last executing test programs: 17m22.463467537s ago: executing program 3 (id=7964): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce2200"], 0xfdef) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000040)={0x4, 0x3, 0x3}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 17m22.130179327s ago: executing program 3 (id=7967): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2b, 0x1, 0x0) listen(r4, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f00000003c0)=[{{0x0, 0x3d, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000027c0)=""/4133, 0xddf}, {&(0x7f0000000040)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000000a40)=""/4093, 0xffd}, {&(0x7f0000000280)=""/65, 0x41}, {&(0x7f0000000300)=""/22, 0x16}], 0x7}, 0xd}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000102, 0x0) recvmmsg$unix(r1, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}], 0x2, 0x400122a0, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x44, r6, 0x1, 0x2, 0x25dfdbfb, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c00010029bd7000fcdbdf2507000000", @ANYRES32=r0, @ANYBLOB="8000ff0a0a000200aaaaaaaaaa0b00000600050002"], 0x30}, 0x1, 0x0, 0x0, 0x40440c4}, 0x8000) 16m57.01352009s ago: executing program 3 (id=7978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_PHYS_PORT_ID={0xc, 0x22, "df3f7776ca9a69a3"}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc2003c3) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x200, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}]}, 0x46}, 0x1, 0x0, 0x0, 0x5}, 0x100) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) 16m57.011726201s ago: executing program 3 (id=7982): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2944], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4a) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) bind(r0, &(0x7f0000000080)=@can={0x1d, r1}, 0x80) 16m57.005268961s ago: executing program 3 (id=7986): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) accept(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x36, &(0x7f0000000200)={@multicast, @remote, @void, {@mpls_mc={0x8848, {[{0xff1f0, 0x0, 0x1}, {0x5}, {}, {0x6}], @llc={@llc={0xb8, 0xaa, "192f", "ca7f2b1da3d8669e6b0507d636e7aa0bc5a682e8"}}}}}}, &(0x7f0000000240)={0x0, 0x2, [0x56f, 0x26e, 0xe62, 0x562]}) setsockopt$inet6_mreq(r2, 0x29, 0x8, 0x0, 0x0) getsockopt(r1, 0x28, 0x6, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x0, 0xcb80000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@alu={0x7, 0x1, 0x5, 0xb, 0x5, 0x2, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94) 16m56.726002639s ago: executing program 3 (id=7990): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x400c844) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) tee(r0, 0xffffffffffffffff, 0x0, 0xa) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000240)=0xc8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x3fffdf2, 0x45833af92e4b39ff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0) 16m41.560342904s ago: executing program 32 (id=7990): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x400c844) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) tee(r0, 0xffffffffffffffff, 0x0, 0xa) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x12, &(0x7f0000000240)=0xc8, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x3fffdf2, 0x45833af92e4b39ff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r5, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r4], 0x68}}, 0x0) 18.084625931s ago: executing program 1 (id=15520): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8, 0x4}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0xce, 0x8000, 0x7, 0x10003, 0x5aa8, 0x0, 0x9, r4}, &(0x7f0000000140)=0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 17.637517528s ago: executing program 1 (id=15523): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000400)={{r0, &(0x7f0000000000)='-^\x00', 0x4100, &(0x7f00000000c0)={@align=0x4, {0x8, 0x8, 0xfffffffb, 0xea3}}, 0x4b, &(0x7f0000000180)={@_ha_fsid}, &(0x7f0000000280)=0x3}, {[0x3, 0xe, 0x685, 0x6]}, 0x10, 0x4b, &(0x7f00000002c0)=""/75}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, r3}, 0x94) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES16=r5, @ANYRESDEC=r3, @ANYRESOCT=0x0, @ANYBLOB], 0x28}}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r3, &(0x7f0000000780)="cd442da369627d704e37efcb00a4013f2c8e1103fae1208c08e623e61281f7678f615ea5488b73d48abe192dc36a546f4b5c92d1566c98a0da635e90947f1e92f40b154c8e284d6aabcd3c86c888e8fe0325a7aae70e870e4a73f86a6acc2bfad6574dd0c11e674d7537daa353d07f16f69779464fe60a96c60403e28f08aebdf6e03d114245582de3b469e867c22f6a32eab819304e7778af24d5dce0cf7d73e0cc1676c4e872dc7bce2c48eb8bea55cd145244406347ca8aa9a6b9b330ac4552af41989280934b60d502a9462a559aa7a33076ed79044a9e292a61eb9b2828499e178f852d2df3", &(0x7f0000000880)=@tcp=r6}, 0x20) 17.18563486s ago: executing program 1 (id=15529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x38, 0x20, 0x2d2c6d60ea1daf04, 0x70bd29, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_hsr\x00'}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x74}}, 0x0) (async) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000440)="f346946ed9994b6fb9f98096c4fafe39c832ab80c095659a559d4fbcf67a526b3fba207c1e0447977ffcd8ded13198825aff420d1c696ad17046199ea0804d0b71d987e1ae5623ae431260290b80ea84836e7597e6df7f6d7d5671bfb1500f91d50260ba8e2bdbd833f73338e8653d741af6a90600cf48e0221d7d09c55693fd22ac8df545ec5eb763b843b49b17807199d1b83058106881950d942385ca41014a978c400c6f86706bd0b6ce8477b40e1e1ea832b36e422efd9acf4632d8129add373dfaf37046d73800407d7caf7b8ace0688a3a309af79f6279e2e7d4cf685924ac3c5285bcbb1fab10daf5a90cfb6d561d03fc39a0ac961a6afecf9c8c232") (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac000180100006"], 0xec}}, 0x4000844) 16.734233816s ago: executing program 1 (id=15530): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000f7ffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d60900001fffffff7baaf0ff00000000bf2700000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000004d080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c855}, 0x30040010) 16.523514769s ago: executing program 1 (id=15532): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}], {0x14}}, 0x50}}, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6gre0\x00'}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f00000007c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f00000000c0)={'wlan0\x00'}) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) sendto(r1, &(0x7f0000000440)="1f223f94c915f3d3cd0448ccc733", 0xe, 0x800, &(0x7f0000000480)=@llc={0x1a, 0x335, 0x1, 0xff, 0x3, 0x4, @broadcast}, 0x80) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/205, 0xcd}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xb0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 16.025998143s ago: executing program 1 (id=15536): r0 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0]}}, 0x0, 0x28, 0x2}, 0x28) (async) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r1, 0x0, 0xffffffff000) 6.482224121s ago: executing program 5 (id=15580): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x28, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315, 0x6e922}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ac8add8607000000", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="01000000ff"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000018c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="09082dbd7000fddbdf257900000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x24000090}, 0x24080888) 5.91400292s ago: executing program 0 (id=15582): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000500000000000000ffff0900000000000800010001"], 0x28}}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004740)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f0000007780)=0x6, 0x4) (async, rerun: 64) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="de0f00000303010800000601000000040003"], 0x20}}, 0x0) (async, rerun: 64) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3, @ANYBLOB="831026bd7000fcdbdf251600000004000180516bb732611fe144133cb21e089ea2d6aa0888c8e533bc0c7342eaecc1d770a3697088ededca3d93e30c1ad7bd663fe76ecdfc4c7631f0f58c62d0ea3b393718c9054b13966632fb21d503daa0e2a91509076c2a5a0c801a0d6bd9675c489a8017ea7eb75d5171c98b05c970677cbac4764246ccaf38ae908dd9a34f40c902be48c3d4b3"], 0x18}, 0x1, 0x0, 0x0, 0xbde8b7aa92ee725b}, 0x80) 5.711450117s ago: executing program 0 (id=15584): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="000000000000000000000000000000000000009ad9468e1d0e4e05559ca185b672a2672e6c3198a225277b3a4c23ca9ced4941928e32a3087b7ba447f800b7fa66756fc261b8bc9a50be611e76f6ffeddbd0b373a365738440292c931e61c6252e24dc16a08ac92d79cfcebedd9c308176d83f139a4ad30fcd8d8ee063b8811cce7a2a609ce9094ac0085a08884090f9500484df9eab7f3844274574c8a773a90dbdf100fe6d190db43da5c62043ea8c3b483a6f91c0", @ANYRES32=0x0, @ANYRESOCT, @ANYBLOB="000000760000000000000000000600000000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000200), 0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r4, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21b4b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x404d849}, 0x0) 5.70844685s ago: executing program 5 (id=15585): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94) 5.504170053s ago: executing program 5 (id=15586): syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x2f, 0x1c, 0x67, 0x0, 0x9, 0x1, 0x0, @multicast2, @remote}, @address_reply={0x12, 0x0, 0x0, 0x1}}}}}, 0x0) unshare(0x46000480) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x2f, 0x1c, 0x67, 0x0, 0x9, 0x1, 0x0, @multicast2, @remote}, @address_reply={0x12, 0x0, 0x0, 0x1}}}}}, 0x0) (async) unshare(0x46000480) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) 4.916713034s ago: executing program 4 (id=15590): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0xa000}, 0x18) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e6572000000480002800800024014000084080003400000000a080004400000000f0800014000000000240005800900011d6d6574610000000014000280080001400000000e08000240000000140900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xd3, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x48}}, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000400)={'vcan0\x00'}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)={r6, 0x39, 0x5, "8a56ddfdd6"}, 0xd) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r7, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="68000000100039042cbd7000eaffffff000003e4", @ANYRES32=r7, @ANYBLOB="83000400000000004800128008000100736974003c0002800500090029000000190010"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 4.669492935s ago: executing program 2 (id=15591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000000c0)=0x9, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.668470929s ago: executing program 0 (id=15592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1048000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xd}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x7}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'vxcan1\x00'}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x801}, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4018000}, 0x0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x264, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8b, 0x3, "7ac733aefda5dc144d35dbcd3fffcb215ea5ccce10d8fc7eb7854143fdb455c208cbcdb682f5edd5ada95d986162b39ba9718a32f4ac0cbb66f26ed524442ba565baa7cb061b298b7f2929abee65c0dc08e70251d1139ecb39f47d542dbdeafd3a65dd8564cccf2ff187196304b0a2b19ee4aaa893b94b2ca9c66837dfc0d0a85dd95ce7490f73"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f2d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd51b}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'batadv0\x00'}}]}, @TIPC_NLA_MEDIA={0xa8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x69e1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd41}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53638f38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, r3, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x4004080) nanosleep(&(0x7f0000000740), &(0x7f0000000780)) syz_80211_inject_frame(&(0x7f00000007c0), &(0x7f0000000800)=@ctrl_frame=@cts, 0xa) clock_gettime(0x7, &(0x7f0000000840)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000008c0), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xcc, r4, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8001, @mcast1, 0xffffffff}}}}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f80)=[{{&(0x7f0000000a80)=@abs, 0x6e, &(0x7f0000001380)=[{&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/200, 0xc8}, {&(0x7f0000000cc0)=""/197, 0xc5}, {&(0x7f0000000dc0)=""/215, 0xd7}, {&(0x7f0000000ec0)=""/183, 0xb7}, {&(0x7f0000000f80)=""/142, 0x8e}, {&(0x7f0000001040)=""/168, 0xa8}, {&(0x7f0000001100)=""/96, 0x60}, {&(0x7f0000001180)=""/195, 0xc3}, {&(0x7f0000001280)=""/220, 0xdc}], 0xa, &(0x7f0000001440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000001580)=""/70, 0x46}, {&(0x7f0000001600)=""/169, 0xa9}], 0x2, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f00000017c0), 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001840)=""/144, 0x90}, {&(0x7f0000001900)=""/221, 0xdd}, {&(0x7f0000001a00)=""/220, 0xdc}, {&(0x7f0000001b00)=""/112, 0x70}, {&(0x7f0000001b80)=""/158, 0x9e}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)}], 0x7, &(0x7f0000002d00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000002d40)=@abs, 0x6e, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x150}}], 0x4, 0x40012103, &(0x7f0000003080)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000003240)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003200)={&(0x7f0000003140)={0x98, r9, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x851) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000032c0), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000003380)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, r10, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000811}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r11, &(0x7f0000003480)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x24, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x1) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000003580)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4004000) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003600), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000036c0)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003680)={&(0x7f0000003640)={0x28, r12, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x801) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003740), r6) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000003840)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x24, r13, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0xe}, @val={0x8, 0x3, r14}, @void}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044001}, 0x20000004) r15 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000038c0), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000039c0)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)={0x54, r15, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:udev_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10) syz_80211_inject_frame(&(0x7f0000003a00)=@broadcast, &(0x7f0000003a40)=@ctrl_frame=@ba={{}, {0x1}, @device_a, @device_b, @basic={{0x0, 0x0, 0x0, 0x0, 0x5}, {0x5, 0x7f}, "571c4412c485143c5608da4659e4e0fc4d27523e00f2146340cd67b825ca555d3b29d2c43baf40b95a9f608a69ab6cbb59bd8e5747f0d862ea885dece0e265a22dd0781895d8be22abbc5a5c7078c1e1512b07a7b2297a21e4b2c23666cb9017b13629b21df3d3362ecf8b934c0e4b586c4fbd1150fa07dc184dcf3f859e9d70"}}, 0x94) sendmsg$TIPC_NL_BEARER_GET(r11, &(0x7f0000003d00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003b40)={0x164, r4, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9e1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x49, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x3, @empty, 0x5}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x449ae22b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) 4.585825156s ago: executing program 4 (id=15593): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffece}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000440)={0xa, 0xe1f, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x28) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r1, 0x11a, 0x4, &(0x7f0000000040)=0x1, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r9, 0x4}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b00010324bd70000000002508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 4.065040148s ago: executing program 2 (id=15594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x5c, 0x48, 0x8, 0x70bd25, 0x25dfdbfb, {0xa, 0x0, 0x40, 0x0, 0x0, 0x80000001}, [@IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000030c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x2, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x7}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 3.90624743s ago: executing program 5 (id=15595): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x3e, "776726596195f0f377e477a604b181fc07c655da25a9129f1b90d0d104ff28a9229f7e91f396fbc4f16792e9c4b6aef154d5880fb2d47914a03ee8cf8abf"}, &(0x7f0000000100)=0x46) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)={r2}, &(0x7f0000000180)=0x8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000000000010200012800b0001006272696467650000100002800c002e00000000001c"], 0x40}}, 0x0) 3.905079928s ago: executing program 2 (id=15596): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000140000000e3"], 0x88}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x110, 0x2e0, 0x2e0, 0x110, 0x2e0, 0x4, 0x0, {[{{@arp={@multicast2, @empty, 0x0, 0x0, 0x3, 0xe, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@remote}, 0x4, 0x5, 0xfff8, 0x91fe, 0x3, 0x0, 'bridge0\x00', 'veth1_to_bond\x00', {}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0xff000000, 0xa, 0x2, {@mac=@random="0acc9bdf614c", {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x4, 0xfff7, 0x2, 0xf, 0xb, 0x0, 'veth0_to_bond\x00', 'pimreg1\x00', {}, {}, 0x0, 0x282}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0xfffa}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x8, 0x3, 0x328, 0x190, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @private0, [0xff, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xff000000], 'wlan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x2c, 0xc7, 0x6, 0x61}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d6], 0x8, 0xe, 0x2}}, @common=@srh1={{0x90}, {0x3a, 0x2, 0xf, 0x0, 0x9, @private1, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], [0xff000000, 0xff, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0x0, 0xffffff00], 0x13a8, 0x1e8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x4, 0x6}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x388) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x60, r3, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1df}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x60}}, 0x0) 3.79720892s ago: executing program 2 (id=15597): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14}}, 0x84}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/111, 0x6f}], 0x1, &(0x7f00000003c0)=""/47, 0x2f}, 0x3}], 0x1, 0x22, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd8}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc4}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffd0}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x1c, &(0x7f00000010c0)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7, 0x2}, @generic={0x7b, 0xa, 0x2, 0xfff8}, @generic={0x7b, 0xa, 0x2, 0xfff0}, @generic={0x7b, 0xa, 0x2, 0xffe8}, @generic={0x7b, 0xa, 0x2, 0xffe0}, @generic={0x7b, 0xa, 0x2, 0xffd8}, @generic={0x7b, 0xa, 0x2, 0xffd0}, @generic={0x7b, 0xa, 0x2, 0xffc8}, @generic={0x7b, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0xb7, 0x2, 0x0, 0x0, 0x1}, @generic={0x63, 0xa, 0x2, 0xffc4}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffcc}, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0x63, 0xa, 0x2, 0xffd0}, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0xb7, 0x0, 0x0, 0x0, 0x2}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r5, 0x0, 0x36, 0x0, &(0x7f0000002280)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200500050000000000000000050022000b82b0000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_tcp_buf(r4, 0x6, 0x21, 0x0, &(0x7f0000000180)) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r8, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) (async) setsockopt$WPAN_SECURITY(r8, 0x0, 0x31, &(0x7f0000000fc0)=0x1, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r6, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) (async) setsockopt$netlink_NETLINK_PKTINFO(r9, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x1c, 0x3a, 0x229, 0x0, 0x0, {0xa}, [@generic="750ec696b5"]}, 0x1c}}, 0x0) socket$inet6(0xa, 0x3, 0x3) 3.737325145s ago: executing program 5 (id=15598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @rand_addr, @multicast2=0xe0000001}, {{0x0, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="72400d9a87e9f41ca9e6"], 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f000000e380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)=[{0x10, 0x117, 0x2}], 0x10}}], 0x1, 0x800) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x30, r8, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1f}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, '{^,.\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x80000008, 0x10004}) 3.613948754s ago: executing program 0 (id=15599): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000c134deccf4aa748079451cbbbbbbbbbbbb0800450000380000000002019078ac1e0001ac1414aa030190781240183f250000000000000000840001ac1414327f"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x134, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x134}}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x89a3, &(0x7f0000000100)) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000280)) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="3800000010000700000070000000000000000000b5ba5a37536ba5560399dd4c76612d31", @ANYRES32=r3, @ANYBLOB="200a000014110000180012800b000100697036746e6c00000800028004001300"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x100, 0x80bc}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000010c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r5, 0x4) pipe(&(0x7f0000000580)) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000005c0)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04040000000000000008000080000000000008000025f4eb930000004cead11420162428107fcb5b35f3561858ddfebdeb709969026338b278c358e3bafc9f9e410ea9db977800020000a4260b05525854395097256625a6c585f73e321dd36a64fac8877f5f92b4056285ad8106c9d8047d2773839ad66dd8c2b88b51eaeec4901696aac3e99527d44c338bea5051010046bcf4f3b1bd57962f"], 0x50) bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x3, 0x20, 0x8d, 0x2, 0x964, 0xb065c522, 0x7}}, {0x12, 0x2, [0xf000, 0x10, 0x7f, 0x1, 0xd, 0x4, 0x40]}}, {{0x1c, 0x1, {0x8, 0x7, 0x2, 0x178, 0x2, 0x1, 0x7}}, {0x4}}, {{0x1c, 0x1, {0xf, 0x7, 0x0, 0x9, 0x0, 0x7f2d6368, 0x6, 0x1}}, {0x6, 0x2, [0x3]}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0x40, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 3.472177641s ago: executing program 4 (id=15600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x4, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40855}, 0x4014) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000280), &(0x7f0000000100)=@tcp=r4, 0x1}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010079656e657665000010000280050004000d00000004000600"], 0x40}}, 0x0) 3.239869465s ago: executing program 0 (id=15601): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @host}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) listen(r1, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1ff}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)={0x20, r9, 0x9, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x2c, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x40040) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x100, @private0, 0x7}}, 0x8, 0x5c, 0x5, 0xffe0, 0x2, 0xfffff001, 0xf7}, &(0x7f0000000440)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000480)={0x303, 0xd5bd, 0x200, 0x9, 0x6, 0xa, 0xffffffff, 0x8, r11}, 0x20) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000825bd7000ffdbdf251f00000008009a00020000000400cc00060021006200000007e32100626200000600210061000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600e17900112233445566778899aabb0800450000140000000001170000010203040506074a8dd1cef5813924000600884700000c0003000800110004000000"], 0x58}}, 0x0) 469.387188ms ago: executing program 2 (id=15602): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x7}) r0 = socket$inet_udp(0x2, 0x2, 0x0) splice(r0, &(0x7f0000000040)=0x72d, 0xffffffffffffffff, &(0x7f0000000080)=0x40000, 0x4, 0xd) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f00000000c0)={{0x28b}, 0x100}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_deladdr={0x80, 0x15, 0x100, 0x70bd25, 0x25dfdbfc, {0xa, 0x38, 0x20, 0xc8, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x7, 0x1, 0xe2a9, 0x5}}, @IFA_LOCAL={0x14, 0x2, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_FLAGS={0x8}, @IFA_CACHEINFO={0x14, 0x6, {0x9, 0x0, 0x3, 0x9}}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x0, 0x9, 0x1}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4994}, 0x4000040) r2 = accept(r0, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000014) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x64, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000700), 0x4) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), r4) socket$igmp6(0xa, 0x3, 0x2) r7 = socket$xdp(0x2c, 0x3, 0x0) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000780)="312bc75688fb4fae8f974559e70bfa265f033f21656be2fa34fd0428c6cbad55e40519ab921b29388447e1264588acd6227cf3c269b43f038996f30c042df8cb46168b167e771948cd8c7e9eea1f4135e332232ff57fc19985fce1b01de047a5c549d6e8d9c69d8100a984549ca96da0cbe8744988e761f4f964e511643d4ca88af233b7415a8f23de2e93c455f173b5254927ce814ff7f8c360ca8f47568928dc31330e87087de1227125e96e84a1805d748e7a12c1acd8fbf3e9c1a850ba2a5932fe37a3c71c6ba1") r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000880)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x110, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x4004000) r9 = socket$rxrpc(0x21, 0x2, 0xcf34156b0c600500) ioctl$XFS_IOC_FSINUMBERS(r9, 0xc0205867, &(0x7f0000000f00)={&(0x7f0000000ac0)=0x3, 0x400, &(0x7f0000000b00)=[{}, {}, {}, {}, {}], &(0x7f0000000ec0)}) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000f40), 0x1, 0x0) write(r10, &(0x7f0000000f80)="c740c0faae0e97ef24ce7b7ae09a16e1bf", 0x11) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000fc0)) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000001080)={r4, r7, 0xfff9, 0x62, &(0x7f0000001000)="8d53504a23ff3086e78bdc488769a0b93406003171887045ae3c89306ba0676e54b2ffc8c2f1dfaabaeee7b4ec0c9b238e9db8707d2c496e3683e31bd0d2c73fb9f9cd23a2ddf2f69428f3413b859f340c942b9fb9c91c60379ad76ef169e383a247", 0x5, 0x6, 0xff, 0x4, 0xd, 0x2, 0xefa, 'syz1\x00'}) getsockopt$SO_COOKIE(r8, 0x1, 0x39, &(0x7f0000001140), &(0x7f0000001180)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001200)=@filter={'filter\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x1f8, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f00000011c0), {[{{@ipv6={@private2, @loopback, [0xffffffff, 0xffffffff, 0xffffffff], [0xff, 0xff, 0xff000000, 0xff], 'team0\x00', 'netpci0\x00', {0xff}, {}, 0x3c, 0x5f, 0x5, 0x2}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0xf2}}, @common=@srh={{0x30}, {0x0, 0x1, 0xb, 0x2, 0xfff, 0x86}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x8}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x2, 0x1}, {0x1, 0x4, 0x1}}}}, {{@ipv6={@private1, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff000000, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xffffff00, 0xff, 0xff], 'xfrm0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x1, 0x13}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xa}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) write(r2, &(0x7f0000001600)="c00601c6842218e5bf44e9e0d9ea915fdb3256724a8c528f831758adb91c36add0f53cd12a64de579e774c32dd50839b2e9c4872d4261ab88c72b54cae533e06e038a676289bb971dc277a00d75ac9059579a5ab58756965544933b4d26d04197fd40764fecb88b08e27c6fad58a432cf2cc4c1edd605d7bedf89773db730f7a681a453cbd0fa5b3942867", 0x8b) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f0000001780)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x73e2e1b13ea49c61}, 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x24, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4010) 469.019863ms ago: executing program 4 (id=15603): socketpair(0x1f, 0x6, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) socket$l2tp6(0xa, 0x2, 0x73) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x70, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x91}, @L2TP_ATTR_FD={0x8}, @L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x70}, 0x1, 0x0, 0x0, 0x48000}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 468.690405ms ago: executing program 0 (id=15604): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private2}}, &(0x7f0000000200)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340100001818000008000300", @ANYRES32=r1, @ANYBLOB="06001500070000000500140006000000"], 0x34}}, 0x0) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_newroute={0x34, 0x18, 0x401, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x2, 0x0, 0x1}, [@RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_MARK={0x8, 0x10, 0x400}]}, 0x34}}, 0x0) 304.820157ms ago: executing program 4 (id=15605): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, 0x0) syz_emit_ethernet(0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000021001122334455000a4242030001fe", @ANYRES32=r0], 0x0) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) (async) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000020009502000000000000ccedc8c5b55ce7a1564bd2ab8d9715308b31dcff17201ddc0bffff3c57d7d5c15a427d08ac7c4c7d21eb9d198f4c93915389ead5f76e38afc8a3b243796bfd261072d7028555c1664c54cd82"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x2b}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c00018008000140000000020800014000000003"], 0x364}}, 0x0) 148.225472ms ago: executing program 4 (id=15606): r0 = socket$xdp(0x2c, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000000)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x300}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x4c}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={r0, &(0x7f00000000c0)='.\\{)+[\x00', 0x0, &(0x7f0000000100)={@align=0x3ff, {0x4, 0x0, 0x1a0370fc, 0x200}}, 0x80000001, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000380)=0x5}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r4, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x44}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0xe, 0x4, "82cc759989b1af157205"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "148f17cdc3822a6fe0153684ea"}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "2e6f32c5f14c207cf450ac1961"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9e6da6b3e2"}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x200088c4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a00000008000300", @ANYRESOCT], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="186000ef020400000000000007000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xdc, &(0x7f00000001c0)=""/220, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a}, 0x94) socket$kcm(0x29, 0x5, 0x0) 73.392048ms ago: executing program 5 (id=15607): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000800100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x28, 0x80000, 0x0) getsockopt(r1, 0x28, 0x8, 0x0, &(0x7f0000000040)=0x47) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000690200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 0s ago: executing program 2 (id=15608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x879ab000) getsockopt$bt_hci(r0, 0x11a, 0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000480), 0x10) (async) connect$can_bcm(r3, &(0x7f0000000480), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): [ 1885.997811][T27395] batman_adv: batadv0: Adding interface: gretap2 [ 1886.046629][T27395] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 1886.167493][T27395] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1886.492379][T27410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13925'. [ 1886.623306][T27412] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13926'. [ 1887.328800][T27436] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13931'. [ 1887.572270][T27439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13933'. [ 1887.596903][T27440] netlink: 'syz.5.13932': attribute type 21 has an invalid length. [ 1887.611999][T27443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13934'. [ 1887.641628][T27440] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13932'. [ 1887.673036][T27444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13935'. [ 1887.726139][T27444] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1888.050614][T27464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13932'. [ 1888.083763][T27464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13932'. [ 1888.625979][T27471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13942'. [ 1889.024911][T27472] netlink: 104 bytes leftover after parsing attributes in process `syz.1.13943'. [ 1889.123341][T27478] netlink: 45 bytes leftover after parsing attributes in process `syz.5.13945'. [ 1889.653515][T27500] netlink: 'syz.1.13951': attribute type 5 has an invalid length. [ 1889.883179][T27505] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1890.569906][T27532] netlink: 'syz.1.13962': attribute type 1 has an invalid length. [ 1890.789278][T22051] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1890.804303][T22051] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1890.815872][T22051] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1890.825689][T22051] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1890.836496][T22051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1890.940601][T27532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1891.113917][T27537] bond0: (slave gretap1): making interface the new active one [ 1891.159010][T27537] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 1892.440293][T27588] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1892.469205][T27588] __nla_validate_parse: 6 callbacks suppressed [ 1892.469227][T27588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13974'. [ 1892.589979][ T8643] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.661525][ T8643] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.696159][ T8643] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1892.899146][T22263] Bluetooth: hci5: command tx timeout [ 1893.018148][T27608] syzkaller0: entered promiscuous mode [ 1893.071619][T27608] syzkaller0: entered allmulticast mode [ 1893.209134][T27616] netlink: 'syz.4.13981': attribute type 2 has an invalid length. [ 1893.357073][ T8643] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.376036][ T8643] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.413188][ T8643] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1893.483417][T27626] x_tables: duplicate underflow at hook 1 [ 1893.634432][ T8643] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.650760][ T8643] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.662187][ T8643] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1893.790250][T27631] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13986'. [ 1893.885638][T27538] wg0 speed is unknown, defaulting to 1000 [ 1894.298756][ T8639] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.722924][T27650] netlink: 104 bytes leftover after parsing attributes in process `syz.0.13991'. [ 1894.862481][ T8639] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.936278][ T8639] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1894.983456][T22263] Bluetooth: hci5: command tx timeout [ 1895.057802][ T8643] bridge_slave_1: left allmulticast mode [ 1895.077507][ T8643] bridge_slave_1: left promiscuous mode [ 1895.095212][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.133958][ T8643] bridge_slave_0: left allmulticast mode [ 1895.160570][T27661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13993'. [ 1895.162007][ T8643] bridge_slave_0: left promiscuous mode [ 1895.204403][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.537131][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1895.588860][T27676] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13996'. [ 1895.624011][T27676] netlink: 'syz.4.13996': attribute type 9 has an invalid length. [ 1896.342505][ T8643] bond1 (unregistering): (slave erspan1): Releasing active interface [ 1896.358653][ T8643] erspan1 (unregistering): left promiscuous mode [ 1896.545621][ T8643] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 1897.057793][T22263] Bluetooth: hci5: command tx timeout [ 1897.208743][ T8643] bond8 (unregistering): (slave bridge7): Releasing active interface [ 1897.225137][ T8643] bridge7 (unregistering): left promiscuous mode [ 1897.232947][ T8643] bridge7 (unregistering): left allmulticast mode [ 1897.252273][ T8643] bond11 (unregistering): (slave bridge8): Releasing backup interface [ 1897.261212][ T8643] bridge8 (unregistering): left promiscuous mode [ 1897.273991][ T8643] bridge8 (unregistering): left allmulticast mode [ 1897.316398][ T8643] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1897.334494][ T8643] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1897.353590][ T8643] .` (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1897.366363][ T8643] .` (unregistering): Released all slaves [ 1897.392708][ T8643] bond1 (unregistering): Released all slaves [ 1897.416284][ T8643] bond2 (unregistering): Released all slaves [ 1897.470748][ T8643] bond0 (unregistering): Released all slaves [ 1897.506442][ T8643] bond3 (unregistering): Released all slaves [ 1897.544623][ T8643] bond4 (unregistering): (slave bond5): Releasing backup interface [ 1897.555438][ T8643] bond4 (unregistering): Released all slaves [ 1897.586547][ T8643] bond5 (unregistering): Released all slaves [ 1897.614551][ T8643] bond6 (unregistering): Released all slaves [ 1897.649874][ T8643] bond7 (unregistering): Released all slaves [ 1897.690902][ T8643] bond8 (unregistering): Released all slaves [ 1897.723344][ T8643] bond9 (unregistering): Released all slaves [ 1897.753216][ T8643] bond10 (unregistering): Released all slaves [ 1897.793475][ T8643] bond11 (unregistering): Released all slaves [ 1897.816285][ T8643] bond12 (unregistering): Released all slaves [ 1897.873895][T11416] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1897.904515][T27661] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1897.962132][T27661] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1898.027118][T27661] gretap1: entered promiscuous mode [ 1898.086450][T27661] gretap1: entered allmulticast mode [ 1898.132624][T27673] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 1898.183017][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1898.254855][T27702] xt_hashlimit: size too large, truncated to 1048576 [ 1898.345131][T27700] netlink: 'syz.1.13999': attribute type 7 has an invalid length. [ 1898.560683][ T8643] tipc: Disabling bearer [ 1898.615315][ T8643] tipc: Disabling bearer [ 1898.653661][ T8643] tipc: Left network mode [ 1899.137336][T22263] Bluetooth: hci5: command tx timeout [ 1899.351820][T27712] vlan1 (unregistering): left allmulticast mode [ 1899.358613][T27712] veth0_vlan (unregistering): left allmulticast mode [ 1899.891027][T27538] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.937960][T27538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1900.010784][T27538] bridge_slave_0: entered allmulticast mode [ 1900.052194][T27538] bridge_slave_0: entered promiscuous mode [ 1900.137259][T27735] vlan0: entered promiscuous mode [ 1900.172549][T27735] bridge0: entered promiscuous mode [ 1900.260952][T27750] netlink: 76 bytes leftover after parsing attributes in process `syz.0.14010'. [ 1900.907804][T27538] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.937765][T27538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.987136][T27538] bridge_slave_1: entered allmulticast mode [ 1901.036204][T27538] bridge_slave_1: entered promiscuous mode [ 1901.237834][T22263] Bluetooth: hci5: command tx timeout [ 1901.466375][T27538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.520844][T27538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1901.940866][T27780] syzkaller0: entered promiscuous mode [ 1901.957327][T27780] syzkaller0: entered allmulticast mode [ 1902.044036][T27538] team0: Port device team_slave_0 added [ 1902.121522][ T8643] hsr_slave_0: left promiscuous mode [ 1902.154489][ T8643] hsr_slave_1: left promiscuous mode [ 1902.180150][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1902.215537][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1902.254127][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1902.280623][T27792] Cannot find add_set index 65532 as target [ 1902.298868][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1902.365828][ T8643] veth1_macvtap: left promiscuous mode [ 1902.387736][ T8643] veth0_macvtap: left promiscuous mode [ 1903.451337][T27538] team0: Port device team_slave_1 added [ 1903.515538][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1903.575888][T27804] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1903.598825][T27804] syzkaller1: linktype set to 823 [ 1903.905956][T27538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1903.963639][T27538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1904.006768][T27817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14022'. [ 1904.064975][T27538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1904.216644][T27538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1904.261218][T27538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1904.307761][T27538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1904.550577][T27538] hsr_slave_0: entered promiscuous mode [ 1904.604958][T27538] hsr_slave_1: entered promiscuous mode [ 1904.627947][T27538] debugfs: 'hsr0' already exists in 'hsr' [ 1904.644710][T27538] Cannot create hsr debugfs directory [ 1904.694259][T27829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14025'. [ 1904.908579][T27841] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14028'. [ 1904.961876][ T8643] IPVS: stop unused estimator thread 0... [ 1905.706075][T27862] netlink: 'syz.4.14032': attribute type 3 has an invalid length. [ 1905.910008][T27865] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1906.153372][T27538] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.433535][T27849] netlink: 'syz.0.14030': attribute type 1 has an invalid length. [ 1906.452886][T27884] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14036'. [ 1906.469392][T27849] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14030'. [ 1906.620946][T27538] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1907.103968][T27538] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1907.376417][T27538] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1907.576051][T27918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14046'. [ 1908.114503][T27936] lo: entered allmulticast mode [ 1908.945920][T27971] netlink: Conntrack attr has 1 unknown bytes [ 1908.976252][T27538] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1909.003461][T27971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1909.127391][T27538] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1909.160111][T27538] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1909.215317][T27538] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1909.249258][T27538] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1909.283752][T27538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1909.333107][T27538] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1909.364639][T27538] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1909.374847][T27979] netlink: 'syz.0.14060': attribute type 1 has an invalid length. [ 1909.446532][T27981] macsec1: entered promiscuous mode [ 1909.473667][ T29] audit: type=1800 audit(1786773124.977:33): pid=27982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14060" name=0A dev="tmpfs" ino=1554 res=0 errno=0 [ 1910.118365][T27538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1910.229285][T27538] 8021q: adding VLAN 0 to HW filter on device team0 [ 1910.311675][T11410] bridge0: port 1(bridge_slave_0) entered blocking state [ 1910.318939][T11410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1910.383267][T11410] bridge0: port 2(bridge_slave_1) entered blocking state [ 1910.390537][T11410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1910.755902][T28033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14075'. [ 1911.049584][T28043] xt_hashlimit: size too large, truncated to 1048576 [ 1911.596478][T28053] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1912.273077][T28073] ip_tables: iptables: counters copy to user failed while replacing table [ 1912.534250][T28086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14085'. [ 1912.661936][T28086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1912.841547][T28086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1913.113952][T27538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1913.412528][T28104] netlink: 68 bytes leftover after parsing attributes in process `syz.4.14089'. [ 1914.570511][T28150] netlink: 'syz.0.14102': attribute type 12 has an invalid length. [ 1914.608880][T28147] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1914.698262][T28147] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1914.808043][T27538] veth0_vlan: entered promiscuous mode [ 1914.842591][T28161] netlink: 'syz.4.14104': attribute type 21 has an invalid length. [ 1914.870794][T28161] netlink: 'syz.4.14104': attribute type 1 has an invalid length. [ 1914.891098][T27538] veth1_vlan: entered promiscuous mode [ 1915.062034][T27538] veth0_macvtap: entered promiscuous mode [ 1915.114873][T27538] veth1_macvtap: entered promiscuous mode [ 1915.239817][T27538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1915.321519][T27538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1915.458720][ T1004] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.490531][ T1004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.541881][T28179] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14109'. [ 1915.554289][ T1004] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.610320][ T8644] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.621783][T28181] netlink: 'syz.4.14107': attribute type 10 has an invalid length. [ 1915.695162][T28185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14107'. [ 1916.158285][ T8642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.205106][ T8642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.255473][T28197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14113'. [ 1916.367741][ T8644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1916.375631][ T8644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.954785][T28221] ip6t_srh: unknown srh match flags 5F28 [ 1917.554294][T28197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14113'. [ 1917.595365][T28197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14113'. [ 1918.080102][T28245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1918.231041][T28251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14125'. [ 1918.304492][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14126'. [ 1918.520202][T28264] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14130'. [ 1918.687692][T28272] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1918.823771][T28276] netlink: 'syz.0.14134': attribute type 4 has an invalid length. [ 1918.895095][T28277] bond2: entered promiscuous mode [ 1918.905111][T28277] bond2: entered allmulticast mode [ 1919.559926][T28310] netlink: 'syz.2.14141': attribute type 1 has an invalid length. [ 1919.603325][T28310] netlink: 'syz.2.14141': attribute type 2 has an invalid length. [ 1919.703791][T28310] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1920.104858][T28331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14151'. [ 1920.189574][T28338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14151'. [ 1920.226536][ T9501] IPVS: starting estimator thread 0... [ 1920.340991][T28341] IPVS: using max 25 ests per chain, 60000 per kthread [ 1920.450049][T28331] macvtap1: entered promiscuous mode [ 1920.479003][T28331] vlan0: entered promiscuous mode [ 1920.511984][T28331] macvtap1: entered allmulticast mode [ 1920.533335][T28349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14153'. [ 1920.550010][T28331] vlan0: entered allmulticast mode [ 1920.573416][T28331] veth0_vlan: entered allmulticast mode [ 1920.610344][T28349] netlink: 'syz.2.14153': attribute type 7 has an invalid length. [ 1920.670185][T28349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14153'. [ 1920.911616][T28338] macvtap2: entered promiscuous mode [ 1920.949112][T28338] macvtap2: entered allmulticast mode [ 1921.231340][T28363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14158'. [ 1921.345480][T28368] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1922.124795][T28403] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1922.165532][T28403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1922.780740][T28417] syzkaller0: entered promiscuous mode [ 1922.801287][T28417] syzkaller0: entered allmulticast mode [ 1923.556108][T28438] netlink: 'syz.5.14178': attribute type 11 has an invalid length. [ 1923.570406][T28440] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1923.734509][T28444] __nla_validate_parse: 3 callbacks suppressed [ 1923.734529][T28444] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14181'. [ 1923.780077][T28450] xt_NFQUEUE: number of queues (16) out of range (got 65549) [ 1924.098629][T28462] bond2: entered promiscuous mode [ 1924.108601][T28462] bond2: entered allmulticast mode [ 1924.115160][T28462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1924.143558][T28469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14185'. [ 1924.153882][T28468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14188'. [ 1924.610418][T28469] hsr_slave_1 (unregistering): left promiscuous mode [ 1924.951350][T28494] netlink: 'syz.1.14193': attribute type 1 has an invalid length. [ 1925.081699][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14193'. [ 1925.098421][T28500] netlink: 108 bytes leftover after parsing attributes in process `syz.4.14197'. [ 1925.328592][T28494] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1925.615499][T28509] bond3: (slave geneve2): making interface the new active one [ 1925.655395][T28509] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1926.056172][T28533] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1926.110344][T28530] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1926.452820][T28542] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1927.073167][T28558] netlink: 'syz.0.14212': attribute type 2 has an invalid length. [ 1927.119817][T28558] netlink: 'syz.0.14212': attribute type 1 has an invalid length. [ 1927.255709][T28562] smc: net device team0 applied user defined pnetid SYZ2 [ 1927.325941][T28564] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1927.645584][T28570] netlink: 'syz.5.14216': attribute type 1 has an invalid length. [ 1928.112863][T28589] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 1928.149604][T28589] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1928.271452][T28599] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1928.683031][T28611] netlink: 'syz.2.14227': attribute type 1 has an invalid length. [ 1928.873338][T28614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14228'. [ 1929.159340][T28624] netlink: 'syz.1.14231': attribute type 1 has an invalid length. [ 1929.213972][T28624] netlink: 'syz.1.14231': attribute type 2 has an invalid length. [ 1929.353421][T28635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14234'. [ 1929.369241][T28634] netlink: 'syz.1.14231': attribute type 1 has an invalid length. [ 1929.387470][T28631] netlink: 'syz.2.14233': attribute type 1 has an invalid length. [ 1929.422980][T28634] netlink: 'syz.1.14231': attribute type 2 has an invalid length. [ 1929.466995][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1929.499350][T28639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14233'. [ 1929.672144][T28631] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1929.713410][T28636] veth0_to_bond: left allmulticast mode [ 1929.720987][T28642] xt_hashlimit: size too large, truncated to 1048576 [ 1929.874866][T28636] bond6: (slave veth0_to_bond): making interface the new active one [ 1929.936491][T28636] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1930.122944][T28639] macvlan0: entered promiscuous mode [ 1930.150674][T28639] macvlan0: entered allmulticast mode [ 1931.213548][T28682] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14243'. [ 1931.252687][T28682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14243'. [ 1931.296006][T28682] netlink: 144 bytes leftover after parsing attributes in process `syz.2.14243'. [ 1931.348261][T28685] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14245'. [ 1931.748544][T28696] ip_tables: iptables: counters copy to user failed while replacing table [ 1931.795958][T28697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14248'. [ 1931.842364][T28702] netlink: 'syz.0.14251': attribute type 21 has an invalid length. [ 1931.889376][T28702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14251'. [ 1932.123499][T28718] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1932.194001][T28718] netlink: 'syz.5.14253': attribute type 10 has an invalid length. [ 1932.408267][T28718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1932.478003][T28718] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 1932.945462][T28742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1933.466097][T28762] xt_connbytes: Forcing CT accounting to be enabled [ 1933.485815][T28762] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1933.494895][T28759] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14266'. [ 1934.119272][T28782] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14271'. [ 1934.149331][T28785] netlink: 'syz.2.14272': attribute type 32 has an invalid length. [ 1934.214227][T28785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14272'. [ 1934.285611][T28785] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1934.512241][T28796] netlink: 'syz.1.14255': attribute type 13 has an invalid length. [ 1934.757059][T28801] openvswitch: netlink: IP tunnel dst address not specified [ 1934.773285][T28804] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14275'. [ 1935.246332][T28823] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14282'. [ 1935.272150][T28823] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14282'. [ 1935.345089][T28823] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14282'. [ 1936.216195][T28856] netlink: 'syz.2.14290': attribute type 2 has an invalid length. [ 1936.461731][T28864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14291'. [ 1941.964107][T28892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14300'. [ 1942.277131][T28893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14298'. [ 1942.338682][T28904] netlink: 'syz.5.14302': attribute type 4 has an invalid length. [ 1942.371652][T28907] netlink: 'syz.5.14302': attribute type 4 has an invalid length. [ 1942.839795][T28921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14306'. [ 1942.910417][T28921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14306'. [ 1943.533525][T28947] pimreg: entered allmulticast mode [ 1943.699677][T28961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14318'. [ 1943.720041][T28963] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14318'. [ 1943.734810][T28961] netlink: 'syz.2.14318': attribute type 2 has an invalid length. [ 1943.748154][T28961] netlink: 'syz.2.14318': attribute type 2 has an invalid length. [ 1943.756340][T28963] netlink: 'syz.2.14318': attribute type 2 has an invalid length. [ 1943.769856][T28963] netlink: 'syz.2.14318': attribute type 2 has an invalid length. [ 1943.846033][T28969] netlink: 'syz.2.14319': attribute type 21 has an invalid length. [ 1944.289189][T28978] netlink: 'syz.5.14320': attribute type 39 has an invalid length. [ 1944.687451][T28988] sctp: [Deprecated]: syz.4.14323 (pid 28988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1944.687451][T28988] Use struct sctp_sack_info instead [ 1944.758289][T28991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14324'. [ 1944.822919][T28999] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20000 [ 1945.071475][T29006] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14327'. [ 1945.460820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1946.008543][T29044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1946.181916][T29053] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1946.203291][T29053] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1946.234064][T29058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1946.309289][T29060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14340'. [ 1946.601623][T29069] tipc: Enabled bearer , priority 0 [ 1946.611576][T29072] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14343'. [ 1946.631590][T29069] syzkaller0: entered promiscuous mode [ 1946.649288][T29069] syzkaller0: entered allmulticast mode [ 1946.674179][T29072] bridge0: port 1(veth0) entered blocking state [ 1946.695840][T29072] bridge0: port 1(veth0) entered disabled state [ 1946.718566][T29072] veth0: entered allmulticast mode [ 1946.731914][T29072] veth0: entered promiscuous mode [ 1946.754594][T29077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1946.941526][T29071] tipc: Resetting bearer [ 1947.051824][T29071] tipc: Disabling bearer [ 1947.103179][T29081] __nla_validate_parse: 1 callbacks suppressed [ 1947.103201][T29081] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14345'. [ 1947.342874][T29090] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1948.051793][T29116] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1948.090310][T29116] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1948.600500][T29136] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 1948.722455][T29143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14363'. [ 1948.991780][T29157] netlink: 48 bytes leftover after parsing attributes in process `syz.0.14367'. [ 1949.166721][T29158] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14365'. [ 1949.571937][T29174] netlink: 'syz.1.14369': attribute type 3 has an invalid length. [ 1949.660348][T29174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14369'. [ 1949.732415][T29174] netlink: 'syz.1.14369': attribute type 3 has an invalid length. [ 1949.793375][T29182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14371'. [ 1949.815138][T29174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14369'. [ 1949.891354][T29188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14372'. [ 1950.015133][T29174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14369'. [ 1950.109320][T29191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14369'. [ 1952.331179][T29164] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1952.601776][T29206] netlink: 'syz.5.14375': attribute type 1 has an invalid length. [ 1952.751235][T29211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14375'. [ 1952.788947][T29206] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1952.816720][T29206] bond2: (slave bond3): making interface the new active one [ 1952.839273][T29206] bond2: (slave bond3): Enslaving as an active interface with an up link [ 1953.003216][T29219] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14378'. [ 1953.810519][T29211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1954.240253][T29237] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1954.713277][T29246] tipc: Enabling of bearer rejected, failed to enable media [ 1954.956369][T29252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14386'. [ 1955.143957][T29256] netlink: 'syz.4.14389': attribute type 1 has an invalid length. [ 1955.155763][T29257] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1955.163976][T29256] netlink: 232 bytes leftover after parsing attributes in process `syz.4.14389'. [ 1955.197293][T29256] netlink: 'syz.4.14389': attribute type 1 has an invalid length. [ 1955.285626][T29264] netlink: 'syz.2.14391': attribute type 11 has an invalid length. [ 1955.325598][T29264] netlink: 'syz.2.14391': attribute type 11 has an invalid length. [ 1955.356258][T29264] netlink: 228 bytes leftover after parsing attributes in process `syz.2.14391'. [ 1955.573060][T29269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1955.759234][T29285] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14398'. [ 1956.537457][T29302] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1956.544783][T29302] IPv6: NLM_F_CREATE should be set when creating new route [ 1956.552155][T29302] IPv6: NLM_F_CREATE should be set when creating new route [ 1957.095639][T29328] nbd: must specify an index to disconnect [ 1957.796658][T29346] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14412'. [ 1957.967636][T29352] netlink: 'syz.2.14414': attribute type 1 has an invalid length. [ 1958.025238][T29357] netlink: 'syz.5.14415': attribute type 1 has an invalid length. [ 1958.035526][T29352] netlink: 'syz.2.14414': attribute type 4 has an invalid length. [ 1958.065861][T29357] netlink: 'syz.5.14415': attribute type 2 has an invalid length. [ 1958.083503][T29352] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.14414'. [ 1958.289355][T29358] netlink: Failed to add helper -22 [ 1958.325809][T29358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1958.790714][T29376] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14421'. [ 1959.229033][T29381] netlink: 56 bytes leftover after parsing attributes in process `syz.1.14423'. [ 1959.242184][T29384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14425'. [ 1959.602698][T29398] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14426'. [ 1959.643944][T29398] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14426'. [ 1959.716214][T29400] macvlan1: entered promiscuous mode [ 1959.735026][T29400] macvlan1: entered allmulticast mode [ 1959.750217][T29400] bond0: (slave macvlan1): Error -98 calling set_mac_address [ 1960.108382][T29413] syzkaller1: entered promiscuous mode [ 1960.123681][T29413] syzkaller1: entered allmulticast mode [ 1960.156618][T29413] netlink: 68 bytes leftover after parsing attributes in process `syz.5.14431'. [ 1960.420074][T29425] tipc: Enabled bearer , priority 0 [ 1960.440614][T29428] syzkaller0: entered promiscuous mode [ 1960.449491][T29428] syzkaller0: entered allmulticast mode [ 1960.521499][T29433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14438'. [ 1960.696552][T29428] tipc: Resetting bearer [ 1960.778940][T29446] netlink: 'syz.5.14440': attribute type 1 has an invalid length. [ 1960.835490][T29449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14440'. [ 1960.871521][T29428] tipc: Disabling bearer [ 1960.969500][T29455] netlink: 'syz.4.14442': attribute type 2 has an invalid length. [ 1961.374523][T29462] bond9 (unregistering): Released all slaves [ 1961.865973][T29483] netlink: 'syz.1.14450': attribute type 1 has an invalid length. [ 1962.835188][T29503] netlink: 'syz.1.14457': attribute type 1 has an invalid length. [ 1963.209870][T29520] __nla_validate_parse: 9 callbacks suppressed [ 1963.209892][T29520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14461'. [ 1963.247774][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14461'. [ 1963.278980][T29512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.334152][T29522] netlink: 'syz.1.14461': attribute type 1 has an invalid length. [ 1963.350128][T29522] netlink: 'syz.1.14461': attribute type 2 has an invalid length. [ 1963.368071][T29520] netlink: 'syz.1.14461': attribute type 1 has an invalid length. [ 1963.393465][T29520] netlink: 'syz.1.14461': attribute type 2 has an invalid length. [ 1964.234434][T29547] netlink: 'syz.1.14467': attribute type 30 has an invalid length. [ 1964.451176][T29547] bond4: option arp_missed_max: invalid value (0) [ 1964.486374][T29547] bond4: option arp_missed_max: allowed values 1 - 255 [ 1964.531575][T29547] bond4 (unregistering): Released all slaves [ 1964.635946][T29550] netlink: 96 bytes leftover after parsing attributes in process `syz.0.14469'. [ 1965.415808][T29596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14478'. [ 1965.470341][T29594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14478'. [ 1965.805996][T29614] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1965.812074][T29573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1965.895027][T29615] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1965.938004][T29614] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1966.292832][T29614] xt_hashlimit: size too large, truncated to 1048576 [ 1966.373183][T29629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14483'. [ 1967.011902][T29644] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1967.079484][T29644] bond8: (slave lo): Enslaving as an active interface with an up link [ 1967.149887][T29644] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1967.246613][T29645] macvlan0: left promiscuous mode [ 1967.290754][T29645] macvlan0: left allmulticast mode [ 1967.322560][T29645] netlink: 'syz.2.14486': attribute type 2 has an invalid length. [ 1967.752401][T29668] netlink: 'syz.0.14492': attribute type 12 has an invalid length. [ 1967.780481][T29669] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14494'. [ 1967.876110][T29672] netlink: 'syz.0.14492': attribute type 23 has an invalid length. [ 1968.026633][T29668] bond4: option primary_reselect: invalid value (255) [ 1968.065754][T29668] bond4 (unregistering): Released all slaves [ 1968.072736][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069537c00: rx timeout, send abort [ 1968.572791][ C0] vcan0: j1939_tp_rxtimer: 0xffff888069537c00: abort rx timeout. Force session deactivation [ 1969.164627][T29707] pim6reg: entered allmulticast mode [ 1969.191051][T29703] syzkaller0: entered promiscuous mode [ 1969.199794][T29707] netlink: NAT attribute has 5 unknown bytes [ 1969.212358][T29707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1969.224257][T29703] syzkaller0: entered allmulticast mode [ 1969.735527][T29734] netlink: Conntrack attr has 4 unknown bytes [ 1969.760922][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046054400: rx timeout, send abort [ 1970.078417][T29747] netlink: 'syz.2.14516': attribute type 1 has an invalid length. [ 1970.204838][T29747] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1970.245264][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14516'. [ 1970.269285][ C1] vcan0: j1939_tp_rxtimer: 0xffff888046054400: abort rx timeout. Force session deactivation [ 1970.304140][T29750] bond6: (slave veth0_to_bond): Releasing active interface [ 1970.401576][T29750] bond9: (slave veth0_to_bond): making interface the new active one [ 1970.458915][T29750] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1970.952532][T29753] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1972.557590][T29747] macvlan1: entered promiscuous mode [ 1972.612781][T29747] macvlan1: entered allmulticast mode [ 1972.632765][T29747] bond9: entered promiscuous mode [ 1972.646876][T29747] veth0_to_bond: entered promiscuous mode [ 1972.681145][T29747] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1972.700880][T29747] bond9: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1972.710500][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14523'. [ 1972.743449][T29747] bond9: left promiscuous mode [ 1972.749619][T29747] veth0_to_bond: left promiscuous mode [ 1973.584381][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032e20000: rx timeout, send abort [ 1973.761156][T29813] netlink: 344 bytes leftover after parsing attributes in process `syz.2.14536'. [ 1973.802845][T29813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14536'. [ 1974.044831][T29822] gretap2: entered promiscuous mode [ 1974.080893][T29822] batman_adv: batadv0: Adding interface: gretap2 [ 1974.092745][ C0] vcan0: j1939_tp_rxtimer: 0xffff888032e20000: abort rx timeout. Force session deactivation [ 1974.139114][T29822] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1974.278776][T29822] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1974.878272][T29849] netlink: 'syz.0.14548': attribute type 64 has an invalid length. [ 1975.012872][T29851] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14549'. [ 1975.129357][T29853] netlink: 76 bytes leftover after parsing attributes in process `syz.1.14550'. [ 1975.176037][T29855] netlink: 'syz.0.14551': attribute type 64 has an invalid length. [ 1975.194591][T29855] netlink: 5 bytes leftover after parsing attributes in process `syz.0.14551'. [ 1975.282965][T29853] sctp: [Deprecated]: syz.1.14550 (pid 29853) Use of int in max_burst socket option deprecated. [ 1975.282965][T29853] Use struct sctp_assoc_value instead [ 1975.694806][T29875] openvswitch: netlink: IP tunnel dst address not specified [ 1975.725629][T29877] xt_limit: Overflow, try lower: 536871034/127 [ 1975.996100][T29893] netlink: 'syz.0.14564': attribute type 83 has an invalid length. [ 1975.996693][T29892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14563'. [ 1976.034434][T29893] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1976.195482][T29897] netlink: 27 bytes leftover after parsing attributes in process `syz.1.14562'. [ 1977.145453][T29939] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14576'. [ 1977.185006][T29935] bond4 (unregistering): Released all slaves [ 1977.338574][T29939] IPv6: NLM_F_CREATE should be specified when creating new route [ 1977.399732][T29952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14578'. [ 1977.425024][T29939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14576'. [ 1977.760693][T29960] ip_tables: iptables: counters copy to user failed while replacing table [ 1977.861284][T29966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14581'. [ 1978.024870][T29942] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1978.112955][T29966] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1978.209099][T29966] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1978.692566][T29983] bridge0: port 2(ipvlan2) entered blocking state [ 1978.735079][T29983] bridge0: port 2(ipvlan2) entered disabled state [ 1978.844456][T29983] ipvlan2: entered allmulticast mode [ 1978.915809][T29983] bridge0: entered allmulticast mode [ 1978.961682][T29983] ipvlan2: left allmulticast mode [ 1978.981062][T29983] bridge0: left allmulticast mode [ 1979.024644][T29992] netlink: 27 bytes leftover after parsing attributes in process `syz.5.14586'. [ 1979.066657][T29997] netlink: 10894 bytes leftover after parsing attributes in process `syz.2.14588'. [ 1979.464640][T30010] tipc: Enabled bearer , priority 0 [ 1979.483784][T30013] tipc: Enabling of bearer rejected, already enabled [ 1979.651325][T30022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14596'. [ 1979.674463][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880477f4400: rx timeout, send abort [ 1979.935861][T30032] netlink: 'syz.1.14600': attribute type 2 has an invalid length. [ 1980.182814][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880477f4400: abort rx timeout. Force session deactivation [ 1980.390323][T30046] netlink: 32 bytes leftover after parsing attributes in process `syz.4.14605'. [ 1980.559510][T30061] netlink: 'syz.5.14608': attribute type 13 has an invalid length. [ 1980.640651][T30055] netlink: 'syz.5.14608': attribute type 13 has an invalid length. [ 1980.776607][T30055] netlink: 'syz.5.14608': attribute type 13 has an invalid length. [ 1980.795606][T11410] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1980.885846][T30061] netlink: 'syz.5.14608': attribute type 13 has an invalid length. [ 1980.909344][T11410] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1980.983435][ T8644] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1981.063871][ T8644] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1981.236034][T30085] __nla_validate_parse: 6 callbacks suppressed [ 1981.236053][T30085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14610'. [ 1981.651473][T30097] ip_tables: iptables: counters copy to user failed while replacing table [ 1981.700546][T30097] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14617'. [ 1981.906064][T30114] netlink: 'syz.0.14622': attribute type 1 has an invalid length. [ 1981.931969][T30114] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14622'. [ 1981.931984][T30115] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 1982.518937][T30109] tunl0: entered promiscuous mode [ 1982.561672][T30109] netlink: 'syz.5.14616': attribute type 4 has an invalid length. [ 1982.607557][T30109] netlink: 9 bytes leftover after parsing attributes in process `syz.5.14616'. [ 1982.646271][T30119] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14622'. [ 1982.687699][T30119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14622'. [ 1983.911082][T30161] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14632'. [ 1983.938465][T30159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14632'. [ 1984.024399][T30164] netlink: 'syz.4.14634': attribute type 83 has an invalid length. [ 1984.203384][T30173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14636'. [ 1984.433267][T30180] netlink: 'syz.4.14638': attribute type 1 has an invalid length. [ 1984.538159][T30178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14638'. [ 1984.583907][T30183] syzkaller0: entered promiscuous mode [ 1984.621572][T30183] syzkaller0: entered allmulticast mode [ 1984.691902][T30178] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 1984.711914][T30178] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1984.726955][T30178] gretap0: entered promiscuous mode [ 1984.738732][T30178] gretap0: entered allmulticast mode [ 1986.095944][T30221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1986.327651][T30225] __nla_validate_parse: 11 callbacks suppressed [ 1986.327672][T30225] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14651'. [ 1986.375569][T30228] netlink: 'syz.2.14652': attribute type 1 has an invalid length. [ 1986.512820][T30225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14651'. [ 1986.539993][T30233] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14653'. [ 1986.659066][T30228] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1986.996746][T30239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14654'. [ 1987.103166][T30244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14656'. [ 1987.142761][T30239] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14654'. [ 1987.271358][T30248] netlink: 'syz.1.14658': attribute type 1 has an invalid length. [ 1987.468481][T30253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14658'. [ 1987.580445][T30248] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1987.611430][T30256] netlink: 'syz.2.14659': attribute type 32 has an invalid length. [ 1987.708680][T30248] bond4 (unregistering): Released all slaves [ 1988.279847][T30273] openvswitch: netlink: Message has 20 unknown bytes. [ 1988.328416][T30275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14666'. [ 1988.389270][T30278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14666'. [ 1988.410380][T30269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14663'. [ 1989.059552][T30292] siw: device registration error -23 [ 1990.181236][ T29] audit: type=1800 audit(1786773205.677:34): pid=30325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14676" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=2885 res=0 errno=0 [ 1990.433482][T30333] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1990.526432][T30333] netlink: 'syz.0.14679': attribute type 1 has an invalid length. [ 1990.588022][T30333] nbd: error processing sock list [ 1991.300046][T30365] tunl0: entered promiscuous mode [ 1991.335502][T30365] netlink: 'syz.1.14688': attribute type 4 has an invalid length. [ 1991.404946][T30365] __nla_validate_parse: 7 callbacks suppressed [ 1991.404968][T30365] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14688'. [ 1991.494092][T30365] netlink: 'syz.1.14688': attribute type 4 has an invalid length. [ 1991.552908][T30365] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14688'. [ 1991.658115][T30365] netlink: 'syz.1.14688': attribute type 4 has an invalid length. [ 1991.681217][T30365] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14688'. [ 1991.753002][T30389] netlink: 'syz.0.14694': attribute type 21 has an invalid length. [ 1991.785785][T30365] netlink: 'syz.1.14688': attribute type 4 has an invalid length. [ 1991.845005][T30365] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14688'. [ 1992.083953][T30389] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1992.131148][T30389] bond4 (unregistering): Released all slaves [ 1992.276323][T30365] netlink: 'syz.1.14688': attribute type 4 has an invalid length. [ 1992.290337][T30365] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14688'. [ 1992.643992][T30407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14697'. [ 1992.754624][T30410] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14699'. [ 1993.960222][T30449] syzkaller0: entered promiscuous mode [ 1993.981110][T30449] syzkaller0: entered allmulticast mode [ 1994.467856][T30455] netlink: 52 bytes leftover after parsing attributes in process `syz.0.14714'. [ 1994.499840][T30455] netlink: 'syz.0.14714': attribute type 3 has an invalid length. [ 1994.788721][T30471] netlink: 'syz.4.14717': attribute type 5 has an invalid length. [ 1994.798740][T30468] x_tables: duplicate underflow at hook 2 [ 1995.381281][T30493] netlink: 'syz.1.14724': attribute type 1 has an invalid length. [ 1995.550801][T30493] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1995.864529][T30505] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1996.269750][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14732'. [ 1996.333530][T30518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14732'. [ 1996.433834][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14732'. [ 1996.544074][T30536] x_tables: duplicate underflow at hook 1 [ 1996.604150][T30537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14738'. [ 1996.656998][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1996.924220][T11410] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1997.400387][T30579] netlink: 336 bytes leftover after parsing attributes in process `syz.2.14747'. [ 1997.630774][T30585] netlink: 'syz.1.14751': attribute type 1 has an invalid length. [ 1997.884947][T30600] openvswitch: netlink: IP tunnel dst address not specified [ 1999.776432][T30547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2000.150430][T30634] netlink: 22 bytes leftover after parsing attributes in process `syz.0.14760'. [ 2000.396482][T30645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.14759'. [ 2000.597516][T30646] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2000.606722][T30646] bond0: (slave bond9): Enslaving as an active interface with a down link [ 2000.638618][T30651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14764'. [ 2000.651191][T30651] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 2001.262058][T30676] Bluetooth: MGMT ver 1.23 [ 2001.749168][T30659] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2001.783760][T30700] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2001.877003][T30705] netlink: 96 bytes leftover after parsing attributes in process `syz.2.14777'. [ 2001.948947][T30705] netlink: 'syz.2.14777': attribute type 10 has an invalid length. [ 2002.436142][T30728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14784'. [ 2002.464190][T30728] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14784'. [ 2002.490427][T30728] netlink: 'syz.5.14784': attribute type 5 has an invalid length. [ 2003.238719][T30762] x_tables: duplicate underflow at hook 2 [ 2003.288652][T30765] netlink: 'syz.4.14792': attribute type 1 has an invalid length. [ 2003.320346][T30770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14793'. [ 2003.329842][T30765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14792'. [ 2003.357140][T30765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14792'. [ 2004.043094][T30788] netlink: 'syz.5.14800': attribute type 30 has an invalid length. [ 2004.101304][T30788] bond4: option arp_missed_max: invalid value (0) [ 2004.108595][T30788] bond4: option arp_missed_max: allowed values 1 - 255 [ 2004.119086][T30788] bond4 (unregistering): Released all slaves [ 2004.291794][T30796] netlink: 'syz.4.14802': attribute type 1 has an invalid length. [ 2004.443555][T30798] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 2005.104173][T30828] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2005.585478][T30851] netlink: 'syz.2.14821': attribute type 21 has an invalid length. [ 2005.595800][T30851] IPv6: NLM_F_CREATE should be specified when creating new route [ 2005.796031][T30862] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 2006.032486][T30870] sctp: [Deprecated]: syz.2.14826 (pid 30870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2006.032486][T30870] Use struct sctp_sack_info instead [ 2006.191142][T30868] wg0 speed is unknown, defaulting to 1000 [ 2006.215352][T30875] netlink: 'syz.5.14827': attribute type 9 has an invalid length. [ 2006.233763][T30871] wg0 speed is unknown, defaulting to 1000 [ 2008.473721][T30845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2008.767950][T30895] 8021q: VLANs not supported on ip_vti0 [ 2008.870000][T30900] netlink: 'syz.5.14835': attribute type 11 has an invalid length. [ 2009.015011][T30900] bond4: Unable to set up delay as MII monitoring is disabled [ 2009.025291][T22041] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2009.053836][T22041] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2009.072894][T22041] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2009.081394][T22041] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2009.099077][T22041] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2009.231540][T30900] bond4 (unregistering): Released all slaves [ 2009.290743][T30917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14836'. [ 2009.415128][T30920] netlink: 'syz.1.14837': attribute type 30 has an invalid length. [ 2009.709973][T30901] bond4: Unable to set up delay as MII monitoring is disabled [ 2009.742397][T30901] bond4 (unregistering): Released all slaves [ 2010.082321][T19665] syz_tun (unregistering): left allmulticast mode [ 2010.670982][ T8642] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.723852][T30955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2011.137302][T22041] Bluetooth: hci1: command tx timeout [ 2011.178707][ T8642] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.529658][ T8642] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.598332][T30977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14849'. [ 2011.648345][T30981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14850'. [ 2011.796436][T30972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14848'. [ 2011.808865][T30906] wg0 speed is unknown, defaulting to 1000 [ 2011.814842][T30977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14849'. [ 2011.973646][T30980] syzkaller0: entered promiscuous mode [ 2011.994590][T30980] syzkaller0: entered allmulticast mode [ 2012.053994][T30988] Bluetooth: MGMT ver 1.23 [ 2012.084345][T30988] Bluetooth: hci1: too big key_count value 32778 [ 2012.127745][T30988] mac80211_hwsim hwsim105 ªªªªª&: renamed from wlan1 (while UP) [ 2013.217282][T22041] Bluetooth: hci1: command tx timeout [ 2014.514336][T30996] ip6gre0: Master is either lo or non-ether device [ 2014.650653][T30999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14855'. [ 2014.685314][ T8642] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.878354][T31007] netlink: 'syz.5.14856': attribute type 2 has an invalid length. [ 2015.025944][T31012] netlink: 'syz.2.14859': attribute type 4 has an invalid length. [ 2015.034612][T31007] : entered promiscuous mode [ 2015.297309][T22041] Bluetooth: hci1: command tx timeout [ 2015.370867][T31023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14860'. [ 2015.880222][T31030] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 2016.033286][T31048] netlink: 'syz.1.14867': attribute type 8 has an invalid length. [ 2016.378318][ T8642] veth0: left allmulticast mode [ 2016.392791][ T8642] veth0: left promiscuous mode [ 2016.405160][ T8642] bridge0: port 1(veth0) entered disabled state [ 2016.707621][T31067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2016.824078][T31071] netlink: 'syz.2.14872': attribute type 1 has an invalid length. [ 2016.866277][ T8642] bond6 (unregistering): (slave ip6gre1): Releasing backup interface [ 2016.895822][ T8642] ip6gre1 (unregistering): left promiscuous mode [ 2016.934449][ T8642] bond8 (unregistering): (slave ip6gre2): Releasing backup interface [ 2016.950917][ T8642] ip6gre2 (unregistering): left promiscuous mode [ 2017.343513][ T8642] bond4 (unregistering): (slave gretap1): Releasing backup interface [ 2017.362784][ T8642] batman_adv: batadv0: Removing interface: gretap2 [ 2017.377344][T22041] Bluetooth: hci1: command tx timeout [ 2017.523777][ T8642] bond0 (unregistering): (slave bond9): Releasing backup interface [ 2017.543429][ T8642] bond0 (unregistering): Released all slaves [ 2017.563997][ T8642] bond1 (unregistering): Released all slaves [ 2017.589634][ T8642] bond2 (unregistering): Released all slaves [ 2017.622053][ T8642] bond3 (unregistering): Released all slaves [ 2017.653977][ T8642] bond4 (unregistering): (slave bond5): Releasing backup interface [ 2017.672543][ T8642] bond4 (unregistering): Released all slaves [ 2017.703546][ T8642] bond5 (unregistering): Released all slaves [ 2017.731965][ T8642] bond6 (unregistering): Released all slaves [ 2017.761429][ T8642] bond7 (unregistering): Released all slaves [ 2017.803287][ T8642] bond8 (unregistering): Released all slaves [ 2017.827925][ T8642] bond9 (unregistering): Released all slaves [ 2017.851707][T30906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2017.860123][T30906] bridge0: port 1(bridge_slave_0) entered disabled state [ 2017.873975][T30906] bridge_slave_0: entered allmulticast mode [ 2017.882873][T30906] bridge_slave_0: entered promiscuous mode [ 2017.915816][T31071] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 2018.227930][ T4446] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.252342][ T4446] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.327623][T31092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14877'. [ 2018.349611][T30906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2018.363994][T30906] bridge0: port 2(bridge_slave_1) entered disabled state [ 2018.382466][T30906] bridge_slave_1: entered allmulticast mode [ 2018.419439][T30906] bridge_slave_1: entered promiscuous mode [ 2018.450592][ T8642] tipc: Left network mode [ 2018.580703][ T1004] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.694990][T31103] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14880'. [ 2018.722715][T30906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2018.851593][ T4446] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2018.913459][T30906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2019.159495][T31106] bond8: (slave lo): Releasing backup interface [ 2019.349222][T31106] bond8: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 2019.551898][T31106] bridge_slave_0: left allmulticast mode [ 2019.567237][T31106] bridge_slave_0: left promiscuous mode [ 2019.592393][T31106] bridge0: port 1(bridge_slave_0) entered disabled state [ 2019.616486][ T8642] IPVS: stopping backup sync thread 22157 ... [ 2019.676492][T31106] bridge_slave_1: left allmulticast mode [ 2019.689482][T31106] bridge_slave_1: left promiscuous mode [ 2019.701897][T31106] bridge0: port 2(bridge_slave_1) entered disabled state [ 2019.774362][T31106] bond9: (slave veth0_to_bond): Releasing active interface [ 2019.818972][T31106] bond0: (slave bond_slave_0): Releasing backup interface [ 2019.835384][T31106] bond0: (slave bond_slave_1): Releasing backup interface [ 2019.865218][T31106] team0: Port device team_slave_0 removed [ 2019.884686][T31106] team0: Port device team_slave_1 removed [ 2019.893719][T31106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2019.995982][T31121] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14883'. [ 2020.327800][T30906] team0: Port device team_slave_0 added [ 2020.552143][T30906] team0: Port device team_slave_1 added [ 2020.770925][T31128] netlink: 232 bytes leftover after parsing attributes in process `syz.5.14886'. [ 2021.037972][T30906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2021.078574][T30906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2021.237542][T30906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2021.584650][T31162] gretap0: left promiscuous mode [ 2021.661369][T31162] erspan0: left promiscuous mode [ 2021.765081][T31170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14892'. [ 2021.800530][T31170] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 2022.275949][T31162] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2022.331588][T31162] ip6gre1: left promiscuous mode [ 2022.345668][T31162] geneve2: left promiscuous mode [ 2022.383054][T31162] erspan0: entered promiscuous mode [ 2022.444891][T31162] gtp1: left promiscuous mode [ 2022.520476][T31162] gretap1: left promiscuous mode [ 2022.533951][T31162] vlan0: left promiscuous mode [ 2022.573242][T31162] bridge0: left promiscuous mode [ 2022.613279][T31162] bond6: entered promiscuous mode [ 2022.622117][T31162] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 2022.635515][T31162] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2022.652408][T31162] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2022.701020][T31162] 8021q: adding VLAN 0 to HW filter on device bond11 [ 2022.747493][T30906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2022.766195][T30906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2022.842573][T30906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2022.972924][T31177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14891'. [ 2023.024002][T31175] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 2023.052577][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2023.088394][T31175] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 2023.123822][T31175] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 2023.358560][T31192] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14894'. [ 2023.556425][T31192] netlink: 'syz.5.14894': attribute type 1 has an invalid length. [ 2023.574837][T31200] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14896'. [ 2023.591906][T31192] netlink: 'syz.5.14894': attribute type 2 has an invalid length. [ 2023.692747][T30906] hsr_slave_0: entered promiscuous mode [ 2023.725964][T30906] hsr_slave_1: entered promiscuous mode [ 2023.742663][T30906] debugfs: 'hsr0' already exists in 'hsr' [ 2023.751662][T30906] Cannot create hsr debugfs directory [ 2023.816119][T31204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14897'. [ 2023.881992][T31204] openvswitch: netlink: Missing key (keys=40, expected=100) [ 2023.968261][T31204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14897'. [ 2024.050725][T31203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14897'. [ 2024.133954][T31204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14897'. [ 2024.522483][ T8642] hsr_slave_0: left promiscuous mode [ 2024.591225][ T8642] veth1_macvtap: left promiscuous mode [ 2024.621898][ T8642] veth0_macvtap: left promiscuous mode [ 2024.656353][ T8642] veth1_vlan: left promiscuous mode [ 2024.674149][T19956] IPVS: starting estimator thread 0... [ 2024.686653][ T8642] veth0_vlan: left promiscuous mode [ 2024.799092][T31224] IPVS: using max 32 ests per chain, 76800 per kthread [ 2025.983990][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2026.275237][T31248] __nla_validate_parse: 1 callbacks suppressed [ 2026.275257][T31248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14905'. [ 2026.744368][T31266] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14909'. [ 2026.782699][T31266] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14909'. [ 2026.815778][T31266] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14909'. [ 2026.889111][ T8642] IPVS: stop unused estimator thread 0... [ 2027.021188][T31279] netlink: 48 bytes leftover after parsing attributes in process `syz.1.14911'. [ 2027.051361][T30906] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.226441][T31284] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14909'. [ 2027.534537][T31294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14913'. [ 2027.811808][T30906] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.229724][T31315] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2028.273122][T30906] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.328791][T31318] netlink: 'syz.2.14915': attribute type 4 has an invalid length. [ 2028.352995][T31319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2028.360363][T31319] IPv6: NLM_F_CREATE should be set when creating new route [ 2028.367988][T31319] IPv6: NLM_F_CREATE should be set when creating new route [ 2028.375687][T31319] IPv6: NLM_F_CREATE should be set when creating new route [ 2028.387956][T31318] netlink: 17 bytes leftover after parsing attributes in process `syz.2.14915'. [ 2028.432753][T31319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2028.561717][T30906] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.993418][T31305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2031.026716][T31315] netlink: 76 bytes leftover after parsing attributes in process `syz.2.14915'. [ 2031.087626][T31315] nbd: illegal input index 65508 [ 2031.173409][T30906] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2031.275030][T30906] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2031.373407][T30906] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2031.505662][T30906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2031.553598][T30906] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2031.601582][T30906] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2031.644573][T30906] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2031.679585][T31399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14924'. [ 2031.701204][T30906] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2031.755496][T31404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14924'. [ 2031.870570][T31411] netlink: 'syz.1.14925': attribute type 1 has an invalid length. [ 2031.886079][T31406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14926'. [ 2032.539426][T31431] netlink: 'syz.2.14930': attribute type 14 has an invalid length. [ 2032.639711][T31435] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14932'. [ 2032.720672][T30906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2032.740916][T31435] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.884927][T31435] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14932'. [ 2032.982705][T30906] 8021q: adding VLAN 0 to HW filter on device team0 [ 2033.043874][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 2033.051231][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2033.150556][ T8642] bridge0: port 2(bridge_slave_1) entered blocking state [ 2033.157921][ T8642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2033.502032][T31466] netlink: 592 bytes leftover after parsing attributes in process `syz.2.14937'. [ 2033.549750][T31469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14938'. [ 2034.070571][T31489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14943'. [ 2034.091399][T31490] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14944'. [ 2034.410566][T31498] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14946'. [ 2035.215467][T31519] bond8: option xmit_hash_policy: invalid value (64) [ 2035.227941][T31519] bond8 (unregistering): Released all slaves [ 2035.527135][T30906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.116324][T31542] IPv6: addrconf: prefix option has invalid lifetime [ 2036.609842][T30906] veth0_vlan: entered promiscuous mode [ 2036.648953][T30906] veth1_vlan: entered promiscuous mode [ 2036.772543][T30906] veth0_macvtap: entered promiscuous mode [ 2036.805310][T30906] veth1_macvtap: entered promiscuous mode [ 2036.885896][T30906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2036.918504][T30906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2036.962468][T11413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.038436][ T1004] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.085755][ T1004] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.247256][T11413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2039.328551][T31558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2039.525707][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2039.560991][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2039.671145][T31597] tunl0: left promiscuous mode [ 2039.936607][T31610] __nla_validate_parse: 6 callbacks suppressed [ 2039.936626][T31610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14969'. [ 2039.992483][T31610] openvswitch: netlink: Flow actions attr not present in new flow. [ 2041.155927][T31597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2041.224601][T31597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2041.885303][T31597] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 2042.217379][ T8642] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2042.253848][ T8642] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.296220][ T8642] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2042.329441][ T8642] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.373630][T31613] tunl0: entered promiscuous mode [ 2042.400227][T31613] netlink: 'syz.2.14971': attribute type 3 has an invalid length. [ 2042.442094][T31613] netlink: 9 bytes leftover after parsing attributes in process `syz.2.14971'. [ 2042.472450][T31615] netlink: 'syz.2.14971': attribute type 3 has an invalid length. [ 2042.504039][T31615] netlink: 9 bytes leftover after parsing attributes in process `syz.2.14971'. [ 2042.543912][T31622] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14972'. [ 2042.580770][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2042.589669][ T8642] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2042.630871][ T8642] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.655729][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2042.723183][ T8642] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2042.803328][ T8642] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2042.992602][T31636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14976'. [ 2043.156480][T31635] mac80211_hwsim hwsim104 wlan0: entered promiscuous mode [ 2043.672685][T31647] netlink: 176 bytes leftover after parsing attributes in process `syz.5.14978'. [ 2043.765861][T31647] netlink: 32 bytes leftover after parsing attributes in process `syz.5.14978'. [ 2044.269620][T31671] netlink: 140 bytes leftover after parsing attributes in process `syz.4.14980'. [ 2044.859254][T31669] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2044.889240][T31669] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 2045.145495][T31703] netlink: 52 bytes leftover after parsing attributes in process `syz.4.14988'. [ 2045.479770][T31713] team0: Port device gtp3 added [ 2045.495126][T31715] netlink: 52 bytes leftover after parsing attributes in process `syz.1.14993'. [ 2045.521580][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14993'. [ 2045.542809][T31715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14993'. [ 2047.404377][T31680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2047.695898][T31730] netlink: 'syz.4.14998': attribute type 10 has an invalid length. [ 2047.758456][T31732] netlink: 'syz.4.14998': attribute type 10 has an invalid length. [ 2047.789139][T31730] team0: Port device dummy0 added [ 2047.890845][T31732] team0: Port device dummy0 removed [ 2048.142644][T31736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15000'. [ 2048.293249][T31743] nbd: socks must be embedded in a SOCK_ITEM attr [ 2048.388738][T31745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15003'. [ 2048.411358][T31745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15003'. [ 2048.502613][T31750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15003'. [ 2049.340960][T31775] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15011'. [ 2049.492158][T31781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15013'. [ 2049.574187][T31773] erspan0: entered promiscuous mode [ 2050.604488][T31809] syzkaller0: entered promiscuous mode [ 2050.627474][T31809] syzkaller0: entered allmulticast mode [ 2050.946582][T31800] syzkaller0: entered promiscuous mode [ 2050.967325][T31800] syzkaller0: entered allmulticast mode [ 2051.398663][T31838] __nla_validate_parse: 5 callbacks suppressed [ 2051.398695][T31838] netlink: 412 bytes leftover after parsing attributes in process `syz.4.15027'. [ 2051.444816][T31838] openvswitch: netlink: Flow key attr not present in new flow. [ 2051.590462][T31844] xt_ecn: cannot match TCP bits for non-tcp packets [ 2051.825542][T31849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15030'. [ 2052.210606][T31852] netlink: 68 bytes leftover after parsing attributes in process `syz.4.15031'. [ 2056.618312][T31841] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 2056.950124][T31867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15032'. [ 2057.170989][T31870] bond12: entered promiscuous mode [ 2057.278415][T31870] bond12: entered allmulticast mode [ 2057.291852][T31882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15037'. [ 2057.378302][T31867] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15032'. [ 2057.410719][T31867] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15032'. [ 2057.830302][T31896] tunl0: Caught tx_queue_len zero misconfig [ 2057.905614][T31896] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2057.929049][T31896] team0: Device ipvlan2 is already an upper device of the team interface [ 2058.481104][T31922] xt_hashlimit: size too large, truncated to 1048576 [ 2058.622603][T31924] wg0 speed is unknown, defaulting to 1000 [ 2059.205133][T31951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2059.256708][T31952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15058'. [ 2059.726278][T31969] netlink: NAT attribute has 1 unknown bytes [ 2059.744676][T31969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2060.273987][T31992] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 2060.837739][T32017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15075'. [ 2060.868278][T32018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15076'. [ 2060.879181][T32006] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 2060.934673][T32017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15075'. [ 2061.302778][T32028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15077'. [ 2061.724980][T32006] bond8 (unregistering): Released all slaves [ 2062.328562][T32043] syzkaller1: entered promiscuous mode [ 2062.347262][T32043] syzkaller1: entered allmulticast mode [ 2062.677617][T32066] netlink: 'syz.4.15086': attribute type 1 has an invalid length. [ 2062.785671][T32068] netlink: 52 bytes leftover after parsing attributes in process `syz.4.15086'. [ 2062.810608][T32063] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 2062.895596][T32060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15085'. [ 2063.013200][ T1004] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2063.039598][T19965] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2063.051386][ T1004] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2063.122159][T32074] netlink: 'syz.2.15088': attribute type 1 has an invalid length. [ 2063.170842][T32078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15089'. [ 2063.323174][T32082] x_tables: duplicate underflow at hook 1 [ 2063.356178][T32074] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2063.606018][T32091] lo: entered promiscuous mode [ 2063.630615][T32091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2063.698985][ T9501] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2063.711797][T32092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2063.793484][T32100] netlink: 'syz.2.15095': attribute type 1 has an invalid length. [ 2063.820735][T32100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15095'. [ 2064.098985][ T9501] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2064.149874][T32112] netlink: 'syz.4.15101': attribute type 7 has an invalid length. [ 2064.254729][T32112] netlink: 'syz.4.15101': attribute type 7 has an invalid length. [ 2064.271910][ T1004] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2064.327576][T32114] x_tables: duplicate underflow at hook 4 [ 2064.549610][ T1004] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2064.644386][ T8646] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2064.703185][ T8646] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2065.208449][T32152] netlink: 'syz.4.15112': attribute type 4 has an invalid length. [ 2065.233934][T32156] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2065.250467][T32152] netlink: 152 bytes leftover after parsing attributes in process `syz.4.15112'. [ 2065.292015][T32152] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2065.694615][T32169] sctp: [Deprecated]: syz.1.15117 (pid 32169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2065.694615][T32169] Use struct sctp_sack_info instead [ 2065.752814][T32176] netlink: 830 bytes leftover after parsing attributes in process `syz.1.15117'. [ 2065.861198][T32179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15119'. [ 2066.118769][T32184] netlink: 'syz.0.15121': attribute type 9 has an invalid length. [ 2066.442931][T32195] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15125'. [ 2066.472208][T32197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15126'. [ 2066.600069][T32197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15126'. [ 2067.456943][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2067.962552][T32237] __nla_validate_parse: 3 callbacks suppressed [ 2067.962577][T32237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15139'. [ 2068.032023][T32237] nbd: must specify at least one socket [ 2068.038225][T32243] openvswitch: netlink: Flow key attribute not present in set flow. [ 2068.117475][T32240] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15141'. [ 2068.215266][T32240] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15141'. [ 2068.628353][T32264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15150'. [ 2068.769553][T32265] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15149'. [ 2068.849476][T32272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15153'. [ 2069.328200][T22041] block nbd10: Receive control failed (result -32) [ 2069.661805][T32307] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2069.711978][T32307] x_tables: duplicate underflow at hook 2 [ 2069.730634][T32309] syzkaller0: left promiscuous mode [ 2069.742793][T32311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15162'. [ 2069.755264][T32309] syzkaller0: left allmulticast mode [ 2069.765232][T32311] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 2069.796486][T32314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15163'. [ 2070.049365][T32323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15166'. [ 2070.868719][T32350] netlink: 'syz.5.15177': attribute type 9 has an invalid length. [ 2071.274081][T32367] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2071.640819][T32383] netlink: 'syz.0.15186': attribute type 1 has an invalid length. [ 2071.655089][T32383] netlink: 'syz.0.15186': attribute type 2 has an invalid length. [ 2071.663605][T32379] netlink: 64 bytes leftover after parsing attributes in process `syz.5.15184'. [ 2071.777215][T32386] x_tables: duplicate underflow at hook 2 [ 2071.781462][T32379] x_tables: duplicate entry at hook 3 [ 2072.068855][T32399] netlink: 'syz.5.15191': attribute type 2 has an invalid length. [ 2072.105545][T32399] bridge0: entered promiscuous mode [ 2072.131304][T32399] bridge0: entered allmulticast mode [ 2072.220431][T32406] bridge0: port 1(veth1_to_bridge) entered blocking state [ 2072.268907][T32406] bridge0: port 1(veth1_to_bridge) entered disabled state [ 2072.297917][T32406] veth1_to_bridge: entered allmulticast mode [ 2072.342082][T32406] veth1_to_bridge: entered promiscuous mode [ 2072.385696][T32406] bridge0: port 1(veth1_to_bridge) entered blocking state [ 2072.393027][T32406] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 2072.725321][T32433] sit0: entered promiscuous mode [ 2072.861185][T32433] netlink: 'syz.4.15201': attribute type 1 has an invalid length. [ 2073.030539][T32437] netlink: 'syz.5.15202': attribute type 4 has an invalid length. [ 2073.439811][T22051] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2073.464384][T22051] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2073.476291][T22051] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2073.500143][T22051] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2073.524355][ T8646] ªªªªª&: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2073.543518][T22051] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2074.742074][T32491] netlink: 'syz.1.15212': attribute type 1 has an invalid length. [ 2075.409746][T32443] wg0 speed is unknown, defaulting to 1000 [ 2075.618098][T22041] Bluetooth: hci0: command tx timeout [ 2076.016918][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2077.697570][T22041] Bluetooth: hci0: command tx timeout [ 2077.922823][T32443] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.950795][T32443] bridge0: port 1(bridge_slave_0) entered disabled state [ 2077.961781][T32443] bridge_slave_0: entered allmulticast mode [ 2077.972961][T32443] bridge_slave_0: entered promiscuous mode [ 2077.982850][T32443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.007184][T32443] bridge0: port 2(bridge_slave_1) entered disabled state [ 2078.032641][T32443] bridge_slave_1: entered allmulticast mode [ 2078.076161][T32443] bridge_slave_1: entered promiscuous mode [ 2078.540385][T32443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2078.619556][T32443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2078.749958][T32629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2078.812973][T32631] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 2078.855507][T32443] team0: Port device team_slave_0 added [ 2078.886437][T32443] team0: Port device team_slave_1 added [ 2079.021626][T32634] __nla_validate_parse: 5 callbacks suppressed [ 2079.021646][T32634] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15246'. [ 2079.055987][T32443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2079.085536][T32443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2079.162099][T32443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2079.238956][T32443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2079.256310][T32443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2079.365270][T32443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2079.742686][T32443] hsr_slave_0: entered promiscuous mode [ 2079.771462][T32443] hsr_slave_1: entered promiscuous mode [ 2079.781368][T22041] Bluetooth: hci0: command tx timeout [ 2079.788854][T32443] debugfs: 'hsr0' already exists in 'hsr' [ 2079.794741][T32443] Cannot create hsr debugfs directory [ 2080.256353][T32655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2080.272167][T32662] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2080.543169][T32669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15257'. [ 2081.156580][T32443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2081.181565][T32443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.196433][T32443] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 2081.223877][T32688] netlink: 'syz.0.15263': attribute type 7 has an invalid length. [ 2081.259410][T32688] IPv6: Can't replace route, no match found [ 2081.874105][T22041] Bluetooth: hci0: command tx timeout [ 2082.265754][T32707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15269'. [ 2082.306192][T32443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2082.382635][T32443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2082.449424][T32443] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 2082.483889][T32714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15269'. [ 2082.654802][T32704] 8021q: VLANs not supported on ipvlan1 [ 2082.985787][T32443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2083.024649][T32724] netlink: 198796 bytes leftover after parsing attributes in process `syz.4.15273'. [ 2083.044342][T32443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.073299][T32724] netlink: 'syz.4.15273': attribute type 2 has an invalid length. [ 2083.085552][T32443] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 2083.113975][T32724] netlink: 116 bytes leftover after parsing attributes in process `syz.4.15273'. [ 2083.145400][T32730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15274'. [ 2083.258042][T32724] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15273'. [ 2083.344620][T32443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2083.365166][T32737] Bluetooth: MGMT ver 1.23 [ 2083.370286][T32443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2083.390407][T32443] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 2083.463807][T32738] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15274'. [ 2083.500954][T32738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15274'. [ 2083.653574][T32740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2084.318758][T32756] IPv6: NLM_F_CREATE should be specified when creating new route [ 2084.446424][T32443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2084.468434][T32443] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2084.477107][T32760] netlink: 56 bytes leftover after parsing attributes in process `syz.1.15282'. [ 2084.491601][T32443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2084.519126][T32443] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2084.538957][T32762] netlink: 56 bytes leftover after parsing attributes in process `syz.5.15283'. [ 2084.547728][T32443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2084.622539][T32443] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2084.646458][T32443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2084.676092][T32443] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2085.090476][ T315] sit0: left promiscuous mode [ 2085.103666][ T319] netlink: 348 bytes leftover after parsing attributes in process `syz.4.15288'. [ 2085.290980][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058629800: rx timeout, send abort [ 2085.678400][ T315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2085.745542][ T328] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15290'. [ 2085.799316][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058629800: abort rx timeout. Force session deactivation [ 2085.975256][T32443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2086.108529][ T337] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15293'. [ 2086.141885][T32443] 8021q: adding VLAN 0 to HW filter on device team0 [ 2086.198647][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 2086.205991][ T8644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2086.287752][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.295000][ T8644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2086.412953][ T342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15295'. [ 2086.556530][ T345] syzkaller0: left promiscuous mode [ 2086.743742][ T350] netlink: 'syz.5.15298': attribute type 21 has an invalid length. [ 2087.080851][ T357] tipc: Enabling of bearer rejected, failed to enable media [ 2087.133003][ T363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.15301'. [ 2087.219537][ T363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15301'. [ 2087.335163][ T374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15303'. [ 2087.351400][ T367] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15302'. [ 2087.429120][ T377] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 2088.370381][ T409] netlink: 'syz.5.15311': attribute type 30 has an invalid length. [ 2088.512460][T32443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2088.922869][T32443] veth0_vlan: entered promiscuous mode [ 2088.958019][T32443] veth1_vlan: entered promiscuous mode [ 2089.025891][T32443] veth0_macvtap: entered promiscuous mode [ 2089.056352][T32443] veth1_macvtap: entered promiscuous mode [ 2089.133571][T32443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2089.209813][T32443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2089.287405][T11413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.322260][T11413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.388997][T11413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2089.430479][ T8644] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2090.534604][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.609293][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2090.919892][T11416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2090.960358][T11416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2091.251945][ T481] wg0 speed is unknown, defaulting to 1000 [ 2091.295532][ T481] wg0 speed is unknown, defaulting to 1000 [ 2091.340343][ T481] wg0 speed is unknown, defaulting to 1000 [ 2091.396636][ T481] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 2091.454345][ T489] ip6gre4: entered allmulticast mode [ 2091.494540][ T481] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 2091.516067][T11413] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 2091.613156][ T481] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 2091.806211][ T481] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 2091.924986][ T506] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 2092.173476][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.270833][ T519] __nla_validate_parse: 1 callbacks suppressed [ 2092.270858][ T519] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15340'. [ 2092.363823][ T519] netlink: 72 bytes leftover after parsing attributes in process `syz.1.15340'. [ 2092.387035][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.419326][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.450592][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.490474][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.514938][ T523] IPv6: Can't replace route, no match found [ 2092.541606][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.569241][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.616503][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.656969][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.663063][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2092.674506][ T533] gre0: Caught tx_queue_len zero misconfig [ 2092.729787][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.756610][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.803769][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.860015][ T481] wg0 speed is unknown, defaulting to 1000 [ 2092.912278][ T481] wg0 speed is unknown, defaulting to 1000 [ 2093.271027][ T545] macvtap1: entered promiscuous mode [ 2093.288390][ T545] vlan0: entered promiscuous mode [ 2093.306576][ T545] macvtap1: entered allmulticast mode [ 2093.317091][ T545] vlan0: entered allmulticast mode [ 2093.322841][ T545] veth0_vlan: entered allmulticast mode [ 2093.423167][ T553] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 2093.514022][ T568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15353'. [ 2093.536518][ T569] sctp: [Deprecated]: syz.1.15353 (pid 569) Use of int in maxseg socket option. [ 2093.536518][ T569] Use struct sctp_assoc_value instead [ 2093.551508][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805591cc00: rx timeout, send abort [ 2093.728954][ T576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15354'. [ 2093.742531][ T566] netlink: 144 bytes leftover after parsing attributes in process `syz.5.15352'. [ 2093.931643][ T582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15357'. [ 2094.045238][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805591c800: rx timeout, send abort [ 2094.056013][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805591cc00: abort rx timeout. Force session deactivation [ 2094.091801][ T591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2094.300727][ T601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15361'. [ 2094.329788][ T595] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 2094.454319][ T594] netlink: 'syz.5.15362': attribute type 1 has an invalid length. [ 2094.553567][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805591c800: abort rx timeout. Force session deactivation [ 2094.734244][ T594] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15362'. [ 2094.775787][ T615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15368'. [ 2094.891612][ T594] bridge5: entered promiscuous mode [ 2094.953043][ T594] bond4: (slave bridge5): making interface the new active one [ 2094.980600][ T594] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 2095.106242][ T622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15370'. [ 2095.203453][ T622] netlink: 'syz.0.15370': attribute type 1 has an invalid length. [ 2095.240441][ T622] netlink: 'syz.0.15370': attribute type 2 has an invalid length. [ 2095.617118][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 2095.799561][ T649] netlink: 'syz.0.15378': attribute type 1 has an invalid length. [ 2095.960459][ T649] bond4: entered promiscuous mode [ 2096.005601][ T649] bond4: entered allmulticast mode [ 2096.061518][ T649] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2096.114683][ T662] openvswitch: netlink: IP tunnel attribute has 5365 unknown bytes. [ 2096.150841][ T652] geneve3: entered promiscuous mode [ 2096.223859][ T648] erspan2: entered allmulticast mode [ 2096.320223][ T648] bond4: (slave erspan2): making interface the new active one [ 2096.344360][ T648] erspan2: entered promiscuous mode [ 2096.369357][ T648] bond4: (slave erspan2): Enslaving as an active interface with an up link [ 2096.707615][ T679] tipc: Started in network mode [ 2096.723003][ T679] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 2096.745592][ T677] vxcan0: tx address claim with different name [ 2097.025416][ T691] netlink: 'syz.4.15392': attribute type 9 has an invalid length. [ 2097.729864][ T722] __nla_validate_parse: 2 callbacks suppressed [ 2097.729887][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2097.897938][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2097.921880][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2097.945313][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2097.969578][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2097.994291][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2098.025163][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2098.061633][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2098.085490][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2098.134716][ T722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15398'. [ 2098.284927][ T746] tunl0: entered promiscuous mode [ 2098.328022][ T746] netlink: 'syz.0.15403': attribute type 3 has an invalid length. [ 2101.119181][ T738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2101.585791][ T781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2102.128954][ T802] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 2103.293135][T22051] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2103.359956][T22051] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2103.374640][T22051] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2103.469798][T22051] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2103.478268][T22051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2104.181949][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 2104.675155][ T873] 8021q: VLANs not supported on lo [ 2104.923256][ T836] wg0 speed is unknown, defaulting to 1000 [ 2105.008481][ T836] wg0 speed is unknown, defaulting to 1000 [ 2105.227212][ T890] __nla_validate_parse: 59 callbacks suppressed [ 2105.227233][ T890] netlink: 40 bytes leftover after parsing attributes in process `syz.5.15442'. [ 2105.540318][T22041] Bluetooth: hci2: command tx timeout [ 2105.577927][ T902] netlink: 32 bytes leftover after parsing attributes in process `syz.5.15444'. [ 2105.595225][ T8646] ªªªªª&: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2105.663351][ T910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15446'. [ 2106.164574][ T924] netlink: 76 bytes leftover after parsing attributes in process `syz.5.15449'. [ 2106.356211][ T836] bridge0: port 1(bridge_slave_0) entered blocking state [ 2106.384658][ T836] bridge0: port 1(bridge_slave_0) entered disabled state [ 2106.402473][ T836] bridge_slave_0: entered allmulticast mode [ 2106.445878][ T836] bridge_slave_0: entered promiscuous mode [ 2106.504893][ T836] bridge0: port 2(bridge_slave_1) entered blocking state [ 2106.535305][ T836] bridge0: port 2(bridge_slave_1) entered disabled state [ 2106.552584][ T836] bridge_slave_1: entered allmulticast mode [ 2106.562134][ T836] bridge_slave_1: entered promiscuous mode [ 2106.586049][ T931] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 2106.712951][ T949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15451'. [ 2106.943407][ T945] veth7: entered allmulticast mode [ 2107.082055][ T949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15451'. [ 2107.266089][ T836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2107.312424][ T836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2107.495755][ T965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15457'. [ 2107.519156][ T836] team0: Port device team_slave_0 added [ 2107.561719][ T836] team0: Port device team_slave_1 added [ 2107.618391][T22041] Bluetooth: hci2: command tx timeout [ 2107.719108][ T975] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 2107.808214][ T836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2107.815580][ T836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2107.844927][ T975] netlink: 100 bytes leftover after parsing attributes in process `syz.4.15460'. [ 2107.856377][ T836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2107.993850][ T836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2108.035668][ T836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2108.112389][ T836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2108.381152][ T993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15465'. [ 2108.423490][ T836] hsr_slave_0: entered promiscuous mode [ 2108.441769][ T836] hsr_slave_1: entered promiscuous mode [ 2108.453862][ T836] debugfs: 'hsr0' already exists in 'hsr' [ 2108.461194][ T836] Cannot create hsr debugfs directory [ 2109.037653][ T1012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15468'. [ 2109.650797][ T1043] netlink: 'syz.1.15477': attribute type 1 has an invalid length. [ 2109.708544][T22041] Bluetooth: hci2: command tx timeout [ 2110.070584][ T836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2110.109562][ T836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.495778][ T1045] bond8 (unregistering): Released all slaves [ 2110.596378][ T1048] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2110.823332][ T836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2110.858086][ T836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.992580][ T1081] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2111.068085][ T1086] __nla_validate_parse: 1 callbacks suppressed [ 2111.068107][ T1086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15484'. [ 2111.270733][ T836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2111.308511][ T836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.606036][ T836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2111.636106][ T836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2111.777373][T22041] Bluetooth: hci2: command tx timeout [ 2113.149792][ T1051] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2113.260476][ T836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2113.339377][ T836] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2113.366366][ T836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2113.451333][ T836] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2113.471963][ T836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2113.518993][ T836] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2113.564854][ T836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2113.634394][ T836] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2114.023044][ T1131] syzkaller0: entered promiscuous mode [ 2114.041077][ T1131] syzkaller0: entered allmulticast mode [ 2114.071991][ T1135] netlink: 'syz.2.15497': attribute type 1 has an invalid length. [ 2114.093960][ T1137] netlink: 'syz.4.15498': attribute type 1 has an invalid length. [ 2114.114943][ T1133] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2114.123082][ T1135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15497'. [ 2114.139827][ T1133] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2114.285049][ T1137] bond2: entered promiscuous mode [ 2114.291174][ T1137] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2114.370548][ T836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2114.469146][ T1146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15500'. [ 2114.563780][ T836] 8021q: adding VLAN 0 to HW filter on device team0 [ 2114.628754][T11413] bridge0: port 1(bridge_slave_0) entered blocking state [ 2114.636005][T11413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.732614][T11410] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.739932][T11410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2114.863847][ T1162] bridge0: left allmulticast mode [ 2114.873073][ T1162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15504'. [ 2114.965854][ T1162] No such timeout policy "s" [ 2115.016305][ T1162] netlink: Failed to associated timeout policy 's' [ 2115.452786][ T1177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15505'. [ 2115.504054][ T1177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15505'. [ 2115.680510][ T1175] bridge0: port 2(bridge_slave_1) entered disabled state [ 2115.926475][ T1190] netlink: 'syz.5.15509': attribute type 1 has an invalid length. [ 2115.951299][ T1190] netlink: 756 bytes leftover after parsing attributes in process `syz.5.15509'. [ 2116.371425][ T1210] netlink: 'syz.4.15514': attribute type 2 has an invalid length. [ 2116.390614][ T1210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15514'. [ 2116.779658][ T1225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15518'. [ 2116.806427][ T1226] netlink: 'syz.2.15518': attribute type 2 has an invalid length. [ 2116.859905][ T1231] gretap0: entered promiscuous mode [ 2116.912592][ T1231] vlan2: entered promiscuous mode [ 2117.236321][ T836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2117.478743][ T1253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15523'. [ 2117.551203][ T836] veth0_vlan: entered promiscuous mode [ 2117.654682][ T836] veth1_vlan: entered promiscuous mode [ 2117.763481][ T1258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2117.842551][ T836] veth0_macvtap: entered promiscuous mode [ 2117.855189][ T836] veth1_macvtap: entered promiscuous mode [ 2117.898827][ T1269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15529'. [ 2117.923321][ T1266] bond6: invalid ARP target 0.0.0.0 specified for addition [ 2117.935120][ T1266] bond6: option arp_ip_target: invalid value (0) [ 2117.951246][ T1266] bond6 (unregistering): Released all slaves [ 2118.054745][ T1269] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2118.065152][ T1269] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15529'. [ 2118.161944][ T836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2118.222209][ T836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2118.342399][T11413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.383198][T11413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.470199][ T1277] netlink: 84 bytes leftover after parsing attributes in process `syz.4.15531'. [ 2118.488510][T11410] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.522043][ T1279] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 2118.660674][ T8639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2119.010102][ T1294] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2119.050860][T11410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.089285][T11410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.257680][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2119.266243][ T1299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15538'. [ 2119.294849][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2119.922652][ T1324] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15541'. [ 2120.116205][ T1304] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 2120.326646][ T1304] bond6 (unregistering): Released all slaves [ 2120.591535][T22051] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2120.606660][T22051] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2120.625521][T22051] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2120.643894][T22051] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2120.652931][T22051] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2120.872510][ T1332] netlink: 'syz.0.15543': attribute type 11 has an invalid length. [ 2120.907172][ T1332] netlink: 228 bytes leftover after parsing attributes in process `syz.0.15543'. [ 2121.316178][ T1322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15540'. [ 2121.611124][ T1338] tipc: Started in network mode [ 2121.686235][ T1338] tipc: Node identity 1a2cb4e1ce62, cluster identity 4711 [ 2121.724262][ T1338] tipc: Enabled bearer , priority 10 [ 2121.761424][T22262] tipc: Resetting bearer [ 2121.962927][T22262] tipc: Disabling bearer [ 2122.059418][ T1334] tipc: Resetting bearer [ 2122.097725][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 2122.213991][ T1334] tipc: Disabling bearer [ 2122.801804][ T1326] wg0 speed is unknown, defaulting to 1000 [ 2122.824863][T22051] Bluetooth: hci4: command tx timeout [ 2123.000201][ T1380] __nla_validate_parse: 2 callbacks suppressed [ 2123.000223][ T1380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15556'. [ 2123.064379][ T1326] wg0 speed is unknown, defaulting to 1000 [ 2123.075326][ T1382] netlink: 'syz.0.15555': attribute type 1 has an invalid length. [ 2123.203947][ T1384] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 2124.090555][ T1413] macvlan0: entered promiscuous mode [ 2124.304764][ T1428] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2124.338452][ T1417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15563'. [ 2124.357752][ T1417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15563'. [ 2124.420091][ T1428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15565'. [ 2124.610150][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15568'. [ 2124.856656][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.896893][T22051] Bluetooth: hci4: command tx timeout [ 2124.911369][ T1326] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.949745][ T1326] bridge_slave_0: entered allmulticast mode [ 2124.992373][ T1326] bridge_slave_0: entered promiscuous mode [ 2125.034721][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state [ 2125.059250][ T1326] bridge0: port 2(bridge_slave_1) entered disabled state [ 2125.075573][ T1326] bridge_slave_1: entered allmulticast mode [ 2125.085247][ T1326] bridge_slave_1: entered promiscuous mode [ 2125.191105][ T1326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2125.260196][ T1326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2125.332043][ T1462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15573'. [ 2125.372302][ T1462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15573'. [ 2125.424735][ T1326] team0: Port device team_slave_0 added [ 2125.434519][ T1462] netlink: 52 bytes leftover after parsing attributes in process `syz.0.15573'. [ 2125.455445][ T1326] team0: Port device team_slave_1 added [ 2125.527600][ T1326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2125.540977][ T1326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.590696][ T1326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2125.606003][ T1326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2125.613704][ T1326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2125.655832][ T1326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2125.775212][ T1471] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 2125.799709][ T1326] hsr_slave_0: entered promiscuous mode [ 2125.808888][ T1326] hsr_slave_1: entered promiscuous mode [ 2125.815821][ T1326] debugfs: 'hsr0' already exists in 'hsr' [ 2125.823690][ T1326] Cannot create hsr debugfs directory [ 2126.192448][ T1326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2126.205381][ T1326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.388361][ T1326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2126.401869][ T1326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.562442][ T1326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2126.573912][ T1326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.586939][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2126.734034][ T1326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2126.746535][ T1326] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2126.987170][T22051] Bluetooth: hci4: command tx timeout [ 2128.061113][ T1453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2128.099329][ T1326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2128.145375][ T1326] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2128.165567][ T1326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2128.215168][ T1326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2128.262279][ T1326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2128.309318][ T1326] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2128.325659][ T1326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2128.370462][ T1326] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2128.595192][ T1489] netlink: 'syz.5.15580': attribute type 5 has an invalid length. [ 2128.612000][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2128.681563][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2128.711635][ T1489] tunl0: entered promiscuous mode [ 2128.717679][ T1489] gre0: entered promiscuous mode [ 2128.723149][ T1489] gretap0: entered promiscuous mode [ 2128.729626][ T1489] erspan0: entered promiscuous mode [ 2128.735395][ T1489] ip_vti0: entered promiscuous mode [ 2128.758550][ T1485] netlink: 'syz.2.15578': attribute type 2 has an invalid length. [ 2128.782544][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2128.824986][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2128.869702][ T1326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2128.887137][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2128.959163][ T1326] 8021q: adding VLAN 0 to HW filter on device team0 [ 2128.993000][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2129.028123][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.035404][ T8643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2129.070673][T22051] Bluetooth: hci4: command tx timeout [ 2129.103062][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.110318][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2129.179156][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2129.265476][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2129.324220][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2129.351491][ T1488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15581'. [ 2129.576433][ T1505] macsec1: entered promiscuous mode [ 2129.616372][ T1505] bridge0: entered promiscuous mode [ 2129.663188][ T1505] macsec1: entered allmulticast mode [ 2129.704366][ T1505] bridge0: entered allmulticast mode [ 2129.746120][ T1505] bridge0: port 3(macsec1) entered blocking state [ 2129.776984][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 2129.799589][ T1505] bridge0: port 3(macsec1) entered disabled state [ 2129.849651][ T1505] bridge0: left allmulticast mode [ 2130.062942][T31616] bridge0: left promiscuous mode [ 2130.109020][ T1532] netlink: 'syz.4.15590': attribute type 16 has an invalid length. [ 2130.259276][ T1513] wg0 speed is unknown, defaulting to 1000 [ 2130.288614][ T1513] wg0 speed is unknown, defaulting to 1000 [ 2130.455193][ T1537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2130.484080][ T1535] syzkaller0: entered promiscuous mode [ 2130.508331][ T1535] syzkaller0: entered allmulticast mode [ 2130.524585][ T1537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2131.055737][ T1553] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2131.389641][ T1326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2131.652618][ T1326] veth0_vlan: entered promiscuous mode [ 2131.693636][ T1326] veth1_vlan: entered promiscuous mode [ 2131.795235][ T1578] netlink: Conntrack attr has 12 unknown bytes [ 2131.809739][ T1578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2131.845655][ T1326] veth0_macvtap: entered promiscuous mode [ 2131.868150][ T1326] veth1_macvtap: entered promiscuous mode [ 2131.933572][ T1326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2132.051962][ T1326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2132.175808][ T8643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.193690][ T8643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.343811][T11416] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2132.364712][T11416] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2134.255245][ T1563] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2134.651910][ T1589] bond1: option fail_over_mac: invalid value (16) [ 2134.692051][ T1589] bond1 (unregistering): Released all slaves [ 2134.834165][T11416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2134.851796][T11416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2134.901699][T22263] block nbd2: Receive control failed (result -110) [ 2134.915728][T22263] [ 2134.918132][T22263] ====================================================== [ 2134.925383][T22263] WARNING: possible circular locking dependency detected [ 2134.932497][T22263] syzkaller #0 Not tainted [ 2134.936939][T22263] ------------------------------------------------------ [ 2134.944026][T22263] kworker/u9:5/22263 is trying to acquire lock: [ 2134.950379][T22263] ffff88807be745e0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 2134.959950][T22263] [ 2134.959950][T22263] but task is already holding lock: [ 2134.967360][T22263] ffff88805834ba68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 2134.976368][T22263] [ 2134.976368][T22263] which lock already depends on the new lock. [ 2134.976368][T22263] [ 2134.986798][T22263] [ 2134.986798][T22263] the existing dependency chain (in reverse order) is: [ 2134.995848][T22263] [ 2134.995848][T22263] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 2135.003659][T22263] __mutex_lock+0x19d/0x1550 [ 2135.008817][T22263] nbd_queue_rq+0x373/0x1150 [ 2135.013986][T22263] blk_mq_dispatch_rq_list+0x499/0x1990 [ 2135.020208][T22263] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 2135.027134][T22263] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2135.033691][T22263] blk_mq_run_work_fn+0x16c/0x300 [ 2135.039269][T22263] process_scheduled_works+0xa8e/0x14e0 [ 2135.045487][T22263] worker_thread+0xa47/0xfb0 [ 2135.050669][T22263] kthread+0x388/0x470 [ 2135.055388][T22263] ret_from_fork+0x514/0xb70 [ 2135.060572][T22263] ret_from_fork_asm+0x1a/0x30 [ 2135.065900][T22263] [ 2135.065900][T22263] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 2135.073147][T22263] __mutex_lock+0x19d/0x1550 [ 2135.078290][T22263] nbd_queue_rq+0xc1/0x1150 [ 2135.083340][T22263] blk_mq_dispatch_rq_list+0x499/0x1990 [ 2135.089456][T22263] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 2135.096344][T22263] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 2135.102883][T22263] blk_mq_run_work_fn+0x16c/0x300 [ 2135.108476][T22263] process_scheduled_works+0xa8e/0x14e0 [ 2135.114685][T22263] worker_thread+0xa47/0xfb0 [ 2135.119915][T22263] kthread+0x388/0x470 [ 2135.124535][T22263] ret_from_fork+0x514/0xb70 [ 2135.129681][T22263] ret_from_fork_asm+0x1a/0x30 [ 2135.135006][T22263] [ 2135.135006][T22263] -> #4 (set->srcu){.+.+}-{0:0}: [ 2135.142167][T22263] __synchronize_srcu+0xc9/0x2f0 [ 2135.147657][T22263] elevator_switch+0x1e8/0x7b0 [ 2135.153066][T22263] elevator_change+0x2fa/0x480 [ 2135.158474][T22263] elevator_set_default+0x375/0x440 [ 2135.164316][T22263] blk_register_queue+0x3f3/0x4e0 [ 2135.169956][T22263] __add_disk+0x6cb/0xe30 [ 2135.174851][T22263] add_disk_fwnode+0x100/0x3a0 [ 2135.180156][T22263] nbd_dev_add+0x733/0xb60 [ 2135.185138][T22263] nbd_init+0x15f/0x1e0 [ 2135.189919][T22263] do_one_initcall+0x250/0x870 [ 2135.195227][T22263] do_initcall_level+0x10a/0x1a0 [ 2135.200706][T22263] do_initcalls+0x59/0xa0 [ 2135.205679][T22263] kernel_init_freeable+0x29d/0x3e0 [ 2135.211414][T22263] kernel_init+0x1d/0x1d0 [ 2135.216359][T22263] ret_from_fork+0x514/0xb70 [ 2135.221498][T22263] ret_from_fork_asm+0x1a/0x30 [ 2135.226812][T22263] [ 2135.226812][T22263] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 2135.234668][T22263] __mutex_lock+0x19d/0x1550 [ 2135.239804][T22263] elevator_change+0x1af/0x480 [ 2135.245107][T22263] elevator_set_none+0xb5/0x140 [ 2135.250502][T22263] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 2135.256940][T22263] nbd_start_device+0x189/0xb30 [ 2135.262326][T22263] nbd_genl_connect+0x1597/0x1c10 [ 2135.267894][T22263] genl_family_rcv_msg_doit+0x233/0x340 [ 2135.274074][T22263] genl_rcv_msg+0x614/0x7a0 [ 2135.279126][T22263] netlink_rcv_skb+0x226/0x4a0 [ 2135.284516][T22263] genl_rcv+0x28/0x40 [ 2135.289128][T22263] netlink_unicast+0x7bb/0x940 [ 2135.294429][T22263] netlink_sendmsg+0x813/0xb40 [ 2135.299738][T22263] sock_sendmsg_nosec+0x13a/0x180 [ 2135.305312][T22263] ____sys_sendmsg+0x54e/0x850 [ 2135.310622][T22263] ___sys_sendmsg+0x2a5/0x360 [ 2135.315854][T22263] __x64_sys_sendmsg+0x1b1/0x290 [ 2135.321332][T22263] do_syscall_64+0x174/0x580 [ 2135.326727][T22263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2135.333194][T22263] [ 2135.333194][T22263] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 2135.341820][T22263] blk_alloc_queue+0x544/0x690 [ 2135.347129][T22263] __blk_mq_alloc_disk+0x194/0x390 [ 2135.352792][T22263] nbd_dev_add+0x494/0xb60 [ 2135.357746][T22263] nbd_init+0x15f/0x1e0 [ 2135.362444][T22263] do_one_initcall+0x250/0x870 [ 2135.367756][T22263] do_initcall_level+0x10a/0x1a0 [ 2135.373263][T22263] do_initcalls+0x59/0xa0 [ 2135.378238][T22263] kernel_init_freeable+0x29d/0x3e0 [ 2135.383977][T22263] kernel_init+0x1d/0x1d0 [ 2135.388857][T22263] ret_from_fork+0x514/0xb70 [ 2135.393994][T22263] ret_from_fork_asm+0x1a/0x30 [ 2135.399416][T22263] [ 2135.399416][T22263] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 2135.406664][T22263] fs_reclaim_acquire+0x71/0x100 [ 2135.412160][T22263] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 2135.418508][T22263] __alloc_skb+0x1d7/0x7a0 [ 2135.423468][T22263] tcp_stream_alloc_skb+0x3f/0x580 [ 2135.429217][T22263] tcp_connect+0x1582/0x53e0 [ 2135.434382][T22263] tcp_v6_connect+0x14ed/0x1cf0 [ 2135.439825][T22263] __inet_stream_connect+0x258/0xe00 [ 2135.445652][T22263] inet_stream_connect+0x66/0xa0 [ 2135.451168][T22263] __sys_connect+0x323/0x460 [ 2135.456383][T22263] __x64_sys_connect+0x7a/0x90 [ 2135.461681][T22263] do_syscall_64+0x174/0x580 [ 2135.466829][T22263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2135.473354][T22263] [ 2135.473354][T22263] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 2135.481544][T22263] __lock_acquire+0x1520/0x2cf0 [ 2135.486938][T22263] lock_acquire+0x106/0x350 [ 2135.491996][T22263] lock_sock_nested+0x41/0x100 [ 2135.497309][T22263] inet_shutdown+0x6a/0x390 [ 2135.502355][T22263] nbd_mark_nsock_dead+0x2cb/0x550 [ 2135.508007][T22263] recv_work+0x1cee/0x1e10 [ 2135.512979][T22263] process_scheduled_works+0xa8e/0x14e0 [ 2135.519067][T22263] worker_thread+0xa47/0xfb0 [ 2135.524217][T22263] kthread+0x388/0x470 [ 2135.528854][T22263] ret_from_fork+0x514/0xb70 [ 2135.533990][T22263] ret_from_fork_asm+0x1a/0x30 [ 2135.539318][T22263] [ 2135.539318][T22263] other info that might help us debug this: [ 2135.539318][T22263] [ 2135.549571][T22263] Chain exists of: [ 2135.549571][T22263] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 2135.549571][T22263] [ 2135.562806][T22263] Possible unsafe locking scenario: [ 2135.562806][T22263] [ 2135.570268][T22263] CPU0 CPU1 [ 2135.575690][T22263] ---- ---- [ 2135.581067][T22263] lock(&nsock->tx_lock); [ 2135.585505][T22263] lock(&cmd->lock); [ 2135.592026][T22263] lock(&nsock->tx_lock); [ 2135.598982][T22263] lock(sk_lock-AF_INET6-NBD); [ 2135.603854][T22263] [ 2135.603854][T22263] *** DEADLOCK *** [ 2135.603854][T22263] [ 2135.612066][T22263] 3 locks held by kworker/u9:5/22263: [ 2135.617497][T22263] #0: ffff88804fcaf140 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2135.628832][T22263] #1: ffffc90004887c40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 2135.640647][T22263] #2: ffff88805834ba68 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 2135.649989][T22263] [ 2135.649989][T22263] stack backtrace: [ 2135.655899][T22263] CPU: 1 UID: 0 PID: 22263 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) [ 2135.655920][T22263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2135.655932][T22263] Workqueue: nbd2-recv recv_work [ 2135.655952][T22263] Call Trace: [ 2135.655961][T22263] [ 2135.655969][T22263] dump_stack_lvl+0xe8/0x150 [ 2135.655994][T22263] print_circular_bug+0x2e1/0x300 [ 2135.656022][T22263] check_noncircular+0x12e/0x150 [ 2135.656051][T22263] __lock_acquire+0x1520/0x2cf0 [ 2135.656080][T22263] ? irqentry_exit+0x218/0x8f0 [ 2135.656099][T22263] ? lockdep_hardirqs_on+0x7a/0x110 [ 2135.656120][T22263] ? inet_shutdown+0x6a/0x390 [ 2135.656138][T22263] lock_acquire+0x106/0x350 [ 2135.656158][T22263] ? inet_shutdown+0x6a/0x390 [ 2135.656183][T22263] lock_sock_nested+0x41/0x100 [ 2135.656207][T22263] ? inet_shutdown+0x6a/0x390 [ 2135.656227][T22263] inet_shutdown+0x6a/0x390 [ 2135.656247][T22263] nbd_mark_nsock_dead+0x2cb/0x550 [ 2135.656265][T22263] recv_work+0x1cee/0x1e10 [ 2135.656289][T22263] ? lockdep_unlock+0x5d/0xd0 [ 2135.656307][T22263] ? __lock_acquire+0x13e8/0x2cf0 [ 2135.656332][T22263] ? __pfx_recv_work+0x10/0x10 [ 2135.656348][T22263] ? lockdep_hardirqs_on+0x7a/0x110 [ 2135.656366][T22263] ? irqentry_exit+0x218/0x8f0 [ 2135.656383][T22263] ? trace_irq_disable+0x3b/0x140 [ 2135.656413][T22263] ? rcu_is_watching+0x15/0xb0 [ 2135.656438][T22263] ? process_scheduled_works+0xa20/0x14e0 [ 2135.656456][T22263] process_scheduled_works+0xa8e/0x14e0 [ 2135.656485][T22263] ? __pfx_process_scheduled_works+0x10/0x10 [ 2135.656505][T22263] ? assign_work+0x3cf/0x5d0 [ 2135.656524][T22263] worker_thread+0xa47/0xfb0 [ 2135.656547][T22263] ? __kthread_parkme+0x71/0x1f0 [ 2135.656571][T22263] kthread+0x388/0x470 [ 2135.656592][T22263] ? __pfx_worker_thread+0x10/0x10 [ 2135.656616][T22263] ? __pfx_kthread+0x10/0x10 [ 2135.656638][T22263] ret_from_fork+0x514/0xb70 [ 2135.656662][T22263] ? __pfx_ret_from_fork+0x10/0x10 [ 2135.656684][T22263] ? __switch_to+0xc89/0x1420 [ 2135.656706][T22263] ? __pfx_kthread+0x10/0x10 [ 2135.656733][T22263] ret_from_fork_asm+0x1a/0x30 [ 2135.656764][T22263] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2136.114745][ T4446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2136.241247][ T4446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2137.134866][ T8643] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2137.236250][ T8643] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2137.328692][ T8643] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2137.388029][ T8643] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2137.459371][ T8642] ªªªªª&: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2137.476062][ T4446] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.503888][ T4446] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.547600][ T8643] bridge_slave_1: left allmulticast mode [ 2137.558793][ T8643] bridge_slave_1: left promiscuous mode [ 2137.564694][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2137.575647][ T8643] bridge_slave_0: left allmulticast mode [ 2137.581664][ T8643] bridge_slave_0: left promiscuous mode [ 2137.588605][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2137.683973][ T8643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2137.696583][ T8643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2137.721377][ T8643] bond0 (unregistering): Released all slaves [ 2137.757029][T11413] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2137.772752][T11413] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 2138.211544][ T8643] hsr_slave_0: left promiscuous mode [ 2138.233886][ T8643] hsr_slave_1: left promiscuous mode [ 2138.249914][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2138.268927][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2138.291061][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2138.298745][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2138.313834][ T8643] veth1_macvtap: left promiscuous mode [ 2138.319555][ T8643] veth0_macvtap: left promiscuous mode [ 2138.325138][ T8643] veth1_vlan: left promiscuous mode [ 2138.333126][ T8643] veth0_vlan: left promiscuous mode [ 2138.558055][ T8643] team0 (unregistering): Port device team_slave_1 removed [ 2138.576074][ T8643] team0 (unregistering): Port device team_slave_0 removed [ 2138.669709][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2139.192426][ T8643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.275931][ T8643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.360840][ T8643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.446442][ T8643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.541672][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2139.606834][T11410] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.619200][T11410] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.641933][ T8643] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.677072][T11410] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.685438][T11410] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 2139.725293][ T8643] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.814230][ T8643] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2139.873741][ T8643] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2140.233853][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2140.257257][T11410] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.307228][T11410] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.315641][T11410] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.340691][ T8642] netdevsim netdevsim2 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 2140.400067][ T8643] bond0: (slave netdevsim1): Releasing backup interface [ 2140.659568][ T8643] bridge_slave_1: left allmulticast mode [ 2140.672776][ T8643] bridge_slave_1: left promiscuous mode [ 2140.685004][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.695443][ T8643] bridge_slave_0: left allmulticast mode [ 2140.705428][ T8643] bridge_slave_0: left promiscuous mode [ 2140.720203][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.738843][ T8643] bridge_slave_1: left promiscuous mode [ 2140.744655][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.755540][ T8643] bridge_slave_0: left allmulticast mode [ 2140.778581][ T8643] bridge_slave_0: left promiscuous mode [ 2140.791327][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2140.820089][ T8643] bridge_slave_1: left allmulticast mode [ 2140.826631][ T8643] bridge_slave_1: left promiscuous mode [ 2140.835874][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.845427][ T8643] bridge_slave_0: left allmulticast mode [ 2140.851501][ T8643] bridge_slave_0: left promiscuous mode [ 2140.864952][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2141.076396][ T8643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2141.088395][ T8643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2141.099917][ T8643] bond0 (unregistering): Released all slaves [ 2141.169347][ T8643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2141.180760][ T8643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2141.195388][ T8643] bond0 (unregistering): Released all slaves [ 2141.205214][ T8643] bond1 (unregistering): Released all slaves [ 2141.404403][ T8643] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 2141.433914][ T8643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2141.450434][ T8643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2141.470227][ T8643] bond0 (unregistering): Released all slaves [ 2141.481907][ T8643] bond1 (unregistering): Released all slaves [ 2141.495455][ T8643] bond2 (unregistering): (slave bond3): Releasing backup interface [ 2141.504996][ T8643] bond2 (unregistering): Released all slaves [ 2141.519714][ T8643] bond3 (unregistering): Released all slaves [ 2141.532135][ T8643] bond4 (unregistering): Released all slaves [ 2141.550077][ T8643] bond5 (unregistering): Released all slaves [ 2141.566183][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2141.583940][ T8646] netdevsim netdevsim5 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.628333][ T8646] netdevsim netdevsim5 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.649485][ T8646] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.686505][ T8646] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 2141.878347][ T8643] : left promiscuous mode [ 2142.000645][ T8643] tipc: Left network mode [ 2142.005852][ T8643] tipc: Left network mode [ 2142.410443][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2142.605401][ T8643] hsr_slave_0: left promiscuous mode [ 2142.615499][ T8643] hsr_slave_1: left promiscuous mode [ 2142.629631][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2142.638009][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2142.645993][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2142.656331][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2142.669512][ T8643] hsr_slave_0: left promiscuous mode [ 2142.681767][ T8643] hsr_slave_1: left promiscuous mode [ 2142.689743][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2142.707033][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2142.722756][ T8643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2142.736033][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2142.764719][ T8643] hsr_slave_0: left promiscuous mode [ 2142.774295][ T8643] hsr_slave_1: left promiscuous mode [ 2142.792253][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2142.810604][ T8643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2142.841910][ T8643] veth1_macvtap: left promiscuous mode [ 2142.851549][ T8643] veth0_macvtap: left promiscuous mode [ 2142.857607][ T8643] veth1_vlan: left promiscuous mode [ 2142.862969][ T8643] veth0_vlan: left promiscuous mode [ 2142.875257][ T8643] veth1_macvtap: left promiscuous mode [ 2142.882090][ T8643] veth0_macvtap: left promiscuous mode [ 2142.888162][ T8643] veth1_vlan: left promiscuous mode [ 2142.893460][ T8643] veth0_vlan: left promiscuous mode [ 2142.902756][ T8643] vlan0: left allmulticast mode [ 2142.909166][ T8643] veth0_vlan: left allmulticast mode [ 2142.914557][ T8643] vlan0: left promiscuous mode [ 2143.263780][ T8643] team0 (unregistering): Port device team_slave_1 removed [ 2143.281148][ T8643] team0 (unregistering): Port device team_slave_0 removed [ 2143.481834][ T8643] team0 (unregistering): Port device team_slave_1 removed [ 2143.503983][ T8643] team0 (unregistering): Port device team_slave_0 removed [ 2144.631693][ T8643] team0 (unregistering): Port device team_slave_1 removed [ 2144.654439][ T8643] team0 (unregistering): Port device team_slave_0 removed [ 2144.725917][ T8643] smc: removing net device team0 with user defined pnetid SYZ2 [ 2144.764049][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6