last executing test programs: 50.21722681s ago: executing program 2 (id=5912): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}}, 0x0) 49.795403271s ago: executing program 2 (id=5916): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "718de8", 0x9, 0x5}) (async) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x4, 0x0, "718de8", 0x9, 0x5}) r2 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) 48.577930125s ago: executing program 2 (id=5923): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, &(0x7f0000000800)=0x36) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)=[0x0, 0x6], 0x0, 0x0, 0x2}}, 0x40) (async, rerun: 64) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x11, 0x4) (rerun: 64) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100)={0x4, "f5ff5f"}, 0x6) 47.578673028s ago: executing program 2 (id=5927): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000001c0)=0x1010020, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x3}], 0x1, 0x10002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x5}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendto$packet(r9, &(0x7f00000008c0)="7f", 0x1, 0x40, 0x0, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 46.022843048s ago: executing program 2 (id=5932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r2, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0xfffffffd, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x73a9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000f7ffffbe0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 45.516787401s ago: executing program 2 (id=5935): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000040040000000000002cb46fde4047101dc9b7b755662f000100000080f6f70f0000003e7af5182572000000000000000044ea718b992597db64ce8fc9e7482c7ac7f8db590825d23e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="f55f58d549f109ac0a3b1187696a83e199260891ab068e9882f065c1576f0d986ef3f0c494a339867f7b414cd13d70c388cccf7f", @ANYBLOB="000000000000000000000100"/28], 0x50) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f0000000380)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)={@dev, 0x0}, &(0x7f0000000340)=0x14) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0x0, r1, 0x5}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket(0x22, 0x2, 0x1) ioctl$IMGETVERSION(r3, 0x80044944, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)=[0x0, 0x6], 0x0, 0x0, 0x2}}, 0x40) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000c23a7361bf9558216425a75583ab2dbafbff5325f6db29e6f1a391afd5d59edd3f419fb10bb4fadbbe846203a4f063720d7270922a5ee5d501e2543cf80074d5567d8b3edbc5e3bb4f532a9e6cb4fad061cd7aeddc06f2e69dbac90e724348a6b9a8c277205bbc4bb84a4c29ab47c0a952914c8090f07347e8a16d11fdff7bc35c2af67aef487240138316b91b3e0c0c277abfb70fdaa131bcc9d2918df41af43b79324fdcabbc0b8addb3e905a5437e24c853d21424be4e4d8c15b7fa40e68499c283d55098623d0a447d9088e949bc5f95c0aa07760dfff7fc30c1aded52357252ceb6a70fdaadd51f9f1055b902bde419899416", @ANYRES16=r5, @ANYBLOB="01002cbd7000fedbdf25090000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030003000000b8ff090002000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x0, 0xffe00001}, {0x16}]}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="60000000020601020000ff01000000000000020030008bac000900020073797a300000000013000300686173683a6e65742c696661636500000e0003006269746d61703a6970000000eaff0300"/96], 0x60}}, 0x4008000) sendto$inet6(r9, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r12, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) r13 = openat$cgroup_pressure(r7, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4000000, 0x1010, r13, 0xaba50000) 22.977072827s ago: executing program 4 (id=6033): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @default, @bpq0, 0x6, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x9, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x4e21, 0x25c4, @local, 0x6}}}, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="702004d3796265db927db9c13b282c0000f8f51c7e805c69da78e7334b2470b8256fae", @ANYRES16=r4, @ANYBLOB="59cf0000000001000000080000001400018006000100020000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000180)={r3, 0x7}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x46, 0x107, 0x70bd28, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc080) sendmmsg$inet6(r1, &(0x7f00000015c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x1000, @mcast2}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @mcast2, 0xfffffff8}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@rthdr={{0x18, 0x29, 0x39, {0x67, 0x0, 0x0, 0x4}}}], 0x18}}], 0x2, 0x84) 22.572275379s ago: executing program 4 (id=6036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0020001000007a00"/20, @ANYRES32=r2, @ANYRESOCT=r3], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 22.243447232s ago: executing program 4 (id=6038): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) socket(0xa, 0x1, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1}]}, 0x3c}}, 0x0) (async) 21.758603733s ago: executing program 4 (id=6041): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}, 0x1, 0x0, 0x0, 0x881}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}}], {0x14}}, 0x3c}}, 0x4804d) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='.']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) ioctl$FICLONE(r3, 0x40049409, r1) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000540)={'ip_vti0\x00', &(0x7f0000000500)=@ethtool_cmd={0x27, 0x0, 0xf, 0xd1cd, 0x9, 0x9, 0x7, 0x6, 0x5, 0x2, 0xa, 0x6, 0x3, 0x2, 0x6, 0x20000000, [0x9, 0x45de]}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000380)=""/241, 0x1004000, 0x1c00, 0x8d, 0x3}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21.499360214s ago: executing program 4 (id=6042): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x470, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x440, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "a85c5ee7375d15c1361f387f7cf538eec23eb1d78ebd25aeb3859af0918c0ac3885b573d42ea8d544f4e656f8e3bad4126c5ad1a0612ea7b07fd02258c691e8e8cb4a723420a99321085b2126ab337bb0f4abcd19e412415fdb038b8798cd23eae4cf5e49b6edacd47b320c004832d60c71ec74a719dc3d055032995f2c647fe796c2e5d9ea837aba5abdd8c05db260edf15b7f595b103f1b45040b30e2acdc06cc6db3bdacacd1168c0da68a20059cf789c18380573c166a2bcbbaf5d35ab5c032f3554193abfb1843f45ed37b8882d5bf8e8f8507973cacb0f9281bed334ef4114c94cf5cf562864a0769753e544c638c8255c809b5053b8d9469fadb35a86"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "cc74d428acd3ede7550e7045fd3b365a389179fb786092a9971d1f4d559fa0d2cf63d60b8831d2bba3a09313685cfc2da5669701ce41b0caf949b04fc324d41e6b4c9b1b50a0fc6ec22342cac545439e29bdd1d526342bc7c7b5f6c699098550777bae884e07fbdd4ed4680d39a16ad3323bd726bef52896ee001f07e3650306853978b9cb148453a41a66be02975c630094ed730fa2cc4a4baeed35e32840682b68a950b68850ae9e18b409770fbfc3d8f1c465d6ea69810037f648b01b8fcf1139281c695db9fa6fce308f11274fd36ee4383c86a5f49f049d707ceaf08937260f5f52dec67f2e1cab45cb9e07fabf5b00"}, @TCA_CHOKE_STAB={0x104, 0x2, "4bb97384751199f71d5450b41a16e48b7515b006583d4eb5aa2504a00c7c3634c698d931e9994b6ff7fb34044da2db171682dc69b870e8f84d805d3fdda07cf40a519ecbf6908117502ddf01e946bc34ddec606a01f2b915e2b6567347171c588d62ef425d64924a7431a3bd8f72cc53014bce17b5b622914a5821e304082e3b3e9cc65669eaef6884fe3810f874a38c3ba6a99f7abf03607068fd0ef1099119c620bf89139dbb54141389bdeeab4d993f2b52bf9743db59005538cc25c249c8dfb0379e7447ac86ac85e1eff5d23b2ee27055993593427daffa7b2e06f4303e0d6e16ba26e896303eb91c92461d8858531f6d6ac300"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x9, 0xfffff95e, 0x19, 0x14, 0xf, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x7f}]}}]}, 0x470}}, 0x20000804) 20.983260654s ago: executing program 4 (id=6044): socketpair(0x18, 0x3, 0xfffffffe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x594}], 0x1, 0x0, 0x6b}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0x19, 0xc, "80b1aae488d84f62e6227693f49259a7c2504bcb40"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "c25765ce15cb5688b202b4ff6ea83d9b53076e99a2a80a137125f410cf776fb57385ca98faae2b1b8292c4f4f3c660ce2050f0a12ac22fa48465a5ed314d102e6b116483979286"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x154, 0x2, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x103, 0x6, "e3dded5a165e45046904817b232635faf9ee47a21bab162c48c43c45467bcf31c572de88bf4dcf7e0530c6f500154fa67d90ac080c13f5458ff606bb505f5eae569795c5592448ad4961e7123809801071cd851de57b1650dd63f463e5244f6f72522fb7f085359bdbd5b1470703509baff556b4c036aa9160ae1bd893603cb14b708bb9ccb72952a185c7fb8f81d1c938d30ace885807b4b45810182fc0ea6e27786008858bad972bf6573a26f708a61d59cb0d64855ff1ece252f3ac096a6addfea46dd15f68c61ea05d24674bc6a0d36e25b0a3dc7f154703ab848f649b73b96f2d224f17b6e785ea136283c40b916895e02ae27f1895e9375d7d19d62e"}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc32b715d4990c46f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0xa4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x2f}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xb2}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x743c832604ee5ef3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x414}, 0x1, 0x0, 0x0, 0x4890}, 0x4006000) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) r14 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r14, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r13, 0x80487436, &(0x7f0000000a40)="480e23") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) 16.243031542s ago: executing program 0 (id=6069): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r1, &(0x7f00000004c0)={0x2, 0x4e22, @multicast2}, 0x10) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x15, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x4, 0x24, 0x0, 0x3}, @timestamp_prespec={0x44, 0x24, 0xf6, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4000000}, {@multicast2, 0x2}, {@loopback, 0x400}, {@broadcast, 0x9}]}, @ssrr={0x89, 0x17, 0x72, [@empty, @dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @loopback, @multicast1]}]}}}}}}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x48) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000600)=@assoc_value={r8, 0x6}, &(0x7f0000000640)=0x8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000480)={r7, r4}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000480)={r7, r4}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r6, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000400)={{r3, &(0x7f00000001c0)='\\\x00', 0x80240, &(0x7f0000000200)={@_ha_fsid={[0x10001, 0x800]}, {0x2, 0x3, 0x7f, 0x4}}, 0x80, &(0x7f0000000240), &(0x7f0000000280)=0x81}, 0x1, &(0x7f00000003c0)=[{0x3, 0xa, &(0x7f00000002c0)='!\x00', &(0x7f0000000300)="ce7b8fe892f9d86e08c7f9cc43278eb8320c9632618d06e335af483583301ded44c184b69ac0edbb3b3643288449ef92a946a52298ca71ee12c73b51268bce59ba7f482c6f22468565290ea3fae0ff42539296cd05f3a3bb2986434f065252278970251599ae086c57bbcf9ecd2e6198685c13ac8c227a4fb80619d880b346f4e9d8d140b954e6040301e30b7bb7c422c3c175e77cd7bc5f728a58ed794105f37e2c1401454d83d6e2702a869776747f39", 0xb1, 0x8}]}) ioctl$PPPIOCDISCONN(r9, 0x7439) (async) ioctl$PPPIOCDISCONN(r9, 0x7439) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x9, 0x9, 0xfffffffffffffffe, 0x1}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@alu={0x7, 0x0, 0x0, 0x9, 0x9, 0xfffffffffffffffe, 0x1}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 15.93603625s ago: executing program 0 (id=6072): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) write$tun(r1, &(0x7f0000000300)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x7, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x3, 0x8}]}}}}}}}, 0x36) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x0) 12.15292518s ago: executing program 0 (id=6076): r0 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x340042, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff1, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) socket$netlink(0x10, 0x3, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x340042, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) socket$unix(0x1, 0x1, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff1, 0x3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (async) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r0) (async) 5.079734595s ago: executing program 32 (id=6044): socketpair(0x18, 0x3, 0xfffffffe, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x594}], 0x1, 0x0, 0x6b}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7fffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xa0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0x19, 0xc, "80b1aae488d84f62e6227693f49259a7c2504bcb40"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "c25765ce15cb5688b202b4ff6ea83d9b53076e99a2a80a137125f410cf776fb57385ca98faae2b1b8292c4f4f3c660ce2050f0a12ac22fa48465a5ed314d102e6b116483979286"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x154, 0x2, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x103, 0x6, "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"}]}, @NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_NEWRULE={0x138, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xc32b715d4990c46f}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1c}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0xa4, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x2f}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xb2}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x743c832604ee5ef3}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x414}, 0x1, 0x0, 0x0, 0x4890}, 0x4006000) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x48, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000040) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r13 = socket$pppl2tp(0x18, 0x1, 0x1) r14 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r14, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r13, 0x80487436, &(0x7f0000000a40)="480e23") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r15, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) 4.456968833s ago: executing program 0 (id=6079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c002400000000000600000000000000000000000000000000000085dc9d9839dc1336", 0x2e}, {&(0x7f00000022c0)="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", 0x1000}, {&(0x7f0000000680)="af277be0f7f5b81ad680e98738bf8f30b1c8cfb89f8ceafa8b307a6d598e3a13444a17928756037947977859f6c4a27b397d0111ab0f5c61389a3942384a369b25892eec1f735afcf5329d43504d0ad787b361b38cd64213dc83730836a1a4d1c1f1d1819184e5c8c5e772d8be467cd68ace", 0x72}], 0x3}, 0x4041) 4.404441011s ago: executing program 3 (id=6080): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000084) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdc02, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x880) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$team(&(0x7f0000000080), r3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1337683e983e170a1386f562ebe72449cfeae7dc9e1c1ec"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7d6374680434ecfd3d0fb989a5352947ae2a3439ecc1ff48"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x8050) 4.045355202s ago: executing program 3 (id=6083): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xff9d}, 0x48) socket$kcm(0x21, 0x2, 0x2) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt(r1, 0x1, 0x7, &(0x7f0000000040)=""/177, &(0x7f0000000100)=0xb1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x8, 0x3, "d61418f3"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f00000002c0)={0x6, 'syzkaller1\x00', {0x8001}, 0xfffe}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x20e, 0xffffffffffffffa3, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfb84877554356c1b, 0x1d4, &(0x7f0000000000), &(0x7f0000000080), 0x7, 0x0, 0x8}, 0x28) 2.631623876s ago: executing program 1 (id=6086): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0xc8, "51f45cba431d33fc36ac338c105a080a1f09d9a59a7abff1d53f27d8028719057bf97aef6c3f26d633b68171b9e2458b2df83f6bc052005e0282f6a2f8fdb224f89713eb95750113f16e92927a4250e11b33815fb9141d5bb50d6260f778c1889e9e2c6f4aa3c4168999935cb4ebfa6edbcb99e5af1cbcc7c3edf61078d86a31e0e4c7b857cd0813c30f488a884ccf966c300c6dd27dae583558d9c9bdfb6ab3dff64c40f894aff3c46f5473f0bdce9a986f81af4a0c2fa957984ad66d7943da868121e9b2dec1d6"}, &(0x7f0000000100)=0xec) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000140)=""/46, 0x2e}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x7ce, 0x4000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0xe}, 0x50) ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000280)={0x4, 0x30, [0x0, 0x3, 0xb, 0x2], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f00000002c0)={0x4000, 0x400, 0x2, 0x101}) r2 = accept(r0, 0x0, &(0x7f0000000300)) sendto$inet6(r2, &(0x7f0000000340)="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", 0x1000, 0x20040800, &(0x7f0000001340)={0xa, 0x4e22, 0xa15, @mcast1, 0x8000}, 0x1c) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000001380)={0x7, [0x2, 0x3], 0x3}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000001400), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x50, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8001}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x89}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2000) sendmsg$AUDIT_SET_FEATURE(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x20, 0x3fa, 0x400, 0x70bd25, 0x0, {0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4085}, 0x20000041) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0x102400, 0x0) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000001680)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x20, r5, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x2000c104) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000001840), r2) r7 = ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x70, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_MS_ADDR6={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x28}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000014}, 0x8000) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r4, 0x40786e88, &(0x7f0000001c40)={{&(0x7f0000001980)=[{0x1, 0x3, 0xc810, {0x5, 0xa99}, 0x8, 0x8000000000000000, 0x5}, {0x6, 0x5, 0xb6, {0x7f00000000000, 0xfffffffffffffff2}, 0x8000, 0x330, 0x3344}, {0x0, 0x8000000000000000, 0x9, {0xffffffffffffff81, 0x5}, 0x1, 0x4, 0x6}, {0x1, 0x8, 0x7, {0x17a800000000}, 0x4, 0x7, 0xfffffffe}, {0x3, 0x0, 0x6e, {0xf, 0x7}, 0x400, 0x67, 0xf496}], 0x5, 0x40, 0xed5, 0x7fff}, {&(0x7f0000001ac0)=[{0xffffffffffffffaa, 0xcb5c}, {0x80000000, 0x8}, {0xc85c, 0x4}, {0x4, 0x95e}, {0x5, 0x1}, {0x7, 0xffffffffffffffff}, {0x7, 0xfffffffffffffffb}, {0x4, 0x4}, {0x1000, 0x4d8a287b}, {0x0, 0x2}], 0xa, 0x10, 0x8, 0x8}, {&(0x7f0000001b80)=[0x6, 0x8001], 0x2, 0x8, 0x8, 0x1}, {&(0x7f0000001bc0)=[{0x6, 0x3ff, 0xe3, 0xfff, 0x5}], 0x1, 0x28, 0x0, 0x5}, {&(0x7f0000001c00)=[0x7, 0x7, 0x3, 0x1, 0x29fe, 0x0, 0x570, 0x3], 0x8, 0x8, 0xb8d, 0x8}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000001cc0)={0x0, 0x4, 0x20}, &(0x7f0000001d00)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001d40)=@assoc_value={r8, 0xfff}, 0x8) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000001d80)=0x8c) setsockopt$ax25_int(r2, 0x101, 0x1, &(0x7f0000001dc0)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000001e00)={r8, 0xcc, 0x3, 0xf, 0x40, 0x2}, &(0x7f0000001e40)=0x14) sendmsg$kcm(r2, &(0x7f00000038c0)={&(0x7f0000001e80)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-generic\x00'}, 0x80, &(0x7f0000002340)=[{&(0x7f0000001f00)="5e560c226ed4673508862a985b282a46fa97b7e90d4bfb911953069ef61ac101a6ddabd0a7d1aed0ea5db18bcae756ce9b7005e4053817d9a05abcf0acc4eb797e857ea1a9ffa165041379b8abdc576db23d76c78eea757a24669ba6b57f06ffe2f73fb3f89e9bbb49627638454cbc24ae67ad59d8d79c524faa09ece47e20746673c8628fe478e79065e33003645d6df0a989db98467a96cb53ae6fe9961030969e4f0ac7303ccc4d0453993d88ede748dafdc6d086efe2cd32eff91dccc43dcc76f92b19", 0xc5}, {&(0x7f0000002000)="4270e0382107eb04fa924f80d85bdd9f57234a1fa256bdcca9b0e2dc4fde3578a9f309202fd9cfc3c38d8811f94a1a222b210c782934866b3f534aed3aaa26cd5a094c7116d6d8f8af0931480c1c7bbfce446e1f5399e757712db984cd8b888c716e75736b8145af0257fd5f6b64fbf64c6f0831239076042f8e60929996122a3666", 0x82}, {&(0x7f00000020c0)="c6a3294b33cdcc32d8b74c6445a61659ce17823df3dc9847439afcca4ee2bdce9bb0374656add61b817fe98f8eb1a01accedbf9492953c7aea5181d913463731a5223f2982bf7eb3390cac3b5d9b7cce83ccc4827cf8e029b50544ad1dc6b96889dcb6216a9fbecc96594eb0c3df1d494b5daa518ee7325d084b135a9640e7dc5ff6cd53c221012792b547403b60d7789efcc236aba8894781dac27d50d99bc75521d1aa71dab4ace90c4ed06e68b02933df9fd87a0decf913f55dc12c8644d7876df191ec918a1d447432787012d05dbfa4affd1ce4663df07cc43d8ae0c0105cadeaa3c94b41", 0xe7}, {&(0x7f00000021c0)="1ba403c365bd59e96d39e9083129d83b278c78c8e1e27e4c6f6728437141d901de20a903f82f228c028058563ba1990ebfd38ede013e83141219f5ddeae342d5b450d1ecd9d7909c5614f22754a8c951694741197c88719a883099769b7492c4f1dc9603f2fc1c1fa0c5a823687d549f10c0b415465926f07f02f84487cb9e302aab49c47c386f88bead611e975d6851a2b027fc256905700b11fee7bf0af95a9bbd64822565fdd35c401c24b1e59f7a46ad246b643bd50ced6bbf8740cfc218a5162cbfc332d785b8", 0xc9}, {&(0x7f00000022c0)="a1e4e9b659532308a539171b2779d541dd72e8f5c290b026a3109cc53a688a18aa40b7c7b6a358a933d749c39e424c9dbdc11a8fd3e888a98317ce29569a85a69a207fd5720fae24f33f8d1dacfbc2fa027c43fa674898f0f11569e98cc2b2167e1c68a65be76c1b1ace071b3b0bb2a062571c59dc0442ae329a26", 0x7b}], 0x5, &(0x7f00000023c0)=[{0x58, 0x117, 0x1, "585b1d409fae115192b8a3bf9dd84f733d0cff76c917902b103287bcfb5887efeab99f466bd49274564134a1045666cb6f1571a82e73df908bcb669bfa798e069217e8a6"}, {0x40, 0x0, 0x4, "62c717f156c5049da73b62aa5c7b34ae049cb4cb873dfddeff9ad8ebf24cb5a348a13ae7089a8e6964a0b0f6d507c5c3"}, {0xc8, 0xff, 0x5, "48383d38661d334051f196c16cb661089ee5befc5059d1970202076918fd898b3f3df6ff08f2032f21d2d40bf94aead6e53e9bdd0d24c22371d8389fd4c8753a52842ccea5e1785e4e261f2cf62709aef41571a1bb94cedcc879825b7a78543c34c3909b1fccfa3d78d972b61858f018de53d4e09767e402bf8f48107e4f8a15c5073e87734ae62b02b2448b7988b6437b6bf4cb4c16a03055bb586edef25a026dea3365dda45c801e0d45a1c7c32ace15ef4ff475933468"}, {0x1010, 0x6, 0x3, "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"}, {0xd8, 0x1, 0x6, "0bba57c744d84a7d060d15dd8cddc070c165f31416e28e51313369dd9800cd1543bf6b1267d96f21bb97c3f22d4f44c459d9c75fc2006ff8f6c36909ce61210935c462f1e2c5c0a8da0b2b83750033a4cee347eca70cd74c51d3b672a25ba01a539ad1dab2e904dcfe09dcf93d89f211c37172d048925bbea85e8ec95c1989464b899954632cf30e52360a793fad22be12497cfb44724c48d143fe76e1a65d4eecf328ba69173b04e93db27ebc4135d6a9382f77a42d21ea7b0ca604292ebb3fe922"}, {0xd8, 0x1, 0x6, "2c47778fcdc4530482fd155e2dfcbb8dc3d88e69074cb77264df839e536359f7504dc940bb3cffc394fe7c39c846cc642fbd0a0468179770696cee1b943087050c717a8cd73ae2b25e2fd69744712ab1ccc758f5837ffa725b1a89c781f7f89103cf6c11de8b55a7f5d5a8ddd5b0c6a0a2db8e2975f64b6b58ba0a5c6ab21ef3ba3be96f9279ebaaa4c6b5577daab22de46e7670c01ee42495ebcbea07cf41bc56e1c0bef490abfaaf6e9559aa29fdd99f6d00ce2fb7442b4a3e9edd6127619dbed85219707d31a4"}, {0xb0, 0x1, 0x4c2, "0b67f4504865b1068d641113b8b1ab4e8207f2ded66217f3a3a0f420650c1833c269463ed2772565214cd95778abfe65447a23aad2de2e31290472c683371a17cff6044e192144c5dacc9592bb9607a1f81c86700721b8915d1e0b5450a3f28d4e22e42fed2fd64173d1d6424fbcef88d371ebb41d4d6cb92e0afca4a068121fe4da4de36bf83480479ccca6e4a0367fe904086357faae2b301c61"}, {0xb0, 0x112, 0xdb95, "de2e67a605441708336af00c085098187ba1601cfdf529ea413083ef43bc6493883e0aa4de37d5b432fa06243dfd1e70addabd24f6047e5fa313d31f9051f16e1b2a29e3325aa7f717062cb93695a1cb3130fedfe188ded26e146a1231cf912eeeb0bb274ede7de2f70e002795b784bc00066cb3d305461f5db9dbe2b36121cf9cdd7e1377cf89a592b2d99a912084f3eba9f3e1bff688fe99de509ee1"}, {0x78, 0x10c, 0x2, "94ca3b769b62f287c350ae3bef0a83fbcab2859eac0c0af543dbdb4d8a274c2abdc6c61251d7abe3e877fb05fd8ea61245b9ca802e7030df02f736431b2f36d673e95d4bf9c925313cd560a5354da783365b69e7e6f64e1185276dae674b591af7ac82"}], 0x14f8}, 0x1000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000003900), r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) 1.740957684s ago: executing program 3 (id=6087): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x14, r0, 0x301, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) (async) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x2, 0x2, 0x9, 0x0, 0x101, 0x1000}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) close(r5) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="f4ffcd"], 0x9) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2b, 'net'}, {0x2d, 'cpuacct'}]}, 0xe) (async) write$tun(r3, &(0x7f0000000240)={@val={0x8, 0x8a7}, @void, @ipv4=@igmp={{0x1a, 0x4, 0x0, 0x4, 0x96, 0x66, 0x0, 0x56, 0x2, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x1f, 0x3f, [@private=0xa010101, @local, @multicast2, @rand_addr=0x64010101, @rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x30}]}, @timestamp_prespec={0x44, 0x1c, 0xb7, 0x3, 0xe, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd53}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x5}]}, @generic={0x18, 0x7, "d90c538d31"}, @cipso={0x86, 0x11, 0x3, [{0x6, 0x5, "e10262"}, {0x5, 0x6, "b34eb31a"}]}]}}, {0x1f, 0x0, 0x0, @rand_addr=0x64010102, "a4cc7c410fb50b2776ea0114b42c7237ec02f693c7740af33355eae92b777db19f22f7528fd2"}}}, 0x9a) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x68, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private2={0xfc, 0x2, '\x00', 0x1}}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x68}, 0x1, 0x620b}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000208000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000002080004400000002205000200070000003c00018008000100636d70003000028008000240000000041400038010000100261fbabdae20b34f1f386d4e080001400000000208e00240000000000900010073797a30"], 0x110}}, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000080)={r11, &(0x7f0000000300), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r10, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r10, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x4a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x2068005) 1.708839535s ago: executing program 1 (id=6088): sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002c00010122bd7005fcffffff0a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="e3710f00217d24965647c62556fdfd5a1c8fa69473fa99bc395b70edf18e3d94a3c2d0f4fdf009c830bb0000000000006e37126edf502069303187fde7bf2ad4841bdac1a83d6b8519b298517c", 0x4d, 0x24000884, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) (async) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002c00010122bd7005fcffffff0a"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) 1.637268759s ago: executing program 0 (id=6089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0xfd, 0xfffff028}, {0x6, 0x0, 0x9, 0x1}]}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 1.263017843s ago: executing program 1 (id=6090): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f1100000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.068188645s ago: executing program 3 (id=6091): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x34f434fefefed754, 0x84) r1 = socket$rxrpc(0x21, 0x2, 0xa) (async) r2 = accept4(r0, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x80, 0x800) ioctl$sock_qrtr_TIOCINQ(r3, 0x541b, &(0x7f0000000240)) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x48, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x600}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) unshare(0x40600) tee(r1, r2, 0x66f, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) (async) r6 = socket(0x1e, 0x4, 0x0) recvmmsg$unix(r6, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/151, 0x97}], 0x1}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000001d40)=""/219, 0xdb}], 0x1}}], 0x4, 0x400122a0, 0x0) (async) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8, 0x1}, 0x20) getsockname$l2tp6(r7, 0x0, &(0x7f0000000080)) (async) r8 = socket(0x18, 0x80805, 0xfffffffe) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind(r9, &(0x7f00000002c0)=@phonet={0x23, 0x1, 0x5, 0xf1}, 0x80) (async) sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYBLOB="0100"], 0x3c}}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000008c0), r12) sendmsg$IEEE802154_LIST_IFACE(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="0100a9bd7000fddbdf251f000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24000011}, 0x8042) 1.013838108s ago: executing program 1 (id=6092): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=0x0], &(0x7f00000000c0)='GPL\x00', 0xf4, 0x0, 0x0, 0x41000, 0x5}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x44, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}}, 0x481d5) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 794.828265ms ago: executing program 0 (id=6093): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockname$packet(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) syz_emit_ethernet(0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="c161102ce2d1467b5543f090884700000000000000000000000000000400000f0f00000000000000000000000000000000000000e00000010000000044102a9000000057000000010000000544147103ac14141a00000002ac1e010100000005418c50ac82d6c3cad0e04a3d97944ec8f21c04d6cecca3bef934e17ecb8436e2363877619710ad8d76084a15ebf1e14ea8d8d519e26f3fbaf0b49f7d46368fdce51748db15c586ff937546"], 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x20080058) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x402) r4 = socket$unix(0x1, 0x5, 0x0) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) r8 = socket$inet6(0xa, 0x5, 0x8) sendto$inet6(r8, 0x0, 0x0, 0x8c0, 0xfffffffffffffffd, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800733268000100030010000000008000000000000000000c00020002000000150000000c000c800800030007"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e20ac1414bb000000000000000002000100000000000000070c00000000030005000000000002004e20ac1e01010000000000000000010014"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000052f00ba304bfc0c4059c255950883a4000000000000000000004a", @ANYRESHEX=r7, @ANYRESDEC=r7, @ANYRES32=r7, @ANYRES8=r7], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801475884a27ec8d024e000000000000000000004e890001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 698.188295ms ago: executing program 3 (id=6094): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRESDEC, @ANYBLOB="4400028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) syz_emit_ethernet(0x82, &(0x7f0000000040)={@multicast, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000001", 0x48, 0x3a, 0x0, @remote, @remote, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000180)={0x0, 0x1e, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r3, 0x1, 0x70bd2a, 0x0, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff0}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x6, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x240280d0}, 0x2000c890) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e23, 0x1}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)="b71eba5e61669ecec857b41f9d30e9f5bbeb268738b468ba0f7a496bc2c1ba8156fb025ad2099c948d8c28b5a835c2b3d8a718c1c63f73a6f85b6447bdbfdf90d5d35ee703d57538d555f8dae4d81ea0be5e1071e3eebab51b8daa6b8804a63c1d03af8aea3bfb639138ee7e1ee9f59e0054dd5db7c1a647a624ee2b6675e02b500d2cc4e598a7d7d5c4317cab912645f1db0a63e06027c485b478dc524c5e80d3d79d931510d43a9de50e61143db119", 0xb0}], 0x1, &(0x7f0000000740)=[{0xb8, 0x115, 0xffffffff, "7c9c68ba0a38d2240fa097cad821205ca5d188fe734ae0c6b7147e6c1a45a94f6921f6ff2b294f258f0892dbeb70fab15060ca59d0c09a80f10b0d7f38c1e05317caf57cb0fda09de9eaa2bab060f38cf67e11a2998a2d50bb4ef8a3cac75654edb9c0b7c32786a48dfddbb02c77be18af37729211fcfec263b143fd27bae7e1c8fd54c04e438fd0d47fa1b4acd81a7177a247f4b7b3fec90a262edd3a846e0d2ef2496e"}, {0xf0, 0x10d, 0x1e7b, "a8449c4f82419365c7c75b676cec0834c534bad18ea91a5116004665e333934e7a6997ec308fa89e92e95abe7547ebb51c3528583944f9efa8726055481f0ea53dd884e9d458ddf30abcd5fa9e1c4ece907ac7fb7fd019d2d924c528a59db73c10cdbef231e1c26ce38cf2a4249958767ed2f637aee742620f250cfb8df0eb90d66951b38bde79af7002b0e0ce675b4b68e3ea64d74f6c327b79b10031e414b3380d050ec01019f8c77abe7b03c104321991b0e72b45fd11dc2b19735739a91f3e10643cf433ea458a11f6d07e86e909afff999a152a52cab588591c3a"}, {0x28, 0x109, 0x5a, "96711b33ca29965da6561d52cc9262da4e7a6b6d"}], 0x1d0}, 0x8c0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x601, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5ca5a54f}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000884}, 0x850) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0xa8, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000002000000"}, @NFTA_MATCH_INFO={0x43, 0x3, "a27651ddb8f6b1f7660b4ff76379cf3428d291d4ef1600c8fb79198b483c375b6ad1b8011371b27e5e905c557c87a3262a6fc7e74afb477c7730aaa6b132f2"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xd0}}, 0x4048010) 586.140051ms ago: executing program 1 (id=6095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112db000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xab, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x72, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x7, 0x800, 0x5, 0x44200, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000007c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%ps \x00'}, 0x20) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x54, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x17, 0xa, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x17f}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x3}, @exit, @tail_call], &(0x7f0000000000)='syzkaller\x00', 0x47, 0xb6, &(0x7f00000002c0)=""/182, 0x41100, 0xa, '\x00', r2, @fallback=0x1, r3, 0x8, &(0x7f00000006c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x4, 0xfff, 0x7}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r6, r8, r9, r10, 0xffffffffffffffff, r11, 0xffffffffffffffff, r12, r13], 0x0, 0x10, 0x3}, 0x94) 94.848384ms ago: executing program 1 (id=6096): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x40000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000200000000000800a000940900000800260094090000"], 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfd, 0x100}, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000001140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYRESHEX=r5, @ANYRES16=r0], 0x4c8}}, 0x4001) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r9, 0x101, 0x19, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) 0s ago: executing program 3 (id=6097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x2) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c002400000000000600000000000000000000000000000000000085dc9d9839dc1336", 0x2e}, {&(0x7f00000022c0)="6037524d630f68287629547bd5c098e381953c405689f3afe4ecbf4ed4395a51945459c395eaca649af3b8c814d4a7b3ea1d03390d36489a06cdceb4c3594f3a58a3759573ceafb0ad718b92a848db8a1485831ecfbebbe0eaf35ed66a33b556b83e780f0c4e1d57a742d23f6f508bd0767c6a9d56673e530c84ae8ebee0d386df54d2565187105b47fcd05bcaf8c51438b452afd1d5ae5087eed240e004d2280e59b764a421243f1f32524cfbb9827782b4414c4adaa21a2b5cb57bed099dd3f2543764f42555d9ca3c0854faa670bb52afe1d94d5499a2bc93272856bbe10d5bd9f0c1e0eb06cef1cc9e84be33591567e9742cfac87f3006ecee023ff3b78e51ad4d9b54c83b81278a714fbbb331e8554d7f7466dbc49875201bceecf24e4755a5836b39f957a35c3148531f4fb4e9462efb76e63fa72fa56c5eb7e552d25772f35fa470355b01bc2e8b172a5a4625143d9e5c9736741e20d00dd9c9ca20de9d57a94d8f95abecf0ab9d88e5a6fb56fcb8d0b791d73cd1800f985f90308420b59cba1aedb05723abb3c738a34282511728cecb31d589a898e23ffc69e6ab2beb6927ee10d9b97adfe2fb9eb5d9338e40c8fdb1b4a8bf5de65ea748610d27bc805f66cdaeaa37c57dce426960644932fad198e9262a0f7414c9573a08eb5297373ed986e66fa9afb853a2c5fdc8e9b7940cf3f5f47b9c5a669bc97fecf36146e3dfd8f133a3d3f201f17d74b18a773c26d3b5c9534b31a3bdde8d3cd85616293df903d3c709378ed48c98fe75117d717ddbf34149b6d20e1c80cb9b8963c9407480f9140427ff4f6ad5d531ff4647a6aa3d8c161f6de3fb4c7d128ffce878a65c678a016bff5feb48744ce39a61aea274d998ffd7834490d9affa71c140f890aa567c66a25b3bd6c538d7ad3338e46e3db8d6c850364a5ef17a678b91f27cdaf48cbd419ae08537192474e8444470bfb06f88f6adccb9a36d3db966d26a2febccb8d70900d2ff66a0b89d1798ecdd9e38ebfcbd34ecfd434a2c5d014a33eb2886cd28ea7037855771e5252133cd008b4b89edab5c94c0309d8b9383cad0f0f7114b70981619bbbc8cb8e8c5386e6ae4fb242b22cbd5bdfe4fb76c6b7d4e5d6a905e38a9eea825fcdfc63387e3491169d81ed3512760abf321fbb4efba571ed84a6d9cd32c4f84c4daba0589cfe3783129e8acf3dc8458063b59d81524b7d49953f8d9e1de5bef0b85bdccce422ed1cdf3dbdbf1dc2f97d40b634238d6e8a80448f745d2f92e26a0c1210319c076293ebea5cc63a6498be04323f0bcff068f56629d5d47fdab38078c7c9192e5d817911792e855780fffa50727fd3eb265230e1759bd178b59b9a94f0ac69f0dcdc02ca49c7068e13ca47f7538172d481d0c923af305ea6d8b10a8f611640043cc840350559859bffae01e39b1e18e08def8ecf47378fe84150f9f139929485cfe5e30c00ffc2540d676a11a34014ad2602beb4362f1d9cc039b3bcd9120cdd0c680583b29475fd4fe1d39c636003b7335e048a7b2a5b9c1d10f6447c4c1b2b7a30fb2e43e63914fc9a9eb60a339f17d302a5c1001dae097af7759f7b9ce8a9f9cf3fa6d09c12c2d10ffacea13faa42459570fc7f7afa2fa14bd6b60a461b849535a26df3b388f88cb3c42218dbd8d7c8ab69dbeb8bad18aa599f6b61955ef0347ac3a94efb47db4e1a784849f0b8e7a5d7f74f8a2935454d7fa471a530b979f610898e8b059949ad0e99259497b88df065e6b82210312c41c1369b84de64b652c8b4a4b11bb5621b8e901235e9df6f3bfa6788f0e96333a4531fa42ae9926d3789ea95b7c6a25ca3eb97cddcc00fcb38ce92ae99719fcf83f3d1659b74b9936affe64d6401f26c5c947e5672a926a01bbee07266314b89659568e1eeb58340973c02cd2955d014e8201adefdb478c82a79a20fe55d67aaa0a8536a34869725fe71525803b24a6b555aec61064244bd8fd068458a5b2b0d4520dde731d9adeee35c22f2d9a49d703a607df6715931b10682ba4947c0f65de0d9017fd26178c70f5bbe0866bac9756e2abd4508f2e7aa7d7e100326dd093d9a4ed2d42506e4dbc4c2b7250d4947083ecab06aa5d8ce1804865508f2d8252c3c170abb45c633cfe09441d114f84a95b50fd578da809e551f583ede7a958b90259c0767db5f082ce0b51be0b78640f4239eb39223fec4c8cf787b5031994f67f84e80887a46b0dca73b88ec75900fa399cbeb34f71e494b643423957db2b8db2d6723ef7cc2bd63786be3f5cbebdd3b277778f40007a6012025fb59f4b93e2165d2215461923a48ae1d85a2ffb7b175021ac9f6ba5923bd38bd359877215f1a951907b583131f512595642ae9f0486aff28cd31473590e14ce7e69e2d2540aa9120a4fa329c74bbe1f1b10e3f80e5e2e88f8f0bb371894bd9a51cce2604b4347cd3ca38e1e19cd169ad24e09f499fda3d851d7403df592a7135bf36a00778e8441580baa0b16d534da6e458cc8bc0b1e0004923971e9e0c7b5a703d5cc210f4ff446b470e2980d2dfe2f17dc9b260d9ba9de441588436be04d7f4a619fcdb9e63d80058d2dd78cad948f6f655cad2ec668174151032c4b1328df3bafcb6bc5174d06760035bd4ac0428e8d4b12324c469cd7959c94c31e95defe4e4ef3f2f719e471ba3ed9264dd8b0abbb3109715e20cfdaffe14715d730740cc1f248f773568e370656b73ec9ebd2efa999a799dbbbf136f8a6ea9c33b101617ca5c2589be00580abbe6ca86381d5fa50ff3fd3a28caac0fa2aeab549f359401966ba72b869b4bf9c3924a9787cd2bfd20707070199f5934c08b36af2ca1d1f2af4bca46e50b1b6c4f5db1be3c86943898db3d87a348c20c0213e27263d607f03c29b2e9b18af1701b850fe59d583962e6e816377f2fac997439e5c3fe40eff6184ad2fffb188d6209583d6ffb70cc0cf1ff50f51a592432b63190f58d413e51f9de7af70f03713cb9db53f2b545845f08a3474c71514a5931f0a1b0f3f43307537a3cb34a60612544a8d179129e79d0ac7b2023430041d93f92a25b2456066aed4c5fff0e308d862a44c55e04ae802d41af3433110154187773b4bf50d2e0b4685c5354bb12d2f2ec5d1c0d3b97041be3b62960a125895c1ab39cdba65e18a999b9221ea00aebf07134e8f3f2bcbb37014e1d1c3da15532a41cb5f7c034f2b47451df8b1532971eb7e3aa87c4c215fcdcaf9435360dc84cb384fe930b146d3255be1be818d3fdbc4e9e88ae546587163fbd0fa5d24119fd238d0e5bbf4274f798fbac5ab442e9e58b55c6c73d9b65d09551eabd3d80360165d8a167d1212ff2bd096839392fe9eee3779ef4332425871e75af3ce70f4c94c3d869506e1fc5b1bbdab43c4bc5cc81576b717480d6f5b0d115db066dd854a28dd8df8f8dfa832fea9946be971b109abc1d1b6d347d4cfcb0b82f4c658fa492a65d19769082a23b29f86b85a7f168c42bc34860b379bbb5659b7127be788c3ccc388ef56b1b8be90b12d5aafef8312d49ad187a66b119cbca30cf142b9dbaea14e2925bfb3378ca6b80c552851111baae180954b4ef2f9c5eedff8b3a2892217d61a6d597ead9d058f22952459e1874338e0b26b05ac97d2642f844a2b4e3a05af9f327d3e8672d81d6d896411e3add9f6e248628db4fa578096bc5ea0d87ba60b204f3790f8e152c5fa8dfb848fc855f2796edfe7569b8ddfa811b81fb3bebf2d5e9f2da4b2451a0d15f60c7d88f5819d3be06a89772aca9c202235bf86f30cb4d2f6fc570dd1dfba415d62efb4a6e0abb38db004a07851f3b8e5117cb5dc6dc4d0298be62cf36db3baf2e4fd6cc6e7dfa4fcecc14e1aaee6144ecd6e25aaab4dd843c64f6810f3fa24ebb982f9dd0e59da19193e4fc28642b4618bb30d170cffc084cc06d1bf7082a3fcd44b923d53eda30970a7b60ba799fb3e653d939893e62c75a2795a397e8a242aa9e1d2b8e7e897ee26c9bf6cd968252da77cefa2327c059b174c90463365861a85f9eb554d543edf5d48f2f686baef306379650eefa5565e4cb1b9fb407479470f8811c3f9e1b39c9b58f0c5ac4b094eeed8085a00a4dba92026ba7bf76f9d299ef8fb78a8a7b744e586161541eb07731a1d1d5a2e5283f6d492d9f0b98562cb67635ddea9692146d0b2b41627fe651435654fcb036ac2319fc204cb48e7774c78101aa414e6b4145cce3f9edbc8a68963d9c6b9036e74abdde81d69d75a29d80b2a373b206264215135aa752250aa8bc93ecc22ba9c52d2f9c2704d6b1bae9ed33cbdb8d9ddb593cca0d69dcaf2776955cf95bca224850c129acb68aa2e5256be7bcad655c86d38ad3d35b192369c9f1131a59f7b6fd8eea0de884f1d06c2d51c2b8fc33d0403ab0729e84ce94057c9d360a78ca47779fd9394d599af920f1782749510ef6f3aa1ad3eab7fea1f6c2dea99aa299a144e0d1b49f6f555cfe02da8d05f4b93e15646aeccbd8de027f3e755ec32012748da34826cf8ee33ae746b84fecbf651109be584898c30714f42c06c3fdf04e9c9b858d6c89407dc218c6198c52da4bd7dd9a118f55e91abf0f8306c2ccfdad17286e1b90f135aabf1beb206eccf48563f4edf355512e806f87d5f97911d43eff35960785f068a2f63ae0d7a7de4adcd6d2902d79a3ac1412400c01a88192a7da907417af993435085e55b66c1957c9b472072ce60b5794ebf7c20c4e32675232e0c3387154e28abb72255210b0eb3f95689f22cefa00f92d2684d8829439cc2fd89cfb2d9e859ce8c3c2c14669efa7a4780e9a5499f7d33abd17454160d28f61ce5dc1b0878290a0e49150ebd529212320275d7dbb5cf5d7bfd88a9977392c7997d6e933e12f1f2664179e0404280556527377d75627ea822dfd7e5e90cba9ba86fe7973e85cca4ea9752497e03d8e59d6653b1c68e4153e5707a39a11f2e499926f9c8d3715600481a972967a4778289b66c67cf255545b364d8d02447fd9bd93623710e46cb6e68c4e4c3f570c6ac113929132d752d889578e373ca49e817909fc9c5db6683a9b87079d0352d2d1131be630fb9976e0cf70e49352d7a99ea10f3fe5aebca8dd47897874afc1e46d8884f5d68318a71785642eb94ee2dc9504b2883b49d3c0c2a40713b8a46e21c7a789155708876b34c45f592fba922401f0054938370b24aab85018ff01eec63f16354921a50ba0a60a7ae5b47b45ccd01eb20a2535f2ad3d5205019b4395bb097cb4585977c8bfc314a3015d988cde6f7cf63bbcc530e1211b739614c7bf9fb2ad54a1d2642be6feb101881ebf4a79ded34ab819ca7bce4103312184a99ecb310a0e0d5c58660517df42f6f845c69cbc05cbe39d85fbd5803b91ee8d69c1a980e36bfbbacfe3fb81bb0293024a2fa598f656910f1a834524f14f710a9a16e0665f132b8bf246c1174a2e9dca59f0ffe9f971278722314435fcaaa15360476d1d939ef29546dd4d08551d82f1968400e3a31e8c8bc6fbbbad52663bd69789bfb36794e001def5f7d302b018cc4a3705fc681b90b4f03ccc73832a15c539126bd88407222f439ea000a28a6c67217940f92fd97dba8697865c182fcd067566755238bdd4d91f46fbda63e6dd843f7d61dae219bf75e80d659886e76447b7783482e78b908046cd042bde22c8e775aa3f0180fb265259e6bc87e3526263e3d86bad0efaa825c5276195f0dbcbcafbe2cb44c8d0e7314d87753b8bf6d10afc6dcbf31e7933bae3bde657be29104d2e257b6417d1e56fa31cbe3a3", 0x1000}, {&(0x7f0000000680)="af277be0f7f5b81ad680e98738bf8f30b1c8cfb89f8ceafa8b307a6d598e3a13444a17928756037947977859f6c4a27b397d0111ab0f5c61389a3942384a369b25892eec1f735afcf5329d43504d0ad787b361b38cd64213dc83730836a1a4d1c1f1d1819184e5c8c5e772d8be467cd68ace", 0x72}], 0x3}, 0x4041) kernel console output (not intermixed with test programs): ) [ 438.834583][T22973] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4741'. [ 438.937882][T22976] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 439.071137][T22973] 0: renamed from hsr_slave_1 (while UP) [ 439.150138][T22973] 0: entered allmulticast mode [ 439.701783][T22996] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4749'. [ 439.762612][T23000] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4750'. [ 439.907783][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 439.915913][ C1] lec:lec_tx_timeout: lec0 [ 440.010137][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 441.771745][T22996] erspan0: left allmulticast mode [ 442.080629][ T5146] Bluetooth: hci2: command 0x0401 tx timeout [ 442.111237][T23015] syzkaller0: entered promiscuous mode [ 442.116755][T23015] syzkaller0: entered allmulticast mode [ 442.209393][T23015] netlink: 'syz.1.4753': attribute type 1 has an invalid length. [ 442.427119][T23024] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4756'. [ 443.210041][ C0] net_ratelimit: 2918 callbacks suppressed [ 443.210060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.230406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 443.245099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.259103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 443.273018][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.286879][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 443.300675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.314637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 443.329958][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 443.344026][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 444.498275][T23083] tipc: Started in network mode [ 444.529630][T23083] tipc: Node identity 9a3bac1ed25a, cluster identity 4711 [ 444.553704][T23083] tipc: Enabled bearer , priority 0 [ 444.609031][T23088] syzkaller0: entered promiscuous mode [ 444.654150][T23088] syzkaller0: entered allmulticast mode [ 444.806368][T23088] tipc: Resetting bearer [ 444.848067][T23081] tipc: Resetting bearer [ 444.961813][T23081] tipc: Disabling bearer [ 445.017858][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 445.025997][ C1] lec:lec_tx_timeout: lec0 [ 445.031175][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 445.349550][T23106] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4778'. [ 445.379309][T21532] bridge0: port 3(wlan0) entered disabled state [ 445.410100][T23109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4778'. [ 445.450303][T21532] bridge_slave_1: left allmulticast mode [ 445.476493][T21532] bridge_slave_1: left promiscuous mode [ 445.494291][T21532] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.546286][T21532] bridge_slave_0: left allmulticast mode [ 445.582828][T21532] bridge_slave_0: left promiscuous mode [ 445.607061][T21532] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.415388][T21532] dvmrp0 (unregistering): left allmulticast mode [ 447.034519][T21532] bond0 (unregistering): (slave bridge8): Releasing backup interface [ 447.045676][T21532] bridge8 (unregistering): left promiscuous mode [ 447.053605][T21532] bridge8 (unregistering): left allmulticast mode [ 447.123354][T21532] bond6 (unregistering): (slave bridge9): Releasing active interface [ 447.201637][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 447.297410][T21532] bond1 (unregistering): Released all slaves [ 447.318385][T21532] bond2 (unregistering): Released all slaves [ 447.340685][T21532] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 447.365144][T21532] bond3 (unregistering): (slave bond4): Releasing active interface [ 447.387579][T21532] bond3 (unregistering): Released all slaves [ 447.413597][T21532] bond4 (unregistering): Released all slaves [ 447.436196][T21532] bond5 (unregistering): (slave lo): Releasing backup interface [ 447.454579][T21532] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 447.477524][T21532] bond5 (unregistering): Released all slaves [ 447.541591][T21532] bond0 (unregistering): Released all slaves [ 447.560604][T21532] bond6 (unregistering): Released all slaves [ 448.219362][ C0] net_ratelimit: 2602 callbacks suppressed [ 448.219381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 448.239061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.253418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 448.256728][T23139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4787'. [ 448.267382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.288652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 448.301810][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.315146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 448.329095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 448.342672][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 448.357553][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 449.175185][T23154] veth11: entered allmulticast mode [ 449.697118][T23173] netlink: 'syz.3.4796': attribute type 1 has an invalid length. [ 449.758492][T23173] netlink: 'syz.3.4796': attribute type 3 has an invalid length. [ 449.797962][T23173] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4796'. [ 450.331792][T23195] netlink: 'syz.0.4801': attribute type 1 has an invalid length. [ 450.425090][T23195] syzkaller0: entered promiscuous mode [ 450.448642][T23195] syzkaller0: entered allmulticast mode [ 450.486646][T23204] netlink: 'syz.0.4801': attribute type 12 has an invalid length. [ 450.814986][T21532] hsr_slave_0: left promiscuous mode [ 450.866927][T21532] hsr_slave_1: left promiscuous mode [ 450.877750][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 450.885832][ C1] lec:lec_tx_timeout: lec0 [ 450.928130][T21532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.936474][T23211] Cannot find set identified by id 65534 to match [ 450.972590][T21532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.228411][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4808'. [ 451.834489][T21532] team0 (unregistering): Port device team_slave_1 removed [ 451.846555][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4814'. [ 451.877861][T21532] team0 (unregistering): Port device team_slave_0 removed [ 452.126475][T23218] dummy0: left allmulticast mode [ 452.133883][T23218] bridge0: port 3(dummy0) entered disabled state [ 452.165997][T23218] bridge_slave_1: left allmulticast mode [ 452.190482][T23218] bridge_slave_1: left promiscuous mode [ 452.207008][T23218] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.254188][T23218] bridge_slave_0: left allmulticast mode [ 452.285325][T23218] bridge_slave_0: left promiscuous mode [ 452.307059][T23218] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.318233][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 452.465764][T23251] netlink: 'syz.1.4816': attribute type 1 has an invalid length. [ 453.137621][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4814'. [ 453.228403][ C0] net_ratelimit: 2441 callbacks suppressed [ 453.228422][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 453.248352][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.262487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 453.276576][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.290720][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 453.292417][T23254] tipc: Enabled bearer , priority 0 [ 453.304690][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.324359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 453.338611][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.352560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 453.366646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.506985][T23281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4822'. [ 453.684536][T23259] syzkaller0: entered promiscuous mode [ 453.715740][T23259] syzkaller0: entered allmulticast mode [ 453.719226][T23286] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 453.876120][T23253] tipc: Resetting bearer [ 454.237997][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 457.482887][T23253] tipc: Disabling bearer [ 457.681757][T23321] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4829'. [ 457.800613][T23328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4829'. [ 458.238549][ C0] net_ratelimit: 3080 callbacks suppressed [ 458.238571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 458.258316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.271418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 458.284894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.298231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 458.311626][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.324873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 458.338240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 458.351415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 458.364974][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 459.103998][T21532] IPVS: stop unused estimator thread 0... [ 459.407097][T23345] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4837'. [ 459.448091][T23353] netlink: 'syz.3.4840': attribute type 58 has an invalid length. [ 459.481952][T23357] netlink: 'syz.3.4840': attribute type 58 has an invalid length. [ 459.512220][T23353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4840'. [ 459.564537][T23357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4840'. [ 459.647362][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4841'. [ 459.680580][T23366] netlink: 'syz.1.4841': attribute type 15 has an invalid length. [ 459.717495][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4841'. [ 459.805592][ T1128] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.815510][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4841'. [ 459.838279][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5600 ms [ 459.846347][ C1] lec:lec_tx_timeout: lec0 [ 459.851237][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 459.878002][ T1128] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.889257][T23366] netlink: 'syz.1.4841': attribute type 15 has an invalid length. [ 459.958687][ T1128] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.975411][T23366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4841'. [ 459.998490][ T1128] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.022369][T23347] tipc: Enabling of bearer rejected, failed to enable media [ 460.044834][T23350] tipc: Enabling of bearer rejected, failed to enable media [ 460.379167][T23388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4848'. [ 460.897461][T23412] netlink: 'syz.4.4851': attribute type 10 has an invalid length. [ 461.295883][T23318] udevd[23318]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 461.415924][T23427] IPv6: sit1: Disabled Multicast RS [ 461.703437][T23433] syzkaller1: entered promiscuous mode [ 461.709867][T23433] syzkaller1: entered allmulticast mode [ 462.212047][T23436] netlink: 'syz.2.4860': attribute type 2 has an invalid length. [ 463.248543][ C0] net_ratelimit: 3104 callbacks suppressed [ 463.248557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.267580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 463.280824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.294184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 463.307262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.314052][T23394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 463.321731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 463.341947][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.356159][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 463.370140][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 463.384108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 463.742866][T23451] __nla_validate_parse: 6 callbacks suppressed [ 463.742886][T23451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4866'. [ 463.774708][T23447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4865'. [ 464.192554][T23469] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4870'. [ 464.857774][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 464.865847][ C1] lec:lec_tx_timeout: lec0 [ 464.933855][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4877'. [ 465.022935][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4877'. [ 465.139564][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4877'. [ 465.314077][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4877'. [ 465.376978][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4877'. [ 465.402518][T23516] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4881'. [ 465.450114][T23501] bond5 (unregistering): Released all slaves [ 465.476325][T23497] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4877'. [ 465.758994][T23527] 8021q: VLANs not supported on ipvlan1 [ 466.299679][T23554] lo: entered promiscuous mode [ 466.328376][T23554] tunl0: entered promiscuous mode [ 466.395435][T23557] netlink: 'syz.1.4888': attribute type 1 has an invalid length. [ 466.440261][T23554] gre0: entered promiscuous mode [ 466.555287][T23554] gretap0: entered promiscuous mode [ 466.594939][T23554] erspan0: entered promiscuous mode [ 466.647145][T23554] ip_vti0: entered promiscuous mode [ 467.036469][T23538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 467.177282][T23554] veth13: entered promiscuous mode [ 467.718453][ T6238] lec:lec_start_xmit: lec0:No lecd attached [ 467.842542][T23599] netlink: 'syz.1.4897': attribute type 12 has an invalid length. [ 468.155083][T23599] bond9: option primary_reselect: invalid value (255) [ 468.259418][ C0] net_ratelimit: 2469 callbacks suppressed [ 468.259437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.279289][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 468.294284][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.308435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 468.322442][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.336457][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 468.350478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.362502][T23619] netlink: 'syz.0.4903': attribute type 1 has an invalid length. [ 468.364417][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 468.384725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 468.398873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 468.448098][T23599] bond9 (unregistering): Released all slaves [ 468.756955][T23621] __nla_validate_parse: 9 callbacks suppressed [ 468.756975][T23621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4904'. [ 469.945481][T23663] netlink: 'syz.2.4912': attribute type 10 has an invalid length. [ 470.062708][T23666] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 470.750930][T23674] sock: sock_timestamping_bind_phc: sock not bind to device [ 470.793950][T23663] team0: Device vxcan1 is of different type [ 470.834843][T23674] Cannot find del_set index 6 as target [ 471.570042][T23683] syzkaller0: entered promiscuous mode [ 471.601126][T23683] syzkaller0: entered allmulticast mode [ 471.851647][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4919'. [ 471.911829][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4919'. [ 471.962614][T23697] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4919'. [ 472.163517][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4920'. [ 472.797893][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 472.806022][ C1] lec:lec_tx_timeout: lec0 [ 472.811145][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 473.270555][ C0] net_ratelimit: 2396 callbacks suppressed [ 473.270575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 473.290477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.305111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 473.319299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.333642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 473.347800][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.361969][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 473.376213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 473.390940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 473.405039][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 476.142509][T23700] hsr_slave_0: left promiscuous mode [ 476.151435][T23700] hsr_slave_1: left promiscuous mode [ 477.116099][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4933'. [ 477.144661][T23741] pim6reg: entered allmulticast mode [ 477.570344][T23758] pim6reg: left allmulticast mode [ 477.686380][T23763] bond9 (unregistering): Released all slaves [ 477.837780][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 477.846052][ C1] lec:lec_tx_timeout: lec0 [ 477.928679][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 477.956339][T23774] netlink: 'syz.0.4939': attribute type 10 has an invalid length. [ 478.387473][T23797] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4947'. [ 478.460127][T23806] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4949'. [ 478.473301][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4949'. [ 478.529959][T23804] SET target dimension over the limit! [ 478.627208][T23816] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4952'. [ 478.702386][T23826] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4951'. [ 478.865042][T23834] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4956'. [ 479.426748][T23856] netlink: 'syz.1.4964': attribute type 15 has an invalid length. [ 479.438377][T23856] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4964'. [ 479.438441][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 479.756730][T23879] s5: renamed from vlan1 (while UP) [ 479.796053][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'. [ 479.797133][T23884] netlink: 'syz.3.4972': attribute type 1 has an invalid length. [ 479.812587][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4969'. [ 479.871060][T23884] netlink: 'syz.3.4972': attribute type 9 has an invalid length. [ 480.108340][T23905] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 480.867971][T23944] syzkaller1: entered promiscuous mode [ 480.873461][T23944] syzkaller1: entered allmulticast mode [ 480.993812][T23963] xt_hashlimit: size too large, truncated to 1048576 [ 481.032502][T23968] netlink: 'syz.0.4993': attribute type 7 has an invalid length. [ 481.050225][T23968] netlink: 'syz.0.4993': attribute type 8 has an invalid length. [ 481.099275][T23970] netlink: 'syz.2.4991': attribute type 10 has an invalid length. [ 481.193390][T23976] netlink: 'syz.3.4994': attribute type 1 has an invalid length. [ 481.221450][T23976] netlink: 'syz.3.4994': attribute type 2 has an invalid length. [ 481.246402][T23970] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 481.465130][T23965] xt_hashlimit: size too large, truncated to 1048576 [ 481.544021][T23986] net_ratelimit: 2791 callbacks suppressed [ 481.544043][T23986] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 481.556403][T23986] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 482.209701][T24018] vlan1 (unregistering): left allmulticast mode [ 482.216344][T24018] veth0_vlan: left allmulticast mode [ 482.693841][T24048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.725862][T24048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.757155][T24048] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 482.915589][T24065] __nla_validate_parse: 7 callbacks suppressed [ 482.915607][T24065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5014'. [ 483.003021][T24048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.038300][T24048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.064473][T24048] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.247255][T24048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.262324][T24048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.275016][T24048] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.294030][T24084] xt_socket: unknown flags 0x50 [ 483.320779][T24084] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5018'. [ 483.404554][T24048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 483.462398][T24048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.513476][T24048] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 483.565586][T24092] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5021'. [ 483.578068][T24092] bridge_slave_1: default FDB implementation only supports local addresses [ 483.740343][T21532] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.749113][T21532] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.757397][T21532] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.818542][T21532] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.833616][T21532] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.852962][T24113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5024'. [ 483.861962][T21532] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.898620][T24113] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5024'. [ 483.915359][T21532] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.926973][T21532] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.948566][T21532] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.957005][T21532] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.973609][T21532] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 483.997186][T21532] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 484.019810][T24124] netlink: 'syz.0.5029': attribute type 1 has an invalid length. [ 484.040088][T24124] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5029'. [ 484.414463][T24155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5038'. [ 484.438244][T24155] openvswitch: netlink: Flow actions attr not present in new flow. [ 484.450356][T24146] syzkaller0: entered promiscuous mode [ 484.455865][T24146] syzkaller0: entered allmulticast mode [ 484.800574][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 484.808670][ C1] lec:lec_tx_timeout: lec0 [ 484.813354][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 485.465765][T24187] netlink: 'syz.2.5045': attribute type 10 has an invalid length. [ 486.215986][T24187] team0 (unregistering): Port device team_slave_0 removed [ 486.244203][T24187] team0 (unregistering): Port device team_slave_1 removed [ 486.750274][T24233] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5057'. [ 486.879574][T24236] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 486.891492][T24236] bond8 (unregistering): Released all slaves [ 487.155228][T24257] vlan3: entered allmulticast mode [ 487.173132][T24257] bond0: entered allmulticast mode [ 487.182424][T24257] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5065'. [ 487.280828][T24257] bond0 (unregistering): Released all slaves [ 487.412852][T24266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5070'. [ 487.845411][T24299] 8021q: adding VLAN 0 to HW filter on device bond9 [ 488.202318][T21537] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xfe [ 488.413834][T24355] __nla_validate_parse: 2 callbacks suppressed [ 488.413853][T24355] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5092'. [ 488.899199][T24328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 488.914960][T24353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.272962][T24390] syzkaller0: entered promiscuous mode [ 489.278848][T24390] syzkaller0: entered allmulticast mode [ 489.328350][T24390] netlink: 'syz.3.5102': attribute type 26 has an invalid length. [ 489.366876][T24393] netlink: 'syz.2.5103': attribute type 22 has an invalid length. [ 489.375322][T24393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5103'. [ 489.478069][T24400] netlink: 216 bytes leftover after parsing attributes in process `syz.0.5106'. [ 489.487280][T24400] netlink: 'syz.0.5106': attribute type 2 has an invalid length. [ 489.500683][T24393] netlink: 'syz.2.5103': attribute type 22 has an invalid length. [ 489.528182][T24393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5103'. [ 489.709132][T24418] tipc: Enabling of bearer rejected, failed to enable media [ 489.837803][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 489.845893][ C1] lec:lec_tx_timeout: lec0 [ 489.929436][T24435] netlink: 'syz.0.5113': attribute type 1 has an invalid length. [ 490.007654][T24412] infiniband syz1: set down [ 490.012471][T24412] infiniband syz1: added bond_slave_0 [ 490.020209][T24412] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 490.025070][T24412] infiniband syz1: Couldn't open port 1 [ 490.094804][T24412] RDS/IB: syz1: added [ 490.102240][T24412] smc: adding ib device syz1 with port count 1 [ 490.108985][T24412] smc: ib device syz1 port 1 has no pnetid [ 490.129727][T24435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 490.369739][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5115'. [ 490.379228][T24448] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5115'. [ 490.476368][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5117'. [ 490.570508][T24453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5117'. [ 491.266378][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5130'. [ 491.287203][T24487] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 491.414354][T24491] !: renamed from dummy0 (while UP) [ 491.655855][T24499] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5134'. [ 491.680193][T24509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.089103][T24529] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 492.107535][T24529] bond10 (unregistering): Released all slaves [ 492.316056][T24553] x_tables: duplicate underflow at hook 1 [ 492.428271][T24560] netlink: 'syz.0.5147': attribute type 4 has an invalid length. [ 492.438179][T24561] netlink: 'syz.0.5147': attribute type 4 has an invalid length. [ 492.786841][T24578] netlink: 'syz.1.5153': attribute type 16 has an invalid length. [ 492.796019][T24578] netlink: 'syz.1.5153': attribute type 17 has an invalid length. [ 492.806799][T24578] lo: left promiscuous mode [ 492.814324][T24578] tunl0: left promiscuous mode [ 492.822972][T24578] gre0: left promiscuous mode [ 492.861379][T24578] gretap0: left promiscuous mode [ 492.870035][T24578] erspan0: left promiscuous mode [ 492.880680][T24578] ip_vti0: left promiscuous mode [ 492.892804][T24578] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.900133][T24578] bridge0: port 2(bridge_slave_1) entered listening state [ 492.915902][T24578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.067476][T24580] lo speed is unknown, defaulting to 1000 [ 493.111209][T24582] netlink: 'syz.1.5154': attribute type 1 has an invalid length. [ 493.180538][T24585] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 493.392954][T24588] openvswitch: netlink: IPv6 tunnel dst address is zero [ 493.690082][T24605] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 493.696555][T24605] 0: hsr_addr_subst_dest: Unknown node [ 494.460095][T24646] syzkaller1: entered promiscuous mode [ 494.465882][T24646] syzkaller1: entered allmulticast mode [ 494.716202][T24670] sctp: [Deprecated]: syz.4.5177 (pid 24670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.716202][T24670] Use struct sctp_sack_info instead [ 494.976050][T24678] nft_compat: unsupported protocol 0 [ 495.113012][T24690] IPv6: NLM_F_CREATE should be specified when creating new route [ 495.381249][T24709] pim6reg1: entered promiscuous mode [ 495.391797][T24709] pim6reg1: entered allmulticast mode [ 495.566829][T24713] veth0: entered promiscuous mode [ 495.582979][T24716] veth0: left promiscuous mode [ 495.632072][T24715] syzkaller0: entered promiscuous mode [ 495.638377][T24715] syzkaller0: entered allmulticast mode [ 495.770632][T24731] __nla_validate_parse: 4 callbacks suppressed [ 495.770651][T24731] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5198'. [ 495.788968][T24731] validate_nla: 1 callbacks suppressed [ 495.788986][T24731] netlink: 'syz.3.5198': attribute type 1 has an invalid length. [ 495.802391][T24731] netlink: 'syz.3.5198': attribute type 3 has an invalid length. [ 495.811468][T24731] netlink: 'syz.3.5198': attribute type 7 has an invalid length. [ 495.819845][T24731] netlink: 'syz.3.5198': attribute type 8 has an invalid length. [ 495.827676][T24731] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5198'. [ 495.870983][T24731] NCSI netlink: No device for ifindex 131092 [ 495.881305][T24737] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 495.966971][T24735] netlink: 'syz.4.5200': attribute type 33 has an invalid length. [ 496.381754][T24775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5212'. [ 496.391654][T24775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5212'. [ 496.426299][T24779] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5211'. [ 496.462135][T24780] netlink: 'syz.2.5213': attribute type 8 has an invalid length. [ 496.669603][T24790] sctp: [Deprecated]: syz.2.5220 (pid 24790) Use of int in max_burst socket option deprecated. [ 496.669603][T24790] Use struct sctp_assoc_value instead [ 496.692140][T24788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5216'. [ 496.706875][T24792] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5216'. [ 496.766317][T24796] syzkaller0: entered promiscuous mode [ 496.774550][T24796] syzkaller0: entered allmulticast mode [ 496.889134][T24787] bridge_slave_0: left allmulticast mode [ 496.897587][T24787] bridge_slave_0: left promiscuous mode [ 496.919099][T24787] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.957427][T24787] bridge_slave_1: left allmulticast mode [ 497.029660][T24787] bridge_slave_1: left promiscuous mode [ 497.068317][T24787] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.097598][T24826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5226'. [ 497.121616][T24827] xt_bpf: check failed: parse error [ 497.127106][T24787] bond0: (slave bond_slave_0): Releasing backup interface [ 497.141673][T24787] bond0: (slave bond_slave_1): Releasing backup interface [ 497.153531][T24827] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5227'. [ 497.163514][T24827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5227'. [ 497.176306][T24787] team0: Port device team_slave_0 removed [ 497.186709][T24787] team0: Port device team_slave_1 removed [ 497.193750][T24787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.232728][T24787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.266090][T24787] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 497.365505][T24798] lo speed is unknown, defaulting to 1000 [ 497.774869][T24862] netlink: 'syz.4.5236': attribute type 1 has an invalid length. [ 497.783777][T24862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 497.860015][T24858] syzkaller0: entered promiscuous mode [ 497.865984][T24858] syzkaller0: entered allmulticast mode [ 497.877901][T24865] netlink: 'syz.2.5234': attribute type 1 has an invalid length. [ 498.797173][T24908] netlink: 'syz.4.5249': attribute type 10 has an invalid length. [ 498.915669][T24914] netlink: 'syz.4.5251': attribute type 1 has an invalid length. [ 499.164589][T24923] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 499.174378][T24923] syzkaller0: entered promiscuous mode [ 499.180642][T24923] syzkaller0: entered allmulticast mode [ 499.302585][T24928] 8021q: VLANs not supported on ip6gre0 [ 500.083376][T24967] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 500.334160][T24988] openvswitch: netlink: Flow actions attr not present in new flow. [ 500.644658][T25001] syzkaller0: entered promiscuous mode [ 500.650298][T25001] syzkaller0: entered allmulticast mode [ 500.709856][T25003] : renamed from team_slave_1 (while UP) [ 501.052099][T25028] __nla_validate_parse: 16 callbacks suppressed [ 501.052118][T25028] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5283'. [ 501.364887][T25056] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 501.404710][T25062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5288'. [ 501.445964][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 501.463308][T25062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5288'. [ 501.486702][T25062] validate_nla: 3 callbacks suppressed [ 501.486722][T25062] netlink: 'syz.3.5288': attribute type 15 has an invalid length. [ 501.510874][T21530] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 501.510956][T25062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5288'. [ 501.519796][T21530] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 501.528548][T25062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5288'. [ 501.528581][T25062] netlink: 'syz.3.5288': attribute type 15 has an invalid length. [ 501.555613][T21530] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 501.598464][T21530] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 501.609071][T25070] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.5293'. [ 501.650313][T25065] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5291'. [ 501.741566][T25070] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 501.773052][T25070] bond7 (unregistering): Released all slaves [ 501.816248][T25087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5297'. [ 501.848931][T25087] netlink: 'syz.1.5297': attribute type 21 has an invalid length. [ 501.868412][T25087] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5297'. [ 501.873897][T25089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5298'. [ 502.143139][T25106] syzkaller1: entered promiscuous mode [ 502.171768][T25106] syzkaller1: entered allmulticast mode [ 502.295390][T25117] lo speed is unknown, defaulting to 1000 [ 502.514778][T25139] pim6reg527: entered allmulticast mode [ 502.549865][T25143] netlink: 'syz.4.5310': attribute type 5 has an invalid length. [ 503.129708][T25171] openvswitch: netlink: Flow key attr not present in new flow. [ 503.258773][T25175] netlink: 'syz.0.5319': attribute type 1 has an invalid length. [ 503.336877][T25175] 8021q: adding VLAN 0 to HW filter on device bond7 [ 503.377111][T25175] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.390104][T25175] netlink: 'syz.0.5319': attribute type 1 has an invalid length. [ 504.012962][T25208] sock: sock_timestamping_bind_phc: sock not bind to device [ 504.081534][T25217] Bluetooth: MGMT ver 1.23 [ 504.094935][T25211] bond8: option resend_igmp: invalid value (32767) [ 504.102842][T25211] bond8: option resend_igmp: allowed values 0 - 255 [ 504.112112][T25211] bond8 (unregistering): Released all slaves [ 504.243473][T25223] netlink: 'syz.4.5335': attribute type 11 has an invalid length. [ 504.275701][T25223] netlink: 'syz.4.5335': attribute type 10 has an invalid length. [ 504.626181][T25251] netlink: 'syz.2.5343': attribute type 1 has an invalid length. [ 504.671624][T25255] netlink: 'syz.4.5346': attribute type 1 has an invalid length. [ 504.746045][T25260] tipc: Failed to remove unknown binding: 66,0,0/1821459148:3781347564/3781347565 [ 504.756615][T25260] tipc: Failed to remove unknown binding: 66,0,0/1821459148:3781347564/3781347565 [ 504.930338][T25269] batadv_slave_0: entered promiscuous mode [ 504.949653][T25268] batadv_slave_0: left promiscuous mode [ 505.013733][T25274] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 505.362304][T25293] netlink: 'syz.0.5358': attribute type 4 has an invalid length. [ 505.612401][T25310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 505.665913][T25310] bond8: (slave veth11): Enslaving as an active interface with a down link [ 505.681501][T25310] netem: incorrect gi model size [ 505.686903][T25310] netem: change failed [ 505.707564][T25310] bond8: (slave veth0_to_bond): making interface the new active one [ 505.728405][T25310] veth0_to_bond: entered promiscuous mode [ 505.746752][T25310] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 505.818083][T25324] tipc: Enabled bearer , priority 0 [ 505.943532][T25324] syzkaller0: entered promiscuous mode [ 505.953432][T25324] syzkaller0: entered allmulticast mode [ 505.962975][T25324] tipc: Resetting bearer [ 505.974878][T25321] tipc: Resetting bearer [ 506.099458][T25339] __nla_validate_parse: 20 callbacks suppressed [ 506.099479][T25339] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5369'. [ 506.302734][T25341] netlink: 788 bytes leftover after parsing attributes in process `syz.2.5370'. [ 506.797885][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5350 ms [ 506.805982][ C1] lec:lec_tx_timeout: lec0 [ 507.590707][T25321] tipc: Disabling bearer [ 507.716265][T21530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.736817][T25359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5375'. [ 507.758357][T21530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.818766][T25374] validate_nla: 1 callbacks suppressed [ 507.818785][T25374] netlink: 'syz.2.5379': attribute type 1 has an invalid length. [ 507.937120][T25374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5379'. [ 507.967384][T25378] x_tables: ip_tables: osf match: used from hooks POSTROUTING, but only valid from PREROUTING/INPUT/FORWARD [ 507.967776][T25374] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5379'. [ 508.013490][T25385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5381'. [ 508.038898][T25387] tipc: Enabled bearer , priority 11 [ 508.048736][T25385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5381'. [ 508.112525][T25385] bond0: entered promiscuous mode [ 508.128164][T25385] bond_slave_0: entered promiscuous mode [ 508.134939][T25385] bond_slave_1: entered promiscuous mode [ 508.155428][T25395] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 508.165517][T25385] bond0: left promiscuous mode [ 508.177600][T25385] bond_slave_0: left promiscuous mode [ 508.184235][T25385] bond_slave_1: left promiscuous mode [ 508.383905][T25408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5386'. [ 508.479590][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 508.545982][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5390'. [ 508.576796][T25420] veth0: entered promiscuous mode [ 508.751982][T25433] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5396'. [ 509.069930][T25430] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.344628][T25430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.378906][T25430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.865090][T25418] veth0: left promiscuous mode [ 509.896649][ T1128] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.919416][ T1128] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 509.955439][ T1128] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 509.970695][ T1128] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 509.996343][ T1128] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 510.006160][ T1128] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 510.037944][ T1128] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.052959][ T1128] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 510.069646][ T1128] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 510.087192][ T1128] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.103229][ T1128] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 510.112362][ T1128] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 510.133883][T25469] netlink: 'syz.3.5406': attribute type 4 has an invalid length. [ 510.142740][T25469] Cannot find add_set index 2 as target [ 510.149640][ T1128] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.172530][ T6140] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.196688][ T6140] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.357534][ T6140] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.850346][T25509] netlink: 'syz.1.5417': attribute type 1 has an invalid length. [ 510.967090][T25509] 8021q: adding VLAN 0 to HW filter on device bond10 [ 510.985581][T25514] syzkaller0: entered promiscuous mode [ 510.998361][T25514] syzkaller0: entered allmulticast mode [ 511.508340][T25546] syzkaller0: entered promiscuous mode [ 511.537130][T25546] syzkaller0: entered allmulticast mode [ 511.574425][T25542] tipc: Enabled bearer , priority 0 [ 511.590830][T25537] tipc: Resetting bearer [ 511.675278][T25532] tipc: Resetting bearer [ 511.780683][T25532] tipc: Disabling bearer [ 512.084239][T25581] netlink: 'syz.0.5434': attribute type 142 has an invalid length. [ 512.350758][T25590] __nla_validate_parse: 9 callbacks suppressed [ 512.350777][T25590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5436'. [ 512.762807][ T5146] block nbd2: Receive control failed (result -107) [ 512.784416][T25612] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5444'. [ 512.804793][T25614] Cannot find del_set index 3 as target [ 512.810061][T25611] nbd2: detected capacity change from 0 to 127 [ 512.820970][T23946] block nbd2: Dead connection, failed to find a fallback [ 512.828120][T25615] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5444'. [ 512.846864][T23946] block nbd2: shutting down sockets [ 512.858015][T23946] blk_print_req_error: 123 callbacks suppressed [ 512.858032][T23946] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.893857][T23946] buffer_io_error: 122 callbacks suppressed [ 512.893873][T23946] Buffer I/O error on dev nbd2, logical block 0, async page read [ 512.911998][T23946] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.938247][T23946] Buffer I/O error on dev nbd2, logical block 1, async page read [ 512.977187][T23946] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.010249][T23946] Buffer I/O error on dev nbd2, logical block 2, async page read [ 513.025959][T23946] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.051909][T23946] Buffer I/O error on dev nbd2, logical block 3, async page read [ 513.083523][T23946] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.109409][T23946] Buffer I/O error on dev nbd2, logical block 0, async page read [ 513.136548][T23946] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.156837][T25613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.171995][T23946] Buffer I/O error on dev nbd2, logical block 1, async page read [ 513.182357][T23946] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.192494][T23946] Buffer I/O error on dev nbd2, logical block 2, async page read [ 513.202412][T23946] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.213582][T23946] Buffer I/O error on dev nbd2, logical block 3, async page read [ 513.221695][T23946] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.231482][T23946] Buffer I/O error on dev nbd2, logical block 0, async page read [ 513.241598][T23946] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 513.251508][T23946] Buffer I/O error on dev nbd2, logical block 1, async page read [ 513.264906][T23946] ldm_validate_partition_table(): Disk read failed. [ 513.272681][T23946] Dev nbd2: unable to read RDB block 0 [ 513.279494][T23946] nbd2: unable to read partition table [ 513.312332][T23946] ldm_validate_partition_table(): Disk read failed. [ 513.329298][T23946] Dev nbd2: unable to read RDB block 0 [ 513.345582][T23946] nbd2: unable to read partition table [ 513.406558][T25647] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 513.431470][T25647] bond11 (unregistering): Released all slaves [ 513.574360][T25659] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5456'. [ 513.584558][T25659] openvswitch: netlink: Flow key attr not present in new flow. [ 513.604208][T25659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5456'. [ 513.614090][T25659] tipc: Invalid UDP bearer configuration [ 513.614140][T25659] tipc: Enabling of bearer rejected, failed to enable media [ 513.661003][T25664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5458'. [ 513.716849][T25671] syzkaller0: entered promiscuous mode [ 513.736387][T25671] syzkaller0: entered allmulticast mode [ 513.970057][T25679] syzkaller0: entered promiscuous mode [ 513.985816][T25679] syzkaller0: entered allmulticast mode [ 514.036456][T25673] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5461'. [ 514.660250][T25739] bridge54: the hash_elasticity option has been deprecated and is always 16 [ 514.706775][T25742] SET target dimension over the limit! [ 514.769259][T25747] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes. [ 514.942326][T25757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5487'. [ 514.951779][T25757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5487'. [ 514.968868][ T6151] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 8472 - 0 [ 514.977280][ T6151] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 8472 - 0 [ 514.991075][ T6151] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 8472 - 0 [ 515.001049][ T6151] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 8472 - 0 [ 515.050139][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.058836][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.073216][T25759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.110362][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5490'. [ 515.758312][T25806] bond0: entered promiscuous mode [ 515.807268][T25806] gretap0: entered promiscuous mode [ 515.816773][T25811] netlink: 'syz.1.5504': attribute type 16 has an invalid length. [ 515.827373][T25811] netlink: 'syz.1.5504': attribute type 17 has an invalid length. [ 515.838481][T25806] gretap0: left promiscuous mode [ 515.844881][T25806] bond0: left promiscuous mode [ 515.857597][T25816] openvswitch: netlink: Flow key attr not present in new flow. [ 515.931718][T25811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.946787][T25811] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.971751][T25811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.445330][T25852] netlink: 'syz.0.5517': attribute type 4 has an invalid length. [ 516.772368][T25882] tipc: Disabling bearer [ 516.938212][T21532] veth0_to_bond: left promiscuous mode [ 516.974987][T25897] netlink: 'syz.2.5526': attribute type 4 has an invalid length. [ 516.985071][T25897] wlan1: mtu less than device minimum [ 517.155378][T25910] netlink: 'syz.2.5532': attribute type 16 has an invalid length. [ 517.228120][T25910] netlink: 'syz.2.5532': attribute type 17 has an invalid length. [ 517.368225][T25910] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 517.396074][T25932] __nla_validate_parse: 9 callbacks suppressed [ 517.396091][T25932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5535'. [ 517.663986][T25951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.711944][T25951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.731805][T25958] netlink: 'syz.1.5541': attribute type 1 has an invalid length. [ 517.758068][T25958] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5541'. [ 517.795191][T25961] netlink: 216 bytes leftover after parsing attributes in process `syz.2.5542'. [ 517.843771][T25961] netlink: 'syz.2.5542': attribute type 2 has an invalid length. [ 517.896005][T25970] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 518.140458][T25984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5548'. [ 518.149919][T25984] netlink: 'syz.2.5548': attribute type 7 has an invalid length. [ 518.167037][T25984] netlink: 'syz.2.5548': attribute type 8 has an invalid length. [ 518.218924][T25984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5548'. [ 518.278956][T25985] block nbd3: server does not support multiple connections per device. [ 518.288453][T25985] block nbd3: shutting down sockets [ 518.438011][T25995] openvswitch: netlink: IP tunnel dst address not specified [ 518.915078][T26022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5557'. [ 519.017572][T26028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5559'. [ 519.158046][T26034] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5562'. [ 519.181297][T26034] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5562'. [ 519.819152][T26078] tipc: Enabled bearer , priority 10 [ 519.920354][ T30] audit: type=1800 audit(1773536482.202:3): pid=26085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5579" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2894 res=0 errno=0 [ 520.349598][T26102] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.5580'. [ 520.528266][T26113] bond8: Removing last ns target with arp_interval on [ 520.687988][T26118] : mtu greater than device maximum [ 520.829095][T26125] syzkaller0: entered promiscuous mode [ 520.836618][T26125] syzkaller0: entered allmulticast mode [ 520.858650][T26131] batadv_slave_0: default FDB implementation only supports local addresses [ 520.868281][T26138] tipc: Enabling of bearer rejected, failed to enable media [ 522.414120][T26139] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 522.454308][ T6625] tipc: Node number set to 4279716480 [ 522.502271][T26149] __nla_validate_parse: 2 callbacks suppressed [ 522.502290][T26149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5592'. [ 522.632101][ T30] audit: type=1800 audit(1773536484.912:4): pid=26152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5594" name="memory.events" dev="tmpfs" ino=2869 res=0 errno=0 [ 522.693367][T26163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5597'. [ 522.876725][T26169] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5600'. [ 522.886801][T26171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5601'. [ 522.984153][T26169] validate_nla: 1 callbacks suppressed [ 522.984174][T26169] netlink: 'syz.0.5600': attribute type 1 has an invalid length. [ 523.649735][T26227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5617'. [ 523.699988][T26227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5617'. [ 523.837680][T26235] bond8: (slave veth0_to_bond): Releasing active interface [ 523.874571][T26235] bond0: (slave bond_slave_0): Releasing backup interface [ 523.885842][T26235] bond_slave_0: left promiscuous mode [ 523.895603][T26235] bond0: (slave bond_slave_1): Releasing backup interface [ 523.904611][T26235] bond_slave_1: left promiscuous mode [ 523.913551][T26239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5621'. [ 523.923487][T26235] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 523.938647][T26244] netlink: 596 bytes leftover after parsing attributes in process `syz.3.5620'. [ 523.948797][T26234] netlink: 'syz.3.5620': attribute type 29 has an invalid length. [ 523.968624][T26240] netlink: 'syz.3.5620': attribute type 29 has an invalid length. [ 523.980109][T26235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5621'. [ 524.090857][T26235] netlink: 'syz.0.5621': attribute type 13 has an invalid length. [ 524.106280][T26235] veth0_macvtap: left promiscuous mode [ 524.125867][T26235] macvtap0: entered allmulticast mode [ 524.171945][T26235] macvtap0: refused to change device tx_queue_len [ 524.383411][T26272] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5630'. [ 524.593450][T26271] lo speed is unknown, defaulting to 1000 [ 525.316963][T26291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.339152][T26291] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.377873][T26291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 525.552827][T26303] syzkaller0: entered promiscuous mode [ 525.558535][T26303] syzkaller0: entered allmulticast mode [ 525.695515][T26315] netlink: 'syz.3.5640': attribute type 9 has an invalid length. [ 525.707696][T26315] netlink: 'syz.3.5640': attribute type 6 has an invalid length. [ 525.758861][T26274] lo speed is unknown, defaulting to 1000 [ 525.848030][T26318] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 526.061309][T26332] xt_bpf: check failed: parse error [ 526.220391][T26341] netlink: 'syz.0.5647': attribute type 4 has an invalid length. [ 526.540003][T26348] bond10 (unregistering): Released all slaves [ 526.755467][T26361] netlink: 'syz.0.5653': attribute type 10 has an invalid length. [ 526.803742][T26367] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 526.828705][T26367] syzkaller1: Refused to change device type [ 526.865402][T26361] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 527.090206][T26374] netlink: 'syz.1.5656': attribute type 10 has an invalid length. [ 527.142536][T26374] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 527.691648][T26394] netlink: 'syz.4.5664': attribute type 2 has an invalid length. [ 527.847475][T26396] syzkaller0: entered allmulticast mode [ 527.924996][T26406] openvswitch: netlink: Duplicate key (type 2). [ 528.054101][T26408] __nla_validate_parse: 10 callbacks suppressed [ 528.054120][T26408] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5668'. [ 528.096625][T26413] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5669'. [ 528.127063][T26413] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5669'. [ 528.171166][T26413] bond10 (unregistering): Released all slaves [ 528.420152][T26423] syzkaller0: entered promiscuous mode [ 528.527342][T26429] netlink: 'syz.0.5675': attribute type 2 has an invalid length. [ 529.045251][T26455] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 529.151578][T26455] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5686'. [ 529.186589][T26455] bridge_slave_1: default FDB implementation only supports local addresses [ 529.205435][T26468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5690'. [ 529.230024][T26470] netlink: 'syz.4.5689': attribute type 1 has an invalid length. [ 529.291234][T26470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.334268][T26470] vlan3: entered promiscuous mode [ 529.355842][T26470] bond0: entered promiscuous mode [ 529.376800][T26470] vlan3: entered allmulticast mode [ 529.382495][T26470] bond0: entered allmulticast mode [ 529.472565][T26475] bond0: (slave bridge5): making interface the new active one [ 529.502076][T26475] bridge5: entered promiscuous mode [ 529.507661][T26475] bridge5: entered allmulticast mode [ 529.559542][T26475] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 529.666723][T26500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5697'. [ 529.780662][T26514] netlink: 'syz.4.5701': attribute type 1 has an invalid length. [ 529.820643][T26516] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5698'. [ 529.824218][T26514] bond5: entered promiscuous mode [ 529.836216][T26514] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.877451][T26517] 8021q: adding VLAN 0 to HW filter on device bond5 [ 529.933624][T26517] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 529.951865][T26517] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 529.971616][T26517] bond5: (slave vti0): making interface the new active one [ 529.979527][T26517] vti0: entered promiscuous mode [ 529.988710][T26517] bond5: (slave vti0): Enslaving as an active interface with an up link [ 530.098868][T26532] netlink: 'syz.4.5706': attribute type 1 has an invalid length. [ 530.164362][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5708'. [ 530.185954][T26532] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.228812][T26538] bond6: (slave veth11): Enslaving as an active interface with a down link [ 530.250808][T26532] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 530.258465][T26532] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 530.356751][T26548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5710'. [ 530.455752][T26553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5712'. [ 530.567364][T26557] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 530.582862][T26557] bond7 (unregistering): Released all slaves [ 530.636175][T26561] netlink: 'syz.2.5714': attribute type 29 has an invalid length. [ 530.675425][T26565] netlink: 'syz.2.5714': attribute type 29 has an invalid length. [ 530.853049][T26571] netlink: 'syz.4.5716': attribute type 13 has an invalid length. [ 532.211915][T26588] IPVS: Unknown mcast interface: vcan0 [ 532.291101][ T6238] lec:lec_start_xmit: lec0:No lecd attached [ 532.608682][T26606] netlink: 'syz.3.5727': attribute type 2 has an invalid length. [ 532.889750][T26606] v: entered promiscuous mode [ 533.933613][T26664] tipc: Enabling of bearer rejected, failed to enable media [ 533.954610][T26660] tipc: Enabling of bearer rejected, failed to enable media [ 534.173892][T26667] __nla_validate_parse: 4 callbacks suppressed [ 534.173910][T26667] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5743'. [ 535.019362][ T30] audit: type=1800 audit(1773536497.302:5): pid=26700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5753" name="memory.events" dev="tmpfs" ino=2376 res=0 errno=0 [ 535.500542][T26709] netlink: 'syz.4.5757': attribute type 29 has an invalid length. [ 536.003620][T26734] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5759'. [ 536.449143][T26762] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5766'. [ 536.509070][T26759] syzkaller0: entered promiscuous mode [ 536.514591][T26759] syzkaller0: entered allmulticast mode [ 537.837768][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5550 ms [ 537.845882][ C1] lec:lec_tx_timeout: lec0 [ 542.105494][T26762] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 542.115244][T26762] mac80211_hwsim hwsim33 wlan1: left promiscuous mode [ 542.126652][T26762] bond0 (unregistering): Released all slaves [ 542.376446][T26782] sctp: [Deprecated]: syz.2.5770 (pid 26782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.376446][T26782] Use struct sctp_sack_info instead [ 542.468427][T26784] delete_channel: no stack [ 542.476202][T26782] sctp: [Deprecated]: syz.2.5770 (pid 26782) Use of struct sctp_assoc_value in delayed_ack socket option. [ 542.476202][T26782] Use struct sctp_sack_info instead [ 542.578814][T26794] xt_ecn: cannot match TCP bits for non-tcp packets [ 542.629331][T26794] xt_hashlimit: max too large, truncated to 1048576 [ 542.769999][T26796] netlink: 'syz.1.5774': attribute type 1 has an invalid length. [ 543.507357][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.528357][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.537125][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.568488][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.578837][T26830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5781'. [ 543.603139][T26819] netlink: 'syz.4.5780': attribute type 10 has an invalid length. [ 543.619605][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 543.697987][T26819] netlink: 396 bytes leftover after parsing attributes in process `syz.4.5780'. [ 543.854365][T26823] lo speed is unknown, defaulting to 1000 [ 544.184234][T26819] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 544.329139][T26845] gretap0: Device is already in use. [ 545.314757][T26875] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 545.368210][T26874] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 545.481489][T26880] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5792'. [ 545.492566][T21537] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.533709][T26879] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 545.546362][T21537] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.578489][T21537] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 545.678521][T26869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5790'. [ 545.690568][ T5146] Bluetooth: hci4: command tx timeout [ 545.719004][T26874] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 545.728868][T26875] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 545.871231][T21537] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 545.891488][T26894] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5794'. [ 546.027459][T21537] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.057495][T26897] openvswitch: netlink: Tunnel attr 10 has unexpected len 7 expected 2 [ 546.094010][T21537] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 546.484548][T21537] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 546.539801][T21537] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.605506][T21537] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 546.839575][T26922] netlink: 'syz.2.5801': attribute type 1 has an invalid length. [ 546.905370][T26922] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5801'. [ 546.936009][T26908] syzkaller0: entered promiscuous mode [ 546.968550][T26908] syzkaller0: entered allmulticast mode [ 546.984869][T26922] netlink: 658 bytes leftover after parsing attributes in process `syz.2.5801'. [ 547.039417][T26922] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5801'. [ 547.053850][T21537] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.087892][T21537] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.114865][T26922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5801'. [ 547.134786][T21537] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 547.150602][T26932] netlink: 'syz.3.5802': attribute type 1 has an invalid length. [ 547.633196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 547.747135][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 547.758002][ T5146] Bluetooth: hci4: command tx timeout [ 547.857688][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 547.993560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 548.101852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 548.213266][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 548.323474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 548.434435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 548.563178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 549.838034][ T5146] Bluetooth: hci4: command tx timeout [ 551.104582][ C0] net_ratelimit: 31 callbacks suppressed [ 551.104604][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.198571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.294157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.382092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.487196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.574020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.661843][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.749412][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.835866][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 551.917985][ T5146] Bluetooth: hci4: command tx timeout [ 551.924783][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 553.418821][T26988] x_tables: duplicate entry at hook 3 [ 553.486729][T21530] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.553305][T21532] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.699358][ T6140] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.732166][ T6140] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.866908][T27004] netlink: 'syz.2.5809': attribute type 4 has an invalid length. [ 553.941670][T26996] netlink: 'syz.2.5809': attribute type 4 has an invalid length. [ 555.438242][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 556.191087][ C0] net_ratelimit: 45 callbacks suppressed [ 556.191108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.302873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.404136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.482115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.560103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.633942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.725158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.803744][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.825261][T21537] bond1 (unregistering): Released all slaves [ 556.844539][T21537] bond2 (unregistering): Released all slaves [ 556.865820][T21537] bond3 (unregistering): Released all slaves [ 556.900559][T21537] bond4 (unregistering): Released all slaves [ 556.909083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 556.922735][T21537] bond5 (unregistering): Released all slaves [ 556.940421][T21537] bond6 (unregistering): Released all slaves [ 556.961002][T21537] bond7 (unregistering): Released all slaves [ 556.996204][T21537] bond8 (unregistering): (slave veth11): Releasing active interface [ 557.012547][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 557.030986][T21537] bond8 (unregistering): Released all slaves [ 557.052198][T21537] bond9 (unregistering): Released all slaves [ 557.070080][T21537] bond10 (unregistering): Released all slaves [ 557.087486][T21537] bond11 (unregistering): Released all slaves [ 557.387145][T27038] syzkaller0: entered promiscuous mode [ 557.398688][T27038] syzkaller0: entered allmulticast mode [ 557.513435][ T29] lo speed is unknown, defaulting to 1000 [ 557.546875][T27052] netlink: 'syz.2.5815': attribute type 1 has an invalid length. [ 561.206554][ C0] net_ratelimit: 92 callbacks suppressed [ 561.206568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 561.269185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.309401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 561.371204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.413239][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 561.473401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.513558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 561.579141][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 561.620755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 561.682001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.383345][T21537] tipc: Left network mode [ 562.391300][ T796] lo speed is unknown, defaulting to 1000 [ 562.398014][T27052] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 562.676104][T27069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5819'. [ 562.689746][T27067] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5818'. [ 562.697507][T27069] netlink: 13 bytes leftover after parsing attributes in process `syz.2.5819'. [ 562.715429][ T29] lo speed is unknown, defaulting to 1000 [ 562.893856][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 563.060760][T27069] veth3: entered promiscuous mode [ 563.520624][T27096] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5820'. [ 563.725979][T26823] chnl_net:caif_netlink_parms(): no params data found [ 565.655702][T27117] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5824'. [ 566.115942][T27136] xt_hashlimit: size too large, truncated to 1048576 [ 566.217609][ C0] net_ratelimit: 103 callbacks suppressed [ 566.217628][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.274326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 566.351776][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.402484][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 566.415752][T27144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5831'. [ 566.427961][T27138] : renamed from vxcan1 [ 566.480603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.531034][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 566.557033][T26823] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.616336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.640861][T26823] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.668669][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 566.690860][T26823] bridge_slave_0: entered allmulticast mode [ 566.749330][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 566.764692][T26823] bridge_slave_0: entered promiscuous mode [ 566.800194][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 566.823939][T26823] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.866715][T26823] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.934962][T26823] bridge_slave_1: entered allmulticast mode [ 566.992216][T26823] bridge_slave_1: entered promiscuous mode [ 567.569643][T27181] "syz.3.5835" (27181) uses obsolete ecb(arc4) skcipher [ 567.642440][T27156] syzkaller0: entered promiscuous mode [ 567.675901][T27156] syzkaller0: entered allmulticast mode [ 567.907793][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 567.915837][ C1] lec:lec_tx_timeout: lec0 [ 567.938794][T27196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5838'. [ 568.090872][T26823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.248532][T26823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.431397][T27204] SET target dimension over the limit! [ 569.397990][T26823] team0: Port device team_slave_0 added [ 569.850287][T21537] hsr_slave_0: left promiscuous mode [ 569.884121][T21537] hsr_slave_1: left promiscuous mode [ 569.954123][T21537] veth1_macvtap: left promiscuous mode [ 569.973051][T21537] veth1_vlan: left promiscuous mode [ 569.996178][T21537] veth0_vlan: left promiscuous mode [ 570.269549][T21537] pim6reg527 (unregistering): left allmulticast mode [ 570.330008][T27257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5853'. [ 570.346596][T21537] pimreg (unregistering): left allmulticast mode [ 570.672540][T27259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5853'. [ 571.132843][T26823] team0: Port device team_slave_1 added [ 571.222775][ C0] net_ratelimit: 81 callbacks suppressed [ 571.222795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 571.320675][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.324179][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5855'. [ 571.370064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 571.463264][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.470291][T27270] lo: Caught tx_queue_len zero misconfig [ 571.514502][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 571.595144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.646346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 571.648838][T27280] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 571.725137][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 571.777279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 574.976017][T26823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.005716][T26823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.080830][T26823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.145970][T27291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5860'. [ 575.189081][T27291] gretap0: entered promiscuous mode [ 575.212676][T26823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.244549][T26823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.326640][T26823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.908785][T26823] hsr_slave_0: entered promiscuous mode [ 575.965994][T26823] hsr_slave_1: entered promiscuous mode [ 576.026847][T26823] debugfs: 'hsr0' already exists in 'hsr' [ 576.070071][T26823] Cannot create hsr debugfs directory [ 576.229669][ C0] net_ratelimit: 120 callbacks suppressed [ 576.229687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 576.343600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.398264][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 576.490828][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.571829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 576.674826][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.692098][T27341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5871'. [ 576.743002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 576.774449][T27340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5870'. [ 576.839657][T27350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5873'. [ 576.845001][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 576.918084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 577.004667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.775058][T26823] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 577.815941][T27378] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5879'. [ 578.086199][T27393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5883'. [ 578.403743][T26823] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.580130][T27393] bond9: Unable to set up delay as MII monitoring is disabled [ 578.607416][T27393] bond9 (unregistering): Released all slaves [ 579.280612][T26823] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 579.653878][T27440] netlink: 'syz.3.5886': attribute type 1 has an invalid length. [ 579.812737][T27447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5887'. [ 579.903134][T26823] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.005481][T27440] bond9: entered promiscuous mode [ 580.032655][T27440] 8021q: adding VLAN 0 to HW filter on device bond9 [ 580.142166][T27446] 8021q: adding VLAN 0 to HW filter on device bond9 [ 580.149620][T27446] bond9: (slave vti1): The slave device specified does not support setting the MAC address [ 580.167637][T27446] bond9: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 580.184694][T27446] bond9: (slave vti1): making interface the new active one [ 580.192361][T27446] vti1: entered promiscuous mode [ 580.200073][T27446] bond9: (slave vti1): Enslaving as an active interface with an up link [ 580.659261][T27467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5891'. [ 580.814081][T26823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 580.949349][T26823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 581.060695][T26823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 581.196720][T26823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 581.227905][T27485] netlink: 'syz.3.5894': attribute type 11 has an invalid length. [ 581.241393][ C0] net_ratelimit: 75 callbacks suppressed [ 581.241409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.267167][T27485] netlink: 'syz.3.5894': attribute type 1 has an invalid length. [ 581.303628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 581.322702][T27485] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5894'. [ 581.389668][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.444858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 581.450476][T27499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5896'. [ 581.481726][T27489] netlink: 'syz.3.5894': attribute type 1 has an invalid length. [ 581.535242][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.593051][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 581.679315][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.729755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 581.813882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 581.875683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 581.941589][T26823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.042610][T26823] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.165560][T21533] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.172779][T21533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.280898][T21533] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.288116][T21533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.090650][T27542] netlink: 'syz.4.5905': attribute type 1 has an invalid length. [ 583.111506][T27555] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5906'. [ 583.193369][T27539] bond7: (slave ip6gretap1): making interface the new active one [ 583.299609][T27539] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 583.605675][T27542] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 584.044347][T27575] can: request_module (can-proto-0) failed. [ 584.097611][T26823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.126823][T27587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5913'. [ 584.558229][T27594] sch_fq: defrate 5 ignored. [ 584.631945][T27602] syzkaller0: entered promiscuous mode [ 584.665318][T27602] syzkaller0: entered allmulticast mode [ 584.751994][T26823] veth0_vlan: entered promiscuous mode [ 584.854370][T26823] veth1_vlan: entered promiscuous mode [ 584.987238][T27594] syzkaller1: entered promiscuous mode [ 585.001241][T27594] syzkaller1: entered allmulticast mode [ 585.076350][T26823] veth0_macvtap: entered promiscuous mode [ 585.126685][T27615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5920'. [ 585.150714][T26823] veth1_macvtap: entered promiscuous mode [ 585.232666][T27597] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 585.272719][T27596] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 585.483969][T27623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5921'. [ 585.559646][T27628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5922'. [ 585.620622][T27632] netlink: 'syz.1.5922': attribute type 10 has an invalid length. [ 585.634672][T26823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.697106][T27632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.722169][T27632] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 585.927208][T26823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 586.039539][T21537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.146342][T21537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.271353][T21537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.293324][ C0] net_ratelimit: 71 callbacks suppressed [ 586.293343][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.311088][T21537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.355569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 586.435508][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.478185][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 586.491716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 586.526481][T27648] syzkaller0: entered promiscuous mode [ 586.575331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.598806][T27648] syzkaller0: entered allmulticast mode [ 586.630127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 586.715599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.769703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 586.857875][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 586.863240][T27663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5927'. [ 586.913318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 587.534047][T27656] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5926'. [ 587.566902][T27666] sch_fq: defrate 0 ignored. [ 587.732645][T27663] bond9: Invalid ad_actor_system MAC address. [ 587.739167][T27663] bond9: option ad_actor_system: invalid value (1) [ 587.771170][T27663] bond9 (unregistering): Released all slaves [ 587.824508][T27682] pim6reg: entered allmulticast mode [ 588.134166][T21533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.184823][T21533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.376835][T21533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.475663][T21533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.560853][ T5146] Bluetooth: hci4: command 0x0405 tx timeout [ 588.771936][T27717] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5935'. [ 589.662819][T27741] netlink: 412 bytes leftover after parsing attributes in process `syz.1.5941'. [ 589.748361][T27748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5941'. [ 589.907373][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.927419][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.936313][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.945308][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.957592][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 590.785902][T27752] lo speed is unknown, defaulting to 1000 [ 590.880676][T27773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5944'. [ 591.106720][T27781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5948'. [ 591.317364][ C0] net_ratelimit: 81 callbacks suppressed [ 591.317383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 591.404013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.455179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 591.533774][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.583808][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 591.664355][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.715725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 591.797105][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.847972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 591.928004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 591.949530][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5951'. [ 592.001906][ T51] Bluetooth: hci5: command tx timeout [ 593.142400][T27832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5959'. [ 593.256903][T27838] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5960'. [ 593.366807][T27840] netlink: 'syz.1.5961': attribute type 4 has an invalid length. [ 593.421936][T27840] pimreg: left allmulticast mode [ 593.436462][T27842] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5962'. [ 593.826286][T27851] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5964'. [ 593.891516][T27855] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5964'. [ 593.921379][T27857] x_tables: duplicate underflow at hook 3 [ 594.013322][T27859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5965'. [ 594.090366][ T51] Bluetooth: hci5: command tx timeout [ 594.960125][T21530] tipc: Disabling bearer [ 594.987109][T21530] gretap0 (unregistering): left promiscuous mode [ 595.021823][T21530] dvmrp0 (unregistering): left allmulticast mode [ 595.052049][T21530] bond3 (unregistering): (slave geneve3): Releasing active interface [ 595.562231][T21530] bond0 (unregistering): left promiscuous mode [ 595.603752][T21530] bond0 (unregistering): Released all slaves [ 595.619533][T21530] bond1 (unregistering): Released all slaves [ 595.640555][T21530] bond2 (unregistering): Released all slaves [ 595.670808][T21530] bond3 (unregistering): Released all slaves [ 595.734288][T21530] bond4 (unregistering): (slave veth5): Releasing active interface [ 595.759637][T21530] bond4 (unregistering): Released all slaves [ 595.785603][T21530] bond5 (unregistering): Released all slaves [ 595.805968][T21530] bond6 (unregistering): Released all slaves [ 596.161303][ T51] Bluetooth: hci5: command tx timeout [ 596.208249][ T6238] lec:lec_start_xmit: lec0:No lecd attached [ 596.350270][T21530] tipc: Left network mode [ 596.363562][ C0] net_ratelimit: 87 callbacks suppressed [ 596.363579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.421328][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 596.509153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.549324][T27880] netlink: 248 bytes leftover after parsing attributes in process `syz.3.5970'. [ 596.561471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 596.642455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.692184][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 596.749398][T27752] chnl_net:caif_netlink_parms(): no params data found [ 596.772743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.827321][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 596.913190][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 596.967206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 597.160952][T27893] netlink: 'syz.0.5975': attribute type 2 has an invalid length. [ 597.188390][T27893] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5975'. [ 597.289795][T27899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5974'. [ 597.356564][T27895] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5974'. [ 597.521453][T27900] IPv6: Can't replace route, no match found [ 597.527757][T27900] IPv6: Can't replace route, no match found [ 597.942668][T27911] veth9: entered allmulticast mode [ 598.239310][ T51] Bluetooth: hci5: command tx timeout [ 598.411507][T27752] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.480291][T27752] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.538106][T27752] bridge_slave_0: entered allmulticast mode [ 598.601219][T27752] bridge_slave_0: entered promiscuous mode [ 598.654893][T27943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5984'. [ 598.945496][T27957] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 599.183625][T27752] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.221895][T27752] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.263639][T27752] bridge_slave_1: entered allmulticast mode [ 599.309733][T27752] bridge_slave_1: entered promiscuous mode [ 599.521330][T27950] syzkaller0: entered promiscuous mode [ 599.533603][T27950] syzkaller0: entered allmulticast mode [ 599.547420][T27965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5987'. [ 599.711961][T27974] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5990'. [ 601.384439][ C0] net_ratelimit: 86 callbacks suppressed [ 601.384453][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 601.454556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.499593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 601.567640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.610443][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 601.676004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.722231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 601.790012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 601.832458][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 601.838605][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 601.852522][ C1] lec:lec_tx_timeout: lec0 [ 601.904331][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 604.099714][T27973] veth13: entered allmulticast mode [ 604.185799][T27977] vlan2: entered allmulticast mode [ 604.208105][T27977] hsr0: entered allmulticast mode [ 604.213192][T27977] hsr_slave_0: entered allmulticast mode [ 604.248989][T27977] hsr_slave_1: entered allmulticast mode [ 604.342387][T21530] hsr_slave_0: left promiscuous mode [ 604.384794][T21530] hsr_slave_1: left promiscuous mode [ 604.525879][T21530] pim6reg527 (unregistering): left allmulticast mode [ 604.572504][T27996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5997'. [ 604.963588][T21530] team0 (unregistering): Port device vxcan1 removed [ 605.051268][T27752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.149210][T27752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.356662][T28006] netlink: 'syz.1.6000': attribute type 1 has an invalid length. [ 605.396369][T28006] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6000'. [ 605.410702][T28011] netlink: 'syz.3.6001': attribute type 4 has an invalid length. [ 605.421834][T27752] team0: Port device team_slave_0 added [ 605.441109][T28011] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6001'. [ 605.463723][T27752] team0: Port device team_slave_1 added [ 605.632138][T27752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.670177][T27752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.760932][T28020] netlink: 'syz.0.6002': attribute type 1 has an invalid length. [ 605.874741][T27752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.970901][T27752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.017781][T27752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.141156][T27752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.391891][ C0] net_ratelimit: 93 callbacks suppressed [ 606.391910][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.460990][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 606.465128][T21530] IPVS: stop unused estimator thread 0... [ 606.569024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.629137][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 606.679751][T27752] hsr_slave_0: entered promiscuous mode [ 606.710678][T27752] hsr_slave_1: entered promiscuous mode [ 606.721336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.748636][T27752] debugfs: 'hsr0' already exists in 'hsr' [ 606.775280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 606.777865][T27752] Cannot create hsr debugfs directory [ 606.803359][T28050] netlink: 'syz.4.6011': attribute type 10 has an invalid length. [ 606.828438][T28049] netlink: 'syz.4.6011': attribute type 10 has an invalid length. [ 606.860349][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 606.919560][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 607.003729][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.042150][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 607.272774][T28063] netlink: 'syz.3.6013': attribute type 10 has an invalid length. [ 607.654940][T28076] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6018'. [ 608.428616][T21530] erspan0 (unregistering): left promiscuous mode [ 608.462057][T21530] gretap0 (unregistering): left promiscuous mode [ 608.889497][T21530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.912437][T21530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.928555][T21530] bond0 (unregistering): Released all slaves [ 608.944034][T21530] bond1 (unregistering): (slave veth3): Releasing active interface [ 608.967552][T21530] bond1 (unregistering): Released all slaves [ 608.993109][T21530] bond2 (unregistering): (slave lo): Releasing backup interface [ 609.011672][T21530] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 609.026479][T21530] bond2 (unregistering): Released all slaves [ 609.051864][T21530] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 609.073460][T21530] bond3 (unregistering): Released all slaves [ 609.126383][T28078] tipc: Enabled bearer , priority 0 [ 609.179383][T28083] syzkaller0: entered promiscuous mode [ 609.201452][T28083] syzkaller0: entered allmulticast mode [ 609.441338][T21530] v: left promiscuous mode [ 609.541129][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6024'. [ 609.550516][T28083] tipc: Resetting bearer [ 609.589948][T28107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6022'. [ 609.646075][T28083] tipc: Disabling bearer [ 609.713963][T28110] xt_hashlimit: size too large, truncated to 1048576 [ 609.731076][T21530] : left promiscuous mode [ 609.805665][T28113] macvtap1: entered promiscuous mode [ 609.842226][T28113] macvtap1: entered allmulticast mode [ 609.859942][T28113] veth1_vlan: entered allmulticast mode [ 609.954731][T21530] 9: left promiscuous mode [ 610.105074][T21530] tipc: Left network mode [ 610.141870][T28123] netlink: 'syz.0.6028': attribute type 64 has an invalid length. [ 610.248222][T28127] netlink: 'syz.0.6028': attribute type 64 has an invalid length. [ 610.277051][T28130] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6029'. [ 610.352101][T27752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.393342][T27752] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.765898][T28128] vlan4: entered allmulticast mode [ 611.161673][T27752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.174072][T27752] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.429946][ C0] net_ratelimit: 86 callbacks suppressed [ 611.429966][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.489623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 611.572339][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.621766][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 611.661716][T28166] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6035'. [ 611.696529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.703717][T27752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.748191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 611.757023][T27752] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.819570][T28171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6037'. [ 611.826131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.876943][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 611.910948][T28171] netlink: 'syz.1.6037': attribute type 1 has an invalid length. [ 611.952281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 611.952309][T28173] xt_CT: No such helper "pptp" [ 611.960230][T28171] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6037'. [ 612.005286][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 612.139512][T28177] veth15: entered allmulticast mode [ 612.782393][T27752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.815993][T27752] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.868850][T28208] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6043'. [ 613.206811][T28211] syzkaller0: entered promiscuous mode [ 613.259886][T28211] syzkaller0: entered allmulticast mode [ 613.330736][T28217] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6046'. [ 613.486062][T28216] lo speed is unknown, defaulting to 1000 [ 613.864531][T28216] lo speed is unknown, defaulting to 1000 [ 614.004834][T28244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6052'. [ 614.031454][T28216] lo speed is unknown, defaulting to 1000 [ 614.124142][T28243] team0: Port device ip6gre3 added [ 614.888420][T28245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.068269][T28261] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6057'. [ 615.093274][T28246] ip6_vti0: entered promiscuous mode [ 615.100799][T28246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6052'. [ 615.249589][T21530] hsr_slave_0: left promiscuous mode [ 615.291388][T21530] hsr_slave_1: left promiscuous mode [ 615.308867][T21530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 615.339428][T21530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.397042][T28216] infiniband syz0: set down [ 615.409210][T21530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 615.416631][T21530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.442467][T28216] infiniband syz0: added lo [ 615.531821][T21530] veth1_macvtap: left promiscuous mode [ 615.537432][T21530] veth1_vlan: left promiscuous mode [ 615.588739][T21530] veth0_vlan: left promiscuous mode [ 615.609333][T28216] RDS/IB: syz0: added [ 615.633216][T28216] smc: adding ib device syz0 with port count 1 [ 615.667997][T28216] smc: ib device syz0 port 1 has no pnetid [ 616.250058][T28290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6064'. [ 616.516723][ C0] net_ratelimit: 79 callbacks suppressed [ 616.516744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.573376][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 616.667906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.746261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 616.822728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.877033][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 616.929625][T21530] team0 (unregistering): Port device team_slave_1 removed [ 616.942293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 616.957633][T21530] team0 (unregistering): Port device team_slave_0 removed [ 616.987934][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 617.061807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.108063][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 617.145386][ T796] lo speed is unknown, defaulting to 1000 [ 617.175130][T28273] syzkaller1: entered promiscuous mode [ 617.187921][T28273] syzkaller1: entered allmulticast mode [ 617.293426][T28216] lo speed is unknown, defaulting to 1000 [ 617.389938][T28310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6066'. [ 617.589525][T28314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6068'. [ 617.653270][ T6646] lo speed is unknown, defaulting to 1000 [ 617.673549][T27752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 617.770972][T27752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 617.935816][T27752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 618.028029][T27752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 618.209842][T28216] lo speed is unknown, defaulting to 1000 [ 621.523484][ C0] net_ratelimit: 85 callbacks suppressed [ 621.523498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 621.587488][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.626378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 621.685382][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.723654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 621.792008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.792967][T21530] IPVS: stop unused estimator thread 0... [ 621.831244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 621.907744][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 621.960254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 622.024185][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 624.327697][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 626.530492][ C0] net_ratelimit: 150 callbacks suppressed [ 626.530512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 626.589716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.626960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 626.682254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.715623][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 626.764460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.797379][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 626.847107][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 626.881941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 626.930880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 629.169119][ T5146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 629.180158][ T5146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 629.189464][ T5146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 629.202664][ T5146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 629.210462][ T5146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 629.292112][T28352] tipc: Enabling of bearer rejected, failed to enable media [ 629.319667][T28216] lo speed is unknown, defaulting to 1000 [ 629.743360][T28399] lo speed is unknown, defaulting to 1000 [ 629.837801][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 629.845872][ C1] lec:lec_tx_timeout: lec0 [ 629.890715][T27752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.951555][T28411] syzkaller0: entered promiscuous mode [ 629.957069][T28411] syzkaller0: entered allmulticast mode [ 630.106470][T27752] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.301248][T28426] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 631.035725][T28439] sctp: [Deprecated]: syz.1.6084 (pid 28439) Use of int in maxseg socket option. [ 631.035725][T28439] Use struct sctp_assoc_value instead [ 631.281980][ T5146] Bluetooth: hci0: command tx timeout [ 631.552228][ C0] net_ratelimit: 117 callbacks suppressed [ 631.552247][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.609416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 631.689283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.740722][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 631.820097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 631.871070][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 631.953064][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.009042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 632.087429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 632.135937][T28216] lo speed is unknown, defaulting to 1000 [ 632.137142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 632.177344][T21532] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.184579][T21532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.341184][T21506] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.348394][T21506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.275270][T28496] : entered promiscuous mode [ 633.358824][ T5146] Bluetooth: hci0: command tx timeout [ 633.467316][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6094'. [ 633.538604][T28501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6094'. [ 633.588088][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6094'. [ 633.608310][T28506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6093'. [ 633.682316][T28511] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6093'. [ 633.700127][T28509] netlink: 'syz.3.6094': attribute type 1 has an invalid length. [ 633.768864][T28501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6094'. [ 634.113317][T28399] lo speed is unknown, defaulting to 1000 [ 634.211947][T27752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.396234][T28525] [ 634.398608][T28525] ====================================================== [ 634.405627][T28525] WARNING: possible circular locking dependency detected [ 634.412657][T28525] syzkaller #0 Not tainted [ 634.417073][T28525] ------------------------------------------------------ [ 634.424088][T28525] syz.1.6096/28525 is trying to acquire lock: [ 634.430159][T28525] ffffffff8fd49b38 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 634.439824][T28525] [ 634.439824][T28525] but task is already holding lock: [ 634.447190][T28525] ffffffff8fd49ad8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 634.456781][T28525] [ 634.456781][T28525] which lock already depends on the new lock. [ 634.456781][T28525] [ 634.467191][T28525] [ 634.467191][T28525] the existing dependency chain (in reverse order) is: [ 634.476218][T28525] [ 634.476218][T28525] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 634.484154][T28525] _raw_spin_lock_bh+0x36/0x50 [ 634.489594][T28525] nr_rt_ioctl+0x40c/0xf90 [ 634.494637][T28525] sock_do_ioctl+0x101/0x320 [ 634.499899][T28525] sock_ioctl+0x5c6/0x7f0 [ 634.504763][T28525] __se_sys_ioctl+0xfc/0x170 [ 634.509943][T28525] do_syscall_64+0x14d/0xf80 [ 634.515126][T28525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.521587][T28525] [ 634.521587][T28525] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 634.529597][T28525] _raw_spin_lock_bh+0x36/0x50 [ 634.534899][T28525] nr_rt_ioctl+0x215/0xf90 [ 634.539840][T28525] sock_do_ioctl+0x101/0x320 [ 634.544960][T28525] sock_ioctl+0x5c6/0x7f0 [ 634.549820][T28525] __se_sys_ioctl+0xfc/0x170 [ 634.554939][T28525] do_syscall_64+0x14d/0xf80 [ 634.560066][T28525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.566489][T28525] [ 634.566489][T28525] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 634.574334][T28525] __lock_acquire+0x15a5/0x2cf0 [ 634.579775][T28525] lock_acquire+0xf0/0x2e0 [ 634.584728][T28525] _raw_spin_lock_bh+0x36/0x50 [ 634.590027][T28525] nr_rt_device_down+0xbe/0x860 [ 634.595404][T28525] nr_device_event+0x137/0x150 [ 634.600790][T28525] notifier_call_chain+0x1be/0x400 [ 634.606471][T28525] __dev_notify_flags+0x16d/0x310 [ 634.612143][T28525] netif_change_flags+0xe8/0x1a0 [ 634.617630][T28525] dev_change_flags+0x130/0x260 [ 634.623097][T28525] dev_ioctl+0x7b4/0x1150 [ 634.628026][T28525] sock_do_ioctl+0x23e/0x320 [ 634.633147][T28525] sock_ioctl+0x5c6/0x7f0 [ 634.638006][T28525] __se_sys_ioctl+0xfc/0x170 [ 634.643129][T28525] do_syscall_64+0x14d/0xf80 [ 634.648245][T28525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.654666][T28525] [ 634.654666][T28525] other info that might help us debug this: [ 634.654666][T28525] [ 634.664902][T28525] Chain exists of: [ 634.664902][T28525] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 634.664902][T28525] [ 634.678743][T28525] Possible unsafe locking scenario: [ 634.678743][T28525] [ 634.686199][T28525] CPU0 CPU1 [ 634.691571][T28525] ---- ---- [ 634.696936][T28525] lock(nr_neigh_list_lock); [ 634.701627][T28525] lock(&nr_node->node_lock); [ 634.708922][T28525] lock(nr_neigh_list_lock); [ 634.716128][T28525] lock(nr_node_list_lock); [ 634.720734][T28525] [ 634.720734][T28525] *** DEADLOCK *** [ 634.720734][T28525] [ 634.728877][T28525] 2 locks held by syz.1.6096/28525: [ 634.734074][T28525] #0: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 634.742900][T28525] #1: ffffffff8fd49ad8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 634.752932][T28525] [ 634.752932][T28525] stack backtrace: [ 634.758838][T28525] CPU: 1 UID: 0 PID: 28525 Comm: syz.1.6096 Not tainted syzkaller #0 PREEMPT(full) [ 634.758864][T28525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.758882][T28525] Call Trace: [ 634.758890][T28525] [ 634.758900][T28525] dump_stack_lvl+0xe8/0x150 [ 634.758967][T28525] print_circular_bug+0x2e1/0x300 [ 634.759001][T28525] check_noncircular+0x12e/0x150 [ 634.759034][T28525] __lock_acquire+0x15a5/0x2cf0 [ 634.759064][T28525] ? __lock_acquire+0x6b5/0x2cf0 [ 634.759094][T28525] lock_acquire+0xf0/0x2e0 [ 634.759118][T28525] ? nr_rt_device_down+0xbe/0x860 [ 634.759139][T28525] ? nr_rt_device_down+0xbe/0x860 [ 634.759157][T28525] _raw_spin_lock_bh+0x36/0x50 [ 634.759184][T28525] ? nr_rt_device_down+0xbe/0x860 [ 634.759202][T28525] nr_rt_device_down+0xbe/0x860 [ 634.759220][T28525] ? nr_device_event+0x12f/0x150 [ 634.759253][T28525] nr_device_event+0x137/0x150 [ 634.759287][T28525] notifier_call_chain+0x1be/0x400 [ 634.759321][T28525] __dev_notify_flags+0x16d/0x310 [ 634.759354][T28525] ? __pfx___dev_notify_flags+0x10/0x10 [ 634.759383][T28525] ? __dev_change_flags+0x4c6/0x690 [ 634.759415][T28525] ? __pfx___dev_change_flags+0x10/0x10 [ 634.759447][T28525] ? full_name_hash+0x92/0xe0 [ 634.759477][T28525] netif_change_flags+0xe8/0x1a0 [ 634.759509][T28525] dev_change_flags+0x130/0x260 [ 634.759540][T28525] dev_ioctl+0x7b4/0x1150 [ 634.759568][T28525] sock_do_ioctl+0x23e/0x320 [ 634.759593][T28525] ? __pfx_sock_do_ioctl+0x10/0x10 [ 634.759624][T28525] sock_ioctl+0x5c6/0x7f0 [ 634.759645][T28525] ? __pfx_sock_ioctl+0x10/0x10 [ 634.759667][T28525] ? __fget_files+0x2a/0x420 [ 634.759710][T28525] ? __fget_files+0x3a0/0x420 [ 634.759738][T28525] ? __fget_files+0x2a/0x420 [ 634.759768][T28525] ? bpf_lsm_file_ioctl+0x9/0x20 [ 634.759811][T28525] ? __pfx_sock_ioctl+0x10/0x10 [ 634.759833][T28525] __se_sys_ioctl+0xfc/0x170 [ 634.759856][T28525] do_syscall_64+0x14d/0xf80 [ 634.759875][T28525] ? trace_irq_disable+0x3b/0x150 [ 634.759920][T28525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.759941][T28525] ? clear_bhb_loop+0x40/0x90 [ 634.759964][T28525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.759989][T28525] RIP: 0033:0x7feafaf9c799 [ 634.760008][T28525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.760027][T28525] RSP: 002b:00007feaf91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.760049][T28525] RAX: ffffffffffffffda RBX: 00007feafb216180 RCX: 00007feafaf9c799 [ 634.760065][T28525] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 634.760079][T28525] RBP: 00007feafb032c99 R08: 0000000000000000 R09: 0000000000000000 [ 634.760092][T28525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.760105][T28525] R13: 00007feafb216218 R14: 00007feafb216180 R15: 00007ffd7bec7a68 [ 634.760128][T28525] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 635.153192][T28522] syzkaller0: entered promiscuous mode [ 635.158765][T28522] syzkaller0: entered allmulticast mode [ 635.211091][T27752] veth0_vlan: entered promiscuous mode [ 635.224044][T27752] veth1_vlan: entered promiscuous mode [ 635.243834][T27752] veth0_macvtap: entered promiscuous mode [ 635.253187][T27752] veth1_macvtap: entered promiscuous mode [ 635.267944][T27752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.278170][T27752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.447782][ T5146] Bluetooth: hci0: command tx timeout [ 635.484907][T21532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.494040][T21532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.579379][ C0] net_ratelimit: 108 callbacks suppressed [ 636.579393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.609682][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 636.643936][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.668203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 636.702824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.727325][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 636.764637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.793970][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 636.834814][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 636.864279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:12:aa:b8:fa:83:63, vlan:0) [ 637.201802][T21532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.273340][T28216] lo speed is unknown, defaulting to 1000 [ 637.399000][T21532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.517965][ T5146] Bluetooth: hci0: command tx timeout [ 637.553904][T21523] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.617062][T28216] lo speed is unknown, defaulting to 1000 [ 637.659714][T21523] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.806861][T21523] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.829676][T28216] lo speed is unknown, defaulting to 1000 [ 637.892300][T21523] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.003822][ T6143] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.013219][ T6143] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.089398][T21530] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.108378][T21530] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.155995][T21523] bridge_slave_1: left allmulticast mode [ 638.184374][T21523] bridge_slave_1: left promiscuous mode [ 638.209754][T21523] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.287333][T21523] bridge_slave_0: left allmulticast mode [ 638.307836][T21523] bridge_slave_0: left promiscuous mode [ 638.313634][T21523] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.933140][T21523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.962173][T21523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.996880][T21523] bond0 (unregistering): Released all slaves [ 639.802693][T21523] hsr_slave_0: left promiscuous mode [ 639.813323][T21523] hsr_slave_1: left promiscuous mode [ 639.820720][T21523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.832321][T21523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.845990][T21523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.853752][T21523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.885391][T21523] veth1_macvtap: left promiscuous mode [ 639.897844][T21523] veth0_macvtap: left promiscuous mode [ 639.903408][T21523] veth1_vlan: left promiscuous mode [ 639.926738][T21523] veth0_vlan: left promiscuous mode [ 640.231258][T21523] team0 (unregistering): Port device team_slave_1 removed [ 640.246596][T21523] team0 (unregistering): Port device team_slave_0 removed [ 640.936698][T21523] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.023967][T21523] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.128723][T21523] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.234768][T21523] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.361097][T21506] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.382262][T21506] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.406649][T21506] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 641.416322][T21523] veth0_to_bridge: left allmulticast mode [ 641.422574][T21523] veth0_to_bridge: left promiscuous mode [ 641.428795][T21523] bridge0: port 3(veth0_to_bridge) entered disabled state [ 641.440432][T21523] bridge_slave_1: left allmulticast mode [ 641.448475][T21523] bridge_slave_1: left promiscuous mode [ 641.454188][T21523] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.463000][T21523] bridge_slave_0: left allmulticast mode [ 641.469560][T21523] bridge_slave_0: left promiscuous mode [ 641.475286][T21523] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.519548][T21523] bridge_slave_1: left allmulticast mode [ 641.525203][T21523] bridge_slave_1: left promiscuous mode [ 641.531043][T21523] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.539238][T21523] bridge_slave_0: left allmulticast mode [ 641.544870][T21523] bridge_slave_0: left promiscuous mode [ 641.550725][T21523] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.642204][T21523] dvmrp6 (unregistering): left allmulticast mode [ 644.000538][T21523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.010415][T21523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.020379][T21523] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 644.028896][T21523] bond0 (unregistering): Released all slaves [ 644.036406][T21523] bond1 (unregistering): Released all slaves [ 644.045192][T21523] bond2 (unregistering): Released all slaves [ 644.054717][T21523] bond3 (unregistering): (slave batadv1): Releasing active interface [ 644.064003][T21523] bond3 (unregistering): Released all slaves [ 644.077211][T21523] bond4 (unregistering): Released all slaves [ 644.086066][T21523] bond5 (unregistering): Released all slaves [ 644.096565][T21523] bond6 (unregistering): Released all slaves [ 644.109327][T21523] bond7 (unregistering): Released all slaves [ 644.118111][T21523] bond8 (unregistering): Released all slaves [ 644.186640][T21523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.196640][T21523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.206436][T21523] bond0 (unregistering): Released all slaves [ 644.213953][T21506] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.304847][T21523] tipc: Disabling bearer [ 644.313612][T21523] tipc: Left network mode