last executing test programs: 12.386410446s ago: executing program 0 (id=2993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@deltaction={0x0, 0x31, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x0, 0x1, [{0x0, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0x0, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'pedit\x00'}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xff}}]}, @TCA_ACT_TAB={0x0, 0x1, [{0x0, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'connmark\x00'}}, {0x0, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'sample\x00'}}, {0x0, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'bpf\x00'}}, {0x0, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x0, 0x1, 'nat\x00'}}, {0x0, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x6}}, {0x0, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0xfffffff7}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r3, 0xb5d6) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$xdp(r10, &(0x7f00000003c0)={0x2c, 0x0, r12, 0x3, r10}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x150, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x5, 0x4}, {0x0, 0xffff}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x11c, 0x2, [@TCA_MATCHALL_ACT={0x5c}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) 9.96976185s ago: executing program 0 (id=3012): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYRESDEC], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xb9e8, 0x401, 0x9}) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x4, {0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}}}, 0x3a) 9.836372348s ago: executing program 0 (id=3013): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="a0"], 0x9) (rerun: 32) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40200000, 0x0, 0xff, 0x9}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0x96, 0x6}, 0x20) (async) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) socket(0x1e, 0x2, 0x0) (async, rerun: 64) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x78, 0x0, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x58, 0x6, "2f76f6e913244d4250eb32084ed50d81eb823d8763541843fcba8d5d08d1c3cc59407657bbaeb86979943f10fc380c44114a9595b8a2c9d685007cc903cc76e3676c5a5bead288da4f7212e12eb44feee2bae750"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000810}, 0x24044010) (async, rerun: 32) r4 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @loopback={0xffffffffffffff8d}, 0x16}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x40) 9.639153366s ago: executing program 0 (id=3015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x48}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xa, 0x1, 'quota\x00'}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8001}]}, 0x2c}}, 0x0) 9.586167119s ago: executing program 0 (id=3017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x6, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x80, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0x8, 0x80000001, 0x8, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x7fff, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff40, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0x200, 0x3, 0x2, 0x6, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0xb, 0x0, 0x743, 0x5, 0x3, 0x0, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x6, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x1, 0x2302, 0x9, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x4, 0x10001, 0x512d, 0x1, 0x5, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e5, 0x48, 0x9, 0x7, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x1000000a, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x2, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0xc59, 0x6e8, 0x8, 0x101, 0x80000000, 0x6, 0xc, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x991}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf13}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x300000c1}, 0x40010) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20048480) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008005}, 0xc616c4994afd16c7) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 9.475057573s ago: executing program 0 (id=3020): r0 = socket$kcm(0x29, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, 0x0, &(0x7f0000000480)) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x6, 0x3) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_SOPASS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000004c0)={'batadv_slave_1\x00', @remote}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x4c, 0x0, 0x6e4fe6543129113e, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xe}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44040}, 0x40060) 6.847620406s ago: executing program 3 (id=3044): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000006c80), &(0x7f0000006cc0)=0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x40}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)=ANY=[@ANYBLOB="020900"/16], 0x10}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x1, {0xa, 0x4e21, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000440)={@val={0x70}, @void, @eth={@local, @remote, @void, {@generic={0x4305}}}}, 0x12) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_msfilter(r11, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000020a010101cfaaac2b83b662b0d8a064b516cc993f08e500000000000000"], 0x18) r12 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r12, 0x0, 0xcf, 0x0, 0x0) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x20, r13, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a40)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x3a8, 0x3a8, 0xffffffff, 0x2c0, 0x228, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 5.907687719s ago: executing program 4 (id=3045): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000000)={"6d1d1f9fcc4166dcfcbc4c39994bceb0", 0x0, 0x0, {0x5, 0x1bd}, {0x5, 0x95}, 0xfffffffffffffff7, [0x8, 0x6800000000000000, 0x6, 0x7, 0x7, 0x66, 0x1, 0x1, 0x6, 0xee7, 0x7ff, 0x35a8, 0x8b, 0x6, 0x32, 0xffffffffffffffff]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000100)={0x0, "21560cdded1b1728beb36ebaba62b5a3"}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000001100)={{r0}, r1, 0x8, @unused=[0x3, 0x33ef, 0x8001, 0x3], @devid=r2}) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000002100)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000002140)={r3, 0xb73d, 0x81, 0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000021c0), r4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r5, &(0x7f0000002280)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x14, r6, 0x100, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4014010}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), r4) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000002400)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000023c0)={&(0x7f0000002340)={0x78, r7, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x90) sendmmsg$sock(r4, &(0x7f0000004880)=[{{&(0x7f0000002440)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000024c0)="83b93722afbd978ec7268294a1716e7df7ee8da9d9a6add40d1b52ea124033012ecabaa95c35e7bdc9b4c1c8432a91e6fc4aaf0c30a33b8c0587ec18b9aedbbeb6f0fc028f6a9c62cf7b250b4fd32fef77fe1e9d8b051a1e9b8358be58b3bb3c37404c3d6b138d043a4e26edba0401cafd2113d936f4b39c384bad7d86226d33c3d9f0d10c7616a23f2d96a392f8642780dc1570eddf8f5cca30e94f09fe96c21fbf643330423809e56db6b9023fda1376276a", 0xb3}, {&(0x7f0000002580)="1725d1a8ba84de4c60a176c05bf1c59d3a9ceb88dc61730d2c283561182f5c972f2b06809301f0f8e8d154c86cb1", 0x2e}, {&(0x7f00000025c0)="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", 0x1000}], 0x3, &(0x7f0000003600)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x60}}, {{&(0x7f0000003680)=@phonet={0x23, 0x92, 0x7}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003700)="960d80fb769b0ce86a69751fbeb5e773b010bd08f8c68d30f7d68dfe7929de6b8039fb692b4783416a3c12f0e102f2c04fe6043d8cf1885affe6fa867b690c239d7fd694b574a5aae6b9b5e02dc54ddbd06cb25306f5a39d687d6869c7b0f92ce89a7743f622a6a9a02121ecf39f5121f03caf4575c3bf8467fb1c09c486c670afa4e145fb2ecbab265522147bd5f9e8d5b713bf75b4fa24988d3ee976f25ae1b146fc8a8da3133908c3e49f3f9e0ecc2f190faf4cb74d16a0b508cbed459f6e02f55363dfc4bfaf58fc746ce9b1db677cdeb5f8ec12e1d5", 0xd8}], 0x1, &(0x7f0000003840)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x30}}, {{&(0x7f0000003880)=@in6={0xa, 0x4e21, 0x0, @empty, 0x9}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003900)="af", 0x1}, {&(0x7f0000003940)="57008d0a40e7aeb90ee1a519eb6aa5d2e687def2f9115ab47873eb09f5521197117ad2c4d595e0d49d82e4b49078a189045b561375115ffd88918da9db113dddd13f6d34ed8a3872e86d644bae5c88e3d9268cde855f73c4b959099dba218e60c0c124c69bc1203c3c3070fcd23a0bf0171a12447bf8e7c63813224d738b432c6d92b5f4873709b94ab8db8623c825bf991b99bf37", 0x95}, {&(0x7f0000003a00)="e67ec140927cfdd9020d70021e1bac40ceb7ca6104d78f8e2824163cba99b0982fcf6728e39f449fb0f4b1e8656ef5ba088b096160bdd4c150e4cda654aa441310259167cde4f00bd894db61e62100738d7f7a78034423147bbd3a51c817593ee233", 0x62}, {&(0x7f0000003a80)="438a22d0040b2e127aaf6d85055329bfb4120f5f048c6464924754ead688d209afaa58ef9408d5e12b5a2bb307366f96da107c912fcc2786a6a9ea3d558782a8e07b1cd41b6125104c6aa15c24b5768a83d884f040d5405cc1", 0x59}, {&(0x7f0000003b00)="3e27722587f39563d59c27ea6ecadc39d818bf852ed29e1ec9b9ea54cbb9f7ca3baa99da3dba44eb814559c8bc6223d828f4253f33da2931aa1ea67de236f0b4d13444924665a4952ed00e64e1dcf317c6ab878d6d4c6a8c561465a6bc832aa8387e7b5a30c029066c1b39e36439d1ba1bc2077a0490814ef66975a7ead5f1d712509027d16c", 0x86}], 0x5, &(0x7f0000003c40)=[@txtime={{0x18, 0x1, 0x3d, 0xd2e9}}], 0x18}}, {{&(0x7f0000003c80)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003d00)="76f66dd3e4f56a10054add65021f1d2381738ebc2672a4327f51c27c291a657550f399c82db60863c2e4512314ea43c956c03aae712c890ee7811ab6b7c794c3dde865ade30f8e5627ca5b667eaae9239dd4dc3ddc873ffd1c059f634cdfc92d7f2565c2ff182f847e4a16270a7a8bfe2c5812dcca59d91d41c796384422425024e20d1197c6e318f18d8f7f35a05679aeef3a117bc7bf9f4294bb6b28baebb566d2d0367c11ab689edf0c31b6551e5e18", 0xb1}], 0x1, &(0x7f0000003e00)=[@txtime={{0x18, 0x1, 0x3d, 0x80000000800000}}, @mark={{0x14, 0x1, 0x24, 0xfff}}, @mark={{0x14, 0x1, 0x24, 0x6edfa0d9}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x60}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000003e80)="18b09631ca2a72e4dd683592bd31fd1304eaf1acb1a420a9b29973584c9105943d5518f2ac62b718f76533e35e8fbdb58f9a28ab084a88457bd7fb4462731e8e27420576", 0x44}, {&(0x7f0000003f00)="ed8baa562d01c62398e368b73171e323f17fb254579cef07ed316939fb6827fb695abe8e1f9f7d041de949673cb72a54143e56eca9d0f78b4b90799373c0bd8c1d134b2e20c8ff5744084b181912", 0x4e}, {&(0x7f0000003f80)="81a8e419d50f783410e3afa86f5f656287ff61c28722496e2517a9c29370d649879478e822135813e5181336291fddac0131981a8d989bda0167a508d5c9170f6bdd5c530e0001eb3ede3bcdaed3dc5d858b426a94b08c146849f6c437b4de6e65e0e9957bbaedd5e49c707be1bec2fc04b20f8f6fa90c598972795393ed029bd902a8696ce762a832aa68d4e2a158f1ddf72cbabef12733644bbaf9cea07a7dc47ff3a12fc81c13c9f540e42f32f3c1c4f6312b058c798aa9602569b0e7556aaf92245abd83151902580fa10763bb", 0xcf}, {&(0x7f0000004080)="d925c415929ecd2ddc3acd025e200b", 0xf}, {&(0x7f00000040c0)="d9469c9c2779a572f645dccb0aac29d09e3a0891966dde9592dee00e90a10854936c31d796cac74134782fb6c21a7112d0dd723b186206c392b328bc23c2add3ee103031", 0x44}], 0x5, &(0x7f00000041c0)=[@mark={{0x14, 0x1, 0x24, 0xc}}, @timestamping={{0x14}}], 0x30}}, {{&(0x7f0000004200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x2, 0x3, {0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}}}, 0x80, &(0x7f0000004280), 0x0, &(0x7f00000042c0)=[@mark={{0x14, 0x1, 0x24, 0xaa880}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}, @txtime={{0x18}}, @timestamping={{0x14, 0x1, 0x25, 0xffff7fff}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x90}}, {{&(0x7f0000004380)=@ethernet={0x6}, 0x80, &(0x7f0000004480)=[{&(0x7f0000004400)="40bab9929f64ed9be22a280f6f3cf3cd2f781c07dcef8c0cf516ab964cddd0923b3f92ef9323cc33d3e525e28bbb971904f404c146270d6eceb56826b6caa9d0f3e51f889d841b5585", 0x49}], 0x1, &(0x7f00000044c0)=[@txtime={{0x18, 0x1, 0x3d, 0xc3af}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0xa8}}, {{&(0x7f0000004580)=@ieee802154={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004600)="4c50f22e1a7a567c858bdf3d730a1e96125383fcf9f971b440506d3056c6affe3874f9119d02f8baddaa4d6f784019ea756be4729662e5fc76a4ad9d5a07175aef2e0ddbf2e686c116acbcc48b98c95a1494b472b8f776aa45c4f9e439a384595123f20949b6944db46b268d0d46c9fd48267c038de0c20c8bf2065e85fc502b2cf770122592367ef1477ed3527bcbc0a3c95c12d86aa0f3fdc59fec91be04a61b3f59375904b59325dc96bea5357b4e92c9ee63c9c36cc8e7639e19eb65fa702617ddfe0e1baedfee291701dfd578e0d446f0aac522773454dfb040504dd431f6", 0xe1}], 0x1}}, {{&(0x7f0000004740)=@in6={0xa, 0x4e24, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x80, &(0x7f0000004840)=[{&(0x7f00000047c0)="947698d1818c2b7149ae28459af6bb93ed8e55941fc873cb67aa471f33ef354d5c1592", 0x23}, {&(0x7f0000004800)="471f307cc0f7ce", 0x7}], 0x2}}], 0x9, 0x2081) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000004ac0)={@empty}, 0x14) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000004b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000004c40)={&(0x7f0000004b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004c00)={&(0x7f0000004b80)={0x4c, r7, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x5}, 0x8000) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r5, &(0x7f0000004d80)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x60, r6, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xcc}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10}]}, 0x60}, 0x1, 0x0, 0x0, 0x8010}, 0x24008000) sendmsg$NL80211_CMD_SET_PMKSA(r4, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000004e00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f0000004f00)={&(0x7f0000004dc0)={0x10, 0x0, 0x0, 0x8caad7c998ce4f60}, 0xc, &(0x7f0000004ec0)={&(0x7f0000004e40)={0x5c, r7, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x20}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x27}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x16}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x10}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x850) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000004f40)={0xfffffffffffffff9, 0x7, 0x1, 0x4}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000005040)={&(0x7f0000004f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000005000)={&(0x7f0000004fc0)={0x38, r7, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x240080d5}, 0x24000090) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r4, &(0x7f0000005140)={&(0x7f0000005080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005100)={&(0x7f00000050c0)={0x1c, r7, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20041804) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000005280)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005240)={&(0x7f00000051c0)={0x4c, 0x1407, 0x910, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000005300), r5) r12 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_NOOP(r10, &(0x7f0000005400)={&(0x7f00000052c0)={0x10, 0x0, 0x0, 0x8004}, 0xc, &(0x7f00000053c0)={&(0x7f0000005340)={0x78, r11, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @loopback}}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r12}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'pimreg\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7ff}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r13, &(0x7f0000006700)={&(0x7f0000005440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000066c0)={&(0x7f0000005480)={0x120c, 0x15, 0x800, 0x70bd2b, 0x25dfdbfe, {0x1d, 0x4d}, [@INET_DIAG_REQ_BYTECODE={0x56, 0x1, "a64703a844918b452970dd81b7b78a78c19328c1bfdb704688094ff633b48b19b9ade1daa3c5b252f822864978cc11ec3d553e5dd2fef26479c40674ce4dbe1aab33a9c7ba41a21f63355d343750f43bd9f2"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "d5dbfb83"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "a37234d8ba3b1e71beee69d3d49edad8789bec9c3f184e017ba104f93564066088fc924cc167b9badc94c779da"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "ba1cc4e993eebfbf2aefb77834133ea6b29e567500f7d037f873cc89b9e4c860bde0a0d0efcf6b8099984cb75da3e0be4027b6752b8a0d5013052a"}, @INET_DIAG_REQ_BYTECODE={0x71, 0x1, "247a695616e3c9856b76d630b036c86aedd4fe21dc6c54f62a37bbd44520f420c62eec427730fbe67359ccc777ba65e0b40d9364e20df985eb296b99af11aed0906505682e1ac2838623c63a27ed8093920bcf21f5fd91a3d01e6347deaf49bb3fef031e95bc8fc85f42c3bc54"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "c6c5eecaf4aa5dd42ec9624dd11ef80120c4d8a0241e92b5edfad2ef2cd8a3a1e1e424928d7ed979a580b68b8d5f029aeda9d388e2f066e91e2d8a7c6e4492617519afb827e9e18ed3e2a715d3ac1fed88ceaa9fc1a523544efc3cb4fc459e34cb114f55bda89ba4680c19967f856b0eb622034bc84c65f6dbbc2ebcd38aef2ddae0cb4fe49a6d536ca454882d0ba6377051da24a3073d60c4b5060a87aab794b82f1af0a3de"}]}, 0x120c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 5.834984666s ago: executing program 4 (id=3046): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000) socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x80}]}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@alu={0x4, 0x1, 0x0, 0x6, 0x4, 0x4, 0x4}, @call={0x85, 0x0, 0x0, 0xb7}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', r7, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0xb, 0x6, 0x1}, 0x10, 0x179a5, 0xffffffffffffffff, 0x4, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000000a00)=[{0x1, 0x5, 0xa, 0x8}, {0x5, 0x1, 0x5, 0x9}, {0x4, 0x2, 0x5, 0x3}, {0x0, 0x3, 0x4, 0x4}], 0x10, 0xab}, 0x94) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r15 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r15, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r14, 0x1, 0xd8, 0x6, @multicast}, 0x14) 5.642240407s ago: executing program 3 (id=3049): r0 = epoll_create(0x7) epoll_create1(0x0) r1 = epoll_create(0x4000207) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f00000000c0)={0x20000000}) r2 = epoll_create1(0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000001c0)={0x4}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x60000000}) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "081f20", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002180)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x6, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) connect$nfc_llcp(r5, &(0x7f0000000300)={0x27, r6, 0xffffffffffffffff, 0x1, 0x7, 0x6, "b11bbe52ffb11d8521982c03537871b6ce3dd3d8ffbbb136f4f70a7ffb9475007c83d07521a1d5f999d79be651055a21e177a4742cbd25ddbc499c244d2598", 0x18}, 0x60) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000080)={0x0, 0x40, 0x800}) setsockopt$sock_timeval(r4, 0x1, 0x2, &(0x7f0000000040), 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x1, 0x1, 0x7, 0x46000, r7, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x110, r8, 0xdc9d0000) 5.407079373s ago: executing program 2 (id=3051): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}}, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004400)=0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004440)={0x0, 0x0, 0x0}, &(0x7f0000004480)=0xc) (async, rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000044c0)={0x0}, &(0x7f0000004500)=0xc) (rerun: 64) r5 = getgid() (async) r6 = gettid() (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004ac0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@private0}}, &(0x7f0000004bc0)=0xe8) (async) r8 = getgid() (async) r9 = socket$inet_icmp(0x2, 0x2, 0x1) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0x9, 0x8, 0x50, @empty, @private1, 0x1, 0x1, 0xc, 0x3}}) setsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, 0x4e22, 0x2bd0, 0x4e20, 0x0, 0x2, 0x20, 0x80, 0x4, r10, 0xee00}, {0x80000000, 0x9, 0x5, 0x2, 0x6, 0x5, 0x2, 0x813b}, {0x7, 0x1, 0x8, 0x6}, 0x7, 0x6e6bbb, 0x2, 0x0, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x33}, 0x2, @in6=@loopback, 0x0, 0x1, 0x3, 0x2, 0x1, 0xdb, 0x8}}, 0xe8) (async) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r10, 0x38, 0x4, 0xff, 0x3, 0x48, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, 0x700, 0x8, 0xce, 0x58}}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f00000004c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f0000000500)={{{@in=@remote, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x7, 0x4e23, 0x0, 0xa, 0x80, 0xa0, 0x5c, r12, r13}, {0x4, 0x9, 0x1, 0x9, 0x1bf, 0x2, 0x3, 0x5}, {0xffff, 0x3, 0x6, 0x71ef}, 0x8, 0x6e6bb1, 0x2, 0x1, 0x2}, {{@in6=@empty, 0x4d6, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xd961, 0xffff, 0x5}}, 0xe8) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r15 = getgid() (rerun: 64) ioctl$TUNSETGROUP(r14, 0x400454ce, r15) r16 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005040)=[{{&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000940)="ff330f86df259dbf48226f661cad98dde9a701d1eb265320b9802e89353fd1f3dc75ff83835b42c81cda6c3c182347842ba8d069b0f5a62ea49f32a790905f7901550571e39874cdbbad6e83c2495795f9a7c409074d43c55248ccd72319598447ff2dbbc0f00431b7fc2f2d7d80a208bbbd4183d66c4f111623dbe01b2ffc55d3b7f0d1e23b427fe0e912286a1a", 0x8e}, {&(0x7f0000000a00)="a561966e0a93ed9e800565d2858a9cf3e8d9d16f5c1edb278e83f3677182ad033624d1897871ac5096dffe3ec3c79aad4739f5bb5e40c0cb5e52feb9d056f13a3fda26bbbdc0bbc02dd6cf17dd41a732831969f8897dac55ae5c0619c917033dddc2ce7299c29aabef46e81c67e9fe9a08674dea2a631b873ea96292c93c9f2a2ee0493b9e7f337ba4fdbc366c78e14ec8e59f51b8c10387b78480dc405799bb4208868eff47158a3074fe0d78861030bbfbd8d15560", 0xb6}, {&(0x7f0000000ac0)="17d879775fb35a3016dd5a55a714f2c2976a9e7fa6099e2fa4ba26adc75d173662503eaf50f1e91965a21654553ebcbc63197072c698777303195f0692f290e2ce8073a75cd34d3f", 0x48}], 0x3, &(0x7f0000000c00)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, 0xffffffffffffffff]}}], 0x40, 0x4008094}}, {{&(0x7f0000000c40)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002640)=[{&(0x7f0000001400)="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", 0x1000}, {&(0x7f0000002400)="2c68d8c710bb70ca00a1676a2589dc45df338387a56ef31c7fd0d9275e89bc5ac74adbcbaa840f9cf2fd2241d140cb6f4f8845da51cf494e2b78d1538380d54e81f891d8f7f5d90f48398243bc0d8018d5a930f96b8a14a9f850575a4816212a5e4b3d2cdb375503c7dd827ee9bc4d1ad7793cf976360ce5992f5bdeffab80c1e1facffae5", 0x85}, {&(0x7f00000024c0)="b22cb015d3d10bd8fdbc04bbcd490f485902b2e7440cb01ac62a2b824ef0bf6f716dd6317cf3d39fb2f0e2b0584d49723a4c16b3d0994af5867d13d4f7e83370f9c431bc15ac12e655db18d7e2c5ccfe3a72435513", 0x55}, {&(0x7f0000002540)="04040d7283b50614259eeb9548921123593367d9e6c4c779e4dd7792e7bf57eca78ccf6662cecd897e9e1ca709b47f8bd24c6a0a6791cb4d5f1bee0481634e650ed6e9be619f6fafc4f54df1874c8db10bb36e293a5c199c9c62ae1e0162bd3bbad362414e61584e978e6ce13580b4a32ecbaed8c9af", 0x76}, {&(0x7f00000025c0)="9dc5cb4fd89970e14dc0c4ab068ea61985a16826ed9a508fab4a689aa2d27c9020d5150a7de85e9110b16a8ad779b0d161f9d731b6da91b0bf7cfcbccdeabbcb7b02de3a0234405afa1555b663dd35abf22e728590c5b12d36356152b9d32cbf966caac5", 0x64}], 0x5, &(0x7f00000029c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4000}}, {{&(0x7f0000002a40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000002ac0)="9edd64d5ff98a7b2eb85d063b16fdaa991b8dddf765b56d9a2b27a63b006b7747c980677209e99f89ff50869b135d6b5712565894f78ee5bc59c948ca9591ca037ebd66dc5cc410e59dd6ec0fc7aba7efc1ad34bc719f594b1e8563b7c7d1b1c8db24af9ac44173f85b223cb0f1e5d0f06a18f03f548c49c88d86d8ef937f9dfc338baf8e3b0c14621e73b2492f9cb92d9", 0x91}, {&(0x7f0000002b80)="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", 0x1000}, {&(0x7f0000003b80)="8c1aa935204c71fda59f211a333c82d08609acccb863c50ad2e90fc47257513170cb52592dc59b71229efb5f2026b5bab992d3694273195b37f368e281da810b42b1155e6ee8c910be075f8846909f26008751606d", 0x55}, {&(0x7f0000003c00)="5e890ec94cbd2fdcd1549c537189ffab29b8f042f9d826c1f8d2aeebfaf1eb3580cb0308e35edbfd2905b7016fb702d6d0096fdd058c6964f0bcdb1ab07b1d124f91b4e8b38f2d12338c32cbbc18063b8db6f3af1c95f9bc7f16c2b767690b078bf184ca219005dcdc2a6836c39399148740b9581ad92448de7c5393748c8fcee9521f50d73a2b38bc39c4a245", 0x8d}, {&(0x7f0000003cc0)="a275263ce2325b88e08ebe4ea18a095372902492ff9374a281a77fd6454f27199979288c8700055d38dbac3e36e689ca6d53040bd102203b18733899", 0x3c}, {&(0x7f0000003d00)="455bc880d6e798bf59b9ec6cf0452df5e1f754316fb515b5dfab029e891aed195b342bb74152172d55522f7bd8f811343d50e65ee54a762700a82cb3f1b6a56344a4a05bbffdf8a354dd54114d59aaafa7425b81185fdc9831ee2b8395e4", 0x5e}], 0x6, &(0x7f0000004100)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}], 0x60, 0x80}}, {{&(0x7f0000004180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000043c0)=[{&(0x7f0000004200)="0860ba8b0fa1fd34f12db37e6325e38aa3ef7c8de05b7a6c8cb40e91b764d7b77d3aab593293b933c2f6da540f074c5fc8591fd36cb468316c15450ae6a0c4b5ef55f20e60f7838f683b18ca583ba130a9ec5ddfcd5c94f439d1fab5624a1187e446803e6a137e7d39e038558f269fa201120762f259b34e767e59bf213d0e67953507e8b2310a05549b76bd238b62e45efe1f350b1f0d8cd53a7f564445fbaa5a1baed58dd6915a8fe9992af5d21be3cefb06431d4b545a7f2c707769b458c0706741cf94e9fd49e5d906c37b14b614e9ccd5215d8d0edfbe53cb125e9114da79", 0xe1}, {&(0x7f0000004300)="5c09a16ad8343f35c271348e5b65305590ba763a60f917f4935ae9515ed587e2a8394446", 0x24}, {&(0x7f0000004340)="663d0d308cc6043391332af4397571486855da89f508d3ddbcb3fc75f46eb44d51edff770e23cc4db46c36a934e3710100e69121d4ca2e1b1778dc4bac5f4a7e89d937e7bb5c84bc252da8964dcadb27dd4ee9cd934c494ee8804fdf65dee8379de82887acd6becdc515f2575243cd1aae878fac4b", 0x75}], 0x3, &(0x7f0000004540)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, r5}}}], 0x40, 0x898}}, {{0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004580)="cbb8abace928732c4c77039fc7926cc1ec74bd84f7101c5774eb90a2f38333d5f6dd3cb601b098df7e11701c1685dea68fe374dca75afa794092558095d43cbd0318c36b98043067d1988b5ab2da19b8f72b8ac34dc09a64e556dab2f859e77d1ad4998909692f54b9869be64ef9a367dd9ca46b21cf07e87816f87d05de3b59e472966d02f1", 0x86}, {&(0x7f0000004640)="5f9d8e1240df347cbd4739763aeb0038675d8b2ccc2792ed227f3df15293581fc9ec1628152b4c511b8640894646094af7c3bb2515c4f7c677e513c432e525cd10ad17bc621f9e4508f8abc46d12191dfb9a58ac36dd5abf1cb5cd6919a60560f67ffc42dd3107b1fcf326ce4f8cce1c2ad4bb21f01310bfeadfe758420ee4a4811e4c2a359b30354d70a7186c081afa9cc8b2f6b37e60e43ab4a7e2b75f6611c159d8a3f85a40fd50d8785d1155d4a8a06d4d2b6d96c2cf2c75ee9b5da4a733c21b2a70fa4d9409a9d71bc0d15537ddc10f1d4cb2fdcb1e014a6b03a86bd0b14d0b", 0xe2}, {&(0x7f0000004740)="4524973bbb4e6ece2b9b21d8ffd422e663d9c10bff19093a61f1208bf9b0d5614f4dd9f3d59bc3a4f50d6f701165467dc2f8a89da4ac3051337a365a36b4ff6fc9085b74a6160a09f5305234d5bbab0a02ed362f9339becb7243aeca863009b4728671a29013d8c1da5793e33daf2c3d98ad4a2651e0f6e6bc52611ebce9776492d686d4bde36081a0f4400fc586d894", 0x90}, {&(0x7f0000004800)="6b3e03584279c07c62ca1aa54e38b83bbb96f97440a3e1728a7663b7f540fc132dc186a90024a029f9a6fdba922e07b9c6ba67a0c9565c44c074fd9dee5b0830ef6f4ace43adddbf16069c98c4babb236f6d34192fabba3314b2af053a81194cb556c14433fda1aee161d7b0b873ea40db85427b1f00dfbc42f0ff0e5e653b02d4f2bcff07aeaaac91f41659008cf3bd35e7a77404b3a183750b8e84111f53669c5e6da0f30bc7a5fbcac33f6035ba243260f16ccab518d0100c2e0ee6ece4ddf4feaf7f395dafb6ee1b23b5", 0xcc}, {&(0x7f0000004900)="8adb9ab509c5b3ea5aa7478b0e450e56f907109205b606bdb7317150f00c71156b9160c71be2e6f4babeaae8b69ef680f80612af36f3d9c0be2d25ed9c04e17a7153acc8499f4bc3b73f1eef2f6a46ff2f20ce5a2b5a6571f21fa232c6d79486050cd885f3bb1a419cc352533398ecee246e93248047cfb652c3bdb6dbcff60c0423153d9a5a12c90894d1278dacd47aa50356c57727134f3c5160dde5a16ab666bd5d6e2d4d4df83e7693578a2e185824f48368f9db8611a1161a93f7699e628bda4c4fce54dc564a1adf1f83efc35c203323830418abe7649f9f7c89d1a6", 0xdf}, {&(0x7f0000004a00)="b81e3ff52ae988b51816763d2b53bb6e9e639ad79b6665dc9c38bf530b842098426d7dabd57f87b6c33d0a192833eb89f5a3ef6ab6d47653571dec5e92e7", 0x3e}], 0x6, &(0x7f0000004c00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x14}}, {{&(0x7f0000004c40)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004cc0)="542fcecf705e84deac57ecce6cb00e7b6058adc9b7c66e73c2e251f4a5213b0fc6184a964b0425c27843276e80131a8f2cd2ae7776c66410353cfccb051a0986dab2b518d2259e7de32843066e52ee77f1e4744de9b936d21edf5b23324f38cad21513b8825271cf52fb251b937b329c6d50b778e33eabe7cc8e673db2afd3dffb164ea5b60aebf3dd52fffd523d97d9cae98cc8cfea276b2f41b01a839bb657a956dbab96258e0d59135541752b5581107bcc1c3e970ce668d33069a7a30c3a4a82e1db2f0cb1f984a93c43c642c26971f88cd618036d284d1201aa5bce662d2e5b1f809144658446f34e9c5616dada1b11b69e1f6a7e7cf3", 0xf9}, {&(0x7f0000004dc0)="3047a63da1d5ca7e6db2f8e9bfb152395d23c3692ac680bfdbe274ef700d1f07b152a4c8390b406367ae466779d59287e77ee2f93cec06e69a2c7f9716240c700eccd7d2cf4bc1dde1bcc59431049628266b8bfca57ce57bef66aba389bcae37c288948a3a4438a7e5d5a75a41b203dc6a01068b8e90ccef88785e76f26839c075a6453b303f784424b8b951eb2254de65c6ff0f315c", 0x96}, {&(0x7f0000004e80)="20c051b03ac02d4ba035d54f5d4117f7e7424c60b2aaaaf509ac586dc4ead31435871ae8a563249651829f9cf09b500c02f32d198c563582538b70daeafe6aadd534ad373dc77b", 0x47}, {&(0x7f0000004f00)="4b1e8a0e031344562997eb769b82f635cc09ca93dfd49cc8851d8961cc472b956290de4fc0b8479e6a05e9e9", 0x2c}], 0x4, &(0x7f0000004f80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r13, r15}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r16]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r1]}}], 0x90, 0x48}}], 0x6, 0x4000000) (async, rerun: 32) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100)=0x79, 0x4) (rerun: 32) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_cmd={0xa, 0x8, 0x57f959ea, 0x8, 0x6, 0x3, 0xc0, 0x4, 0xca, 0x2, 0x0, 0x4, 0x3, 0x3, 0x7, 0x8, [0x8, 0x4000034]}}) (async, rerun: 32) r17 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$inet6_int(r17, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "129203", 0x38, 0x3a, 0xff, @remote={0xfe, 0x7}, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0x7, '\x00', {0x0, 0x6, "cba86d", 0x7, 0x3a, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "a1f5621715758e7f"}}}}}}}, 0x0) 5.346540363s ago: executing program 3 (id=3052): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffe49, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x2}, {0x3, 0x9, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x4}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1}]}}]}, 0xe4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket(0x2a, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ppoll(&(0x7f0000001080)=[{}], 0x13, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) sendto$packet(r3, &(0x7f0000000d80)="f2435f0100088000008508004dae", 0xe, 0x45, &(0x7f0000000100)={0x11, 0xf5, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) 5.251774702s ago: executing program 2 (id=3053): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a090400000000000000000200000038000480340001800a0001006c696d6974000000240002800c000140000000000000000908000540000000000c00024000000005000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4085}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@gettfilter={0x74, 0x2e, 0xf0c, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0xc}, {0x2, 0x9}, {0xb, 0xd}}, [{0x8, 0xb, 0xfffffff7}, {0x8, 0xb, 0xd}, {0x8}, {0x8, 0xb, 0xe690}, {0x8, 0xb, 0x400}, {0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0xfff}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x1}]}, 0x74}}, 0x0) 5.051384695s ago: executing program 1 (id=3054): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="020d0000050000000000000013be0000587b17003220000002004e20ac1414150000000000000000"], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) pipe(&(0x7f0000000200)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000000000000000000001000085000000000000000001"], 0x0, 0x42}, 0x28) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffc}, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000001b40)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16, @ANYRES8=r3, @ANYRES32=r6, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) close(0x3) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r9, 0x0, 0x0) r10 = socket$inet(0x2, 0xa, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000c40)=@nat={'nat\x00', 0x19, 0x3, 0x462, [0x2000000007c0, 0x0, 0x0, 0x200000000b1c, 0x200000000bf2], 0x0, &(0x7f0000000180), &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff02000000000000000400000084d8776c616e300000000000000000000000766c616e300000000000000000000000626f6e645f736c6176655f300000000073797a6b616c6c657231000000000000737082e970be00ff000000ff0000000000000000ff0000ffee0000005e0100009601000069707673000000000000000000000000000000000000000000000000000000002800000000000000ffffffff000000000000000000000000ffffffff000000ffffffff00ffffffff4e2211024e200102766c616e0000000000000000000000000000000000000000000000000000000008000000000000000300000000080100736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaae44ba66093f7212ff381340000feffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff00000000090000001400000000f670696d3672656700000000000000000076657468315f766972745f77696669007665746831000000000000000000000076657468300000000000000000000000ffffffffffff000000000000bbbbbbbbbbbb00ffff000000ee0000005e01000096010000636f6e6e6279746573000000000000000b0000000000000000000000000000001800000000000000000000000000000006000000000000000202000000000000737461746973746963000000000000000000000000000000000000000000000018000000000000000000010003000000060000000500000004000000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000fdffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb000010000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000fcffffff000000000000000000001a000000000000000000000000000000000000000000000000000000000002000000ffffffff010000000500000000000000886468737230000000000000000000000000766c616e31000000000000000000000067656e6576653100000000000000000076657468305f6d616376746170000000aaaaaaaaaa1bffff00ffff000180c2000003ffff000000ff6e0000006e000000a6000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb0000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff00000000"]}, 0x4e4) 5.039054704s ago: executing program 2 (id=3055): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) socketpair(0x5, 0x4, 0x6, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x2000c840}, 0x4000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000280"], 0x34}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r3], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.27019552s ago: executing program 3 (id=3056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) (async) recvmmsg(r1, &(0x7f0000001ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001a00010000000000000000001c000000000000000000000408000100ff0001"], 0x24}}, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.159284178s ago: executing program 4 (id=3057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x6, &(0x7f0000000140)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x48f, 0x0, 0x0, 0x0, 0x4}, @generic={0x8, 0x5, 0x2, 0x2, 0x200}, @ldst={0x0, 0x0, 0x1, 0x4, 0x1, 0x100, 0x1}, @alu={0x7, 0x0, 0x1, 0x3, 0x0, 0xc, 0xfffffffffffffffc}], &(0x7f0000000180)='GPL\x00', 0x6, 0xbc, &(0x7f00000001c0)=""/188, 0x41000, 0x3e, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xc, 0xb, 0x48}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000340)=[{0x0, 0x3, 0x2, 0x4}, {0x3, 0x4, 0x6, 0x3}, {0x5, 0x3, 0x1}, {0x1, 0x4, 0x6, 0x8}, {0x5, 0x3, 0x2, 0x2}, {0x5, 0x1, 0xf, 0x8}, {0x4, 0x2, 0x5, 0x6}, {0x0, 0x2, 0x7, 0x8}, {0x1, 0x2, 0x1}], 0x10, 0xcc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 3.15879931s ago: executing program 2 (id=3058): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007100)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002840)={0xa, 0x4e24, 0x4, @remote, 0x80000000}, 0x1c, &(0x7f0000002b00)=[{0x0}, {0x0}], 0x2, &(0x7f0000002b40)=[@tclass={{0x14, 0x29, 0x43, 0xab}}], 0x18}}, {{&(0x7f0000002b80)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c, &(0x7f0000002d00)}}, {{0x0, 0x0, &(0x7f0000004780)}}], 0x4, 0x20080058) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) shutdown(r0, 0x1) (async) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000007100)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfefffffe}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}, {{&(0x7f0000002840)={0xa, 0x4e24, 0x4, @remote, 0x80000000}, 0x1c, &(0x7f0000002b00)=[{0x0}, {0x0}], 0x2, &(0x7f0000002b40)=[@tclass={{0x14, 0x29, 0x43, 0xab}}], 0x18}}, {{&(0x7f0000002b80)={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0x1c, &(0x7f0000002d00)}}, {{0x0, 0x0, &(0x7f0000004780)}}], 0x4, 0x20080058) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x13, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x66}]}, &(0x7f0000000240)='GPL\x00', 0x4}, 0x90) (async) 3.145519647s ago: executing program 1 (id=3059): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.050404618s ago: executing program 4 (id=3060): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) sendto(r2, 0x0, 0x0, 0x80, &(0x7f0000001080)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1cf9e4bf7d32792c73000800013100fe0000000000000000000000000097bb1f48652caecd880a2bc4580dcec9a2ce67ea4014b9094ed2538aa40389cf327ddcb03f"], 0x1c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0xc810) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x10c, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_csum={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x6}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000000a0900004001000000000000220000ed0000ffff0000000000000000000000005000ffff088a8b4268ffa9693dfed4fce8e5dbdf26660f29b2e6d6f76bee14271973112275d2b5c616a117135c4c65bf787a8d664fd4feef22134815607c7ff49fbdd0a8005f611122013a789783cdc6984d74f1f2dd24a1f6f86a222b2b7ed99abce014425f8c6c36b84347f8ee71fec3325e92f74002720e92a16857ae2b8836c8dc78349332e73e6e3784b116d063f739710e716716c819165517c5ca70c96217b914fceedcf281596f7c802af4c0d63e7907dc246afba1775dbf521967e5f75149f6ab446f451042bd052bd4a18306e659b5bb84444144dfbd84eb"], 0x4c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0xc0) r7 = socket(0x23, 0x3, 0x38) setsockopt$MRT6_DEL_MFC(r7, 0x29, 0xcd, 0x0, 0x5c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000680)={@mcast2, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x6, 0x0, 0x100, 0x6, 0x800000}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@private0, @private2, @private0, 0x4, 0x6, 0x0, 0x100, 0x6, 0x110022}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x4, 0x2, 0x400, 0x6, 0x8, 0x6, 0xffffffff, 0xceb4, 0x0, 0xcdaf, 0x9, 0x9, 0xfffffffffffffff8, 0x8f, 0x7fff]}, &(0x7f0000000a40)=0x100) 3.003813377s ago: executing program 3 (id=3061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a0b04000000300004802c000180090001007866726d000000001c0002800500030000000000080001400000001608000240000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a000000000000000000"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYRES8], 0xc2) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1], 0xffdd) 2.957007092s ago: executing program 2 (id=3062): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x7, 0xa, 0x203, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f7879000014000280080001400000000208000340000000100900010073797a30000000000900020073797a32"], 0xa0}}, 0x40880) (async) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x7, 0xa, 0x203, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) (async) 2.906599522s ago: executing program 1 (id=3063): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) 2.759426591s ago: executing program 1 (id=3064): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xfffffffffffffff9, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x7}]}]}, 0xfc}}, 0x0) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x1, 0x2, 0x801}, 0x14}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000026c0)={0x2c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040080) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 2.687526918s ago: executing program 2 (id=3065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_macvtap\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x7800, 0x10, 0x2, 0x1, {{0x2a, 0x4, 0x2, 0x35, 0xa8, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @empty, {[@generic={0x83, 0xb, "53c98633b08213bd01"}, @timestamp_prespec={0x44, 0x14, 0x72, 0x3, 0x9, [{@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}}]}, @rr={0x7, 0x1b, 0x8d, [@local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2]}, @timestamp_prespec={0x44, 0x24, 0xac, 0x3, 0x5, [{@remote, 0x2}, {@multicast1, 0xa}, {@private=0xa010101, 0x3}, {@broadcast, 0x200}]}, @cipso={0x86, 0x1e, 0x3, [{0x0, 0x10, "35978e08074ddd786f1347a4e505"}, {0x6, 0x6, "500eb7f8"}, {0x2, 0x2}]}, @ra={0x94, 0x4, 0x1}, @generic={0x82, 0x12, "bd08d945e50d20c4016b9ac43d9b051b"}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x7, 0x10, 0x40, 0xd6bf, {{0x34, 0x4, 0x0, 0x9, 0xd0, 0x65, 0x0, 0xde, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x7, 0x2}]}, @timestamp_addr={0x44, 0x1c, 0x23, 0x1, 0x4, [{@multicast1, 0x2000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@private=0xa010102, 0x5}]}, @lsrr={0x83, 0x7, 0x32, [@multicast1]}, @cipso={0x86, 0x5a, 0x1, [{0x5, 0x10, "8332c6dd69995af4f77f32eeb209"}, {0x1, 0x12, "8406659163f7857d9bb1cddadcb4d30c"}, {0x5, 0xb, "6ee092efdc595529dd"}, {0x5, 0xe, "5b0c16b04c8023bd33b91311"}, {0x6, 0x9, "97bc106cebe27e"}, {0x6, 0x10, "b026876f264c1a922e0d9e1e865f"}]}, @timestamp_prespec={0x44, 0x34, 0x33, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@empty, 0x9}, {@loopback, 0x81}, {@remote, 0x8}, {@empty, 0x2}, {@multicast1, 0x10e}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000500)={'wg2\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002e00)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x8, 0x7, 0x7fffffff, 0x7, {{0x20, 0x4, 0x2, 0x5, 0x80, 0x64, 0x0, 0xf7, 0x29, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x81, 0x0, 0x0, [0x3, 0x0, 0x0]}, @timestamp_addr={0x44, 0x1c, 0x2b, 0x1, 0x1, [{@remote, 0x80000001}, {@local, 0x2}, {@local, 0x8}]}, @rr={0x7, 0xf, 0xa2, [@multicast2, @private=0xa010100, @private=0xa010101]}, @end, @timestamp={0x44, 0x24, 0x35, 0x0, 0x6, [0x1, 0x6, 0xffff6dd4, 0xfffffffe, 0x1, 0x48c, 0x4, 0x7]}]}}}}}) r13 = socket(0x11, 0x3, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r13, &(0x7f0000000180)={0x11, 0x0, r15}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000640)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000680)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6gre0\x00', 0x0, 0x4, 0x1, 0xa8, 0x5de, 0x4, @private2, @empty, 0x20, 0x40, 0x3, 0x1}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000780)={@mcast2, 0x0}, &(0x7f00000007c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'gretap0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x7800, 0x8000, 0x9, 0x8, {{0x1b, 0x4, 0x3, 0x8, 0x6c, 0x68, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@generic={0x0, 0xf, "c1d807831dd603169a591feb7e"}, @cipso={0x86, 0x16, 0x2, [{0x6, 0xa, "2190bec8eb75fca4"}, {0x7, 0x6, "07cb83da"}]}, @lsrr={0x83, 0x23, 0x9e, [@private=0xa010101, @rand_addr=0x64010102, @multicast1, @remote, @rand_addr=0x64010102, @private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp={0x44, 0xc, 0x3a, 0x0, 0xb, [0x4, 0x8001]}, @end]}}}}}) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r21, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r22], 0x68}}, 0x0) sendmsg$nl_route_sched(r20, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r22, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000b40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1f8, r4, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) 2.614005298s ago: executing program 4 (id=3066): syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa9aT\xd4\x0f%\xeb*<\xa4\x99\xda\r\x7fX_\xf1M\xac\xd3u\x7f\x15[\xeb\xc3\xd7\x1f\x99\xfe\"\x93\x86\xdc\x05\x7f\x90\x81L?\xe0TR\xd1\x97\xca\'\xfa\xaf{j\xe0Dc\xf8\xd6\x9bB\x88ua\\\xc2C\x18\xd0t\x14M!\x90\xf3\x88M\xb2\xd4\xc4\xbb\x90\xdf\x94p7\xe6\xc7F\xe5\xd3\xc9%\x7f\x82f\x17\xfb\xc8:\x9b\xed\xa3\r>\x12Q\xdc\x02\xdf\x10p\xdc]r\xbd2\a?K\xf1\xcf\xfd!\"\xf9\xd0\x9cm\x16\x90M\xb1Jl\xb8%\xab\xf9\xe3\xd7\xf8\x00Vp\xf5\x98\xde\xa9\xe5\x85\r\xa9r\x88|\x12g\xd3\xd2*\xe8\xccV\x8b)v\x196\xd5\x9c\xcb\xbd\xee\xaf\xf5\xec\a\x8d\xc1\x1d\xda\x1a\x86\x19\x03\xf2\xffS\x00'/207, 0x10100, &(0x7f0000000040)={@_ha_fsid={[0x5, 0x4]}, {0xd8a, 0x9, 0x7f, 0x5}}, 0x7fffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x84}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000100)=0x1fffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x3, @loopback, 0xf}, 0x1c) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x300, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, 0x0, 0x0) 2.369997171s ago: executing program 4 (id=3067): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711071000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x9, 'syz0\x00', @default, 0x1, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) 1.769286628s ago: executing program 1 (id=3068): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f00000001c0)="9f9553") 1.599004123s ago: executing program 1 (id=3069): syz_open_procfs$namespace(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_macvtap\x00', 0x2000}) bpf$MAP_CREATE(0xb00000000000014, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e338e8a43bdf220226ce3639cacbd1ec98daf578469f8f7091cb4ac25239d26e9942f51ec19e78a9408dcab3cbd81fda6"], 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x100, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) syz_emit_ethernet(0x34, &(0x7f00000000c0)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @empty}, {0x0, 0x88be, 0x12, 0x0, @opaque="6b8b836832cfd4d288a8"}}}}}, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @broadcast, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x40047452, &(0x7f00000000c0)={0x18, 0x0, {0x1, @empty, 'sit0\x00'}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @bpq0, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x3}], 0x1, 0x10002, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc81100fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 0s ago: executing program 3 (id=3070): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="b3670500002e2c259b12eb4c5ccaded200412d49e99547772f4d9d20f29fc00f203a696c57713f0b20e78cdcaf607c42e060ad8beb2c12f8e039e41734e511aae9bcc330071c8c17fb", 0x49}, {&(0x7f0000000040)="1c213523410a36d389d853cc420525f970c8cb8fd73181f0656075541086d9be7df0035aff3969096348eb1a9c0f3d114d42280e175ce1d4596adc92f86b40c4db6cf7d44d62", 0x46}], 0x2, 0x0, 0x3f}, 0x8890) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1b0000001d0001000000000004086aa42d"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x30, r2, 0x1, 0x0, 0x3, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r6, 0x1, 0x70bd27, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffff9, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x20) kernel console output (not intermixed with test programs): ving as an active interface with an up link [ 216.382933][ T9270] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 216.392063][ T9279] netlink: 'syz.2.932': attribute type 5 has an invalid length. [ 216.656875][ T9279] netlink: 'syz.2.932': attribute type 4 has an invalid length. [ 216.861930][ T9296] netlink: 'syz.1.936': attribute type 9 has an invalid length. [ 217.034832][ T9311] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 217.063158][ T9311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.145411][ T9316] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 217.242128][ T9320] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 217.242292][ T9314] can: request_module (can-proto-0) failed. [ 218.104174][ T9365] bridge0: port 3(syz_tun) entered disabled state [ 218.159756][ T9365] bridge0: port 3(syz_tun) entered blocking state [ 218.166384][ T9365] bridge0: port 3(syz_tun) entered forwarding state [ 218.239206][ T9365] bridge0: port 3(syz_tun) entered disabled state [ 218.562744][ T9385] syzkaller0: entered promiscuous mode [ 218.576820][ T9385] syzkaller0: entered allmulticast mode [ 218.698216][ T9388] can: request_module (can-proto-0) failed. [ 218.733616][ T9398] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 218.742156][ T9398] netlink: 'syz.1.965': attribute type 1 has an invalid length. [ 218.749964][ T9398] netlink: 'syz.1.965': attribute type 8 has an invalid length. [ 218.763219][ T9398] netlink: 'syz.1.965': attribute type 39 has an invalid length. [ 219.170323][ T9413] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 219.287221][ T9418] smc: removing net device team0 with user defined pnetid SYZ2 [ 219.320426][ T9418] team0 (unregistering): Port device team_slave_0 removed [ 219.348519][ T9418] team0 (unregistering): Port device team_slave_1 removed [ 219.546178][ T9430] __nla_validate_parse: 26 callbacks suppressed [ 219.546194][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.975'. [ 219.865103][ T9451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.980'. [ 220.373752][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 220.418210][ T9482] syzkaller0: entered promiscuous mode [ 220.424306][ T9482] syzkaller0: entered allmulticast mode [ 220.493270][ T9489] netlink: 244 bytes leftover after parsing attributes in process `syz.2.989'. [ 220.553063][ T9473] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.799527][ T9506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'. [ 220.833201][ T9512] netlink: 348 bytes leftover after parsing attributes in process `syz.2.995'. [ 221.321588][ T9540] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1006'. [ 221.337985][ T9540] netlink: 'syz.4.1006': attribute type 11 has an invalid length. [ 221.459720][ T9544] validate_nla: 6 callbacks suppressed [ 221.459735][ T9544] netlink: 'syz.4.1008': attribute type 12 has an invalid length. [ 221.487069][ T9546] netlink: 'syz.4.1008': attribute type 12 has an invalid length. [ 221.500881][ T9545] syzkaller0: entered promiscuous mode [ 221.511140][ T9545] syzkaller0: entered allmulticast mode [ 222.111641][ T9584] xt_policy: too many policy elements [ 224.783354][ T9561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 224.952424][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'. [ 225.014756][ T9620] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1026'. [ 225.023804][ T9621] netlink: 'syz.2.1029': attribute type 21 has an invalid length. [ 225.023825][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 225.065898][ T9622] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1028'. [ 225.085016][ T9621] netlink: 'syz.2.1029': attribute type 21 has an invalid length. [ 225.101744][ T1045] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.131320][ T1045] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.143089][ T1045] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.151931][ T9621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1029'. [ 225.182051][ T9628] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1030'. [ 225.334987][ T1045] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.351060][ T9642] openvswitch: netlink: IP tunnel dst address not specified [ 225.554019][ T9651] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1036'. [ 225.761478][ T9661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1040'. [ 226.279096][ T9688] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:0 [ 226.307725][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1049'. [ 226.322959][ T9688] ipt_REJECT: TCP_RESET invalid for non-tcp [ 226.343947][ T9692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1049'. [ 226.410885][ T9692] erspan0: entered promiscuous mode [ 226.425129][ T9692] erspan0: left promiscuous mode [ 226.580220][ T9708] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.841297][ T9723] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 226.928016][ T9727] netlink: 'syz.4.1059': attribute type 17 has an invalid length. [ 227.040491][ T9727] erspan0: entered promiscuous mode [ 227.042240][ T9720] netlink: 'syz.0.1058': attribute type 1 has an invalid length. [ 227.047197][ T9727] gretap0: entered promiscuous mode [ 227.071859][ T9744] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 227.073655][ T9732] netlink: 'syz.4.1059': attribute type 3 has an invalid length. [ 227.112702][ T9734] bond7: (slave bridge6): Enslaving as a backup interface with an up link [ 227.167805][ T9720] macvlan2: entered promiscuous mode [ 227.194787][ T9720] macvlan2: entered allmulticast mode [ 227.230803][ T9720] bond7: entered promiscuous mode [ 227.266324][ T9720] bridge6: entered promiscuous mode [ 227.288788][ T9720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.310089][ T9720] bond7: left promiscuous mode [ 227.320682][ T9720] bridge6: left promiscuous mode [ 227.348184][ T9754] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 227.356777][ T9754] netlink: 'syz.4.1066': attribute type 3 has an invalid length. [ 227.396550][ T9749] netlink: 'syz.2.1067': attribute type 12 has an invalid length. [ 227.616286][ T9767] tipc: Enabled bearer , priority 0 [ 227.635010][ T9772] Cannot find del_set index 4 as target [ 227.657482][ T9775] Cannot find del_set index 4 as target [ 227.667046][ T9765] tipc: Disabling bearer [ 228.110156][ T9798] : renamed from team_slave_1 [ 228.300133][ T9806] syzkaller1: entered promiscuous mode [ 228.314792][ T9806] syzkaller1: entered allmulticast mode [ 228.624067][ T9826] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 228.776009][ T5830] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 228.783437][ T49] Bluetooth: hci0: command 0x0c20 tx timeout [ 228.975773][ T9847] netlink: 'syz.3.1100': attribute type 13 has an invalid length. [ 229.119310][ T9854] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 229.320449][ T9864] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 229.362571][ T9864] 8021q: adding VLAN 0 to HW filter on device bond6 [ 229.396143][ T9864] bond6: (slave veth5): Enslaving as an active interface with a down link [ 229.628315][ T9873] sit1: entered promiscuous mode [ 229.633300][ T9873] sit1: entered allmulticast mode [ 230.060274][ T9897] __nla_validate_parse: 11 callbacks suppressed [ 230.060293][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1118'. [ 230.163739][ T9909] netlink: 320 bytes leftover after parsing attributes in process `syz.2.1120'. [ 230.241184][ T9908] 8021q: adding VLAN 0 to HW filter on device bond7 [ 230.333748][ T9915] bond7: (slave gretap3): making interface the new active one [ 230.352261][ T9915] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 230.606784][ T9936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1130'. [ 230.712844][ T9932] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.886490][ T9941] bond4: (slave veth1): Enslaving as an active interface with a down link [ 230.946628][ T9947] bond4: (slave veth0_to_bond): making interface the new active one [ 230.977932][ T9947] veth0_to_bond: entered promiscuous mode [ 230.984206][ T9947] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 231.080574][ T9932] bond4: (slave veth5): Enslaving as an active interface with a down link [ 231.101467][ T9952] ip6gre0: Master is either lo or non-ether device [ 231.199915][ T9957] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1134'. [ 231.239460][ T131] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 232.038816][T10000] validate_nla: 4 callbacks suppressed [ 232.038827][T10000] netlink: 'syz.4.1144': attribute type 1 has an invalid length. [ 232.124003][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.135431][T10003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.143383][T10003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.151377][T10003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.429509][T10029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1150'. [ 232.439616][T10029] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 232.732030][T10046] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1153'. [ 232.948580][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1154'. [ 233.032363][T10050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1155'. [ 233.372509][T10065] netlink: 'syz.4.1159': attribute type 2 has an invalid length. [ 233.423475][ T9924] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.435398][ T9976] netlink: 'syz.3.1138': attribute type 11 has an invalid length. [ 233.454185][ T9976] netlink: 'syz.3.1138': attribute type 11 has an invalid length. [ 233.476069][ T9976] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1138'. [ 233.559669][T10006] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1146'. [ 234.054778][ T49] Bluetooth: hci3: command 0x0405 tx timeout [ 234.739466][T10140] netlink: 'syz.2.1179': attribute type 13 has an invalid length. [ 234.776886][T10140] netlink: 'syz.2.1179': attribute type 58 has an invalid length. [ 235.038051][T10151] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 235.126378][T10164] syzkaller1: entered promiscuous mode [ 235.142049][T10164] syzkaller1: entered allmulticast mode [ 235.165111][T10169] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 235.349873][T10177] __nla_validate_parse: 5 callbacks suppressed [ 235.349892][T10177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 235.381093][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 235.396640][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1186'. [ 235.589105][T10190] netlink: 'syz.4.1188': attribute type 4 has an invalid length. [ 235.894247][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 235.917838][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 236.054218][T10220] syzkaller0: entered promiscuous mode [ 236.082766][T10220] syzkaller0: entered allmulticast mode [ 237.165547][T10287] netlink: 'syz.2.1211': attribute type 2 has an invalid length. [ 237.333405][T10287] 9: entered promiscuous mode [ 237.485726][T10297] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1216'. [ 237.509786][T10296] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.538255][T10301] erspan0: mtu less than device minimum [ 237.555765][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1216'. [ 237.566941][T10302] netlink: 'syz.3.1216': attribute type 7 has an invalid length. [ 237.575179][T10302] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1216'. [ 237.688741][T10308] netlink: 'syz.0.1218': attribute type 2 has an invalid length. [ 237.696850][T10308] netlink: 'syz.0.1218': attribute type 1 has an invalid length. [ 237.707035][T10308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1218'. [ 237.716453][T10308] openvswitch: netlink: Flow actions attr not present in new flow. [ 237.727375][T10308] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1218'. [ 238.292562][T10293] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 238.502294][T10335] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 238.582851][T10338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.814288][T10354] vcan0: tx address claim with different name [ 239.227364][T10380] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 239.256579][T10379] netlink: 'syz.1.1239': attribute type 8 has an invalid length. [ 239.312786][T10379] bond0: entered promiscuous mode [ 239.320338][T10379] bond_slave_0: entered promiscuous mode [ 239.337196][T10379] bond_slave_1: entered promiscuous mode [ 239.343386][T10379] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 239.360632][T10379] gretap0: entered promiscuous mode [ 239.376195][T10379] bond0: left promiscuous mode [ 239.382317][T10379] bond_slave_0: left promiscuous mode [ 239.396800][T10379] bond_slave_1: left promiscuous mode [ 239.412347][T10379] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 239.435084][T10379] gretap0: left promiscuous mode [ 239.495023][ T49] Bluetooth: hci0: command 0x0c20 tx timeout [ 239.669587][T10401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.324433][T10430] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 240.376448][T10434] netlink: 'syz.2.1257': attribute type 10 has an invalid length. [ 240.400911][T10434] __nla_validate_parse: 8 callbacks suppressed [ 240.400928][T10434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1257'. [ 240.518120][T10443] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 240.531377][T10444] netlink: 'syz.0.1261': attribute type 1 has an invalid length. [ 240.761370][T10456] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1265'. [ 240.785091][T10457] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1265'. [ 240.794758][T10455] IPVS: set_ctl: invalid protocol: 50 172.30.0.4:28192 [ 240.822978][T10454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.030044][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 241.524928][T10495] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1276'. [ 241.725990][T10506] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 241.948430][T10514] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1280'. [ 241.956865][ T1045] veth0_to_bond: left promiscuous mode [ 241.964107][T10516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1281'. [ 242.152029][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 242.172711][T10536] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1284'. [ 242.195669][T10531] validate_nla: 4 callbacks suppressed [ 242.195685][T10531] netlink: 'syz.3.1283': attribute type 9 has an invalid length. [ 242.277898][T10539] xt_connbytes: Forcing CT accounting to be enabled [ 242.429025][T10551] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1290'. [ 242.477362][T10550] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 244.996944][T10525] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.252413][T10590] bond0: entered allmulticast mode [ 245.272991][T10590] bond_slave_0: entered allmulticast mode [ 245.295241][T10590] bond_slave_1: entered allmulticast mode [ 245.332291][T10592] xfrm1: entered promiscuous mode [ 245.340555][T10592] xfrm1: entered allmulticast mode [ 245.484555][ T29] audit: type=1800 audit(1776664329.223:2): pid=10603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1305" name="memory.events" dev="tmpfs" ino=1322 res=0 errno=0 [ 245.517391][T10603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.539114][T10608] __nla_validate_parse: 6 callbacks suppressed [ 245.539129][T10608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1306'. [ 245.606512][T10612] xt_hashlimit: size too large, truncated to 1048576 [ 245.701105][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 246.009372][T10634] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 246.337407][T10640] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1317'. [ 246.348513][T10649] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1319'. [ 246.727584][T10668] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 246.767050][T10670] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1325'. [ 246.948443][T10680] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 246.962497][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 247.007894][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'. [ 247.037221][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1330'. [ 247.074985][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 247.116172][T10692] netlink: 'syz.3.1335': attribute type 4 has an invalid length. [ 247.220601][T10701] openvswitch: netlink: Flow actions attr not present in new flow. [ 247.288785][T10705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.299376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.689561][T10731] netlink: 'syz.2.1347': attribute type 1 has an invalid length. [ 247.861720][T10731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.154416][T10766] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 248.644969][T10793] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 248.711033][T10801] netlink: 'syz.2.1363': attribute type 9 has an invalid length. [ 248.727880][T10801] netlink: 'syz.2.1363': attribute type 9 has an invalid length. [ 248.829299][T10806] netlink: 'syz.1.1364': attribute type 1 has an invalid length. [ 248.889502][T10811] tipc: Enabled bearer , priority 11 [ 248.928108][T10810] tipc: Failed to remove unknown binding: 66,1,1/0:1269617753/1269617755 [ 248.956959][T10806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.998528][T10811] vlan3: entered allmulticast mode [ 249.012605][T10811] bond5: entered allmulticast mode [ 249.213756][T10832] syzkaller0: entered promiscuous mode [ 249.229879][T10832] syzkaller0: entered allmulticast mode [ 249.798175][T10881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.979990][T10887] vlan2: entered allmulticast mode [ 250.005933][ T5824] tipc: Node number set to 3365107725 [ 250.561883][T10899] __nla_validate_parse: 15 callbacks suppressed [ 250.561896][T10899] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1393'. [ 250.743263][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 250.750772][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1395'. [ 250.863898][T10909] netlink: 'syz.0.1396': attribute type 1 has an invalid length. [ 250.923264][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1397'. [ 252.565076][T10868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 252.574530][T10890] netlink: 'syz.2.1391': attribute type 2 has an invalid length. [ 252.593574][T10906] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1395'. [ 252.635444][T10912] netlink: 'syz.0.1397': attribute type 11 has an invalid length. [ 252.645273][T10912] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.1397'. [ 252.911142][T10943] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1402'. [ 252.931152][T10946] syzkaller0: entered promiscuous mode [ 252.943704][T10946] syzkaller0: entered allmulticast mode [ 252.987032][T10946] tc action pedit offset must be on 32 bit boundaries [ 252.994820][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.001634][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.005679][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'. [ 253.009101][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.024145][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.030961][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.037788][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.044565][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.051399][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.052648][T10952] netlink: 'syz.1.1405': attribute type 1 has an invalid length. [ 253.058246][T10946] tc action pedit offset must be on 32 bit boundaries [ 253.058274][T10946] 0: reclassify loop, rule prio 0, protocol 800 [ 253.195955][T10952] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.346412][T10949] 8021q: adding VLAN 0 to HW filter on device bond6 [ 253.376960][T10949] bond5: (slave bond6): Enslaving as an active interface with an up link [ 253.410801][T10967] syzkaller0: entered promiscuous mode [ 253.425000][T10967] syzkaller0: entered allmulticast mode [ 253.490947][T10976] syzkaller1: entered promiscuous mode [ 253.496561][T10976] syzkaller1: entered allmulticast mode [ 253.527370][T10981] netlink: 'syz.3.1411': attribute type 16 has an invalid length. [ 253.550553][T10981] netlink: 'syz.3.1411': attribute type 3 has an invalid length. [ 253.576268][T10981] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1411'. [ 253.669920][T10988] netlink: 'syz.3.1411': attribute type 16 has an invalid length. [ 253.695023][T10988] netlink: 'syz.3.1411': attribute type 3 has an invalid length. [ 253.708351][T10988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1411'. [ 254.312205][T11038] netlink: 'syz.3.1420': attribute type 4 has an invalid length. [ 255.234239][T11095] bond7: option min_links: invalid value (18446744073709551614) [ 255.242372][T11095] bond7: option min_links: allowed values 0 - 2147483647 [ 255.255174][T11095] bond7 (unregistering): Released all slaves [ 255.351939][T11096] netlink: 'syz.1.1432': attribute type 1 has an invalid length. [ 255.560318][T11110] ip6t_srh: unknown srh invflags 4000 [ 255.577991][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.584867][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.753251][T11130] x_tables: unsorted entry at hook 1 [ 255.775369][T11129] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 255.908877][T11136] gre1: entered promiscuous mode [ 255.918646][T11140] netlink: 'syz.3.1446': attribute type 1 has an invalid length. [ 255.933445][T11139] __nla_validate_parse: 1 callbacks suppressed [ 255.933462][T11139] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1447'. [ 256.084137][T11143] bond8: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 256.089267][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1449'. [ 256.095475][T11143] bond8: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 256.106859][T11153] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1448'. [ 256.121742][T11143] bond8: (slave ip6gre1): making interface the new active one [ 256.129732][T11143] bond8: (slave ip6gre1): Enslaving as an active interface with an up link [ 256.151981][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'. [ 256.162034][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 256.171751][T11148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1450'. [ 256.182151][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 256.297793][T11145] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 256.326324][T11160] IPVS: Scheduler module ip_vs_sip not found [ 256.326555][T11163] netlink: 'syz.3.1452': attribute type 1 has an invalid length. [ 256.349821][T11145] bond7: (slave lo): Enslaving as an active interface with an up link [ 256.380634][T11145] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 256.620316][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1456'. [ 256.645974][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'. [ 256.887228][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 257.266398][T11211] openvswitch: netlink: IPv4 tun info is not correct [ 257.278479][T11214] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 257.285114][T11214] pim6reg1: entered promiscuous mode [ 257.296898][T11214] pim6reg1: entered allmulticast mode [ 257.509291][T11230] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 257.525324][T11230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 257.687197][T11244] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.304976][T11283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 258.682325][T11299] netlink: 'syz.3.1492': attribute type 2 has an invalid length. [ 258.786704][T11304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.169313][T11323] bond7: option mode: unable to set because the bond device has slaves [ 259.222848][T11322] bond9: entered promiscuous mode [ 259.273720][T11322] macvlan2: entered promiscuous mode [ 259.291986][T11322] macvlan2: entered allmulticast mode [ 259.303980][T11322] bond9: (slave macvlan2): Opening slave failed [ 259.428409][T11335] syzkaller0: entered promiscuous mode [ 259.430994][T11326] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.434125][T11335] syzkaller0: entered allmulticast mode [ 259.471462][T11335] netlink: 'syz.1.1501': attribute type 2 has an invalid length. [ 259.511549][T11335] netlink: 'syz.1.1501': attribute type 11 has an invalid length. [ 259.670842][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 259.680788][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 259.703389][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 259.719702][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 259.881127][T11357] netlink: 'syz.4.1508': attribute type 1 has an invalid length. [ 260.605576][T11401] netlink: 'syz.0.1521': attribute type 3 has an invalid length. [ 260.859830][T11407] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 260.878490][T11407] team0 (unregistering): Port device team_slave_0 removed [ 260.900354][T11407] team0 (unregistering): Failed to send options change via netlink (err -105) [ 260.912573][T11407] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 260.925160][T11407] team0 (unregistering): Port device team_slave_1 removed [ 261.086898][T11425] __nla_validate_parse: 11 callbacks suppressed [ 261.086914][T11425] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1528'. [ 261.152795][T11426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 261.238097][T11434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1531'. [ 261.238880][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 261.284794][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 261.318287][T11422] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1527'. [ 261.328846][T11422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1527'. [ 261.336186][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1532'. [ 261.343078][T11438] netlink: 'syz.1.1533': attribute type 1 has an invalid length. [ 261.355883][T11422] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1527'. [ 261.366319][T11438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.505306][T11444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 261.666781][T11458] ip6t_srh: unknown srh match flags 5F28 [ 262.291251][T11499] netlink: 'syz.2.1549': attribute type 9 has an invalid length. [ 262.807853][T11520] netlink: 'syz.4.1555': attribute type 21 has an invalid length. [ 263.037305][T11538] bridge0: port 2(vlan2) entered blocking state [ 263.043828][T11538] bridge0: port 2(vlan2) entered disabled state [ 263.053912][T11538] vlan2: entered allmulticast mode [ 263.060529][T11538] geneve0: entered allmulticast mode [ 263.070783][T11538] vlan2: entered promiscuous mode [ 263.083199][T11538] geneve0: entered promiscuous mode [ 263.427220][T11549] syzkaller1: entered promiscuous mode [ 263.440444][T11549] syzkaller1: entered allmulticast mode [ 265.543704][T11617] xt_SECMARK: invalid mode: 9 [ 266.718747][T11644] ip6t_srh: unknown srh match flags 4000 [ 266.791996][T11644] ip6t_srh: unknown srh match flags 4000 [ 266.958917][T11659] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 267.084791][T11670] __nla_validate_parse: 5 callbacks suppressed [ 267.084807][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1596'. [ 267.420845][T11689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.652215][T11696] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1604'. [ 267.720742][T11697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.808072][T11696] vlan0: entered allmulticast mode [ 268.234563][T11723] netem: change failed [ 268.398958][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1613'. [ 268.667401][T11742] netlink: 'syz.4.1618': attribute type 142 has an invalid length. [ 269.193426][T11779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1621'. [ 269.602120][T11797] bond10: Unable to set up delay as MII monitoring is disabled [ 269.612040][T11797] bond10 (unregistering): Released all slaves [ 269.627717][T11794] netlink: 'syz.0.1631': attribute type 2 has an invalid length. [ 269.637165][T11802] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 269.661597][T11794] netlink: 'syz.0.1631': attribute type 2 has an invalid length. [ 269.972642][T11818] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1636'. [ 270.006401][T11824] netlink: 'syz.3.1638': attribute type 1 has an invalid length. [ 270.226357][T11826] bond9: (slave ip6gretap1): making interface the new active one [ 270.264266][T11826] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.288932][T11837] netlink: 'syz.4.1641': attribute type 1 has an invalid length. [ 270.295052][T11826] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 270.326846][T11826] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 270.409566][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 270.436365][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 270.443745][T11853] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 270.472148][T11846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 270.507205][T11845] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 270.534569][T11845] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 270.564876][T11845] bond7: (slave ip6gre2): making interface the new active one [ 270.573538][T11845] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 270.683473][T11873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.748617][T11857] ip6t_srh: unknown srh match flags 4000 [ 270.807959][T11837] syzkaller0: entered promiscuous mode [ 270.827855][T11837] syzkaller0: entered allmulticast mode [ 270.851471][T11845] 8021q: adding VLAN 0 to HW filter on device bond8 [ 270.869650][T11886] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 270.895281][T11868] syzkaller0: entered promiscuous mode [ 270.900804][T11868] syzkaller0: entered allmulticast mode [ 271.647537][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1653'. [ 272.876702][T11914] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 273.015549][T11918] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1659'. [ 274.028733][T11903] veth1_macvtap: left promiscuous mode [ 274.035419][T11903] macsec0: entered promiscuous mode [ 274.040860][T11903] macsec0: entered allmulticast mode [ 274.367229][T11935] netlink: 'syz.3.1664': attribute type 30 has an invalid length. [ 274.407261][T11935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 274.451637][T11943] netlink: 'syz.3.1664': attribute type 30 has an invalid length. [ 274.476085][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1664'. [ 274.627063][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1669'. [ 274.682114][T11956] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1672'. [ 274.695052][T11956] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 274.867751][T11967] pimreg3: entered allmulticast mode [ 274.903797][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 275.143960][T11985] vlan2: entered promiscuous mode [ 275.155380][T11985] bridge0: entered promiscuous mode [ 275.210318][T11985] openvswitch: netlink: Multiple metadata blocks provided [ 275.243657][T11997] netlink: 'syz.0.1683': attribute type 39 has an invalid length. [ 275.390099][T11997] syz_tun (unregistering): left allmulticast mode [ 275.413140][T11997] syz_tun (unregistering): left promiscuous mode [ 275.438489][T11997] bridge0: port 3(syz_tun) entered disabled state [ 275.710905][T12022] xt_connbytes: Forcing CT accounting to be enabled [ 275.826115][T12028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.329557][T12047] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 276.905652][T12072] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1702'. [ 277.585364][T12123] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1714'. [ 277.587962][T12116] netlink: 'syz.2.1711': attribute type 1 has an invalid length. [ 277.721158][T12116] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 277.805726][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1715'. [ 277.852189][T12136] netlink: 'syz.3.1715': attribute type 30 has an invalid length. [ 277.884147][T12138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1717'. [ 278.526028][T12174] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1722'. [ 278.611552][T12174] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 278.663270][T12174] bridge_slave_1: left allmulticast mode [ 278.691141][T12174] bridge_slave_1: left promiscuous mode [ 278.710151][T12182] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.719711][T12174] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.781356][T12174] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 278.844547][T12192] tipc: Started in network mode [ 278.857922][T12180] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1723'. [ 278.874368][T12192] tipc: Node identity ac14140f, cluster identity 4711 [ 278.893107][T12192] tipc: New replicast peer: 255.255.255.255 [ 278.906862][T12192] tipc: Enabled bearer , priority 10 [ 279.339030][T12223] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.1732'. [ 279.446128][T12227] bridge10: entered promiscuous mode [ 279.463355][T12227] bridge10: entered allmulticast mode [ 279.536478][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1735'. [ 279.972604][T12271] netlink: 'syz.1.1743': attribute type 1 has an invalid length. [ 280.008118][T12271] netlink: 'syz.1.1743': attribute type 4 has an invalid length. [ 280.025029][T12271] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1743'. [ 280.039703][T12279] netlink: 'syz.1.1743': attribute type 1 has an invalid length. [ 280.041881][ T9] tipc: Node number set to 2886997007 [ 280.069350][T12279] netlink: 'syz.1.1743': attribute type 4 has an invalid length. [ 280.099212][T12279] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1743'. [ 280.168025][T12256] vlan3: entered allmulticast mode [ 280.193609][T12256] bond0: entered allmulticast mode [ 280.253974][T12256] bond_slave_0: entered allmulticast mode [ 280.287880][T12289] xt_policy: output policy not valid in PREROUTING and INPUT [ 280.337741][T12256] bond_slave_1: entered allmulticast mode [ 280.376859][T12256] bridge_slave_1: entered allmulticast mode [ 280.737749][T12319] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1753'. [ 280.820222][T12324] xt_socket: unknown flags 0xe4 [ 280.997397][T12329] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1756'. [ 281.078348][T12334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1757'. [ 281.300968][T12329] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.383368][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1760'. [ 281.565203][T12329] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.837530][T12329] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.913213][T12366] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 282.018208][T12329] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.480291][T12402] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.552008][T12394] syzkaller1: entered promiscuous mode [ 282.593166][T12394] syzkaller1: entered allmulticast mode [ 282.730573][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.751033][T12416] xt_cgroup: invalid path, errno=-2 [ 282.783504][T12417] netlink: 'syz.1.1774': attribute type 10 has an invalid length. [ 282.831723][T12421] xt_hashlimit: size too large, truncated to 1048576 [ 282.925066][T12417] dummy0: entered promiscuous mode [ 282.935994][T12417] bridge0: port 3(dummy0) entered blocking state [ 282.946017][T12417] bridge0: port 3(dummy0) entered disabled state [ 282.952671][T12417] dummy0: entered allmulticast mode [ 282.978792][T12417] bridge0: port 3(dummy0) entered blocking state [ 282.985334][T12417] bridge0: port 3(dummy0) entered forwarding state [ 283.017924][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.118951][T11029] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.234318][T11029] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.436359][T12455] netlink: 'syz.3.1781': attribute type 8 has an invalid length. [ 283.512959][T12455] bond0: entered promiscuous mode [ 283.527643][T12455] bond_slave_0: entered promiscuous mode [ 283.543315][T12455] bond_slave_1: entered promiscuous mode [ 283.558898][T12455] bond0: left promiscuous mode [ 283.563957][T12455] bond_slave_0: left promiscuous mode [ 283.570469][T12455] bond_slave_1: left promiscuous mode [ 283.589129][T12458] __nla_validate_parse: 9 callbacks suppressed [ 283.589143][T12458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1782'. [ 283.637416][T12458] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1782'. [ 283.657429][T12457] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1782'. [ 283.670047][T12457] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1782'. [ 283.789503][T12475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 284.141462][T12497] sctp: [Deprecated]: syz.3.1790 (pid 12497) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.141462][T12497] Use struct sctp_sack_info instead [ 284.387626][T12510] x_tables: duplicate underflow at hook 4 [ 284.407904][T12509] x_tables: duplicate underflow at hook 4 [ 284.505343][T12516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1795'. [ 284.601817][T12520] netlink: 'syz.0.1794': attribute type 1 has an invalid length. [ 284.605780][T12521] IPVS: dh: FWM 3 0x00000003 - no destination available [ 284.632110][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1794'. [ 284.996278][T12534] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1799'. [ 285.067352][T12534] nbd: nbd0 already in use [ 285.486296][T12564] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1807'. [ 285.530060][T12564] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1807'. [ 285.542851][T12556] tipc: Started in network mode [ 285.554141][T12556] tipc: Node identity , cluster identity 4711 [ 285.708722][T12574] ipt_REJECT: TCP_RESET invalid for non-tcp [ 285.777101][T12577] IPv6: sit3: Disabled Multicast RS [ 286.186921][T12597] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 286.647670][T12622] syzkaller1: entered promiscuous mode [ 286.674966][T12622] syzkaller1: entered allmulticast mode [ 287.210006][T12661] netlink: 'syz.3.1824': attribute type 64 has an invalid length. [ 287.463926][T12679] sctp: [Deprecated]: syz.1.1830 (pid 12679) Use of int in maxseg socket option. [ 287.463926][T12679] Use struct sctp_assoc_value instead [ 287.518726][T12682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.534222][T12680] h: entered promiscuous mode [ 287.790349][T12694] xt_CT: No such helper "snmp_trap" [ 288.922203][T12760] syzkaller0: entered promiscuous mode [ 288.940851][T12760] syzkaller0: entered allmulticast mode [ 289.127329][T12774] __nla_validate_parse: 14 callbacks suppressed [ 289.127348][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'. [ 289.369118][T12790] tipc: New replicast peer: 255.255.255.255 [ 289.386194][T12790] tipc: Enabled bearer , priority 10 [ 289.414186][T12793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1856'. [ 289.495062][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.504923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.513323][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.522178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 289.633158][T12802] netlink: 'syz.3.1858': attribute type 2 has an invalid length. [ 289.658532][T12804] pimreg: left allmulticast mode [ 289.667673][T12802] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1858'. [ 289.697755][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 289.892975][T12808] netlink: 'syz.1.1859': attribute type 11 has an invalid length. [ 289.906149][T12816] netlink: 'syz.2.1863': attribute type 63 has an invalid length. [ 289.908787][T12808] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1859'. [ 289.938832][T12817] netlink: 'syz.2.1863': attribute type 63 has an invalid length. [ 290.167113][T12826] wireguard: wg1: Could not create IPv4 socket [ 290.174123][T12826] wg1: entered promiscuous mode [ 290.180174][T12826] wg1: entered allmulticast mode [ 290.244268][T12829] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1868'. [ 290.254251][T12827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1864'. [ 290.265260][T12829] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1868'. [ 290.283716][T12829] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1868'. [ 290.494931][ T9] tipc: Node number set to 2886997057 [ 290.619662][T12850] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 290.821208][T12856] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 290.833293][T12856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'. [ 290.852058][T12856] netlink: 'syz.0.1877': attribute type 2 has an invalid length. [ 290.862191][T12860] erspan0: entered promiscuous mode [ 290.870679][T12856] netlink: 'syz.0.1877': attribute type 2 has an invalid length. [ 290.887927][T12856] netlink: 'syz.0.1877': attribute type 2 has an invalid length. [ 290.929675][T12820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.017630][T12856] xt_CT: No such helper "snmp_trap" [ 291.025649][T12870] wg1: entered promiscuous mode [ 291.046721][T12870] wg1: entered allmulticast mode [ 291.432821][T12899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.442145][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.462382][T12902] ip6tnl0: Caught tx_queue_len zero misconfig [ 291.488219][T12896] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 291.521541][T12895] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 291.772598][T12920] xt_hashlimit: size too large, truncated to 1048576 [ 292.226307][T12950] xt_hashlimit: invalid interval [ 292.241761][T12950] xt_hashlimit: invalid interval [ 293.229452][T13011] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 293.261906][T13011] netlink: 'syz.0.1925': attribute type 39 has an invalid length. [ 293.370120][T13022] Cannot find add_set index 2 as target [ 293.398909][T13022] netlink: 'syz.4.1928': attribute type 1 has an invalid length. [ 293.473238][T13022] 8021q: adding VLAN 0 to HW filter on device bond9 [ 293.542821][T13031] bond9: (slave geneve2): making interface the new active one [ 293.604409][T13031] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 294.032244][T13065] nbd: must specify a device to reconfigure [ 294.274268][T13080] raw_sendmsg: syz.3.1942 forgot to set AF_INET. Fix it! [ 294.526616][T13097] bond6: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 294.539560][T13097] bond6 (unregistering): Released all slaves [ 294.628082][T13108] __nla_validate_parse: 14 callbacks suppressed [ 294.628099][T13108] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1947'. [ 294.753348][T13113] syzkaller0: entered promiscuous mode [ 294.764972][T13113] syzkaller0: entered allmulticast mode [ 295.053994][T13140] pim6reg: entered allmulticast mode [ 295.095193][T13140] pim6reg: left allmulticast mode [ 295.248422][T13145] pim6reg: entered allmulticast mode [ 295.254905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.263330][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.313382][T13153] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1961'. [ 295.350456][T13155] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.372558][T13159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1961'. [ 295.385780][T13159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1961'. [ 295.451277][T13155] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.749820][T13155] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.814170][T13182] x_tables: ip6_tables: MASQUERADE target: only valid in nat table, not [ 295.840026][T13183] Cannot find map_set index 65533 as target [ 295.849489][T13187] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1965'. [ 295.914921][T13155] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.057138][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1973'. [ 296.081421][T13202] netlink: 'syz.2.1972': attribute type 21 has an invalid length. [ 296.149815][T13202] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1972'. [ 296.506646][T13219] xt_CONNSECMARK: invalid mode: 0 [ 296.506838][T13216] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1976'. [ 296.570672][T13216] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1976'. [ 296.843106][ T29] audit: type=1800 audit(1776664380.583:3): pid=13231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1982" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 296.873760][T13231] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 296.887980][T13231] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 296.898889][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1986'. [ 296.903140][T13231] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 297.028643][T13231] syz.1.1982 (13231) used greatest stack depth: 16064 bytes left [ 297.497356][T13279] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 297.746737][T13293] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.828420][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 298.088954][T13314] syzkaller1: entered promiscuous mode [ 298.133784][T13314] syzkaller1: entered allmulticast mode [ 298.381302][T13336] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 298.504525][T13341] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 298.528975][T13341] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 298.543950][T13342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.553974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.576464][T13342] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.585497][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.595202][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.605334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.629204][T13352] IPVS: length: 24 != 14328 [ 298.671024][ T92] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.851410][T13362] netlink: 'syz.0.2015': attribute type 9 has an invalid length. [ 299.022949][T13369] netlink: 'syz.3.2016': attribute type 33 has an invalid length. [ 299.267935][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 299.866670][T13402] syzkaller0: entered promiscuous mode [ 299.872358][T13402] syzkaller0: entered allmulticast mode [ 300.420889][T13419] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 300.452237][T13419] bond10 (unregistering): Released all slaves [ 300.471534][T13426] tipc: Failed to remove unknown binding: 66,0,0/2886997057:17382897/17382898 [ 300.487341][T13426] tipc: Failed to remove unknown binding: 66,0,0/2886997057:17382897/17382898 [ 300.532740][ T5490] 8021q: adding VLAN 0 to HW filter on device eth3 [ 300.841844][T13444] __nla_validate_parse: 4 callbacks suppressed [ 300.841862][T13444] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2034'. [ 301.000335][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2036'. [ 301.220707][T13459] bond7: (slave lo): Releasing backup interface [ 301.281255][T13459] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 301.428112][T13459] dummy0: left allmulticast mode [ 301.433549][T13459] bridge0: port 3(dummy0) entered disabled state [ 301.493451][T13459] bridge_slave_0: left allmulticast mode [ 301.503647][T13459] bridge_slave_0: left promiscuous mode [ 301.511539][T13459] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.644222][T13479] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2040'. [ 301.661395][T13479] openvswitch: netlink: Flow key attr not present in new flow. [ 301.687411][T13459] bridge_slave_1: left allmulticast mode [ 301.693189][T13459] bridge_slave_1: left promiscuous mode [ 301.699493][T13459] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.715220][T13459] bond4: (slave veth0_to_bond): Releasing active interface [ 301.730075][T13459] bond0: (slave bond_slave_0): Releasing backup interface [ 301.742890][T13459] bond0: (slave bond_slave_1): Releasing backup interface [ 301.756403][T13459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.764109][T13459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.776230][T13459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.793432][T13459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.802342][T13459] tipc: Resetting bearer [ 301.810500][T13459] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 301.839914][ T5490] 8021q: adding VLAN 0 to HW filter on device eth4 [ 301.998205][T13484] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2041'. [ 302.490829][T13509] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 302.514767][T13509] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 302.545324][T13509] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.2045'. [ 302.653488][T13514] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2046'. [ 302.740203][T13519] netlink: 'syz.2.2047': attribute type 1 has an invalid length. [ 303.225746][T13534] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2053'. [ 303.365298][T13536] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2053'. [ 303.702519][T13542] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 303.769027][T13542] bond9 (unregistering): Released all slaves [ 303.799826][T13545] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2057'. [ 304.111017][T13562] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2062'. [ 304.368830][T13365] Set syz1 is full, maxelem 65536 reached [ 304.541885][T13586] netlink: 'syz.4.2071': attribute type 1 has an invalid length. [ 304.694063][T13604] xt_hashlimit: size too large, truncated to 1048576 [ 305.207309][T13619] netlink: zone id is out of range [ 305.212535][T13619] netlink: zone id is out of range [ 305.218029][T13619] netlink: zone id is out of range [ 305.223220][T13619] netlink: zone id is out of range [ 305.228628][T13619] netlink: zone id is out of range [ 305.233762][T13619] netlink: zone id is out of range [ 305.239116][T13619] netlink: zone id is out of range [ 305.431028][T13622] syzkaller0: entered promiscuous mode [ 305.438592][T13622] syzkaller0: entered allmulticast mode [ 307.681968][T13603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.889540][T13654] net_ratelimit: 53 callbacks suppressed [ 307.889559][T13654] openvswitch: netlink: IPv6 tunnel dst address is zero [ 307.916945][T13658] __nla_validate_parse: 3 callbacks suppressed [ 307.916965][T13658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2087'. [ 308.073204][ T49] Bluetooth: hci3: link tx timeout [ 308.081847][ T49] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 308.317863][T13682] wg1 speed is unknown, defaulting to 1000 [ 308.334835][T13682] wg1 speed is unknown, defaulting to 1000 [ 308.357455][T13682] wg1 speed is unknown, defaulting to 1000 [ 308.382672][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2095'. [ 308.396589][T13682] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 308.432057][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2095'. [ 308.455664][T13686] wg1 speed is unknown, defaulting to 1000 [ 308.462252][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 308.469649][T13682] wg1 speed is unknown, defaulting to 1000 [ 308.480110][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2095'. [ 308.489788][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 308.499499][T13684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2095'. [ 308.504251][T13688] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 308.521283][T13688] bond10 (unregistering): Released all slaves [ 308.622293][T13689] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 308.635496][T13689] bond10 (unregistering): Released all slaves [ 308.653866][T13682] wg1 speed is unknown, defaulting to 1000 [ 308.654003][T13694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.685097][T13682] wg1 speed is unknown, defaulting to 1000 [ 308.688122][T13697] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2098'. [ 308.710421][T13682] wg1 speed is unknown, defaulting to 1000 [ 308.718879][T13694] netlink: 'syz.1.2098': attribute type 1 has an invalid length. [ 308.736612][T13682] wg1 speed is unknown, defaulting to 1000 [ 308.798126][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'. [ 308.996383][T13702] netlink: 'syz.4.2100': attribute type 1 has an invalid length. [ 309.096821][T13702] 8021q: adding VLAN 0 to HW filter on device bond10 [ 309.185937][T13704] bond10: (slave geneve3): making interface the new active one [ 309.196946][T13704] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 309.216267][T13726] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 309.276414][T13728] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 309.314438][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2108'. [ 309.396394][T13735] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 309.523751][T13726] veth7: entered promiscuous mode [ 309.538044][T13726] veth7: entered allmulticast mode [ 309.552413][T13749] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 309.560284][T13726] bond6: (slave veth7): Enslaving as a backup interface with a down link [ 309.633620][T13749] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 309.647389][T13754] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 310.135256][ T49] Bluetooth: hci3: command 0x0405 tx timeout [ 310.210774][T13792] syzkaller0: entered promiscuous mode [ 310.238021][T13792] syzkaller0: entered allmulticast mode [ 310.494056][T13813] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 310.587326][T13818] vlan3: entered allmulticast mode [ 310.601637][T13818] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 310.701335][T13827] x_tables: duplicate underflow at hook 3 [ 310.723841][T13827] sctp: [Deprecated]: syz.2.2133 (pid 13827) Use of int in max_burst socket option deprecated. [ 310.723841][T13827] Use struct sctp_assoc_value instead [ 311.011127][T13840] 8021q: adding VLAN 0 to HW filter on device bond11 [ 311.093114][T13848] syzkaller0: entered promiscuous mode [ 311.100124][T13848] syzkaller0: entered allmulticast mode [ 311.916886][T13877] netlink: 'syz.0.2149': attribute type 1 has an invalid length. [ 313.209738][T13863] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 313.239590][T13872] pim6reg: entered allmulticast mode [ 313.273927][T13903] __nla_validate_parse: 11 callbacks suppressed [ 313.273946][T13903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2155'. [ 313.275980][T13877] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 313.362618][T13899] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 313.452802][T13910] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2157'. [ 313.531657][T13916] netlink: 'syz.4.2159': attribute type 1 has an invalid length. [ 313.565027][T13916] netlink: 'syz.4.2159': attribute type 2 has an invalid length. [ 313.897608][T13948] bridge0: Caught tx_queue_len zero misconfig [ 314.369892][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2169'. [ 314.634180][T13940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 314.827474][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 314.838504][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2174'. [ 314.902009][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 316.208687][T13993] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 316.687090][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2182'. [ 316.950772][T14025] netlink: 'syz.4.2184': attribute type 39 has an invalid length. [ 317.024109][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.064206][T14038] sctp: [Deprecated]: syz.2.2188 (pid 14038) Use of int in max_burst socket option. [ 317.064206][T14038] Use struct sctp_assoc_value instead [ 317.299625][T14048] netlink: 'syz.2.2191': attribute type 2 has an invalid length. [ 317.329247][T14048] netlink: 'syz.2.2191': attribute type 2 has an invalid length. [ 317.397970][T14056] 8021q: VLANs not supported on lo [ 317.441341][T14058] 8021q: VLANs not supported on lo [ 317.594970][T14064] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 317.622024][T14072] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2198'. [ 318.156055][T14104] bond0: Caught tx_queue_len zero misconfig [ 318.328846][T14116] netlink: 'syz.3.2207': attribute type 2 has an invalid length. [ 318.350588][T14116] netlink: 'syz.3.2207': attribute type 2 has an invalid length. [ 318.400205][T14117] netlink: 'syz.3.2207': attribute type 2 has an invalid length. [ 318.422862][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2208'. [ 318.424364][T14117] netlink: 'syz.3.2207': attribute type 2 has an invalid length. [ 318.470797][T14124] netlink: 'syz.1.2209': attribute type 9 has an invalid length. [ 318.860209][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 318.870679][T14156] netlink: 'syz.2.2215': attribute type 1 has an invalid length. [ 318.908058][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 318.952947][T14139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2213'. [ 319.051285][T14149] bond10: option packets_per_slave: invalid value (18446744073709551615) [ 319.084556][T14149] bond10: option packets_per_slave: allowed values 0 - 65535 [ 319.154168][T14149] bond10 (unregistering): Released all slaves [ 319.232085][T14159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 319.412468][T14179] netlink: 'syz.1.2220': attribute type 12 has an invalid length. [ 319.589838][T14179] dummy0: left promiscuous mode [ 319.622125][T14179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.834553][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2225'. [ 319.847950][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2223'. [ 319.865138][T14203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2225'. [ 319.888158][T14199] bond10: entered promiscuous mode [ 319.899600][T14199] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.040472][T14190] 8021q: adding VLAN 0 to HW filter on device bond10 [ 320.071122][T14190] bond10: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 320.115130][T14190] bond10: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 320.182528][T14218] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2228'. [ 320.194305][T14190] bond10: (slave ip6gre1): making interface the new active one [ 320.203589][T14190] ip6gre1: entered promiscuous mode [ 320.210943][T14190] bond10: (slave ip6gre1): Enslaving as an active interface with an up link [ 320.381189][T14230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2232'. [ 320.791814][T14254] 8021q: adding VLAN 0 to HW filter on device bond12 [ 320.984053][T14258] 8021q: adding VLAN 0 to HW filter on device bond10 [ 321.229142][T14270] netlink: 'syz.2.2241': attribute type 11 has an invalid length. [ 321.255768][T14270] netlink: 'syz.2.2241': attribute type 11 has an invalid length. [ 321.731640][T14296] vlan3: entered allmulticast mode [ 322.117132][T14324] lo: Caught tx_queue_len zero misconfig [ 322.160009][T14324] validate_nla: 12 callbacks suppressed [ 322.160026][T14324] netlink: 'syz.4.2255': attribute type 5 has an invalid length. [ 322.524183][T14356] syzkaller1: entered promiscuous mode [ 322.554532][T14356] syzkaller1: entered allmulticast mode [ 322.581320][T14358] netlink: 'syz.1.2262': attribute type 4 has an invalid length. [ 323.061946][T14392] nbd: must specify at least one socket [ 323.139521][T14384] bond7: entered promiscuous mode [ 323.152427][T14384] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.461454][T14418] __nla_validate_parse: 78 callbacks suppressed [ 323.461473][T14418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2277'. [ 323.481902][T14417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2276'. [ 323.637266][T14427] bond0: option ad_select: unable to set because the bond device is up [ 323.664097][T14430] bond0: option ad_select: unable to set because the bond device is up [ 323.694043][T14433] netlink: 'syz.1.2282': attribute type 1 has an invalid length. [ 323.778926][T14446] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'. [ 323.894429][T14446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 323.914473][T14434] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2283'. [ 324.172466][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 324.193422][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 325.414782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.454697][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.655069][T14449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.846917][T14486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2294'. [ 326.919224][T14491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2296'. [ 327.030464][T14490] sit0: entered promiscuous mode [ 327.068229][T14490] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 327.104933][T14490] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2296'. [ 327.188794][T14508] netlink: 'syz.2.2300': attribute type 29 has an invalid length. [ 327.242933][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2301'. [ 327.302844][T14519] netlink: 'syz.3.2301': attribute type 10 has an invalid length. [ 327.361411][T14522] netlink: 'syz.3.2301': attribute type 2 has an invalid length. [ 327.395557][T14519] bond0: (slave wlan1): Opening slave failed [ 327.494694][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.766384][T14522] v: entered promiscuous mode [ 327.921344][T14547] netlink: 'syz.2.2307': attribute type 1 has an invalid length. [ 327.963492][T14549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.610635][T14583] __nla_validate_parse: 4 callbacks suppressed [ 328.610653][T14583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2318'. [ 328.700261][T14583] netlink: 'syz.2.2318': attribute type 5 has an invalid length. [ 328.837332][T14588] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2319'. [ 329.030127][T14598] bond8 (unregistering): Released all slaves [ 329.253731][T14597] bond8 (unregistering): Released all slaves [ 329.389272][T14618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2326'. [ 329.611734][T14630] bond11: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 329.684929][T14639] sock: sock_timestamping_bind_phc: sock not bind to device [ 329.849962][T14646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2334'. [ 330.085857][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 330.142473][T14663] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2341'. [ 330.261713][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2344'. [ 330.293354][T14668] batadv0: entered promiscuous mode [ 330.315158][T14668] macsec2: entered promiscuous mode [ 330.329202][T14668] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 330.337724][T14673] x_tables: duplicate underflow at hook 2 [ 330.357508][T14668] batadv0: left promiscuous mode [ 330.373963][T14673] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2346'. [ 330.429773][T14673] syzkaller1: entered promiscuous mode [ 330.440060][T14673] syzkaller1: entered allmulticast mode [ 330.470901][T14676] netlink: 'syz.2.2347': attribute type 1 has an invalid length. [ 330.504892][T14676] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2347'. [ 330.545503][T14677] netlink: 'syz.4.2348': attribute type 8 has an invalid length. [ 330.565605][T14677] sch_fq: defrate 0 ignored. [ 330.821550][T14694] sock: sock_set_timeout: `syz.3.2351' (pid 14694) tries to set negative timeout [ 330.952181][T14688] "syz.3.2351" (14688) uses obsolete ecb(arc4) skcipher [ 331.120570][T14708] netlink: 'syz.4.2358': attribute type 83 has an invalid length. [ 331.238982][T14708] netlink: 'syz.4.2358': attribute type 12 has an invalid length. [ 331.269047][T14708] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2358'. [ 331.512268][T14729] netlink: 'syz.4.2366': attribute type 2 has an invalid length. [ 331.705114][T14738] xt_hashlimit: size too large, truncated to 1048576 [ 332.040605][T14758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.515679][T14776] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.523633][T14776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.536012][T14776] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.553105][T14776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.572529][T14781] validate_nla: 3 callbacks suppressed [ 332.572546][T14781] netlink: 'syz.0.2382': attribute type 1 has an invalid length. [ 333.310535][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.335215][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.345482][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.354472][T14830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.609350][T14846] netlink: 'syz.1.2402': attribute type 21 has an invalid length. [ 333.625995][T14846] __nla_validate_parse: 20 callbacks suppressed [ 333.626013][T14846] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2402'. [ 333.894222][T14864] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 333.970833][T14866] netlink: 'syz.2.2409': attribute type 3 has an invalid length. [ 334.019170][T14866] netlink: 'syz.2.2409': attribute type 1 has an invalid length. [ 334.061105][T14866] netlink: 204 bytes leftover after parsing attributes in process `syz.2.2409'. [ 334.128712][T14879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2410'. [ 334.210782][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 334.267211][T14887] netlink: 'syz.1.2413': attribute type 6 has an invalid length. [ 334.796930][T14901] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.2418'. [ 335.161111][T14915] wg1 speed is unknown, defaulting to 1000 [ 335.182336][T14921] netlink: 'syz.3.2426': attribute type 1 has an invalid length. [ 335.277602][T14931] xt_SECMARK: invalid mode: 9 [ 335.287063][T14921] 8021q: adding VLAN 0 to HW filter on device bond12 [ 335.348087][T14928] bond12: (slave bridge5): making interface the new active one [ 335.358537][T14928] bond12: (slave bridge5): Enslaving as an active interface with an up link [ 335.373432][T14925] netlink: 'syz.2.2427': attribute type 1 has an invalid length. [ 335.393590][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2427'. [ 335.551242][T14942] xt_l2tp: v2 doesn't support IP mode [ 336.029567][T14978] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2441'. [ 336.123834][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.166194][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.189518][T14989] delete_channel: no stack [ 336.201107][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.216631][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.226764][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.236222][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.245347][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.254097][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.266721][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.275617][T14982] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.733803][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 337.081480][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2457'. [ 337.140785][T15028] vlan0: left allmulticast mode [ 337.160330][T15028] veth0_vlan: left allmulticast mode [ 337.180815][T15028] vlan0: left promiscuous mode [ 337.211349][T15037] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2455'. [ 337.769595][T15045] netlink: 'syz.4.2460': attribute type 13 has an invalid length. [ 337.778061][T15047] netlink: 'syz.4.2460': attribute type 13 has an invalid length. [ 337.957202][T15053] netlink: 'syz.0.2463': attribute type 1 has an invalid length. [ 337.977233][T15053] netlink: 'syz.0.2463': attribute type 1 has an invalid length. [ 338.174204][T15068] netlink: 'syz.2.2470': attribute type 10 has an invalid length. [ 338.415773][T15084] xt_TCPMSS: Only works on TCP SYN packets [ 338.670820][T15090] __nla_validate_parse: 3 callbacks suppressed [ 338.670852][T15090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2476'. [ 339.020651][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'. [ 339.058180][T15104] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2480'. [ 339.446884][T15119] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 339.490576][T15119] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2486'. [ 339.512710][T15119] netlink: 'syz.4.2486': attribute type 1 has an invalid length. [ 339.521550][T15119] netlink: 'syz.4.2486': attribute type 8 has an invalid length. [ 339.555510][T15119] netlink: 582 bytes leftover after parsing attributes in process `syz.4.2486'. [ 339.770033][T15129] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 339.792220][T15131] netlink: 'syz.4.2491': attribute type 1 has an invalid length. [ 339.907166][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 339.936515][T15142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 340.317199][T15164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.362694][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2500'. [ 340.372268][T15168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2501'. [ 340.382481][T15166] netlink: 'syz.3.2500': attribute type 9 has an invalid length. [ 340.391397][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2500'. [ 340.465957][ T47] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.474393][ T47] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.484443][ T47] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.502682][ T47] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.690035][T15177] tipc: Enabled bearer , priority 0 [ 340.717777][T15177] syzkaller0: entered promiscuous mode [ 340.724482][T15177] syzkaller0: entered allmulticast mode [ 340.736742][T15173] wg1 speed is unknown, defaulting to 1000 [ 340.766269][T15177] tipc: Resetting bearer [ 340.787840][T15176] tipc: Resetting bearer [ 340.806369][T15176] tipc: Disabling bearer [ 341.757824][T15226] net_ratelimit: 1019 callbacks suppressed [ 341.757844][T15226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.049730][T15244] bond0: entered promiscuous mode [ 342.055290][T15244] bond_slave_0: entered promiscuous mode [ 342.061133][T15244] bond_slave_1: entered promiscuous mode [ 342.067025][T15244] bridge_slave_1: entered promiscuous mode [ 342.073848][T15244] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 342.081679][T15244] hsr1: entered promiscuous mode [ 342.239958][T15248] macsec0: left promiscuous mode [ 342.245337][T15248] macsec0: left allmulticast mode [ 342.486391][T15220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.092187][T15283] validate_nla: 5 callbacks suppressed [ 343.092206][T15283] netlink: 'syz.3.2533': attribute type 2 has an invalid length. [ 343.342721][T15290] sit1: entered promiscuous mode [ 343.355126][T15290] sit1: entered allmulticast mode [ 344.019519][T15339] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 344.027269][T15338] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 344.252586][T15349] netlink: 'syz.0.2554': attribute type 1 has an invalid length. [ 344.304401][T15349] 8021q: adding VLAN 0 to HW filter on device bond11 [ 344.371155][T15349] : entered promiscuous mode [ 346.547718][T15312] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 346.797251][T15362] __nla_validate_parse: 10 callbacks suppressed [ 346.797270][T15362] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2557'. [ 346.828316][T15361] pim6reg: entered allmulticast mode [ 346.851826][T15367] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 346.868892][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2557'. [ 346.906101][T15367] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 347.301957][T15388] xt_cgroup: path and classid specified [ 347.495865][T15402] netlink: 'syz.1.2567': attribute type 21 has an invalid length. [ 347.513904][T15402] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2567'. [ 347.548474][T15405] netlink: 'syz.1.2567': attribute type 21 has an invalid length. [ 347.561317][T15402] netlink: 'syz.1.2567': attribute type 4 has an invalid length. [ 347.577680][T15406] netlink: 'syz.3.2571': attribute type 1 has an invalid length. [ 347.587476][T15402] netlink: 'syz.1.2567': attribute type 5 has an invalid length. [ 347.605648][T15405] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2567'. [ 347.619922][T15402] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2567'. [ 347.701877][T15406] 8021q: adding VLAN 0 to HW filter on device bond13 [ 347.711254][T15405] netlink: 'syz.1.2567': attribute type 4 has an invalid length. [ 347.725577][T15405] netlink: 'syz.1.2567': attribute type 5 has an invalid length. [ 347.740146][T15405] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2567'. [ 347.750480][T15413] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2575'. [ 347.769355][T15406] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.876848][T15406] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 347.904314][T15428] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.920113][T15406] bond13: (slave batadv1): making interface the new active one [ 347.931567][T15406] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 348.018282][T15431] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.037924][T15433] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 348.474050][T15458] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2584'. [ 348.551907][T15462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.570553][T15462] batadv_slave_0: entered allmulticast mode [ 348.585094][T15462] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2586'. [ 348.909671][T15486] syzkaller0: entered promiscuous mode [ 348.928122][T15486] syzkaller0: entered allmulticast mode [ 348.983355][T15486] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2593'. [ 349.005366][T15492] syzkaller0: entered promiscuous mode [ 349.014234][T15492] syzkaller0: entered allmulticast mode [ 349.105832][T15500] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.517102][T15536] bond8: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 349.528435][T15536] bond8 (unregistering): Released all slaves [ 350.442853][T15549] bond0: Device is already in use. [ 351.981967][T15494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.152494][T15560] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 352.203213][T15570] __nla_validate_parse: 6 callbacks suppressed [ 352.203231][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2614'. [ 352.284147][T15573] netlink: 'syz.2.2612': attribute type 83 has an invalid length. [ 352.323861][T15560] 8021q: adding VLAN 0 to HW filter on device bond11 [ 352.349516][T15572] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 352.421293][T15575] 8021q: adding VLAN 0 to HW filter on device bond12 [ 352.457123][T15575] bond11: (slave bond12): Enslaving as an active interface with a down link [ 352.840370][T15602] netlink: 'syz.3.2623': attribute type 3 has an invalid length. [ 352.850554][T15604] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2625'. [ 355.003699][T15633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2632'. [ 355.040452][T15635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2633'. [ 355.097688][T15637] netlink: 'syz.3.2634': attribute type 19 has an invalid length. [ 355.137003][T15637] netlink: 'syz.3.2634': attribute type 19 has an invalid length. [ 355.164300][T15637] netlink: 'syz.3.2634': attribute type 19 has an invalid length. [ 355.193994][T15641] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 355.213614][T15641] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 355.231765][T15641] gretap3: entered promiscuous mode [ 355.245095][T15641] gretap3: entered allmulticast mode [ 355.260893][T15637] netlink: 'syz.3.2634': attribute type 19 has an invalid length. [ 355.294238][T15637] netlink: 'syz.3.2634': attribute type 19 has an invalid length. [ 355.326417][T15637] netlink: 'syz.3.2634': attribute type 19 has an invalid length. [ 355.361958][T15637] netlink: 'syz.3.2634': attribute type 19 has an invalid length. [ 355.376609][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2640'. [ 355.589293][T15664] xt_l2tp: v2 doesn't support IP mode [ 355.617999][T15668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2643'. [ 355.765260][T15676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.775592][T15677] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2646'. [ 356.248053][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2656'. [ 356.889291][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 356.936560][T15745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 357.256568][T15739] 8021q: adding VLAN 0 to HW filter on device bond8 [ 357.281402][ T5824] wg1 speed is unknown, defaulting to 1000 [ 357.299057][ T5824] syz2: Port: 1 Link DOWN [ 357.371899][T11029] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.428098][T11029] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.475320][T11029] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 357.496898][T11029] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.518229][T11029] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.532687][T11029] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 357.571731][T11029] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.602768][T11029] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.639233][T11029] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 357.649161][T15774] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.677735][T11029] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.709732][T11029] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.729932][T11029] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 357.862143][T15786] __nla_validate_parse: 4 callbacks suppressed [ 357.862163][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2675'. [ 357.949980][T15791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 358.270296][T15807] s5: renamed from vlan1 [ 358.477171][T15815] validate_nla: 30 callbacks suppressed [ 358.477190][T15815] netlink: 'syz.3.2686': attribute type 1 has an invalid length. [ 358.493395][T15815] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2686'. [ 358.503947][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2686'. [ 358.513609][T15820] netlink: 'syz.1.2689': attribute type 3 has an invalid length. [ 358.521520][T15820] netlink: 'syz.1.2689': attribute type 1 has an invalid length. [ 358.533451][T15820] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2689'. [ 360.927706][T15854] netlink: 'syz.2.2696': attribute type 1 has an invalid length. [ 361.165057][T15870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2700'. [ 361.243717][T15859] : entered promiscuous mode [ 361.282220][T15868] netlink: 'syz.3.2702': attribute type 29 has an invalid length. [ 361.305326][T15860] syzkaller1: entered promiscuous mode [ 361.311506][T15860] syzkaller1: entered allmulticast mode [ 361.322759][T15868] netlink: 'syz.3.2702': attribute type 32 has an invalid length. [ 361.344178][T15868] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2702'. [ 361.383060][T15877] netlink: 'syz.3.2702': attribute type 29 has an invalid length. [ 361.474917][T15882] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2704'. [ 361.594088][T15892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2706'. [ 361.600600][T15896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2708'. [ 361.632062][T15891] netlink: 'syz.3.2706': attribute type 9 has an invalid length. [ 361.648716][T15897] netlink: 'syz.3.2706': attribute type 9 has an invalid length. [ 361.886671][T15902] bond12: option resend_igmp: invalid value (32767) [ 361.903114][T15902] bond12: option resend_igmp: allowed values 0 - 255 [ 361.923791][T15902] bond12 (unregistering): Released all slaves [ 362.020762][T15921] sctp: [Deprecated]: syz.1.2717 (pid 15921) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.020762][T15921] Use struct sctp_sack_info instead [ 362.139164][T15921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.371929][T15944] Unsupported ieee802154 address type: 0 [ 363.045352][T15971] wg1 speed is unknown, defaulting to 1000 [ 363.712335][T16028] tipc: Trying to set illegal importance in message [ 363.914432][T16045] __nla_validate_parse: 11 callbacks suppressed [ 363.914449][T16045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2751'. [ 364.477425][T16090] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 364.488683][T16090] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2761'. [ 364.511727][T16090] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2761'. [ 364.528762][T16090] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 364.536992][T16090] netlink: 'syz.1.2761': attribute type 8 has an invalid length. [ 364.545531][T16090] netlink: 606 bytes leftover after parsing attributes in process `syz.1.2761'. [ 364.770686][T16109] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2766'. [ 365.207100][T16122] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2770'. [ 365.244842][T16122] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2770'. [ 365.588374][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 365.842029][T16151] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2779'. [ 365.889096][T16158] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2781'. [ 366.014467][T16162] sctp: [Deprecated]: syz.1.2782 (pid 16162) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.014467][T16162] Use struct sctp_sack_info instead [ 366.085843][T16170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.094216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.632406][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 366.649294][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 366.666651][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 366.679161][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 366.689537][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 366.781487][T16188] wg1 speed is unknown, defaulting to 1000 [ 366.899812][T16199] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 366.937264][T16199] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.131231][T16210] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.220228][T16213] netlink: 'syz.3.2798': attribute type 1 has an invalid length. [ 367.341029][T16198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.360466][T16218] bond0: entered allmulticast mode [ 367.375372][T16218] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 367.497819][T16188] chnl_net:caif_netlink_parms(): no params data found [ 367.800920][T15521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.827558][T15521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 367.843260][T16246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.874758][T16246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.890339][T16246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.921727][T16241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.940790][T16241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.115701][T15521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.141887][T15521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 368.238772][T16239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.312489][T16188] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.324426][T16188] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.333284][T16188] bridge_slave_0: entered allmulticast mode [ 368.344569][T16188] bridge_slave_0: entered promiscuous mode [ 368.408321][T15521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.434985][T15521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 368.539794][T16188] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.561432][T16188] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.571592][T16188] bridge_slave_1: entered allmulticast mode [ 368.592396][T16188] bridge_slave_1: entered promiscuous mode [ 368.628607][T16281] netlink: 'syz.1.2809': attribute type 39 has an invalid length. [ 368.677446][T15521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.706594][T15521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 368.773863][T16188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.802109][ T49] Bluetooth: hci5: command tx timeout [ 368.850578][T16188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.132497][T16188] team0: Port device team_slave_0 added [ 369.207162][T16188] team0: Port device team_slave_1 added [ 369.288125][T16315] __nla_validate_parse: 1 callbacks suppressed [ 369.288146][T16315] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2813'. [ 369.490377][T16188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.505640][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.554011][T16188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.617923][T16317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2814'. [ 369.654487][T16188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.669455][T16328] sctp: [Deprecated]: syz.0.2817 (pid 16328) Use of int in max_burst socket option. [ 369.669455][T16328] Use struct sctp_assoc_value instead [ 369.695229][T16188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.772391][T16188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.934216][T15521] gretap0: left allmulticast mode [ 369.960834][T15521] gretap0: left promiscuous mode [ 369.977628][T15521] bridge0: port 3(gretap0) entered disabled state [ 370.020844][T15521] bridge_slave_0: left promiscuous mode [ 370.029840][T15521] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.358986][T16361] netlink: 'syz.0.2824': attribute type 16 has an invalid length. [ 370.392593][T16361] netlink: 'syz.0.2824': attribute type 3 has an invalid length. [ 370.408893][T16361] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2824'. [ 370.783977][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2824'. [ 370.844986][T15521] bond6 (unregistering): (slave bridge4): Releasing backup interface [ 370.855752][ T5830] Bluetooth: hci5: command tx timeout [ 370.863920][T15521] bond6 (unregistering): (slave bridge4): the permanent HWaddr of slave - 26:04:f5:da:8f:2b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 370.905139][T16379] netlink: 412 bytes leftover after parsing attributes in process `syz.3.2827'. [ 371.000336][T15521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.010590][T15521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.020801][T15521] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 371.031269][T15521] bond0 (unregistering): Released all slaves [ 371.042798][T15521] bond1 (unregistering): Released all slaves [ 371.057619][T15521] bond2 (unregistering): Released all slaves [ 371.071209][T15521] bond3 (unregistering): Released all slaves [ 371.084546][T15521] bond4 (unregistering): Released all slaves [ 371.109390][T15521] bond5 (unregistering): Released all slaves [ 371.124127][T15521] bond6 (unregistering): (slave veth7): Releasing backup interface [ 371.133678][T15521] bond6 (unregistering): Released all slaves [ 371.151607][T15521] bond7 (unregistering): Released all slaves [ 371.165813][T15521] bond8 (unregistering): Released all slaves [ 371.194297][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 371.252332][T16372] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 371.263965][T16188] hsr_slave_0: entered promiscuous mode [ 371.286526][T16188] hsr_slave_1: entered promiscuous mode [ 371.295871][T16188] debugfs: 'hsr0' already exists in 'hsr' [ 371.301642][T16188] Cannot create hsr debugfs directory [ 371.316902][T16352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 371.336941][T15521] 9: left promiscuous mode [ 371.563689][T16396] netlink: 'syz.0.2830': attribute type 26 has an invalid length. [ 371.670329][T15521] tipc: Disabling bearer [ 371.693100][T15521] tipc: Left network mode [ 371.738971][T16397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.823254][T15513] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 372.660997][T15521] hsr_slave_0: left promiscuous mode [ 372.677711][T15521] hsr_slave_1: left promiscuous mode [ 372.689214][T15521] pim6reg (unregistering): left allmulticast mode [ 372.809128][T15521] team0 (unregistering): Port device 26 removed [ 372.822790][T15521] team0 (unregistering): Port device team_slave_0 removed [ 372.934973][ T5830] Bluetooth: hci5: command 0x040f tx timeout [ 373.218125][T15521] IPVS: stop unused estimator thread 0... [ 373.299958][T16469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2844'. [ 374.687016][T16403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 374.715071][T16188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.785240][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 374.794385][T16188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.863792][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 374.889509][T16188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 374.937606][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 374.970019][T16188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.016856][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 375.028185][T16188] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 375.039240][T16499] xt_ecn: cannot match TCP bits for non-tcp packets [ 375.101094][T16497] wg1 speed is unknown, defaulting to 1000 [ 375.700017][T16188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.750912][T16188] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.770332][T16538] netlink: 'syz.4.2857': attribute type 3 has an invalid length. [ 375.785135][T16538] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2857'. [ 375.796977][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.804138][T11024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.842672][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.849903][T15519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.924134][T16543] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 376.069306][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.073113][T16554] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 376.108173][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.121592][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.130821][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.141369][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.150038][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.165089][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.174488][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.187596][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.223658][T16553] openvswitch: netlink: Flow key attr not present in new flow. [ 376.500528][T16578] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20003 [ 376.685554][T16561] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.692954][T16561] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.997650][T16561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.095530][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 377.461593][T11020] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.490780][T11020] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.514915][T15519] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.555434][T15519] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.612491][T15519] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.625870][T15519] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.653373][T15519] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 377.676259][T15519] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.750878][T16188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.795538][T16600] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 377.896608][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2875'. [ 377.919670][T16188] veth0_vlan: entered promiscuous mode [ 377.977424][T16188] veth1_vlan: entered promiscuous mode [ 378.022301][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2878'. [ 378.054521][T16615] Unsupported Adiantum instantiation: (ecb(cast5),twofish) [ 378.070063][T16613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2878'. [ 378.099689][T16188] veth0_macvtap: entered promiscuous mode [ 378.152085][T16618] pimreg3: entered allmulticast mode [ 378.177306][T16188] veth1_macvtap: entered promiscuous mode [ 378.286921][T16632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2882'. [ 378.364906][T16641] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 378.463064][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.501350][T16655] netlink: 'syz.1.2886': attribute type 1 has an invalid length. [ 378.531112][T16655] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2886'. [ 378.584257][T16625] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.592061][T16625] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.191321][T16655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 379.218159][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 379.238028][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2886'. [ 379.396668][T16188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.423790][T16188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.452548][T11024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.509033][T16678] gre2: entered promiscuous mode [ 379.514536][T16678] gre2: entered allmulticast mode [ 379.524112][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2890'. [ 379.541583][T11024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.559056][T11024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.575571][T11024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.871422][T15513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.900232][T15513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.983916][T15519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.003423][T15519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.490198][T16728] netlink: 'syz.2.2786': attribute type 1 has an invalid length. [ 380.491561][T16732] netlink: 'syz.1.2904': attribute type 1 has an invalid length. [ 380.823653][T16732] 8021q: adding VLAN 0 to HW filter on device bond13 [ 380.943062][T16751] __nla_validate_parse: 1 callbacks suppressed [ 380.943329][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2910'. [ 381.457398][T16776] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2917'. [ 381.487755][T16776] netem: invalid attributes len -24 [ 381.504770][T16776] netem: change failed [ 381.759567][T16786] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 382.082844][T16799] bond4: option mode: unable to set because the bond device has slaves [ 382.260099][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.276505][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.286859][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.301356][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.311034][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 382.465935][T16819] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2933'. [ 382.526443][T16819] netlink: 'syz.4.2933': attribute type 1 has an invalid length. [ 382.542873][T16805] wg1 speed is unknown, defaulting to 1000 [ 382.545276][T16819] netlink: 'syz.4.2933': attribute type 1 has an invalid length. [ 382.627108][T16823] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2934'. [ 382.639585][T16823] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2934'. [ 382.663348][T16823] netlink: 'syz.2.2934': attribute type 5 has an invalid length. [ 382.681094][T16823] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2934'. [ 382.714510][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'. [ 382.865449][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 382.881338][T16836] netlink: 'syz.0.2938': attribute type 1 has an invalid length. [ 382.890307][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 382.899804][T16836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2938'. [ 382.910222][T16836] netlink: 'syz.0.2938': attribute type 1 has an invalid length. [ 382.927373][T16838] netlink: 'syz.2.2937': attribute type 4 has an invalid length. [ 382.947472][T16838] netlink: 'syz.2.2937': attribute type 10 has an invalid length. [ 383.006758][T16838] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 383.021952][T16837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.061751][T16805] chnl_net:caif_netlink_parms(): no params data found [ 383.174059][T16850] syzkaller0: entered promiscuous mode [ 383.181653][T16850] syzkaller0: entered allmulticast mode [ 383.281954][T16805] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.298626][T16805] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.313258][T16805] bridge_slave_0: entered allmulticast mode [ 383.327141][T16805] bridge_slave_0: entered promiscuous mode [ 383.350797][T16805] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.366371][T16805] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.373707][T16805] bridge_slave_1: entered allmulticast mode [ 383.386178][T16805] bridge_slave_1: entered promiscuous mode [ 383.479316][T16805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.495741][T16805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.553823][T16805] team0: Port device team_slave_0 added [ 383.572041][T16805] team0: Port device team_slave_1 added [ 383.639236][T16805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.648588][T16805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.696165][T16805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.716807][T16874] delete_channel: no stack [ 383.724481][T16805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.739762][T16805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.802226][T16805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.970495][T16805] hsr_slave_0: entered promiscuous mode [ 383.978497][T16805] hsr_slave_1: entered promiscuous mode [ 383.985496][T16805] debugfs: 'hsr0' already exists in 'hsr' [ 383.997884][T16805] Cannot create hsr debugfs directory [ 384.138540][T16904] net_ratelimit: 25 callbacks suppressed [ 384.138559][T16904] openvswitch: netlink: Flow key attr not present in new flow. [ 384.165862][T16904] netlink: 'syz.2.2956': attribute type 1 has an invalid length. [ 384.190244][T16904] netlink: 'syz.2.2956': attribute type 1 has an invalid length. [ 384.204762][T16904] netlink: 'syz.2.2956': attribute type 2 has an invalid length. [ 384.376160][ T5830] Bluetooth: hci3: command tx timeout [ 384.954028][T16805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 384.966786][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.976669][T16805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 384.996877][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 385.016580][T16805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 385.041005][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 385.063735][T16805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 385.081341][T16805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.238131][T16805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.291308][T16805] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.323203][T11029] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.330434][T11029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.385034][T11029] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.392248][T11029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.815455][T16805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.901730][T16805] veth0_vlan: entered promiscuous mode [ 385.922003][T16805] veth1_vlan: entered promiscuous mode [ 385.994080][T16805] veth0_macvtap: entered promiscuous mode [ 386.017335][T17002] __nla_validate_parse: 18 callbacks suppressed [ 386.017410][T17002] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2983'. [ 386.034132][T17002] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2983'. [ 386.054278][T16805] veth1_macvtap: entered promiscuous mode [ 386.077384][T17002] syzkaller0: entered promiscuous mode [ 386.083119][T17002] syzkaller0: entered allmulticast mode [ 386.124478][T16805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.141793][T16805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.157118][T15516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.177639][T15516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.199495][T15516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.214174][T15516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.380303][T17012] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 386.465157][ T5830] Bluetooth: hci3: command tx timeout [ 386.564303][T17020] sit0: left promiscuous mode [ 386.581639][T17020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.592062][T17020] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.601020][T17020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.534891][ T5830] Bluetooth: hci3: command tx timeout [ 388.663328][T16979] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.812373][T15519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.836755][T15519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.961321][T15519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.991611][T15519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.347685][T17041] sctp: [Deprecated]: syz.2.2994 (pid 17041) Use of int in max_burst socket option. [ 389.347685][T17041] Use struct sctp_assoc_value instead [ 389.489563][T17038] syzkaller0: entered promiscuous mode [ 389.506209][T17038] syzkaller0: entered allmulticast mode [ 389.649940][T17060] validate_nla: 5 callbacks suppressed [ 389.649958][T17060] netlink: 'syz.3.2999': attribute type 1 has an invalid length. [ 389.837054][T17073] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3003'. [ 389.858161][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3006'. [ 390.618820][ T5830] Bluetooth: hci3: command tx timeout [ 391.488851][T17073] 0: renamed from hsr_slave_1 (while UP) [ 391.498232][T17073] 0: entered allmulticast mode [ 391.503631][T17073] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 391.580323][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'. [ 391.729100][T17101] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.3009'. [ 391.979752][T17120] openvswitch: netlink: Duplicate or invalid key (type 0). [ 391.993287][T17120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.549338][T17096] delete_channel: no stack [ 392.566404][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 392.579039][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 392.587140][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 392.609864][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 392.620556][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 392.727706][T17143] wg1 speed is unknown, defaulting to 1000 [ 393.227739][T17143] chnl_net:caif_netlink_parms(): no params data found [ 393.277711][T17164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3030'. [ 393.297222][T17164] netlink: 'syz.3.3030': attribute type 1 has an invalid length. [ 393.482724][T17173] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.696782][T17143] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.723881][T17143] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.747975][T17143] bridge_slave_0: entered allmulticast mode [ 393.759243][T17143] bridge_slave_0: entered promiscuous mode [ 393.777358][T17143] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.795167][T17143] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.806379][T17143] bridge_slave_1: entered allmulticast mode [ 393.830362][T17143] bridge_slave_1: entered promiscuous mode [ 394.131266][T17143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.246272][T17143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.356911][T17143] team0: Port device team_slave_0 added [ 394.387591][T17211] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3040'. [ 394.437896][T17143] team0: Port device team_slave_1 added [ 394.498824][T11020] vlan2: left allmulticast mode [ 394.506330][T11020] geneve0: left allmulticast mode [ 394.511535][T11020] vlan2: left promiscuous mode [ 394.519539][T11020] geneve0: left promiscuous mode [ 394.527807][T11020] bridge0: port 2(vlan2) entered disabled state [ 394.538183][T11020] bridge_slave_0: left promiscuous mode [ 394.545984][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.607698][T11020] dvmrp0: left allmulticast mode [ 394.612873][T11020] pimreg3: left allmulticast mode [ 394.692236][T11020] bond10 (unregistering): (slave ip6gre1): Releasing backup interface [ 394.709117][ T5830] Bluetooth: hci2: command tx timeout [ 394.717123][T11020] ip6gre1 (unregistering): left promiscuous mode [ 394.820599][T11020] bond5 (unregistering): (slave geneve3): Releasing active interface [ 395.101382][T11020] bond7 (unregistering): (slave bridge6): Releasing backup interface [ 395.402343][T11020] bond0 (unregistering): left promiscuous mode [ 395.408624][T11020] bond_slave_0: left promiscuous mode [ 395.414185][T11020] bond_slave_1: left promiscuous mode [ 395.420433][T11020] bridge_slave_1: left promiscuous mode [ 395.427800][T11020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.438875][T11020] bond_slave_0: left allmulticast mode [ 395.447907][T11020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.456799][T11020] bond_slave_1: left allmulticast mode [ 395.463288][T11020] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 395.472823][T11020] bridge_slave_1: left allmulticast mode [ 395.479499][T11020] bond0 (unregistering): Released all slaves [ 395.490052][T11020] bond1 (unregistering): Released all slaves [ 395.503088][T11020] bond2 (unregistering): Released all slaves [ 395.517270][T11020] bond3 (unregistering): Released all slaves [ 395.531851][T11020] bond4 (unregistering): Released all slaves [ 395.551922][T11020] bond5 (unregistering): Released all slaves [ 395.567731][T11020] bond6 (unregistering): Released all slaves [ 395.581961][T11020] bond7 (unregistering): Released all slaves [ 395.599415][T11020] bond8 (unregistering): Released all slaves [ 395.612303][T11020] bond9 (unregistering): Released all slaves [ 395.625845][T11020] bond10 (unregistering): Released all slaves [ 395.639563][T11020] bond11 (unregistering): Released all slaves [ 395.667875][T17143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.676878][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.724458][T17143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.895704][T17143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.913016][T17143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 395.951026][T17143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.036543][T11020] : left promiscuous mode [ 396.143501][T11020] tipc: Disabling bearer [ 396.158522][T17247] ip6t_rpfilter: unknown options [ 396.163616][T11020] tipc: Left network mode [ 396.393541][T17231] syzkaller0: entered promiscuous mode [ 396.401978][T17231] syzkaller0: entered allmulticast mode [ 396.434493][T17143] hsr_slave_0: entered promiscuous mode [ 396.443018][T17143] hsr_slave_1: entered promiscuous mode [ 396.450077][T17143] debugfs: 'hsr0' already exists in 'hsr' [ 396.459044][T17143] Cannot create hsr debugfs directory [ 396.538444][T17257] batman_adv: batadv0: Adding interface: dummy0 [ 396.549960][T17257] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.578547][T17257] batman_adv: batadv0: Interface activated: dummy0 [ 396.620372][T17268] netlink: 'syz.2.3055': attribute type 1 has an invalid length. [ 396.775441][ T5830] Bluetooth: hci2: command tx timeout [ 398.275374][T17261] veth1_virt_wifi: mtu less than device minimum [ 398.330516][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'. [ 398.357463][T17268] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 398.735388][T17303] ip6gre3: entered promiscuous mode [ 398.766897][T17303] ip6gre3: entered allmulticast mode [ 398.776554][T17314] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3061'. [ 398.851003][T15516] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 398.860979][ T5830] Bluetooth: hci2: command tx timeout [ 398.890285][ T5824] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 398.900851][T15516] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 399.139021][ T5824] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 399.208567][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3065'. [ 399.485973][ T5824] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 400.940375][ T5830] Bluetooth: hci2: command tx timeout [ 401.517278][T17339] team0: Port device team_slave_0 removed [ 401.533262][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5 [ 401.648160][T17378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3070'. [ 401.823779][T11020] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode [ 401.881219][T17383] tipc: Resetting bearer [ 401.962614][T17380] nbd2: detected capacity change from 0 to 63 [ 402.005843][ T49] block nbd2: Receive control failed (result -104) [ 402.006304][ T5830] block nbd2: Receive control failed (result -32) [ 402.020674][T17389] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3074'. [ 402.039361][ T8364] block nbd2: Send control failed (result -32) [ 402.072147][ T8364] block nbd2: Request send failed, requeueing [ 402.153791][ T2267] block nbd2: Dead connection, failed to find a fallback [ 402.164855][ T2267] block nbd2: shutting down sockets [ 402.172410][ T2267] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.186748][ T2267] Buffer I/O error on dev nbd2, logical block 1, async page read [ 402.197211][ T8364] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.207034][ T8364] Buffer I/O error on dev nbd2, logical block 2, async page read [ 402.216285][ T8364] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 402.225715][ T8364] Buffer I/O error on dev nbd2, logical block 3, async page read [ 402.411588][T17416] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 402.460124][T17143] [ 402.462483][T17143] ====================================================== [ 402.469498][T17143] WARNING: possible circular locking dependency detected [ 402.476533][T17143] syzkaller #0 Not tainted [ 402.479316][T17422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 402.480940][T17143] ------------------------------------------------------ [ 402.480949][T17143] syz-executor/17143 is trying to acquire lock: [ 402.480960][T17143] ffff88801be9daa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 402.512933][T17143] [ 402.512933][T17143] but task is already holding lock: [ 402.520293][T17143] ffffffff8f37f9e0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 402.528991][T17143] [ 402.528991][T17143] which lock already depends on the new lock. [ 402.528991][T17143] [ 402.539375][T17143] [ 402.539375][T17143] the existing dependency chain (in reverse order) is: [ 402.548373][T17143] [ 402.548373][T17143] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 402.555570][T17143] __mutex_lock+0x1a3/0x1550 [ 402.560671][T17143] get_device_parent+0x16f/0x3a0 [ 402.566116][T17143] device_add+0x2e1/0xb70 [ 402.570956][T17143] device_create+0x269/0x300 [ 402.576065][T17143] msr_device_create+0x33/0x50 [ 402.581341][T17143] cpuhp_invoke_callback+0x445/0x860 [ 402.587146][T17143] cpuhp_thread_fun+0x36b/0x780 [ 402.592519][T17143] smpboot_thread_fn+0x541/0xa50 [ 402.597973][T17143] kthread+0x388/0x470 [ 402.602554][T17143] ret_from_fork+0x514/0xb70 [ 402.607653][T17143] ret_from_fork_asm+0x1a/0x30 [ 402.613018][T17143] [ 402.613018][T17143] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 402.620652][T17143] cpuhp_thread_fun+0x127/0x780 [ 402.626018][T17143] smpboot_thread_fn+0x541/0xa50 [ 402.631469][T17143] kthread+0x388/0x470 [ 402.636041][T17143] ret_from_fork+0x514/0xb70 [ 402.641142][T17143] ret_from_fork_asm+0x1a/0x30 [ 402.646418][T17143] [ 402.646418][T17143] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 402.654133][T17143] cpus_read_lock+0x42/0x160 [ 402.659231][T17143] static_key_disable+0x12/0x20 [ 402.664598][T17143] __inet_hash_connect+0x25bb/0x25c0 [ 402.670401][T17143] tcp_v4_connect+0xd5f/0x19b0 [ 402.675671][T17143] __inet_stream_connect+0x25a/0xdd0 [ 402.681457][T17143] inet_stream_connect+0x66/0xa0 [ 402.686896][T17143] __sys_connect+0x312/0x450 [ 402.691995][T17143] __x64_sys_connect+0x7a/0x90 [ 402.697354][T17143] do_syscall_64+0x15f/0xf80 [ 402.702450][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.708848][T17143] [ 402.708848][T17143] -> #8 (sk_lock-AF_INET){+.+.}-{0:0}: [ 402.716479][T17143] lock_sock_nested+0x41/0x100 [ 402.721757][T17143] inet_shutdown+0x6a/0x390 [ 402.726767][T17143] nbd_mark_nsock_dead+0x2e9/0x560 [ 402.732410][T17143] recv_work+0x1c2e/0x1d40 [ 402.737341][T17143] process_scheduled_works+0xb5d/0x1860 [ 402.743684][T17143] worker_thread+0xa53/0xfc0 [ 402.748885][T17143] kthread+0x388/0x470 [ 402.753470][T17143] ret_from_fork+0x514/0xb70 [ 402.758574][T17143] ret_from_fork_asm+0x1a/0x30 [ 402.763854][T17143] [ 402.763854][T17143] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 402.771490][T17143] __mutex_lock+0x1a3/0x1550 [ 402.776592][T17143] nbd_queue_rq+0x37b/0x1100 [ 402.781692][T17143] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 402.787746][T17143] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 402.794580][T17143] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 402.801073][T17143] blk_mq_run_hw_queue+0x348/0x4f0 [ 402.806703][T17143] blk_mq_dispatch_list+0xd16/0xe10 [ 402.812415][T17143] blk_mq_flush_plug_list+0x48d/0x570 [ 402.818296][T17143] __blk_flush_plug+0x3ed/0x4d0 [ 402.823655][T17143] __submit_bio+0x28d/0x580 [ 402.828664][T17143] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 402.834802][T17143] block_read_full_folio+0x599/0x830 [ 402.840593][T17143] filemap_read_folio+0x137/0x3b0 [ 402.846123][T17143] do_read_cache_folio+0x358/0x590 [ 402.851748][T17143] read_part_sector+0xb6/0x2b0 [ 402.857016][T17143] adfspart_check_ICS+0xb1/0x960 [ 402.862456][T17143] bdev_disk_changed+0x817/0x1770 [ 402.867985][T17143] blkdev_get_whole+0x380/0x510 [ 402.873343][T17143] bdev_open+0x31e/0xd30 [ 402.878088][T17143] blkdev_open+0x470/0x610 [ 402.883105][T17143] do_dentry_open+0x785/0x14e0 [ 402.888374][T17143] vfs_open+0x3b/0x340 [ 402.892955][T17143] path_openat+0x2e08/0x3860 [ 402.898160][T17143] do_file_open+0x23e/0x4a0 [ 402.903172][T17143] do_sys_openat2+0x113/0x200 [ 402.908355][T17143] __x64_sys_openat+0x138/0x170 [ 402.913711][T17143] do_syscall_64+0x15f/0xf80 [ 402.918808][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.925206][T17143] [ 402.925206][T17143] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 402.932407][T17143] __mutex_lock+0x1a3/0x1550 [ 402.937605][T17143] nbd_queue_rq+0xc6/0x1100 [ 402.942618][T17143] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 402.948669][T17143] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 402.955513][T17143] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 402.962008][T17143] blk_mq_run_hw_queue+0x348/0x4f0 [ 402.967636][T17143] blk_mq_dispatch_list+0xd16/0xe10 [ 402.973342][T17143] blk_mq_flush_plug_list+0x48d/0x570 [ 402.979219][T17143] __blk_flush_plug+0x3ed/0x4d0 [ 402.984572][T17143] __submit_bio+0x28d/0x580 [ 402.989584][T17143] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 402.995724][T17143] block_read_full_folio+0x599/0x830 [ 403.001523][T17143] filemap_read_folio+0x137/0x3b0 [ 403.007053][T17143] do_read_cache_folio+0x358/0x590 [ 403.012689][T17143] read_part_sector+0xb6/0x2b0 [ 403.017970][T17143] adfspart_check_ICS+0xb1/0x960 [ 403.023506][T17143] bdev_disk_changed+0x817/0x1770 [ 403.029038][T17143] blkdev_get_whole+0x380/0x510 [ 403.034413][T17143] bdev_open+0x31e/0xd30 [ 403.039160][T17143] blkdev_open+0x470/0x610 [ 403.044084][T17143] do_dentry_open+0x785/0x14e0 [ 403.049354][T17143] vfs_open+0x3b/0x340 [ 403.053927][T17143] path_openat+0x2e08/0x3860 [ 403.059117][T17143] do_file_open+0x23e/0x4a0 [ 403.064133][T17143] do_sys_openat2+0x113/0x200 [ 403.069317][T17143] __x64_sys_openat+0x138/0x170 [ 403.074674][T17143] do_syscall_64+0x15f/0xf80 [ 403.079772][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.086169][T17143] [ 403.086169][T17143] -> #5 (set->srcu){.+.+}-{0:0}: [ 403.093276][T17143] __synchronize_srcu+0xca/0x300 [ 403.098723][T17143] elevator_switch+0x1e8/0x7a0 [ 403.103991][T17143] elevator_change+0x2cc/0x450 [ 403.109255][T17143] elevator_set_default+0x36c/0x430 [ 403.114956][T17143] blk_register_queue+0x3e9/0x4e0 [ 403.120488][T17143] __add_disk+0x677/0xd50 [ 403.125322][T17143] add_disk_fwnode+0xfb/0x480 [ 403.130503][T17143] nbd_dev_add+0x72c/0xb50 [ 403.135437][T17143] nbd_init+0x168/0x1f0 [ 403.140102][T17143] do_one_initcall+0x250/0x870 [ 403.145376][T17143] do_initcall_level+0x104/0x190 [ 403.150818][T17143] do_initcalls+0x59/0xa0 [ 403.155654][T17143] kernel_init_freeable+0x2a6/0x3e0 [ 403.161797][T17143] kernel_init+0x1d/0x1d0 [ 403.166642][T17143] ret_from_fork+0x514/0xb70 [ 403.171743][T17143] ret_from_fork_asm+0x1a/0x30 [ 403.177019][T17143] [ 403.177019][T17143] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 403.184825][T17143] __mutex_lock+0x1a3/0x1550 [ 403.189937][T17143] elevator_change+0x1b3/0x450 [ 403.195206][T17143] elevator_set_none+0xb5/0x140 [ 403.200558][T17143] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 403.206870][T17143] nbd_start_device+0x17f/0xb10 [ 403.212225][T17143] nbd_genl_connect+0x165b/0x1cf0 [ 403.217759][T17143] genl_family_rcv_msg_doit+0x22a/0x330 [ 403.223812][T17143] genl_rcv_msg+0x61c/0x7a0 [ 403.228820][T17143] netlink_rcv_skb+0x232/0x4b0 [ 403.234092][T17143] genl_rcv+0x28/0x40 [ 403.238578][T17143] netlink_unicast+0x75c/0x8e0 [ 403.243848][T17143] netlink_sendmsg+0x813/0xb40 [ 403.249119][T17143] ____sys_sendmsg+0x972/0x9f0 [ 403.254393][T17143] ___sys_sendmsg+0x2a5/0x360 [ 403.259584][T17143] __x64_sys_sendmsg+0x1bd/0x2a0 [ 403.265031][T17143] do_syscall_64+0x15f/0xf80 [ 403.270133][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.276533][T17143] [ 403.276533][T17143] -> #3 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 403.285555][T17143] blk_alloc_queue+0x546/0x680 [ 403.290843][T17143] __blk_mq_alloc_disk+0x197/0x390 [ 403.296481][T17143] nbd_dev_add+0x499/0xb50 [ 403.301420][T17143] nbd_init+0x168/0x1f0 [ 403.306091][T17143] do_one_initcall+0x250/0x870 [ 403.311368][T17143] do_initcall_level+0x104/0x190 [ 403.316830][T17143] do_initcalls+0x59/0xa0 [ 403.321671][T17143] kernel_init_freeable+0x2a6/0x3e0 [ 403.327378][T17143] kernel_init+0x1d/0x1d0 [ 403.332217][T17143] ret_from_fork+0x514/0xb70 [ 403.337402][T17143] ret_from_fork_asm+0x1a/0x30 [ 403.342678][T17143] [ 403.342678][T17143] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 403.349878][T17143] fs_reclaim_acquire+0x71/0x100 [ 403.355321][T17143] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 403.361550][T17143] alloc_inode+0xb8/0x1b0 [ 403.366387][T17143] iget_locked+0x131/0x6a0 [ 403.371312][T17143] kernfs_get_inode+0x4f/0x780 [ 403.376584][T17143] kernfs_get_tree+0x5cd/0x980 [ 403.381857][T17143] sysfs_get_tree+0x46/0x110 [ 403.386956][T17143] vfs_get_tree+0x92/0x2a0 [ 403.391884][T17143] do_new_mount+0x341/0xd30 [ 403.396892][T17143] __se_sys_mount+0x31d/0x420 [ 403.402077][T17143] do_syscall_64+0x15f/0xf80 [ 403.407172][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.413566][T17143] [ 403.413566][T17143] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 403.421638][T17143] down_write+0x96/0x200 [ 403.426397][T17143] kernfs_remove_by_name_ns+0x4e/0x140 [ 403.432366][T17143] device_links_driver_bound+0x54f/0x14e0 [ 403.438590][T17143] driver_bound+0xd8/0x2e0 [ 403.443516][T17143] really_probe+0x789/0xaf0 [ 403.448524][T17143] __driver_probe_device+0x18c/0x320 [ 403.454313][T17143] driver_probe_device+0x4f/0x240 [ 403.459844][T17143] __device_attach_driver+0x279/0x430 [ 403.465720][T17143] bus_for_each_drv+0x258/0x2f0 [ 403.471085][T17143] __device_attach+0x2c5/0x450 [ 403.476357][T17143] device_initial_probe+0xa1/0xd0 [ 403.481888][T17143] bus_probe_device+0x12a/0x220 [ 403.487241][T17143] device_add+0x7b6/0xb70 [ 403.492078][T17143] faux_device_create_with_groups+0x189/0x290 [ 403.498649][T17143] regulator_dummy_init+0x19/0x40 [ 403.504181][T17143] regulator_init+0xca/0x110 [ 403.509273][T17143] do_one_initcall+0x250/0x870 [ 403.514545][T17143] do_initcall_level+0x104/0x190 [ 403.519995][T17143] do_initcalls+0x59/0xa0 [ 403.524831][T17143] kernel_init_freeable+0x2a6/0x3e0 [ 403.530536][T17143] kernel_init+0x1d/0x1d0 [ 403.535379][T17143] ret_from_fork+0x514/0xb70 [ 403.540475][T17143] ret_from_fork_asm+0x1a/0x30 [ 403.545751][T17143] [ 403.545751][T17143] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 403.554337][T17143] __lock_acquire+0x15a5/0x2cf0 [ 403.559693][T17143] lock_acquire+0x106/0x350 [ 403.564704][T17143] down_read+0x47/0x2e0 [ 403.569366][T17143] kernfs_remove+0x35/0x80 [ 403.574293][T17143] __kobject_del+0xe1/0x330 [ 403.579304][T17143] kobject_del+0x45/0x60 [ 403.584060][T17143] cleanup_glue_dir+0x1a3/0x220 [ 403.589417][T17143] device_del+0x780/0x8f0 [ 403.594249][T17143] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 403.601168][T17143] unregister_netdevice_queue+0x31f/0x360 [ 403.607388][T17143] nsim_destroy+0x20b/0x780 [ 403.612395][T17143] __nsim_dev_port_del+0x14f/0x200 [ 403.618014][T17143] nsim_dev_reload_destroy+0x288/0x490 [ 403.623983][T17143] nsim_drv_remove+0x58/0x170 [ 403.629168][T17143] device_release_driver_internal+0x46f/0x870 [ 403.635743][T17143] bus_remove_device+0x455/0x570 [ 403.641181][T17143] device_del+0x527/0x8f0 [ 403.646013][T17143] device_unregister+0x21/0xf0 [ 403.651283][T17143] del_device_store+0x2b0/0x370 [ 403.656650][T17143] kernfs_fop_write_iter+0x3af/0x540 [ 403.662438][T17143] vfs_write+0x61d/0xb90 [ 403.667188][T17143] ksys_write+0x150/0x270 [ 403.672028][T17143] do_syscall_64+0x15f/0xf80 [ 403.677154][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.683555][T17143] [ 403.683555][T17143] other info that might help us debug this: [ 403.683555][T17143] [ 403.693772][T17143] Chain exists of: [ 403.693772][T17143] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 403.693772][T17143] [ 403.707139][T17143] Possible unsafe locking scenario: [ 403.707139][T17143] [ 403.714567][T17143] CPU0 CPU1 [ 403.719917][T17143] ---- ---- [ 403.725262][T17143] lock(gdp_mutex); [ 403.729141][T17143] lock(cpuhp_state-up); [ 403.735972][T17143] lock(gdp_mutex); [ 403.742375][T17143] rlock(&root->kernfs_supers_rwsem); [ 403.747819][T17143] [ 403.747819][T17143] *** DEADLOCK *** [ 403.747819][T17143] [ 403.755950][T17143] 8 locks held by syz-executor/17143: [ 403.761300][T17143] #0: ffff88803525a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 403.770174][T17143] #1: ffff888072581480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 403.779908][T17143] #2: ffff8880294ed4b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 403.789921][T17143] #3: ffffffff8f641a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 403.800169][T17143] #4: ffff888055e2c128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 403.810763][T17143] #5: ffff888055e87258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 403.820759][T17143] #6: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x113/0x780 [ 403.829705][T17143] #7: ffffffff8f37f9e0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 403.838824][T17143] [ 403.838824][T17143] stack backtrace: [ 403.844713][T17143] CPU: 0 UID: 0 PID: 17143 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 403.844729][T17143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 403.844744][T17143] Call Trace: [ 403.844751][T17143] [ 403.844758][T17143] dump_stack_lvl+0xe8/0x150 [ 403.844778][T17143] print_circular_bug+0x2e1/0x300 [ 403.844800][T17143] check_noncircular+0x12e/0x150 [ 403.844821][T17143] __lock_acquire+0x15a5/0x2cf0 [ 403.844846][T17143] ? kernfs_remove+0x35/0x80 [ 403.844863][T17143] lock_acquire+0x106/0x350 [ 403.844879][T17143] ? kernfs_remove+0x35/0x80 [ 403.844901][T17143] down_read+0x47/0x2e0 [ 403.844918][T17143] ? kernfs_remove+0x35/0x80 [ 403.844937][T17143] kernfs_remove+0x35/0x80 [ 403.844955][T17143] __kobject_del+0xe1/0x330 [ 403.844974][T17143] kobject_del+0x45/0x60 [ 403.844990][T17143] cleanup_glue_dir+0x1a3/0x220 [ 403.845007][T17143] device_del+0x780/0x8f0 [ 403.845024][T17143] ? __pfx_device_del+0x10/0x10 [ 403.845044][T17143] ? netdev_unregister_kobject+0x344/0x450 [ 403.845061][T17143] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 403.845082][T17143] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 403.845098][T17143] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 403.845122][T17143] unregister_netdevice_queue+0x31f/0x360 [ 403.845137][T17143] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 403.845154][T17143] nsim_destroy+0x20b/0x780 [ 403.845173][T17143] __nsim_dev_port_del+0x14f/0x200 [ 403.845193][T17143] nsim_dev_reload_destroy+0x288/0x490 [ 403.845213][T17143] nsim_drv_remove+0x58/0x170 [ 403.845231][T17143] ? __pfx_nsim_bus_remove+0x10/0x10 [ 403.845248][T17143] device_release_driver_internal+0x46f/0x870 [ 403.845267][T17143] bus_remove_device+0x455/0x570 [ 403.845283][T17143] ? __pfx_bus_remove_device+0x10/0x10 [ 403.845296][T17143] ? kernfs_remove_by_name_ns+0x101/0x140 [ 403.845310][T17143] device_del+0x527/0x8f0 [ 403.845323][T17143] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.845340][T17143] ? __pfx_device_del+0x10/0x10 [ 403.845356][T17143] ? lockdep_hardirqs_on+0x7a/0x110 [ 403.845373][T17143] device_unregister+0x21/0xf0 [ 403.845388][T17143] del_device_store+0x2b0/0x370 [ 403.845405][T17143] ? __pfx_del_device_store+0x10/0x10 [ 403.845421][T17143] ? __pfx_del_device_store+0x10/0x10 [ 403.845436][T17143] ? sysfs_file_kobj+0x1a/0x230 [ 403.845453][T17143] ? __pfx_sysfs_kf_write+0x10/0x10 [ 403.845467][T17143] kernfs_fop_write_iter+0x3af/0x540 [ 403.845483][T17143] vfs_write+0x61d/0xb90 [ 403.845503][T17143] ? __pfx_vfs_write+0x10/0x10 [ 403.845522][T17143] ? do_sys_openat2+0x14c/0x200 [ 403.845536][T17143] ? kmem_cache_free+0x180/0x630 [ 403.845554][T17143] ? fd_install+0x94/0x3d0 [ 403.845573][T17143] ksys_write+0x150/0x270 [ 403.845592][T17143] ? __pfx_ksys_write+0x10/0x10 [ 403.845612][T17143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.845626][T17143] do_syscall_64+0x15f/0xf80 [ 403.845642][T17143] ? clear_bhb_loop+0x40/0x90 [ 403.845657][T17143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.845673][T17143] RIP: 0033:0x7f3e71d5d04e [ 403.845690][T17143] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 403.845701][T17143] RSP: 002b:00007fff8fefe988 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.845715][T17143] RAX: ffffffffffffffda RBX: 0000555581954500 RCX: 00007f3e71d5d04e [ 403.845725][T17143] RDX: 0000000000000001 RSI: 00007fff8fefea10 RDI: 0000000000000005 [ 403.845734][T17143] RBP: 00007f3e71e33514 R08: 0000000000000000 R09: 0000000000000000 [ 403.845742][T17143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.845750][T17143] R13: 00007fff8fefea10 R14: 00007f3e72b44620 R15: 0000000000000003 [ 403.845765][T17143] [ 404.208638][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 404.420490][T11020] hsr_slave_0: left promiscuous mode [ 404.426404][T11020] hsr_slave_1: left promiscuous mode [ 404.438981][T11020] pim6reg (unregistering): left allmulticast mode [ 404.642681][T11020] team0 (unregistering): Port device team_slave_1 removed [ 404.653044][T11020] team0 (unregistering): Port device team_slave_0 removed [ 405.026069][T11020] IPVS: stop unused estimator thread 0... [ 405.247137][T17419] caif:caif_disconnect_client(): nothing to disconnect [ 405.452547][T11020] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.520577][T11020] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.570069][T11020] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.618451][T11020] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.687244][T11020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.751386][T11020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.800001][T11020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.859819][T11020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.935604][ T5490] 8021q: adding VLAN 0 to HW filter on device eth5 [ 405.951900][T11020] bridge_slave_1: left allmulticast mode [ 405.957729][T11020] bridge_slave_1: left promiscuous mode [ 405.963353][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.971576][T11020] bridge_slave_0: left allmulticast mode [ 405.978021][T11020] bridge_slave_0: left promiscuous mode [ 405.983702][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.992938][T11020] bridge_slave_1: left allmulticast mode [ 405.998814][T11020] bridge_slave_1: left promiscuous mode [ 406.004461][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.013641][T11020] bridge_slave_0: left allmulticast mode [ 406.019384][T11020] bridge_slave_0: left promiscuous mode [ 406.026003][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.035441][T11020] bridge_slave_1: left allmulticast mode [ 406.041077][T11020] bridge_slave_1: left promiscuous mode [ 406.047423][T11020] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.055533][T11020] bridge_slave_0: left allmulticast mode [ 406.061175][T11020] bridge_slave_0: left promiscuous mode [ 406.067105][T11020] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.180906][T11020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.191073][T11020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.200487][T11020] bond0 (unregistering): Released all slaves [ 406.239344][T11020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.249665][T11020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.259309][T11020] bond0 (unregistering): Released all slaves [ 406.314552][T11020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.324472][T11020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.334423][T11020] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 406.345472][T11020] bond0 (unregistering): Released all slaves [ 406.594894][ T5490] 8021q: adding VLAN 0 to HW filter on device eth6 [ 406.697281][T11020] hsr_slave_0: left promiscuous mode [ 406.703102][T11020] hsr_slave_1: left promiscuous mode [ 406.709346][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.716981][T11020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.727731][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.735959][T11020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.744389][T11020] batman_adv: batadv0: Interface deactivated: dummy0 [ 406.753535][T11020] batman_adv: batadv0: Removing interface: dummy0 [ 406.763391][T11020] hsr_slave_0: left promiscuous mode [ 406.769469][T11020] hsr_slave_1: left promiscuous mode [ 406.775560][T11020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.783140][T11020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.793884][T11020] hsr_slave_0: left promiscuous mode [ 406.800523][T11020] hsr_slave_1: left promiscuous mode [ 406.806533][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.813931][T11020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.822550][T11020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.830232][T11020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.845973][T11020] veth1_macvtap: left promiscuous mode [ 406.851514][T11020] veth0_macvtap: left promiscuous mode [ 406.857751][T11020] veth1_vlan: left promiscuous mode [ 406.863021][T11020] veth0_vlan: left promiscuous mode [ 406.869249][T11020] veth1_macvtap: left promiscuous mode [ 406.875052][T11020] veth0_macvtap: left promiscuous mode [ 406.880687][T11020] veth1_vlan: left promiscuous mode [ 406.886377][T11020] veth0_vlan: left promiscuous mode [ 407.023301][T11020] team0 (unregistering): Port device team_slave_1 removed [ 407.033583][T11020] team0 (unregistering): Port device team_slave_0 removed [ 407.130684][T11020] team0 (unregistering): Port device team_slave_1 removed [ 407.140696][T11020] team0 (unregistering): Port device team_slave_0 removed [ 407.230374][T11020] team0 (unregistering): Port device team_slave_1 removed [ 407.280632][ T5490] 8021q: adding VLAN 0 to HW filter on device eth7 [ 407.548553][ T5490] 8021q: adding VLAN 0 to HW filter on device eth8 [ 407.797233][ T5490] 8021q: adding VLAN 0 to HW filter on device eth9 [ 408.010159][ T5490] 8021q: adding VLAN 0 to HW filter on device eth10 [ 408.201441][ T5490] 8021q: adding VLAN 0 to HW filter on device eth11 [ 408.416105][ T5490] 8021q: adding VLAN 0 to HW filter on device eth12