last executing test programs: 11.792787049s ago: executing program 1 (id=2861): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x83}, @TCA_RATE={0x6, 0x5, {0x48, 0x6}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 11.526870496s ago: executing program 2 (id=2864): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000880) socket(0x400000000010, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) socket$kcm(0xa, 0x922000000003, 0x11) (rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (rerun: 32) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) unshare(0x28000600) unshare(0x42000400) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r3}, 0x10) (async) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000180)=[{{0x1, 0x0, 0x0, 0x1}, {0x2}}, {{0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1}}], 0x18) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000300)="2400000011005f0414f9f4070009040f0001000000f0d2d0db6ec2cd25630009df55f7d9edba5124f6b5092ce64dd1d02d253c6d5e0e49315c40cd8aa73fe89a53673468d1b1f1fa7974f13c317e6939fb97b69a5de67b3f01f159920d4f3b2f0500000000000000d415d13dc500000000000000000000000000000005fd06106fc7062e13a5df230331443a46eeb7e628c73fca", 0x1e) 11.498654518s ago: executing program 1 (id=2865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x68, r1, 0x813, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "7876d6d9483689a0256bcd794a17ff7b0d56b0a9ad2b3654154350f3974b50a55fe9658c"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x3c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x195be}]}]}]}, 0x3c}}, 0x0) 11.373935551s ago: executing program 1 (id=2866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x6c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}, @IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_TOS={0x5, 0x9, 0x6}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) writev(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f00000003c0)="40000000000000000000b634b314", 0xe}], 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) 11.029216424s ago: executing program 1 (id=2867): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0xffe4, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x4, 0xfffffffe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00", 0x19}, {&(0x7f0000002e00)="c329d9665736262d1265aab9badb5114e78b4752824505e3425a4cd8", 0x1c}], 0x2}, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x0, 0x6d4}, &(0x7f00000001c0)=0x8) 10.9075499s ago: executing program 1 (id=2868): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x438, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x3a0, 0x206, 0x240, 0x3a0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x2f0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x1000}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0xff, {0x9184}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000380)={{r1}, r2, 0x8, @unused=[0x6, 0x560, 0x10001, 0x800], @name="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"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r7, &(0x7f0000001400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x18, 0x140b, 0x10, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r9], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={r9, 0x85a, 0x54cbe571, 0x7}, &(0x7f00000001c0)=0x10) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000210400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8700000050000000240012800b00010067656e6576650000140002800500080001000000050009"], 0x44}}, 0x800) 9.980928172s ago: executing program 1 (id=2870): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast2, 0x4e23, 0x3, 'sh\x00', 0x18, 0x4, 0x2c}, 0x2c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES8=r0], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000800000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf09000000000000550901000201000095000000000000002500feff0800000018140000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400007700100001040000000000", @ANYRES32=0x0, @ANYRES8=0x0], 0x44}, 0x1, 0x0, 0x0, 0xc8c4}, 0x0) 5.232234853s ago: executing program 0 (id=2885): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x66, 0xc) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="e60029bd7000fcdbdf25030000000000000000000500060001004a230000"], 0x24}}, 0x800) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r0, 0x4000, r4}, 0x18) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003040)=@newtfilter={0x1040, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1014, 0x2, [@TCA_BPF_NAME={0x100e, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x1040}}, 0x20004804) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000800)={'ip6tnl0\x00', 0x0, 0x2f, 0xdb, 0x8b, 0x8001, 0xd, @empty, @loopback, 0x7, 0x7800, 0x8, 0x8}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', r7, 0x7, 0x80, 0x10, 0x10, {{0x15, 0x4, 0x0, 0x9, 0x54, 0x65, 0x0, 0x0, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@lsrr={0x83, 0x3, 0xa5}, @timestamp={0x44, 0x1c, 0x12, 0x0, 0xd, [0x9, 0xffffffff, 0x2, 0x4, 0x4, 0x2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xfa, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x41}, 0xa5e}, {@multicast1, 0x6}, {@loopback, 0x5}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000009c0)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000ac0)={'sit0\x00', &(0x7f0000000a00)={'ip_vti0\x00', 0x0, 0x20, 0x1, 0x5, 0x4215, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x68, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @empty, {[@cipso={0x86, 0x21, 0x3, [{0x5, 0xb, "ce7cbef94fb0c9eb83"}, {0x5, 0x5, "d3c520"}, {0x1, 0x5, "1d911d"}, {0x7, 0x6, "e2258469"}]}, @timestamp={0x44, 0x28, 0xac, 0x0, 0x5, [0x9, 0x44cb6dde, 0xb3a1, 0x6, 0x0, 0x7, 0x9, 0xe, 0x6]}, @generic={0x86, 0xc, "60916a05d9400fed9f13"}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b80)={r1, 0x58, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000bc0)={@remote, @rand_addr, 0x0}, &(0x7f0000000c00)=0xc) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000cc0)={r1, 0x58, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000d00)={@local, @multicast2, 0x0}, &(0x7f0000000d40)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000e00)={'syztnl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8020, 0x40, 0x0, 0xfc, {{0x9, 0x4, 0x0, 0x2, 0x24, 0x1010, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0xa0, 0x1, 0x3, [{@multicast1, 0xa24}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000ec0)={'ip6_vti0\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x4, 0x3c, 0xdd, 0x9, 0x3, @local, @mcast1, 0x40, 0x8000, 0x7}}) (async, rerun: 64) r20 = socket(0x10, 0x803, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r20, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r20, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r21, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r20, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r21, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001ac0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f0000001b00)=ANY=[@ANYBLOB='P\v\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000ffdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="7401028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000ccd2fbb70000000000005a13e42c930000000000000000050003000e00000008000400040000", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r13, @ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=r5, @ANYBLOB="48010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="080007000000000084000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000005400040009008000ffffff7f0900d4040c0000009b07010e050000000700815304000000070001fce6000000000069fc040000000d00d205080000000200040200000000090008ac09000000ff0109ef0600000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c0004008000f90f000000800002ff0171000000c200af06af0b000009000c0700000100000005040800000007000af90000000003007f04000001003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRESOCT=r15, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYRESHEX=r16, @ANYRES32=r8, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400010001003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="f800028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400d80d000040000100240001207072696f72697479000000000600000000000000000000000000080000000000050003000e000000080004002104000008000600", @ANYRES32=r12, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040045f6000008000100", @ANYRES32=r16, @ANYBLOB="ac00028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400020000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000080000008000100", @ANYRES32=r1, @ANYBLOB="f000028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r18, @ANYRESHEX=r2, @ANYRES32=r19, @ANYBLOB="a00102803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000400000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000500000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r21, @ANYBLOB="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"], 0xb50}, 0x1, 0x0, 0x0, 0xc4}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022bf80"], 0x48) 4.955722146s ago: executing program 0 (id=2887): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020f00000500000000000000000000000300ffff000000000000000066b569e521ba556258e2d01fcb00d370961e0c9567f0982ec131774e5f2814fc152f6398b3ca5b602538cc16ee2cf3edc883c0e44df4d2b9d73adf6e2ccd025449560c20"], 0x28}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 4.842595358s ago: executing program 3 (id=2888): r0 = socket$key(0xf, 0x3, 0x2) (async) syz_emit_ethernet(0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="65c725f39b3dfadf010180c2000000000400"], 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}}) (rerun: 64) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f00000002c0)=0x1, 0x4) (async) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f000000eec0)={0x5, 0x9, 0x2a0, @random="d60feaac0e00", 'ip6erspan0\x00'}) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x24}}, 0x0) (async, rerun: 64) r5 = socket$inet(0x2, 0x3, 0x30) (rerun: 64) getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x5, 0xd}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{&(0x7f00000003c0)={0xa, 0x4e21, 0x8, @loopback, 0x8001}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000005c0)="7c6188a536a90fad31c380d0c54a6c59939cd17d83ee2508a164151a6d5b96c4d8983c3575e2e58a74e6b72203d5cd75024e6cf0a26052787f085d024ea9a82fbc138dbfc8a77e47bf97a38ea01f15625109a8f07c884260aeabf70276d2319c1f8aa1697bfd4848bae38bc975024bba33e64d265cd2b199d691fb980349a0b7af9cd207723a797e1df2ee2bc3ba247e1c854c883e8e9d8375844a329cd98d81d93d4d89118bb6133bbfe07adffa4ad973f01552bd29a5f06f6a061b20502db3f971f58c524bb8be287c3bd2e45523dd2fa83e021d4fd0733e8f01881d36e1f7b1ee8451c63d08c3c9268c06c4bbf6aae9ce", 0xf2}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="580000000000000029000000390000002c0802a00000000000000000000000000000ffffffffffff0000000000000000000000000000000020010000000000000000000000000002fc000000000000000000000000000001300000000000000029000000360000003202000000000000c910ff0200000000000000000000000000010101000000002400000000000000290000003200000000000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYBLOB="00000000200000000000000029000000370000002101000000000000c2040000e76601001800000000000000290000003900000087000102000000004b1057ddf43a414472d1614893c9e9cecd345b5d0be276207f5831f0f051298a605a6019ec7c51956645499720376be34a3f992f76b454f2b6fd7a93"], 0xe8}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x94, r10, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x75, 0x5b, "d3c994b9c91760dc76facfd7fe7d1cc08cee0bd73cd32b72f330860aa531a620586a0fdfb3c3e319a01fa84ce723c517c9c6891937893d9acf60fa3f5afed708ba30f6317dd7412920b82212955564ec8d8c28dc0230601d2cfa504d8cc6aa43efb2b37a216fecca68d504ad98ccd390a2"}]}, 0x94}}, 0x48000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000020069b196872f75f32aa5989799751ed69464238daaba0219b20b29e0c11510523aa4dba3a54f1d6859b0067beb41768b7464353e582221b7feb103c209929b1ca182f8ab6b0b322da36f3b8e266a65d1f73f72db93617770dc5710faab2de55aa7c34c83eaa0e778f92e3236e9f7cbd222c61bd91265453d436b6778b0178d924c61359b3556aa92b7b88b2c9bf72bbcc0d0904328e08cc98178d344eb59197b838c66f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, 0x0, 0x2, 0x0, 0x25dfdbfe, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003100000002cbd7000ffdbdf2502000900080000001c0000000000000005000600000000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000006fd0100000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 4.661128311s ago: executing program 4 (id=2889): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070020001f00001a000000030000a95a6e870200010000e9ff070040000200ee1500050005000000cc580a"], 0x80}}, 0x20000000) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000001840)=[{{&(0x7f0000000380)=@llc={0x1a, 0x108, 0x0, 0x9, 0x6, 0xa, @remote}, 0x80, &(0x7f0000001800)=[{&(0x7f00000004c0)="d60c09ef60ce0366f4c3721cd306f071296491a5fd514db34217b2bf31052ce86d260b35ac07ef1a51c01c02caa1696f13df2b1b45350a210cbecb944003b57d37a47bc5b7f38a2e749606cc5ee177b9d1ee05767f07cc93362af7b2003856118c9612f69c3f6d4e350150688ee1a43f12b06529985ee95e44b1ff73b65150cfcc2e7bed39a661a92c256d128542da8f14f1858362f70b5ce2aaba7bf7df189a43f7571f2825fc456c83b8a3a88bdee528923810e3f97ee644870ae6ab2ddd700a69b2f28027badd3c558f383979aae14ed67bc473", 0xd5}, {&(0x7f00000006c0)="e250db1cf9dfacda9709fe85d8a94728f2644b67f8bcb4705bfe2582a9d1263547a978fac32d4c0debb4226fe47cf6d37ba355885769885c662ceeede5c4161336287063a124cc587b2bb21a86087926558721", 0x53}, {&(0x7f0000000740)="a4c40e680429929739661c392efd11ee4b93b693a8bfb6c6c8490f9653e43b241fea62edf80e34393b4c6b85b2c553ef1808b8b0b492c9a1b329921a185c7bb6345bb54a9f3d34b7d5a8dc138508ad2feae6e9f674cfb9ddcbae6f41bea0ba179071710afa2e07f75249a8a6fc50a0e1decce88b788638e1c49b01ddbaf6a5daa4fb75511999d6f3e32e091decd3731adc8e7e9b40cd4515bd6c65ce5f9193c62faefd7d3dab72b9d02e9f5123", 0xad}, {&(0x7f0000000800)="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", 0xe00}], 0x4}}], 0x1, 0x1c) setsockopt$inet_mreq(r3, 0x0, 0x23, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r9 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r8, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r9, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r9, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000080)={0x4, {{0x2, 0x4e22, @multicast1}}}, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 4.563399464s ago: executing program 3 (id=2890): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) r9 = socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r11 = accept(r10, 0x0, 0x0) sendmmsg$alg(r11, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmsg(r11, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff3, 0xfff2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000f01000000000000", 0x20}], 0x1}, 0x0) 4.460110225s ago: executing program 0 (id=2891): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x5, 0xf, 0x5, 0xfffffffffffffffe, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x12}], &(0x7f0000000080)='GPL\x00', 0x5, 0x1b, &(0x7f00000000c0)=""/27, 0x40f00, 0x13, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x1, 0x8, 0x3, 0x4451}, 0x10, 0x29aec, 0xffffffffffffffff, 0x8, &(0x7f0000000140)=[0x1], &(0x7f0000000240)=[{0x3, 0x1, 0x7, 0xc}, {0x2, 0x4, 0xa, 0xb}, {0x4, 0x5, 0x8, 0x1}, {0x9, 0x4, 0xb, 0xc}, {0x3, 0x5, 0x10, 0x4}, {0x100, 0x5, 0x10, 0x5}, {0x3, 0x2, 0xd, 0x3}, {0x0, 0x4, 0xf, 0x4}], 0x10, 0x3}, 0x94) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r0, r1, 0x1f, 0x0, @void}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x20028840) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20004040}, 0x200c0) 4.165108728s ago: executing program 0 (id=2892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8942, &(0x7f00000001c0)={'ip6gre0\x00', @ifru_settings={0x78, 0x7, @sync=&(0x7f0000000140)={0x1, 0x1, 0xaa4}}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000700)={'filter\x00', 0x7, 0x4, 0x4c8, 0x0, 0x0, 0x2f8, 0x2f8, 0x3e0, 0x3e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x80000001, 'system_u:object_r:tty_device_t:s0\x00'}}}, {{@arp={@empty, @local, 0xff000000, 0x0, 0xa, 0xa, {@mac=@multicast, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff, 0x7f]}}, 0x1, 0x1, 0x69b, 0x1, 0x8000, 0x2ec, 'bridge_slave_1\x00', 'wg1\x00', {0xff}, {}, 0x0, 0x54}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x24}, @remote, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7, 0x3, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x518) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000019f7ff0f0000000001000201180100002020732500000000002020207b0af8ff000000007ba100000000000007010000f6ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 4.163209967s ago: executing program 4 (id=2893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x9}, 0x8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3d0, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x338, 0x240, 0x240, 0x338, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@empty, @multicast1, 0xffffffff, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x68}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1e, 0x2, 0x2}}, @common=@ttl={{0x28}, {0x0, 0x8b}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 0xa, 0x10, [0x1b, 0x5, 0x28, 0x25, 0x2, 0x11, 0x29, 0xa, 0x2b, 0x9, 0x9, 0x37, 0x31, 0x1b, 0x37, 0x31], 0x0, 0x1, 0x100000001}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockopt$inet6_mreq(r1, 0x29, 0x5dd2745998f308f3, &(0x7f0000000080)={@loopback, 0x0}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x34, &(0x7f0000000500)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x300, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffc, 0x1}}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) 4.10765824s ago: executing program 3 (id=2894): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') close(0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000000, 0x32, 0xffffffffffffffff, 0xfb2f000) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000940)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0xfffffffffffffe45) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0000000400000004000000f7ffffff00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="050000"], 0x10) close(0x3) close(0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000040)=0x1f29, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x128) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, r4, 0xe29, 0x30bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x60044095}, 0x24040044) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0x3}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}, {{&(0x7f0000001100)={0xa, 0x4e20, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff7}, 0x1c, &(0x7f00000019c0)}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0x511, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xd9}}, 0x100, 0x9368, 0x7, 0x0, 0xd0, 0x5, 0x5}, &(0x7f00000005c0)=0x9c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 3.941361204s ago: executing program 0 (id=2895): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0xffffffffffffff1d, &(0x7f0000000700)={&(0x7f00000003c0)={0x2c, r4, 0x10, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x26, 0x8000, 0x81, 0x8}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002875ab75f9bd700000df2507000000", @ANYRES32=r8, @ANYBLOB="0c009900ff0700005a0000001400040073797a6b616c6c657230000000000000080005000a000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) close(0xffffffffffffffff) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r9 = accept4(r0, 0x0, 0x0, 0xc0000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r9, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r12, &(0x7f0000000fc0)={0x0, 0x3f, &(0x7f0000000f80)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x8004) sendmsg$TIPC_CMD_GET_LINKS(r11, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r13, 0x10, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r10, 0x0, 0x11, 0x0, &(0x7f0000000240)="8c66a53f615589df9306", 0x0, 0x5, 0x0, 0xf7, 0x0, &(0x7f0000000540)="4972b156b8de0069877e53d03661beef469d7986245df1b9f4168809f30d7ddf1ce74077822c5b57337e5baf441cb5172e3aec50a16fbdbbdc2a7d749802ffffffffdc3808731468dea0f9fccd8f7d732740da6ebc6807a75bc87c6ef70b8e004122a002116b689f98a9b8de1c734d124acbbe741d8a7dce7ce33f51b8f813ba9de2a40d4d4dea5d5d65b7e097ac0ee5f12ae918b23bef906df3ca90f858b539ef9f90deb6bd0c81198c6888319e00747b678d9ad6eee8b608396ce1e2931248d2447b393fdab4e4ba23e413d8f70b8d23560f5fa7c013dd1242e728a2d6460851522c78d54de65b2f92b6090000000000000076109aaf", 0x0, 0x5, 0x0, 0xb}, 0x50) recvfrom(r0, &(0x7f00000030c0)=""/4117, 0x1015, 0x1, 0x0, 0x0) 3.629051112s ago: executing program 4 (id=2896): socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 64) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0xff7b) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x1d, 0x2000000000000070}}) (async) syz_emit_ethernet(0x6e, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000383afffe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x4, 0x3, 0x3}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) (async, rerun: 64) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87d", 0x3f}, {&(0x7f00000023c0)="b0a72f5a7bb7550a097f743c7b13f5b641ad6f1b724473657d8b7c613caea8c5e5f1b3d035f26ed1ef515e471016512bb25cdf441c9d48740970762742cdb18d7c6ba6f8e8bda4b9c9656f413ba6d1a8318b0cd0a0c6442584b00fc8b8eb7f662f1a72a02c8c794e0be7cb01cd994bf103631362811806ceee46564b6e6aab5352ac28a63082884d9f02a81cc1b27189a4f1e7ba8a03738229f54373ec9867505656492ac9f93eb3cf87b47a003a460b1d579736516e8aa6087d91869f0055c1d436873126d52fdd766953e9e39aec35fbbacee79bf07a69102b96e7f9f0aced311033d31a1805b90c20394c613e9d1681685694", 0xf4}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) (async) recvmmsg(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)=""/59, 0x3b}, {&(0x7f0000000e00)=""/247, 0xf7}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x10000, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010022bd7000ffdbdf252100000008000300", @ANYRES32=r8, @ANYBLOB="24002d8005000100"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000090a010400000000000000000a00007602000000000000310000000008000540000000020900020073797a310000000008000a40fffffffc0c0011800800020066696200140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r2], 0x20}}, 0x0) (async, rerun: 64) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r13 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="cdaf7f0a", @ANYRES16=r10, @ANYBLOB="010329bd7000fcdbdf25240000002000018014000200626f6e6430000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000001780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001740)={&(0x7f00000012c0)=@delchain={0x47c, 0x65, 0x20, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xd}, {0x8, 0xb}, {0x8, 0x8}}, [@f_rsvp6={{0xa}, {0x41c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0xe}}, @TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x51f, 0xa7e1, 0x2, 0x1, 0x800, 0x9, 0x6f27, 0x40, 0xfffff800, 0x7, 0x81, 0xb, 0x9, 0x5, 0x1, 0x3ff, 0x8001, 0xfffffff7, 0x36, 0x9, 0x80000001, 0x6, 0x5, 0x0, 0x2f8f, 0x4, 0x10, 0x9, 0xbdd, 0xb, 0x10, 0x9, 0x7, 0x4, 0x5c, 0xb, 0xffffffff, 0x4, 0x2, 0x40, 0x7, 0x8, 0x3, 0xfffffff7, 0x6, 0x3, 0xfffffff7, 0xe, 0x7, 0xab9, 0x4, 0x9, 0x10001, 0xfffffffc, 0x1, 0x1, 0x7, 0x9, 0x8, 0x3ff, 0x9, 0x160, 0x57, 0x9, 0x5, 0x1000, 0x7c5, 0x7f, 0x8, 0x1ff, 0x3, 0x2, 0x5, 0x2, 0x1ff, 0x2, 0x6, 0x885, 0x33295f7b, 0x6, 0x101, 0xe, 0x5, 0x6, 0xca38, 0x8, 0x0, 0x3, 0x10000, 0x9b, 0x1, 0xab, 0xffff, 0x8000, 0x6, 0xb7, 0x3, 0x2, 0x1ff, 0x5, 0x6, 0xf, 0x6, 0xff, 0x2, 0x1000, 0xb, 0x8, 0x0, 0xfffffff2, 0xb, 0xc01e, 0x8, 0xe, 0xaaf, 0x1ff, 0x1, 0x4c, 0x1, 0x800, 0x1, 0xfc65, 0xb2af, 0x4, 0x5, 0x100, 0x4, 0x9f, 0x10001, 0x1, 0x6, 0x7fff, 0x9, 0xfffffffc, 0x2, 0x2, 0x1, 0x3, 0x401, 0xa1, 0x2, 0x5, 0x4f, 0x10001, 0xd, 0x1ff, 0xa, 0x2, 0xdcf4, 0x4, 0xb, 0x3, 0xfffffffa, 0x2, 0x6, 0x5d76, 0x5ad3, 0x6, 0x400, 0xa, 0x800, 0x5, 0xa, 0x0, 0x0, 0x2, 0x8, 0xffffffb3, 0x80000, 0x4, 0x3, 0x6, 0xc, 0xf, 0x9, 0x7, 0x4, 0x80000001, 0x2, 0x40, 0x400, 0x62, 0x4, 0x80, 0x2, 0x5e, 0x2, 0x60, 0x5, 0x10000, 0x2, 0x2, 0x80000001, 0x81, 0x9, 0x9, 0x2, 0x3c0, 0x6, 0x6, 0x2, 0x2, 0x9, 0x1, 0xb, 0x1, 0x0, 0x7ff, 0x80000001, 0x7fffffff, 0x1a, 0x9, 0x3, 0xdb, 0x2, 0x4f3, 0x6, 0x5, 0xf, 0x3, 0x8, 0x0, 0x5, 0xec, 0xfff, 0xfffffff9, 0xc6, 0x4, 0xd, 0x0, 0x7, 0x1ff, 0x4, 0x1, 0x8, 0x7, 0x1, 0x9, 0x8000, 0x3, 0xffffff7f, 0xe, 0xfffffff2, 0x9, 0x9, 0x0, 0x1, 0x1, 0xf, 0xf, 0x8, 0x2, 0xde, 0x0, 0x6, 0xfffff611]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}, @f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x10001, 0x9, 0xfffffffe}, {0x2, 0x6, 0xd}, 0x16, 0x0, 0x6}}]}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x86f4ee903ce77b3e}, 0xc40c5) 3.628620261s ago: executing program 0 (id=2897): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000002740)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001180)="1b", 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x8}, 0x8) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) unshare(0x6a040000) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x3, "14655b"}, &(0x7f0000000180)=0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000000c0)={r5, 0x1}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 3.444715279s ago: executing program 4 (id=2898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x30, 0x6, 0x8a) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0xf}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x2}}], 0x68}}], 0x1, 0x4c014) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x1f0c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x10) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r10, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) getsockopt$sock_int(r3, 0x1, 0x13, &(0x7f0000000180), &(0x7f0000000300)=0x4) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) 2.411698228s ago: executing program 2 (id=2899): ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004945}, 0x40080c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r3, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x61, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, 0x4043}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}]}, 0x3c}}, 0x20000884) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x6, 0xba, 0x6, 0x2, 0x44, @empty, @mcast1, 0x1, 0x10, 0xde9, 0x10}}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)=@RTM_DELMDB={0x18, 0x55, 0x1, 0x70bd25, 0x25dfdbfc, {0x7, r8}}, 0x18}}, 0x20040851) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2.357347296s ago: executing program 3 (id=2900): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020600) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000006c0)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0xe, 0x0, "e8603860bf759e8341d0986fc03e54c507b88cc66a519fdfc5808006d3e168f3b9ca8632231705a2ed89f6b6ecaf6752465b7588d1291db3e47825bafc4826dcc7956d2ddccdf958050e90c7e66346a2"}, 0xd8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xd0, 0x19, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x20, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075a, 0x81}}, @sec_ctx={0xc, 0x8, {0xfffffffffffffe41, 0x8, 0x0, 0x1}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) unshare(0x2a020400) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 1.611461463s ago: executing program 4 (id=2901): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000040) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r3, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x37fa}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={r4}, &(0x7f0000000100)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x48}}, 0x4008000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$netlink(0x10, 0x3, 0x8) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 1.554830894s ago: executing program 2 (id=2902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004f00005000000000000690780a210104ac1414aa441c0a01ffffffffffffaa7eac1414aa00008001ac1e000100000008070c0990ec742f779f8fa6a300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x204031, 0xffffffffffffffff, 0x5f456000) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r7 = socket(0x1d, 0x800, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtfilter={0xc0, 0x2c, 0x200, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xf, 0x4}, {0x4, 0xc}, {0x4, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x7c, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xa, 0x6}}, @TCA_BPF_ACT={0x54, 0x1, [@m_ct={0x50, 0x19, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @TCA_CT_ZONE={0x6, 0x4, 0xfe01}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7, 0x3}}}}]}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) socket$rxrpc(0x21, 0x2, 0xa) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, 0x0, 0x0) (async) sendmmsg(r8, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="81b60ff1", 0x4}, {&(0x7f0000000000)="04bcf9fc18", 0x5}], 0x2}, 0x0) (async) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f00000004c0)=[{0x0, 0x2, {0x0, 0xff, 0x4}, {0x2}, 0x0, 0xfc}], 0x20) (async) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.386195672s ago: executing program 3 (id=2903): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20084084) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x58}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21d62}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20084084) (async) 1.066954348s ago: executing program 2 (id=2904): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f0000001580)=""/238, 0xee}, {&(0x7f0000000400)=""/102, 0x66}, {&(0x7f00000014c0)=""/185, 0xb9}, {&(0x7f0000002680)=""/85, 0x55}], 0x5}}], 0x1, 0x10002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) recvmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/235, 0xeb}], 0x1, &(0x7f00000002c0)=""/190, 0xbe}, 0x10200) 1.033152753s ago: executing program 3 (id=2905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) close(0x3) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x95}, 0x1, 0x0, 0x0, 0x40008d0}, 0x24000840) 792.473351ms ago: executing program 2 (id=2906): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f00000000c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e06018000020000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x200, 0x70bd29, 0x9}, 0x14}}, 0x84) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) 571.991423ms ago: executing program 2 (id=2907): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = socket(0x8, 0x4, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x40106150, &(0x7f0000001940)={{r1, 0x0, 0x18102, 0x0, 0xa, 0x0, 0x0}, 0x0, 0x0}) ioctl$sock_netrom_SIOCADDRT(r2, 0x6180, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x10010, 0xffffffffffffffff, 0x0) unshare(0x4a000200) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x10, r5, 0xffffc000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}, {[], 0x74c8aad696aabd1d}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) 0s ago: executing program 4 (id=2908): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x4) (async) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): 12.852711][ T9857] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 212.863153][T10595] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1133'. [ 213.069274][T10607] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1136'. [ 213.313263][ T9857] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 213.762527][ T1315] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 214.085610][T10639] netlink: 'syz.2.1145': attribute type 29 has an invalid length. [ 214.095944][T10641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1145'. [ 214.226262][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1148'. [ 214.684231][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 214.693965][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1156'. [ 214.812147][ T76] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 214.839106][ T76] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 214.883255][ T9857] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 214.906474][T10684] netlink: 'syz.0.1160': attribute type 9 has an invalid length. [ 214.928971][T10684] netlink: 'syz.0.1160': attribute type 6 has an invalid length. [ 214.952485][T10684] netlink: 'syz.0.1160': attribute type 7 has an invalid length. [ 214.976775][T10684] netlink: 'syz.0.1160': attribute type 8 has an invalid length. [ 214.977868][T10694] xt_nfacct: accounting object `syz0' does not exist [ 215.179924][T10697] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 215.282043][T10702] xt_bpf: check failed: parse error [ 215.600886][T10715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.656265][T10720] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.665282][T10720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.672752][T10720] IPv6: NLM_F_CREATE should be set when creating new route [ 215.680122][T10720] IPv6: NLM_F_CREATE should be set when creating new route [ 215.687434][T10720] IPv6: NLM_F_CREATE should be set when creating new route [ 216.725959][T10757] No such timeout policy "syz0" [ 216.732171][T10763] netlink: 'syz.1.1179': attribute type 4 has an invalid length. [ 216.940767][T10764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.982395][T10764] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 217.213969][T10757] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.266617][T10766] __nla_validate_parse: 3 callbacks suppressed [ 217.266636][T10766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 217.587307][T10757] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.068445][T10804] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 218.076681][T10804] netlink: 'syz.3.1186': attribute type 2 has an invalid length. [ 218.085619][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1186'. [ 218.264182][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1188'. [ 218.274641][T10757] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.308000][T10792] syz_tun: entered allmulticast mode [ 218.497933][T10757] netdevsim netdevsim0 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.642620][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 218.795435][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.857480][ T1114] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.920498][ T76] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.994398][ T1114] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.309251][T10836] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1195'. [ 219.357892][T10840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1197'. [ 219.425243][T10836] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1195'. [ 219.477213][T10836] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 219.580147][T10848] tipc: Started in network mode [ 219.598452][T10848] tipc: Node identity ac14140f, cluster identity 4711 [ 219.640910][T10848] tipc: New replicast peer: 172.20.20.170 [ 219.663731][T10848] tipc: Enabled bearer , priority 10 [ 219.680832][T10850] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1200'. [ 219.711095][T10851] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1200'. [ 219.741458][T10851] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 219.765123][T10850] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 220.223896][T10868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1206'. [ 220.638451][T10893] netlink: 'syz.2.1210': attribute type 11 has an invalid length. [ 220.806924][ T5892] tipc: Node number set to 2886997007 [ 221.146005][T10906] syzkaller1: entered promiscuous mode [ 221.161711][T10906] syzkaller1: entered allmulticast mode [ 221.342013][T10912] netlink: 'syz.2.1214': attribute type 3 has an invalid length. [ 221.371934][T10912] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1214'. [ 221.828298][T10925] netlink: 'syz.1.1218': attribute type 1 has an invalid length. [ 221.841535][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 221.986827][T10927] smc: net device wlan0 applied user defined pnetid SYZ0 [ 222.093606][T10937] netlink: 'syz.3.1220': attribute type 1 has an invalid length. [ 222.195110][T10941] bond7: (slave geneve2): making interface the new active one [ 222.203852][T10941] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 222.233180][ T48] netdevsim netdevsim3 ªªªªª»: set [1, 0] type 2 family 0 port 20004 - 0 [ 222.244129][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 222.264879][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 222.287782][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 222.518266][T10957] __nla_validate_parse: 4 callbacks suppressed [ 222.518285][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 222.556574][T10954] bond3: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 222.598178][T10954] bond3 (unregistering): Released all slaves [ 222.692084][T10968] netlink: 'syz.4.1226': attribute type 1 has an invalid length. [ 222.700800][T10967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.713357][T10968] netlink: 'syz.4.1226': attribute type 3 has an invalid length. [ 222.731890][T10968] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1226'. [ 222.788823][T10959] geneve2: entered promiscuous mode [ 222.848344][ T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.866739][ T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.894985][T10975] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1230'. [ 222.904506][ T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.919915][ T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.867760][T11004] batman_adv: batadv0: Adding interface: macvtap1 [ 223.914693][T11004] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.976838][T11004] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 224.263005][T11016] syzkaller0: entered promiscuous mode [ 224.277983][T11020] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 224.282447][T11016] syzkaller0: entered allmulticast mode [ 224.291950][T11023] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 224.313394][T11023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1245'. [ 224.326820][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 224.397668][T11017] x_tables: duplicate underflow at hook 3 [ 224.534930][T11032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1241'. [ 224.548138][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 224.774151][T11045] IPVS: set_ctl: invalid protocol: 135 100.1.1.2:20000 [ 224.959469][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 225.074315][ T8090] IPVS: starting estimator thread 0... [ 225.161680][T11068] IPVS: using max 36 ests per chain, 86400 per kthread [ 225.297019][T11073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 225.653842][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1263'. [ 225.694523][T11100] netlink: 'syz.4.1263': attribute type 14 has an invalid length. [ 225.745214][T11102] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 225.920861][T11107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.929642][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.965233][T11114] syzkaller1: entered promiscuous mode [ 225.981334][T11114] syzkaller1: entered allmulticast mode [ 226.002113][ T5827] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 226.321443][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 226.419949][T11137] netlink: 'syz.1.1272': attribute type 14 has an invalid length. [ 226.455342][T11137] netlink: 'syz.1.1272': attribute type 11 has an invalid length. [ 228.772375][T11116] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.996436][T11175] __nla_validate_parse: 5 callbacks suppressed [ 228.996458][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1280'. [ 229.176547][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1280'. [ 229.189523][T11182] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 229.214180][T11182] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 229.224832][T11175] netlink: 'syz.3.1280': attribute type 2 has an invalid length. [ 229.245647][T11182] netlink: 'syz.1.1284': attribute type 4 has an invalid length. [ 229.258022][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1280'. [ 229.329554][T11186] netlink: 'syz.2.1283': attribute type 1 has an invalid length. [ 229.381390][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 229.607639][T11203] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1289'. [ 229.807918][T11207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 229.952182][T11224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.959496][T11224] IPv6: NLM_F_CREATE should be set when creating new route [ 229.966810][T11224] IPv6: NLM_F_CREATE should be set when creating new route [ 229.974082][T11224] IPv6: NLM_F_CREATE should be set when creating new route [ 230.020912][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.031097][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.048424][T11225] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1295'. [ 230.059482][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.069720][ T6993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.091437][T11224] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1295'. [ 230.104312][T11236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.125191][T11202] batman_adv: batadv0: Adding interface: ipvlan2 [ 230.131959][T11202] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.167050][T11202] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 230.184569][T11231] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.193278][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.349831][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1298'. [ 230.813399][T11262] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 230.879875][T11269] batadv_slave_1: entered promiscuous mode [ 230.887641][T11269] batadv_slave_1: entered allmulticast mode [ 230.943843][T11270] vlan2: entered allmulticast mode [ 230.956578][T11270] bond0: entered allmulticast mode [ 231.172479][T11277] syzkaller0: entered promiscuous mode [ 231.191420][T11277] syzkaller0: entered allmulticast mode [ 231.208272][T11281] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1311'. [ 231.233728][T11286] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 231.353357][T11286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.360661][T11286] IPv6: NLM_F_CREATE should be set when creating new route [ 231.417571][T11293] netlink: 'syz.1.1313': attribute type 4 has an invalid length. [ 231.438656][T11294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.445972][T11294] IPv6: NLM_F_CREATE should be set when creating new route [ 231.520273][T11299] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 15, id = 0 [ 231.903406][T11306] netlink: 'syz.3.1316': attribute type 1 has an invalid length. [ 232.067560][T11313] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.077381][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.809140][T11339] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 232.940376][T11339] bond2: entered promiscuous mode [ 232.946160][T11339] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.029842][T11350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.433943][T11372] ip6tnl0: Caught tx_queue_len zero misconfig [ 234.016107][T11395] xt_hashlimit: size too large, truncated to 1048576 [ 234.726666][T11423] __nla_validate_parse: 12 callbacks suppressed [ 234.726687][T11423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1342'. [ 234.745822][T11413] bridge_slave_1: entered promiscuous mode [ 234.767780][T11413] bridge_slave_1: entered allmulticast mode [ 234.788221][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1343'. [ 234.877878][T11425] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1343'. [ 234.936410][T11425] syzkaller0: entered promiscuous mode [ 234.957113][T11425] syzkaller0: entered allmulticast mode [ 235.143628][T11427] syzkaller0: entered promiscuous mode [ 235.149201][T11427] syzkaller0: entered allmulticast mode [ 235.156483][T11433] tipc: Enabled bearer , priority 0 [ 235.306927][T11426] tipc: Resetting bearer [ 236.099600][T11462] netlink: 'syz.0.1352': attribute type 13 has an invalid length. [ 237.631478][T11426] tipc: Disabling bearer [ 237.659164][T11454] team0: Port device syz_tun added [ 237.792752][T11469] sctp: [Deprecated]: syz.2.1353 (pid 11469) Use of int in maxseg socket option. [ 237.792752][T11469] Use struct sctp_assoc_value instead [ 237.926182][ T5892] IPVS: starting estimator thread 0... [ 237.967437][T11475] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 238.046771][T11474] IPVS: using max 27 ests per chain, 64800 per kthread [ 238.148140][T11490] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1357'. [ 238.674493][T11505] sctp: [Deprecated]: syz.0.1359 (pid 11505) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.674493][T11505] Use struct sctp_sack_info instead [ 239.113876][T11524] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 239.325342][T11524] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.695631][T11544] 8021q: VLANs not supported on ip6gre0 [ 240.543700][T11585] tipc: Enabling of bearer rejected, failed to enable media [ 240.587540][T11585] netlink: 'syz.1.1379': attribute type 8 has an invalid length. [ 240.609080][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 240.637210][T11585] netlink: 'syz.1.1379': attribute type 8 has an invalid length. [ 240.665601][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1379'. [ 240.873010][T11596] bridge0: entered promiscuous mode [ 240.888495][T11596] macvtap1: entered promiscuous mode [ 240.978086][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1383'. [ 241.041556][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 241.199153][T11604] 8021q: VLANs not supported on nlmon0 [ 241.437251][T11614] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1388'. [ 241.457872][T11618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1389'. [ 241.519428][T11624] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1391'. [ 242.418467][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 242.586775][T11652] syzkaller1: entered promiscuous mode [ 242.595249][T11652] syzkaller1: entered allmulticast mode [ 242.660735][T11658] bridge5: entered promiscuous mode [ 242.672795][T11658] macsec0: entered promiscuous mode [ 242.688618][T11658] macsec0: entered allmulticast mode [ 242.701809][T11658] bridge5: entered allmulticast mode [ 242.723950][T11658] bridge5: port 1(macsec0) entered blocking state [ 242.741905][T11658] bridge5: port 1(macsec0) entered disabled state [ 242.753766][T11658] bridge5: left allmulticast mode [ 242.766726][T11658] bridge5: left promiscuous mode [ 242.842059][T11662] tipc: New replicast peer: 255.255.255.255 [ 242.857184][T11662] tipc: Enabled bearer , priority 10 [ 242.869917][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 243.169491][T11679] sctp: [Deprecated]: syz.0.1404 (pid 11679) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.169491][T11679] Use struct sctp_sack_info instead [ 243.198467][T11674] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1405'. [ 243.389955][T11690] sctp: [Deprecated]: syz.1.1407 (pid 11690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.389955][T11690] Use struct sctp_sack_info instead [ 243.423531][T11687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1406'. [ 243.844264][T11715] xt_bpf: check failed: parse error [ 244.385621][T11731] ip6gretap0: entered promiscuous mode [ 244.999865][T11766] xt_ipcomp: unknown flags 1D [ 245.028985][T11766] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 245.449010][T11785] net_ratelimit: 3 callbacks suppressed [ 245.449037][T11785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.463184][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.512216][T11785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.524589][T11795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.560215][T11785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.649620][T11795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.658233][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.677559][T11795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.694351][T11795] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.741505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.970537][T11807] __nla_validate_parse: 6 callbacks suppressed [ 245.970555][T11807] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.1437'. [ 245.986778][T11807] netlink: 1132 bytes leftover after parsing attributes in process `syz.4.1437'. [ 246.405482][ T1114] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 246.425178][T11831] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1444'. [ 246.608767][T11845] netlink: 'syz.4.1446': attribute type 1 has an invalid length. [ 246.899071][T11848] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 246.947135][T11848] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 247.003776][T11855] bond4: (slave gretap1): making interface the new active one [ 247.018102][T11855] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 247.035488][T11845] macvlan0: entered promiscuous mode [ 247.041086][T11845] macvlan0: entered allmulticast mode [ 247.057661][T11845] bond4: entered promiscuous mode [ 247.063575][T11845] gretap1: entered promiscuous mode [ 247.069968][T11845] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 247.083594][T11845] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 247.098109][T11845] bond4: left promiscuous mode [ 247.117619][T11845] gretap1: left promiscuous mode [ 247.591035][T11879] wg1 speed is unknown, defaulting to 1000 [ 247.604151][T11879] wg1 speed is unknown, defaulting to 1000 [ 247.612827][T11879] wg1 speed is unknown, defaulting to 1000 [ 247.781175][T11879] infiniband syz0: set down [ 247.787527][ T8090] wg1 speed is unknown, defaulting to 1000 [ 247.795655][T11879] infiniband syz0: added wg1 [ 247.806183][T11879] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 247.810945][T11879] infiniband syz0: Couldn't open port 1 [ 247.857238][T11879] RDS/IB: syz0: added [ 247.862402][T11879] smc: adding ib device syz0 with port count 1 [ 247.868792][T11879] smc: ib device syz0 port 1 has no pnetid [ 247.880243][ T9848] wg1 speed is unknown, defaulting to 1000 [ 247.894600][T11879] wg1 speed is unknown, defaulting to 1000 [ 248.068978][T11879] wg1 speed is unknown, defaulting to 1000 [ 248.157264][T11886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 248.413757][T11879] wg1 speed is unknown, defaulting to 1000 [ 248.576392][T11879] wg1 speed is unknown, defaulting to 1000 [ 248.738161][T11879] wg1 speed is unknown, defaulting to 1000 [ 248.955686][T11895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1457'. [ 249.129978][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 249.139661][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 249.158432][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1458'. [ 249.158537][ T83] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.167695][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 249.186484][ T83] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.195832][ T83] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.205501][ T83] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.275476][T11826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 249.891040][T11925] sctp: [Deprecated]: syz.0.1466 (pid 11925) Use of int in maxseg socket option. [ 249.891040][T11925] Use struct sctp_assoc_value instead [ 250.315870][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1471'. [ 250.683795][T11965] netlink: 'syz.1.1473': attribute type 1 has an invalid length. [ 250.986516][T11975] __nla_validate_parse: 3 callbacks suppressed [ 250.986538][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 251.033614][T11976] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 251.198518][T11983] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1480'. [ 251.304398][T11983] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1480'. [ 251.425876][T11997] netlink: 'syz.0.1483': attribute type 11 has an invalid length. [ 252.102260][T12021] tipc: New replicast peer: 172.20.20.170 [ 252.128980][T12021] tipc: Enabled bearer , priority 10 [ 252.355526][T12033] syzkaller0: entered promiscuous mode [ 252.362085][T12033] syzkaller0: entered allmulticast mode [ 252.375570][T12033] tipc: Enabled bearer , priority 0 [ 252.661546][T12028] tipc: Resetting bearer [ 252.758229][T12028] tipc: Disabling bearer [ 252.790423][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1499'. [ 253.056141][T12068] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.102659][T12068] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.275746][T12068] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.306836][T12068] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.455873][T12068] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.488875][T12068] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.597555][T12089] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 253.637277][T12068] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.663042][T12068] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.017163][ T83] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.039086][ T83] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.067753][ T83] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.077289][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 254.088412][ T83] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.163396][ T76] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.184948][T12122] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1515'. [ 254.185240][ T76] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.210708][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1517'. [ 254.220088][T12117] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1515'. [ 254.282523][T12123] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.330673][ T6993] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.340030][ T6993] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.350486][T12124] bond4: entered promiscuous mode [ 254.356026][T12124] bond4: entered allmulticast mode [ 254.363491][T12124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 254.372783][T12124] team0: Port device bond4 added [ 254.492908][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1519'. [ 254.596839][T12138] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 254.777652][T12145] syzkaller0: entered promiscuous mode [ 254.793127][T12145] syzkaller0: entered allmulticast mode [ 254.845964][T12145] tipc: Enabled bearer , priority 0 [ 254.906459][T12140] tipc: Resetting bearer [ 254.970083][T12140] tipc: Disabling bearer [ 255.027596][T12154] wg1 speed is unknown, defaulting to 1000 [ 255.375988][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1529'. [ 256.070080][T12206] netlink: 'syz.1.1538': attribute type 2 has an invalid length. [ 256.173560][T12209] __nla_validate_parse: 1 callbacks suppressed [ 256.173581][T12209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1539'. [ 256.257056][T12210] dvmrp6: entered allmulticast mode [ 256.347751][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 256.400191][T12209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1539'. [ 257.199343][T12242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1546'. [ 257.220073][T12243] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1546'. [ 257.493920][T12251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1549'. [ 257.525850][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1550'. [ 257.692461][T12261] netlink: 'syz.1.1552': attribute type 1 has an invalid length. [ 257.735077][T12261] bond5: entered promiscuous mode [ 257.740495][T12261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.042059][T12261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'. [ 258.051182][T12261] bond5: entered allmulticast mode [ 258.501971][T12284] net_ratelimit: 15 callbacks suppressed [ 258.501995][T12284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.516761][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.686410][T12281] bond6: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 258.697753][T12281] bond6 (unregistering): Released all slaves [ 258.874585][T12297] sctp: [Deprecated]: syz.2.1562 (pid 12297) Use of int in maxseg socket option. [ 258.874585][T12297] Use struct sctp_assoc_value instead [ 259.740297][T12232] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 259.984168][T12316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1567'. [ 260.115384][T12313] bridge3: port 1(veth15) entered blocking state [ 260.137009][T12313] bridge3: port 1(veth15) entered disabled state [ 260.151672][T12313] veth15: entered allmulticast mode [ 260.169232][T12313] veth15: entered promiscuous mode [ 260.311232][T12338] netlink: 364 bytes leftover after parsing attributes in process `syz.4.1573'. [ 260.482563][T12345] syzkaller1: entered promiscuous mode [ 260.491108][T12345] syzkaller1: entered allmulticast mode [ 260.525693][T12349] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 260.555903][T12349] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 260.989880][T12372] x_tables: duplicate underflow at hook 2 [ 261.319812][T12389] netlink: 'syz.4.1589': attribute type 61 has an invalid length. [ 261.494145][T12396] netlink: 'syz.0.1591': attribute type 1 has an invalid length. [ 261.518151][T12399] __nla_validate_parse: 2 callbacks suppressed [ 261.518170][T12399] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1593'. [ 261.604711][T12405] sctp: [Deprecated]: syz.0.1591 (pid 12405) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.604711][T12405] Use struct sctp_sack_info instead [ 261.647921][T12396] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.749358][T12396] netlink: 'syz.0.1591': attribute type 6 has an invalid length. [ 261.778322][T12396] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1591'. [ 261.846032][T12404] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.1591'. [ 261.908830][T12414] team0: entered promiscuous mode [ 261.918011][T12414] syz_tun: entered promiscuous mode [ 261.936934][T12414] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 262.112589][T12415] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.498173][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1604'. [ 262.692988][T12449] x_tables: duplicate underflow at hook 1 [ 262.715984][T12449] x_tables: duplicate underflow at hook 1 [ 262.864698][T12457] netlink: 'syz.1.1609': attribute type 12 has an invalid length. [ 263.077528][T12459] syzkaller1: entered promiscuous mode [ 263.091942][T12459] syzkaller1: entered allmulticast mode [ 263.115165][T12472] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1611'. [ 263.150114][T12472] syz.4.1611 uses old SIOCAX25GETINFO [ 263.488799][T12484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1614'. [ 263.714961][T12510] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1620'. [ 263.828764][T12512] wg1 speed is unknown, defaulting to 1000 [ 263.853566][T12518] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1622'. [ 264.212344][T12534] netlink: 'syz.1.1626': attribute type 1 has an invalid length. [ 264.291832][T12534] bond6: entered promiscuous mode [ 264.297421][T12534] 8021q: adding VLAN 0 to HW filter on device bond6 [ 264.521130][T12487] infiniband !yz!: set down [ 264.533427][T12487] infiniband !yz!: added team_slave_0 [ 264.655526][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 264.692484][T12549] netlink: 'syz.4.1630': attribute type 3 has an invalid length. [ 264.730648][T12487] RDS/IB: !yz!: added [ 264.755191][T12487] smc: adding ib device !yz! with port count 1 [ 264.768131][T12487] smc: ib device !yz! port 1 has no pnetid [ 264.834273][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1631'. [ 265.534630][T12556] netlink: zone id is out of range [ 265.550035][T12556] netlink: zone id is out of range [ 265.562602][T12556] netlink: zone id is out of range [ 265.574839][T12556] netlink: zone id is out of range [ 265.587705][T12556] netlink: zone id is out of range [ 265.599359][T12556] netlink: zone id is out of range [ 265.610239][T12565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.616045][T12556] netlink: zone id is out of range [ 265.631847][T12565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.641604][T12556] netlink: zone id is out of range [ 265.786239][T12570] netlink: 'syz.1.1636': attribute type 4 has an invalid length. [ 265.955230][T12572] mac80211_hwsim hwsim8 ªªªªª;: renamed from wlan0 [ 266.676447][T12603] netlink: 'syz.2.1643': attribute type 1 has an invalid length. [ 266.759792][T12603] bond7: entered promiscuous mode [ 266.765578][T12603] bond7: entered allmulticast mode [ 266.771108][T12603] 8021q: adding VLAN 0 to HW filter on device bond7 [ 266.790250][T12606] erspan1: entered allmulticast mode [ 266.819391][T12606] bond7: (slave erspan1): making interface the new active one [ 266.827574][T12606] erspan1: entered promiscuous mode [ 266.836187][T12606] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 266.854761][T12607] bridge0: port 2(vlan3) entered blocking state [ 266.861648][T12607] bridge0: port 2(vlan3) entered disabled state [ 266.868196][T12607] vlan3: entered allmulticast mode [ 266.874480][T12607] bridge0: entered allmulticast mode [ 266.884640][T12607] vlan3: left allmulticast mode [ 266.901445][T12607] bridge0: left allmulticast mode [ 267.875302][T12638] __nla_validate_parse: 6 callbacks suppressed [ 267.875323][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 267.894659][T12560] wg1 speed is unknown, defaulting to 1000 [ 267.914891][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1655'. [ 268.006577][T12640] netlink: 'syz.3.1656': attribute type 58 has an invalid length. [ 268.165120][T12643] tipc: Can't bind to reserved service type 0 [ 268.189345][T12643] netlink: 'syz.3.1657': attribute type 3 has an invalid length. [ 268.199152][T12643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1657'. [ 268.815770][T12661] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 268.970399][T12671] netlink: 'syz.2.1661': attribute type 1 has an invalid length. [ 269.089872][T12661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 269.201437][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 269.322828][T12676] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1664'. [ 269.807594][T12682] syzkaller0: entered promiscuous mode [ 272.254569][T12687] wg1 speed is unknown, defaulting to 1000 [ 272.289649][T12706] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 272.311595][T12706] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 272.612789][T12718] sctp: [Deprecated]: syz.4.1672 (pid 12718) Use of int in max_burst socket option. [ 272.612789][T12718] Use struct sctp_assoc_value instead [ 272.880218][T12727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1676'. [ 272.906289][T12727] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1676'. [ 272.939056][T12726] netlink: 'syz.1.1676': attribute type 3 has an invalid length. [ 273.187237][T12739] net_ratelimit: 12 callbacks suppressed [ 273.187256][T12739] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.206983][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 273.283833][T12743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1681'. [ 273.311004][T12734] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 273.316969][T12743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1681'. [ 273.614702][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1684'. [ 273.630807][T12764] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1686'. [ 273.933062][ T29] audit: type=1800 audit(1776979109.218:4): pid=12775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1689" name=CB dev="tmpfs" ino=1680 res=0 errno=0 [ 274.075831][T12781] x_tables: duplicate underflow at hook 2 [ 274.267922][T12788] pim6reg1: entered promiscuous mode [ 274.289644][T12788] pim6reg1: entered allmulticast mode [ 274.441958][T12792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 274.795504][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1697'. [ 274.925929][T12815] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1698'. [ 274.946650][T12815] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1698'. [ 274.997676][T12819] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1699'. [ 275.044469][T12819] unsupported nlmsg_type 40 [ 275.226717][T12832] team0: entered promiscuous mode [ 275.239413][T12832] team_slave_0: entered promiscuous mode [ 275.258687][T12832] team_slave_1: entered promiscuous mode [ 275.335505][T12839] syzkaller1: entered promiscuous mode [ 275.346578][T12839] syzkaller1: entered allmulticast mode [ 275.628102][T12855] sctp: [Deprecated]: syz.4.1711 (pid 12855) Use of int in maxseg socket option. [ 275.628102][T12855] Use struct sctp_assoc_value instead [ 275.895484][T12866] syzkaller1: entered promiscuous mode [ 275.919662][T12866] syzkaller1: entered allmulticast mode [ 276.112690][T12884] netlink: 'syz.2.1718': attribute type 5 has an invalid length. [ 277.306041][T12961] netlink: 'syz.0.1738': attribute type 62 has an invalid length. [ 277.340555][T12963] nbd: must specify a device to reconfigure [ 277.619022][T12976] ipvlan0: entered promiscuous mode [ 277.635764][T12976] bridge0: port 3(ipvlan0) entered blocking state [ 277.651109][T12976] bridge0: port 3(ipvlan0) entered disabled state [ 277.667978][T12976] ipvlan0: entered allmulticast mode [ 277.681191][T12976] bridge0: entered allmulticast mode [ 277.701010][T12976] ipvlan0: left allmulticast mode [ 277.720941][T12976] bridge0: left allmulticast mode [ 277.937685][T12981] geneve0: entered promiscuous mode [ 277.991002][T12987] wg1 speed is unknown, defaulting to 1000 [ 278.120410][T12995] bond0: (slave bond_slave_1): Releasing backup interface [ 278.527809][T12998] wg1 speed is unknown, defaulting to 1000 [ 278.780923][T13014] __nla_validate_parse: 13 callbacks suppressed [ 278.780956][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1752'. [ 278.801775][T13014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1752'. [ 279.020976][T13009] wg1 speed is unknown, defaulting to 1000 [ 279.546156][T13029] syzkaller0: entered promiscuous mode [ 279.554272][T13029] syzkaller0: entered allmulticast mode [ 279.654371][T13016] wg1 speed is unknown, defaulting to 1000 [ 279.901701][T13042] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.1759'. [ 279.912731][T13042] netlink: Unknown conntrack attr (type=2304, max=9) [ 280.994661][T13050] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1761'. [ 281.004371][T13050] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1761'. [ 281.017766][T13048] wg1 speed is unknown, defaulting to 1000 [ 282.122185][T13076] netlink: 'syz.4.1764': attribute type 44 has an invalid length. [ 282.139120][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 282.995729][T13087] netlink: 'syz.1.1768': attribute type 2 has an invalid length. [ 283.068733][T13087] : entered promiscuous mode [ 283.091687][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 283.240764][T13092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1770'. [ 283.266489][T13092] ip6tnl0: entered promiscuous mode [ 283.498976][T13107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1774'. [ 283.766837][T13121] netlink: 'syz.3.1777': attribute type 1 has an invalid length. [ 283.966519][T13099] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.973916][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.003862][T13099] team0: left promiscuous mode [ 284.010043][T13099] team_slave_0: left promiscuous mode [ 284.018225][T13099] team_slave_1: left promiscuous mode [ 284.149338][T13099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.243218][T13099] macsec1: left promiscuous mode [ 284.268158][T13099] ip6erspan0: left promiscuous mode [ 284.273576][T13099] ip6erspan0: left allmulticast mode [ 284.362300][T13099] ipip0: left promiscuous mode [ 284.372257][T13099] bond2: left promiscuous mode [ 284.389238][T13099] geneve0: left promiscuous mode [ 284.422181][ T48] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.436289][ T48] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.463404][ T48] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.498102][ T48] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.535146][ T48] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.563226][ T48] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.579885][ T48] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 284.609799][ T48] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.654731][T13140] ip6tnl0: Caught tx_queue_len zero misconfig [ 284.684335][T13140] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 284.717071][T13147] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1452) ! [ 285.263337][T13180] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1791'. [ 285.274450][T13181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1791'. [ 285.290087][T13183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1791'. [ 285.322494][T13181] Bluetooth: MGMT ver 1.23 [ 285.350489][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1791'. [ 285.399863][T13186] syz_tun: entered allmulticast mode [ 285.409450][T13186] dvmrp1: left allmulticast mode [ 285.465869][T13189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1792'. [ 285.480253][T13188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1794'. [ 285.527003][T13184] syz_tun: left allmulticast mode [ 285.639849][T13195] sctp: [Deprecated]: syz.2.1795 (pid 13195) Use of int in max_burst socket option. [ 285.639849][T13195] Use struct sctp_assoc_value instead [ 285.707829][T13202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1797'. [ 285.856742][T13208] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.888591][T13208] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.910589][T13206] nbd: nbd0 already in use [ 285.929634][T13206] block nbd0: NBD_DISCONNECT [ 285.937719][T13206] block nbd0: Send disconnect failed -32 [ 285.944023][T13206] block nbd0: Send disconnect failed -32 [ 285.950624][T13206] block nbd0: shutting down sockets [ 286.004612][T13208] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.017258][T13208] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.102782][T13208] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.118447][T13208] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.224763][T13208] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.292161][T13208] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.344619][T13229] netlink: 'syz.0.1807': attribute type 8 has an invalid length. [ 286.537823][ T1114] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.562022][ T1114] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.602965][ T1315] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.611971][ T1315] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.647958][T13245] macvlan0: entered promiscuous mode [ 286.695418][ T1315] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.726464][ T1315] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.782611][ T1315] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.790912][ T1315] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.853997][T13253] wg1 speed is unknown, defaulting to 1000 [ 286.999912][T13267] tipc: Enabled bearer , priority 0 [ 287.021199][ T1315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.048771][ T1315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.338938][T13276] netlink: 'syz.4.1820': attribute type 1 has an invalid length. [ 287.356669][T13276] netlink: 'syz.4.1820': attribute type 2 has an invalid length. [ 287.379593][T13276] netlink: 'syz.4.1820': attribute type 1 has an invalid length. [ 287.413904][T13276] netlink: 'syz.4.1820': attribute type 3 has an invalid length. [ 288.145865][ T8093] tipc: Node number set to 3563456086 [ 288.162601][T13311] netlink: 'syz.0.1830': attribute type 21 has an invalid length. [ 288.358099][T13280] lec:lec_atm_close: lec0: Shut down! [ 288.417154][T13318] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 288.487399][T13318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 288.743459][T13326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1833'. [ 289.081624][T13335] wg1 speed is unknown, defaulting to 1000 [ 289.505597][T13356] syzkaller1: entered promiscuous mode [ 289.524328][T13356] syzkaller1: entered allmulticast mode [ 289.648812][T13365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1840'. [ 289.658785][T13365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.666105][T13365] IPv6: NLM_F_CREATE should be set when creating new route [ 289.673411][T13365] IPv6: NLM_F_CREATE should be set when creating new route [ 289.840747][T13366] syzkaller0: entered promiscuous mode [ 289.865364][T13366] syzkaller0: entered allmulticast mode [ 290.034619][T13375] tipc: Resetting bearer [ 290.104048][T13378] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 290.114191][ T8093] lec:lec_start_xmit: lec0:No lecd attached [ 290.138654][T13378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.346768][T13386] gtp1: entered promiscuous mode [ 290.363108][T13386] gtp1: entered allmulticast mode [ 290.384003][T13389] bond9: entered promiscuous mode [ 290.393122][T13389] bond9: entered allmulticast mode [ 290.495686][T13392] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 290.535944][T13392] bond5 (unregistering): Released all slaves [ 291.056780][T13421] __nla_validate_parse: 2 callbacks suppressed [ 291.056802][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1851'. [ 291.119993][T13422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1851'. [ 291.330953][T13437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1855'. [ 291.544414][T13446] xt_hashlimit: max too large, truncated to 1048576 [ 291.564871][T13446] xt_ecn: cannot match TCP bits for non-tcp packets [ 291.601558][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 291.766426][T13455] bond0: Caught tx_queue_len zero misconfig [ 292.419972][T13488] x_tables: duplicate underflow at hook 3 [ 292.440141][T13487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1867'. [ 292.452674][T13489] x_tables: duplicate underflow at hook 3 [ 292.755339][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 293.345957][T13530] bond7: option ad_user_port_key: invalid value (65535) [ 293.361579][T13530] bond7: option ad_user_port_key: allowed values 0 - 1023 [ 293.374404][T13530] bond7 (unregistering): Released all slaves [ 293.872454][T13567] vxcan2: entered allmulticast mode [ 295.441297][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5330 ms [ 295.450991][ C0] lec:lec_tx_timeout: lec0 [ 295.456278][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 296.583337][T13566] vxcan2: entered allmulticast mode [ 296.612352][T13568] ip6gretap0: entered promiscuous mode [ 297.055458][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1900'. [ 297.086784][T13590] wg1 speed is unknown, defaulting to 1000 [ 297.506516][T13624] x_tables: duplicate underflow at hook 2 [ 297.653740][T13627] IPv6: sit2: Disabled Multicast RS [ 297.758271][T13627] xt_TPROXY: Can be used only with -p tcp or -p udp [ 297.845323][T13637] pim6reg: entered allmulticast mode [ 297.853634][T13637] pim6reg: left allmulticast mode [ 298.107662][T13645] netlink: 'syz.4.1913': attribute type 10 has an invalid length. [ 298.138250][T13645] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1913'. [ 298.178433][T13648] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 298.216636][T13648] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1915'. [ 298.411195][T13654] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1917'. [ 298.447866][T13660] netlink: 'syz.3.1919': attribute type 15 has an invalid length. [ 298.464544][T13660] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1919'. [ 298.580847][T13663] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1920'. [ 298.621717][T13667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1922'. [ 298.638127][T13668] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1921'. [ 298.764306][T13672] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 298.815474][T13676] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1924'. [ 298.929655][T13680] netlink: 'syz.3.1926': attribute type 14 has an invalid length. [ 299.315931][T13691] SET target dimension over the limit! [ 299.389895][T13696] wg1 speed is unknown, defaulting to 1000 [ 300.714118][T13736] wg1 speed is unknown, defaulting to 1000 [ 300.955567][T13749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.966956][T13749] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.978882][T13749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 301.139799][T13758] xfrm1: entered allmulticast mode [ 301.201331][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 301.209417][ C0] lec:lec_tx_timeout: lec0 [ 301.215482][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 301.389388][T13764] lo: Caught tx_queue_len zero misconfig [ 301.420097][T13764] xt_hashlimit: size too large, truncated to 1048576 [ 301.554056][T13743] gre0 speed is unknown, defaulting to 1000 [ 301.597692][T13743] gre0 speed is unknown, defaulting to 1000 [ 301.616903][T13743] gre0 speed is unknown, defaulting to 1000 [ 302.337480][T13789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.789474][T13809] __nla_validate_parse: 4 callbacks suppressed [ 302.789493][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 302.852963][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 302.927882][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 303.039682][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 303.183827][T13809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 303.243573][T13743] infiniband syz1: set active [ 303.248405][ T8093] gre0 speed is unknown, defaulting to 1000 [ 303.273964][T13743] infiniband syz1: added gre0 [ 303.295474][T13743] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 303.308168][T13743] infiniband syz1: Couldn't open port 1 [ 303.334284][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 303.540512][T13743] RDS/IB: syz1: added [ 303.552318][T13743] smc: adding ib device syz1 with port count 1 [ 303.570383][T13743] smc: ib device syz1 port 1 has no pnetid [ 303.590790][ T8093] gre0 speed is unknown, defaulting to 1000 [ 303.615775][T13743] gre0 speed is unknown, defaulting to 1000 [ 303.749021][T13835] xt_hashlimit: size too large, truncated to 1048576 [ 303.768833][T13835] xt_hashlimit: max too large, truncated to 1048576 [ 304.305873][T13853] syzkaller0: entered promiscuous mode [ 304.323955][T13853] syzkaller0: entered allmulticast mode [ 304.384144][T13845] syzkaller0: mtu less than device minimum [ 304.509508][T13874] Unsupported ieee802154 address type: 0 [ 304.587636][T13877] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1968'. [ 306.293028][T13743] gre0 speed is unknown, defaulting to 1000 [ 306.689727][T13895] xt_TPROXY: Can be used only with -p tcp or -p udp [ 306.700458][T13895] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1972'. [ 306.725134][T13895] xfrm1: entered allmulticast mode [ 306.770144][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1974'. [ 306.807110][T13904] netlink: 924 bytes leftover after parsing attributes in process `syz.0.1975'. [ 306.961270][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 306.969380][ C0] lec:lec_tx_timeout: lec0 [ 306.974483][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 307.095270][T13743] gre0 speed is unknown, defaulting to 1000 [ 307.360758][T13930] netlink: 'syz.3.1981': attribute type 1 has an invalid length. [ 307.462702][T13931] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.617753][T13931] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.798965][T13931] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.040316][T13743] gre0 speed is unknown, defaulting to 1000 [ 308.100890][T13931] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.330101][ T76] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.354971][T13944] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 308.440545][ T1315] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.507445][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.590023][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.784650][T13743] gre0 speed is unknown, defaulting to 1000 [ 309.155340][T13966] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 309.388507][T13983] netlink: 'syz.2.1994': attribute type 2 has an invalid length. [ 309.422301][T13983] tipc: Cannot configure node identity twice [ 309.479596][T13986] bridge0: port 1(vlan2) entered blocking state [ 309.515491][T13986] bridge0: port 1(vlan2) entered disabled state [ 309.538778][T13986] vlan2: entered allmulticast mode [ 309.559455][T13986] bridge0: entered allmulticast mode [ 309.598863][T13986] vlan2: left allmulticast mode [ 309.619827][T13986] bridge0: left allmulticast mode [ 309.890349][T13997] sctp: [Deprecated]: syz.1.1997 (pid 13997) Use of int in max_burst socket option. [ 309.890349][T13997] Use struct sctp_assoc_value instead [ 309.916816][T13997] __nla_validate_parse: 5 callbacks suppressed [ 309.916836][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'. [ 310.032102][T13999] bond6: option lacp_active: invalid value (8) [ 310.051379][T13999] bond6 (unregistering): Released all slaves [ 310.467461][T14029] netlink: 'syz.2.2004': attribute type 1 has an invalid length. [ 310.508826][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2006'. [ 310.532833][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'. [ 310.633349][T14038] netlink: 'syz.3.2003': attribute type 10 has an invalid length. [ 310.695764][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.772590][T14038] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 310.885403][T14043] syzkaller0: entered promiscuous mode [ 310.910996][T14043] syzkaller0: entered allmulticast mode [ 311.766499][T14093] netlink: 'syz.1.2024': attribute type 1 has an invalid length. [ 311.874333][T14096] netlink: 'syz.3.2025': attribute type 2 has an invalid length. [ 311.892333][T14096] netlink: 'syz.3.2025': attribute type 11 has an invalid length. [ 311.909531][T14096] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2025'. [ 311.942833][T14096] netlink: 173036 bytes leftover after parsing attributes in process `syz.3.2025'. [ 311.974760][T14098] ip6gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 311.981409][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 311.992146][ C0] lec:lec_tx_timeout: lec0 [ 311.997712][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 312.563232][T14116] netlink: 'syz.2.2031': attribute type 3 has an invalid length. [ 312.910411][T14135] netlink: 'syz.1.2037': attribute type 1 has an invalid length. [ 312.939335][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2037'. [ 313.097343][T14146] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 313.109671][T14150] netlink: 'syz.1.2041': attribute type 1 has an invalid length. [ 313.370320][T14153] netlink: 'syz.3.2042': attribute type 8 has an invalid length. [ 313.650845][T14174] syzkaller1: entered promiscuous mode [ 313.674146][T14174] syzkaller1: entered allmulticast mode [ 313.746073][T14176] netlink: 996 bytes leftover after parsing attributes in process `syz.1.2047'. [ 313.857552][T14181] xt_CT: You must specify a L4 protocol and not use inversions on it [ 314.186420][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 314.225029][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2055'. [ 314.401049][T14212] syzkaller0: entered promiscuous mode [ 314.410242][T14212] syzkaller0: entered allmulticast mode [ 314.832996][T14236] gre0 speed is unknown, defaulting to 1000 [ 314.943357][T14245] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 315.130450][T14257] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2073'. [ 315.396498][T14267] tipc: Enabling of bearer rejected, failed to enable media [ 316.203497][T14288] netlink: 'syz.0.2083': attribute type 10 has an invalid length. [ 316.358052][T14288] team0: Port device dummy0 added [ 317.011595][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 317.019712][ C0] lec:lec_tx_timeout: lec0 [ 317.024389][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 318.196884][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 318.225691][T14358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 318.240815][T14343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2098'. [ 318.312941][T14343] bond7: entered promiscuous mode [ 318.318483][T14343] 8021q: adding VLAN 0 to HW filter on device bond7 [ 318.328936][T14364] netlink: 'syz.4.2103': attribute type 6 has an invalid length. [ 318.338965][T14364] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2103'. [ 318.361049][T14343] bond7 (unregistering): Released all slaves [ 318.377646][T14364] netlink: 'syz.4.2103': attribute type 6 has an invalid length. [ 318.398262][T14364] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2103'. [ 318.820297][T14372] netlink: 'syz.2.2106': attribute type 6 has an invalid length. [ 318.856601][T14372] netlink: 'syz.2.2106': attribute type 23 has an invalid length. [ 318.883464][T14372] IPv6: NLM_F_CREATE should be specified when creating new route [ 319.008352][T14386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2109'. [ 319.024249][T14386] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2109'. [ 319.060214][T14388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2109'. [ 319.266897][T14395] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 319.570883][T14405] ipvlan2: entered promiscuous mode [ 319.642725][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 319.691682][T14414] tipc: New replicast peer: 10.1.1.0 [ 319.723162][T14414] tipc: Enabled bearer , priority 10 [ 319.928869][T14425] syzkaller0: entered promiscuous mode [ 319.941756][T14425] syzkaller0: entered allmulticast mode [ 320.028863][T14430] netlink: 'syz.2.2121': attribute type 13 has an invalid length. [ 320.074212][T14430] netlink: 'syz.2.2121': attribute type 17 has an invalid length. [ 320.826866][T14441] netlink: 'syz.4.2124': attribute type 1 has an invalid length. [ 320.956656][T14434] __nla_validate_parse: 1 callbacks suppressed [ 320.956677][T14434] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2123'. [ 321.143217][T14430] team0: left promiscuous mode [ 321.148434][T14430] syz_tun: left promiscuous mode [ 321.163457][T14430] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.189111][T14430] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.223676][ T1114] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.289887][T14441] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 321.290288][ T5901] tipc: Node number set to 2716344501 [ 321.348016][ T1114] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.394078][ T1114] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.413535][ T1114] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.564635][T14465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 321.711846][T14476] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.032650][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 322.040734][ C0] lec:lec_tx_timeout: lec0 [ 322.046004][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 322.135277][T14503] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2139'. [ 322.182196][T14505] pimreg: entered allmulticast mode [ 322.378943][T14513] ipt_REJECT: ECHOREPLY no longer supported. [ 322.564525][T14520] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.780321][T14529] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.2149'. [ 322.800440][T14533] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2151'. [ 322.817064][T14534] netlink: 548 bytes leftover after parsing attributes in process `syz.1.2151'. [ 322.827510][T14529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2149'. [ 322.849743][T14533] netlink: 548 bytes leftover after parsing attributes in process `syz.1.2151'. [ 323.940950][T14585] netlink: 'syz.1.2166': attribute type 4 has an invalid length. [ 324.196197][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2171'. [ 324.359928][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2173'. [ 324.647024][T14617] atomic_op ffff888032d10198 conn xmit_atomic 0000000000000000 [ 324.667706][T14617] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 324.689958][T14617] netlink: 'syz.4.2177': attribute type 6 has an invalid length. [ 325.077122][T14629] syzkaller0: entered promiscuous mode [ 325.093504][T14629] syzkaller0: entered allmulticast mode [ 325.387068][T14639] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 325.401441][T14639] netlink: 'syz.1.2186': attribute type 1 has an invalid length. [ 325.436442][T14639] netlink: 'syz.1.2186': attribute type 8 has an invalid length. [ 325.681767][T14648] geneve2: entered allmulticast mode [ 327.037436][T14705] __nla_validate_parse: 10 callbacks suppressed [ 327.037457][T14705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2205'. [ 327.061580][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 327.069740][ C0] lec:lec_tx_timeout: lec0 [ 327.075032][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 327.104108][T14705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2205'. [ 327.158487][T14711] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2207'. [ 327.254937][T14712] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2207'. [ 327.422676][T14699] netlink: zone id is out of range [ 327.452566][T14699] netlink: zone id is out of range [ 327.465810][T14699] netlink: zone id is out of range [ 327.481933][T14699] netlink: zone id is out of range [ 327.502987][T14699] netlink: zone id is out of range [ 327.518370][T14699] netlink: zone id is out of range [ 327.530937][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 327.540359][T14699] netlink: zone id is out of range [ 327.565670][T14699] netlink: zone id is out of range [ 327.597282][T14699] netlink: zone id is out of range [ 327.631508][T14699] netlink: zone id is out of range [ 327.754866][T14735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'. [ 327.797037][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2213'. [ 328.064879][T14751] netlink: 'syz.1.2221': attribute type 1 has an invalid length. [ 328.119546][T14753] syzkaller0: entered promiscuous mode [ 328.149809][T14753] syzkaller0: entered allmulticast mode [ 328.347040][T14764] team0: Port device syz_tun added [ 328.428282][T14773] team0: Port device syz_tun removed [ 328.466293][T14773] bridge_slave_0: left allmulticast mode [ 328.499428][T14773] bridge_slave_0: left promiscuous mode [ 328.517231][T14773] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.585951][T14773] bridge_slave_1: left allmulticast mode [ 328.600650][T14773] bridge_slave_1: left promiscuous mode [ 328.621394][T14773] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.646085][T14773] bond0: (slave bond_slave_0): Releasing backup interface [ 328.659105][T14773] bond0: (slave bond_slave_1): Releasing backup interface [ 328.679128][T14773] team0: Port device team_slave_0 removed [ 328.692982][T14773] team0: Port device team_slave_1 removed [ 328.702074][T14773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.713393][T14785] netlink: 212064 bytes leftover after parsing attributes in process `syz.1.2225'. [ 328.758489][ T5901] gre0 speed is unknown, defaulting to 1000 [ 328.925846][T14792] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 329.609844][T14813] geneve3: entered promiscuous mode [ 329.713313][T14815] veth0_macvtap: Caught tx_queue_len zero misconfig [ 329.995235][T14821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2237'. [ 330.130778][T14825] netlink: 'syz.3.2239': attribute type 1 has an invalid length. [ 330.212338][T14828] netlink: 'syz.0.2240': attribute type 33 has an invalid length. [ 330.247794][T14825] bond9: entered promiscuous mode [ 330.256691][T14828] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2240'. [ 330.279149][T14825] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.338556][T14831] ipvlan0: entered allmulticast mode [ 330.356849][T14831] bond9: entered allmulticast mode [ 330.445555][T14834] ipvlan1: entered allmulticast mode [ 330.520356][T14825] bond9: (slave bridge4): making interface the new active one [ 330.559080][T14825] bridge4: entered promiscuous mode [ 330.576318][T14825] bridge4: entered allmulticast mode [ 330.593169][T14825] bond9: (slave bridge4): Enslaving as an active interface with an up link [ 330.667305][T14842] wg1 speed is unknown, defaulting to 1000 [ 330.904823][T14851] batman_adv: batadv0: Removing interface: virt_wifi0 [ 331.375673][T14860] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 331.438975][T14860] bond7: entered promiscuous mode [ 331.444974][T14860] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.568275][T14860] 8021q: adding VLAN 0 to HW filter on device bond7 [ 331.583316][T14860] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 331.595321][T14860] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 331.627399][T14860] bond7: (slave wireguard0): making interface the new active one [ 331.651368][T14860] wireguard0: entered promiscuous mode [ 331.661817][T14860] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 331.711402][T14842] gre0 speed is unknown, defaulting to 1000 [ 332.006786][T14886] netlink: 'syz.1.2255': attribute type 2 has an invalid length. [ 332.082492][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 332.090587][ C0] lec:lec_tx_timeout: lec0 [ 332.095555][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 332.327801][T14893] vlan2: entered allmulticast mode [ 332.349605][T14893] bond0: entered allmulticast mode [ 332.808817][T14903] __nla_validate_parse: 2 callbacks suppressed [ 332.808839][T14903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2260'. [ 332.903614][T14903] ipvlan3: entered allmulticast mode [ 332.908984][T14903] syz_tun: entered allmulticast mode [ 332.968499][T14904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2260'. [ 333.130112][T14904] ipvlan3: entered allmulticast mode [ 333.206009][T14895] lec:lec_atm_close: lec0: Shut down! [ 333.889249][T14925] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2265'. [ 334.140330][T14922] wg1 speed is unknown, defaulting to 1000 [ 334.271032][T14938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 334.494178][T14948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 334.589987][T14948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.597316][T14948] IPv6: NLM_F_CREATE should be set when creating new route [ 334.614522][T14948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.621815][T14948] IPv6: NLM_F_CREATE should be set when creating new route [ 334.781107][T14957] netlink: 'syz.0.2272': attribute type 1 has an invalid length. [ 334.906866][T14961] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2275'. [ 334.965603][T14965] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2277'. [ 335.383244][T14922] gre0 speed is unknown, defaulting to 1000 [ 335.539431][ T29] audit: type=1107 audit(1776979170.828:5): pid=14980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 336.452304][T15002] wg1 speed is unknown, defaulting to 1000 [ 337.357863][T15014] wg1 speed is unknown, defaulting to 1000 [ 337.379314][T15002] gre0 speed is unknown, defaulting to 1000 [ 337.619311][T15015] wg1 speed is unknown, defaulting to 1000 [ 337.968602][T15014] gre0 speed is unknown, defaulting to 1000 [ 338.535406][T15015] gre0 speed is unknown, defaulting to 1000 [ 338.854696][T14993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 338.961673][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 338.969777][ C0] lec:lec_tx_timeout: lec0 [ 338.976639][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 339.089604][T15029] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2293'. [ 339.109801][T15029] tunl0: Caught tx_queue_len zero misconfig [ 340.343168][T15063] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2302'. [ 340.521945][T15040] 0ªX¹¦À: left allmulticast mode [ 340.796310][T15040] gtp0: left promiscuous mode [ 340.805478][T15040] gtp0: left allmulticast mode [ 340.816265][T15040] bridge1: left allmulticast mode [ 340.824175][T15040] ip6gre1: left promiscuous mode [ 340.829575][T15040] ip6gre1: left allmulticast mode [ 340.845512][T15040] vlan0: left allmulticast mode [ 340.850486][T15040] bond3: left allmulticast mode [ 340.856048][T15040] geneve2: left allmulticast mode [ 340.865801][T15040] macvtap1: left promiscuous mode [ 340.875815][T15040] gtp1: left promiscuous mode [ 340.880567][T15040] gtp1: left allmulticast mode [ 340.892120][T15040] xfrm1: left allmulticast mode [ 340.901643][T15040] geneve3: left promiscuous mode [ 340.908875][T15040] vlan2: left allmulticast mode [ 340.914682][T15040] bond0: left allmulticast mode [ 340.986865][T15063] bond0 (unregistering): Released all slaves [ 341.032006][ T1114] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.055010][ T1114] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.117164][ T1114] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.143741][ T1114] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.416325][T15084] batman_adv: batadv0: Adding interface: vlan2 [ 341.424618][T15084] batman_adv: batadv0: The MTU of interface vlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.456248][T15084] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 341.675531][T15094] syzkaller0: entered promiscuous mode [ 341.734860][T15094] syzkaller0: entered allmulticast mode [ 342.088834][T15117] netlink: 'syz.4.2314': attribute type 5 has an invalid length. [ 342.326055][T15130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2318'. [ 342.368594][T15130] dvmrp0: left allmulticast mode [ 342.429432][T15140] xt_hashlimit: size too large, truncated to 1048576 [ 342.440150][T15132] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 342.689644][T15137] wg1 speed is unknown, defaulting to 1000 [ 343.265344][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2324'. [ 343.313316][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2324'. [ 343.343412][T15158] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2324'. [ 343.387032][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2327'. [ 343.417925][T15169] netem: change failed [ 343.624187][T15181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2329'. [ 343.819603][T15137] gre0 speed is unknown, defaulting to 1000 [ 343.920594][T15185] syzkaller1: entered allmulticast mode [ 343.991289][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 343.999411][ C0] lec:lec_tx_timeout: lec0 [ 344.004813][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 344.716651][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2340'. [ 345.052238][T15226] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 345.182989][T15227] macvlan3: entered promiscuous mode [ 345.191185][T15227] macvlan3: entered allmulticast mode [ 345.219154][T15227] bond10: entered promiscuous mode [ 345.229006][T15227] bridge7: entered promiscuous mode [ 345.242509][T15227] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 345.253177][T15227] bond10: left promiscuous mode [ 345.259963][T15227] bridge7: left promiscuous mode [ 345.472308][T15236] syzkaller0: entered promiscuous mode [ 345.503741][T15236] syzkaller0: entered allmulticast mode [ 345.616363][T15239] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2341'. [ 345.664779][T15236] wg1 speed is unknown, defaulting to 1000 [ 345.844606][T15260] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 346.237637][T15277] netlink: 'syz.1.2353': attribute type 1 has an invalid length. [ 346.284490][T15277] sctp: [Deprecated]: syz.1.2353 (pid 15277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.284490][T15277] Use struct sctp_sack_info instead [ 346.517280][T15285] netlink: 'syz.4.2356': attribute type 13 has an invalid length. [ 346.551431][T15285] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2356'. [ 346.680913][ T8090] gre0 speed is unknown, defaulting to 1000 [ 346.702225][ T8090] syz1: Port: 1 Link DOWN [ 346.726756][ T9848] gre0 speed is unknown, defaulting to 1000 [ 346.840157][T15296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2358'. [ 346.860634][T15296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2358'. [ 346.999632][T15236] gre0 speed is unknown, defaulting to 1000 [ 347.143313][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2364'. [ 347.422624][T15332] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 347.479722][T15325] wg1 speed is unknown, defaulting to 1000 [ 347.517446][T15329] netlink: 240 bytes leftover after parsing attributes in process `syz.1.2370'. [ 347.906454][T15348] netlink: 'syz.1.2373': attribute type 1 has an invalid length. [ 348.014306][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2373'. [ 348.063449][T15348] 8021q: adding VLAN 0 to HW filter on device bond8 [ 348.126493][T15347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.146774][T15347] bond8: (slave batadv0): making interface the new active one [ 348.165364][T15347] bond8: (slave batadv0): Enslaving as an active interface with an up link [ 348.216169][T15350] bond8 (unregistering): (slave batadv0): Releasing active interface [ 348.239460][T15350] bond8 (unregistering): Released all slaves [ 348.419633][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2377'. [ 348.563909][T15325] gre0 speed is unknown, defaulting to 1000 [ 348.567238][T15351] wg1 speed is unknown, defaulting to 1000 [ 348.690560][T15367] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2380'. [ 349.011246][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 349.019500][ C0] lec:lec_tx_timeout: lec0 [ 349.024951][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 349.107310][T15368] syzkaller0: entered promiscuous mode [ 349.113212][T15368] syzkaller0: entered allmulticast mode [ 349.403493][T15383] ip6t_srh: unknown srh invflags 4000 [ 349.643208][T15393] sctp: [Deprecated]: syz.1.2386 (pid 15393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.643208][T15393] Use struct sctp_sack_info instead [ 349.691163][T15394] sctp: [Deprecated]: syz.1.2386 (pid 15394) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.691163][T15394] Use struct sctp_sack_info instead [ 349.966230][T15405] xt_TCPMSS: Only works on TCP SYN packets [ 350.111573][T15411] netlink: 'syz.2.2391': attribute type 1 has an invalid length. [ 350.119449][T15411] netlink: 476 bytes leftover after parsing attributes in process `syz.2.2391'. [ 350.129620][T15411] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2391'. [ 350.472419][T15351] gre0 speed is unknown, defaulting to 1000 [ 350.963980][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 350.984218][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2400'. [ 351.186701][T15447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2402'. [ 351.290155][T15451] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:65535 [ 351.312758][T15451] netlink: 'syz.1.2403': attribute type 21 has an invalid length. [ 351.477470][T15451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2403'. [ 351.499123][T15453] dvmrp1: entered allmulticast mode [ 351.546511][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2405'. [ 351.581773][T15455] netlink: 'syz.0.2405': attribute type 21 has an invalid length. [ 351.851694][T15462] delete_channel: no stack [ 351.869607][T15462] netlink: 'syz.2.2404': attribute type 1 has an invalid length. [ 351.950360][T15463] net_ratelimit: 10 callbacks suppressed [ 351.950372][T15463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 352.243961][T15462] bond11: entered promiscuous mode [ 352.249647][T15462] 8021q: adding VLAN 0 to HW filter on device bond11 [ 352.426429][T15466] 8021q: adding VLAN 0 to HW filter on device bond12 [ 352.464492][T15466] bond11: (slave bond12): making interface the new active one [ 352.501668][T15466] bond12: entered promiscuous mode [ 352.513890][T15466] bond11: (slave bond12): Enslaving as an active interface with an up link [ 353.213974][T15495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2413'. [ 353.449887][T15501] wg1 speed is unknown, defaulting to 1000 [ 353.472710][T15503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.885408][T15527] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2421'. [ 354.031294][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 354.039412][ C0] lec:lec_tx_timeout: lec0 [ 354.044394][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 354.056218][T15535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 354.163243][T15540] vlan3: entered promiscuous mode [ 354.180614][T15540] erspan0: entered promiscuous mode [ 354.192595][T15540] vlan3: entered allmulticast mode [ 354.202828][T15540] erspan0: entered allmulticast mode [ 354.429181][T15548] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 354.579976][T15548] bond0: entered promiscuous mode [ 354.593509][T15548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.610903][T15551] vlan3: entered allmulticast mode [ 354.616144][T15551] bond0: entered allmulticast mode [ 354.657229][T15553] bond0: (slave bridge9): making interface the new active one [ 354.665105][T15553] bridge9: entered promiscuous mode [ 354.670510][T15553] bridge9: entered allmulticast mode [ 354.677707][T15553] bond0: (slave bridge9): Enslaving as an active interface with an up link [ 354.703074][T15501] gre0 speed is unknown, defaulting to 1000 [ 354.903737][T15569] netlink: 'syz.0.2429': attribute type 1 has an invalid length. [ 354.920551][T15569] netlink: 'syz.0.2429': attribute type 39 has an invalid length. [ 354.942338][T15559] syzkaller1: entered promiscuous mode [ 354.948018][T15559] syzkaller1: entered allmulticast mode [ 354.986415][T15561] netlink: 'syz.2.2430': attribute type 4 has an invalid length. [ 355.037416][T15564] netlink: 'syz.2.2430': attribute type 4 has an invalid length. [ 355.488905][T15585] __nla_validate_parse: 5 callbacks suppressed [ 355.488926][T15585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2434'. [ 355.527053][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2434'. [ 356.568872][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2440'. [ 357.239017][T15630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2444'. [ 357.646283][T15644] sctp: [Deprecated]: syz.2.2448 (pid 15644) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.646283][T15644] Use struct sctp_sack_info instead [ 357.679553][T15643] bond5: ARP target 9.0.0.0 is already present [ 357.689192][T15644] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2448'. [ 357.700931][T15643] bond5: option arp_ip_target: invalid value (9) [ 357.717629][T15643] bond5 (unregistering): Released all slaves [ 357.788596][T15646] tipc: Enabled bearer , priority 0 [ 357.949232][T15646] tipc: Disabling bearer [ 358.195310][T15680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2454'. [ 358.342282][T15686] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.392930][T15686] netlink: 'syz.2.2458': attribute type 1 has an invalid length. [ 358.509834][T15686] bond13: entered promiscuous mode [ 358.515355][T15686] bond13: entered allmulticast mode [ 358.527987][T15686] 8021q: adding VLAN 0 to HW filter on device bond13 [ 359.061252][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 359.069362][ C0] lec:lec_tx_timeout: lec0 [ 359.074141][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 359.087713][T15702] wg1 speed is unknown, defaulting to 1000 [ 359.183500][T15710] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 359.206894][T15708] xt_l2tp: invalid flags combination: 0 [ 359.252391][T15717] SET target dimension over the limit! [ 359.483429][T15726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2467'. [ 359.519779][T15726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2467'. [ 359.845430][T15742] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 360.027693][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 360.226880][T15702] gre0 speed is unknown, defaulting to 1000 [ 360.600683][T15752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2473'. [ 360.634561][T15752] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2473'. [ 360.778184][T15783] geneve3: entered promiscuous mode [ 360.796390][ T48] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 54575 - 0 [ 360.829367][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 54575 - 0 [ 360.848957][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 360.863409][ T48] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 54575 - 0 [ 360.895710][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 360.896365][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 54575 - 0 [ 360.931663][T15788] netlink: 'syz.0.2479': attribute type 1 has an invalid length. [ 361.071175][T15788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.236359][T15788] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.260755][T15788] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 361.275697][T15788] bond5: (slave vcan1): Error -95 calling set_mac_address [ 361.419475][T15808] nbd: couldn't find device at index 1 [ 361.472074][T15796] wg1 speed is unknown, defaulting to 1000 [ 362.335391][T15841] netlink: 'syz.1.2492': attribute type 4 has an invalid length. [ 362.916016][T15796] gre0 speed is unknown, defaulting to 1000 [ 363.450321][T15873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 363.731002][T15887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2502'. [ 363.884141][T15888] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2502'. [ 363.903407][T15895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2503'. [ 363.921949][T15888] bridge_slave_1: default FDB implementation only supports local addresses [ 364.081351][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 364.089439][ C0] lec:lec_tx_timeout: lec0 [ 364.094818][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 364.378157][T15910] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 364.467848][T15910] bond6: entered promiscuous mode [ 364.474680][T15910] 8021q: adding VLAN 0 to HW filter on device bond6 [ 364.517365][T15911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2506'. [ 365.165060][T15926] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2511'. [ 365.891129][T15944] __nla_validate_parse: 3 callbacks suppressed [ 365.891150][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 365.908884][T15934] wg1 speed is unknown, defaulting to 1000 [ 365.990540][T15944] tipc: Resetting bearer [ 366.045231][T15947] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 366.109655][T15948] netlink: 'syz.1.2517': attribute type 1 has an invalid length. [ 366.262969][T15953] gre0: Caught tx_queue_len zero misconfig [ 366.395567][T15957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 366.440372][T15960] netlink: 'syz.1.2521': attribute type 5 has an invalid length. [ 366.531823][T15960] netlink: 'syz.1.2521': attribute type 3 has an invalid length. [ 366.554209][T15960] netlink: 'syz.1.2521': attribute type 3 has an invalid length. [ 367.056656][T15934] gre0 speed is unknown, defaulting to 1000 [ 367.108400][T15972] wg1 speed is unknown, defaulting to 1000 [ 367.143489][T15976] openvswitch: netlink: Missing valid actions attribute. [ 367.152183][T15976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.172160][T15976] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 367.179302][T15976] syzkaller1: linktype set to 0 [ 367.362873][T15983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2530'. [ 367.515445][T15991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2532'. [ 367.748568][T15995] netlink: 'syz.1.2533': attribute type 1 has an invalid length. [ 367.958317][T16006] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2538'. [ 368.021955][T16006] syzkaller0: entered promiscuous mode [ 368.029445][T16010] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2539'. [ 368.039581][T16006] syzkaller0: entered allmulticast mode [ 368.208456][T15972] gre0 speed is unknown, defaulting to 1000 [ 368.433831][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2543'. [ 368.564126][T16031] netlink: 'syz.3.2545': attribute type 13 has an invalid length. [ 368.788130][T16040] netlink: 'syz.1.2546': attribute type 1 has an invalid length. [ 369.101537][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 369.109672][ C0] lec:lec_tx_timeout: lec0 [ 369.114578][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 369.136840][T16040] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 369.253323][T16052] sctp: [Deprecated]: syz.3.2550 (pid 16052) Use of int in maxseg socket option. [ 369.253323][T16052] Use struct sctp_assoc_value instead [ 369.367013][ T48] netdevsim netdevsim3 ªªªªª»: unset [1, 0] type 2 family 0 port 20004 - 0 [ 369.436135][ T48] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 369.459649][ T48] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 369.515151][ T48] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 369.590634][T16067] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2553'. [ 369.627229][T16062] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2552'. [ 369.704148][T16062] bridge_slave_1: left allmulticast mode [ 370.023499][T16089] netlink: 'syz.3.2555': attribute type 1 has an invalid length. [ 370.461009][T16089] bond10: entered promiscuous mode [ 370.484203][T16089] 8021q: adding VLAN 0 to HW filter on device bond10 [ 370.519260][T16101] tipc: Enabling of bearer rejected, already enabled [ 370.984089][T16137] netlink: 'syz.2.2562': attribute type 39 has an invalid length. [ 371.058843][T16126] syzkaller0: entered promiscuous mode [ 371.070880][T16126] syzkaller0: entered allmulticast mode [ 371.240302][T16137] team0: Port device syz_tun removed [ 371.409915][T16153] block nbd4: not configured, cannot reconfigure [ 371.459277][T16151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.470258][T16151] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.484731][T16151] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.743128][T16162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2568'. [ 373.508411][T16175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2571'. [ 373.528812][T16173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2571'. [ 373.799787][T16190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2574'. [ 373.809662][T16190] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2574'. [ 373.826247][T16186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2573'. [ 374.037186][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2575'. [ 374.121259][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 374.129418][ C0] lec:lec_tx_timeout: lec0 [ 374.134575][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 374.264235][T16202] wg1 speed is unknown, defaulting to 1000 [ 374.283887][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'. [ 374.647095][T16225] vlan1: entered allmulticast mode [ 374.656488][T16225] bond0: entered allmulticast mode [ 374.663238][T16231] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2581'. [ 374.708523][T16225] bond_slave_0: entered allmulticast mode [ 374.746054][T16225] batadv0: entered allmulticast mode [ 374.850383][T16231] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.892942][T16231] bond_slave_0: left allmulticast mode [ 374.925052][T16231] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 374.947473][T16231] batadv0: left allmulticast mode [ 374.962507][T16231] bond0 (unregistering): Released all slaves [ 375.011277][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.043155][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.066935][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.092571][T16245] syzkaller0: entered promiscuous mode [ 375.100653][T16245] syzkaller0: entered allmulticast mode [ 375.113616][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.141521][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2587'. [ 375.150721][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.165973][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.191184][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.220451][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.260019][T16247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.268863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.297400][T16202] gre0 speed is unknown, defaulting to 1000 [ 377.310078][T16265] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 377.559692][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2595'. [ 377.652727][T16281] wg1 speed is unknown, defaulting to 1000 [ 377.682982][T16280] batadv_slave_1: entered promiscuous mode [ 377.761884][T16279] batadv_slave_1: left promiscuous mode [ 377.856208][T16292] vlan4: entered allmulticast mode [ 377.900870][T16296] netlink: 'syz.1.2598': attribute type 5 has an invalid length. [ 378.231861][T16310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2600'. [ 378.257535][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2602'. [ 378.271318][T16313] netlink: 'syz.3.2601': attribute type 19 has an invalid length. [ 378.293203][T16313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2601'. [ 378.342779][ T173] netdevsim netdevsim3 ªªªªª»: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.369395][ T173] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.399431][ T173] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.433854][ T173] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.559029][T16325] netlink: 'syz.4.2605': attribute type 3 has an invalid length. [ 378.735933][T16334] netlink: 'syz.1.2606': attribute type 1 has an invalid length. [ 378.806393][T16334] 8021q: adding VLAN 0 to HW filter on device bond8 [ 378.989069][T16281] gre0 speed is unknown, defaulting to 1000 [ 379.690696][T16363] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2614'. [ 379.726627][T16369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2616'. [ 379.740491][T16367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.835689][T16367] lo: Caught tx_queue_len zero misconfig [ 379.887592][T16372] xt_cgroup: invalid path, errno=-2 [ 379.896919][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 379.921273][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5790 ms [ 379.929426][ C0] lec:lec_tx_timeout: lec0 [ 379.934690][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 379.955192][T16367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2615'. [ 380.354273][T16383] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2620'. [ 380.656630][T16397] bridge11: entered promiscuous mode [ 380.677616][T16397] bridge11: entered allmulticast mode [ 380.710810][T16397] team0: Port device bridge11 added [ 380.729937][T16398] bridge0: port 1(team0) entered blocking state [ 380.753410][T16398] bridge0: port 1(team0) entered disabled state [ 380.775518][T16398] team0: entered allmulticast mode [ 381.073045][T16413] vxcan3: entered promiscuous mode [ 381.097639][T16409] wg1 speed is unknown, defaulting to 1000 [ 381.523442][T16425] syzkaller1: entered promiscuous mode [ 381.537291][T16425] syzkaller1: entered allmulticast mode [ 381.584988][T16427] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2633'. [ 381.607554][T16424] pim6reg1: entered promiscuous mode [ 381.621695][T16424] pim6reg1: entered allmulticast mode [ 381.722403][T16427] net_ratelimit: 26 callbacks suppressed [ 381.722423][T16427] netlink: zone id is out of range [ 381.749317][T16433] syzkaller0: entered promiscuous mode [ 381.759394][T16427] netlink: zone id is out of range [ 381.765453][T16433] syzkaller0: entered allmulticast mode [ 381.777699][T16427] netlink: zone id is out of range [ 381.785811][T16427] netlink: zone id is out of range [ 381.794515][T16427] netlink: zone id is out of range [ 381.805162][T16427] netlink: zone id is out of range [ 381.823535][T16427] netlink: zone id is out of range [ 381.828950][T16427] netlink: zone id is out of range [ 381.836162][T16427] netlink: zone id is out of range [ 381.844284][T16427] netlink: zone id is out of range [ 381.858131][T16433] netlink: 'syz.3.2634': attribute type 3 has an invalid length. [ 382.437044][T16460] netlink: 'syz.3.2639': attribute type 1 has an invalid length. [ 382.563628][T16460] bond0: entered promiscuous mode [ 382.582880][T16460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.636565][T16465] bond0: (slave bridge7): making interface the new active one [ 382.644547][T16465] bridge7: entered promiscuous mode [ 382.651166][T16465] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 382.719808][T16409] gre0 speed is unknown, defaulting to 1000 [ 382.894494][T16485] netlink: 'syz.3.2645': attribute type 58 has an invalid length. [ 382.911474][T16485] __nla_validate_parse: 4 callbacks suppressed [ 382.911493][T16485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2645'. [ 383.100325][T16490] netlink: 280 bytes leftover after parsing attributes in process `syz.4.2647'. [ 383.630610][T16514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2653'. [ 383.800144][T16514] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.973517][T16519] 8021q: adding VLAN 0 to HW filter on device bond7 [ 383.981799][T16519] bond7: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 384.022625][T16519] bond7: (slave ip6tnl0): Error -95 calling set_mac_address [ 384.355785][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2658'. [ 384.524373][T16539] bond14: option primary_reselect: invalid value (133) [ 384.546128][T16539] bond14 (unregistering): Released all slaves [ 384.559357][T16547] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 384.705227][T16547] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2658'. [ 384.961267][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 384.969412][ C0] lec:lec_tx_timeout: lec0 [ 384.974407][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 384.997032][T16562] netlink: 'syz.3.2664': attribute type 21 has an invalid length. [ 385.008095][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2665'. [ 385.103990][T16568] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.2666'. [ 385.404687][T16579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2670'. [ 385.430156][T16582] netlink: 'syz.1.2672': attribute type 1 has an invalid length. [ 385.442442][T16586] netlink: 'syz.2.2674': attribute type 10 has an invalid length. [ 385.457634][T16590] netlink: 'syz.0.2670': attribute type 1 has an invalid length. [ 385.536928][T16586] team0: Port device bond0 added [ 385.597192][T16579] bond8: (slave bridge6): making interface the new active one [ 385.608866][T16579] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 385.629072][T16592] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2672'. [ 385.644994][T16582] wg1 speed is unknown, defaulting to 1000 [ 385.705091][T16592] veth17: entered allmulticast mode [ 385.718401][T16592] bond9: (slave veth17): Enslaving as a backup interface with a down link [ 385.954793][T16582] gre0 speed is unknown, defaulting to 1000 [ 389.981268][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 389.989303][ C0] lec:lec_tx_timeout: lec0 [ 389.994184][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 395.001611][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 395.009659][ C0] lec:lec_tx_timeout: lec0 [ 395.014291][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 400.021497][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 400.029634][ C0] lec:lec_tx_timeout: lec0 [ 400.034335][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 403.513602][T16610] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2678'. [ 403.549274][T16611] netlink: 'syz.4.2679': attribute type 10 has an invalid length. [ 403.567503][T16612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2678'. [ 403.603468][T16611] netlink: 'syz.4.2679': attribute type 10 has an invalid length. [ 403.646666][T16611] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2679'. [ 403.649187][T16621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2680'. [ 403.684574][T16612] ip6gre1: entered promiscuous mode [ 403.728763][T16612] ip6gre1: entered allmulticast mode [ 403.749935][T16611] batadv0: entered promiscuous mode [ 403.770006][T16611] batadv0: entered allmulticast mode [ 403.787262][T16611] bridge0: port 2(batadv0) entered blocking state [ 403.794232][T16611] bridge0: port 2(batadv0) entered disabled state [ 403.805900][T16611] team0: entered promiscuous mode [ 403.813486][ T1114] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.831833][ T1114] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.839727][T16627] batadv_slave_0: entered promiscuous mode [ 403.847479][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.873921][T16627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2681'. [ 403.902269][T16629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 403.917066][ T1114] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 403.927107][ T1114] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 403.958380][T16628] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 [ 404.008676][T16626] batadv_slave_0: left promiscuous mode [ 404.112352][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.174244][T16644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2686'. [ 404.194432][T16649] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 404.247273][T16649] 8021q: adding VLAN 0 to HW filter on device bond11 [ 404.256033][T16644] netlink: 'syz.4.2686': attribute type 5 has an invalid length. [ 404.264721][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2686'. [ 404.302857][T16656] bond11: (slave gretap1): making interface the new active one [ 404.312429][T16656] bond11: (slave gretap1): Enslaving as an active interface with an up link [ 404.318354][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 404.472561][T16663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2687'. [ 404.614252][T16668] x_tables: duplicate underflow at hook 3 [ 405.005798][T16664] bridge0: port 1(vlan1) entered blocking state [ 405.031616][T16664] bridge0: port 1(vlan1) entered disabled state [ 405.041733][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 405.049821][ C0] lec:lec_tx_timeout: lec0 [ 405.055421][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 405.065242][T16664] vlan1: entered allmulticast mode [ 405.101940][T16664] geneve0: entered allmulticast mode [ 405.170195][T16664] vlan1: entered promiscuous mode [ 405.187761][T16664] geneve0: entered promiscuous mode [ 405.232322][T16668] bridge0: port 3(vlan5) entered blocking state [ 405.239440][T16668] bridge0: port 3(vlan5) entered disabled state [ 405.246251][T16668] vlan5: entered allmulticast mode [ 405.252361][T16668] dummy0: entered allmulticast mode [ 405.262318][T16668] vlan5: entered promiscuous mode [ 405.267486][T16668] dummy0: entered promiscuous mode [ 405.308031][T16675] netlink: 'syz.1.2693': attribute type 11 has an invalid length. [ 405.343958][T16675] netlink: 'syz.1.2693': attribute type 4 has an invalid length. [ 405.374174][T16675] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.2693'. [ 405.572983][T16689] IPVS: set_ctl: invalid protocol: 33 172.30.1.1:20000 [ 405.632648][T16689] netlink: 'syz.0.2696': attribute type 1 has an invalid length. [ 405.651145][T16689] netlink: 'syz.0.2696': attribute type 2 has an invalid length. [ 405.678461][T16692] net_ratelimit: 68 callbacks suppressed [ 405.678487][T16692] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 405.682196][T16689] netlink: 'syz.0.2696': attribute type 1 has an invalid length. [ 405.741744][T16689] netlink: 'syz.0.2696': attribute type 3 has an invalid length. [ 405.973127][T16707] xt_l2tp: invalid flags combination: 8 [ 406.389866][T16725] wg1 speed is unknown, defaulting to 1000 [ 406.480803][T16737] netlink: 'syz.0.2710': attribute type 1 has an invalid length. [ 406.650951][T16743] bond9: (slave veth5): Enslaving as an active interface with a down link [ 406.807112][T16737] bond9: (slave veth7): Enslaving as an active interface with a down link [ 406.836423][T16743] 8021q: adding VLAN 0 to HW filter on device bond9 [ 407.165736][T16765] geneve1: Caught tx_queue_len zero misconfig [ 407.210966][T16765] team0: Port device dummy0 removed [ 407.478296][T16778] ip6gre2: entered promiscuous mode [ 407.494342][T16778] ip6gre2: entered allmulticast mode [ 407.608033][T16774] wg1 speed is unknown, defaulting to 1000 [ 408.241488][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 408.383567][T16725] gre0 speed is unknown, defaulting to 1000 [ 408.395669][T16808] team0: left allmulticast mode [ 408.405275][T16808] team0: left promiscuous mode [ 408.415586][T16808] bridge0: port 1(team0) entered disabled state [ 408.439658][T16808] bridge0: port 2(batadv0) entered disabled state [ 408.462339][T16808] vlan5: left promiscuous mode [ 408.471066][T16808] dummy0: left promiscuous mode [ 408.489777][T16808] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.525391][T16811] veth0_to_batadv: entered promiscuous mode [ 408.537440][T16811] veth0_to_batadv: entered allmulticast mode [ 408.750362][T16815] __nla_validate_parse: 16 callbacks suppressed [ 408.750383][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2732'. [ 408.787876][T16815] validate_nla: 6 callbacks suppressed [ 408.787894][T16815] netlink: 'syz.1.2732': attribute type 7 has an invalid length. [ 408.815736][T16815] netlink: 'syz.1.2732': attribute type 8 has an invalid length. [ 408.840290][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'. [ 409.170770][T16827] wg1 speed is unknown, defaulting to 1000 [ 409.196439][T16833] vlan3: entered promiscuous mode [ 409.203049][T16833] bond0: entered promiscuous mode [ 409.227789][T16774] gre0 speed is unknown, defaulting to 1000 [ 409.495714][T16835] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2738'. [ 409.511998][T16835] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2738'. [ 410.071293][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 410.079404][ C0] lec:lec_tx_timeout: lec0 [ 410.084417][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 410.243418][T16827] gre0 speed is unknown, defaulting to 1000 [ 410.358421][T16846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2742'. [ 410.431633][T16846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 410.829403][T16859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2746'. [ 410.890042][T16849] wg1 speed is unknown, defaulting to 1000 [ 410.896826][T16859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2746'. [ 410.908049][T16859] openvswitch: netlink: Flow actions attr not present in new flow. [ 410.917607][T16859] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2746'. [ 410.931030][T16859] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2746'. [ 411.700431][T16866] netlink: 'syz.2.2748': attribute type 2 has an invalid length. [ 411.716441][T16867] netlink: 'syz.2.2748': attribute type 2 has an invalid length. [ 411.838347][T16870] syzkaller0: entered promiscuous mode [ 411.844360][T16870] syzkaller0: entered allmulticast mode [ 412.418966][T16878] netlink: 'syz.2.2753': attribute type 1 has an invalid length. [ 412.548167][T16849] gre0 speed is unknown, defaulting to 1000 [ 412.799141][T16893] bond14: entered promiscuous mode [ 412.807243][T16893] 8021q: adding VLAN 0 to HW filter on device bond14 [ 412.815377][T16895] geneve1: Caught tx_queue_len zero misconfig [ 413.367300][T16904] tipc: Enabling of bearer rejected, already enabled [ 414.324108][T16933] netlink: 'syz.2.2768': attribute type 1 has an invalid length. [ 414.565934][T16939] netlink: 'syz.3.2770': attribute type 1 has an invalid length. [ 414.586568][T16939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.638670][T16939] __nla_validate_parse: 9 callbacks suppressed [ 414.638690][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2770'. [ 414.845052][T16947] netlink: 'syz.4.2773': attribute type 1 has an invalid length. [ 415.091349][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 415.099481][ C0] lec:lec_tx_timeout: lec0 [ 415.104717][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 415.226042][T16968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'. [ 415.275946][T16968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'. [ 415.389950][T16962] wg1 speed is unknown, defaulting to 1000 [ 415.992382][T16992] vlan3: entered allmulticast mode [ 415.997731][T16992] veth1_to_team: entered allmulticast mode [ 416.272755][T17004] wg1 speed is unknown, defaulting to 1000 [ 416.458886][T17012] x_tables: duplicate underflow at hook 1 [ 416.676589][T17022] netlink: 'syz.0.2792': attribute type 10 has an invalid length. [ 416.702429][T17022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2792'. [ 416.882500][T16962] gre0 speed is unknown, defaulting to 1000 [ 417.041432][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 417.364594][T17049] netlink: 'syz.0.2795': attribute type 1 has an invalid length. [ 417.600268][T17052] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2798'. [ 418.720447][T17004] gre0 speed is unknown, defaulting to 1000 [ 418.796648][T17081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2803'. [ 419.002566][T17083] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.055942][T17083] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.277132][T17083] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.305032][T17083] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.500502][T17083] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.533144][T17083] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.664796][T17083] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.701346][T17083] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.774392][T17102] syzkaller0: entered promiscuous mode [ 419.780105][T17102] syzkaller0: entered allmulticast mode [ 419.794717][T17102] TC_ACT_REPEAT abuse ? [ 420.111533][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 420.119671][ C0] lec:lec_tx_timeout: lec0 [ 420.124400][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 420.181537][ T1114] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.190573][ T1114] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.239538][ T1114] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.269150][ T1114] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.325544][ T1114] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.334559][ T1114] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.400344][ T6993] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.423938][ T6993] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.434749][T17122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2814'. [ 420.595884][T17127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 420.656793][T17131] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2814'. [ 420.965068][T17135] syzkaller1: entered promiscuous mode [ 420.972492][T17135] syzkaller1: entered allmulticast mode [ 420.989593][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'. [ 421.185447][T17146] netlink: 'syz.0.2821': attribute type 10 has an invalid length. [ 421.265875][T17146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.335779][T17146] team0: Port device bond0 added [ 421.421750][T17160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2824'. [ 421.440926][T17160] netlink: 'syz.2.2824': attribute type 3 has an invalid length. [ 421.472893][T17160] xt_hashlimit: size too large, truncated to 1048576 [ 421.527580][T17167] –: renamed from dummy0 (while UP) [ 421.798520][T17176] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2827'. [ 422.035996][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2829'. [ 422.201531][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'. [ 422.400073][T17208] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 422.423182][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'. [ 422.546339][T17207] wg1 speed is unknown, defaulting to 1000 [ 422.874574][T17225] pim6reg: entered allmulticast mode [ 422.953605][T17229] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2840'. [ 423.382317][T17240] netlink: 'syz.4.2843': attribute type 1 has an invalid length. [ 423.458958][T17240] bond7: entered promiscuous mode [ 423.470554][T17240] bond7: entered allmulticast mode [ 423.483121][T17240] 8021q: adding VLAN 0 to HW filter on device bond7 [ 423.497681][T17207] gre0 speed is unknown, defaulting to 1000 [ 423.891697][T17261] netlink: 'syz.0.2847': attribute type 3 has an invalid length. [ 423.929327][T17252] wg1 speed is unknown, defaulting to 1000 [ 423.936861][T17261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2847'. [ 423.991430][T17267] tc_dump_action: action bad kind [ 424.762825][T17302] netlink: 'syz.2.2856': attribute type 2 has an invalid length. [ 424.844875][T17294] wg1 speed is unknown, defaulting to 1000 [ 424.970923][T17304] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 425.131291][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 425.139407][ C0] lec:lec_tx_timeout: lec0 [ 425.144506][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 425.529514][T17330] netlink: 'syz.2.2863': attribute type 22 has an invalid length. [ 425.537632][T17330] bond0: option ad_select: unable to set because the bond device is up [ 425.776428][T17252] gre0 speed is unknown, defaulting to 1000 [ 425.842049][T17339] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 426.141358][T17333] wg1 speed is unknown, defaulting to 1000 [ 426.306617][T17345] __nla_validate_parse: 2 callbacks suppressed [ 426.306637][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2868'. [ 426.855257][T17294] gre0 speed is unknown, defaulting to 1000 [ 427.062222][T17348] macsec0: entered promiscuous mode [ 427.077569][T17348] macsec0: left promiscuous mode [ 427.336880][T17333] gre0 speed is unknown, defaulting to 1000 [ 427.512088][T17352] syzkaller0: entered promiscuous mode [ 427.532356][T17352] syzkaller0: entered allmulticast mode [ 427.645531][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 427.658424][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 427.671537][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 427.684943][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 427.695070][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 428.180054][ T1114] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.202668][ T1114] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.494641][T17355] wg1 speed is unknown, defaulting to 1000 [ 428.551416][ T1114] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.565109][ T1114] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.777394][ T1114] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.787888][ T1114] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.937522][ T1114] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 428.961287][ T1114] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.583804][ T1114] macvlan2: left allmulticast mode [ 429.590425][ T1114] macvlan2: left promiscuous mode [ 429.598459][ T1114] bridge0: port 1(macvlan2) entered disabled state [ 429.656047][ T1114] dvmrp0: left allmulticast mode [ 429.661914][ T1114] dvmrp1: left allmulticast mode [ 429.667021][ T1114] dvmrp6: left allmulticast mode [ 429.761502][ T5827] Bluetooth: hci5: command tx timeout [ 430.539841][ T1114] bond0 (unregistering): Released all slaves [ 430.555664][ T1114] bond1 (unregistering): Released all slaves [ 430.570880][ T1114] bond2 (unregistering): Released all slaves [ 430.590026][ T1114] bond3 (unregistering): Released all slaves [ 430.606254][ T1114] team0: Port device bond4 removed [ 430.613547][ T1114] bond4 (unregistering): Released all slaves [ 430.633389][ T1114] bond5 (unregistering): Released all slaves [ 430.650266][ T1114] bond6 (unregistering): Released all slaves [ 430.670379][ T1114] bond7 (unregistering): (slave wireguard0): Releasing backup interface [ 430.679957][ T1114] wireguard0: left promiscuous mode [ 430.688785][ T1114] bond7 (unregistering): Released all slaves [ 430.705073][ T1114] bond8 (unregistering): Released all slaves [ 430.721668][ T1114] bond9 (unregistering): (slave veth17): Releasing backup interface [ 430.732230][ T1114] bond9 (unregistering): Released all slaves [ 430.749986][T17376] tipc: Enabling of bearer rejected, already enabled [ 430.963799][ T1114] úÄì,°¤™u: left promiscuous mode [ 431.130368][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5980 ms [ 431.138496][ C0] lec:lec_tx_timeout: lec0 [ 431.143884][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 431.240682][ T1114] : left promiscuous mode [ 431.383574][ T1114] tipc: Disabling bearer [ 431.439578][ T1114] tipc: Left network mode [ 431.807844][T17355] gre0 speed is unknown, defaulting to 1000 [ 431.857715][ T5827] Bluetooth: hci5: command tx timeout [ 432.198001][T17428] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 432.290043][T17432] netlink: 'syz.0.2887': attribute type 58 has an invalid length. [ 432.318250][T17432] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2887'. [ 432.533830][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1 [ 432.697259][T17440] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 433.033813][T17454] x_tables: ip_tables: osf match: only valid for protocol 6 [ 433.921712][ T5827] Bluetooth: hci5: command tx timeout [ 434.195171][T17477] wg1 speed is unknown, defaulting to 1000 [ 434.645086][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2 [ 434.752819][T17355] chnl_net:caif_netlink_parms(): no params data found [ 434.961414][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 435.631094][T17355] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.659522][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.677556][T17355] bridge_slave_0: entered allmulticast mode [ 435.709594][T17355] bridge_slave_0: entered promiscuous mode [ 435.734539][T17355] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.753134][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.767804][T17355] bridge_slave_1: entered allmulticast mode [ 435.798258][T17355] bridge_slave_1: entered promiscuous mode [ 436.001527][ T5827] Bluetooth: hci5: command tx timeout [ 436.042377][ T1114] hsr_slave_0: left promiscuous mode [ 436.093135][ T1114] hsr_slave_1: left promiscuous mode [ 436.964181][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms [ 436.972320][ C0] lec:lec_tx_timeout: lec0 [ 436.977396][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 436.992495][T17564] xt_ipcomp: unknown flags 1D [ 437.207411][T17566] netlink: 'syz.4.2908': attribute type 13 has an invalid length. [ 437.238492][T17566] netlink: 'syz.4.2908': attribute type 17 has an invalid length. [ 437.590962][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3 [ 437.603661][T17477] gre0 speed is unknown, defaulting to 1000 [ 437.658593][T17566] batman_adv: batadv0: Interface activated: vlan2 [ 437.772978][T17566] bridge0: entered promiscuous mode [ 437.780120][T17566] vlan5: entered promiscuous mode [ 437.785318][T17566] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:609 [ 437.794684][T17566] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 17566, name: syz.4.2908 [ 437.803876][T17566] preempt_count: 201, expected: 0 [ 437.808939][T17566] RCU nest depth: 0, expected: 0 [ 437.813959][T17566] 2 locks held by syz.4.2908/17566: [ 437.819202][T17566] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 437.828386][T17566] #1: ffff888031700370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_set_rx_mode+0x65/0x2d0 [ 437.839175][T17566] Preemption disabled at: [ 437.839189][T17566] [] dev_set_rx_mode+0x54/0x2d0 [ 437.850077][T17566] CPU: 1 UID: 0 PID: 17566 Comm: syz.4.2908 Not tainted syzkaller #0 PREEMPT(full) [ 437.850110][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.850132][T17566] Call Trace: [ 437.850142][T17566] [ 437.850151][T17566] dump_stack_lvl+0xe8/0x150 [ 437.850187][T17566] __might_resched+0x378/0x4d0 [ 437.850220][T17566] ? dev_set_rx_mode+0x54/0x2d0 [ 437.850253][T17566] __mutex_lock+0x11c/0x1550 [ 437.850289][T17566] ? __pfx__printk+0x10/0x10 [ 437.850312][T17566] ? vprintk_emit+0x4eb/0x560 [ 437.850346][T17566] ? dev_set_promiscuity+0x10e/0x260 [ 437.850377][T17566] ? __netdev_printk+0x36f/0x480 [ 437.850404][T17566] ? __pfx___mutex_lock+0x10/0x10 [ 437.850432][T17566] ? netdev_info+0x11e/0x180 [ 437.850462][T17566] ? __pfx_netdev_info+0x10/0x10 [ 437.850494][T17566] dev_set_promiscuity+0x10e/0x260 [ 437.850530][T17566] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 437.850563][T17566] __dev_set_promiscuity+0x515/0x710 [ 437.850598][T17566] ? netdev_info+0x11e/0x180 [ 437.850625][T17566] netif_set_promiscuity+0x50/0xe0 [ 437.850661][T17566] dev_set_promiscuity+0x126/0x260 [ 437.850698][T17566] br_manage_promisc+0x180/0x560 [ 437.850738][T17566] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 437.850764][T17566] __dev_set_promiscuity+0x515/0x710 [ 437.850805][T17566] dev_set_rx_mode+0x1c9/0x2d0 [ 437.850841][T17566] __dev_open+0x672/0x830 [ 437.850874][T17566] ? __pfx___dev_open+0x10/0x10 [ 437.850899][T17566] ? __dev_change_flags+0x1b0/0x690 [ 437.850933][T17566] ? __local_bh_enable_ip+0xd0/0x130 [ 437.850969][T17566] __dev_change_flags+0x1f7/0x690 [ 437.851008][T17566] ? __pfx___dev_change_flags+0x10/0x10 [ 437.851037][T17566] ? netif_state_change+0x297/0x3a0 [ 437.851068][T17566] ? __pfx_netif_state_change+0x10/0x10 [ 437.851115][T17566] netif_change_flags+0x88/0x1a0 [ 437.851155][T17566] do_setlink+0xf82/0x4590 [ 437.851209][T17566] ? __pfx_do_setlink+0x10/0x10 [ 437.851264][T17566] ? do_raw_spin_lock+0x12b/0x2f0 [ 437.851309][T17566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 437.851335][T17566] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.851365][T17566] ? __mutex_lock+0xef6/0x1550 [ 437.851392][T17566] ? __pfx___nla_validate_parse+0x10/0x10 [ 437.851422][T17566] ? __mutex_lock+0x606/0x1550 [ 437.851453][T17566] ? rtnl_newlink+0x883/0x1bb0 [ 437.851484][T17566] ? __pfx___mutex_lock+0x10/0x10 [ 437.851524][T17566] ? ns_capable+0x89/0xe0 [ 437.851561][T17566] rtnl_newlink+0x14ca/0x1bb0 [ 437.851604][T17566] ? __pfx_rtnl_newlink+0x10/0x10 [ 437.851640][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 437.851673][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 437.851712][T17566] ? unwind_next_frame+0xa6/0x2550 [ 437.851742][T17566] ? unwind_next_frame+0xa6/0x2550 [ 437.851765][T17566] ? is_bpf_text_address+0x26/0x2b0 [ 437.851806][T17566] ? is_bpf_text_address+0x26/0x2b0 [ 437.851839][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 437.851871][T17566] ? kernel_text_address+0xa5/0xe0 [ 437.851896][T17566] ? __kernel_text_address+0xd/0x30 [ 437.851920][T17566] ? unwind_get_return_address+0x4d/0x90 [ 437.851940][T17566] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 437.851965][T17566] ? arch_stack_walk+0xfb/0x150 [ 437.851998][T17566] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 437.852044][T17566] ? __pfx_rtnl_newlink+0x10/0x10 [ 437.852073][T17566] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 437.852107][T17566] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 437.852140][T17566] ? netlink_sendmsg+0x5d4/0xb40 [ 437.852173][T17566] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 437.852201][T17566] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.852231][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 437.852274][T17566] netlink_rcv_skb+0x232/0x4b0 [ 437.852311][T17566] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 437.852343][T17566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.852390][T17566] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.852422][T17566] ? netlink_deliver_tap+0x2e/0x1b0 [ 437.852460][T17566] netlink_unicast+0x75c/0x8e0 [ 437.852501][T17566] netlink_sendmsg+0x813/0xb40 [ 437.852545][T17566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.852580][T17566] ? aa_sock_msg_perm+0xf1/0x1b0 [ 437.852613][T17566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.852650][T17566] ____sys_sendmsg+0x972/0x9f0 [ 437.852693][T17566] ? __might_fault+0xaf/0x130 [ 437.852730][T17566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.852774][T17566] ? import_iovec+0x73/0xa0 [ 437.852801][T17566] ___sys_sendmsg+0x2a5/0x360 [ 437.852833][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 437.852866][T17566] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.852907][T17566] ? futex_wake+0x4ac/0x580 [ 437.852959][T17566] ? __fget_files+0x2a/0x420 [ 437.852986][T17566] ? __fget_files+0x3a0/0x420 [ 437.853031][T17566] __x64_sys_sendmsg+0x1bd/0x2a0 [ 437.853068][T17566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.853119][T17566] ? rcu_is_watching+0x15/0xb0 [ 437.853162][T17566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.853185][T17566] do_syscall_64+0x15f/0xf80 [ 437.853211][T17566] ? trace_irq_disable+0x3b/0x140 [ 437.853240][T17566] ? clear_bhb_loop+0x40/0x90 [ 437.853271][T17566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.853301][T17566] RIP: 0033:0x7f38ee79c819 [ 437.853322][T17566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.853342][T17566] RSP: 002b:00007f38ef633028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.853367][T17566] RAX: ffffffffffffffda RBX: 00007f38eea15fa0 RCX: 00007f38ee79c819 [ 437.853382][T17566] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 437.853396][T17566] RBP: 00007f38ee832c91 R08: 0000000000000000 R09: 0000000000000000 [ 437.853409][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.853422][T17566] R13: 00007f38eea16038 R14: 00007f38eea15fa0 R15: 00007fffe187e548 [ 437.853459][T17566] [ 438.417185][T17566] [ 438.419571][T17566] ============================= [ 438.424443][T17566] [ BUG: Invalid wait context ] [ 438.429320][T17566] syzkaller #0 Tainted: G W [ 438.435322][T17566] ----------------------------- [ 438.440185][T17566] syz.4.2908/17566 is trying to lock: [ 438.445580][T17566] ffff88805b34ed88 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: dev_set_promiscuity+0x10e/0x260 [ 438.455995][T17566] other info that might help us debug this: [ 438.461903][T17566] context-{5:5} [ 438.465424][T17566] 2 locks held by syz.4.2908/17566: [ 438.470653][T17566] #0: ffffffff8fdceac0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 438.479787][T17566] #1: ffff888031700370 (&dev_addr_list_lock_key#7/2){+...}-{3:3}, at: dev_set_rx_mode+0x65/0x2d0 [ 438.490471][T17566] stack backtrace: [ 438.494219][T17566] CPU: 1 UID: 0 PID: 17566 Comm: syz.4.2908 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.494250][T17566] Tainted: [W]=WARN [ 438.494258][T17566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 438.494272][T17566] Call Trace: [ 438.494280][T17566] [ 438.494288][T17566] dump_stack_lvl+0xe8/0x150 [ 438.494322][T17566] __lock_acquire+0xec1/0x2cf0 [ 438.494353][T17566] ? lockdep_hardirqs_on+0x7a/0x110 [ 438.494379][T17566] ? irqentry_exit+0x218/0x730 [ 438.494404][T17566] ? trace_irq_disable+0x3b/0x140 [ 438.494434][T17566] ? dev_set_promiscuity+0x10e/0x260 [ 438.494464][T17566] lock_acquire+0x106/0x350 [ 438.494489][T17566] ? dev_set_promiscuity+0x10e/0x260 [ 438.494523][T17566] ? __might_resched+0x378/0x4d0 [ 438.494556][T17566] __mutex_lock+0x1a3/0x1550 [ 438.494582][T17566] ? dev_set_promiscuity+0x10e/0x260 [ 438.494615][T17566] ? __pfx__printk+0x10/0x10 [ 438.494636][T17566] ? vprintk_emit+0x4eb/0x560 [ 438.494668][T17566] ? dev_set_promiscuity+0x10e/0x260 [ 438.494700][T17566] ? __pfx___mutex_lock+0x10/0x10 [ 438.494727][T17566] ? netdev_info+0x11e/0x180 [ 438.494750][T17566] ? __pfx_netdev_info+0x10/0x10 [ 438.494776][T17566] dev_set_promiscuity+0x10e/0x260 [ 438.494808][T17566] ? __pfx_vlan_dev_change_rx_flags+0x10/0x10 [ 438.494837][T17566] __dev_set_promiscuity+0x515/0x710 [ 438.494869][T17566] ? netdev_info+0x11e/0x180 [ 438.494893][T17566] netif_set_promiscuity+0x50/0xe0 [ 438.494924][T17566] dev_set_promiscuity+0x126/0x260 [ 438.494957][T17566] br_manage_promisc+0x180/0x560 [ 438.494993][T17566] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 438.495017][T17566] __dev_set_promiscuity+0x515/0x710 [ 438.495058][T17566] dev_set_rx_mode+0x1c9/0x2d0 [ 438.495090][T17566] __dev_open+0x672/0x830 [ 438.495119][T17566] ? __pfx___dev_open+0x10/0x10 [ 438.495143][T17566] ? __dev_change_flags+0x1b0/0x690 [ 438.495175][T17566] ? __local_bh_enable_ip+0xd0/0x130 [ 438.495207][T17566] __dev_change_flags+0x1f7/0x690 [ 438.495241][T17566] ? __pfx___dev_change_flags+0x10/0x10 [ 438.495270][T17566] ? netif_state_change+0x297/0x3a0 [ 438.495297][T17566] ? __pfx_netif_state_change+0x10/0x10 [ 438.495327][T17566] netif_change_flags+0x88/0x1a0 [ 438.495361][T17566] do_setlink+0xf82/0x4590 [ 438.495400][T17566] ? __pfx_do_setlink+0x10/0x10 [ 438.495456][T17566] ? do_raw_spin_lock+0x12b/0x2f0 [ 438.495487][T17566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 438.495510][T17566] ? lockdep_hardirqs_on+0x7a/0x110 [ 438.495534][T17566] ? __mutex_lock+0xef6/0x1550 [ 438.495559][T17566] ? __pfx___nla_validate_parse+0x10/0x10 [ 438.495583][T17566] ? __mutex_lock+0x606/0x1550 [ 438.495610][T17566] ? rtnl_newlink+0x883/0x1bb0 [ 438.495636][T17566] ? __pfx___mutex_lock+0x10/0x10 [ 438.495668][T17566] ? ns_capable+0x89/0xe0 [ 438.495698][T17566] rtnl_newlink+0x14ca/0x1bb0 [ 438.495731][T17566] ? __pfx_rtnl_newlink+0x10/0x10 [ 438.495761][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 438.495788][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 438.495819][T17566] ? unwind_next_frame+0xa6/0x2550 [ 438.495842][T17566] ? unwind_next_frame+0xa6/0x2550 [ 438.495862][T17566] ? is_bpf_text_address+0x26/0x2b0 [ 438.495893][T17566] ? is_bpf_text_address+0x26/0x2b0 [ 438.495920][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 438.495948][T17566] ? kernel_text_address+0xa5/0xe0 [ 438.495971][T17566] ? __kernel_text_address+0xd/0x30 [ 438.495994][T17566] ? unwind_get_return_address+0x4d/0x90 [ 438.496012][T17566] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 438.496035][T17566] ? arch_stack_walk+0xfb/0x150 [ 438.496065][T17566] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 438.496100][T17566] ? __pfx_rtnl_newlink+0x10/0x10 [ 438.496126][T17566] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 438.496152][T17566] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 438.496182][T17566] ? netlink_sendmsg+0x5d4/0xb40 [ 438.496222][T17566] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 438.496265][T17566] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.496293][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 438.496326][T17566] netlink_rcv_skb+0x232/0x4b0 [ 438.496355][T17566] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 438.496382][T17566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 438.496418][T17566] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.496446][T17566] ? netlink_deliver_tap+0x2e/0x1b0 [ 438.496478][T17566] netlink_unicast+0x75c/0x8e0 [ 438.496509][T17566] netlink_sendmsg+0x813/0xb40 [ 438.496544][T17566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.496575][T17566] ? aa_sock_msg_perm+0xf1/0x1b0 [ 438.496603][T17566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.496636][T17566] ____sys_sendmsg+0x972/0x9f0 [ 438.496667][T17566] ? __might_fault+0xaf/0x130 [ 438.496698][T17566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.496733][T17566] ? import_iovec+0x73/0xa0 [ 438.496756][T17566] ___sys_sendmsg+0x2a5/0x360 [ 438.496785][T17566] ? __lock_acquire+0x6b5/0x2cf0 [ 438.496813][T17566] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.496848][T17566] ? futex_wake+0x4ac/0x580 [ 438.496882][T17566] ? __fget_files+0x2a/0x420 [ 438.496907][T17566] ? __fget_files+0x3a0/0x420 [ 438.496939][T17566] __x64_sys_sendmsg+0x1bd/0x2a0 [ 438.496971][T17566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.497007][T17566] ? rcu_is_watching+0x15/0xb0 [ 438.497041][T17566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.497088][T17566] do_syscall_64+0x15f/0xf80 [ 438.497113][T17566] ? trace_irq_disable+0x3b/0x140 [ 438.497134][T17566] ? clear_bhb_loop+0x40/0x90 [ 438.497159][T17566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.497180][T17566] RIP: 0033:0x7f38ee79c819 [ 438.497199][T17566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.497218][T17566] RSP: 002b:00007f38ef633028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.497240][T17566] RAX: ffffffffffffffda RBX: 00007f38eea15fa0 RCX: 00007f38ee79c819 [ 438.497256][T17566] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 438.497270][T17566] RBP: 00007f38ee832c91 R08: 0000000000000000 R09: 0000000000000000 [ 438.497283][T17566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.497297][T17566] R13: 00007f38eea16038 R14: 00007f38eea15fa0 R15: 00007fffe187e548 [ 438.497323][T17566] [ 439.094200][T17566] dummy0: entered promiscuous mode [ 439.126912][T17566] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.140108][T17566] bridge0: port 3(vlan5) entered blocking state [ 439.146552][T17566] bridge0: port 3(vlan5) entered listening state [ 439.153967][ T3467] smc: removing ib device syz0 [ 439.176252][T17566] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 439.195299][T17566] caif:caif_disconnect_client(): nothing to disconnect [ 439.210347][T17566] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 439.224974][T17566] chnl_net:chnl_net_open(): state disconnected [ 439.238190][T17566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 439.284743][T17355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.375351][ T8090] gre0 speed is unknown, defaulting to 1000 [ 439.381362][ T8090] syz1: Port: 1 Link ACTIVE [ 439.385930][ T8090] gre0 speed is unknown, defaulting to 1000 [ 439.455225][T17355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.731133][T17355] team0: Port device team_slave_0 added [ 439.776169][T17355] team0: Port device team_slave_1 added [ 439.884261][T17355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.891575][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.918456][T17355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.938213][T17355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.945554][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.972576][T17355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.072179][T17355] hsr_slave_0: entered promiscuous mode [ 440.089211][T17355] hsr_slave_1: entered promiscuous mode [ 440.111802][T17355] debugfs: 'hsr0' already exists in 'hsr' [ 440.125863][T17355] Cannot create hsr debugfs directory [ 440.286164][T17558] gre0 speed is unknown, defaulting to 1000 [ 440.390208][T17562] gre0 speed is unknown, defaulting to 1000 [ 440.740493][ T1114] IPVS: stop unused estimator thread 0... [ 441.125558][T17355] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 441.166517][T17355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.184689][T17355] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 441.206780][T17355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.222869][T17355] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 441.255450][T17355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.264944][T17355] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 441.283259][T17355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.463021][T17355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.506772][T17355] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.520471][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.527659][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.546268][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.553404][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.785100][T17355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.828931][T17355] veth0_vlan: entered promiscuous mode [ 441.844927][T17355] veth1_vlan: entered promiscuous mode [ 441.871832][T17355] veth0_macvtap: entered promiscuous mode [ 441.881619][T17355] veth1_macvtap: entered promiscuous mode [ 441.902955][T17355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.920899][T17355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.934504][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.944472][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.954480][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.963735][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.991209][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 441.999279][ C0] lec:lec_tx_timeout: lec0 [ 442.003904][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 442.008656][T17355] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 442.047105][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.056869][T17355] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 442.067146][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.090540][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.099827][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.011239][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 447.019278][ C0] lec:lec_tx_timeout: lec0 [ 447.023889][ C0] lec:lec_start_xmit: lec0:No lecd attached