000140035006d6163766c616e30"], 0x60}}, 0x8000) 2.411103274s ago: executing program 3 (id=1745): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x24) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty}}, {{@in6=@mcast1}}}, &(0x7f0000000080)=0xe8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x1d, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) close(r6) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x26020480) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x48010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 2.350244024s ago: executing program 3 (id=1746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x6, 0xfff, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0x7, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 2.187970626s ago: executing program 3 (id=1747): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.129056317s ago: executing program 1 (id=1748): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000fbdbdf", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000c80)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xe0307dcb63f81144}, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0fd26d4eef23248000000f858dbb8a19052343f", 0x26}, {&(0x7f0000000580)="051a00000e80006558f2878f0200000000000020", 0x14}, {&(0x7f0000000100)="67b422a47cad9184cc", 0x9}], 0x3) 2.077194217s ago: executing program 1 (id=1749): bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x1}, 0x24048014) close(r1) close(r0) 1.983379463s ago: executing program 4 (id=1750): socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.957611952s ago: executing program 1 (id=1751): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ffff5ca0ffffff7f59e684f96acaba974735c01d4ddcc3c80385c5173aca9f7f00a89a5cae36623e997e100dd14bca457579b528a52aa8263579cff14eafa1113f537f74762fb0d5a97d5014ea7dd1bee4ae042c1de9be437bce7a29badc6ea8e8f11612de79b9143fad94d12a4d30b5c5c88c172e46f8", @ANYRES16=r7, @ANYBLOB="000129bd7000ffdbdf25060000001400050000000000000000000000000000000000080002000700000006000b000100000014000600ff02000000000000000000000000000108000700ac1414aa08000c00030000000800020005000000"], 0x64}, 0x1, 0x0, 0x0, 0x20004006}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x0, 0x1, 0x70bd22, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0x46}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x6c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x6c}}, 0x40000) 1.868117969s ago: executing program 1 (id=1752): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x6a9}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x80000000, 0x4000005, 0x800, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000009000000071b0102f3f24de5449"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x40, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2005}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, r8, 0x1, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000240)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x84, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x30, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3b}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1000}, 0x0) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$netlink(r10, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000000010"], 0x30, 0x80}, 0x4000080) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x508, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x438, 0x2e0, 0x2e0, 0x438, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x348, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0xe4e7, 0x7, 0x0, 0x0, "756a1796ba7709aaf1afdd4c49089efda626f1a5ffe85e8698e207ea56736661698e1f152f8d024dc4c4dacc58a88e7f1e8534a8b0b9f8704e591c0762a21d16"}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) 1.811713271s ago: executing program 4 (id=1753): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvfrom$inet(r0, &(0x7f0000000380)=""/152, 0x98, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x840) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x844) r1 = socket(0x6, 0x4, 0xfffffff6) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f00000004c0), 0x0) 1.766537506s ago: executing program 4 (id=1754): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="5c00000011006bec9e3be15c6e17aa3107b6ed2e0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e615739a5e851f60a84c9f4c493803794fc9a26f4e786a6d0000300000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0xffff53f3, 0x8e, 0x0, 0x7fffffff, 0x10}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, 0x0) 1.636184586s ago: executing program 4 (id=1756): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x28000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x28, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xf5}]}]}, 0x28}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.496862s ago: executing program 4 (id=1758): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r0, 0x1, 0x3c, 0x0, &(0x7f0000000480)) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000180)=0x5, &(0x7f0000000340)=0x4) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x2720, 0x0, &(0x7f00000000c0)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2e, 0x9, 0x70bf27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/179, 0xb3}], 0x1}, 0xb}], 0x1, 0x50, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6000000010000d042abd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="d4010500400000002c0012800c0001006d6163766c616e001c0002800800090000ffffff08000100010000000800070007000000140035006d6163766c616e30"], 0x60}}, 0x8000) 1.264223509s ago: executing program 3 (id=1760): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xfff2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@delchain={0x2c, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xc}, {}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1.19938317s ago: executing program 0 (id=1761): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) sendto$inet6(r0, 0x0, 0x0, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c"], 0xd8}}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a31000000001400038008"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x4000000) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c", 0x2d}], 0x1}, 0x0) 1.173277708s ago: executing program 0 (id=1762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x5c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$alg(0x26, 0x5, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x1, 0x803, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) pselect6(0xfffffef9, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0xfffffffffffffffa}, 0x0, 0x0) clock_gettime(0x37ad3e8caf423423, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000080) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xc, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94) 1.164715312s ago: executing program 3 (id=1763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.034374701s ago: executing program 0 (id=1764): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, 0x0, 0x10) close(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 953.546392ms ago: executing program 1 (id=1765): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001000030400000000fedbdf2500007400f728ab93db3c140d69363e3273752c18fb3ff28f25abc8f645000ea41d2c292d330aaf5f6c5bf158a72d1c01b4de725a894ffa6fc8934ef3402a646fc57b88bf57de4902c3699b4f6c9b7fa498e9356c7906056c02f02b4f9b6708737b9fe80ffb8fda620b071256eb58a45c85d673480dcf8a9036c4ea97302c3a5dbcfe7135c8ac04e1fd", @ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000"/72], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0xcc, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0xcc}, 0x1, 0x0, 0x0, 0x60048090}, 0xc0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r4, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r4, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 875.630859ms ago: executing program 0 (id=1766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0x3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) 698.889907ms ago: executing program 0 (id=1767): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') unshare(0x6a040000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x24) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty}}, {{@in6=@mcast1}}}, &(0x7f0000000080)=0xe8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x1d, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) unshare(0x26020480) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0xffffffff, @mcast1, 0x10000}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x7}}], 0x18}, 0x48010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 686.038265ms ago: executing program 3 (id=1768): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf251e00000008000300", @ANYRES32=r8, @ANYBLOB="50002f800c000200"], 0x6c}, 0x1, 0x0, 0x0, 0x20040814}, 0x4880) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000040000000000000700000000002e30615f95"], 0x0, 0x2b, 0x0, 0x5, 0x4}, 0x28) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_stream(0x25, 0x1, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r3) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="ffff5ca0ffffff7f59e684f96acaba974735c01d4ddcc3c80385c5173aca9f7f00a89a5cae36623e997e100dd14bca457579b528a52aa8263579cff14eafa1113f537f74762fb0d5a97d5014ea7dd1bee4ae042c1de9be437bce7a29badc6ea8e8f11612de79b9143fad94d12a4d30b5c5c88c172e46f8", @ANYRES16=r14, @ANYBLOB="000129bd7000ffdbdf25060000001400050000000000000000000000000000000000080002000700000006000b000100000014000600ff02000000000000000000000000000108000700ac1414aa08000c00030000000800020005000000"], 0x64}, 0x1, 0x0, 0x0, 0x20004006}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r9, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, r10, 0x1, 0x70bd22, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_LEVEL={0x46}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x6c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x6c}}, 0x40000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) 671.668012ms ago: executing program 2 (id=1769): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x620, 0x2c8, 0x1d0, 0x468, 0x468, 0x1d0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {}, 0x2b}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x1, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) bind$inet(r2, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x20000000) 590.6004ms ago: executing program 4 (id=1770): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x37, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x8054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}}, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 230.509484ms ago: executing program 0 (id=1771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x6, 0xfff, 0x7}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0x7, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) 0s ago: executing program 2 (id=1772): write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="70000000ffffffffffff0180c200000e0800450000780000000000177c2275e687350016c82f9078ac1e0001e000000164006558006490780200000004000000020000002915a94a11e4"], 0x8a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000", @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000037f8000000000000000000000000f2645f89cf1830bc"], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts. [ 62.727525][ T5805] cgroup: Unknown subsys name 'net' [ 62.839708][ T5805] cgroup: Unknown subsys name 'cpuset' [ 62.848323][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 64.370187][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.355893][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.365537][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.375195][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.383263][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.387179][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.391897][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.403000][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.404693][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.412878][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.419599][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.433976][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.434164][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.443025][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.449058][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.464244][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.465625][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.473358][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.480071][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.485843][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.494200][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.499326][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.515204][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.517995][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.551248][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.564532][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.118853][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 67.164883][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 67.185701][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 67.242030][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 67.309384][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 67.482911][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.490591][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.498012][ T5821] bridge_slave_0: entered allmulticast mode [ 67.504928][ T5821] bridge_slave_0: entered promiscuous mode [ 67.512885][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.520052][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.527293][ T5819] bridge_slave_0: entered allmulticast mode [ 67.534114][ T5819] bridge_slave_0: entered promiscuous mode [ 67.563808][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.571211][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.578703][ T5820] bridge_slave_0: entered allmulticast mode [ 67.585565][ T5820] bridge_slave_0: entered promiscuous mode [ 67.593880][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.601117][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.609144][ T5821] bridge_slave_1: entered allmulticast mode [ 67.616199][ T5821] bridge_slave_1: entered promiscuous mode [ 67.623732][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.630971][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.638188][ T5819] bridge_slave_1: entered allmulticast mode [ 67.645065][ T5819] bridge_slave_1: entered promiscuous mode [ 67.678665][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.685822][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.693225][ T5820] bridge_slave_1: entered allmulticast mode [ 67.700379][ T5820] bridge_slave_1: entered promiscuous mode [ 67.725661][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.733466][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.741031][ T5824] bridge_slave_0: entered allmulticast mode [ 67.748086][ T5824] bridge_slave_0: entered promiscuous mode [ 67.756008][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.763166][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.770400][ T5824] bridge_slave_1: entered allmulticast mode [ 67.777669][ T5824] bridge_slave_1: entered promiscuous mode [ 67.831554][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.838766][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.845891][ T5822] bridge_slave_0: entered allmulticast mode [ 67.852997][ T5822] bridge_slave_0: entered promiscuous mode [ 67.872393][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.884362][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.895942][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.913647][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.920890][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.928356][ T5822] bridge_slave_1: entered allmulticast mode [ 67.935197][ T5822] bridge_slave_1: entered promiscuous mode [ 67.944678][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.956353][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.976219][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.999906][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.011251][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.078709][ T5819] team0: Port device team_slave_0 added [ 68.086908][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.119467][ T5821] team0: Port device team_slave_0 added [ 68.127245][ T5820] team0: Port device team_slave_0 added [ 68.134114][ T5819] team0: Port device team_slave_1 added [ 68.142306][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.153962][ T5824] team0: Port device team_slave_0 added [ 68.162824][ T5821] team0: Port device team_slave_1 added [ 68.170269][ T5820] team0: Port device team_slave_1 added [ 68.204086][ T5824] team0: Port device team_slave_1 added [ 68.264480][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.271595][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.298371][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.310548][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.317598][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.343903][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.356985][ T5822] team0: Port device team_slave_0 added [ 68.372660][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.379860][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.405878][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.417550][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.424498][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.450677][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.462915][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.470200][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.496168][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.508584][ T5822] team0: Port device team_slave_1 added [ 68.514839][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.521883][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.548222][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.548398][ T5842] Bluetooth: hci2: command tx timeout [ 68.559348][ T5827] Bluetooth: hci3: command tx timeout [ 68.567284][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.577283][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.603577][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.615458][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.622845][ T5827] Bluetooth: hci4: command tx timeout [ 68.622870][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.629060][ T5144] Bluetooth: hci0: command tx timeout [ 68.654423][ T5842] Bluetooth: hci1: command tx timeout [ 68.666003][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.721409][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.728488][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.754459][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.797807][ T5821] hsr_slave_0: entered promiscuous mode [ 68.804085][ T5821] hsr_slave_1: entered promiscuous mode [ 68.823166][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.830292][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 68.856553][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.936943][ T5820] hsr_slave_0: entered promiscuous mode [ 68.943175][ T5820] hsr_slave_1: entered promiscuous mode [ 68.949444][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 68.955249][ T5820] Cannot create hsr debugfs directory [ 68.985702][ T5824] hsr_slave_0: entered promiscuous mode [ 68.992087][ T5824] hsr_slave_1: entered promiscuous mode [ 68.998289][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 69.004014][ T5824] Cannot create hsr debugfs directory [ 69.036798][ T5819] hsr_slave_0: entered promiscuous mode [ 69.043115][ T5819] hsr_slave_1: entered promiscuous mode [ 69.049334][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 69.055059][ T5819] Cannot create hsr debugfs directory [ 69.146149][ T5822] hsr_slave_0: entered promiscuous mode [ 69.152575][ T5822] hsr_slave_1: entered promiscuous mode [ 69.159040][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 69.164766][ T5822] Cannot create hsr debugfs directory [ 69.579474][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.602914][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.613248][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.630633][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.679652][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.702794][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.712157][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.725607][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.795863][ T5821] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.806242][ T5821] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.818923][ T5821] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.831268][ T5821] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.950720][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.961002][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.982791][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.993967][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.045548][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.080405][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.091016][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.112934][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.120274][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.133301][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.150293][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.190110][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.200832][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.208074][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.234768][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.241884][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.277595][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.284704][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.305081][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.312369][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.350919][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.442816][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.469692][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.476859][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.491739][ T5820] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.515306][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.562834][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.570039][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.617665][ T5842] Bluetooth: hci3: command tx timeout [ 70.623105][ T5842] Bluetooth: hci2: command tx timeout [ 70.654162][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.673444][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.698040][ T5842] Bluetooth: hci0: command tx timeout [ 70.703478][ T5842] Bluetooth: hci1: command tx timeout [ 70.711352][ T5827] Bluetooth: hci4: command tx timeout [ 70.748796][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.755893][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.791262][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.798440][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.828389][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.841418][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.853603][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.908619][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.915715][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.969384][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.976586][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.023915][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.052282][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.189661][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.221087][ T5824] veth0_vlan: entered promiscuous mode [ 71.312212][ T5824] veth1_vlan: entered promiscuous mode [ 71.350826][ T5821] veth0_vlan: entered promiscuous mode [ 71.357885][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.364341][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.365680][ T5821] veth1_vlan: entered promiscuous mode [ 71.451981][ T5824] veth0_macvtap: entered promiscuous mode [ 71.512282][ T5824] veth1_macvtap: entered promiscuous mode [ 71.550907][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.569106][ T5821] veth0_macvtap: entered promiscuous mode [ 71.605008][ T5821] veth1_macvtap: entered promiscuous mode [ 71.621537][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.635047][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.674657][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.685315][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.708439][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.717881][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.791091][ T5820] veth0_vlan: entered promiscuous mode [ 71.801199][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.811128][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.836633][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.852536][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.865201][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.881162][ T1110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.891124][ T1110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.901467][ T5820] veth1_vlan: entered promiscuous mode [ 71.912958][ T5819] veth0_vlan: entered promiscuous mode [ 71.931517][ T1110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.942738][ T1110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.992798][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.000950][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.022104][ T5819] veth1_vlan: entered promiscuous mode [ 72.071523][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.095730][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.097784][ T5822] veth0_vlan: entered promiscuous mode [ 72.119667][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.132442][ T5822] veth1_vlan: entered promiscuous mode [ 72.171494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.211561][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.252005][ T5820] veth0_macvtap: entered promiscuous mode [ 72.266117][ T5819] veth0_macvtap: entered promiscuous mode [ 72.282079][ T5820] veth1_macvtap: entered promiscuous mode [ 72.313559][ T5819] veth1_macvtap: entered promiscuous mode [ 72.339036][ T5938] netlink: 'syz.0.1': attribute type 58 has an invalid length. [ 72.354259][ T5822] veth0_macvtap: entered promiscuous mode [ 72.400559][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.423702][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.445030][ T5822] veth1_macvtap: entered promiscuous mode [ 72.490510][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.512216][ T1110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.529202][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.606140][ T1110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.658201][ T1110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.697208][ T5144] Bluetooth: hci2: command tx timeout [ 72.702745][ T5144] Bluetooth: hci3: command tx timeout [ 72.732409][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.777129][ T5144] Bluetooth: hci1: command tx timeout [ 72.777511][ T5842] Bluetooth: hci4: command tx timeout [ 72.782683][ T5144] Bluetooth: hci0: command tx timeout [ 72.827806][ T5947] gretap1: entered promiscuous mode [ 72.833897][ T5947] batman_adv: batadv0: Adding interface: gretap1 [ 72.842600][ T5947] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 72.883828][ T5947] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 72.896242][ T1110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.905119][ T1110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.031542][ T1110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.078462][ T1110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.418058][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.422751][ T10] cfg80211: failed to load regulatory.db [ 73.452452][ T1110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.527354][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.547283][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.578425][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.608702][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.648019][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.674557][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.750007][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.776878][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.814084][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.834163][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.001472][ T5957] netlink: 'syz.0.7': attribute type 4 has an invalid length. [ 74.013640][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.040713][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.058454][ T5957] netlink: 'syz.0.7': attribute type 4 has an invalid length. [ 74.185595][ T5962] Zero length message leads to an empty skb [ 74.194388][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.220924][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.438386][ T5962] bond1: entered promiscuous mode [ 74.476617][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.513777][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.553880][ T5978] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.626142][ T5982] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.776836][ T5144] Bluetooth: hci3: command tx timeout [ 74.783505][ T5827] Bluetooth: hci2: command tx timeout [ 74.856931][ T5827] Bluetooth: hci4: command tx timeout [ 74.857855][ T5842] Bluetooth: hci1: command tx timeout [ 74.862455][ T5144] Bluetooth: hci0: command tx timeout [ 75.052420][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.135397][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.154665][ T5982] bond0 (unregistering): Released all slaves [ 75.232283][ T5966] syz.0.8 (5966) used greatest stack depth: 17472 bytes left [ 75.259655][ T5976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 75.265691][ T5976] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 75.304686][ T5978] infiniband syz0: set down [ 75.310687][ T796] syz0: Port: 1 Link DOWN [ 75.361821][ T5978] infiniband syz0: added bond0 [ 75.412033][ T5978] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 75.425963][ T5978] infiniband syz0: Couldn't open port 1 [ 75.559415][ T5978] RDS/IB: syz0: added [ 75.589320][ T5976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 75.623188][ T5978] smc: adding ib device syz0 with port count 1 [ 75.648554][ T5978] smc: ib device syz0 port 1 has no pnetid [ 75.657121][ T5976] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 75.713582][ T5976] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 75.747323][ T5976] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 75.832680][ T5976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 75.851851][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 75.881560][ T5976] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 75.971683][ T5976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.990410][ T5976] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 76.561124][ T6018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10'. [ 76.809863][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 76.831612][ T6026] netlink: 'syz.3.11': attribute type 13 has an invalid length. [ 76.846634][ T6026] netlink: 'syz.3.11': attribute type 17 has an invalid length. [ 76.903256][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 77.071249][ T6032] netlink: 'syz.1.12': attribute type 13 has an invalid length. [ 77.087755][ T6032] netlink: 'syz.1.12': attribute type 17 has an invalid length. [ 77.161927][ T6026] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.310891][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.319438][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.433739][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.451025][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.698606][ T6032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.707390][ T6032] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.718822][ T6032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.832395][ T404] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.891939][ T404] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.917807][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.973171][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.199931][ T6057] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 78.292767][ T6057] netlink: 'syz.0.14': attribute type 4 has an invalid length. [ 79.287528][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16'. [ 79.304087][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 79.326571][ T6079] openvswitch: netlink: Flow actions attr not present in new flow. [ 79.345369][ T1161] smc: removing ib device syz0 [ 79.401726][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 79.709067][ T6095] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 79.745316][ T6095] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 79.795026][ T6102] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18'. [ 79.875894][ T6095] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.707181][ T6181] SET target dimension over the limit! [ 81.974235][ T6186] xt_hashlimit: size too large, truncated to 1048576 [ 82.892313][ T6199] syzkaller0: entered promiscuous mode [ 82.935698][ T6199] syzkaller0: entered allmulticast mode [ 83.269287][ T6221] syz.4.28 uses obsolete (PF_INET,SOCK_PACKET) [ 83.386072][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 85.395979][ T6256] netlink: 'syz.4.29': attribute type 13 has an invalid length. [ 85.410480][ T6256] netlink: 'syz.4.29': attribute type 17 has an invalid length. [ 85.509337][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 85.512916][ T6261] netlink: 'syz.1.30': attribute type 4 has an invalid length. [ 85.658003][ T6256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.445979][ T6282] netlink: 'syz.1.33': attribute type 89 has an invalid length. [ 86.488468][ T6283] netlink: 48 bytes leftover after parsing attributes in process `syz.4.34'. [ 86.603885][ T6285] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 87.012621][ T6295] syzkaller0: entered promiscuous mode [ 87.028414][ T6295] syzkaller0: entered allmulticast mode [ 87.572808][ T6302] tipc: Started in network mode [ 87.581605][ T6302] tipc: Node identity aeec89acbfea, cluster identity 4711 [ 87.623793][ T6302] tipc: Enabled bearer , priority 0 [ 87.662336][ T6305] syzkaller0: entered promiscuous mode [ 87.668293][ T6305] syzkaller0: entered allmulticast mode [ 87.752106][ T6302] tipc: Resetting bearer [ 87.848841][ T6302] tipc: Disabling bearer [ 88.701956][ T6287] netlink: 24 bytes leftover after parsing attributes in process `syz.0.35'. [ 88.769526][ T6318] syzkaller0: entered promiscuous mode [ 88.775152][ T6318] syzkaller0: entered allmulticast mode [ 88.889732][ T6324] netlink: 'syz.4.42': attribute type 10 has an invalid length. [ 90.294742][ T6324] veth0_vlan: left promiscuous mode [ 90.302275][ T6324] veth0_vlan: entered promiscuous mode [ 90.310428][ T6324] team0: Device veth0_vlan failed to register rx_handler [ 90.327485][ T6315] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 90.337211][ T6315] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 90.347058][ T6315] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 90.896027][ T6353] syzkaller0: entered promiscuous mode [ 90.912433][ T6353] syzkaller0: entered allmulticast mode [ 91.428920][ T6359] syzkaller1: entered promiscuous mode [ 91.434605][ T6359] syzkaller1: entered allmulticast mode [ 91.526666][ T6385] netlink: 'syz.2.48': attribute type 89 has an invalid length. [ 91.829888][ T6395] netlink: 272 bytes leftover after parsing attributes in process `syz.1.50'. [ 92.391075][ T6409] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 92.602585][ T6413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.656100][ T6413] xt_hashlimit: size too large, truncated to 1048576 [ 92.708162][ T6413] xt_hashlimit: invalid interval [ 92.781573][ T6413] macsec0: entered allmulticast mode [ 92.788869][ T6413] veth1_macvtap: entered allmulticast mode [ 93.255881][ T6439] netlink: 'syz.1.59': attribute type 3 has an invalid length. [ 93.476943][ T6439] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 93.526583][ T5834] IPVS: starting estimator thread 0... [ 93.600013][ T6439] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 93.609437][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 93.645053][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'. [ 93.666764][ T6459] IPVS: using max 31 ests per chain, 74400 per kthread [ 93.829663][ T6443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.930042][ T6448] batman_adv: batadv0: Adding interface: ipvlan2 [ 93.947597][ T6448] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.977311][ T6448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.002973][ T6448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.016613][ T6448] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 94.145630][ T6462] team0: Port device team_slave_0 removed [ 94.582805][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 94.972503][ T796] IPVS: starting estimator thread 0... [ 95.088874][ T6498] IPVS: using max 32 ests per chain, 76800 per kthread [ 95.122722][ T6506] netlink: 56 bytes leftover after parsing attributes in process `syz.4.65'. [ 95.132168][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.65'. [ 95.142529][ T6497] netlink: 'syz.0.64': attribute type 39 has an invalid length. [ 95.329304][ T6513] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 95.341607][ T6513] bond1 (unregistering): Released all slaves [ 95.879741][ T6530] tipc: Enabled bearer , priority 0 [ 96.016810][ T6540] tipc: Enabling of bearer rejected, failed to enable media [ 96.048760][ T6529] tipc: Disabling bearer [ 96.282401][ T6556] netlink: 16 bytes leftover after parsing attributes in process `syz.3.73'. [ 96.365014][ T6556] vlan2: entered promiscuous mode [ 96.436623][ T6556] veth0_virt_wifi: entered promiscuous mode [ 96.443765][ T6556] vlan2: entered allmulticast mode [ 96.459041][ T6556] veth0_virt_wifi: entered allmulticast mode [ 96.885821][ T6569] netlink: 'syz.1.75': attribute type 2 has an invalid length. [ 96.923292][ T6569] !9: entered promiscuous mode [ 96.948034][ T6569] netlink: 'syz.1.75': attribute type 2 has an invalid length. [ 97.095749][ T6579] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 97.335191][ T6591] vlan2: entered allmulticast mode [ 97.340741][ T6591] bridge0: port 3(vlan2) entered blocking state [ 97.357535][ T6591] bridge0: port 3(vlan2) entered disabled state [ 97.365767][ T6591] vlan2: entered promiscuous mode [ 97.388045][ T6587] tipc: Started in network mode [ 97.392945][ T6587] tipc: Node identity 1688425ff1e1, cluster identity 4711 [ 97.402259][ T6587] tipc: Enabled bearer , priority 0 [ 97.429118][ T6590] syzkaller0: entered promiscuous mode [ 97.437101][ T6590] syzkaller0: entered allmulticast mode [ 97.467633][ T6587] tipc: Resetting bearer [ 97.491389][ T6586] tipc: Resetting bearer [ 97.515872][ T6586] tipc: Disabling bearer [ 97.834653][ T6605] netlink: 'syz.4.83': attribute type 7 has an invalid length. [ 97.843289][ T6605] netlink: 'syz.4.83': attribute type 5 has an invalid length. [ 97.866721][ T6605] netlink: 17 bytes leftover after parsing attributes in process `syz.4.83'. [ 99.477515][ T6616] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'. [ 99.585377][ T6638] block nbd0: Unsupported socket: should be TCP or UNIX. [ 100.224340][ T6654] tipc: Enabled bearer , priority 0 [ 100.281368][ T6662] syzkaller0: entered promiscuous mode [ 100.303823][ T6662] syzkaller0: entered allmulticast mode [ 100.351898][ T6654] tipc: Resetting bearer [ 100.370018][ T6653] tipc: Resetting bearer [ 100.423984][ T6653] tipc: Disabling bearer [ 100.897130][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.100'. [ 101.329423][ T6703] tipc: Enabled bearer , priority 0 [ 101.357372][ T6703] syzkaller0: entered promiscuous mode [ 101.362879][ T6703] syzkaller0: entered allmulticast mode [ 101.423868][ T6703] tipc: Resetting bearer [ 101.473554][ T6703] tipc: Resetting bearer [ 101.521907][ T6703] tipc: Disabling bearer [ 101.684022][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.106'. [ 101.986761][ T6728] tipc: Enabled bearer , priority 0 [ 101.997450][ T6728] syzkaller0: entered promiscuous mode [ 102.002949][ T6728] syzkaller0: entered allmulticast mode [ 102.124329][ T6727] tipc: Resetting bearer [ 102.247071][ T6727] tipc: Disabling bearer [ 102.787036][ T6762] tipc: Started in network mode [ 102.819419][ T6762] tipc: Node identity ca4b01a34a09, cluster identity 4711 [ 102.845718][ T6762] tipc: Enabled bearer , priority 0 [ 102.865629][ T6766] syzkaller0: entered promiscuous mode [ 102.881202][ T6766] syzkaller0: entered allmulticast mode [ 102.898898][ T6762] tipc: Resetting bearer [ 102.911344][ T6762] tipc: Resetting bearer [ 102.930121][ T6762] tipc: Disabling bearer [ 103.136124][ T6772] tipc: Enabled bearer , priority 0 [ 103.208341][ T6772] tipc: Resetting bearer [ 103.290479][ T6772] tipc: Disabling bearer [ 104.255609][ T6805] tipc: Started in network mode [ 104.279590][ T6805] tipc: Node identity 0ee2c42b8196, cluster identity 4711 [ 104.293498][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 104.309366][ T6805] tipc: Enabled bearer , priority 0 [ 104.340467][ T6809] syzkaller0: entered promiscuous mode [ 104.375137][ T6809] syzkaller0: entered allmulticast mode [ 104.409866][ T6813] netlink: 'syz.3.121': attribute type 89 has an invalid length. [ 104.427011][ T6804] tipc: Resetting bearer [ 104.560140][ T6804] tipc: Disabling bearer [ 105.278780][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.127'. [ 105.460403][ T6841] netlink: 64 bytes leftover after parsing attributes in process `syz.0.129'. [ 105.474648][ T6841] netlink: 40 bytes leftover after parsing attributes in process `syz.0.129'. [ 105.575063][ T6851] tipc: Enabled bearer , priority 0 [ 105.604250][ T6851] tipc: Resetting bearer [ 105.670730][ T6851] tipc: Disabling bearer [ 105.934846][ T6865] tipc: Enabled bearer , priority 0 [ 105.949373][ T6865] syzkaller0: entered promiscuous mode [ 105.958473][ T6865] syzkaller0: entered allmulticast mode [ 105.978893][ T6863] tipc: Resetting bearer [ 106.017568][ T6863] tipc: Disabling bearer [ 106.385615][ T6890] netlink: 64 bytes leftover after parsing attributes in process `syz.2.143'. [ 106.424189][ T6890] netlink: 40 bytes leftover after parsing attributes in process `syz.2.143'. [ 106.674690][ T6905] tipc: Enabled bearer , priority 0 [ 106.692844][ T6905] syzkaller0: entered promiscuous mode [ 106.705331][ T6905] syzkaller0: entered allmulticast mode [ 106.908962][ T6904] tipc: Resetting bearer [ 107.038197][ T6904] tipc: Disabling bearer [ 107.065571][ T6920] tipc: Enabled bearer , priority 0 [ 107.107270][ T6914] tipc: Resetting bearer [ 107.246959][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.151'. [ 107.328634][ T6914] tipc: Disabling bearer [ 107.381374][ T6930] netlink: 64 bytes leftover after parsing attributes in process `syz.3.154'. [ 107.413042][ T6930] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'. [ 107.716559][ T796] IPVS: starting estimator thread 0... [ 107.817678][ T6955] IPVS: using max 37 ests per chain, 88800 per kthread [ 108.145393][ T6972] netlink: 20 bytes leftover after parsing attributes in process `syz.1.162'. [ 108.172427][ T6976] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 108.384037][ T6981] openvswitch: netlink: Duplicate or invalid key (type 0). [ 108.413503][ T6981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.610431][ T6992] syzkaller0: entered promiscuous mode [ 108.622610][ T6992] syzkaller0: entered allmulticast mode [ 109.090200][ T10] IPVS: starting estimator thread 0... [ 109.233388][ T7021] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 109.286612][ T7019] IPVS: using max 33 ests per chain, 79200 per kthread [ 109.443793][ T7035] tipc: Enabled bearer , priority 0 [ 109.467790][ T7029] syzkaller0: MTU too low for tipc bearer [ 109.497588][ T7029] tipc: Disabling bearer [ 109.590457][ T7040] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 109.668420][ T7048] __nla_validate_parse: 2 callbacks suppressed [ 109.668439][ T7048] netlink: 56 bytes leftover after parsing attributes in process `syz.1.178'. [ 110.121263][ T7058] netlink: 64 bytes leftover after parsing attributes in process `syz.4.186'. [ 110.159532][ T7058] netlink: 40 bytes leftover after parsing attributes in process `syz.4.186'. [ 110.227534][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 110.401510][ T7065] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.188'. [ 110.904836][ T7082] xt_CT: No such helper "syz1" [ 110.942224][ T7085] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 111.030838][ T7089] tipc: Started in network mode [ 111.036649][ T7089] tipc: Node identity , cluster identity 4711 [ 111.043329][ T7089] tipc: Failed to obtain node identity [ 111.049026][ T7089] tipc: Enabling of bearer rejected, failed to enable media [ 111.556660][ T7105] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.200'. [ 112.574405][ T7144] netlink: 212356 bytes leftover after parsing attributes in process `syz.0.212'. [ 112.709936][ T7148] netlink: 64 bytes leftover after parsing attributes in process `syz.0.214'. [ 112.741995][ T7148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.214'. [ 112.918785][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.216'. [ 113.364654][ T7160] tipc: Enabled bearer , priority 0 [ 113.373570][ T7160] syzkaller0: MTU too low for tipc bearer [ 113.381366][ T7160] tipc: Disabling bearer [ 115.651034][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.729361][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.819247][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 115.857851][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.038970][ T7182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.090213][ T7182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.130105][ T7233] tipc: Enabled bearer , priority 0 [ 116.141241][ T7234] syzkaller0: MTU too low for tipc bearer [ 116.157702][ T7234] tipc: Disabling bearer [ 116.737334][ T7255] netlink: 'syz.3.233': attribute type 1 has an invalid length. [ 117.028463][ T7268] tipc: Enabled bearer , priority 0 [ 117.068179][ T7268] syzkaller0: MTU too low for tipc bearer [ 117.072149][ T7070] Set syz1 is full, maxelem 65536 reached [ 117.073933][ T7268] tipc: Disabling bearer [ 117.422397][ T7284] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.865912][ T7297] tipc: Started in network mode [ 117.872392][ T7297] tipc: Node identity , cluster identity 4711 [ 117.913234][ T7297] tipc: Failed to obtain node identity [ 117.936572][ T7297] tipc: Enabling of bearer rejected, failed to enable media [ 118.076734][ T7317] __nla_validate_parse: 2 callbacks suppressed [ 118.076753][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 118.271595][ T7318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.265'. [ 118.311848][ T7330] netlink: 'syz.0.269': attribute type 3 has an invalid length. [ 118.790527][ T7335] syzkaller0: entered promiscuous mode [ 118.796038][ T7335] syzkaller0: entered allmulticast mode [ 119.871746][ T24] IPVS: starting estimator thread 0... [ 119.968972][ T7387] IPVS: using max 32 ests per chain, 76800 per kthread [ 120.764549][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.283'. [ 120.839467][ T7405] netlink: 572 bytes leftover after parsing attributes in process `syz.1.288'. [ 121.004395][ T7408] netlink: 'syz.1.289': attribute type 13 has an invalid length. [ 121.215199][ T7419] netlink: 'syz.2.293': attribute type 11 has an invalid length. [ 121.223462][ T7419] netlink: 'syz.2.293': attribute type 23 has an invalid length. [ 121.232314][ T7419] netlink: 224 bytes leftover after parsing attributes in process `syz.2.293'. [ 121.272878][ T7421] syzkaller0: entered promiscuous mode [ 121.279019][ T7421] syzkaller0: entered allmulticast mode [ 121.430723][ T7425] tipc: Enabled bearer , priority 0 [ 121.448206][ T7425] syzkaller0: MTU too low for tipc bearer [ 121.454009][ T7425] tipc: Disabling bearer [ 121.845835][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 121.919559][ T7451] netlink: 'syz.0.304': attribute type 13 has an invalid length. [ 122.284886][ T7471] netlink: 27 bytes leftover after parsing attributes in process `syz.2.312'. [ 122.681765][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 122.953770][ T7505] netlink: 'syz.0.323': attribute type 13 has an invalid length. [ 123.012303][ T7485] lec:lec_atm_close: lec0: Shut down! [ 123.168291][ T7516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.325'. [ 123.367613][ T7523] syzkaller0: entered promiscuous mode [ 123.380744][ T7523] syzkaller0: entered allmulticast mode [ 123.805380][ T7551] netlink: 'syz.3.336': attribute type 13 has an invalid length. [ 124.135278][ T24] lec:lec_start_xmit: lec0:No lecd attached [ 124.420855][ T7587] macsec1: entered promiscuous mode [ 124.426164][ T7587] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 124.507938][ T7590] netlink: 'syz.0.344': attribute type 10 has an invalid length. [ 124.565841][ T7590] team0: Port device dummy0 added [ 124.608441][ T7596] netlink: 'syz.0.344': attribute type 10 has an invalid length. [ 124.704300][ T7570] lec:lec_atm_close: lec0: Shut down! [ 124.711460][ T7596] team0: Port device dummy0 removed [ 124.765030][ T7596] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 124.793261][ T7600] netlink: 64 bytes leftover after parsing attributes in process `syz.4.347'. [ 124.807760][ T7600] netlink: 40 bytes leftover after parsing attributes in process `syz.4.347'. [ 124.984724][ T7612] netlink: 'syz.2.351': attribute type 13 has an invalid length. [ 125.376720][ T7638] xt_l2tp: unknown flags: 51 [ 125.492501][ T7642] netlink: 64 bytes leftover after parsing attributes in process `syz.3.360'. [ 125.543925][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.360'. [ 125.685647][ T7651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 125.843113][ T7659] netlink: 40 bytes leftover after parsing attributes in process `syz.3.367'. [ 126.341589][ T7688] tipc: Started in network mode [ 126.356959][ T7688] tipc: Node identity 7a5daba7ce1f, cluster identity 4711 [ 126.365195][ T7688] tipc: Enabled bearer , priority 0 [ 126.383455][ T7688] syzkaller0: entered promiscuous mode [ 126.399235][ T7688] syzkaller0: entered allmulticast mode [ 126.424984][ T7688] netlink: 44 bytes leftover after parsing attributes in process `syz.0.378'. [ 126.455025][ T7688] tipc: Resetting bearer [ 126.477745][ T7687] tipc: Resetting bearer [ 126.524936][ T7687] tipc: Disabling bearer [ 126.716869][ T7703] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 127.146271][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 127.910923][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 128.041309][ T7725] tipc: Enabled bearer , priority 0 [ 128.048885][ T7725] syzkaller0: entered promiscuous mode [ 128.054372][ T7725] syzkaller0: entered allmulticast mode [ 128.080651][ T7725] tipc: Resetting bearer [ 128.095213][ T7724] tipc: Resetting bearer [ 128.134342][ T7724] tipc: Disabling bearer [ 128.327364][ T7741] __nla_validate_parse: 1 callbacks suppressed [ 128.327383][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.399'. [ 128.386892][ T7744] tipc: Enabled bearer , priority 10 [ 128.493452][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 128.841330][ T7769] tipc: Enabling of bearer rejected, failed to enable media [ 128.974975][ T7774] netlink: 48 bytes leftover after parsing attributes in process `syz.4.413'. [ 129.078463][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'. [ 129.092094][ T7781] openvswitch: netlink: Actions may not be safe on all matching packets [ 129.304255][ T7794] netlink: 'syz.1.419': attribute type 10 has an invalid length. [ 129.348347][ T7794] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 129.508291][ T24] tipc: Node number set to 285641132 [ 129.517853][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.421'. [ 129.524334][ T7807] netlink: 'syz.0.424': attribute type 11 has an invalid length. [ 129.534429][ T7807] netlink: 'syz.0.424': attribute type 23 has an invalid length. [ 129.546525][ T7807] netlink: 224 bytes leftover after parsing attributes in process `syz.0.424'. [ 129.812357][ T7825] xt_policy: too many policy elements [ 129.817829][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms [ 129.817991][ C0] lec:lec_tx_timeout: lec0 [ 129.826171][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 129.855650][ T7824] openvswitch: netlink: Actions may not be safe on all matching packets [ 130.517118][ T7859] tipc: Enabled bearer , priority 0 [ 130.577311][ T7864] openvswitch: netlink: Actions may not be safe on all matching packets [ 130.635271][ T7858] tipc: Disabling bearer [ 130.650274][ T7867] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 130.955126][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 131.074594][ T7892] netlink: 'syz.0.454': attribute type 11 has an invalid length. [ 131.083193][ T7892] netlink: 'syz.0.454': attribute type 23 has an invalid length. [ 131.091837][ T7892] netlink: 224 bytes leftover after parsing attributes in process `syz.0.454'. [ 131.199714][ T7898] tipc: Enabled bearer , priority 0 [ 131.237601][ T7897] tipc: Disabling bearer [ 131.385175][ T7905] netlink: 40 bytes leftover after parsing attributes in process `syz.4.464'. [ 131.819721][ T7929] netlink: 64 bytes leftover after parsing attributes in process `syz.3.469'. [ 132.369443][ T7962] netlink: 'syz.3.483': attribute type 33 has an invalid length. [ 132.414152][ T7962] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 132.557841][ T7968] netlink: 'syz.4.486': attribute type 11 has an invalid length. [ 132.586605][ T7968] netlink: 'syz.4.486': attribute type 23 has an invalid length. [ 132.631798][ T7945] tipc: Resetting bearer [ 132.781728][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.788428][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.918662][ T7982] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 133.689251][ T8000] __nla_validate_parse: 6 callbacks suppressed [ 133.689269][ T8000] netlink: 104 bytes leftover after parsing attributes in process `syz.0.500'. [ 133.802502][ T8003] tipc: Enabled bearer , priority 0 [ 133.813426][ T8003] tipc: Resetting bearer [ 133.847673][ T8001] tipc: Disabling bearer [ 134.111460][ T8024] tipc: Enabled bearer , priority 0 [ 134.121900][ T8024] syzkaller0: entered promiscuous mode [ 134.128401][ T8024] syzkaller0: entered allmulticast mode [ 134.227253][ T8031] netlink: 44 bytes leftover after parsing attributes in process `syz.3.510'. [ 134.262870][ T8024] tipc: Resetting bearer [ 134.405429][ T8023] tipc: Resetting bearer [ 134.478835][ T8023] tipc: Disabling bearer [ 134.711226][ T8043] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 134.817300][ T8051] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 134.856529][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms [ 134.864777][ C0] lec:lec_tx_timeout: lec0 [ 134.869610][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 134.981810][ T8061] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 135.039827][ T8059] tipc: Enabled bearer , priority 0 [ 135.214093][ T8069] syzkaller0: entered promiscuous mode [ 135.226211][ T8069] syzkaller0: entered allmulticast mode [ 135.234542][ T8061] 8021q: VLANs not supported on gre0 [ 135.260318][ T8081] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 135.278186][ T8082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.522'. [ 135.303055][ T8059] tipc: Resetting bearer [ 135.344189][ T8058] tipc: Resetting bearer [ 135.362155][ T8058] tipc: Disabling bearer [ 135.640741][ T8094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.532'. [ 135.927002][ T8116] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 136.220713][ T8121] tun0: tun_chr_ioctl cmd 1074025677 [ 136.226247][ T8121] tun0: linktype set to 776 [ 136.330315][ T8127] netlink: 44 bytes leftover after parsing attributes in process `syz.3.543'. [ 136.380125][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.388622][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.562987][ T8139] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 136.715553][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.1.549'. [ 136.759756][ T8146] netlink: 40 bytes leftover after parsing attributes in process `syz.3.548'. [ 137.169463][ T8163] netlink: 64 bytes leftover after parsing attributes in process `syz.2.554'. [ 137.192021][ T8170] netlink: 'syz.4.557': attribute type 3 has an invalid length. [ 137.209264][ T8163] netlink: 40 bytes leftover after parsing attributes in process `syz.2.554'. [ 137.738840][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.566'. [ 138.313063][ T5144] block nbd0: Receive control failed (result -32) [ 138.515806][ T8239] macvlan0: entered promiscuous mode [ 138.558262][ T8239] netlink: 'syz.4.580': attribute type 2 has an invalid length. [ 138.732708][ T8256] lo: Caught tx_queue_len zero misconfig [ 138.755211][ T8249] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 138.855347][ T8257] pimreg: tun_chr_ioctl cmd 1074025677 [ 138.882137][ T8257] pimreg: linktype set to 774 [ 138.903461][ T8262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.587'. [ 139.174066][ T8274] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 139.400299][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.597'. [ 139.505014][ T8289] lo: Caught tx_queue_len zero misconfig [ 139.876541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 139.884613][ C0] lec:lec_tx_timeout: lec0 [ 139.889604][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 140.329654][ T8326] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 140.524930][ T8337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.532531][ T8337] IPv6: NLM_F_CREATE should be set when creating new route [ 140.539958][ T8337] IPv6: NLM_F_CREATE should be set when creating new route [ 140.547245][ T8337] IPv6: NLM_F_CREATE should be set when creating new route [ 140.591492][ T8337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.609657][ T8340] netlink: 164 bytes leftover after parsing attributes in process `syz.4.620'. [ 140.769054][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 141.361555][ T8375] netlink: 'syz.0.636': attribute type 25 has an invalid length. [ 141.635070][ T8388] openvswitch: netlink: Actions may not be safe on all matching packets [ 141.806936][ T8392] syzkaller0: entered promiscuous mode [ 141.812891][ T8392] syzkaller0: entered allmulticast mode [ 142.121328][ T8417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 142.405347][ T8435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 142.469515][ T8439] syzkaller1: entered promiscuous mode [ 142.475061][ T8439] syzkaller1: entered allmulticast mode [ 142.486962][ T8432] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 142.547938][ T8442] syzkaller0: entered promiscuous mode [ 142.553720][ T8442] syzkaller0: entered allmulticast mode [ 142.561087][ T8445] netem: change failed [ 142.748677][ T8453] Bluetooth: MGMT ver 1.23 [ 142.816758][ T8458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.669'. [ 142.838642][ T8459] netlink: 28 bytes leftover after parsing attributes in process `syz.2.668'. [ 142.853283][ T8458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.669'. [ 142.932113][ T8466] netlink: 'syz.1.672': attribute type 13 has an invalid length. [ 143.146055][ T8476] netlink: 64 bytes leftover after parsing attributes in process `syz.0.677'. [ 143.371462][ T8482] syzkaller0: entered promiscuous mode [ 143.386874][ T8482] syzkaller0: entered allmulticast mode [ 143.399090][ T8485] tipc: Enabled bearer , priority 0 [ 143.422874][ T8485] syzkaller0: entered promiscuous mode [ 143.439719][ T8485] syzkaller0: entered allmulticast mode [ 143.528702][ T8485] tipc: Resetting bearer [ 143.574827][ T8484] tipc: Resetting bearer [ 143.611001][ T8484] tipc: Disabling bearer [ 143.644210][ T8492] netlink: 'syz.2.684': attribute type 3 has an invalid length. [ 144.050567][ T8511] __nla_validate_parse: 3 callbacks suppressed [ 144.050586][ T8511] netlink: 64 bytes leftover after parsing attributes in process `syz.4.690'. [ 144.270546][ T8523] netlink: 64 bytes leftover after parsing attributes in process `syz.3.696'. [ 144.310681][ T8524] dummy0: entered promiscuous mode [ 144.323432][ T8524] team0: entered promiscuous mode [ 144.328544][ T8524] team_slave_0: entered promiscuous mode [ 144.334476][ T8524] team_slave_1: entered promiscuous mode [ 144.343078][ T8524] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 144.353160][ T8524] hsr1: entered allmulticast mode [ 144.358482][ T8524] dummy0: entered allmulticast mode [ 144.363702][ T8524] team0: entered allmulticast mode [ 144.368911][ T8524] team_slave_0: entered allmulticast mode [ 144.374661][ T8524] team_slave_1: entered allmulticast mode [ 144.432762][ T8522] syzkaller0: entered promiscuous mode [ 144.459024][ T8534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.696'. [ 144.477754][ T8522] syzkaller0: entered allmulticast mode [ 144.485335][ T8538] openvswitch: netlink: Actions may not be safe on all matching packets [ 144.716429][ T8545] netlink: 64 bytes leftover after parsing attributes in process `syz.3.704'. [ 144.906527][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 144.914691][ C0] lec:lec_tx_timeout: lec0 [ 144.919642][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 145.202215][ T8567] syzkaller1: entered promiscuous mode [ 145.218971][ T8567] syzkaller1: entered allmulticast mode [ 145.317686][ T8575] openvswitch: netlink: Actions may not be safe on all matching packets [ 145.326339][ T8572] batadv_slave_1: entered promiscuous mode [ 145.339227][ T8570] batadv_slave_1: left promiscuous mode [ 145.350598][ T8574] syzkaller0: entered promiscuous mode [ 145.356102][ T8574] syzkaller0: entered allmulticast mode [ 145.465757][ T8577] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 145.520173][ T8577] IPv6: NLM_F_REPLACE set, but no existing node found! [ 145.847873][ T8579] lec0: mtu less than device minimum [ 145.853509][ T8579] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 145.881541][ T8578] lec:lec_atm_close: lec0: Shut down! [ 145.907487][ T8598] lo: Caught tx_queue_len zero misconfig [ 145.997535][ T8604] batadv_slave_1: entered promiscuous mode [ 146.020047][ T8602] batadv_slave_1: left promiscuous mode [ 146.047101][ T8603] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.165440][ T8608] syzkaller0: entered promiscuous mode [ 146.171820][ T8608] syzkaller0: entered allmulticast mode [ 146.789490][ T8638] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.045443][ T8648] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 147.099591][ T8648] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 147.267619][ T8659] netlink: 36 bytes leftover after parsing attributes in process `syz.4.749'. [ 147.314735][ T8634] lec0: mtu less than device minimum [ 147.321467][ T8634] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 147.337976][ T8631] lec:lec_atm_close: lec0: Shut down! [ 147.395696][ T8666] syzkaller0: entered promiscuous mode [ 147.406674][ T8666] syzkaller0: entered allmulticast mode [ 148.194803][ T8707] syzkaller0: entered promiscuous mode [ 148.200476][ T8707] syzkaller0: entered allmulticast mode [ 148.469986][ T8724] netlink: 'syz.1.778': attribute type 13 has an invalid length. [ 148.519849][ T8728] netlink: 88 bytes leftover after parsing attributes in process `syz.0.780'. [ 148.916049][ T8745] bridge1: entered promiscuous mode [ 148.925229][ T8745] bridge1: entered allmulticast mode [ 148.941921][ T8745] team0: Port device bridge1 added [ 149.060155][ T8751] syzkaller0: entered promiscuous mode [ 149.065756][ T8751] syzkaller0: entered allmulticast mode [ 149.165136][ T8757] netlink: 'syz.4.792': attribute type 13 has an invalid length. [ 149.295028][ T8763] netlink: 36 bytes leftover after parsing attributes in process `syz.3.793'. [ 149.902166][ T8796] team_slave_1: Caught tx_queue_len zero misconfig [ 149.985212][ T8801] syzkaller0: entered promiscuous mode [ 149.990882][ T8801] syzkaller0: entered allmulticast mode [ 150.224467][ T8814] netlink: 'syz.4.810': attribute type 4 has an invalid length. [ 150.241254][ T8814] IPv6: NLM_F_REPLACE set, but no existing node found! [ 150.288274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.317759][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.823020][ T8850] syzkaller0: entered promiscuous mode [ 150.836984][ T8850] syzkaller0: entered allmulticast mode [ 151.540794][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 151.572703][ T8895] netlink: 'syz.4.841': attribute type 4 has an invalid length. [ 151.939395][ T8909] team_slave_1: Caught tx_queue_len zero misconfig [ 152.240041][ T8931] syzkaller0: entered promiscuous mode [ 152.245673][ T8931] syzkaller0: entered allmulticast mode [ 152.611675][ T8956] syzkaller1: entered promiscuous mode [ 152.619732][ T8956] syzkaller1: entered allmulticast mode [ 152.798229][ T8965] netlink: 'syz.2.864': attribute type 6 has an invalid length. [ 152.826297][ T8965] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.864'. [ 152.856658][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 152.864718][ C0] lec:lec_tx_timeout: lec0 [ 152.869696][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 153.039799][ T8970] "syz.1.868" (8970) uses obsolete ecb(arc4) skcipher [ 153.097539][ T8984] netlink: 'syz.2.871': attribute type 4 has an invalid length. [ 154.203075][ T9022] netlink: 64 bytes leftover after parsing attributes in process `syz.1.886'. [ 154.550714][ T9037] tipc: Enabling of bearer rejected, failed to enable media [ 154.698540][ T9025] lec:lec_atm_close: lec0: Shut down! [ 155.258466][ T9077] netlink: 'syz.3.907': attribute type 2 has an invalid length. [ 155.266368][ T9077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.907'. [ 155.365230][ T9082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 155.874091][ T9101] netlink: 27 bytes leftover after parsing attributes in process `syz.4.918'. [ 156.247303][ T9119] syzkaller0: entered promiscuous mode [ 156.254073][ T9119] syzkaller0: entered allmulticast mode [ 156.320666][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880556b3000: rx timeout, send abort [ 156.330861][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880556b3000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 156.642049][ T9132] netlink: 'syz.4.931': attribute type 2 has an invalid length. [ 156.650004][ T9132] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 156.659279][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 156.865385][ T9146] tipc: Enabling of bearer rejected, failed to enable media [ 156.991927][ T9146] netlink: 44 bytes leftover after parsing attributes in process `syz.4.936'. [ 157.051047][ T9152] syzkaller0: entered promiscuous mode [ 157.060240][ T9152] syzkaller0: entered allmulticast mode [ 157.071414][ T9156] netlink: 'syz.3.938': attribute type 11 has an invalid length. [ 157.083362][ T9156] netlink: 'syz.3.938': attribute type 23 has an invalid length. [ 157.092444][ T9156] netlink: 224 bytes leftover after parsing attributes in process `syz.3.938'. [ 157.276699][ T9164] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 158.001030][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.959'. [ 158.078482][ T5842] block nbd1: Receive control failed (result -32) [ 158.086092][ T5144] block nbd1: Receive control failed (result -32) [ 158.327645][ T9217] syzkaller0: entered promiscuous mode [ 158.343250][ T9217] syzkaller0: entered allmulticast mode [ 158.492235][ T9223] macvlan0: left promiscuous mode [ 158.499600][ T9223] netlink: 'syz.4.967': attribute type 2 has an invalid length. [ 158.589615][ T9226] netlink: 'syz.0.969': attribute type 11 has an invalid length. [ 158.626622][ T9226] netlink: 'syz.0.969': attribute type 23 has an invalid length. [ 158.634391][ T9226] netlink: 224 bytes leftover after parsing attributes in process `syz.0.969'. [ 159.238432][ T9254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.978'. [ 159.587524][ T9285] netlink: 'syz.0.987': attribute type 4 has an invalid length. [ 159.826601][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5130 ms [ 159.834679][ C0] lec:lec_tx_timeout: lec0 [ 159.839512][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 160.130079][ T9305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.993'. [ 160.384221][ T9330] netlink: 'syz.4.1002': attribute type 4 has an invalid length. [ 160.397888][ T6166] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 160.696685][ T10] IPVS: starting estimator thread 0... [ 160.788282][ T9348] IPVS: using max 29 ests per chain, 69600 per kthread [ 160.796653][ T9351] dummy0: Caught tx_queue_len zero misconfig [ 160.806207][ T9351] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 161.147095][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1012'. [ 161.288990][ T9371] netlink: 'syz.2.1016': attribute type 4 has an invalid length. [ 162.654196][ T9437] tipc: Enabling of bearer rejected, failed to enable media [ 163.107377][ T9457] netlink: 'syz.1.1044': attribute type 4 has an invalid length. [ 164.421916][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'. [ 164.456096][ T9506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.463382][ T9506] IPv6: NLM_F_CREATE should be set when creating new route [ 164.592756][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1063'. [ 164.700743][ T9520] netlink: 'syz.0.1066': attribute type 4 has an invalid length. [ 164.856541][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 164.864645][ C0] lec:lec_tx_timeout: lec0 [ 164.869363][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 164.895282][ T9532] Bluetooth: MGMT ver 1.23 [ 165.461200][ T9560] vlan2: entered allmulticast mode [ 165.479664][ T9560] bridge0: port 3(vlan2) entered blocking state [ 165.495169][ T9560] bridge0: port 3(vlan2) entered disabled state [ 165.509996][ T9560] vlan2: entered promiscuous mode [ 165.745300][ T9579] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1088'. [ 166.005588][ T9597] netlink: 'syz.2.1095': attribute type 11 has an invalid length. [ 166.760426][ T9640] netlink: 'syz.2.1108': attribute type 1 has an invalid length. [ 166.894824][ T9647] bond1: (slave bridge1): making interface the new active one [ 166.906197][ T9647] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 166.950713][ T9654] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 167.162478][ T9657] bond1: (slave geneve3): making interface the new active one [ 167.181725][ T9657] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 167.217915][ T9670] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 167.284953][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.308092][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.322169][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.345842][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 167.379045][ T9677] syzkaller0: entered promiscuous mode [ 167.386990][ T9677] syzkaller0: entered allmulticast mode [ 167.395541][ T9678] netlink: 'syz.0.1116': attribute type 11 has an invalid length. [ 167.418254][ T9678] netlink: 'syz.0.1116': attribute type 23 has an invalid length. [ 167.426118][ T9678] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1116'. [ 167.503759][ T9683] netlink: 'syz.4.1118': attribute type 2 has an invalid length. [ 167.524846][ T9683] !9: entered promiscuous mode [ 167.538870][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1118'. [ 167.649900][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1121'. [ 167.709083][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 167.733792][ T9692] netlink: 'syz.2.1122': attribute type 12 has an invalid length. [ 167.782993][ T6158] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.793170][ T9692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1122'. [ 167.802755][ T6158] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.832471][ T9692] netlink: 'syz.2.1122': attribute type 12 has an invalid length. [ 167.848456][ T6158] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.871013][ T6158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.883227][ T9695] syzkaller1: entered promiscuous mode [ 167.889184][ T9695] syzkaller1: entered allmulticast mode [ 168.187255][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1124'. [ 168.483307][ T9729] netlink: 'syz.0.1129': attribute type 4 has an invalid length. [ 168.489824][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1131'. [ 168.529880][ T9732] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1131'. [ 168.729310][ T9737] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 169.876511][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 169.884579][ C0] lec:lec_tx_timeout: lec0 [ 169.889586][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 170.181456][ T9806] netlink: 'syz.3.1153': attribute type 4 has an invalid length. [ 170.343924][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 170.356039][ T9817] syzkaller1: entered promiscuous mode [ 170.363539][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 170.364226][ T9817] syzkaller1: entered allmulticast mode [ 170.459446][ T9820] geneve4: entered promiscuous mode [ 170.473779][ T6166] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.483801][ T6166] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.527008][ T6166] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.562428][ T6166] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 171.298468][ T9851] netlink: 'syz.0.1167': attribute type 12 has an invalid length. [ 171.521295][ T9842] lec:lec_atm_close: lec0: Shut down! [ 171.860313][ T9869] syzkaller1: entered promiscuous mode [ 171.873795][ T9869] syzkaller1: entered allmulticast mode [ 172.003554][ T9871] geneve2: entered promiscuous mode [ 172.647616][ T9903] trusted_key: syz.2.1187 sent an empty control message without MSG_MORE. [ 172.831805][ T9908] __nla_validate_parse: 1 callbacks suppressed [ 172.831818][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1189'. [ 172.856412][ T6168] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.870683][ T6168] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.886412][ T6168] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.895648][ T6168] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.209112][ T9920] syzkaller0: entered promiscuous mode [ 173.216336][ T9920] syzkaller0: entered allmulticast mode [ 173.407086][ T9924] syzkaller0: entered promiscuous mode [ 173.416168][ T9924] syzkaller0: entered allmulticast mode [ 173.502386][ T9924] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1194'. [ 174.813423][ T9976] syzkaller0: entered promiscuous mode [ 174.826888][ T9976] syzkaller0: entered allmulticast mode [ 174.857345][ T9976] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1212'. [ 175.204514][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 175.241876][ T9990] syzkaller0: entered promiscuous mode [ 175.266667][ T9990] syzkaller0: entered allmulticast mode [ 175.368220][ T9995] syzkaller0: entered promiscuous mode [ 175.373728][ T9995] syzkaller0: entered allmulticast mode [ 175.924667][T10011] tipc: Enabled bearer , priority 0 [ 175.943043][T10015] syzkaller0: entered promiscuous mode [ 175.948768][T10015] syzkaller0: entered allmulticast mode [ 175.956174][T10011] syzkaller0: entered promiscuous mode [ 175.962247][T10011] syzkaller0: entered allmulticast mode [ 175.970086][T10018] netlink: 'syz.1.1227': attribute type 11 has an invalid length. [ 175.978254][T10018] netlink: 'syz.1.1227': attribute type 23 has an invalid length. [ 175.989599][T10018] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1227'. [ 176.007213][T10015] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1226'. [ 176.033570][T10011] tipc: Resetting bearer [ 176.043824][T10010] tipc: Resetting bearer [ 176.061782][T10010] tipc: Disabling bearer [ 176.352118][T10029] syzkaller0: entered promiscuous mode [ 176.366640][T10029] syzkaller0: entered allmulticast mode [ 176.716921][T10045] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 176.739396][T10044] tipc: Enabled bearer , priority 0 [ 176.805348][T10044] syzkaller0: entered promiscuous mode [ 176.834289][T10044] syzkaller0: entered allmulticast mode [ 176.856635][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5340 ms [ 176.864794][ C0] lec:lec_tx_timeout: lec0 [ 176.870198][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 176.930007][T10044] tipc: Resetting bearer [ 176.937294][T10049] syzkaller0: entered promiscuous mode [ 176.950791][T10049] syzkaller0: entered allmulticast mode [ 177.039312][T10043] tipc: Resetting bearer [ 177.067539][T10043] tipc: Disabling bearer [ 177.112486][T10049] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1239'. [ 177.304174][T10066] netlink: 'syz.2.1244': attribute type 10 has an invalid length. [ 177.312137][T10066] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.1244'. [ 177.329409][T10062] syzkaller0: entered promiscuous mode [ 177.346911][T10062] syzkaller0: entered allmulticast mode [ 177.720009][T10084] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 177.799045][T10086] tipc: Enabled bearer , priority 0 [ 177.836250][T10086] syzkaller0: entered promiscuous mode [ 177.844660][T10086] syzkaller0: entered allmulticast mode [ 177.934628][T10086] tipc: Resetting bearer [ 177.949105][T10085] tipc: Resetting bearer [ 177.964662][T10085] tipc: Disabling bearer [ 177.991430][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1256'. [ 178.087833][T10099] syzkaller0: entered promiscuous mode [ 178.093534][T10099] syzkaller0: entered allmulticast mode [ 178.131213][T10099] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1257'. [ 178.234283][T10101] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1258'. [ 178.263349][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'. [ 178.423877][T10112] netlink: 'syz.0.1262': attribute type 4 has an invalid length. [ 178.577785][T10114] batman_adv: batadv0: Adding interface: macvtap1 [ 178.584827][T10114] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.662129][T10114] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 178.725941][T10125] tipc: Enabled bearer , priority 0 [ 178.745405][T10125] syzkaller0: entered promiscuous mode [ 178.767932][T10125] syzkaller0: entered allmulticast mode [ 178.821985][T10135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 178.829627][T10125] tipc: Resetting bearer [ 178.842046][T10124] tipc: Resetting bearer [ 178.860154][T10124] tipc: Disabling bearer [ 179.526228][T10158] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1275'. [ 179.674521][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1278'. [ 179.766049][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1280'. [ 179.823332][T10188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1280'. [ 179.954440][T10194] tipc: Enabled bearer , priority 0 [ 180.024371][T10206] syzkaller0: entered promiscuous mode [ 180.085926][T10206] syzkaller0: entered allmulticast mode [ 180.201744][T10194] tipc: Resetting bearer [ 180.249745][T10209] syzkaller0: entered promiscuous mode [ 180.255264][T10209] syzkaller0: entered allmulticast mode [ 180.282639][T10193] tipc: Resetting bearer [ 180.301988][T10193] tipc: Disabling bearer [ 180.510399][T10230] openvswitch: netlink: Actions may not be safe on all matching packets [ 180.899850][T10236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1291'. [ 181.397211][T10272] syzkaller0: entered promiscuous mode [ 181.402864][T10272] syzkaller0: entered allmulticast mode [ 181.680494][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.717407][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.886543][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 181.894629][ C0] lec:lec_tx_timeout: lec0 [ 181.899895][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 181.919621][T10294] openvswitch: netlink: Actions may not be safe on all matching packets [ 182.235991][T10307] syzkaller0: entered promiscuous mode [ 182.242012][T10307] syzkaller0: entered allmulticast mode [ 182.690777][T10325] syzkaller1: entered promiscuous mode [ 182.707049][T10325] syzkaller1: entered allmulticast mode [ 183.044914][T10335] __nla_validate_parse: 5 callbacks suppressed [ 183.044932][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 183.090151][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1326'. [ 183.119268][T10340] syzkaller0: entered promiscuous mode [ 183.126648][T10335] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 183.128275][T10340] syzkaller0: entered allmulticast mode [ 183.136335][T10335] iwpm_mapping_info_cb: Unable to parse nlmsg [ 183.410382][T10349] gretap0: entered promiscuous mode [ 183.710209][T10364] netlink: 'syz.3.1337': attribute type 3 has an invalid length. [ 183.750516][T10367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1338'. [ 184.069338][T10378] syzkaller0: entered promiscuous mode [ 184.078669][T10378] syzkaller0: entered allmulticast mode [ 184.426168][T10388] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 184.725165][T10404] netlink: 'syz.0.1350': attribute type 1 has an invalid length. [ 184.990754][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 185.163488][T10426] syzkaller0: entered promiscuous mode [ 185.174961][T10426] syzkaller0: entered allmulticast mode [ 185.187866][T10429] syzkaller1: entered promiscuous mode [ 185.193366][T10429] syzkaller1: entered allmulticast mode [ 185.553230][T10443] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 185.620180][T10453] tipc: Enabling of bearer rejected, failed to enable media [ 185.620866][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 185.631584][T10453] syzkaller0: entered promiscuous mode [ 185.675989][T10453] syzkaller0: entered allmulticast mode [ 185.687701][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 186.192244][T10487] syzkaller0: entered promiscuous mode [ 186.204804][T10487] syzkaller0: entered allmulticast mode [ 186.219299][T10476] lec0: mtu less than device minimum [ 186.225948][T10476] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 186.407929][T10490] tipc: Enabled bearer , priority 0 [ 186.433862][T10490] syzkaller0: entered promiscuous mode [ 186.447243][T10490] syzkaller0: entered allmulticast mode [ 186.452996][T10472] lec:lec_atm_close: lec0: Shut down! [ 186.527009][T10490] tipc: Resetting bearer [ 186.547577][T10489] tipc: Resetting bearer [ 186.570363][T10489] tipc: Disabling bearer [ 186.721470][T10500] syzkaller0: entered promiscuous mode [ 186.727194][T10500] syzkaller0: entered allmulticast mode [ 186.746005][T10502] syzkaller1: entered promiscuous mode [ 186.751733][T10502] syzkaller1: entered allmulticast mode [ 186.762249][T10500] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1378'. [ 187.053087][T10517] tipc: Enabling of bearer rejected, failed to enable media [ 187.062475][T10517] syzkaller0: entered promiscuous mode [ 187.068259][T10517] syzkaller0: entered allmulticast mode [ 187.105681][T10517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1385'. [ 187.277951][T10514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1384'. [ 187.304990][T10524] syzkaller0: entered promiscuous mode [ 187.320149][T10524] syzkaller0: entered allmulticast mode [ 188.654336][T10544] tipc: Enabling of bearer rejected, failed to enable media [ 188.859767][T10567] syzkaller0: entered promiscuous mode [ 188.865282][T10567] syzkaller0: entered allmulticast mode [ 189.036677][T10576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1392'. [ 189.190219][T10581] tipc: Enabling of bearer rejected, failed to enable media [ 189.199866][T10581] syzkaller0: entered promiscuous mode [ 189.205487][T10581] syzkaller0: entered allmulticast mode [ 189.233948][T10581] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1398'. [ 189.524091][T10583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1399'. [ 189.551201][T10600] syzkaller0: entered promiscuous mode [ 189.556916][T10600] syzkaller0: entered allmulticast mode [ 190.082173][T10621] syzkaller0: entered promiscuous mode [ 190.088658][T10621] syzkaller0: entered allmulticast mode [ 190.120192][T10621] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1409'. [ 190.352927][T10627] tipc: Enabling of bearer rejected, failed to enable media [ 190.382947][T10628] syzkaller0: entered promiscuous mode [ 190.389662][T10628] syzkaller0: entered allmulticast mode [ 191.540583][T10644] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1412'. [ 191.716424][T10654] syzkaller0: entered promiscuous mode [ 191.756723][T10654] syzkaller0: entered allmulticast mode [ 191.767614][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 191.816561][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5370 ms [ 191.824659][ C0] lec:lec_tx_timeout: lec0 [ 191.829327][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 191.842383][T10661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1419'. [ 192.086328][T10677] tipc: Enabling of bearer rejected, failed to enable media [ 192.098994][T10677] syzkaller0: entered promiscuous mode [ 192.104499][T10677] syzkaller0: entered allmulticast mode [ 192.523957][T10703] tipc: Enabling of bearer rejected, failed to enable media [ 192.535324][T10703] syzkaller0: entered promiscuous mode [ 192.541244][T10703] syzkaller0: entered allmulticast mode [ 192.563095][T10703] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1430'. [ 192.624546][T10707] syz.2.1432 uses old SIOCAX25GETINFO [ 192.731649][T10712] syzkaller0: entered promiscuous mode [ 192.737247][T10712] syzkaller0: entered allmulticast mode [ 192.934319][T10721] syzkaller1: entered promiscuous mode [ 192.941344][T10721] syzkaller1: entered allmulticast mode [ 193.282945][T10738] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1443'. [ 193.469616][T10744] tipc: Enabling of bearer rejected, failed to enable media [ 193.479132][T10744] syzkaller0: entered promiscuous mode [ 193.484627][T10744] syzkaller0: entered allmulticast mode [ 193.520550][T10744] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1444'. [ 194.225528][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.515891][T10777] netlink: 'syz.0.1454': attribute type 11 has an invalid length. [ 194.524975][T10777] netlink: 'syz.0.1454': attribute type 23 has an invalid length. [ 194.533073][T10777] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1454'. [ 195.589143][T10796] tipc: Enabled bearer , priority 0 [ 195.599286][T10796] syzkaller0: entered promiscuous mode [ 195.604782][T10796] syzkaller0: entered allmulticast mode [ 195.630200][T10800] syzkaller0: entered promiscuous mode [ 195.635781][T10800] syzkaller0: entered allmulticast mode [ 195.698677][T10800] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1461'. [ 195.761247][T10795] tipc: Resetting bearer [ 195.780394][T10795] tipc: Disabling bearer [ 195.859956][T10812] netlink: 16158 bytes leftover after parsing attributes in process `syz.0.1466'. [ 195.958801][T10816] netlink: 'syz.3.1467': attribute type 4 has an invalid length. [ 196.072773][T10826] syzkaller1: entered promiscuous mode [ 196.078635][T10826] syzkaller1: entered allmulticast mode [ 196.086606][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 196.174121][ T6158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.191242][ T6158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.399688][T10839] syzkaller0: entered promiscuous mode [ 196.405168][T10839] syzkaller0: entered allmulticast mode [ 196.423518][T10839] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1476'. [ 196.535967][T10844] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 196.749196][T10848] syzkaller0: entered promiscuous mode [ 196.757106][T10848] syzkaller0: entered allmulticast mode [ 196.856551][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 196.864583][ C0] lec:lec_tx_timeout: lec0 [ 196.869550][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 196.972809][T10861] syzkaller0: entered promiscuous mode [ 196.980239][T10861] syzkaller0: entered allmulticast mode [ 197.028985][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 197.160195][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 197.309915][T10876] bond2: entered promiscuous mode [ 197.366834][T10885] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 197.382522][T10876] vcan0: entered promiscuous mode [ 197.392813][T10876] vcan0: entered allmulticast mode [ 197.398920][T10876] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 197.411710][T10876] bond2: (slave vcan0): Error -95 calling set_mac_address [ 198.049461][T10908] syzkaller0: entered promiscuous mode [ 198.066813][T10908] syzkaller0: entered allmulticast mode [ 198.141131][T10913] syzkaller0: entered promiscuous mode [ 198.147606][T10913] syzkaller0: entered allmulticast mode [ 198.502263][T10928] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 198.590638][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1505'. [ 198.705132][T10933] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1505'. [ 198.833512][T10941] tipc: Enabled bearer , priority 0 [ 198.932909][T10941] syzkaller0: entered promiscuous mode [ 198.938905][T10941] syzkaller0: entered allmulticast mode [ 198.945245][T10941] tipc: Resetting bearer [ 198.976243][T10940] tipc: Resetting bearer [ 200.175707][T10940] tipc: Disabling bearer [ 200.243857][ T5881] tipc: Node number set to 2406794283 [ 200.978219][T11018] syzkaller0: entered promiscuous mode [ 200.989460][T11018] syzkaller0: entered allmulticast mode [ 201.741137][T11046] syzkaller0: entered promiscuous mode [ 201.746734][T11046] syzkaller0: entered allmulticast mode [ 201.902598][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 201.910675][ C0] lec:lec_tx_timeout: lec0 [ 201.926620][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 201.954731][T11052] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 202.191140][T11068] tipc: Enabling of bearer rejected, failed to enable media [ 202.211510][T11064] syzkaller0: entered promiscuous mode [ 202.227906][T11064] syzkaller0: entered allmulticast mode [ 203.104335][T11095] syzkaller0: entered promiscuous mode [ 203.110770][T11095] syzkaller0: entered allmulticast mode [ 203.250236][T11097] bond2: entered promiscuous mode [ 203.512319][T11107] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 203.570852][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'. [ 203.732377][ T24] IPVS: starting estimator thread 0... [ 203.829013][T11125] IPVS: using max 33 ests per chain, 79200 per kthread [ 203.984916][ T1161] IPVS: stop unused estimator thread 0... [ 204.108986][T11142] netlink: 'syz.0.1566': attribute type 29 has an invalid length. [ 204.117712][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 204.129065][T11142] netlink: 'syz.0.1566': attribute type 29 has an invalid length. [ 204.137462][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 204.179677][T11144] netem: incorrect gi model size [ 204.185131][T11144] netem: change failed [ 204.449953][T11154] netlink: 'syz.3.1572': attribute type 1 has an invalid length. [ 204.564566][T11160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1574'. [ 204.603577][T11158] 8021q: adding VLAN 0 to HW filter on device bond4 [ 204.619124][T11158] bond3: (slave bond4): making interface the new active one [ 204.632843][T11158] bond3: (slave bond4): Enslaving as an active interface with an up link [ 204.763591][T11154] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 204.783843][T11158] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1572'. [ 204.807082][T11158] 8021q: adding VLAN 0 to HW filter on device bond3 [ 205.057391][T11176] tipc: Enabled bearer , priority 0 [ 205.133650][T11176] syzkaller0: entered promiscuous mode [ 205.151800][T11176] syzkaller0: entered allmulticast mode [ 205.158557][T11176] tipc: Resetting bearer [ 205.203150][T11175] tipc: Resetting bearer [ 206.439925][T11175] tipc: Disabling bearer [ 206.625210][T11218] netlink: 'syz.0.1591': attribute type 16 has an invalid length. [ 206.636455][T11218] netlink: 'syz.0.1591': attribute type 17 has an invalid length. [ 206.665161][T11218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.936597][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 206.944699][ C0] lec:lec_tx_timeout: lec0 [ 206.949494][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 207.358711][T11245] syzkaller0: entered promiscuous mode [ 207.364314][T11245] syzkaller0: entered allmulticast mode [ 207.556870][T11252] openvswitch: netlink: Actions may not be safe on all matching packets [ 207.956405][T11272] syzkaller0: entered promiscuous mode [ 207.967948][T11272] syzkaller0: entered allmulticast mode [ 207.976905][T11274] netlink: 'syz.0.1611': attribute type 4 has an invalid length. [ 207.979184][T11268] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 208.940013][T11299] netlink: 'syz.0.1619': attribute type 4 has an invalid length. [ 208.992727][T11304] syzkaller0: entered promiscuous mode [ 208.998445][T11304] syzkaller0: entered allmulticast mode [ 209.157074][T11312] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1622'. [ 209.478254][T11320] netlink: 'syz.3.1627': attribute type 3 has an invalid length. [ 209.496142][T11320] netlink: 'syz.3.1627': attribute type 1 has an invalid length. [ 209.514272][T11320] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1627'. [ 209.589817][T11326] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 210.324870][T11358] batadv_slave_0: entered promiscuous mode [ 210.334556][T11357] batadv_slave_0: left promiscuous mode [ 210.729522][T11379] netlink: 'syz.1.1642': attribute type 4 has an invalid length. [ 210.989045][T11367] lec:lec_atm_close: lec0: Shut down! [ 211.076635][T11385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1640'. [ 211.136035][T11400] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 211.778516][T11426] netlink: 'syz.3.1652': attribute type 4 has an invalid length. [ 212.350446][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1656'. [ 212.457767][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1660'. [ 212.533523][T11443] lec0: mtu less than device minimum [ 212.555033][T11443] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 212.604086][T11441] lec:lec_atm_close: lec0: Shut down! [ 212.720058][T11470] syzkaller0: entered promiscuous mode [ 212.725562][T11470] syzkaller0: entered allmulticast mode [ 212.863283][T11475] syzkaller0: entered promiscuous mode [ 212.880470][T11475] syzkaller0: entered allmulticast mode [ 212.973251][T11475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1665'. [ 213.183272][T11493] syzkaller0: entered promiscuous mode [ 213.201120][T11493] syzkaller0: entered allmulticast mode [ 213.217769][T11501] netlink: 'syz.1.1674': attribute type 4 has an invalid length. [ 213.517089][T11509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 213.535923][T11510] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1675'. [ 213.619967][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 213.971005][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1679'. [ 214.309428][T11513] lec0: mtu less than device minimum [ 214.314759][T11513] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 214.351620][T11533] tipc: Enabled bearer , priority 0 [ 214.385783][T11512] lec:lec_atm_close: lec0: Shut down! [ 214.396212][T11532] tipc: Disabling bearer [ 214.744097][T11543] netlink: 'syz.3.1685': attribute type 83 has an invalid length. [ 214.784795][T11540] syzkaller0: entered promiscuous mode [ 214.790579][T11540] syzkaller0: entered allmulticast mode [ 214.805931][T11540] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1683'. [ 214.978160][T11556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1689'. [ 215.052811][T11561] netlink: 'syz.1.1691': attribute type 4 has an invalid length. [ 215.273688][T11573] tipc: Enabled bearer , priority 0 [ 215.291240][T11575] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1695'. [ 215.304396][T11572] tipc: Disabling bearer [ 215.332049][T11577] syzkaller0: entered promiscuous mode [ 215.340230][T11577] syzkaller0: entered allmulticast mode [ 215.521019][T11587] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 215.865813][T11599] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.880253][T11599] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.943184][T11606] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1704'. [ 216.184982][T11599] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.216100][T11599] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.443583][T11599] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.463403][T11599] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.520970][T11630] syzkaller0: entered promiscuous mode [ 216.521039][T11628] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 216.537746][T11630] syzkaller0: entered allmulticast mode [ 216.547358][T11629] tipc: Enabled bearer , priority 0 [ 216.684820][T11625] tipc: Disabling bearer [ 216.718197][T11636] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 216.729650][T11599] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.743104][T11599] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.268420][T11650] lec0: mtu less than device minimum [ 217.273740][T11650] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 217.282979][T11649] lec:lec_atm_close: lec0: Shut down! [ 217.369816][ T6170] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.388828][ T6170] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.399900][ T6170] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.410440][ T6170] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.451929][ T6170] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.465111][ T6170] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.544321][T11667] syzkaller0: entered promiscuous mode [ 217.556720][T11667] syzkaller0: entered allmulticast mode [ 217.599276][ T6170] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 217.618846][ T6170] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.657632][T11676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1721'. [ 217.677969][T11673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1718'. [ 217.974750][T11677] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1720'. [ 217.977715][T11689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1722'. [ 218.224575][T11691] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 218.236590][T11701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1727'. [ 218.281483][T11699] tipc: Enabled bearer , priority 0 [ 218.305335][T11696] tipc: Disabling bearer [ 218.591416][T11721] syzkaller0: entered promiscuous mode [ 218.611532][T11721] syzkaller0: entered allmulticast mode [ 218.651438][T11721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1732'. [ 218.710801][T11724] syzkaller0: entered promiscuous mode [ 218.716451][T11724] syzkaller0: entered allmulticast mode [ 218.810531][T11726] tipc: Enabled bearer , priority 0 [ 218.824093][T11726] tipc: Resetting bearer [ 218.843193][T11725] tipc: Disabling bearer [ 219.366864][T11751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.383927][T11752] tipc: Enabled bearer , priority 0 [ 219.398579][T11751] bond1: (slave ip6gretap1): making interface the new active one [ 219.408664][T11751] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 219.420924][T11750] tipc: Disabling bearer [ 219.595923][ T5953] IPVS: starting estimator thread 0... [ 219.686571][T11760] IPVS: using max 31 ests per chain, 74400 per kthread [ 219.769598][T11765] tipc: Enabled bearer , priority 0 [ 219.788471][T11765] tipc: Resetting bearer [ 219.803491][T11764] tipc: Disabling bearer [ 219.840069][ T6168] IPVS: stop unused estimator thread 0... [ 220.081278][T11744] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 220.130171][T11775] macvtap0: entered promiscuous mode [ 220.155350][T11775] __nla_validate_parse: 1 callbacks suppressed [ 220.155366][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1750'. [ 220.175468][T11775] veth0_macvtap: left promiscuous mode [ 220.201757][T11775] macvtap0 (unregistering): left promiscuous mode [ 220.357108][T11785] tipc: Enabled bearer , priority 0 [ 220.377277][T11783] tipc: Disabling bearer [ 220.719005][T11801] tipc: Enabled bearer , priority 0 [ 220.727028][T11801] syzkaller0: entered promiscuous mode [ 220.732867][T11801] syzkaller0: entered allmulticast mode [ 220.754930][T11800] tipc: Resetting bearer [ 220.773035][T11800] tipc: Disabling bearer [ 221.590634][T11825] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 221.632118][T11825] netlink: 'syz.2.1769': attribute type 39 has an invalid length. [ 221.786024][T11825] bond0 (unregistering): Released all slaves [ 221.928613][T11828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1768'. [ 222.171526][T11815] ================================================================== [ 222.179646][T11815] BUG: KASAN: slab-use-after-free in ax25_send_frame+0x3ea/0x9f0 [ 222.187406][T11815] Read of size 8 at addr ffff888078bec448 by task syz.1.1765/11815 [ 222.195299][T11815] [ 222.197650][T11815] CPU: 0 UID: 0 PID: 11815 Comm: syz.1.1765 Not tainted syzkaller #0 PREEMPT(full) [ 222.197670][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.197686][T11815] Call Trace: [ 222.197693][T11815] [ 222.197700][T11815] dump_stack_lvl+0xe8/0x150 [ 222.197725][T11815] print_report+0xba/0x230 [ 222.197745][T11815] ? ax25_send_frame+0x3ea/0x9f0 [ 222.197765][T11815] kasan_report+0x117/0x150 [ 222.197787][T11815] ? ax25_send_frame+0x3ea/0x9f0 [ 222.197811][T11815] ax25_send_frame+0x3ea/0x9f0 [ 222.197831][T11815] ? ax25_send_frame+0x326/0x9f0 [ 222.197855][T11815] ? skb_put+0x11b/0x210 [ 222.197874][T11815] rose_transmit_link+0x729/0xac0 [ 222.197894][T11815] rose_write_internal+0x1256/0x1b60 [ 222.197912][T11815] ? lockdep_hardirqs_on+0x7a/0x110 [ 222.197933][T11815] ? __pfx_rose_write_internal+0x10/0x10 [ 222.197951][T11815] ? timer_delete+0x245/0x340 [ 222.197969][T11815] rose_release+0x25b/0x510 [ 222.197991][T11815] sock_close+0xc3/0x240 [ 222.198013][T11815] ? __pfx_sock_close+0x10/0x10 [ 222.198033][T11815] __fput+0x44f/0xa70 [ 222.198058][T11815] task_work_run+0x1d9/0x270 [ 222.198075][T11815] ? __pfx_task_work_run+0x10/0x10 [ 222.198091][T11815] ? task_work_add+0x395/0x440 [ 222.198107][T11815] ? __pfx_task_work_add+0x10/0x10 [ 222.198123][T11815] get_signal+0x11eb/0x1330 [ 222.198148][T11815] arch_do_signal_or_restart+0xbc/0x830 [ 222.198167][T11815] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 222.198192][T11815] exit_to_user_mode_loop+0x86/0x480 [ 222.198209][T11815] ? rcu_is_watching+0x15/0xb0 [ 222.198230][T11815] do_syscall_64+0x32d/0xf80 [ 222.198247][T11815] ? trace_irq_disable+0x3b/0x150 [ 222.198269][T11815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.198284][T11815] ? clear_bhb_loop+0x40/0x90 [ 222.198301][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.198316][T11815] RIP: 0033:0x7fbf0b39c799 [ 222.198334][T11815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.198348][T11815] RSP: 002b:00007fbf0c303028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 222.198372][T11815] RAX: fffffffffffffe00 RBX: 00007fbf0b615fa0 RCX: 00007fbf0b39c799 [ 222.198384][T11815] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000b [ 222.198394][T11815] RBP: 00007fbf0b432c99 R08: 0000000000000000 R09: 0000000000000000 [ 222.198404][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.198413][T11815] R13: 00007fbf0b616038 R14: 00007fbf0b615fa0 R15: 00007ffc8e44c7d8 [ 222.198432][T11815] [ 222.198438][T11815] [ 222.453447][T11815] Allocated by task 5489: [ 222.457772][T11815] kasan_save_track+0x3e/0x80 [ 222.462469][T11815] __kasan_kmalloc+0x93/0xb0 [ 222.467055][T11815] __kvmalloc_node_noprof+0x528/0x8a0 [ 222.472418][T11815] alloc_netdev_mqs+0xa6/0x11b0 [ 222.477261][T11815] bpq_device_event+0x413/0x6a0 [ 222.482117][T11815] notifier_call_chain+0x1be/0x400 [ 222.487240][T11815] __dev_notify_flags+0x1a9/0x310 [ 222.492278][T11815] netif_change_flags+0xe8/0x1a0 [ 222.497213][T11815] dev_change_flags+0x130/0x260 [ 222.502202][T11815] devinet_ioctl+0x9f2/0x1b30 [ 222.506897][T11815] inet_ioctl+0x42a/0x560 [ 222.511220][T11815] sock_do_ioctl+0x101/0x320 [ 222.515809][T11815] sock_ioctl+0x5c6/0x7f0 [ 222.520131][T11815] __se_sys_ioctl+0xfc/0x170 [ 222.524710][T11815] do_syscall_64+0x14d/0xf80 [ 222.529296][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.535227][T11815] [ 222.537544][T11815] Freed by task 11825: [ 222.541601][T11815] kasan_save_track+0x3e/0x80 [ 222.546274][T11815] kasan_save_free_info+0x46/0x50 [ 222.551303][T11815] __kasan_slab_free+0x5c/0x80 [ 222.556057][T11815] kfree+0x1c1/0x630 [ 222.559936][T11815] device_release+0x9e/0x1d0 [ 222.564525][T11815] kobject_put+0x228/0x560 [ 222.568934][T11815] netdev_run_todo+0xc75/0xde0 [ 222.573689][T11815] rtnl_dellink+0x6a7/0x820 [ 222.578178][T11815] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 222.583103][T11815] netlink_rcv_skb+0x232/0x4b0 [ 222.587877][T11815] netlink_unicast+0x80f/0x9b0 [ 222.592640][T11815] netlink_sendmsg+0x813/0xb40 [ 222.597391][T11815] ____sys_sendmsg+0x972/0x9f0 [ 222.602144][T11815] ___sys_sendmsg+0x2a5/0x360 [ 222.606809][T11815] __x64_sys_sendmsg+0x1bd/0x2a0 [ 222.611735][T11815] do_syscall_64+0x14d/0xf80 [ 222.616316][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.622197][T11815] [ 222.624511][T11815] The buggy address belongs to the object at ffff888078bec000 [ 222.624511][T11815] which belongs to the cache kmalloc-cg-4k of size 4096 [ 222.638809][T11815] The buggy address is located 1096 bytes inside of [ 222.638809][T11815] freed 4096-byte region [ffff888078bec000, ffff888078bed000) [ 222.652764][T11815] [ 222.655078][T11815] The buggy address belongs to the physical page: [ 222.661491][T11815] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078bea000 pfn:0x78be8 [ 222.671557][T11815] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 222.680043][T11815] memcg:ffff88804951e581 [ 222.684268][T11815] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 222.692781][T11815] page_type: f5(slab) [ 222.696767][T11815] raw: 00fff00000000240 ffff88813fe00500 ffffea0000a7c810 ffffea0001512010 [ 222.705345][T11815] raw: ffff888078bea000 0000000800040003 00000000f5000000 ffff88804951e581 [ 222.713917][T11815] head: 00fff00000000240 ffff88813fe00500 ffffea0000a7c810 ffffea0001512010 [ 222.722575][T11815] head: ffff888078bea000 0000000800040003 00000000f5000000 ffff88804951e581 [ 222.731243][T11815] head: 00fff00000000003 ffffea0001e2fa01 00000000ffffffff 00000000ffffffff [ 222.739900][T11815] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 222.748558][T11815] page dumped because: kasan: bad access detected [ 222.755062][T11815] page_owner tracks the page as allocated [ 222.760761][T11815] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5203, tgid 5203 (udevd), ts 28730228497, free_ts 21184484439 [ 222.781508][T11815] post_alloc_hook+0x231/0x280 [ 222.786272][T11815] get_page_from_freelist+0x24dc/0x2580 [ 222.791817][T11815] __alloc_frozen_pages_noprof+0x18d/0x380 [ 222.797618][T11815] allocate_slab+0x77/0x660 [ 222.802115][T11815] refill_objects+0x331/0x3c0 [ 222.806783][T11815] __pcs_replace_empty_main+0x2e6/0x730 [ 222.812328][T11815] __kvmalloc_node_noprof+0x657/0x8a0 [ 222.817716][T11815] seq_read_iter+0x202/0xe10 [ 222.822299][T11815] vfs_read+0x582/0xa70 [ 222.826443][T11815] ksys_read+0x150/0x270 [ 222.830673][T11815] do_syscall_64+0x14d/0xf80 [ 222.835258][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.841138][T11815] page last free pid 1 tgid 1 stack trace: [ 222.846925][T11815] __free_frozen_pages+0xc2b/0xdb0 [ 222.852055][T11815] free_contig_range+0xbb/0x170 [ 222.856899][T11815] destroy_args+0x4e5/0x570 [ 222.861626][T11815] debug_vm_pgtable+0x3f8/0x410 [ 222.866584][T11815] do_one_initcall+0x250/0x8d0 [ 222.871357][T11815] do_initcall_level+0x104/0x190 [ 222.876296][T11815] do_initcalls+0x59/0xa0 [ 222.880619][T11815] kernel_init_freeable+0x2a6/0x3e0 [ 222.885812][T11815] kernel_init+0x1d/0x1d0 [ 222.890142][T11815] ret_from_fork+0x51e/0xb90 [ 222.894726][T11815] ret_from_fork_asm+0x1a/0x30 [ 222.899511][T11815] [ 222.901822][T11815] Memory state around the buggy address: [ 222.907475][T11815] ffff888078bec300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.915541][T11815] ffff888078bec380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.923640][T11815] >ffff888078bec400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.931696][T11815] ^ [ 222.938100][T11815] ffff888078bec480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.946153][T11815] ffff888078bec500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.954211][T11815] ================================================================== [ 222.962962][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 222.971047][ C0] lec:lec_tx_timeout: lec0 [ 222.976560][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 223.006653][T11815] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 223.013979][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.1.1765 Not tainted syzkaller #0 PREEMPT(full) [ 223.023360][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 223.033419][T11815] Call Trace: [ 223.036743][T11815] [ 223.039671][T11815] vpanic+0x56c/0xa60 [ 223.043658][T11815] ? __pfx_vpanic+0x10/0x10 [ 223.048166][T11815] ? __pfx___schedule+0x10/0x10 [ 223.053031][T11815] panic+0xc5/0xd0 [ 223.056769][T11815] ? __pfx_panic+0x10/0x10 [ 223.061189][T11815] ? preempt_schedule_common+0x82/0xd0 [ 223.066657][T11815] ? ax25_send_frame+0x3ea/0x9f0 [ 223.071602][T11815] check_panic_on_warn+0x89/0xb0 [ 223.076537][T11815] ? ax25_send_frame+0x3ea/0x9f0 [ 223.081473][T11815] end_report+0x73/0x180 [ 223.085714][T11815] ? ax25_send_frame+0x3ea/0x9f0 [ 223.090649][T11815] kasan_report+0x128/0x150 [ 223.095146][T11815] ? ax25_send_frame+0x3ea/0x9f0 [ 223.100080][T11815] ax25_send_frame+0x3ea/0x9f0 [ 223.104862][T11815] ? ax25_send_frame+0x326/0x9f0 [ 223.109795][T11815] ? skb_put+0x11b/0x210 [ 223.114031][T11815] rose_transmit_link+0x729/0xac0 [ 223.119049][T11815] rose_write_internal+0x1256/0x1b60 [ 223.124328][T11815] ? lockdep_hardirqs_on+0x7a/0x110 [ 223.129523][T11815] ? __pfx_rose_write_internal+0x10/0x10 [ 223.135163][T11815] ? timer_delete+0x245/0x340 [ 223.139834][T11815] rose_release+0x25b/0x510 [ 223.144343][T11815] sock_close+0xc3/0x240 [ 223.148586][T11815] ? __pfx_sock_close+0x10/0x10 [ 223.153435][T11815] __fput+0x44f/0xa70 [ 223.157426][T11815] task_work_run+0x1d9/0x270 [ 223.162009][T11815] ? __pfx_task_work_run+0x10/0x10 [ 223.167108][T11815] ? task_work_add+0x395/0x440 [ 223.171860][T11815] ? __pfx_task_work_add+0x10/0x10 [ 223.176961][T11815] get_signal+0x11eb/0x1330 [ 223.181466][T11815] arch_do_signal_or_restart+0xbc/0x830 [ 223.187026][T11815] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 223.193178][T11815] exit_to_user_mode_loop+0x86/0x480 [ 223.198461][T11815] ? rcu_is_watching+0x15/0xb0 [ 223.203252][T11815] do_syscall_64+0x32d/0xf80 [ 223.207836][T11815] ? trace_irq_disable+0x3b/0x150 [ 223.212855][T11815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.218910][T11815] ? clear_bhb_loop+0x40/0x90 [ 223.223589][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.229489][T11815] RIP: 0033:0x7fbf0b39c799 [ 223.233929][T11815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.255437][T11815] RSP: 002b:00007fbf0c303028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 223.263847][T11815] RAX: fffffffffffffe00 RBX: 00007fbf0b615fa0 RCX: 00007fbf0b39c799 [ 223.271809][T11815] RDX: 000000000000001c RSI: 0000200000000240 RDI: 000000000000000b [ 223.279773][T11815] RBP: 00007fbf0b432c99 R08: 0000000000000000 R09: 0000000000000000 [ 223.287739][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.295698][T11815] R13: 00007fbf0b616038 R14: 00007fbf0b615fa0 R15: 00007ffc8e44c7d8 [ 223.303666][T11815] [ 223.306943][T11815] Kernel Offset: disabled [ 223.311253][T11815] Rebooting in 86400 seconds..