last executing test programs: 6.434241356s ago: executing program 1 (id=6949): getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000440)=0x14) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000600)=[0x0], &(0x7f0000000640)=[0x0], 0x0, 0x72, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000680), &(0x7f0000000800), 0x8, 0x44, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x3}, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x8, '\x00', r0, r2, 0x1, 0x1, 0x1}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, r4}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xd, 0x0, 0x10000, 0x60104, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x4}, 0x50) (async) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x3, 0x81, 0x5, 0x1001, r5, 0x3, '\x00', r8, r9, 0x9, 0x1, 0x4}, 0x50) 6.197574968s ago: executing program 3 (id=6951): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x40, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x40}}, 0x4004044) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRES32=r3, @ANYRES16=r5], 0x44) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_int(r11, 0x29, 0x2b, 0x0, 0xfff3) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0xfb5, 0xfffffffe}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600156f"], 0x18}}, 0x8080) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYRES64=r10, @ANYRES8=0x0, @ANYRES64=r7, @ANYRES16=r9], 0x20}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x4, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x502}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040) 6.11024413s ago: executing program 1 (id=6952): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x58, r2, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x401, 0x9, 0x80, 0x637}, {0x8c, 0x8, 0x4, 0x6}, {0x9f, 0x3, 0x5, 0x9}]}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001180)=@nat={'nat\x00', 0x1b, 0x5, 0x360, 0x0, 0x1f8, 0xffffffff, 0xa8, 0x150, 0x2c8, 0x2c8, 0xffffffff, 0x2c8, 0x2c8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @rand_addr=0x64010100, @multicast2, @gre_key=0x5, @icmp_id=0x67}}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 'macvtap0\x00', 'team0\x00', {}, {}, 0xc, 0x6}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @private=0xa010100, @remote, @gre_key=0x100, @gre_key=0xf0}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @multicast2, @rand_addr=0x64010102, @gre_key=0x80, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x100, 0xd, [0x32, 0x30, 0x3c, 0x9, 0x2c, 0x9, 0xb, 0x4, 0x1a, 0x36, 0x13, 0x20, 0x2e, 0x2b, 0x1, 0x1b], 0x0, 0x400, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) 4.312566742s ago: executing program 1 (id=6959): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) 4.192079046s ago: executing program 3 (id=6960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x2, &(0x7f0000000200)=@raw=[@jmp={0x7, 0x0, 0xa, 0x1}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xbc, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_USERDATA={0x7d, 0xd, 0x1, 0x0, "877bdbbc0330ccc0d35c27abf0ed2dbc886003c558790e0963ca138a1d4d117e8e68a2a93e19de9bcd76c7f748c4bd656414852df6e143870bf6268f48d8c5346d3af35600e3c79add29f9609790bc9e05fb33a77710d3dea585ba06180a09d5dea1644dae21b77d01225e96ab192ec43d0e80d254ad278daa"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 4.074003451s ago: executing program 0 (id=6963): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142c00000000001d430000000000007a0a00fe0000001f61144c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000100), &(0x7f0000000180)=0xfffffd45) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x7, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc081}, 0x0) r1 = accept4$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @dev}, &(0x7f0000000300)=0x10, 0x800) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000340)=0x8, 0x4) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x11c, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x63}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a2e05ef01aa1ac1cd71fdea42f798f3c3ffdd8e093bd89bd"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2cd1a9cd7e1f8d0ed340d45ea7bb81889abec3290949b6e3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "63630eda55ec9ad11a450670643902e5001d80bb8f602a04"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d754f56c2af2818665a172c39e449e3e152b9479adaa827d"}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x190) 3.959811631s ago: executing program 3 (id=6964): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@ldst={0x4, 0x0, 0x6, 0x9}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x49) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x1ff, 0xfffffff3, 0xc, 0x8000}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r2, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket(0x29, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000019000000bca900000000000035090100980000009500000000000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004000d8060da59107f2f0268792fda00955ed55b968db4f229234fb8a1757828926a39c8706ef2d52de8b9849043001ea91d167f8c8a7da54f9a2558e96b6ac7d18fbea0df716f4c8b5bf51492ce209d17a4ee27a963422e330d0cfe959ec660e6154b5d6561651f24b92bdffa68ec29f2b9079f50db46ef066bb62b181ace4c609eeba5b3c04de333186c4713f2e09fab0cf7bf5d0e3ec518a35218b1230b0af2d15b1c416f2116eb57c1ab26544c8705df1c9dc3d8627296bb5128153e1c14"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3.948870092s ago: executing program 2 (id=6965): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809fc47, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x4, 0x2, 'syz2\x00'}]}, 0x24}}, 0x0) r1 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r2, r4, 0x25, 0x2, @void}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r0, r2}) 3.857724778s ago: executing program 0 (id=6966): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x6, 0x0, 0x1, 0xb], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.857127345s ago: executing program 1 (id=6967): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f00000000c0)=0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @loopback}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000a40)="480e23") sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fcffffff4f0000000e0001006e657464657673696d0000000f0002006e65657673696d300000080003000200000008000b000000000006001100010000000000"], 0x4c}}, 0x20000011) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20008001) sendmsg$kcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="9bd06604844f207e86936236b521aa6ff08807a1231731f3eb7c84ec1e1bc9f062388f4a3e04224a4fc854c25b382f9b89ad72db8415f78d255994812263c7fbfaf7aad7318b160179457a959d76c43581b8e8d94210766c336d2661476d0d9343db6a28af00fca30d2c4922918bed", 0x6f}, {&(0x7f0000000280)="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", 0xff}, {&(0x7f0000000380)="cecae9d1c41dd1fd2fc6514a09a4cd4b10ea90711aa72cd4c6b63547f5ec5450ff3f31039c8b17783768edadd7a992a37c4c76ebe6c8b37435e7a6ac1dd1eb77fdb129983454a0d8d8f22503e01e08277ca97357694c3a22e1c574475484bf8c255c9585ef9962ce3238ab8d7e8498cfa094ea639e0a23694f443c83c709aa9592a2405f654dbe16f039da96d54e5024a9ba4151d074968c90d8e7989881c02773ab7feed7744429dc3812c2913b699969466751", 0xb4}], 0x3, &(0x7f0000001200)=[{0x1010, 0x119, 0x8, "5c61037320b1809e370d74cd95c7c2e8c7f917eb25345f9803fd405f4e5f548330f858ee05d18b788bc3d74708b3478f4f724ad186ab109c620707c60b00171d3e74540f255e1ae3237f02ff63164fb9f015389918e02c355f62daf87b8052600777b6caaf294f388eb1303f9fc385db1540ab491620b4effb9d6f66c082d4b3f2b8a9580c2afae1437be98787fa9b78f95536c47d763164c6dcdf034ad1a3375bec87e71743a0d5628051212d6b48acfe6cabed5581e96ab04ae25444409bdbe61b72f0f0d893b39a2c280148acefe60df20a5b42645578eb80640a14a335edf42434b6547ae42a5dc374c455996d1e3d2f5a3a9d1db29289d3b945e8e1e86052feeb83fea3f2dbb64e2a5a30dcf92f3c46e62d3d972cd88662f278ff7bf9b86f3461f734d4c4407b15b8b5d45aa49cd7d8ff0146205d08605d1e69ac9509e5c002352cf3e289937ebbc3c56987b2773c31966ff902cf7c40bf6181401a589c1fa122cb8b3cac27b32e1836b6b45d423374b464f7c54ea3740453df02dff379a0526420a491d84c0639a0cd59c68f551c85591b55d48389810a4fb6983cc96661cb1954957ba6f8b510e584d095e18ec8cc062e14ec09560ba9753d757d6a87dd01083604ceb951585e218ce6e8bce751d1023aa3640d7b594649faedc0aaa10fa5265ffb1b3d479eef6083133c1fdf614b8d81f0775baa9ea418f984e2bfc9b4c21ef49c6b4feb3e16523dddb8817d4ab59df6a767f336183a163405c56f9b6f9bab33ec548765b21c3740c92424b3fac004d68ec1659d2713ae3975fbce501bc5b073466ffd951a23ef59d246ff504d11d9ace0b17abdb08dd2d9aa99320ed940a5b7217aa10789b48cf74903032096378d4700ead4af24f38e67950a378e3a8c63ba36823eda664c4c5c93496e43ebea24eacbb42e3a530e00abcd70e3ceca70957f7a6fb7a708840ab2cce8f5ba7c99653234c2b0065a9008600423f6e9067f97b658642498073ce81401fb5980c7884b1e57b9bdb4eec7c4e10ebb9cafa0fb290e659e4551f642ced0f48838a3f6466aa4d62c7f03237df2ab54b7737bcbe833a4c4904cbd2af0c64565cc8ebd3660af747685d60035216a967e78936899bda58dce3a1a8d62413b5fe1f4ab7c8e7af6ee9741cc73e517274ce3fe1219d72f77595073ebc2619cd804d2e31a0b7f75ff4d90f8028669d468d73abba6514f3895d84fd38d310cdbe802b6a4c86e55bf6ee34e4d52276a7b2d8c7342bb7254f82fc21cc52b50c5dda863c13aa60e67398ea9da948b9e3785b5f9f29c2e2e46211717cc5448acf616d36a3380e8200060e08f814aecf8666a054acc2585155b9e65f16ee0e9643572c7bf1562652a5ebbe48e7ca707999d5b1beaf4f574f9d32ba8efb02f05c4ee8f951ea89e11b835fa177fe3e828c75c45f8670cbdef9a6f109a001f7d2435130801c34036453c47d2174790cee65867a02e3bc3d0536bbf3e96b4432fd72e5e57ad517f3b60e5399bf849f2dcb573d4ac3b291f8b95bb22b5d9f10ad5886b62469b3a8803dd746565b067d0ac1e8a6779955ce692accfce9e699cb8e0e3419cbc12468fbc38f107ec2e3d3f4209a66b220fedc72540380900f25a37d6b20544a1bcf6b198f6b53359cebd838162526474171d5f908ac1d417acd418d829a6c227de873ff1ec7b4020cdf7c94711f83ac8f07d03658ec160a5170109235176acf3624f4dd0451b4ce8e666dc438f0e57c4d95dc94cf09fb6c1751a11ba816ee6e9b7ae3462385fe4f71674a3de6a58d2ee3b638f8b6ddb29cb7992ef9b90314b66f8c54f02776b34d443cec3d0837fc61c6906e6361f4cbbde8870acb566ee944fb530371c501bf40a5dee6d00e3c6f62339bc0c1beb00e063aa5de8372dacb6a27c30b2582e8c028d59b01d89d8abe854f1eff2fc7ea85c990a75f71d6a497a2dbffa29754fe32f7d12e0228fe01862075291bf2324d1aead7afd7859d06ce7a681f1e273a1ceb2ffef8a9b044a981c6cee9ff4c3b2cde4aab31f306f44c4ee3c78ea007a9b0937d4643dcc1b5e937a2aff1943e6433bb4d5f81dca57781ed422cba622ccd4e380ce89664f5b4abbf2da80d69209429a137baa032b079355ecff279b976f5b57d9446a50af9d59b9f39be2a94a62917e80fb0fe2c8ec8b616fa6586fe377ac6e3b0a5afbdcdb93f69b51b0c5ebd417d30a99c5b1aead34b9f18ddb7e684b607d07a06d0417b34f0349af3aa925ac1523479df90d1e73c5d1558b41e15b1dd420fbf8e28d4610fe89f2af0a89eea1f29e9d9c8d792d42bfecb4ea1832263739c67a74e09b44de75d1e9a86983ca7ce10f21c632550ff9bd3f701058d2cc1f085e6ca6f66cd92dcca41823cfa07c772fc4838cf0f95f246facdeb8a777a3d2371733951183cb4ff9ac3d84995f7cad4969a7a1711d1db05cfa4f8c708fd67bd74b28e313375fd4fde340e41093cb6204dde47329c03d01608f5daed0316e88bf75f4e2392d858e59f7c9031d872b2131306f85188328d9431be1d223229b37ded19f4ef3d92adae4c5295f245cd572390c14530c641e2d5140eafea0fe9531f064bcf100a1f43ebb8c7dcbeaa4cb59ea173f7dba7fbf992135ed005e6e0c5e0cfa1b5d119dec88cc97c091efd16dc9f8fdec748ad128d64149efea75598c660d2672e06a504ab1c185081ef0fe694584f5a403e48c51abcc0a219ed8a19f1b98d51a7fb4a056f3bfb462a9cc65edb820e9c11603dea406da8347955381f9ab043151dd3c0e8337d05701cfa79974217a94b03e0b09a1359874d9fd7ec2d4cc9178e7ba8193acfec9bf01a21e2fb2fb4d86f8a3e08b903041e58ac2d5f2066d31b7dcd4fdc4c4879a7dfb4b4ec4f42156a420a7016a9cc952483441ed1e01c72a6905d3c3e59f866cbd45e0ec6608df7392a7976bbe30a2f8b9e8f4054629a956b9db9db95bbf69e8431a6ad43208d7cb04e066f52ba88893a88ba467821427b1c35ca9cd6a1c185215d1cfa9a9d19ddd8df52a40d98977e93b3d1900d24919373408476f66acbbcddd9aa0af602ea43918c0389119fd7f6ab313e39d5949c9c38b951208fc40a0ae15b95c47fe4db53fdf73138cd2131bc41540a48a2882c1d91be1a3a44aeea390cc32511f4223eb49a1cede576a51432384421902ced1ade8f50891d94fe71607811d4380493fb5dbb23f1a10918d6a3d39cf5a74ea4fbb59b92cef0fb9b95dd45a085a62516a3631b443cdce5ce934337935a3c3f1962b398939312bcdb9967690cccea06acc4b31d20b76f1e196fb81bc4ab670c2e2e02a9b75bacecb922e86389df987d1a82d863b2d045df65d20f846f2ea9b43bac74dc0e61a947aba02805caba92c93a346572049752df643603334e7f4f245e0af6e7cdbe8036ab46e3d139a6276d54582264b8714ab8e94fefbb7db3b9f45911f08f509c0da8658b90be77ffe8868b234e102095092c79562d59c1618cb545c59af5a3c84b1795be0b385a62f75f7f17bbfc5906c74cc2030ed80b6a7ababa83012bc82382fa21b12c92ca332176b1455a28df9ed1e2afab320281ff6e42065d78bf532f3ba67844d1ea0e29cbf62a270a51bd030ceb4c093e01cef5cdc5cfd6f68829280db5294b98c3549dd3c371311c0e9c7453acc03510b4f8e4b9174365dc4198c8c099edf5fba835e68e623be2f66233f55455ffbd41311fa72ec8e3ed9e5630f2ac9227df79df49240af8f64106b6d67e88431440d4ab49e99c72e5aceb05cf40d5acc7daf1d7914d35bfb245442161346a6340dac272608a0a89f7e9b3c01e8416f6bf77d421621b06da71d5d23e95cfeec830eec61978ce6809d9064f83dacd6baafe0e877a66cc0c19cf13ae6a5847d5e3af0451bf19ea702be1128b0c70cffd32187ed0d87216608d950e249d2f514522d2186c6dc10408b6135d7e1379f01ea5fcaa9c8da8567f431d6a4b7fe09bfc6ce8249625e456dc442237b8c86be747abd57505f136d0f9e004846113661eaea2d95b83ece4e4bab0de4fb07c87ba19421e30ad228920e95d02a121003339d1d96081d998addd35336de18e993124f0ffebcd02e1c6b5dc457c5708e2830de87b256b170d297553146bb9d9aa59f93b53dc7ba9e17833f0393798ca1bbd3e6eef0c8fe6c683084963ddc4ff0b7d0e111396294e4c41f907251cc05d669064537cd8bf0c33400bcf3286f6a1d0a03f179a7858e490d40b87924e4e78442b2daccfd0f141c5e9b5e05a14c60b6c28e88e712a92d59b653147c4741377338dcb88e671f83a5e8c3c0ab99f958d75293cf9aabe72d6d45db99a93e9516daea8732c980c1a045dff250bb518b86fef482ba3822ae36ce098ebb65b5bde3411cf332419aed44d116ba18bb47315a03936f918c06405fe4e10066b6bf62868800b69acc8fd50433f21e772ffaa8b50742f7ee04a2e327bd7b269d35f6a68333bac3e103cf919dec1e7848b9c1c62df321a90c301c6be2e7b9b0d48c44587b8762ebd95fb88fd20a2c6214b43af03da52e48dc84cd508282cbd117a7556d42722f0d16410d0e75a5df370b1eb12ab268e693cf68b5c428e55574b04c5839dbd885f38722bdb4d043e7a707e7d4f29444794f0da74aac2d8d3132f75929f58e76c90835bcf5bed0546157fbb3fbe37d395b794c2385e46299c6983168c9f71c4234517f53a89748c4fa2c5c3639a28e5487c141e1a9683847b19fb3edad8b712b8371e1f52868ca276db0907a76dd6eaa4e1cc654c988faccf27dc2f20b297a2df8a7c1bead8d063cf4228cc7eb9744be2802a0f996399ddfb85a13a8059e5fb31101bdbd87eb468602e9eadf5972320af22e3d9e5a20f1b05a2d17480207d763540b9439c6d4aab036045be171405f44030380fb43c362fb9c3af7e5de4c0140d9cb66738ceae90d609e254d866d56d6857e1c14fdde3c91113dfb62e321b9db99c41b82be6735fb7daba6f608f6d3817718a9c5ea7852e7c626ab9b6060934f175f3dfe6f481896beb6c8343679e64647ab1a6f1e89a39573f1c94c8000bae640a1b119ae76a8969a838c59d83314274525ca27d937e05604b3a5801b2027d006618e3ef1bd8597e210a455390d4233b90b59f49e56c1807b822dd8bbae51a68706aa2d734c2de38fb3295ceb6401ccc1c8426ca6dbfa4c178ecbcb5d01712e455acb20bb377f7dd2081664348b9c5336cb39e06bbdb95014be4e9f9d3cb34ffd2470d88c9ff1086b73e95e795c0b6bd2e6979b7925b98bb19cbb1b44f8c860fb9dcf0fd048f65419136af18d93544338c7d00857b3a86533fdd41bf40aa110996681eca69bca5a0a59f7bc291114da84a5f537eea14fefab5138eb4e847d356c51786154bd827e4adbdae58c9e05c197f4e30b4ef2cbe367d55e1da278eb15535ded277d942e83cd7f107a773368a07a100a67ddd65bfe0b4ad0e492b30c991acc4888dbaa7ac7fd0c9a7973af65a11f1408d8eb1e4bb7c9d96ace4bc8840c3cefc74eb36faa22d8773528bc38e8ad1fd3292f12d5e6f47bc01bf25308a6351e401beb03ee9ff57873c4046deb55f9ef863c7589f37e301c86f5c3f0a5b71fc517c0624836e52601a538c57d0be7016bc3793961866be4852e66f587f38a031393a545288061aead3d64a6b288b6f0629c9766496e27aeaf2cbc6f8fec466545f68457f39e3aab4e1ddd2e8e2714933fd705dc0c984b258821a1f9c4007469e619dfbc0c985185f30732a92baec88139ec4dbb25b6b81eb941c0b8318ddfde8d"}, {0x38, 0x10a, 0x9, "e58bf84f71937072ea05b9253fc1c8e2f49c310e01659592c8cf13d2d8a9b141d8da65"}], 0x1048}, 0x4000080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x25, 0x5, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0x4}, {}, {0x7, 0x300}}}, 0x10}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="2f61dfc441f0d01d71a0897982a94b14", 0x10}], 0x1}, 0x4) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f00000004c0)='veth1_to_team\x00') 3.77888659s ago: executing program 2 (id=6969): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24000044) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd7d76b2af00042f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e"], 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd7d76b2af00042f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003"], 0xfdef) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003"], 0xfdef) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r2, 0x29, 0x38, 0x0, &(0x7f0000000100)) 3.700266697s ago: executing program 0 (id=6970): r0 = socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) socket(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x0, 0x10001}, 0xc) (async) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x100000}, 0xc) (async) 3.28635463s ago: executing program 0 (id=6972): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa0}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 3.168657527s ago: executing program 3 (id=6973): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) 3.117559887s ago: executing program 2 (id=6974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000000100)={r10, 0xffffffff}, &(0x7f0000000180)=0x8) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4814}, 0x4008004) 3.041543299s ago: executing program 0 (id=6975): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'wlan1\x00', 0x4}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x7e}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x1, '\x00', 0xf, 0x6, 0x8, 0x56}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0xc0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000280)={r2, r6}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.712125693s ago: executing program 4 (id=6976): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r0, 0x0, 0x7, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_conf_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:hwclock_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}]}, 0x8c}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x5, &(0x7f0000000300)=@raw=[@alu={0x4, 0x0, 0x2, 0x9, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffc}, @ringbuf_query], &(0x7f0000000340)='GPL\x00', 0x3ff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10b7f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x0, 0xc1, 0x72, &(0x7f0000000500)="9451913d9e9cd6469d6120f86f8c8475d7f5eb4d09f97202d0bd93b3373d7653843e19a5eaa824f4d50269dc462d168966efee9d37f67a07e6b7ad2c0cee92a04798046476d4bce93a7c99da712c9236a70e4ceb9f5a56e464d7f76cece87004029ad80ff5ebfbcce597ea77070335150c25778d9ff51e750df50f165522e6b97d15ed70190772dd0027d87fe0604ec74397d62adaebf64d66a59946b6b2cd59f75ebe564600589302cebe6eff99b234d68e681f05aa446241673d229d9de5d105", &(0x7f0000000600)=""/114, 0x2, 0x0, 0xa, 0xbb, &(0x7f0000000380)="b2c2fb4215f86c3c6a16", &(0x7f0000000680)="1d4b568b67ac02bf060245854534480c6a21aaf0d0411bb009f83bac0e93bbf2922db59eb39e8a7f135e756603eafbc0da0752dae3f0671e95b587b55e25d85689518b004d8227893819dd71a29cec8b58a57caf1be074c178a0981c5df1dff7107db5f22020d2d5e7d0acb2ed4e102e9f813312fb4f284edf7cc1d65204a4dd96ac74a6ea582b85bef2c13c755eb843eb716031bab15596acfd8462c3716d815985243f59c47d3978e84b7cfb64902b9e0d54e2e4cc65ba354735", 0x4}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 2.157441563s ago: executing program 4 (id=6977): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0x15}, 0x20) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x8, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket(0x10, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0), 0x4) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x119}, @nested={0x4, 0x11}]}, 0x18}], 0x1, 0x0, 0x0, 0x94}, 0x300) 2.156752819s ago: executing program 2 (id=6978): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0x10, 0x3, 0x0) (async) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="88", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="9000"], 0x90}}], 0x1, 0x4000040) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 2.10427542s ago: executing program 4 (id=6979): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000071103e00000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) 2.046336842s ago: executing program 4 (id=6980): r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000040)={0x2, {{0xa, 0x4e21, 0x7, @remote, 0x4}}, 0x1, 0x4, [{{0xa, 0x4e23, 0x1, @empty, 0x4}}, {{0xa, 0x4e23, 0xfff, @private0, 0x3}}, {{0xa, 0x4e22, 0x5, @mcast1, 0xfffffff7}}, {{0xa, 0x4e23, 0x2, @private2, 0x1}}]}, 0x290) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) 1.93367515s ago: executing program 4 (id=6981): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfff7fffc, @ipv4={'\x00', '\xff\xff', @dev}, 0xffffdaf0}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x304}, "112000", '\x00', "e2dfe93c", "e0ffa1a3bb9c00"}, 0x1a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) close(r2) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x5, 0x20}, 0xc) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac141400000000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00150000000000010400000c000800080008000000e0"], 0xd8}, 0x1, 0x0, 0x0, 0x44400}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r6, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r6, &(0x7f0000000640)=[{&(0x7f0000000200)=""/228, 0xe4}, {0x0}], 0x2) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x4a) 1.28788386s ago: executing program 2 (id=6982): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x7a44, 0x1700) openat$cgroup_ro(r2, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40086602, &(0x7f0000000000)={0xfff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}}, 0x8800) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYRESHEX=r3], 0xac}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000030000007110d1a83cbd9474075e00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 865.577675ms ago: executing program 3 (id=6983): r0 = socket(0x400000000010, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000600), &(0x7f0000000280)=0x68) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x8, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xb}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1000, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0x2, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2c, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 717.523112ms ago: executing program 1 (id=6984): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x80800) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="28c0167f0855e7b500af552c0000", @ANYRES16=r2, @ANYRES8=0x0, @ANYRES16=r1, @ANYRES64=0x0, @ANYRESOCT=r0, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r6, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3f8, 0x300, 0x70bd2c, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x810}, 0x80) 186.567638ms ago: executing program 3 (id=6985): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @multicast2}, {0x0, @remote}, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'ip6gre0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008800) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @broadcast}, {0x1}, 0x40, {0x2, 0x4e24, @multicast2}, 'gre0\x00'}) (async) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000480)={{0x2, 0x4e24, @broadcast}, {0x1}, 0x40, {0x2, 0x4e24, @multicast2}, 'gre0\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x9, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}}], {0x9, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) (async) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2c, 0x803, 0x0) (async) r6 = socket(0x2c, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000040)={r10, 0x8, 0x9, 0x0, 0x12, 0x1}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000003c0)={r10, 0x6, 0x2}, &(0x7f0000000400)=0x8) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40800) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r11, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40800) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6) r14 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, r13, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800ffdbdf250000189545a80e871adb0000000000007721009f47905be3c272951600489aac", @ANYRES32=r12, @ANYRES64=r9], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x20001090) (async) sendmsg$nl_route(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800ffdbdf250000189545a80e871adb0000000000007721009f47905be3c272951600489aac", @ANYRES32=r12, @ANYRES64=r9], 0x48}, 0x1, 0x0, 0x0, 0x90}, 0x20001090) 133.581549ms ago: executing program 1 (id=6986): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 37.657539ms ago: executing program 4 (id=6987): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x48, 0x30, 0xffff, 0xffffffff, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000081}, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)={@remote, @rand_addr=0x64010100}) 34.430839ms ago: executing program 0 (id=6988): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) splice(r3, &(0x7f0000000100)=0x6, r2, &(0x7f0000000140)=0xfff, 0x10000, 0x8) 0s ago: executing program 2 (id=6989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f000000a1c0)=[{{0x0, 0x0, &(0x7f0000003740)}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2202, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1, 0x0, 0x0, 0x4800}, 0x2000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000017c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$kcm(0x21, 0x0, 0xa) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYRESOCT=r2], 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008804) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000005c0)=ANY=[@ANYBLOB="150a080000000000000000000000000000e5cc000000000000001720010000000000000000000000000001fc00000000000000000700000000000020010000000000000000000000090002ff0100"/88], 0x58) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000100100000100400000000000000000001000000000000000100100000b000000"], 0x28}, 0xfc40) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x98, 0x4, 0x0, 0x1, [{0x78, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x68, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x50, 0x3, "cd4b6abe42031763d02899c77f99ff5fe87a9d3ac869f3a860917523679a5eb46131471826390d810593448ba1ecbf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000000aa0000000020000000000000002e000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000006c000000200100000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000400000000000000000000000000000000000000000000000000000002000000000000000000000000000000020001060000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffe3000800160000000000"], 0x140}}, 0x0) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000feffffff0f000000050035004000000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r12, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000c40)={0x260, r13, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x260}, 0x1, 0x0, 0x0, 0x20000}, 0x0) kernel console output (not intermixed with test programs): : (slave bond_slave_1): Releasing backup interface [ 529.056583][T25161] veth1_to_bond (unregistering): left allmulticast mode [ 529.065034][T25166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.113504][T25166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 529.127923][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 529.136011][ C1] lec:lec_tx_timeout: lec0 [ 529.216090][T25174] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5187'. [ 529.225777][T25174] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 529.373489][T25184] netlink: 'syz.4.5188': attribute type 1 has an invalid length. [ 529.383591][T25184] netlink: 'syz.4.5188': attribute type 2 has an invalid length. [ 529.684446][T25199] netlink: 'syz.1.5196': attribute type 3 has an invalid length. [ 529.899894][T25207] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 530.402573][T25227] team0: Caught tx_queue_len zero misconfig [ 530.667118][T25244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5208'. [ 530.678482][T25244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5208'. [ 530.754775][T25247] block nbd1: Unsupported socket: should be TCP or UNIX. [ 530.759816][T25254] netlink: 212 bytes leftover after parsing attributes in process `syz.1.5211'. [ 530.781316][T25247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5210'. [ 531.043787][T25267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5215'. [ 531.233023][T25277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5219'. [ 531.599818][T25289] syzkaller0: entered promiscuous mode [ 531.617966][T25289] syzkaller0: entered allmulticast mode [ 531.978888][T25328] x_tables: duplicate underflow at hook 2 [ 534.050431][T25365] openvswitch: netlink: Invalid VLAN frame [ 534.358893][T25386] netlink: 'syz.0.5249': attribute type 1 has an invalid length. [ 534.576498][T25393] netlink: 'syz.1.5252': attribute type 21 has an invalid length. [ 534.623773][T25393] __nla_validate_parse: 3 callbacks suppressed [ 534.623794][T25393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5252'. [ 534.659341][T25394] netlink: 'syz.1.5252': attribute type 21 has an invalid length. [ 534.667239][T25394] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5252'. [ 534.854747][T25396] team0 (unregistering): Port device team_slave_0 removed [ 534.879181][T25396] team0 (unregistering): Port device team_slave_1 removed [ 534.939549][T25393] netlink: 'syz.1.5252': attribute type 4 has an invalid length. [ 534.964886][T25393] netlink: 'syz.1.5252': attribute type 5 has an invalid length. [ 534.990922][T25393] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5252'. [ 535.010347][T25403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.031396][T25394] netlink: 'syz.1.5252': attribute type 4 has an invalid length. [ 535.060871][T25394] netlink: 'syz.1.5252': attribute type 5 has an invalid length. [ 535.091517][T25394] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5252'. [ 535.190132][ T30] audit: type=1107 audit(1769051435.914:12): pid=25411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 535.330020][T25423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5261'. [ 535.447228][T25430] ipvlan0: entered allmulticast mode [ 535.456813][T25430] batadv_slave_1: entered allmulticast mode [ 535.468988][T25430] batman_adv: batadv0: Adding interface: ipvlan0 [ 535.476918][T25430] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.511123][T25430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.525888][T25430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.536490][T25430] batman_adv: batadv0: Interface activated: ipvlan0 [ 535.726743][T25447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5265'. [ 536.067032][T25463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5265'. [ 536.113052][T25471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5272'. [ 536.150139][T25471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5272'. [ 536.340956][T25482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5276'. [ 536.376329][T25481] hsr0 speed is unknown, defaulting to 1000 [ 536.462319][T25481] ip6_vti0 speed is unknown, defaulting to 1000 [ 536.477515][T25492] openvswitch: netlink: Invalid VLAN frame [ 537.691624][T25544] openvswitch: netlink: Duplicate or invalid key (type 0). [ 537.716424][T25544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.099838][T25565] netlink: 'syz.1.5295': attribute type 4 has an invalid length. [ 538.462387][T25590] netlink: 'syz.3.5301': attribute type 1 has an invalid length. [ 538.525371][T25590] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 538.547363][ T7076] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 538.552077][T25590] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.619213][T25590] veth11: entered promiscuous mode [ 538.631101][T25590] bond4: (slave veth11): Enslaving as a backup interface with a down link [ 538.661744][ T1126] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 538.810726][T25595] netlink: 'syz.2.5303': attribute type 1 has an invalid length. [ 539.042383][T25619] ip6t_srh: unknown srh match flags 4000 [ 539.184141][T25623] bond3: entered promiscuous mode [ 539.191898][T25623] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.261390][T25626] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 539.275079][T25626] bond5 (unregistering): Released all slaves [ 539.304547][T25623] bond3: (slave bridge8): making interface the new active one [ 539.312317][T25623] bridge8: entered promiscuous mode [ 539.321944][T25623] bond3: (slave bridge8): Enslaving as an active interface with an up link [ 539.333990][T25632] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 539.349785][T25632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 539.404115][T25635] IPv6: sit1: Disabled Multicast RS [ 539.770113][T25657] validate_nla: 3 callbacks suppressed [ 539.770134][T25657] netlink: 'syz.1.5324': attribute type 1 has an invalid length. [ 539.795130][T25663] netlink: 'syz.4.5327': attribute type 2 has an invalid length. [ 539.810224][T25663] __nla_validate_parse: 3 callbacks suppressed [ 539.810242][T25663] netlink: 119 bytes leftover after parsing attributes in process `syz.4.5327'. [ 539.826818][T25659] netlink: 'syz.0.5325': attribute type 6 has an invalid length. [ 539.849285][T25667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5324'. [ 539.861780][T25659] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5325'. [ 539.910480][T25657] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.970031][T25670] bond5: (slave batadv2): Opening slave failed [ 540.034046][T25676] netlink: 'syz.0.5329': attribute type 1 has an invalid length. [ 540.212437][T25689] TCP: TCP_TX_DELAY enabled [ 540.212544][T25676] bond5: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 540.270779][T25676] bond5: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 540.285290][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5329'. [ 540.288915][T25676] bond5: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 540.360699][T25693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5335'. [ 540.376451][T25691] gre0: entered promiscuous mode [ 540.382500][T25691] gre0: entered allmulticast mode [ 540.665498][T25711] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5339'. [ 540.936236][T25733] sctp: [Deprecated]: syz.1.5345 (pid 25733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 540.936236][T25733] Use struct sctp_sack_info instead [ 541.093243][T25739] nbd: device at index 4 is going down [ 541.353516][T25753] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5351'. [ 541.545869][T24886] udevd[24886]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 541.778305][T25773] x_tables: duplicate entry at hook 3 [ 541.789284][T25773] netlink: 212 bytes leftover after parsing attributes in process `syz.3.5357'. [ 541.806582][T25775] netlink: 'syz.2.5358': attribute type 1 has an invalid length. [ 541.838282][T25775] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5358'. [ 541.986641][T25783] netlink: 'syz.3.5362': attribute type 24 has an invalid length. [ 542.002996][T25787] netlink: 'syz.2.5364': attribute type 1 has an invalid length. [ 542.012307][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5364'. [ 542.099444][T25795] netlink: 'syz.0.5365': attribute type 10 has an invalid length. [ 542.310938][T25807] netlink: 'syz.3.5368': attribute type 1 has an invalid length. [ 542.420108][T25812] syzkaller0: entered promiscuous mode [ 542.426998][T25812] syzkaller0: entered allmulticast mode [ 542.779941][T25826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 542.979244][T25837] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 543.343149][T25861] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.351092][T25861] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.612188][T25877] x_tables: ip6_tables: CT target: only valid in raw table, not  [ 543.927316][T25895] syzkaller0: entered promiscuous mode [ 543.955043][T25895] syzkaller0: entered allmulticast mode [ 544.238404][T25912] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 544.251904][T25918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 544.544802][T25921] syzkaller0: entered promiscuous mode [ 544.551866][T25943] netlink: 'syz.3.5408': attribute type 2 has an invalid length. [ 544.560629][T25921] syzkaller0: entered allmulticast mode [ 546.363650][T25958] IPVS: set_ctl: invalid protocol: 43 0.0.0.0:20000 [ 546.428645][T25964] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 546.523870][T25968] netlink: 'syz.3.5417': attribute type 11 has an invalid length. [ 546.536007][T25968] __nla_validate_parse: 7 callbacks suppressed [ 546.536029][T25968] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5417'. [ 546.624013][T25981] validate_nla: 1 callbacks suppressed [ 546.624033][T25981] netlink: 'syz.3.5420': attribute type 1 has an invalid length. [ 546.697653][T25981] 8021q: adding VLAN 0 to HW filter on device bond5 [ 546.817707][T25989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5423'. [ 546.828808][T25984] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.5421'. [ 546.884327][T25993] Cannot find add_set index 65532 as target [ 546.910087][T25986] Cannot find set identified by id 65534 to match [ 547.078230][T26002] tipc: Enabling of bearer rejected, failed to enable media [ 547.112320][T26005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 547.323664][T26016] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 547.368952][T26016] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 547.444200][T26022] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5432'. [ 547.719795][T26028] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 547.728493][T26027] delete_channel: no stack [ 547.891729][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5438'. [ 547.938610][T26043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5438'. [ 547.973545][T26048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5439'. [ 548.023996][T26048] netlink: 'syz.3.5439': attribute type 7 has an invalid length. [ 548.048209][T26048] netlink: 'syz.3.5439': attribute type 8 has an invalid length. [ 548.055989][T26048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5439'. [ 548.203879][T26058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5441'. [ 548.291571][T26060] netlink: 'syz.1.5443': attribute type 1 has an invalid length. [ 548.529690][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 548.549500][T26075] netlink: 'syz.0.5449': attribute type 1 has an invalid length. [ 548.557251][T26075] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5449'. [ 548.944507][T26095] netlink: 'syz.2.5456': attribute type 1 has an invalid length. [ 548.966152][T26094] netlink: 'syz.2.5456': attribute type 1 has an invalid length. [ 548.983443][T26094] netlink: 'syz.2.5456': attribute type 3 has an invalid length. [ 549.002835][T26095] netlink: 'syz.2.5456': attribute type 3 has an invalid length. [ 549.621935][T26141] netlink: 'syz.4.5468': attribute type 10 has an invalid length. [ 549.825151][T26161] xt_l2tp: v2 tid > 0xffff: 1114244 [ 549.929121][T26164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 551.606136][T26249] __nla_validate_parse: 15 callbacks suppressed [ 551.606160][T26249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5498'. [ 551.735457][T26249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5498'. [ 551.855711][T26223] bond4: option miimon: invalid value (18446744073709551585) [ 551.866487][T26223] bond4: option miimon: allowed values 0 - 2147483647 [ 551.884896][T14934] lec:lec_start_xmit: lec0:No lecd attached [ 551.896560][T26270] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 551.907509][T26223] bond4 (unregistering): Released all slaves [ 552.703001][T26315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5512'. [ 553.008643][ T5831] Bluetooth: hci3: command 0x0405 tx timeout [ 553.030727][T26336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 553.252909][T26349] netlink: 404 bytes leftover after parsing attributes in process `syz.4.5521'. [ 553.298410][T26349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5521'. [ 553.307426][T26349] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5521'. [ 553.358558][T26356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5524'. [ 553.358889][T26349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5521'. [ 553.370925][T26356] validate_nla: 2 callbacks suppressed [ 553.370942][T26356] netlink: 'syz.0.5524': attribute type 23 has an invalid length. [ 553.460255][T26362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5527'. [ 553.470897][T26357] bond6: option resend_igmp: invalid value (32767) [ 553.477477][T26357] bond6: option resend_igmp: allowed values 0 - 255 [ 553.515453][T26357] bond6 (unregistering): Released all slaves [ 553.531137][T26365] netlink: 'syz.2.5527': attribute type 3 has an invalid length. [ 553.542705][T26365] netlink: 'syz.2.5527': attribute type 3 has an invalid length. [ 553.600357][T26367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5528'. [ 553.684757][T26372] gtp1: entered promiscuous mode [ 553.705902][T26372] gtp1: entered allmulticast mode [ 553.977256][T26394] dvmrp1: entered allmulticast mode [ 554.066462][T26395] netlink: 'syz.1.5534': attribute type 4 has an invalid length. [ 554.078294][T26395] `: renamed from bond0 [ 554.251323][T26410] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 554.295115][T26414] netlink: 'syz.3.5539': attribute type 13 has an invalid length. [ 554.380700][T26427] Unknown options in mask b7f2 [ 554.393942][T26425] netlink: 'syz.0.5542': attribute type 23 has an invalid length. [ 554.404979][T26429] Unknown options in mask b7f2 [ 554.473401][T26430] hsr0 speed is unknown, defaulting to 1000 [ 554.492245][T26430] ip6_vti0 speed is unknown, defaulting to 1000 [ 555.233301][T26470] netlink: 'syz.1.5554': attribute type 10 has an invalid length. [ 555.357533][T26470] veth0_vlan: left promiscuous mode [ 555.382086][T26470] veth0_vlan: entered promiscuous mode [ 555.409985][T26470] team0: Device veth0_vlan failed to register rx_handler [ 555.589437][T26494] netlink: 'syz.4.5560': attribute type 1 has an invalid length. [ 555.597627][T26494] netlink: 'syz.4.5560': attribute type 2 has an invalid length. [ 555.606387][T26494] netlink: 'syz.4.5560': attribute type 2 has an invalid length. [ 556.170523][T26486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.211170][T26486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.729177][ T4172] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.768495][ T4172] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.789531][ T4172] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.821712][ T4172] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.869629][ T4172] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.911316][ T4172] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.927949][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 556.935993][ C1] lec:lec_tx_timeout: lec0 [ 556.944097][ T4172] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.975818][ T4172] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.054374][T26507] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 557.055539][T26508] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 557.357734][T26534] __nla_validate_parse: 10 callbacks suppressed [ 557.357758][T26534] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5567'. [ 558.107625][T26577] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5579'. [ 558.448835][T26598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5585'. [ 559.021588][T26629] validate_nla: 3 callbacks suppressed [ 559.021608][T26629] netlink: 'syz.1.5591': attribute type 10 has an invalid length. [ 559.037605][T26636] netlink: 'syz.1.5591': attribute type 10 has an invalid length. [ 559.110500][T26636] wlan1: mtu less than device minimum [ 559.116040][T26636] `: (slave wlan1): Error -22 calling dev_set_mtu [ 559.125162][T26629] wlan1: mtu less than device minimum [ 559.131463][T26629] `: (slave wlan1): Error -22 calling dev_set_mtu [ 559.147971][T26634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5593'. [ 559.159575][T26634] bond0: Caught tx_queue_len zero misconfig [ 559.516999][T26657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5596'. [ 559.557453][T26657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5596'. [ 559.659849][T26663] netlink: 768 bytes leftover after parsing attributes in process `syz.2.5599'. [ 559.672656][T26666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5601'. [ 559.719119][T26666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5601'. [ 559.919642][T26675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5604'. [ 560.564852][T26713] netlink: 'syz.3.5610': attribute type 1 has an invalid length. [ 560.599143][T26713] netlink: 'syz.3.5610': attribute type 2 has an invalid length. [ 560.739093][T26713] netlink: 'syz.3.5610': attribute type 1 has an invalid length. [ 560.760703][T26713] netlink: 'syz.3.5610': attribute type 1 has an invalid length. [ 561.140760][T26751] netlink: 'syz.3.5617': attribute type 2 has an invalid length. [ 561.186281][T26751] netlink: 'syz.3.5617': attribute type 2 has an invalid length. [ 561.311537][T26758] netlink: 'syz.4.5619': attribute type 1 has an invalid length. [ 561.451793][T26758] bond4: entered promiscuous mode [ 561.457396][T26758] 8021q: adding VLAN 0 to HW filter on device bond4 [ 561.586023][T26771] gre3: entered promiscuous mode [ 561.614497][T26771] gre3: entered allmulticast mode [ 561.664710][T26780] netlink: 'syz.2.5624': attribute type 1 has an invalid length. [ 562.257141][T26813] hsr0 speed is unknown, defaulting to 1000 [ 562.280112][T26813] ip6_vti0 speed is unknown, defaulting to 1000 [ 562.429665][T26833] __nla_validate_parse: 5 callbacks suppressed [ 562.429687][T26833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5638'. [ 562.480945][T26833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5638'. [ 562.610347][T26842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5639'. [ 562.706671][T26846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5641'. [ 562.926023][T26855] macsec0: entered promiscuous mode [ 562.939892][T26855] macsec0: entered allmulticast mode [ 563.013725][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 563.026376][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 563.056744][T26858] veth1_macvtap: entered allmulticast mode [ 563.088485][T26858] macsec0: left promiscuous mode [ 563.096413][T26858] macsec0: left allmulticast mode [ 563.118141][T26858] veth1_macvtap: left allmulticast mode [ 563.144179][T26855] macsec0: entered promiscuous mode [ 563.150307][T26855] macsec0: entered allmulticast mode [ 563.312963][T26872] openvswitch: netlink: EtherType 0 is less than min 600 [ 563.363602][T26874] Cannot find add_set index 2 as target [ 563.660338][T26885] tipc: Enabling of bearer rejected, failed to enable media [ 563.734854][T26890] tipc: Enabling of bearer rejected, failed to enable media [ 563.861661][T26896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5651'. [ 563.895434][T26896] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 563.926105][T26896] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5651'. [ 563.944145][T26892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5651'. [ 564.135822][T26912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5656'. [ 564.452491][T26935] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5661'. [ 564.462375][T26928] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5661'. [ 564.581789][T26941] unsupported nlmsg_type 40 [ 564.809041][T26949] validate_nla: 2 callbacks suppressed [ 564.809060][T26949] netlink: 'syz.2.5666': attribute type 13 has an invalid length. [ 564.890963][T26949] macvtap0: entered allmulticast mode [ 564.903135][T26949] macvtap0: refused to change device tx_queue_len [ 565.181458][T26978] openvswitch: netlink: Unknown key attributes 2 [ 565.189158][T26979] openvswitch: netlink: Unknown key attributes 2 [ 565.289588][T26960] hsr_slave_1 (unregistering): left promiscuous mode [ 565.294377][T26985] netlink: 'syz.4.5676': attribute type 7 has an invalid length. [ 565.313475][T26985] netlink: 'syz.4.5676': attribute type 7 has an invalid length. [ 565.689908][T26999] xt_cluster: node mask cannot exceed total number of nodes [ 566.067078][T27019] veth5: entered promiscuous mode [ 566.924925][T27076] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 566.945431][T27076] bond0 (unregistering): Released all slaves [ 567.095969][T27092] bond7: entered promiscuous mode [ 567.110335][T27092] bond7: entered allmulticast mode [ 567.119749][T27092] 8021q: adding VLAN 0 to HW filter on device bond7 [ 567.667437][T27127] netlink: 'syz.1.5720': attribute type 1 has an invalid length. [ 567.680513][T27127] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 567.726526][T27134] __nla_validate_parse: 6 callbacks suppressed [ 567.726560][T27134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5723'. [ 567.749947][T27135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.946440][T27140] tipc: Enabled bearer , priority 0 [ 567.956228][T27140] syzkaller0: entered promiscuous mode [ 567.963437][T27140] syzkaller0: entered allmulticast mode [ 568.030861][T27140] tipc: Resetting bearer [ 568.037911][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.045983][ C1] lec:lec_tx_timeout: lec0 [ 568.051297][T27138] tipc: Resetting bearer [ 568.078489][T27138] tipc: Disabling bearer [ 568.088920][T27155] netlink: 'syz.3.5728': attribute type 1 has an invalid length. [ 568.118522][T27152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5731'. [ 568.151999][T27152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5731'. [ 568.176515][T27159] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 568.190468][T27160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5731'. [ 568.209908][T27152] netlink: 'syz.1.5731': attribute type 15 has an invalid length. [ 568.229094][T27160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5731'. [ 568.238251][T27159] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 568.238278][T27159] bond8: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 568.417073][T27152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5731'. [ 568.433382][T27152] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5731'. [ 568.479658][T15351] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 568.493530][T15351] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 568.534842][T15351] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 568.625263][T27182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5738'. [ 568.660990][T27187] netlink: 'syz.0.5739': attribute type 10 has an invalid length. [ 568.691001][T27190] netlink: 'syz.0.5739': attribute type 10 has an invalid length. [ 568.697277][T27192] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 568.872324][T27197] syzkaller0: entered promiscuous mode [ 568.883859][T27197] syzkaller0: entered allmulticast mode [ 568.985729][T27201] syzkaller1: entered promiscuous mode [ 568.992957][T27201] syzkaller1: entered allmulticast mode [ 569.000070][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5746'. [ 569.046986][T27203] netlink: 'syz.1.5745': attribute type 32 has an invalid length. [ 569.089892][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5746'. [ 569.195555][T27215] netlink: 'syz.4.5748': attribute type 4 has an invalid length. [ 569.211679][T27211] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 569.764087][T27239] gtp0: entered promiscuous mode [ 569.777962][T27239] gtp0: entered allmulticast mode [ 570.361449][T27296] netlink: 'syz.3.5769': attribute type 1 has an invalid length. [ 570.619482][T27310] veth0: entered promiscuous mode [ 570.632354][T27309] veth0: left promiscuous mode [ 570.957058][T27332] netlink: 'syz.0.5782': attribute type 4 has an invalid length. [ 571.326097][T27346] syzkaller0: entered promiscuous mode [ 571.342128][T27346] syzkaller0: entered allmulticast mode [ 571.797341][T27370] netlink: 'syz.2.5794': attribute type 1 has an invalid length. [ 572.065755][T27389] netlink: 'syz.1.5798': attribute type 10 has an invalid length. [ 572.070164][T27384] openvswitch: netlink: Multiple metadata blocks provided [ 572.328832][T27389] team0: Port device geneve0 added [ 573.300540][T27471] __nla_validate_parse: 9 callbacks suppressed [ 573.300563][T27471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5811'. [ 573.319602][T27471] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5811'. [ 573.404603][T27476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5813'. [ 573.448006][T27476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5813'. [ 573.484728][T27478] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5812'. [ 573.502335][T27480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5813'. [ 573.523220][T27482] netlink: 'syz.1.5814': attribute type 1 has an invalid length. [ 573.619046][T27482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.817405][T27482] bond0: (slave ip6erspan0): making interface the new active one [ 573.873739][T27482] bond0: (slave ip6erspan0): Enslaving as an active interface with an up link [ 573.929727][T27496] tunl0: Caught tx_queue_len zero misconfig [ 574.044808][T27504] team0: Device gtp0 is up. Set it down before adding it as a team port [ 574.192173][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5820'. [ 574.246613][T27489] syzkaller1: entered promiscuous mode [ 574.259075][T27489] syzkaller1: entered allmulticast mode [ 574.440354][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 574.451512][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 574.462559][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 574.475533][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 574.490328][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 574.691121][T27522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5824'. [ 574.720228][T27522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5824'. [ 574.729474][T27522] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5824'. [ 574.763420][T27514] hsr0 speed is unknown, defaulting to 1000 [ 574.785782][T27514] ip6_vti0 speed is unknown, defaulting to 1000 [ 574.915887][T27524] netlink: 'syz.4.5826': attribute type 1 has an invalid length. [ 575.370097][T27546] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 575.404097][T27546] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 575.827014][ T7076] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 575.912042][T27574] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 575.926738][T27574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.083051][T27577] netlink: 'syz.4.5841': attribute type 39 has an invalid length. [ 576.267153][T13175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.383534][T13175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.457875][T13175] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.538659][ T5849] Bluetooth: hci0: command tx timeout [ 576.561158][T15354] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.608502][T27600] netlink: 'syz.4.5846': attribute type 11 has an invalid length. [ 576.622028][ T7076] batadv1: left allmulticast mode [ 576.643196][ T7076] batadv1: left promiscuous mode [ 576.668865][ T7076] bridge0: port 4(batadv1) entered disabled state [ 576.692586][ T7076] bridge_slave_0: left allmulticast mode [ 576.720143][ T7076] bridge_slave_0: left promiscuous mode [ 576.726019][ T7076] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.157058][ T7076] bond4 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 577.184197][ T7076] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 577.202969][ T7076] bond4 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - be:cb:c6:90:9c:5a - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 577.492088][ T7076] tipc: Disabling bearer [ 578.266126][ T7076] ` (unregistering): (slave 32): Releasing backup interface [ 578.275301][ T7076] ` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 578.285387][ T7076] ` (unregistering): Released all slaves [ 578.405856][ T7076] bond1 (unregistering): Released all slaves [ 578.424759][ T7076] bond2 (unregistering): Released all slaves [ 578.570522][ T7076] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 578.581174][ T7076] bond3 (unregistering): Released all slaves [ 578.600432][ T7076] bond0 (unregistering): Released all slaves [ 578.608537][ T5849] Bluetooth: hci0: command tx timeout [ 578.749732][ T7076] bond4 (unregistering): (slave veth11): Releasing backup interface [ 578.759966][ T7076] bond4 (unregistering): Released all slaves [ 578.873505][ T7076] bond5 (unregistering): Released all slaves [ 578.886608][ T7076] bond6 (unregistering): Released all slaves [ 578.999319][ T7076] bond7 (unregistering): Released all slaves [ 579.014168][ T7076] bond8 (unregistering): Released all slaves [ 579.028613][ T7076] bond9 (unregistering): Released all slaves [ 579.042214][T27514] chnl_net:caif_netlink_parms(): no params data found [ 579.130213][T27648] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 579.182824][T27653] openvswitch: netlink: IP tunnel dst address not specified [ 579.197038][T27648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 579.343705][ T7076] : left promiscuous mode [ 579.356521][T27660] __nla_validate_parse: 8 callbacks suppressed [ 579.356542][T27660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5858'. [ 579.402306][T27662] netlink: 'syz.2.5857': attribute type 10 has an invalid length. [ 579.450235][ T7076] 9: left promiscuous mode [ 579.539100][T27663] netlink: 'syz.0.5858': attribute type 1 has an invalid length. [ 579.546992][T27663] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5858'. [ 579.607288][T27668] netlink: 'syz.4.5859': attribute type 2 has an invalid length. [ 579.616057][ T7076] tipc: Disabling bearer [ 579.636247][ T7076] tipc: Left network mode [ 579.723461][T27514] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.749416][T27514] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.779765][T27514] bridge_slave_0: entered allmulticast mode [ 579.804207][T27514] bridge_slave_0: entered promiscuous mode [ 579.811435][T27690] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5863'. [ 579.856965][T27514] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.864934][T27514] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.876726][T27695] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5864'. [ 579.878819][T27514] bridge_slave_1: entered allmulticast mode [ 579.900699][T27514] bridge_slave_1: entered promiscuous mode [ 579.979396][T27700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5866'. [ 580.004314][T27693] syzkaller0: entered promiscuous mode [ 580.011131][T27693] syzkaller0: entered allmulticast mode [ 580.040915][T27703] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5866'. [ 580.067766][T27514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.087142][T27705] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5868'. [ 580.091743][T27514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.262159][T27514] team0: Port device team_slave_0 added [ 580.298804][T27514] team0: Port device team_slave_1 added [ 580.525714][T27514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.527146][T27722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.539274][T27514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.543222][T27723] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 580.578099][T27720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.613668][T27514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.678105][T27732] openvswitch: netlink: IP tunnel dst address not specified [ 580.689604][ T5849] Bluetooth: hci0: command tx timeout [ 580.690354][T27514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.712764][T27514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.761797][T27514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.998444][T27746] netlink: 'syz.2.5879': attribute type 4 has an invalid length. [ 581.007914][T27747] netlink: 'syz.2.5879': attribute type 4 has an invalid length. [ 581.019786][T27745] openvswitch: netlink: Flow key attr not present in new flow. [ 581.043259][T27745] netlink: 'syz.0.5880': attribute type 1 has an invalid length. [ 581.051924][T27745] netlink: 'syz.0.5880': attribute type 2 has an invalid length. [ 581.065733][T27745] netlink: 'syz.0.5880': attribute type 1 has an invalid length. [ 581.095808][T27745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5880'. [ 581.143750][T27752] veth0_macvtap: left allmulticast mode [ 581.246877][T27514] hsr_slave_0: entered promiscuous mode [ 581.278245][T27514] hsr_slave_1: entered promiscuous mode [ 581.284796][T27514] debugfs: 'hsr0' already exists in 'hsr' [ 581.292892][T27514] Cannot create hsr debugfs directory [ 581.454189][T27759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5884'. [ 581.725581][T27780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5886'. [ 581.783036][ T7076] hsr_slave_0: left promiscuous mode [ 581.807958][ T7076] hsr_slave_1: left promiscuous mode [ 581.821654][ T7076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.839094][ T7076] batman_adv: batadv0: Removing interface: dummy0 [ 581.863759][T27784] netlink: 'syz.1.5888': attribute type 2 has an invalid length. [ 581.873858][T27784] netlink: 'syz.1.5888': attribute type 2 has an invalid length. [ 582.092940][ T7076] pim6reg (unregistering): left allmulticast mode [ 582.152517][T27808] netlink: 'syz.4.5893': attribute type 39 has an invalid length. [ 582.770940][ T5849] Bluetooth: hci0: command tx timeout [ 583.042842][T27810] netlink: 'syz.2.5894': attribute type 12 has an invalid length. [ 583.469503][T27825] syzkaller0: entered promiscuous mode [ 583.478426][T27825] syzkaller0: entered allmulticast mode [ 583.504645][T13192] syzkaller0: tun_net_xmit 70 [ 583.514932][T27514] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.542103][T27825] syzkaller0: tun_net_xmit 28 [ 583.591058][T27514] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.639655][ T7076] IPVS: stop unused estimator thread 0... [ 583.710181][T27514] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.829229][T27847] Bluetooth: MGMT ver 1.23 [ 583.836092][T27514] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.902533][T27846] can: request_module (can-proto-0) failed. [ 584.046297][T27853] veth0: entered promiscuous mode [ 584.342605][T27514] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 584.422715][T27875] __nla_validate_parse: 10 callbacks suppressed [ 584.422737][T27875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5909'. [ 584.422798][T27514] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 584.528969][T27877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5909'. [ 584.620952][T27514] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 584.735556][T27514] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 585.140793][T27906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5915'. [ 585.155013][T27908] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5914'. [ 585.190336][T27911] xt_ecn: cannot match TCP bits for non-tcp packets [ 585.234455][T27514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.270780][T27911] gre0: left promiscuous mode [ 585.275770][T27911] gre0: left allmulticast mode [ 585.385166][T27924] netlink: 'syz.0.5919': attribute type 1 has an invalid length. [ 585.606367][T27911] sit0: left promiscuous mode [ 585.766325][T27911] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.773934][T27911] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.815217][T27911] `: left promiscuous mode [ 585.824585][T27911] bond_slave_0: left promiscuous mode [ 585.830632][T27911] bond_slave_1: left promiscuous mode [ 585.845095][T27911] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 585.885165][T27922] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5918'. [ 585.923793][T27924] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.942331][T27932] bond7: (slave gretap1): making interface the new active one [ 585.950978][T27932] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 585.960888][T27916] syzkaller1: entered promiscuous mode [ 585.987917][T27916] syzkaller1: entered allmulticast mode [ 586.082440][T27514] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.140902][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.148145][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.198427][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.205657][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.271357][T27948] bridge_slave_0: invalid flags given to default FDB implementation [ 586.328144][T27951] netlink: 'syz.0.5924': attribute type 8 has an invalid length. [ 586.660370][T27979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 586.839771][T27986] syzkaller0: entered promiscuous mode [ 586.860188][T27986] syzkaller0: entered allmulticast mode [ 586.904139][T27991] tipc: Enabled bearer , priority 0 [ 586.942613][T27986] tipc: Enabling of bearer rejected, already enabled [ 586.975019][T27514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.001136][T27991] tipc: Resetting bearer [ 587.015610][T27999] macsec0: left promiscuous mode [ 587.021712][T27986] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 587.039865][T27999] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 587.315785][T28006] syzkaller0: entered promiscuous mode [ 587.321852][T28006] syzkaller0: entered allmulticast mode [ 587.348245][T27997] tipc: Resetting bearer [ 587.455861][T27997] tipc: Disabling bearer [ 587.491223][T28017] sctp: [Deprecated]: syz.4.5933 (pid 28017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.491223][T28017] Use struct sctp_sack_info instead [ 587.549446][T28027] geneve1: entered promiscuous mode [ 587.555693][T28027] geneve1: entered allmulticast mode [ 588.417083][T28060] openvswitch: netlink: Multiple metadata blocks provided [ 590.160526][T27514] veth0_vlan: entered promiscuous mode [ 590.252754][T27514] veth1_vlan: entered promiscuous mode [ 590.343673][T27514] veth0_macvtap: entered promiscuous mode [ 590.360305][T27514] veth1_macvtap: entered promiscuous mode [ 590.384299][T28109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5948'. [ 590.395930][T27514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.404474][T28106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5947'. [ 590.423028][T28106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5947'. [ 590.429546][T27514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.459553][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.468479][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.477318][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.517465][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.831632][T14988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.861923][T14988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.927402][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.946000][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.957058][T28126] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5951'. [ 591.076626][T28132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.099229][T28133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.102179][T28130] `: entered promiscuous mode [ 591.135423][T28130] bond_slave_0: entered promiscuous mode [ 591.266147][T28130] bond_slave_1: entered promiscuous mode [ 591.274500][T28135] team0: No ports can be present during mode change [ 591.281785][T28132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5954'. [ 591.311605][T28132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5954'. [ 591.324188][T28132] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5954'. [ 591.338869][T28144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5955'. [ 591.361949][T28144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5955'. [ 591.654776][T28163] netlink: 'syz.1.5963': attribute type 21 has an invalid length. [ 591.779570][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5960'. [ 591.838669][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 591.874927][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 591.884470][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 591.893600][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 591.901998][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.965292][T28167] hsr0 speed is unknown, defaulting to 1000 [ 591.973579][T28167] ip6_vti0 speed is unknown, defaulting to 1000 [ 593.968166][ T5849] Bluetooth: hci5: command tx timeout [ 595.165461][T28167] chnl_net:caif_netlink_parms(): no params data found [ 595.335833][T28167] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.343597][T28167] bridge0: port 1(bridge_slave_0) entered disabled state [ 595.351100][T28167] bridge_slave_0: entered allmulticast mode [ 595.359068][T28167] bridge_slave_0: entered promiscuous mode [ 595.366805][T28167] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.374686][T28167] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.382010][T28167] bridge_slave_1: entered allmulticast mode [ 595.389190][T28167] bridge_slave_1: entered promiscuous mode [ 595.420292][T28167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.432003][T28167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.460887][T28167] team0: Port device team_slave_0 added [ 595.468997][T28167] team0: Port device team_slave_1 added [ 595.494449][T28167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.504139][T28167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.530927][T28167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.543205][T28167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.550486][T28167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 595.577246][T28167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.620695][T28167] hsr_slave_0: entered promiscuous mode [ 595.627098][T28167] hsr_slave_1: entered promiscuous mode [ 595.633449][T28167] debugfs: 'hsr0' already exists in 'hsr' [ 595.639807][T28167] Cannot create hsr debugfs directory [ 596.020590][T28167] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 596.031396][T28167] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 596.041006][T28167] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 596.047963][ T5849] Bluetooth: hci5: command tx timeout [ 596.057427][T28167] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 596.128691][T28167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.147007][T28167] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.160026][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.167122][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.183032][T13175] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.190166][T13175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.361496][T28167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.406964][T28167] veth0_vlan: entered promiscuous mode [ 596.419735][T28167] veth1_vlan: entered promiscuous mode [ 596.450355][T28167] veth0_macvtap: entered promiscuous mode [ 596.460152][T28167] veth1_macvtap: entered promiscuous mode [ 596.481163][T28167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.495541][T28167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.511364][ T8099] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.520527][ T8099] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.531586][ T8099] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.542613][ T8099] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.613089][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.633820][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.661306][ T7076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.670411][ T7076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.127996][ T5849] Bluetooth: hci5: command tx timeout [ 600.208956][ T5849] Bluetooth: hci5: command tx timeout [ 615.299739][T14934] lec:lec_start_xmit: lec0:No lecd attached [ 617.592133][T28264] __nla_validate_parse: 2 callbacks suppressed [ 617.592155][T28264] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5983'. [ 617.662423][T28269] xt_l2tp: invalid flags combination: 8 [ 617.683969][T28270] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 617.701408][T28269] netlink: 'syz.2.5985': attribute type 1 has an invalid length. [ 617.879735][T28290] IPVS: ip_vs_add_dest(): server weight less than zero [ 617.985344][T28295] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5993'. [ 618.041162][T28300] netlink: 'syz.2.5994': attribute type 1 has an invalid length. [ 618.067483][T28303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5992'. [ 618.094888][T28300] 8021q: adding VLAN 0 to HW filter on device bond3 [ 618.937004][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 618.957189][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 618.971789][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 618.981523][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 619.022183][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 619.032350][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 619.048557][T28331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5998'. [ 619.268376][T28335] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.276180][T28335] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.290979][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 619.301227][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 619.310813][ T5831] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 619.319871][ T5831] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 619.327688][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 619.510446][T28335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.524711][T28335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.731567][ T7076] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.768100][ T7076] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.801528][ T7076] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.859235][ T7076] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.916749][T28339] hsr0 speed is unknown, defaulting to 1000 [ 619.958756][T28339] ip6_vti0 speed is unknown, defaulting to 1000 [ 620.160548][T28368] netlink: 'syz.3.6008': attribute type 1 has an invalid length. [ 620.230066][T28372] lo: entered promiscuous mode [ 620.251963][T28372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.334824][T28376] bridge9: port 1(veth3) entered blocking state [ 620.345709][T28376] bridge9: port 1(veth3) entered disabled state [ 620.352746][T28376] veth3: entered allmulticast mode [ 620.361188][T28376] veth3: entered promiscuous mode [ 620.411254][T28378] bridge9: port 2(veth0_to_bond) entered blocking state [ 620.419888][T28378] bridge9: port 2(veth0_to_bond) entered disabled state [ 620.435891][T28383] netlink: 'syz.2.6012': attribute type 1 has an invalid length. [ 620.442483][T28378] veth0_to_bond: entered allmulticast mode [ 620.444143][T28383] netlink: 'syz.2.6012': attribute type 3 has an invalid length. [ 620.455246][T28378] veth0_to_bond: entered promiscuous mode [ 620.457630][T28383] netlink: 'syz.2.6012': attribute type 7 has an invalid length. [ 620.476285][T28383] netlink: 'syz.2.6012': attribute type 8 has an invalid length. [ 620.485304][T28383] NCSI netlink: No device for ifindex 131092 [ 620.625719][T28385] netlink: 'syz.3.6013': attribute type 5 has an invalid length. [ 620.927854][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5630 ms [ 620.936014][ C1] lec:lec_tx_timeout: lec0 [ 620.987623][T28339] chnl_net:caif_netlink_parms(): no params data found [ 621.017477][T28400] bridge_slave_1: left allmulticast mode [ 621.042269][T28400] bridge_slave_1: left promiscuous mode [ 621.055755][T28400] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.078089][T28400] bridge_slave_0: left allmulticast mode [ 621.087075][T28400] bridge_slave_0: left promiscuous mode [ 621.094429][T28400] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.178405][T28404] netlink: 'syz.3.6019': attribute type 1 has an invalid length. [ 621.351825][T28417] nbd: socks must be embedded in a SOCK_ITEM attr [ 621.418419][ T5831] Bluetooth: hci1: command tx timeout [ 621.508910][T28339] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.516204][T28339] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.539871][T28339] bridge_slave_0: entered allmulticast mode [ 621.562835][T28339] bridge_slave_0: entered promiscuous mode [ 621.581942][T28437] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 621.612740][T28339] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.624109][T28339] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.660578][T28339] bridge_slave_1: entered allmulticast mode [ 621.682460][T28339] bridge_slave_1: entered promiscuous mode [ 621.804728][T28339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.845206][T28339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.945341][T28450] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 622.003593][T28339] team0: Port device team_slave_0 added [ 622.032247][T28339] team0: Port device team_slave_1 added [ 622.164321][T28339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.174594][T28339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.206747][T28339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.230357][T28339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.250113][T28339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.337706][T28339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.384654][T28469] vlan1: entered allmulticast mode [ 622.391656][T28469] veth0_vlan: entered allmulticast mode [ 622.477080][T28339] hsr_slave_0: entered promiscuous mode [ 622.485851][T28339] hsr_slave_1: entered promiscuous mode [ 622.498213][T28339] debugfs: 'hsr0' already exists in 'hsr' [ 622.504029][T28339] Cannot create hsr debugfs directory [ 622.677207][T28485] netlink: 'syz.0.6043': attribute type 10 has an invalid length. [ 622.701644][T28485] team0: Port device dummy0 added [ 622.711442][T28485] validate_nla: 1 callbacks suppressed [ 622.711460][T28485] netlink: 'syz.0.6043': attribute type 10 has an invalid length. [ 623.043637][T28339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.057180][T28339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 623.069441][T28339] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.095291][T28509] bridge0: port 1(ipvlan1) entered blocking state [ 623.104696][T28509] bridge0: port 1(ipvlan1) entered disabled state [ 623.112180][T28509] ipvlan1: entered allmulticast mode [ 623.117532][T28509] bridge0: entered allmulticast mode [ 623.124583][T28509] ipvlan1: left allmulticast mode [ 623.129874][T28509] bridge0: left allmulticast mode [ 623.185841][T28339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.196861][T28339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 623.208691][T28339] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.310145][T28518] __nla_validate_parse: 14 callbacks suppressed [ 623.310165][T28518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6052'. [ 623.444235][T28339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.475751][T28339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 623.489771][ T5831] Bluetooth: hci1: command tx timeout [ 623.505907][T28339] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.767357][T28544] siw: device registration error -23 [ 623.930875][T28555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6060'. [ 623.995350][T28339] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 624.030294][T28339] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 624.052038][T28339] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 624.093311][T28339] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 624.171348][T28570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.277645][T28572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6065'. [ 624.314597][T28572] dvmrp6: entered allmulticast mode [ 624.433447][T28339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.453448][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.476138][ T1304] lec:lec_start_xmit: lec0:No lecd attached [ 624.492422][T28339] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.502916][T28587] : entered promiscuous mode [ 624.511444][T28587] bond_slave_0: entered promiscuous mode [ 624.517520][T28587] ip6gretap1: entered promiscuous mode [ 624.541501][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.548750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.567323][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.574604][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.594537][T28592] netlink: 'syz.3.6070': attribute type 1 has an invalid length. [ 624.674692][T28592] bond1: entered promiscuous mode [ 624.703135][T28592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.714236][T28597] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6071'. [ 624.731619][T28597] netlink: 21 bytes leftover after parsing attributes in process `syz.4.6071'. [ 624.748143][T28597] netlink: 21 bytes leftover after parsing attributes in process `syz.4.6071'. [ 624.970391][T28611] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6076'. [ 625.386888][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6078'. [ 625.420281][T28629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6078'. [ 625.450706][T28634] geneve2: entered allmulticast mode [ 625.472811][T28643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6082'. [ 625.482908][T28634] batman_adv: batadv0: Adding interface: geneve2 [ 625.482934][T28634] batman_adv: batadv0: Interface activated: geneve2 [ 625.569237][ T5831] Bluetooth: hci1: command tx timeout [ 627.383358][T28643] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 627.404171][T28339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.544223][T28675] netlink: 'syz.3.6090': attribute type 1 has an invalid length. [ 627.553407][T28675] netlink: 'syz.3.6090': attribute type 2 has an invalid length. [ 627.574414][T28675] netlink: 'syz.3.6090': attribute type 1 has an invalid length. [ 627.604678][T28339] veth0_vlan: entered promiscuous mode [ 627.649385][ T5831] Bluetooth: hci1: command tx timeout [ 627.673776][T28339] veth1_vlan: entered promiscuous mode [ 627.751810][T28339] veth0_macvtap: entered promiscuous mode [ 627.789538][T28339] veth1_macvtap: entered promiscuous mode [ 627.793440][T28688] sctp: [Deprecated]: syz.3.6092 (pid 28688) Use of int in maxseg socket option. [ 627.793440][T28688] Use struct sctp_assoc_value instead [ 627.854811][T28339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.893789][T28339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.937128][T13191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.967561][T13191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.004183][T13191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.032925][T13191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.078728][T28700] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 628.090991][T28700] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 628.251574][T28707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.261206][T28707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.293330][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.309217][T28710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 628.313842][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.353756][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.362492][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.451050][T28712] netlink: 'syz.3.6101': attribute type 1 has an invalid length. [ 628.459430][T28712] __nla_validate_parse: 2 callbacks suppressed [ 628.459450][T28712] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6101'. [ 628.567510][T28722] Cannot find add_set index 0 as target [ 628.930489][T28739] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6109'. [ 628.972554][T28739] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6109'. [ 629.005362][T28748] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6112'. [ 629.400383][T28767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6116'. [ 629.623210][T28781] netlink: 'syz.1.6123': attribute type 8 has an invalid length. [ 629.729299][ T5831] Bluetooth: hci1: command tx timeout [ 629.901891][T28800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6128'. [ 629.968281][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms [ 629.976332][ C1] lec:lec_tx_timeout: lec0 [ 629.984349][T28800] bond4: invalid ARP target 0.0.0.0 specified for addition [ 630.030034][T28800] bond4: option arp_ip_target: invalid value (0) [ 630.087462][T28800] bond4 (unregistering): Released all slaves [ 630.191203][T28814] nbd: must specify a device to reconfigure [ 630.331601][T28818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6137'. [ 630.377619][T28827] netlink: 'syz.2.6138': attribute type 1 has an invalid length. [ 630.493827][T28831] syzkaller1: entered promiscuous mode [ 630.508955][T28831] syzkaller1: entered allmulticast mode [ 630.515390][T28833] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20004 [ 630.621320][T28843] netlink: 'syz.4.6142': attribute type 1 has an invalid length. [ 630.653612][T28843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6142'. [ 630.871621][T28849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6144'. [ 630.933278][T28849] macsec1: entered promiscuous mode [ 630.939587][T28849] macsec1: entered allmulticast mode [ 630.945853][T28849] bond2: (slave macsec1): Error -34 calling dev_set_mtu [ 631.071540][T28859] hsr0 speed is unknown, defaulting to 1000 [ 631.079881][T28859] ip6_vti0 speed is unknown, defaulting to 1000 [ 631.234661][T28873] bridge2: entered promiscuous mode [ 631.245454][T28873] bridge2: entered allmulticast mode [ 631.256191][T28874] batadv_slave_0: entered promiscuous mode [ 631.505303][T28882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6150'. [ 631.577247][T28882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 631.603562][T28882] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 631.613909][T28882] team0: Failed to send options change via netlink (err -105) [ 631.631525][T28882] team0: Port device batadv0 added [ 631.645301][T28872] batadv_slave_0: left promiscuous mode [ 631.909738][T28901] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 632.215623][T28909] syzkaller0: entered promiscuous mode [ 632.238946][T28909] syzkaller0: entered allmulticast mode [ 632.807091][T28939] Cannot find add_set index 0 as target [ 632.889780][T28939] netlink: 'syz.0.6168': attribute type 10 has an invalid length. [ 632.931990][T28939] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 633.445297][T28968] syzkaller0: entered promiscuous mode [ 633.452030][T28968] syzkaller0: entered allmulticast mode [ 633.515947][T28968] tipc: Enabled bearer , priority 0 [ 633.589200][T28967] tipc: Resetting bearer [ 633.626080][T28984] netlink: 'syz.3.6177': attribute type 11 has an invalid length. [ 633.658121][T28984] netlink: 'syz.3.6177': attribute type 4 has an invalid length. [ 633.672451][T28967] tipc: Disabling bearer [ 633.677326][T28984] __nla_validate_parse: 1 callbacks suppressed [ 633.677343][T28984] netlink: 199768 bytes leftover after parsing attributes in process `syz.3.6177'. [ 634.006272][T28994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6184'. [ 634.029996][T29003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.065532][T29003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.096144][T29007] netlink: 'syz.1.6187': attribute type 16 has an invalid length. [ 634.104483][T29007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6187'. [ 634.161435][T29012] netlink: 54 bytes leftover after parsing attributes in process `syz.2.6188'. [ 634.170953][T29012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6188'. [ 634.305309][T29021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.328478][T29023] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 634.367452][T29027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6193'. [ 634.395606][T29023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 634.443404][T29027] netlink: 'syz.2.6193': attribute type 32 has an invalid length. [ 634.476890][T29027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6193'. [ 634.492291][T29033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6194'. [ 634.552612][T29033] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6194'. [ 634.553037][T29027] bond4: option coupled_control: invalid value (52) [ 634.570936][T29027] bond4 (unregistering): Released all slaves [ 634.725999][T29039] xt_cgroup: invalid path, errno=-2 [ 634.924648][T29056] sctp: [Deprecated]: syz.4.6200 (pid 29056) Use of int in max_burst socket option. [ 634.924648][T29056] Use struct sctp_assoc_value instead [ 634.942116][T29051] syzkaller0: entered promiscuous mode [ 634.947663][T29051] syzkaller0: entered allmulticast mode [ 634.966443][T29051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6197'. [ 635.149733][T29065] netlink: 'syz.2.6202': attribute type 1 has an invalid length. [ 635.357168][T29068] hsr_slave_0 (unregistering): left promiscuous mode [ 635.938249][T29112] netlink: 'syz.4.6212': attribute type 1 has an invalid length. [ 636.030474][T29121] xt_hashlimit: max too large, truncated to 1048576 [ 636.054353][T29109] bond7 (unregistering): Released all slaves [ 636.243438][T29110] bond4: Unable to set up delay as MII monitoring is disabled [ 636.291791][T29110] bond4 (unregistering): Released all slaves [ 636.572996][T29141] xt_ecn: cannot match TCP bits for non-tcp packets [ 637.044185][T29153] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 637.513571][T29173] syzkaller0: refused to change device tx_queue_len [ 637.531025][T29162] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 637.553451][T29162] netlink: 'syz.2.6226': attribute type 10 has an invalid length. [ 637.852297][T29194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.948124][T29198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.045837][T29202] ip6gre1: entered allmulticast mode [ 638.112064][T29204] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.524096][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 638.536157][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 638.547521][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 638.557194][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 638.565441][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 638.680990][T29231] __nla_validate_parse: 7 callbacks suppressed [ 638.681012][T29231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6244'. [ 638.701610][T29226] hsr0 speed is unknown, defaulting to 1000 [ 638.728768][T29226] ip6_vti0 speed is unknown, defaulting to 1000 [ 638.746325][T29233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6244'. [ 639.868126][T29226] chnl_net:caif_netlink_parms(): no params data found [ 639.894281][T29284] xt_policy: output policy not valid in PREROUTING and INPUT [ 640.202012][T29226] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.209653][T29226] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.216928][T29226] bridge_slave_0: entered allmulticast mode [ 640.226480][T29226] bridge_slave_0: entered promiscuous mode [ 640.240512][T29226] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.249074][T29226] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.268200][T29226] bridge_slave_1: entered allmulticast mode [ 640.292370][T29226] bridge_slave_1: entered promiscuous mode [ 640.381037][T29226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.414249][T29226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.486017][T29306] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6264'. [ 640.564071][T29226] team0: Port device team_slave_0 added [ 640.585388][T29226] team0: Port device team_slave_1 added [ 640.608745][ T5849] Bluetooth: hci4: command tx timeout [ 640.639549][T29307] netlink: 'syz.1.6263': attribute type 1 has an invalid length. [ 640.797234][T29309] bond1: (slave geneve2): making interface the new active one [ 640.809734][T29309] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 640.819540][T29226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.826514][T29226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.885346][T29226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.902266][T13192] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 640.929288][T13192] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 640.951190][T29226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.961869][T29226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.993088][T29226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.005240][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.015098][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.024139][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.033854][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.042215][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.051421][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.059714][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.068135][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.077648][T29318] netlink: 'syz.2.6266': attribute type 3 has an invalid length. [ 641.129504][T13192] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.240371][T29327] 8021q: adding VLAN 0 to HW filter on device bond1 [ 641.247525][T13192] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 641.273033][T29327] bond1: (slave ip6erspan0): making interface the new active one [ 641.283422][T29327] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 641.366185][T29333] siw: device registration error -23 [ 641.434324][T29337] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.6270'. [ 641.782596][T29330] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 641.847668][T27411] ip6_vti0 speed is unknown, defaulting to 1000 [ 641.857410][T27411] syz2: Port: 1 Link DOWN [ 641.873339][T29350] gtp0: entered promiscuous mode [ 641.879904][T29350] gtp0: entered allmulticast mode [ 641.934039][T29226] hsr_slave_0: entered promiscuous mode [ 641.944675][T29226] hsr_slave_1: entered promiscuous mode [ 641.952335][T29226] debugfs: 'hsr0' already exists in 'hsr' [ 641.958889][T29226] Cannot create hsr debugfs directory [ 641.964637][ T7172] ip6_vti0 speed is unknown, defaulting to 1000 [ 642.199381][T29365] net veth1_virt_wifi .: renamed from virt_wifi0 [ 642.253667][T29366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6275'. [ 642.271408][T29366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6275'. [ 642.436312][ T5849] block nbd3: Receive control failed (result -32) [ 642.622085][T29381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 642.689453][ T5849] Bluetooth: hci4: command tx timeout [ 642.741201][T29394] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6284'. [ 642.765134][T27411] IPVS: starting estimator thread 0... [ 642.887989][T29397] IPVS: using max 26 ests per chain, 62400 per kthread [ 643.084610][T29226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 643.096360][T29412] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6291'. [ 643.104593][T29226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 643.133952][T29226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 643.161910][T29226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 643.390202][T29435] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6297'. [ 643.420957][T29226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.486602][T29226] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.551976][T16487] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.559217][T16487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.624090][T16487] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.631333][T16487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.884808][T29451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6303'. [ 643.888561][T29461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6305'. [ 643.940927][T29457] bond2: (slave veth3): Enslaving as an active interface with a down link [ 643.969321][T29451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.100501][T29469] sctp: [Deprecated]: syz.2.6307 (pid 29469) Use of int in maxseg socket option. [ 644.100501][T29469] Use struct sctp_assoc_value instead [ 644.184327][T29472] syzkaller1: entered promiscuous mode [ 644.193785][T29472] syzkaller1: entered allmulticast mode [ 644.296817][T29477] bond4: entered promiscuous mode [ 644.302222][T29477] bond4: entered allmulticast mode [ 644.329772][T29477] 8021q: adding VLAN 0 to HW filter on device bond4 [ 644.426917][T29226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.770240][ T5849] Bluetooth: hci4: command tx timeout [ 645.077587][T29226] veth0_vlan: entered promiscuous mode [ 645.121692][T29226] veth1_vlan: entered promiscuous mode [ 645.220760][T29226] veth0_macvtap: entered promiscuous mode [ 645.243030][T29226] veth1_macvtap: entered promiscuous mode [ 645.278921][T29226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.301179][T29226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.326748][ T4172] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.336701][ T4172] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.350214][T16487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.373520][T16487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.573578][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.597874][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.599188][T29526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6324'. [ 645.706104][T29526] hsr_slave_1 (unregistering): left promiscuous mode [ 645.740096][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.759555][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.980269][T29515] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 646.056320][T29542] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.6243'. [ 646.630217][T29575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6337'. [ 646.683799][T29569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6337'. [ 646.848046][ T5849] Bluetooth: hci4: command tx timeout [ 646.913360][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.923474][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.934932][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.945220][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.953435][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 647.106614][T29580] hsr0 speed is unknown, defaulting to 1000 [ 647.143322][T29580] ip6_vti0 speed is unknown, defaulting to 1000 [ 647.160474][ T981] IPVS: starting estimator thread 0... [ 647.248203][T29591] IPVS: using max 27 ests per chain, 64800 per kthread [ 647.354922][T29596] validate_nla: 14 callbacks suppressed [ 647.354943][T29596] netlink: 'syz.0.6344': attribute type 15 has an invalid length. [ 647.373163][T29597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6345'. [ 647.388381][T29596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6344'. [ 647.415859][T29596] IPv6: NLM_F_CREATE should be specified when creating new route [ 647.449931][ T5831] block nbd1: Receive control failed (result -107) [ 648.064044][T29627] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6355'. [ 648.323685][T29644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6358'. [ 648.402907][T29580] chnl_net:caif_netlink_parms(): no params data found [ 648.751792][T29580] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.760448][T29580] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.782133][T29580] bridge_slave_0: entered allmulticast mode [ 648.800411][T29580] bridge_slave_0: entered promiscuous mode [ 648.860134][T29673] ipt_REJECT: ECHOREPLY no longer supported. [ 648.891977][T29580] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.899893][T29580] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.909675][T29580] bridge_slave_1: entered allmulticast mode [ 648.918704][T29580] bridge_slave_1: entered promiscuous mode [ 648.984693][T29580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.015697][ T5831] Bluetooth: hci2: command tx timeout [ 649.039273][T29580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.052909][T29677] __nla_validate_parse: 4 callbacks suppressed [ 649.052932][T29677] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6369'. [ 649.083587][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6371'. [ 649.150242][T29580] team0: Port device team_slave_0 added [ 649.189772][T29580] team0: Port device team_slave_1 added [ 649.288512][T29580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.307053][T29580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.351813][T29698] xt_hashlimit: size too large, truncated to 1048576 [ 649.373092][T29580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.412345][T29580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.426268][T29580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.488079][T29580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.600307][T29710] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6379'. [ 649.784706][T29719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6382'. [ 649.797716][T29714] tipc: Started in network mode [ 649.803823][T29714] tipc: Node identity 4ac8feff24ac, cluster identity 4711 [ 649.818123][T29714] tipc: Enabled bearer , priority 0 [ 649.833330][T29580] hsr_slave_0: entered promiscuous mode [ 649.842402][T29580] hsr_slave_1: entered promiscuous mode [ 649.843451][T29721] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.6383'. [ 649.849291][T29580] debugfs: 'hsr0' already exists in 'hsr' [ 649.864618][T29580] Cannot create hsr debugfs directory [ 649.870720][T29712] syzkaller0: entered promiscuous mode [ 649.879291][T29712] syzkaller0: entered allmulticast mode [ 649.893078][T29717] delete_channel: no stack [ 649.965009][T29712] tipc: Resetting bearer [ 650.013278][T29712] tipc: Disabling bearer [ 650.062784][T29730] mac80211_hwsim hwsim69 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 650.098374][T29726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.260044][T29740] netlink: 'syz.4.6390': attribute type 23 has an invalid length. [ 650.485163][T29755] netlink: 'syz.0.6393': attribute type 29 has an invalid length. [ 650.497507][T29753] sch_fq: defrate 0 ignored. [ 650.535648][T29757] wireguard0: entered promiscuous mode [ 650.541428][T29757] wireguard0: entered allmulticast mode [ 650.554283][T29757] team0: Device wireguard0 is of different type [ 650.850350][T29772] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 650.879399][T29774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6398'. [ 650.998332][T29779] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 651.094854][ T5831] Bluetooth: hci2: command tx timeout [ 651.102307][T29787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6401'. [ 651.159652][T29787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6401'. [ 651.337202][T29580] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 651.395813][T29580] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 651.438557][T29580] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 651.471117][T29802] netlink: 'syz.3.6405': attribute type 2 has an invalid length. [ 651.504686][T29802] 9: entered promiscuous mode [ 651.513142][T29580] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 651.736696][T29819] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6410'. [ 651.843059][T29819] bond3: Invalid ad_actor_system MAC address. [ 651.849418][T29819] bond3: option ad_actor_system: invalid value (1) [ 651.870848][T29819] bond3 (unregistering): Released all slaves [ 651.921980][T29580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.043195][T29580] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.084964][T16487] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.092222][T16487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.181576][T15354] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.188851][T15354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.286210][T29847] netlink: 'syz.3.6418': attribute type 1 has an invalid length. [ 652.355025][T29850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.433036][T29853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6418'. [ 653.169559][ T5831] Bluetooth: hci2: command tx timeout [ 653.192625][T29580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.240952][T29885] netlink: 'syz.0.6431': attribute type 12 has an invalid length. [ 653.250233][T29885] netlink: 'syz.0.6431': attribute type 29 has an invalid length. [ 653.284519][T29889] syzkaller0: entered promiscuous mode [ 653.295069][T29889] syzkaller0: entered allmulticast mode [ 653.541605][T29898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.555791][T29898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.577102][T29898] bond0 (unregistering): Released all slaves [ 653.600773][T29903] netlink: 'syz.1.6439': attribute type 1 has an invalid length. [ 653.617544][T29580] veth0_vlan: entered promiscuous mode [ 653.681531][T29580] veth1_vlan: entered promiscuous mode [ 653.796197][T29580] veth0_macvtap: entered promiscuous mode [ 653.841931][T29580] veth1_macvtap: entered promiscuous mode [ 653.966801][T29580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.978934][T16487] wlan1: Trigger new scan to find an IBSS to join [ 654.022293][T29580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.066990][T14991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.101392][T14991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.129771][T14991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.143593][T14991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.193938][T29927] __nla_validate_parse: 16 callbacks suppressed [ 654.193959][T29927] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6447'. [ 654.313537][T29933] tipc: Started in network mode [ 654.324464][T29933] tipc: Node identity ac14140f, cluster identity 4711 [ 654.333746][T29933] tipc: Enabling of bearer rejected, failed to enable media [ 654.371300][T29937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6450'. [ 654.553471][T16487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.585721][T16487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.655317][T29947] netlink: 'syz.4.6453': attribute type 1 has an invalid length. [ 654.675041][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.676882][T29949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6455'. [ 654.695834][T29949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6455'. [ 654.707245][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.752826][T29952] netlink: 124 bytes leftover after parsing attributes in process `syz.1.6456'. [ 654.940994][T29960] netlink: zone id is out of range [ 654.950350][T29960] netlink: zone id is out of range [ 654.955515][T29960] netlink: zone id is out of range [ 654.965443][T29960] netlink: zone id is out of range [ 654.975235][T29960] netlink: zone id is out of range [ 654.981175][T29960] netlink: zone id is out of range [ 654.986394][T29960] netlink: zone id is out of range [ 654.996671][T29960] netlink: set zone limit has 4 unknown bytes [ 655.016424][T29958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6458'. [ 655.221064][T29944] infiniband !yz!: set active [ 655.226270][T29944] infiniband !yz!: added team_slave_0 [ 655.243899][T29962] openvswitch: netlink: Flow actions attr not present in new flow. [ 655.252657][ T5831] Bluetooth: hci2: command tx timeout [ 655.351023][T29973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6461'. [ 655.394131][T29944] RDS/IB: !yz!: added [ 655.431419][T29944] smc: adding ib device !yz! with port count 1 [ 655.451805][T29944] smc: ib device !yz! port 1 has no pnetid [ 655.860644][T29989] gretap0: mtu less than device minimum [ 655.867458][T29989] syzkaller0: entered allmulticast mode [ 655.893502][T29996] netlink: 'syz.1.6467': attribute type 1 has an invalid length. [ 655.957126][T29989] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.965033][T29989] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.000566][T29989] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 656.084762][T30000] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 656.096470][T30000] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 656.135662][T30002] gretap1: entered promiscuous mode [ 656.152646][T30002] bond3: (slave gretap1): making interface the new active one [ 656.162725][T30002] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 656.243188][T29996] macvlan2: entered promiscuous mode [ 656.250649][T20568] IPVS: starting estimator thread 0... [ 656.269950][T30008] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 656.284537][T29996] macvlan2: entered allmulticast mode [ 656.308896][T29996] bond3: entered promiscuous mode [ 656.315167][T29996] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 656.338533][T30010] IPVS: using max 35 ests per chain, 84000 per kthread [ 656.349609][T29996] bond3: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 656.380376][T29996] bond3: left promiscuous mode [ 656.584965][T30011] syzkaller0: entered promiscuous mode [ 656.614592][T30011] syzkaller0: entered allmulticast mode [ 656.804891][T30037] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6474'. [ 657.009174][T30045] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6478'. [ 657.074264][T30046] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.6479'. [ 657.943510][T30093] hsr0 speed is unknown, defaulting to 1000 [ 657.959200][T30091] netlink: 'syz.1.6489': attribute type 4 has an invalid length. [ 657.983199][T30091] `: renamed from gre0 [ 658.006855][T30093] ip6_vti0 speed is unknown, defaulting to 1000 [ 658.634579][T30114] netlink: 'syz.0.6495': attribute type 21 has an invalid length. [ 658.742418][T30114] bond2: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 658.774717][T30114] bond2 (unregistering): Released all slaves [ 658.930697][T15353] wlan1: Trigger new scan to find an IBSS to join [ 659.559137][T30143] __nla_validate_parse: 9 callbacks suppressed [ 659.559157][T30143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6503'. [ 660.282807][T30153] Cannot find add_set index 0 as target [ 660.302397][T30157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6509'. [ 660.315363][T30155] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6508'. [ 660.333522][T30157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6509'. [ 660.573020][T30164] netlink: 'syz.0.6510': attribute type 1 has an invalid length. [ 660.821074][T30174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6513'. [ 660.988712][T30184] bond1: left promiscuous mode [ 661.019829][T30184] gtp0: left promiscuous mode [ 661.036362][T30184] gtp0: left allmulticast mode [ 661.103130][T30186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6517'. [ 661.212505][T30186] bond2: invalid ARP target 0.0.0.0 specified for addition [ 661.238230][T16487] wlan1: Creating new IBSS network, BSSID 5e:1b:ca:bb:72:9b [ 661.257871][T30186] bond2: option arp_ip_target: invalid value (0) [ 661.281308][T30186] bond2 (unregistering): Released all slaves [ 661.925368][T30208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6521'. [ 661.929571][T30210] sctp: [Deprecated]: syz.3.6521 (pid 30210) Use of int in maxseg socket option. [ 661.929571][T30210] Use struct sctp_assoc_value instead [ 662.483341][T30235] ip6gre1: entered allmulticast mode [ 663.560630][T30266] netlink: 'syz.0.6535': attribute type 1 has an invalid length. [ 663.585091][T30266] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6535'. [ 663.668984][T30268] netlink: 'syz.4.6536': attribute type 39 has an invalid length. [ 663.853084][T30274] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6536'. [ 663.982044][T30284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6537'. [ 664.447090][T30296] syzkaller1: entered promiscuous mode [ 664.466704][T30296] syzkaller1: entered allmulticast mode [ 664.924312][T30311] netlink: 212 bytes leftover after parsing attributes in process `syz.4.6548'. [ 664.938526][T30316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6550'. [ 664.940328][T30313] 0: reclassify loop, rule prio 0, protocol 800 [ 664.963427][T30313] openvswitch: netlink: IPv4 tunnel dst address is zero [ 665.222644][T30321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6551'. [ 665.783524][T30340] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 665.816670][T30340] netlink: 'syz.1.6557': attribute type 1 has an invalid length. [ 666.079250][T30345] bond4: (slave gretap2): making interface the new active one [ 666.118958][T30352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6561'. [ 666.132008][T30345] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 666.173809][T30352] vxcan2: entered allmulticast mode [ 667.047355][T30387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6570'. [ 667.663431][T30404] netlink: 'syz.4.6574': attribute type 6 has an invalid length. [ 667.771047][T30407] netlink: 'syz.2.6576': attribute type 2 has an invalid length. [ 667.796775][T30407] netlink: 'syz.2.6576': attribute type 1 has an invalid length. [ 667.813207][T30404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.920681][T30415] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6579'. [ 667.941244][T30416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6579'. [ 667.946003][T30404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.073518][T30421] openvswitch: netlink: IP tunnel dst address not specified [ 668.090377][T30422] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 668.097230][T30404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.098967][T30422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6581'. [ 668.124536][T30421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6580'. [ 668.241685][T30404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.434637][ T6393] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.473622][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.532615][ T36] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.570013][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.639057][T30442] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6588'. [ 668.676216][T30442] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 668.729636][T30447] netlink: 'syz.3.6589': attribute type 7 has an invalid length. [ 668.784881][T30447] netlink: 'syz.3.6589': attribute type 8 has an invalid length. [ 669.122398][T30471] netlink: 'syz.4.6595': attribute type 1 has an invalid length. [ 669.244675][T30471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.323690][T14990] bridge_slave_0: left allmulticast mode [ 669.336890][T30486] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 669.338166][T14990] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.387609][T14990] veth0_to_bond: left allmulticast mode [ 669.395187][T14990] veth0_to_bond: left promiscuous mode [ 669.407860][T14990] bridge3: port 1(veth0_to_bond) entered disabled state [ 669.870014][T14990] bond7 (unregistering): (slave gretap2): Releasing active interface [ 669.937659][T14990] dvmrp6 (unregistering): left allmulticast mode [ 670.035091][T14990] team0: Port device geneve0 removed [ 670.347688][T14990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.362368][T14990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.375535][T14990] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 670.386057][T14990] bond0 (unregistering): Released all slaves [ 670.502417][T14990] bond1 (unregistering): Released all slaves [ 670.632602][T14990] bond2 (unregistering): Released all slaves [ 670.763235][T14990] bond3 (unregistering): Released all slaves [ 670.768144][ T5849] Bluetooth: hci2: command 0x0405 tx timeout [ 670.786114][T14990] bond4 (unregistering): Released all slaves [ 670.801369][T14990] bond5 (unregistering): (slave bond6): Releasing backup interface [ 670.810890][T14990] bond5 (unregistering): Released all slaves [ 670.949726][T14990] bond6 (unregistering): Released all slaves [ 670.963602][T14990] bond7 (unregistering): Released all slaves [ 671.090407][T14990] bond8 (unregistering): Released all slaves [ 671.138123][T30503] __nla_validate_parse: 7 callbacks suppressed [ 671.138144][T30503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6602'. [ 671.762504][T30554] wireguard0: entered promiscuous mode [ 671.769201][T30554] wireguard0: entered allmulticast mode [ 671.812029][T30554] team0: Device wireguard0 is of different type [ 672.086799][T30573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6621'. [ 672.123419][T30573] vlan2: entered allmulticast mode [ 672.133772][T30573] mac80211_hwsim hwsim79 wlan0: entered allmulticast mode [ 672.191126][T30578] netlink: 'syz.3.6623': attribute type 23 has an invalid length. [ 672.471639][T30594] openvswitch: netlink: IP tunnel dst address not specified [ 672.479821][T30597] netlink: 'syz.0.6628': attribute type 1 has an invalid length. [ 672.502281][T30599] openvswitch: netlink: IP tunnel dst address not specified [ 672.514076][T30597] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 672.613773][T30610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6629'. [ 672.758689][T30619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6633'. [ 672.850723][T30624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6635'. [ 672.884587][T30625] netlink: 'syz.0.6635': attribute type 20 has an invalid length. [ 672.901965][T30629] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6636'. [ 672.902966][T30625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6635'. [ 672.956719][ T6393] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.957104][T30625] netlink: 'syz.0.6635': attribute type 20 has an invalid length. [ 672.975146][T30625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6635'. [ 672.977617][ T6393] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.016623][T30633] netlink: 'syz.2.6637': attribute type 1 has an invalid length. [ 673.023760][ T6393] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.036916][ T6393] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.105309][T14990] : left promiscuous mode [ 673.152211][T30639] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 673.169172][T30639] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 673.235377][T30633] gretap1: entered promiscuous mode [ 673.295197][T30633] bond1: (slave gretap1): making interface the new active one [ 673.310524][T30633] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 673.322403][T14990] tipc: Disabling bearer [ 673.331140][T14990] tipc: Left network mode [ 673.383501][T14990] IPVS: stopping master sync thread 14689 ... [ 673.476269][T30661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6644'. [ 673.476623][T30660] syzkaller1: entered promiscuous mode [ 673.492228][T30660] syzkaller1: entered allmulticast mode [ 673.722459][T30671] netlink: 'syz.2.6646': attribute type 11 has an invalid length. [ 673.765762][T30671] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6646'. [ 673.814720][T30675] netlink: 'syz.3.6647': attribute type 29 has an invalid length. [ 673.976986][T30675] netlink: 'syz.3.6647': attribute type 29 has an invalid length. [ 674.031684][T30685] tipc: Started in network mode [ 674.036620][T30685] tipc: Node identity 869a66d1edb1, cluster identity 4711 [ 674.079931][T30685] tipc: Enabled bearer , priority 0 [ 674.098290][T30688] syzkaller0: entered promiscuous mode [ 674.103847][T30688] syzkaller0: entered allmulticast mode [ 674.182339][T30671] tipc: Resetting bearer [ 674.221358][T30669] tipc: Resetting bearer [ 674.292496][T30669] tipc: Disabling bearer [ 674.356583][T30712] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 674.392208][T30713] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 674.608853][T30721] netlink: 'syz.4.6657': attribute type 10 has an invalid length. [ 674.644648][T30721] team0: entered promiscuous mode [ 674.662874][T30721] team_slave_0: entered promiscuous mode [ 674.713725][T30721] team_slave_1: entered promiscuous mode [ 674.756119][T30721] bridge0: port 3(team0) entered blocking state [ 674.782488][T30721] bridge0: port 3(team0) entered disabled state [ 674.789596][T30721] team0: entered allmulticast mode [ 674.795320][T30721] team_slave_0: entered allmulticast mode [ 674.876975][T30721] team_slave_1: entered allmulticast mode [ 674.899565][T30721] bridge0: port 3(team0) entered blocking state [ 674.906051][T30721] bridge0: port 3(team0) entered forwarding state [ 675.207170][T14990] hsr_slave_0: left promiscuous mode [ 675.215928][T14990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.224354][T14990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.260504][T14990] veth1_macvtap: left promiscuous mode [ 675.266391][T14990] veth1_vlan: left promiscuous mode [ 675.276063][T14990] veth0_vlan: left promiscuous mode [ 675.385182][T14990] pim6reg527 (unregistering): left allmulticast mode [ 675.796277][T14990] team0 (unregistering): Port device team_slave_1 removed [ 676.200928][T27412] infiniband syz1: ib_query_port failed (-19) [ 676.207126][T30753] __nla_validate_parse: 5 callbacks suppressed [ 676.207143][T30753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6667'. [ 676.446506][T30762] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6668'. [ 676.478816][T30770] netlink: 'syz.1.6671': attribute type 9 has an invalid length. [ 676.531963][T30775] netlink: 'syz.0.6669': attribute type 4 has an invalid length. [ 676.542301][T30775] netlink: 'syz.0.6669': attribute type 4 has an invalid length. [ 676.554611][T27412] IPVS: starting estimator thread 0... [ 676.563379][T30774] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 676.685524][T30776] IPVS: using max 27 ests per chain, 64800 per kthread [ 676.692821][T30780] netlink: 212 bytes leftover after parsing attributes in process `syz.1.6673'. [ 676.748762][T14990] IPVS: stop unused estimator thread 0... [ 676.841030][T30783] netlink: 'syz.2.6675': attribute type 10 has an invalid length. [ 676.855136][T30783] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6675'. [ 676.875259][T30783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6675'. [ 676.886387][T30783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6675'. [ 676.905318][T30783] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6675'. [ 676.932658][T30786] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.6676'. [ 677.017180][T30786] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6676'. [ 677.282321][T30799] macvtap1: entered allmulticast mode [ 677.299060][T30799] veth0_macvtap: entered allmulticast mode [ 677.312730][T30802] netlink: 'syz.4.6681': attribute type 12 has an invalid length. [ 677.369322][T30802] bond1: option primary_reselect: invalid value (255) [ 677.395105][T30802] bond1 (unregistering): Released all slaves [ 677.468778][T30817] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6680'. [ 677.479153][T30817] netlink: 'syz.2.6680': attribute type 1 has an invalid length. [ 677.572126][T30822] netlink: 'syz.1.6689': attribute type 10 has an invalid length. [ 677.599522][T30822] syz_tun: entered promiscuous mode [ 677.641131][T30822] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 677.708722][T30825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.720005][T30825] team0: Port device bond0 added [ 677.759603][T30825] bond0: (slave syz_tun): Releasing backup interface [ 677.817255][T30825] team0: Port device bond0 removed [ 677.856910][T30825] bridge_slave_0: left allmulticast mode [ 677.868727][T30825] bridge_slave_0: left promiscuous mode [ 677.874538][T30825] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.886663][T30825] bridge_slave_1: left allmulticast mode [ 677.893145][T30825] bridge_slave_1: left promiscuous mode [ 677.899976][T30825] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.911977][T30825] bond0: (slave bond_slave_0): Releasing backup interface [ 677.931521][T30825] bond0: (slave bond_slave_1): Releasing backup interface [ 677.957597][T30825] team0: Port device team_slave_0 removed [ 677.979162][T30825] team0: Port device team_slave_1 removed [ 677.985631][T30825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.998758][T30825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.007700][T30825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.015897][T30825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.025917][T30825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 678.052003][T30830] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 678.554526][T30860] x_tables: duplicate underflow at hook 1 [ 678.598980][T30860] openvswitch: netlink: Key 6 has unexpected len 17 expected 2 [ 678.605481][T30865] IPVS: set_ctl: invalid protocol: 135 172.30.0.5:20003 [ 679.555045][T30931] team_slave_0: entered promiscuous mode [ 679.561123][T30931] team_slave_1: entered promiscuous mode [ 679.575271][T30931] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 679.595470][T30931] team0: Device macvtap1 is already an upper device of the team interface [ 679.621130][T30931] team_slave_0: left promiscuous mode [ 679.626690][T30931] team_slave_1: left promiscuous mode [ 680.047552][T30966] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 680.070430][T30966] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 680.082826][T30966] gretap1: entered promiscuous mode [ 680.091170][T30966] gretap1: entered allmulticast mode [ 680.188710][T14934] lec:lec_start_xmit: lec0:No lecd attached [ 680.247416][T30973] hsr0 speed is unknown, defaulting to 1000 [ 680.332109][T30973] ip6_vti0 speed is unknown, defaulting to 1000 [ 680.540096][T30996] validate_nla: 4 callbacks suppressed [ 680.540119][T30996] netlink: 'syz.4.6734': attribute type 30 has an invalid length. [ 681.197119][T31020] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 681.448195][T31027] __nla_validate_parse: 11 callbacks suppressed [ 681.448218][T31027] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6744'. [ 681.666517][T31036] netlink: 'syz.3.6747': attribute type 32 has an invalid length. [ 681.702557][T31043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6751'. [ 681.922783][T31051] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6752'. [ 682.251210][T31067] tipc: Enabled bearer , priority 0 [ 682.360769][T31072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6756'. [ 682.520571][T31067] syzkaller0: entered promiscuous mode [ 682.526421][T31083] netlink: 'syz.4.6759': attribute type 64 has an invalid length. [ 682.533221][T31067] syzkaller0: entered allmulticast mode [ 682.554780][T31067] tipc: Resetting bearer [ 682.558262][T31083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6759'. [ 682.791899][T31090] can: request_module (can-proto-0) failed. [ 682.815108][T13192] tipc: Resetting bearer [ 682.824688][T31066] tipc: Resetting bearer [ 684.533649][T31066] tipc: Disabling bearer [ 684.543396][T31088] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 684.554374][ T7172] tipc: Node number set to 1798006481 [ 684.815116][T31112] x_tables: unsorted underflow at hook 3 [ 685.025195][T31124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6770'. [ 685.174724][T31127] syzkaller1: entered promiscuous mode [ 685.195879][T31127] syzkaller1: entered allmulticast mode [ 685.224791][ T5892] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1 [ 685.232702][ T5892] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max [ 685.243132][ T5892] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4 [ 685.256408][ T5892] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5 [ 685.264958][ T5892] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd [ 685.274182][ T5892] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106 [ 685.283599][ T5892] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22 [ 685.379863][T31142] block nbd2: not configured, cannot reconfigure [ 685.439428][T31147] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6777'. [ 685.452219][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6777'. [ 685.529247][T31145] syzkaller0: entered promiscuous mode [ 685.534791][T31145] syzkaller0: entered allmulticast mode [ 685.708318][T31163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6782'. [ 685.731827][T31163] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6782'. [ 685.784395][ T7172] IPVS: starting estimator thread 0... [ 685.906304][ T1304] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.910382][T31170] IPVS: using max 27 ests per chain, 64800 per kthread [ 685.958555][T31175] syzkaller1: entered promiscuous mode [ 685.964087][T31175] syzkaller1: entered allmulticast mode [ 685.967786][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 685.977715][ C1] lec:lec_tx_timeout: lec0 [ 685.983439][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 686.191188][T31188] netlink: 'syz.0.6789': attribute type 11 has an invalid length. [ 686.525513][T31209] __nla_validate_parse: 4 callbacks suppressed [ 686.525536][T31209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6793'. [ 686.574932][T31202] netlink: 'syz.0.6793': attribute type 1 has an invalid length. [ 686.643243][T31209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6793'. [ 686.717563][T31218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6795'. [ 686.737721][T31217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6796'. [ 687.004276][T31231] 8021q: VLANs not supported on ip6_vti0 [ 687.014595][T31231] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 687.212167][T31244] veth0_to_bond: entered allmulticast mode [ 687.312138][T31250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6806'. [ 687.523133][T31261] netlink: 'syz.2.6811': attribute type 11 has an invalid length. [ 687.531562][T31261] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6811'. [ 687.583296][T31265] netlink: 'syz.3.6813': attribute type 1 has an invalid length. [ 687.603021][T31266] netlink: 'syz.3.6813': attribute type 1 has an invalid length. [ 687.656367][T31270] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6814'. [ 687.668867][T31270] openvswitch: netlink: Flow key attr not present in new flow. [ 687.888328][T31280] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6817'. [ 687.962813][T31284] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6818'. [ 688.044035][T31284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6818'. [ 688.461070][T31313] veth0: entered promiscuous mode [ 688.483021][T31313] veth0: left promiscuous mode [ 689.289464][T31358] vxcan2: entered allmulticast mode [ 689.755816][T31382] netlink: 'syz.2.6849': attribute type 23 has an invalid length. [ 690.997859][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 691.005995][ C1] lec:lec_tx_timeout: lec0 [ 691.131804][T31440] netlink: 'syz.3.6865': attribute type 3 has an invalid length. [ 691.637192][T31477] openvswitch: netlink: Flow actions attr not present in new flow. [ 691.666659][T31477] netlink: 'syz.2.6876': attribute type 1 has an invalid length. [ 691.748588][T31479] __nla_validate_parse: 15 callbacks suppressed [ 691.748613][T31479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6876'. [ 691.810310][T31479] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 691.821490][T31479] bond2: (slave xfrm1): Error -95 calling set_mac_address [ 691.897304][T31490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6881'. [ 691.918789][T31490] tc_dump_action: action bad kind [ 691.932399][T31484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6877'. [ 691.941685][T31484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6877'. [ 692.074416][T31497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6883'. [ 692.246826][T31509] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6886'. [ 692.585457][T31531] netlink: 'syz.0.6894': attribute type 1 has an invalid length. [ 692.691472][T31535] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6895'. [ 692.755420][T31540] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 692.915561][T31552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6900'. [ 692.960132][T31552] netlink: 'syz.0.6900': attribute type 1 has an invalid length. [ 693.062631][T31561] Cannot find add_set index 0 as target [ 693.451754][T31577] can: request_module (can-proto-4) failed. [ 693.683605][T31594] hsr0 speed is unknown, defaulting to 1000 [ 693.731707][T31594] ip6_vti0 speed is unknown, defaulting to 1000 [ 693.745272][T31605] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6915'. [ 693.786224][T31607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6916'. [ 693.845724][T31607] chnl_net:caif_netlink_parms(): no params data found [ 693.994148][T31616] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 693.994964][T31614] xt_ipcomp: unknown flags 1D [ 694.028724][T31615] nbd: couldn't find a device at index 4 [ 694.385575][T31629] netlink: 'syz.4.6922': attribute type 21 has an invalid length. [ 694.835257][T31647] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 694.878016][T31647] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 694.909106][T31647] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 695.835141][T31696] netlink: 'syz.4.6943': attribute type 35 has an invalid length. [ 695.875872][T31702] netlink: 'syz.4.6943': attribute type 35 has an invalid length. [ 695.928382][T31699] dvmrp0: entered allmulticast mode [ 696.108044][T31710] netlink: 'syz.3.6946': attribute type 1 has an invalid length. [ 696.349830][T16487] bridge_slave_1: left allmulticast mode [ 696.387497][T16487] bridge_slave_1: left promiscuous mode [ 696.412078][T16487] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.479116][T16487] bridge_slave_0: left allmulticast mode [ 696.489536][T16487] bridge_slave_0: left promiscuous mode [ 696.507690][T16487] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.933937][T16487] bond7 (unregistering): (slave gretap1): Releasing active interface [ 697.462462][T16487] bond1 (unregistering): Released all slaves [ 697.584970][T16487] bond2 (unregistering): Released all slaves [ 697.707564][T16487] bond0 (unregistering): Released all slaves [ 697.829189][T16487] bond3 (unregistering): (slave veth9): Releasing active interface [ 697.838011][T16487] bond3 (unregistering): Released all slaves [ 697.959092][T16487] bond4 (unregistering): Released all slaves [ 697.975363][T16487] bond5 (unregistering): Released all slaves [ 697.990404][T16487] bond6 (unregistering): Released all slaves [ 698.117179][T16487] bond7 (unregistering): Released all slaves [ 698.155018][T31753] C: renamed from lo [ 698.220630][T31753] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 698.339536][T31763] geneve2: entered promiscuous mode [ 698.357459][T16487] tipc: Left network mode [ 698.390690][T31762] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 698.503078][T16487] IPVS: stopping backup sync thread 21777 ... [ 698.767118][T31787] __nla_validate_parse: 7 callbacks suppressed [ 698.767140][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6967'. [ 698.817257][T31787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6967'. [ 698.975936][T31787] gretap0: entered promiscuous mode [ 699.051300][T31787] gretap0: left promiscuous mode [ 699.231842][T31810] pim6reg: entered allmulticast mode [ 699.389722][T31812] syzkaller0: entered promiscuous mode [ 699.396105][T31812] syzkaller0: entered allmulticast mode [ 699.472784][T31822] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 699.482513][T31826] netlink: 'syz.3.6973': attribute type 5 has an invalid length. [ 701.700188][T31834] bridge0: port 3(ipvlan2) entered blocking state [ 701.722357][T31834] bridge0: port 3(ipvlan2) entered disabled state [ 701.746967][T31834] ipvlan2: entered allmulticast mode [ 701.760239][T31834] bridge0: entered allmulticast mode [ 701.783628][T31834] ipvlan2: left allmulticast mode [ 701.818560][T31834] bridge0: left allmulticast mode [ 701.954329][T31868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6984'. [ 702.025063][T31850] bridge0: port 3(team0) entered disabled state [ 702.032046][T31850] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.039823][T31850] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.190299][T31850] veth0_to_bond: left allmulticast mode [ 702.217586][T31850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 702.232812][T31850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 702.342169][T31850] veth0_macvtap: left allmulticast mode [ 702.348583][T31850] macvtap1: left allmulticast mode [ 702.359214][T31850] geneve2: left promiscuous mode [ 702.375271][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.376505][T31858] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 702.403953][T16487] hsr_slave_0: left promiscuous mode [ 702.418835][T31858] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 702.432602][T16487] hsr_slave_1: left promiscuous mode [ 702.445136][T16487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.447962][T31858] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 702.488786][T16487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.576521][T31881] [ 702.578907][T31881] ====================================================== [ 702.586035][T31881] WARNING: possible circular locking dependency detected [ 702.593091][T31881] syzkaller #0 Not tainted [ 702.597527][T31881] ------------------------------------------------------ [ 702.604548][T31881] syz.1.6986/31881 is trying to acquire lock: [ 702.610618][T31881] ffffffff8f9245f8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 702.619940][T31881] [ 702.619940][T31881] but task is already holding lock: [ 702.627305][T31881] ffff888145ba6070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 702.636630][T31881] [ 702.636630][T31881] which lock already depends on the new lock. [ 702.636630][T31881] [ 702.647033][T31881] [ 702.647033][T31881] the existing dependency chain (in reverse order) is: [ 702.656054][T31881] [ 702.656054][T31881] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 702.664065][T31881] _raw_spin_lock_bh+0x36/0x50 [ 702.669364][T31881] nr_rt_device_down+0x12a/0x720 [ 702.674829][T31881] nr_device_event+0x137/0x150 [ 702.680123][T31881] notifier_call_chain+0x19d/0x3a0 [ 702.685760][T31881] __dev_notify_flags+0x16d/0x310 [ 702.691314][T31881] netif_change_flags+0xe8/0x1a0 [ 702.696780][T31881] dev_change_flags+0x130/0x260 [ 702.702161][T31881] dev_ioctl+0x7b4/0x1150 [ 702.707014][T31881] sock_do_ioctl+0x23e/0x320 [ 702.712127][T31881] sock_ioctl+0x5c6/0x7f0 [ 702.716975][T31881] __se_sys_ioctl+0xfc/0x170 [ 702.722094][T31881] do_syscall_64+0xe2/0xf80 [ 702.727125][T31881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.733544][T31881] [ 702.733544][T31881] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 702.741371][T31881] _raw_spin_lock_bh+0x36/0x50 [ 702.746755][T31881] nr_rt_device_down+0xa9/0x720 [ 702.752130][T31881] nr_device_event+0x137/0x150 [ 702.757421][T31881] notifier_call_chain+0x19d/0x3a0 [ 702.763054][T31881] __dev_notify_flags+0x16d/0x310 [ 702.768610][T31881] netif_change_flags+0xe8/0x1a0 [ 702.774074][T31881] dev_change_flags+0x130/0x260 [ 702.779450][T31881] dev_ioctl+0x7b4/0x1150 [ 702.784309][T31881] sock_do_ioctl+0x23e/0x320 [ 702.789430][T31881] sock_ioctl+0x5c6/0x7f0 [ 702.794279][T31881] __se_sys_ioctl+0xfc/0x170 [ 702.799397][T31881] do_syscall_64+0xe2/0xf80 [ 702.804426][T31881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.810839][T31881] [ 702.810839][T31881] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 702.818755][T31881] __lock_acquire+0x15a5/0x2cf0 [ 702.824128][T31881] lock_acquire+0x106/0x330 [ 702.829157][T31881] _raw_spin_lock_bh+0x36/0x50 [ 702.834448][T31881] nr_remove_neigh+0x25/0xe0 [ 702.839558][T31881] nr_add_node+0x1d9f/0x2570 [ 702.844674][T31881] nr_rt_ioctl+0xcb0/0xdf0 [ 702.849617][T31881] sock_do_ioctl+0x101/0x320 [ 702.854736][T31881] sock_ioctl+0x5c6/0x7f0 [ 702.859586][T31881] __se_sys_ioctl+0xfc/0x170 [ 702.864704][T31881] do_syscall_64+0xe2/0xf80 [ 702.869730][T31881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.876153][T31881] [ 702.876153][T31881] other info that might help us debug this: [ 702.876153][T31881] [ 702.886379][T31881] Chain exists of: [ 702.886379][T31881] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 702.886379][T31881] [ 702.900201][T31881] Possible unsafe locking scenario: [ 702.900201][T31881] [ 702.907648][T31881] CPU0 CPU1 [ 702.913009][T31881] ---- ---- [ 702.918371][T31881] lock(&nr_node->node_lock); [ 702.923138][T31881] lock(nr_node_list_lock); [ 702.930339][T31881] lock(&nr_node->node_lock); [ 702.937627][T31881] lock(nr_neigh_list_lock); [ 702.942305][T31881] [ 702.942305][T31881] *** DEADLOCK *** [ 702.942305][T31881] [ 702.950441][T31881] 1 lock held by syz.1.6986/31881: [ 702.955544][T31881] #0: ffff888145ba6070 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 702.965303][T31881] [ 702.965303][T31881] stack backtrace: [ 702.971190][T31881] CPU: 0 UID: 0 PID: 31881 Comm: syz.1.6986 Not tainted syzkaller #0 PREEMPT(full) [ 702.971209][T31881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 702.971220][T31881] Call Trace: [ 702.971227][T31881] [ 702.971235][T31881] dump_stack_lvl+0xe8/0x150 [ 702.971257][T31881] print_circular_bug+0x2e1/0x300 [ 702.971279][T31881] check_noncircular+0x12e/0x150 [ 702.971302][T31881] __lock_acquire+0x15a5/0x2cf0 [ 702.971327][T31881] ? nr_remove_neigh+0x25/0xe0 [ 702.971340][T31881] lock_acquire+0x106/0x330 [ 702.971356][T31881] ? nr_remove_neigh+0x25/0xe0 [ 702.971371][T31881] ? nr_add_node+0xcce/0x2570 [ 702.971392][T31881] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 702.971415][T31881] ? nr_remove_neigh+0x25/0xe0 [ 702.971428][T31881] _raw_spin_lock_bh+0x36/0x50 [ 702.971446][T31881] ? nr_remove_neigh+0x25/0xe0 [ 702.971460][T31881] nr_remove_neigh+0x25/0xe0 [ 702.971474][T31881] nr_add_node+0x1d9f/0x2570 [ 702.971497][T31881] ? dev_get_by_name+0x21/0x200 [ 702.971514][T31881] ? dev_get_by_name+0x21/0x200 [ 702.971530][T31881] ? dev_get_by_name+0x21/0x200 [ 702.971545][T31881] ? nr_call_to_digi+0x136/0x1b0 [ 702.971568][T31881] nr_rt_ioctl+0xcb0/0xdf0 [ 702.971594][T31881] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 702.971620][T31881] ? apparmor_capable+0x137/0x1a0 [ 702.971639][T31881] ? capable+0x88/0xe0 [ 702.971655][T31881] ? nr_ioctl+0x1b1/0x3b0 [ 702.971674][T31881] sock_do_ioctl+0x101/0x320 [ 702.971693][T31881] ? __pfx_sock_do_ioctl+0x10/0x10 [ 702.971709][T31881] ? do_futex+0x333/0x420 [ 702.971731][T31881] sock_ioctl+0x5c6/0x7f0 [ 702.971748][T31881] ? __pfx_sock_ioctl+0x10/0x10 [ 702.971764][T31881] ? __fget_files+0x2a/0x420 [ 702.971782][T31881] ? __fget_files+0x3a0/0x420 [ 702.971800][T31881] ? __fget_files+0x2a/0x420 [ 702.971819][T31881] ? bpf_lsm_file_ioctl+0x9/0x20 [ 702.971836][T31881] ? __pfx_sock_ioctl+0x10/0x10 [ 702.971858][T31881] __se_sys_ioctl+0xfc/0x170 [ 702.971882][T31881] do_syscall_64+0xe2/0xf80 [ 702.971903][T31881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.971919][T31881] ? trace_irq_disable+0x37/0x100 [ 702.971939][T31881] ? clear_bhb_loop+0x60/0xb0 [ 702.971957][T31881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.971972][T31881] RIP: 0033:0x7fc6cd59acb9 [ 702.971988][T31881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.972002][T31881] RSP: 002b:00007fc6ce440028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.972018][T31881] RAX: ffffffffffffffda RBX: 00007fc6cd816180 RCX: 00007fc6cd59acb9 [ 702.972030][T31881] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000005 [ 702.972041][T31881] RBP: 00007fc6cd608bf7 R08: 0000000000000000 R09: 0000000000000000 [ 702.972051][T31881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.972061][T31881] R13: 00007fc6cd816218 R14: 00007fc6cd816180 R15: 00007ffcf8625768 [ 702.972079][T31881] [ 703.343908][T31885] netlink: 'syz.2.6989': attribute type 21 has an invalid length. [ 703.352202][T31885] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6989'. [ 703.374446][T31885] netlink: 'syz.2.6989': attribute type 6 has an invalid length. [ 703.427218][T31890] netlink: 'syz.2.6989': attribute type 6 has an invalid length. [ 703.758010][T16487] team0 (unregistering): Port device team_slave_1 removed [ 703.797403][T16487] team0 (unregistering): Port device team_slave_0 removed [ 704.116833][T14988] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.161981][T14988] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.199478][T14988] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.352782][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 704.387252][T16487] IPVS: stop unused estimator thread 0...