last executing test programs: 7.617063029s ago: executing program 0 (id=9327): socket$inet(0x2, 0xa, 0x400) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x26, 0x40, 0x32, @local, @local, 0x700, 0x700, 0x6, 0x9}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0xa, [@union={0x1, 0x4, 0x0, 0x5, 0x0, 0x4, [{0x0, 0x1, 0x3ff}, {0xd, 0x0, 0x5}, {0x1, 0x1, 0x2}, {0x6, 0x2, 0x97}]}, @restrict={0xf}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x4}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x2e, 0x0, 0x2e, 0x30, 0x0, 0x30, 0x2e, 0x0]}}, &(0x7f0000000300)=""/156, 0x86, 0x9c, 0x1, 0x3}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x10000, '\x00', r1, r2, 0x23, 0x5, 0x200001}, 0x50) 7.388147283s ago: executing program 0 (id=9330): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f00000000c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000020601080000000000000000fdff81a907800800bd9a35589621102605000a00070000000500040000000000090000000000000000"], 0x44}}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x12a8, r1, 0x8, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_OURS={0x127c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "52d8edcf90aff2e76ac1fbf9966c0e039cc785aff17120b23fb68d1da793f51c1177af292c65b9d14a85313f4012ca5fbcd36986800b5b84d24084dc0f2399f27139f045e098addaa13eb1b7da3a73c5591402819b7b8c3f7c6f5ca8ca9c253e9442040bf87d4f0f0edbd3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x1a, 0x5, "fa0a6ec63b4ee95378862ca657056a48e6a14edad8b0"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x1c4, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+].+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '!].:^-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xe7-)$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ':^%:+^A@\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ns/ipc\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ',+)]@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\x84-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'ns/ipc\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '[`+/&-:+\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3b4b}]}]}, 0x12a8}}, 0x0) 7.255555248s ago: executing program 0 (id=9334): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x18, 0x6, 0x6) sendmmsg(r1, &(0x7f0000000c80)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=']', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x30, 0x84, 0x1, "59766fe282f0381b5cc7a195cb5ade0d64bc2d9ad30419f432"}], 0x30}}], 0x2, 0x10040000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073797a30000000000900010073797a300000000008000a400400000420000000080a01040000000000000000010000000900010073797a30"], 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x401000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x28, 0x55007}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x406}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x80) 6.874223471s ago: executing program 0 (id=9339): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)={0x180, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x96}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_virt_wifi\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x180}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000409d14965405e61f00000000000000000000dfe49788a94607619c7cf4020000000c0004802800018008000100666962001c00028008000240000000020800014000000000080003400000002f0900010073797a30000000000900020073797a320000000014000000110001000033dbdcb0dbd43e8bde79d6a46fb7e0dd9156ea900b05478cd64e2a4a5c3c31eb35954eee141c40c403223f3cdb5ff7ddc98ff8226c41c02c163ff22e5231d90148f025ae29ccb0ec16f4c24deea8765d41814526ecbd0f4c0ea17b7174be41537e188bf856"], 0x80}}, 0x0) 6.663876842s ago: executing program 0 (id=9340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r3, 0x1, 0xff1f0000, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000080)="441f0803003fa419b54ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_opts(r4, 0x0, 0x4, 0x0, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000280)='wg0\x00', 0x4) socket$kcm(0xa, 0x2, 0x88) (async) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x20}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000a9e01919e940e90687e49c8ced675491a84591382674e2db71ce0016375d158247cbd6c8173a25527e9ab6e24a6762549fbe97994c71ccbbbc4d7ebe16f005e25a0f7cb7f72947b4caf5c0da93722a6e8afc37ce5b3a768c3a5241e8bd125fbfce6d0ecdfcd97cf5b25696fb8a9b48adfdd1bc47e77caaf2665dfb060a76913ab472a2acf0cd65ea35a97ef1770a0fc2a4f053dff445ddb8ec5ebe8d37509d1dc761b7a54b9ec1502a1b46f6509949a1febcfd1a560fa173e6fa6920294f1bd0b36af5e7dd29be829f530f38bb23d815a8d1c63701af28bb", @ANYRES16=r5, @ANYBLOB="010128bd7000fddbdf258600000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000039000000050018012f00000008002600a4150000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) (async) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000a9e01919e940e90687e49c8ced675491a84591382674e2db71ce0016375d158247cbd6c8173a25527e9ab6e24a6762549fbe97994c71ccbbbc4d7ebe16f005e25a0f7cb7f72947b4caf5c0da93722a6e8afc37ce5b3a768c3a5241e8bd125fbfce6d0ecdfcd97cf5b25696fb8a9b48adfdd1bc47e77caaf2665dfb060a76913ab472a2acf0cd65ea35a97ef1770a0fc2a4f053dff445ddb8ec5ebe8d37509d1dc761b7a54b9ec1502a1b46f6509949a1febcfd1a560fa173e6fa6920294f1bd0b36af5e7dd29be829f530f38bb23d815a8d1c63701af28bb", @ANYRES16=r5, @ANYBLOB="010128bd7000fddbdf258600000008000300", @ANYRES32=r6, @ANYBLOB="0c0099000000000039000000050018012f00000008002600a4150000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 6.361087457s ago: executing program 0 (id=9343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r1, 0x1, 0x3, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x0, 0x6, "f9ede40e42484bf0233ada9eab58d997553253df4b800c496ea8074c95756149e76b4e82c52759b65c655dde854489cb582c50c02cc9e79fb2a586c6f18f1e449eedd040b83084e70212514c6594"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}], {0x56, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r1, 0x1, 0x3, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x8) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x0, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x0, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0x0, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x0, 0x6, "f9ede40e42484bf0233ada9eab58d997553253df4b800c496ea8074c95756149e76b4e82c52759b65c655dde854489cb582c50c02cc9e79fb2a586c6f18f1e449eedd040b83084e70212514c6594"}, @NFTA_TABLE_FLAGS={0x0, 0x2, 0x1, 0x0, 0x2}]}], {0x56, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}}, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="08008863040002"], 0xfce) (async) 4.154095923s ago: executing program 3 (id=9366): socket$netlink(0x10, 0x3, 0x8000000004) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200040010000800034004000000", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x20, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x20, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4081, 0xff1}], 0x1, 0x5, 0x45) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r3, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000200)={0xee, {{0xa, 0x4e20, 0x7f, @rand_addr=' \x01\x00', 0x75}}, 0x1, 0x6, [{{0xa, 0x4e21, 0xffffffff, @local, 0x5}}, {{0xa, 0x4e21, 0x1000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80d0}}, {{0xa, 0x4e23, 0x51e2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}, {{0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8}}, {{0xa, 0x4e22, 0x5, @private2, 0x5}}, {{0xa, 0x4e24, 0x7ff, @remote, 0x7fff}}]}, 0x390) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f00000005c0)={0x0, {{0xa, 0x4e24, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {{0xa, 0x4e24, 0x2f09, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}}}, 0x108) 4.099762013s ago: executing program 2 (id=9367): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x118, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ARP_SHA={0xa}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xf784}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xe}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8914}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xffffffff}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}, @filter_kind_options=@f_flower={{}, {0x0, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0x0, 0x7, [0xff, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK, @TCA_FLOWER_KEY_ARP_OP, @TCA_FLOWER_KEY_TCP_DST_MASK, @TCA_FLOWER_KEY_ICMPV4_TYPE]}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @mcast2}]}}}]}, 0x48}, 0x1, 0x2}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4b0, 0x320, 0x238, 0xb0, 0x238, 0x148, 0x418, 0x418, 0x418, 0x418, 0x418, 0x6, &(0x7f0000000400), {[{{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x4, @ipv4=@loopback, 0x4e23}}}, {{@ip={@empty, @remote, 0x0, 0xffffff00, 'dummy0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x11, 0x0, 0x50}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x82, 0x2}}}, {{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x8, @rand_addr=0x64010100, 0x4e23}}}, {{@ip={@rand_addr=0x64010101, @loopback, 0xffffffff, 0x0, 'bond_slave_1\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x1, 0x2, 0x60}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp={{0x28}, {0x15, "3ffd"}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x3, 0x2, 0x1, 0x0, 0x6], 0x4, 0x4}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x1ff, {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) (async) r4 = socket(0x10, 0x803, 0x0) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe70, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe44, 0x2, {{{}, 0x0, 0x0, [{}, {}]}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x118, 0x0, 0x320, 0x288, 0x320, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x6, &(0x7f0000000180), {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x2, 0x3, 0x4, 0x1, 0x4, 0x5], 0x4, 0x6}}}, @inet=@rpfilter={{0x28}, {0x18}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff000000, 0xff000000, 'veth0_to_bridge\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x1, 0x4b}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xa, 0x2}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x4, 0x0, 0x2, 0x5, 0x2, 0x3], 0x6, 0x5}}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x7, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x2}}}, {{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0x0, 'bond_slave_1\x00', 'veth0_to_team\x00', {}, {}, 0x73, 0x2, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf8e, 0xffffffff, @dev={0xac, 0x14, 0x14, 0x3c}, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="050000000000000000000900", 0xc, 0x4, &(0x7f00000003c0)={0x11, 0x6, r8, 0x1, 0x0, 0x6, @remote}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000540)={0x8000000000000000, 0x80, 0x8, 0xfcd3, 0x10}) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x20, r10, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x48, r10, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x336b8022}, @ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) (async) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000140), 0x0, 0x2050000, &(0x7f0000000140)={0x77359400}) 3.714278477s ago: executing program 3 (id=9371): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007919a80000000000950000b200000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x30, 0xf, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0x4b}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x9, 0x6, 0x3, 0xfe01, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x86}], &(0x7f0000000180)='GPL\x00', 0x2, 0xb6, &(0x7f0000000440)=""/182, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xc, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)=[{0x1, 0x5, 0x10, 0xa}], 0x10, 0x9}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map, 0x1f, 0x1, 0x3ff, &(0x7f0000000540)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000007c0)={0x8001, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@ifindex, r5, 0x2, 0x202c, 0x0, @void, @void, @value=r7, @void, r6}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r3}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) 3.628296604s ago: executing program 4 (id=9372): r0 = socket$kcm(0x10, 0x2, 0x4) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet(0x2, 0x800, 0x401) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="4c000000150097f87051ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 3.590432556s ago: executing program 2 (id=9373): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) bind$rose(r2, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) syz_emit_ethernet(0x32, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000040)) 3.23589856s ago: executing program 4 (id=9375): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r0 = socket$inet6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x5, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1}]}]}, {0x0, [0x5f, 0x5f, 0xa0]}}, &(0x7f0000000200)=""/146, 0x31, 0x92, 0x1}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000540)="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", 0x118) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_newaddr={0x80, 0x14, 0x800, 0x70bd29, 0x25dfdbfe, {0x2, 0x40, 0xa, 0xc8, r1}, [@IFA_FLAGS={0x8}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x21c}, @IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, @IFA_LABEL={0x14, 0x3, 'gre0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LABEL={0x14, 0x3, 'veth1_to_batadv\x00'}]}, 0x80}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 3.118839187s ago: executing program 2 (id=9376): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x48, 0x0, &(0x7f00000003c0)) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x450, 0xffffffff, 0xffffffff, 0x450, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3}}, [0x0, 0x0, 0xffffff00], [0xff, 0x0, 0x0, 0xffffff00], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x380, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'gre0\x00', {0x3, 0x0, 0x41, 0xd2c, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x5, 'system_u:object_r:getty_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x580) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(0x3) 2.940608153s ago: executing program 1 (id=9377): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x134}}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r2 = socket(0xa, 0x3, 0x9) getsockopt$nfc_llcp(r2, 0x3a, 0x0, 0x0, 0x2000005d) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001700)={0x8, &(0x7f0000001600)=[{0x8000, 0x1000, &(0x7f0000000340)="efaad40e80d7dfa913ad396958a7dbfb743ee6cbc992d78587c1817675f39bfcecf4309edf7f9fe845fc66ab41d3438a5d60316494006897f86cd9a441e938e44f8f71a51f23a33b4cfbf65deeacab27df62b00e9111414036a489d9c3bef9e9ee20664b0f6daa280b3d9c6e50745445caec3760de57c715d9dd6b48b88d8cbc254a1ebc053faa9409a7ceb0c68fa04377bde451391050d90687986d85f2ec677dcf0f4a66e7f3a75853cd77fc08affefc2ab7bc38775cfa3f675440d45f38274a7eb1aa06faf894a7c8ffb58ca5d5b09f002e4ba2f3ce8df8f7accc0b7106412c0148f79f0905cdf3ea2880dee490b6338dc3ecd41e5c9bc3ab6b9cdb2ce5ad953bb056ecd7189c4246b8c7b8163716f7cfb5cb6bb787b2a93fb5de5052c8a78627a8af1b6c2af13a5b6fde3296e176082e6ca78b6469036584e4d6f76a075cd61ee0b5dee85ed397314777b844df13f4ed96a0ccd66bba6022bd135717b75bb4a6adafbc2ab9cb3f26e7c26ef8c1356e75b463a10e86c18dc0d80eb7dc80c9a5be4090047ab4659c7460c25297a1598058ce6cb8664bf99c8f4dcf976d21fa3a85a5f722f75b2855f00442fc5a03038a5eb013a9ec982d7ee0c3d3da45f06ac5c8e6242649ab4ae864b23482feabcd9e5d8eb6f259a72bd0de893dc79b512aaf3afa35a1ec885a6af999a621fb43651995e44e730ae3f97893619f9c2f55b3477bf0ca8b16653104f60519da8d0f0a77c95bbd59823069dc400bb5c6b2a93752008573a36ca72905b2e205c9ed79a1af72a7770d355a6ec78fb50e9789b7884cd9e6585ae29b679b285d8a83b7d93644b892bebff5deb4ed621a361895becebec8fc1777ab807e68998b15bb32132b9a9b71764194af408cc09c5db60af5ae299e1493e241f6ccbdf36b1ae1fb67dd2ad623d4916d12acd17518a1ab8b7cf1e9f1feed905ba198f592ec3c7c4394005cea933608643892cddfc9c800f543f123f0a9c0805414a46a1b4e14482e8aba57fd28c57ced5e852753ac6ac20ebbd018bc1993f59cedb0d29f8f50cc68dec9e8938b3346f2c58fe203671e990e62c03529e04a3566b23c4c450a5da74c2d51ddff372941e811a5985936da7912b55a88287461b85217d731dbf6985b9c624838804c276671fa9f21b17eee76d02fa6a2f76a468113034e58f01093f2273feb1510c5ba76b77e5f1206c538b668656f72f40e7e95d89120faa529d34d50abb69e749367ceff5e2abd1d78dc6883da9a53434b8de26c86ea9cfc9fcff39880fddc9546a0f74c455c50a2c96385e8573dfb0a8b01bdf040a9de19edd0e68a9e70de7f92cac4fb1602bab2a64454349f49a609995061c22f77b9b4a238c0c12bb266d8534ace0715a165432906f0c8f82f79978d2d403052faf98715ff0163683b29e629d1fa41968940206f27bded62184e8d8bad2aa21b1b7fe64563799d11ec1ee53d8936ce94301d0f18e4a398b7f219c4235d72ed32fa094a8eb9d925e054b717df66ba5f7de8b6ba19be33adc7128332b6ed13efcb6598ba58a0eab935483c8646de50640c7be1ba8facc247db876606da51d1dce8835618209fc6c672dc38cdb26801c5416e60065af085f687feb623e737d4752863dca02242c9e124890cfabb58c23ddb4d7a510a3658aa20cdd6c2eea08393b3e084ae2c4d1b5f1f9bf68ec94bf69ba42d0cf94f0665a5595d39da97097645797e9b46c76176675f3ae4187fdbe51102bc3856115843b66f54507a6c368cc5d4d295d05d0b0157a523069c6c1f9a53dd24701129c18a7e55512d27d4ba2c9cda8b1c2d5ceb6b52eebe03e1c494116334e8fb49af4658bd8e35dcc8a6bedd4b73fe4c6c2361132d520eef428aa04bd172594db6b450c894f5f811d0aad502a7105088450be5261276afa60e65fde0d97ead68ffd9f2ae4c7a6a721cd07b4502a158c0ec1837f9f099b8869e301c3ae38181dc8df399b27c21fb05ac2f6aba189d7349569eb58de83fbf7e024a4da8ce1549155b8f9912f888c68177403c6cc58c343e8ae5fc5e989636dd9c7d645801f3c6e749e7e3b580ce9290040c5f2388bc9fd235cc9d56115bf8d1cd426609d46f379c14222fe45101b37d2fa562486cfb9fb8d72505f0c4b34bea961a6482d12224745f34e3f45995a12d929d290fdbfcbc3d5ee10f4c29ee34d1bff199b5429e953dc271b11f0b9c94c89d32255641daed9d9d817007846ff50d301374c5f2ecd841767214290b5ccba67d6fcad19dcc6be163b6b6b430d01fdf3aa1a51698315170f76cc8d3892ac43c31bc909ffbf4fe94ae63538fbf399950afa5074ad933be68d9d0bbcfb0e3b27daafca3096cdd8bcb6a46ccbe92d0d812e413e9ca3801532d6215d16254fac2f135ef5e3c7433ad036efb79534840c44dc75591a078416defcd37a8443920fd3cb7ee4e4140844adf08e9aeaa275d075f426d0e2565f61ca52d265193de0f111cb80416dc31374cd7bf56ec1109da0ead3888679f23ba75f1c20e7eaf10918a0ed8379df836b2a6d3a1ac4f4213f58b2ff7dd94c5b30909b58d6447b4a586280e68c967de2fc13adb0423e8187f4581ac4779183658fd1243aff6c52677d8c07079669f3a99c582a99f82746bcf2f6368129d0a1daec23d7c0a2440340982fd46b4f5ce42f1244e7ecde3d81bc1482ea600c5cef3d3e4f04743f4bc101ef41661f76d8352bed7802a8b3ae4e922bed3f5074a47747bc62a4280bb0e61b48be1a9bdba1591db88899839483be3d903a0d15732d037bb219baddd60aac6cdb3b3e01d439b9341d1025a07053099ddf2a79b6dd32832c2c161d7d2a29b2acb2262b48ead2727c2d8407343e3b339d29d8e136706ade4f17b4da7665868e499cf5c85ee75f42d2c58f800d6bf6c1746466f268b3d909febfd99f0ba8461d011a685903c56011d8152dc3e812abb590f9e57f651cfd23c4e665d4efe3408391932c3b151a9c18431f8b5ea69b4e689d9c3c3578adde9715cbe3ae1de8376ce01715df5053cace51a6bff9b5e1a7069233d53bd374daa11e0866110f07e03e3b75610cbd9261b10cdc1818dc9b4fc4080130246746b32763e9619f69da064f046ee645164d21ce441e6a88df837703e31d36b1c4b63d0aec32cf88005011bc40e9d3fd18de7d2cc2cb9b64a1030f06a0067046286248e74c70039dc2ac3d5e17c9070519710dd950f4e8dcb1d9f612dfba43547c778785f281506a28815460734948fc403c54321179e7ebba3e0abb0255e1c24db7f156d6f9947c5377f03a63743832614da7fd02335dda1d9692f892d1805c8fd4b7b66139ef80965d3be996820ba0ffa67ab04739a3e1ca4ea45111428e0fc39b949e53ea7e978f8e764f71a63d19c8f28d61f230291db8d2dc68ac38da054d29a015fef23208d00a5cf16f04c4cbc879f2cd9d21a616634d996832938035745f15c740de00531848eda731841837cad14a5cc3cc13fb978120b331fa95677ee6fefcba77e63b3b2386b7ac12f1a1f111aa5c1d211abc664dd1cdd0c3c4440975cdaa6b01c01f93fcc410e5f16c8fbcf09764c4c472ac5170facf79f4f85779cde85585c39900e872c0015b9dc4ef202dd0a53e7b1ae3feac4f91f0bd466e6f7d3fdfe43b34c5c1b4da67863d83e3a677613573e71f34fcb6818e098dedef0fa3d0c4292840db0437493faac90cd947625723e3e53113ced190d9037f7342116a84b9c7fc142a4740dcedfe170adce712ee7753d36a7c03765feaa3e898a5dda1fc8c11dbcf24c60effed730491dddabd4b782b2cb62a2b7bbfedfb447429e8b59db7b4030695f9a3c12b0b5ede9550106758e6cc3ca6ee66a17b436dc990e5a9685018b76a21d3ceee00da47c9e5cb39a550a36a619c1cd22a28fb814ec516dbc2c854834219c4467c1d4341c081d66b26ca86732aacbad3b0cc221615d3d660280b5e2663ec8657bfff2e604a0ea4ab8c3c63f04c78845f76b32e924f99955d38bcd7fe032b341068908bd4aa6f4cec99f2ab8f9fe5c8c0bb8a6e0673ac55ff5ebdb58784d1e12a049947008307601d7d21c9020502a4fa4a28f9fe1d8940dee859b5345f69a5133204125c6bb37e659c9633bfe7ce68520bdf43dfe95894e879c570f85fcdf3f3a0b36eec2b09f3859f0ebf7fa5eccb58f782cf036111b28263acb21aad5c776755567006e573d05375d4f157e4d0d4ae04d26d895ea230e4aecb336563cc2564a6232170878283730b6a9041d522f4b0279a49a45d071f7b5f9442d56331a679d3992db04d173f19a95fea0a99a5675dbeaeb0c37744d0ec3267a886d632e5988af2503a4dd0b520ccfbc77221fb7da71af1e9b3d7b8e593a836a45a2b77ac1b0712c6103440ab3fa955ede2aa697915de49545018b3d50a86f5047b9f33d28cd1a17bda9630acfd6413722823d642ebf98e9e4f680cc55872f2e55202ed85650ba5b6bedd4da7117416c4d0284e15f4b532c168badb30ae4570d17875a98342b9921cc7b38fcff61dfdac803d4c747581ba315cdb3aadc459b827004aaa240498a25bdbdca88419b65791f33e6c2e083068c5f34906de551d4dd105822c11a19bf2e9786645c51f6c02aeadd16732855f5a0bba2665248fff2d365f76ab21f4adaa9edb8237c45af38ac0f8ff9ebd6667cedda1da35dcdcc15d52f09093592878ca0d8f58c75548452933e53db4999713ce5019cb337a1d80e5a3219405ca6ba7e539b3a992f29ae44ba115f64859d644029404e55b1c7df80dd9300c6ebff533218b24e1ff2f0bd51d782f184a17935903b781ae6c90d4f8c249d614ba2e02db17eee85e0ca85194e6f321da973d0c183a48065862aadfde5c04d7fb6c5e7e8541076bd7f7b7caa0e0f0615e4e6a3ecd27989074098f2ea3c37521622e66891ed8cac4544b482af612ba3c12ffa47e3d829079551d876c636b8be15cd38f501c52c521b6b76c6afb40fdb8c3ea8e2d80dfc2c2c10b2e4ed4dcfafe6bd56ae338be4636b419eab38ebe9cdc4c320429876cadfffd34ba3807a5956e4576f612bce7c5c325aa8942b1c2b537c165315e0ae6536c2189bc0413788e97a163294fca354ee79c5ea685781137885498c5f1f5e18996bab91e523f371114579cb22d6f71b2e12c2464c5cde20862d563cc6e93e3e4f279c2eb51738da44e620de29285b93e0562639d6dc0b0347bd1825148f4c4dbb6a143a0409849311ea976a2441ede5a8c46f3a25425cc4ebf4174723cc7e991202fbd024ecfa55c9f9520db4be039022ec120f6e34225fba907b50a6007bd2822d12993bb2ddb74cd199864a013f4417db70c3f0b73383ba43f62d84482ddcb7ffce765b1ebccb97352472d37bfada7865291014c3c816d383ae05afc9d7a1b116161ee446bb5bee77660469cdbd3388aa8715e608f9998c3da638f367b82db0ec9f3ff968082c83763e316cd50e46eb9a1e6a91806b226500ee3e878a9d5ff654cc0de95a2be60ae23768d739c84cd0bce8f1401dcf02010a304f319fc4d139d16f901361320e299063e9c3528a1634dc9cf0b207aa772d202fba50650e5c30938ec711e4373e1c8819bee092e2e78755993de948c395f2757034ce646b2e33fd76361aa520efc5b2df169b55e430e731f4eb8e75c37c474e9acc4245f97cab09b61f5ffb59c0c005325b7e577e695763f797b2892110d5f5456948cda6bfa99e051ec1d57880037008de15d859a499377b4b20692ec2e07b1cc85fa6f484e1b9fd1cfb51fb1b2cf56a17969c5584e6f5ca", 0x0, 0x1}, {0x9, 0x66, &(0x7f0000000080)="efad78e3b9c21e200a7ad23b73fc4d0258df501a0923569d72136e00cb38f37746d443f9abce027a004d04a84ba4088b71ba7626e7597a927b001b2104937a03bb2f8c868a40e479c972b7c0d94d775d31ea8f94f24452c4b6f3bafcd6f67ef61f92f7afc366", 0x0, 0x1}, {0x6, 0xdb, &(0x7f0000000100)="6b41930bc5809a40f644c293f9c6a61d1ceea500d9943457845fa902c7500862672cc4f49dd8dad2d1428dfb6afea07dd82a47eacaa53ad36b9dfca1371d32fb6d6069ab35b34e8419d82a611e9963741ab82caa93726ba695089f371bbef7bc3388d18662361771f3c86c501db0b5aba8461017116ed8b1f98f064aabfdbe30b6a4bcaf27870ea03a9d72b50ea07bfba687f9e568954b0b1792be85ab790f19de35f29b05544aa19c0c62c621f5239eb828056649b42016e256d8be0130327012d36c48be818c52d3b9ef936b5403638e926df9332dcc0ea4d373", 0x0, 0x1}, {0xb, 0xdd, &(0x7f0000000200)="9d0cf594e082da4e5453b051a30468504b790292fbceebb3a68b7b383b25279c30dfbcdf0cbb7332cf97b96caf865724c607ef378005b2f78af0c811f47412b1ad3e7e2892227d2a02fa096e6098537133a91b2897970bd9cdb12d906da9874564cc0fa86ba12ece1764e64cfb50f3d0810d5e16533053828fc45a9d9b809615fb98054657ffcb1680dee12028132867a9dd71bbde03c468967bc63ba99142906cbbd2b47520ec8a55e731aca5595f482e8ea3ec03859dd23f0d2e838662b328b36d5a8a36a79499908935039eb807b3c23c221908cfbea2bccd9b15e1", 0x0, 0x1}, {0x800, 0xe9, &(0x7f0000001340)="7ccb20132c9fa9fb10e82eb71518ea7df4edbd541ee8451a4a3d944424d19475cf39b84ed72040c697e11357c716599e36734ef09b4de6b34287b14d92301bface24af4bca168851a6fc404131c27b56d970e4ffd100ec57b8e569e26c813d10744a8449046176ec0a630039a87beaffadf44eb1a5dd91bee4ed96282b7a04f9312d16c41bdefd44835e6504fb6d731bf468ef5ab0b262b50e92664a5b4ae625ed8f0ed04e31d8a63279ad9eb73f14decc223da46b4b85d0bb7de19103bea530303044abb4c38b259acee6ab298d13072ef7cfa7fa29cc0b09256478e7ca6019e6d010947f94a5e7c5", 0x1, 0x1}, {0x6, 0xa2, &(0x7f0000001440)="acd01eabe6d21035bbd8498e7b308f6d9bf4c1f3090f85811f6bb4c8ac0bc131de5256ce41f0e43ea2dd6b003f1dd94c6dc6b536a401bd8dba44a1aad92f59023617ba55a8c69769a11bfe3f215a2006e3c14b5ba26c49a6dd52a7c2ce912f430936d5114555a52dc49451740454a7035e6c74675028c41ad500813f869d883b43bd18b4365d327c8c071e5463e9e2abf5865fab80b6f1bb1edfd5105310f6309ce3", 0x0, 0x1}, {0x7, 0x72, &(0x7f0000001500)="f2e1f1ffbb403b60bcdb5feb9646bd4722e143ade38624f1669b79a13d8b40a857eff9b2c0f49e484f44223a9666ecf1818dde1eaed5b1c7233cf473b303d633c5ce24827c4bd6d02825e778318aeda30625e12ac5ca68fac8df6390b53150bc223083a54f42ea5bcff12f5943dbf57ef89a", 0x1, 0x1}, {0x8, 0x5f, &(0x7f0000001580)="9dff92a10c3ef34c7b633b0aadbb1798f660b0fd1006ab767b6e3bae263b75938075ec25a81704704ae37c04aef89567451f376aba09f250bdde7a5dfb1f4fc08f3a436282e37d978f4e913b47833d09dd1f627c69ac20c2061e7f9c920ad3", 0x1, 0x1}]}) 2.812892554s ago: executing program 4 (id=9378): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000180)={0x3, @null}) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000190001000000000000000000802000000004e2da69ed33760d0a50000500000000"], 0x1c}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0xfffffff8, 0x8, 0x7, 0x100, 0x1, 0x1}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) getsockopt$inet_buf(r2, 0x0, 0x27, &(0x7f0000000080)=""/177, &(0x7f0000000300)=0xb1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f00000002c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x7fffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 2.799486991s ago: executing program 2 (id=9379): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000026000100fdff0700001000000400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2.73901515s ago: executing program 3 (id=9380): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x30}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="2f00000000000000000000007c5ac245b4c865864c48c29578a73db62bb9b6200243529f302dee1ad5254423660448c7aa19b3830d9759c5926958fd77b56b1b9d131900fd14a556c81638728fbee38d9ce66cefd2c4fadb092a1f8e255a3bb604a163f341bf5a7bad8af7a738cb69d899a906d32c8a7adbd63f233257ffde5656e1a0428e97cc628ec43186388726188c13a12e18d2d1bfad467e7f1a788432cd9b1c905d0612ed51d410cbb625da2fc30cb7ece3b74ec9a50d30dc3dacb6e230a4a34c2785dcd43716673454904230a5617f463b482e534a773f5467e628d92feb42", @ANYRES32=r8, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xf}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x803, 0xd73, 0x6, 0x80, 0x404}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4001}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x60, r14, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r15}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2.564494949s ago: executing program 2 (id=9381): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="0008000000000000400034801400350076657468315f766c616e0000000000001400350076657468305f746f5f7465616d00000014003500776c616e3000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000100)={'wg1\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305839, &(0x7f0000000000)={0x5c, 0x3, 0x0, 0x0, 0x0, 0xf0}) r7 = socket(0x15, 0x5, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_buf(r7, 0x29, 0x4b, &(0x7f0000000080)=""/22, &(0x7f00000000c0)=0x16) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) connect$rose(r5, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 2.56422094s ago: executing program 1 (id=9382): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.539771515s ago: executing program 4 (id=9383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8000000000000001}, {0xc, 0x90, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x200000a0) 2.434348616s ago: executing program 3 (id=9384): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r9, {0xa, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x3, 0x2, 0x1}, 0xffffffff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r12, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x1, 0x0, 0x4], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}]}}]}, 0x8c}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r10, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="27030200000314000e00203c0024000000000006", 0x14}, {&(0x7f00000022c0)="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", 0x30b}], 0x2}, 0x4041) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x2458a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15], 0x44}}, 0x884) 2.296099917s ago: executing program 4 (id=9385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket(0x10, 0x803, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000000)=0xf3f, 0x4) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x4a, &(0x7f0000000600)=0x3fa, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r11, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r12, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) sendto$packet(r8, &(0x7f0000000240)="3f031c0003", 0x5, 0x0, &(0x7f0000000540)={0xc9, 0x0, r12, 0x1, 0x0, 0x6, @multicast}, 0x14) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x3, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0x1, 0x8, 0x4, 0x1ff}, 0x2}}]}, {0x4}, {0xfffffffffffffdbb, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r15, 0x3e}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163c0000800000827600"/38, 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x8}], 0x2}, 0x40) 2.274599795s ago: executing program 1 (id=9386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="140000000400000004010000010000000000aa00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r1 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x0, 0x9, 0x6, 0x1, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x8, 0x8, 0xfffffe6f}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r2, 0xffffffffffffffff, 0x1}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) close(0x3) recvmmsg(r3, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000e40)=""/240, 0xf0}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000003bc0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/40, 0x28}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x7}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}], 0x11, 0x2120, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f8ffff"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000080)=0x71) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYRESOCT=r4, @ANYRES32=0x0, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x800) write$nci(r8, &(0x7f0000000840)=ANY=[@ANYBLOB="610507"], 0x1a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$kcm(0x29, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@delqdisc={0xe4, 0x25, 0x300, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0x7}, {0xfff2, 0xfffb}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x73, 0x1, 0x40, 0xc, 0x1, 0x0, 0x80, 0x2}}, {0x8, 0x2, [0x100, 0x6]}}, {{0x1c, 0x1, {0x2, 0x7f, 0xc3, 0xcf, 0x0, 0x5, 0x7fffffff, 0x2}}, {0x8, 0x2, [0x8, 0x9f2f]}}, {{0x1c, 0x1, {0x4, 0x6, 0x7, 0x5, 0x2, 0x200, 0x7, 0x7}}, {0x12, 0x2, [0xfed1, 0x2, 0x200, 0xff, 0x9, 0x3, 0x6]}}]}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x7, 0x481, 0x3, 0x6, 0x6, 0x3, 0x0, 0x81}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7ff}]}, 0xe4}}, 0x0) 2.137603805s ago: executing program 2 (id=9387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000f80)=ANY=[@ANYBLOB="40100000", @ANYRES16=r3, @ANYBLOB="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"], 0x1040}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034888a801000000000014"], 0xfdef) 1.976275481s ago: executing program 3 (id=9388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x5}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x48}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000001c0)={0xfffffffffffffffc, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x28, r4, 0x819, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8880}, 0x10) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x407c, 0xe}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8010) 1.910969596s ago: executing program 3 (id=9389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x10}) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000", @ANYBLOB="07b2bab740"], 0x78) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000440)={@val={0x0, 0xf6}, @val={0x2, 0x4, 0x4, 0x9, 0x8, 0x9}, @eth={@remote, @remote, @void, {@mpls_uc={0x8847, {[], @ipv6=@gre_packet={0xc, 0x6, "06641f", 0x44, 0x2f, 0x1, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x3d}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x2, 0x0, 0x1, 0x2, 0x4, 0x6}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x80000000, {{0x0, 0x2, 0x3, 0x3, 0x1, 0x2}, 0x2, {0x61, 0x1, 0x3, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1}}}}}}}}}}}, 0x8c) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="240000002d000100000000000000000008000000", @ANYRES32], 0x24}], 0x1}, 0x0) 1.312739806s ago: executing program 1 (id=9390): r0 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'syzkaller1\x00', {0x2, 0x0, @multicast2}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000340)=@ethtool_coalesce={0xe, 0xfffff800, 0x7, 0x8000, 0x401, 0x8, 0x0, 0x777, 0x9, 0xb, 0x4, 0x8462, 0x3, 0x3, 0x6522f4db, 0x3, 0x400, 0xd, 0xfff, 0x3ff, 0x9, 0x5, 0x7}}) 1.152683641s ago: executing program 1 (id=9391): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x64a3, 0x1ff, {{0x12, 0x4, 0x0, 0x20, 0x48, 0x6a, 0x0, 0x9, 0x4, 0x0, @multicast1, @local, {[@timestamp={0x44, 0x8, 0x79, 0x0, 0x6, [0x5]}, @noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x26, 0x0, 0x8, [0xa02, 0x9, 0x6, 0x40, 0x1a1c3cc3, 0xfbfffffc, 0x5]}, @ssrr={0x89, 0x7, 0xbc, [@multicast1]}]}}}}}) r2 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=@ipv6_delroute={0xbc, 0x19, 0x200, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xd6, 0xfe, 0x3, 0xff, 0x3}, [@RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xc}}, @RTA_PRIORITY={0x8, 0x6, 0x6}, @RTA_EXPIRES={0x8, 0x17, 0x10}, @RTA_METRICS={0x62, 0x8, 0x0, 0x1, "5c61a0eff28d4a0200c661651376954b3ba95f146e9ce831344d421859edf16b8296eea8f00c14871b92132bd6f2265d073ad766bc4e98586143f2535fdcd5b3c07128e1359683b428b4a24cef8977c400aa96e68fda15a0891047f8e300"}, @RTA_IIF={0x8, 0x3, r1}, @RTA_UID={0x8, 0x19, r4}, @RTA_IIF={0x8, 0x3, r5}, @RTA_OIF={0x8, 0x4, r6}]}, 0xbc}}, 0x0) 47.424624ms ago: executing program 1 (id=9392): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, &(0x7f00000001c0)={'ipvlan0\x00', 0x200}) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x2e}, @broadcast, 0x0, "08f09801308e46b761407a1650c20c5083ae4db622e9b76b069f82df4744d54a", 0x2, 0x0, 0x8, 0xfff}, 0x3c) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18176600bf20100000000000954023b8d28b55a0"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000140)) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418000000120800040043000000a80016000a0001400600d4c140e99d5a57dfcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8004cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed92d2f52eb233dcb9ef3d93452a", 0xd8}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r9, 0x108, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x100400d0}, 0x44) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x30, r8, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x30}, 0x4, 0x700000000000000}, 0x40014) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r12, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xfffffffe}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r13 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r13, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r13, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0x60, 0x1dc, @vifc_lcl_ifindex=r2, @broadcast}, 0x10) 0s ago: executing program 4 (id=9393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x190, 0x5802, 0x294, 0x0, 0x294, 0x2d8, 0x325, 0x378, 0x2d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'nicvf0\x00', 'ip6erspan0\x00', {}, {}, 0x32, 0xfd, 0x0, 0x59}, 0x0, 0x128, 0x190, 0x52020000, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x8, 0x3, 0x1, 0x5, 0x5, 0x0, 0x2513097a, 0x0, 0x18}, {0x8000}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x2e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2ac, 0x2, [@TCA_MATCHALL_ACT={0x2a8, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0x128, 0xc, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x80000001, 0x5, 0x0, 0x7fffffff, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xffffff10, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x190, 0x5802, 0x294, 0x0, 0x294, 0x2d8, 0x325, 0x378, 0x2d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @broadcast}, [0xffffff00, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xff000000, 0xffffffff], 'nicvf0\x00', 'ip6erspan0\x00', {}, {}, 0x32, 0xfd, 0x0, 0x59}, 0x0, 0x128, 0x190, 0x52020000, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x8, 0x3, 0x1, 0x5, 0x5, 0x0, 0x2513097a, 0x0, 0x18}, {0x8000}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) (async) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) (async) kernel console output (not intermixed with test programs): cate VQ 0x0 after dequeue, screwing up backlog [ 802.310887][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.469522][ T2025] sctp: [Deprecated]: syz.2.7685 (pid 2025) Use of int in max_burst socket option. [ 802.469522][ T2025] Use struct sctp_assoc_value instead [ 802.669475][ T2039] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7689'. [ 802.842972][ T2046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 803.146139][ T2068] lo: left promiscuous mode [ 803.155281][ T2066] nbd: must specify a size in bytes for the device [ 803.473780][ T2082] syzkaller0: entered promiscuous mode [ 803.920251][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5450 ms [ 803.928438][ C1] lec:lec_tx_timeout: lec0 [ 805.037901][ T5915] net_ratelimit: 5 callbacks suppressed [ 805.037924][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.051981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.358865][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.647270][ T2134] netlink: 'syz.4.7713': attribute type 1 has an invalid length. [ 805.692651][ T2134] 8021q: adding VLAN 0 to HW filter on device bond7 [ 805.713027][ T2139] bond7: (slave bridge0): Enslaving as an active interface with a down link [ 805.733039][ T2134] vlan2: entered allmulticast mode [ 805.738212][ T2134] veth0_to_bond: entered allmulticast mode [ 805.747102][ T2134] bond7: (slave vlan2): Opening slave failed [ 806.086475][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.094998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.152105][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.160637][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.789350][ T2105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 806.915694][ T2161] netlink: 'syz.1.7722': attribute type 5 has an invalid length. [ 806.944600][ T2159] netlink: 'syz.1.7722': attribute type 5 has an invalid length. [ 807.072381][ T2172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7723'. [ 807.122528][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.131382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.246435][ T2184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7726'. [ 807.263083][ T2184] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7726'. [ 807.322789][ T2188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7729'. [ 807.361401][ T2188] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7729'. [ 807.497368][ T2198] syzkaller0: entered promiscuous mode [ 807.515501][ T2198] syzkaller0: entered allmulticast mode [ 807.708735][ T2201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7732'. [ 808.151133][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.167421][ T2239] netlink: 'syz.4.7742': attribute type 1 has an invalid length. [ 808.316555][ T2250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7746'. [ 808.335635][ T2250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7746'. [ 808.369236][ T2254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7748'. [ 808.381620][ T2258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7749'. [ 808.396580][ T2261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7747'. [ 808.408132][ T2261] tipc: Invalid UDP bearer configuration [ 808.408184][ T2261] tipc: Enabling of bearer rejected, failed to enable media [ 808.425871][ T2262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7747'. [ 808.442873][ T2262] tipc: Invalid UDP bearer configuration [ 808.442931][ T2262] tipc: Enabling of bearer rejected, failed to enable media [ 808.511373][ T2258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.568493][ T2258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.733940][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 808.765759][ T2273] syzkaller0: entered promiscuous mode [ 808.774354][ T2273] syzkaller0: entered allmulticast mode [ 808.865198][ T2286] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7757'. [ 809.032083][T17150] nci: nci_rx_work: unknown MT 0x7 [ 809.694150][ T2291] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 809.839046][ T2309] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7761'. [ 810.231491][ T5915] net_ratelimit: 6 callbacks suppressed [ 810.231508][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.246185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.473393][ T5840] Bluetooth: hci1: command 0x0419 tx timeout [ 810.935529][ T2322] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 811.238086][ T2341] x_tables: duplicate underflow at hook 2 [ 811.271521][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.279951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.296138][ T2341] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.7768'. [ 811.431284][T28717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.489897][ T2353] netlink: 'syz.4.7775': attribute type 33 has an invalid length. [ 811.502963][ T2353] syzkaller0: entered promiscuous mode [ 811.508503][ T2353] syzkaller0: entered allmulticast mode [ 811.656277][ T2363] netlink: 'syz.0.7777': attribute type 5 has an invalid length. [ 811.911539][ T780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 811.920092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.023985][ T2385] netlink: 'syz.2.7784': attribute type 5 has an invalid length. [ 812.312255][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.321650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.488445][ T2418] netlink: 'syz.4.7792': attribute type 1 has an invalid length. [ 812.534654][ T2418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.701291][ T2434] bridge6: the hash_elasticity option has been deprecated and is always 16 [ 812.990875][ T2461] __nla_validate_parse: 7 callbacks suppressed [ 812.990898][ T2461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7804'. [ 813.072920][ T2461] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7804'. [ 813.094901][ T2469] tipc: Started in network mode [ 813.132171][ T2469] tipc: Node identity , cluster identity 4711 [ 813.567412][ T2473] netlink: 'syz.0.7806': attribute type 5 has an invalid length. [ 813.584831][ T2476] vxcan1 speed is unknown, defaulting to 1000 [ 813.830021][ T2500] ip6t_srh: unknown srh invflags 4000 [ 813.910315][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 813.918425][ C1] lec:lec_tx_timeout: lec0 [ 814.436058][ T2531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7818'. [ 814.974241][ T2514] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 815.178070][ T2553] netlink: 'syz.0.7823': attribute type 9 has an invalid length. [ 815.202430][ T2556] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7826'. [ 815.233850][ T2565] syz.3.7824 uses old SIOCAX25GETINFO [ 815.259101][ T2556] netlink: 'syz.1.7826': attribute type 21 has an invalid length. [ 815.268140][ T2556] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7826'. [ 815.297363][ T2556] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7826'. [ 815.412915][ T2571] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7827'. [ 815.433475][ T5887] net_ratelimit: 11 callbacks suppressed [ 815.433496][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.448533][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.473965][ T2573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7827'. [ 816.093537][ T2617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7836'. [ 816.143388][ T2626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7837'. [ 816.301545][ T2629] delete_channel: no stack [ 816.323964][ T2629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 816.470554][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.478931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.926875][ T2661] syzkaller0: entered promiscuous mode [ 816.933610][ T2661] syzkaller0: entered allmulticast mode [ 817.515702][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.523894][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.533567][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.670955][T28039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 817.679441][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.422084][ T2725] __nla_validate_parse: 2 callbacks suppressed [ 819.422105][ T2725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7851'. [ 819.608065][ T2744] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7855'. [ 819.907741][ T2764] bond8: entered promiscuous mode [ 820.296805][ T2803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7867'. [ 820.333826][ T2803] netlink: 'syz.2.7867': attribute type 30 has an invalid length. [ 820.345074][ T2807] netlink: 'syz.4.7866': attribute type 3 has an invalid length. [ 820.551902][T28716] net_ratelimit: 6 callbacks suppressed [ 820.551925][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.634011][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.642505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.657065][ T2830] nbd: must specify at least one socket [ 820.798268][ T2821] syzkaller1: entered promiscuous mode [ 820.820315][ T2821] syzkaller1: entered allmulticast mode [ 821.137824][ T2865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7875'. [ 821.275885][ T2883] syzkaller0: create flow: hash 64975431 index 1 [ 821.419227][ T2893] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7880'. [ 821.592603][ T2882] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7877'. [ 821.648355][ T2871] syzkaller0: delete flow: hash 64975431 index 1 [ 821.671836][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.680276][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.720687][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.729125][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.740054][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 822.749249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.593301][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.717116][ T2888] syzkaller0: entered promiscuous mode [ 823.724319][ T2888] syzkaller0: entered allmulticast mode [ 823.838961][ T2907] vxcan1 speed is unknown, defaulting to 1000 [ 824.136858][ T2939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7891'. [ 824.256836][ T2947] netlink: 'syz.3.7894': attribute type 11 has an invalid length. [ 824.272023][ T2938] bond8 (unregistering): Released all slaves [ 824.304834][ T2947] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7894'. [ 824.343411][ T2939] hsr_slave_0: left promiscuous mode [ 824.352844][ T2939] hsr_slave_1: left promiscuous mode [ 824.431708][T17151] bridge_slave_1: left promiscuous mode [ 824.437895][T17151] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.543254][T17151] bridge_slave_0: left allmulticast mode [ 824.549098][T17151] bridge_slave_0: left promiscuous mode [ 824.574968][T17151] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.854503][T17151] bond4 (unregistering): (slave gretap1): Releasing active interface [ 824.896829][T17151] bond3 (unregistering): (slave geneve3): Releasing active interface [ 825.044973][ T2968] netlink: 'syz.1.7898': attribute type 1 has an invalid length. [ 825.055722][ T2968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7898'. [ 825.199415][T17151] bond1 (unregistering): Released all slaves [ 825.225531][T17151] bond2 (unregistering): Released all slaves [ 825.263670][T17151] bond3 (unregistering): Released all slaves [ 825.303895][T17151] bond4 (unregistering): Released all slaves [ 825.329134][T17151] bond0 (unregistering): Released all slaves [ 825.399583][ T2959] gre1: entered promiscuous mode [ 825.411732][ T2959] gre1: entered allmulticast mode [ 825.485857][ T2970] syzkaller0: entered promiscuous mode [ 825.540455][ T2970] syzkaller0: entered allmulticast mode [ 825.594862][T17151] tipc: Left network mode [ 825.786692][ T2995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7902'. [ 825.830497][ T5887] net_ratelimit: 4 callbacks suppressed [ 825.830519][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.845132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.097348][ T3005] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7904'. [ 826.152439][ T2990] tipc: Resetting bearer [ 826.266757][ T3016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7907'. [ 826.633021][T28715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.645348][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.655972][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.666358][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.889652][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.898140][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.965646][ T3045] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7910'. [ 827.253554][ T3059] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 827.270033][ T3059] syzkaller1: entered promiscuous mode [ 827.276754][ T3059] syzkaller1: entered allmulticast mode [ 827.591847][ T3075] netlink: 'syz.1.7920': attribute type 10 has an invalid length. [ 827.616855][ T3075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7920'. [ 827.749033][ T3075] dummy0: entered promiscuous mode [ 827.808594][ T3075] bridge0: port 3(dummy0) entered blocking state [ 827.833889][ T3075] bridge0: port 3(dummy0) entered disabled state [ 827.852464][ T3075] dummy0: entered allmulticast mode [ 827.912888][ T3092] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7922'. [ 827.922492][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.931046][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 828.187759][ T3099] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7924'. [ 828.199439][ T3102] x_tables: unsorted underflow at hook 2 [ 828.218030][ T3102] x_tables: unsorted underflow at hook 2 [ 828.388399][T17151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.407554][T17151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 828.439289][T17151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.456060][T17151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 828.503199][T17151] veth1_vlan: left allmulticast mode [ 828.515899][T17151] veth1_macvtap: left promiscuous mode [ 828.532911][T17151] veth0_macvtap: left promiscuous mode [ 828.553845][T17151] veth1_vlan: left promiscuous mode [ 828.566501][T17151] veth0_vlan: left promiscuous mode [ 828.990990][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7933'. [ 829.239517][T17151] team0 (unregistering): Port device team_slave_1 removed [ 829.699881][ T3175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7939'. [ 829.777585][ T3171] team0: Device ip6gre1 is of different type [ 829.904763][ T3193] netlink: 'syz.4.7941': attribute type 1 has an invalid length. [ 830.121530][ T3204] __nla_validate_parse: 2 callbacks suppressed [ 830.121551][ T3204] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.7946'. [ 830.138977][T17151] IPVS: stop unused estimator thread 0... [ 830.151984][ T3195] syzkaller0: entered promiscuous mode [ 830.157546][ T3195] syzkaller0: entered allmulticast mode [ 830.166037][ T3203] veth1_to_bond: entered allmulticast mode [ 830.213653][ T3203] veth1_to_bond: left allmulticast mode [ 830.368573][ T3212] netlink: 'syz.3.7947': attribute type 11 has an invalid length. [ 830.400304][ T3212] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7947'. [ 830.474338][ T3220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7950'. [ 830.999169][ T3257] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7960'. [ 831.040381][T15338] net_ratelimit: 9 callbacks suppressed [ 831.040402][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.054492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.189786][ T3265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7961'. [ 831.208044][ T3254] syzkaller0: entered promiscuous mode [ 831.219203][ T3254] syzkaller0: entered allmulticast mode [ 831.269296][ T3269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7963'. [ 831.554164][T10549] tipc: Subscription rejected, illegal request [ 831.589799][ T3292] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7966'. [ 832.075675][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.084181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.393642][T10549] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.403109][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.412045][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.123100][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.131968][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.591644][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 833.926093][ T3346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7972'. [ 834.002556][ T3354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7973'. [ 834.288574][ T3375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7976'. [ 834.425974][ T3379] tipc: New replicast peer: 255.255.255.255 [ 834.435698][ T3379] tipc: Enabled bearer , priority 10 [ 834.442211][ T3382] netlink: 'syz.3.7980': attribute type 4 has an invalid length. [ 834.450812][ T3381] netlink: 'syz.3.7980': attribute type 4 has an invalid length. [ 835.051364][ T3415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 835.058751][ T3415] IPv6: NLM_F_CREATE should be set when creating new route [ 835.066097][ T3415] IPv6: NLM_F_CREATE should be set when creating new route [ 835.073405][ T3415] IPv6: NLM_F_CREATE should be set when creating new route [ 835.124848][ T3413] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 835.562873][ T5887] tipc: Node number set to 1 [ 835.735735][ T3449] __nla_validate_parse: 2 callbacks suppressed [ 835.735754][ T3449] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7996'. [ 835.876362][ T3460] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.7998'. [ 836.234193][T15338] net_ratelimit: 8 callbacks suppressed [ 836.234216][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.248249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.556065][ T3494] xt_CT: You must specify a L4 protocol and not use inversions on it [ 836.586793][ T3494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8006'. [ 836.622830][ T3494] netlink: 21 bytes leftover after parsing attributes in process `syz.3.8006'. [ 836.689082][ T3494] netlink: 21 bytes leftover after parsing attributes in process `syz.3.8006'. [ 836.716763][ T3509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8004'. [ 836.763378][ T3509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8004'. [ 836.936545][ T3520] vxcan1 speed is unknown, defaulting to 1000 [ 836.975284][ T3523] netlink: 'syz.3.8013': attribute type 10 has an invalid length. [ 837.008566][ T3523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.059902][ T3523] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 837.138552][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8014'. [ 837.270559][T15338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.279098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.454380][ T3533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8017'. [ 837.513470][ T780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.523309][T28716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.533222][ T2156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.606064][ T3538] netlink: 27 bytes leftover after parsing attributes in process `syz.2.8018'. [ 837.981704][ T3551] IPVS: set_ctl: invalid protocol: 50 172.30.0.1:20001 [ 837.998930][ T3549] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 838.311797][ T2156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.320254][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.633514][ T794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 839.254021][ T3593] syzkaller0: entered promiscuous mode [ 839.288001][ T3593] syzkaller0: entered allmulticast mode [ 839.346505][ T3605] syzkaller1: entered promiscuous mode [ 839.374506][ T3605] syzkaller1: entered allmulticast mode [ 841.301219][ T3620] bridge0: entered allmulticast mode [ 841.491374][ T3605] vxcan1 speed is unknown, defaulting to 1000 [ 841.503617][ T3642] dummy0: left allmulticast mode [ 841.518373][ T3642] bridge0: port 3(dummy0) entered disabled state [ 841.595801][ T3642] bridge_slave_0: left allmulticast mode [ 841.602994][ T3642] bridge_slave_0: left promiscuous mode [ 841.608960][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.654263][ T3642] bridge_slave_1: left allmulticast mode [ 841.660115][ T3642] bridge_slave_1: left promiscuous mode [ 841.691452][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.732319][ T3642] bond0: (slave bond_slave_0): Releasing backup interface [ 841.754385][ T3642] bond0: (slave bond_slave_1): Releasing backup interface [ 841.784773][ T3658] net_ratelimit: 4 callbacks suppressed [ 841.784794][ T3658] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 841.801616][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.809804][ T3642] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 841.831681][ T3657] __nla_validate_parse: 3 callbacks suppressed [ 841.831702][ T3657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8051'. [ 841.891103][ T3657] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8051'. [ 841.974358][ T3663] erspan1: entered allmulticast mode [ 842.036564][ T3665] tipc: Enabling of bearer rejected, already enabled [ 842.061395][ T3665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8052'. [ 842.283970][ T3676] syzkaller0: entered promiscuous mode [ 842.289518][ T3676] syzkaller0: entered allmulticast mode [ 842.313818][ T3678] xt_hashlimit: size too large, truncated to 1048576 [ 842.346518][ T3679] netlink: 'syz.4.8060': attribute type 26 has an invalid length. [ 842.492411][ T3687] netlink: 'syz.1.8062': attribute type 2 has an invalid length. [ 842.511983][ T3687] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8062'. [ 842.621271][ T3686] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8062'. [ 842.661469][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8063'. [ 842.873958][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8066'. [ 842.941825][ T3702] netlink: 'syz.1.8066': attribute type 1 has an invalid length. [ 842.963414][ T3705] No such timeout policy "syz0" [ 842.971429][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8066'. [ 842.992780][ T3702] netlink: 'syz.1.8066': attribute type 1 has an invalid length. [ 843.021298][ T3702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8066'. [ 843.031597][ T3709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8070'. [ 843.053469][ T3709] openvswitch: netlink: Flow actions attr not present in new flow. [ 843.424972][ T3738] netlink: 'syz.0.8076': attribute type 1 has an invalid length. [ 843.451387][ T3738] netlink: 'syz.0.8076': attribute type 1 has an invalid length. [ 843.459183][ T3738] netlink: 'syz.0.8076': attribute type 8 has an invalid length. [ 843.698758][ T3751] syzkaller0: entered promiscuous mode [ 843.707209][ T3751] syzkaller0: entered allmulticast mode [ 843.783499][ T3760] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 844.257741][ T3788] syzkaller0: entered promiscuous mode [ 844.289252][ T3788] syzkaller0: entered allmulticast mode [ 845.229321][ T3858] x_tables: duplicate entry at hook 1 [ 845.273411][ T3860] netlink: 'syz.2.8110': attribute type 1 has an invalid length. [ 845.349557][ T3860] bond6: entered promiscuous mode [ 845.355965][ T3860] 8021q: adding VLAN 0 to HW filter on device bond6 [ 845.411278][ T3868] ipvlan2: entered allmulticast mode [ 845.416650][ T3868] bond6: entered allmulticast mode [ 845.470038][ T3875] netlink: 'syz.4.8116': attribute type 9 has an invalid length. [ 845.487754][ T3860] bond6: (slave bridge7): making interface the new active one [ 845.495873][ T3860] bridge7: entered promiscuous mode [ 845.501656][ T3875] netlink: 'syz.4.8116': attribute type 11 has an invalid length. [ 845.504067][ T3860] bridge7: entered allmulticast mode [ 845.517979][ T3860] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 845.670003][ T3880] openvswitch: netlink: Missing key (keys=40, expected=80) [ 845.759437][ T3882] tc action pedit 'at' offset 6 out of bounds [ 845.949457][ T3903] syzkaller1: entered promiscuous mode [ 845.957467][ T3903] syzkaller1: entered allmulticast mode [ 846.408789][ T3932] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 847.170503][ T3987] __nla_validate_parse: 13 callbacks suppressed [ 847.170526][ T3987] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8151'. [ 847.203371][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8155'. [ 847.249325][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8155'. [ 847.334285][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8155'. [ 847.371488][ T3992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8155'. [ 847.547669][ T4017] validate_nla: 1 callbacks suppressed [ 847.547690][ T4017] netlink: 'syz.4.8159': attribute type 29 has an invalid length. [ 847.592635][ T4017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8159'. [ 847.635306][ T4022] netlink: 536 bytes leftover after parsing attributes in process `syz.1.8158'. [ 847.753667][ T4030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.395885][ T4012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 850.615077][ T4052] netlink: 'syz.0.8167': attribute type 4 has an invalid length. [ 850.630495][ T4052] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8167'. [ 850.645231][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8169'. [ 850.655001][ T4054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8169'. [ 851.140041][ T4090] sctp: [Deprecated]: syz.2.8179 (pid 4090) Use of int in max_burst socket option. [ 851.140041][ T4090] Use struct sctp_assoc_value instead [ 851.243315][ T4100] netlink: 'syz.0.8182': attribute type 1 has an invalid length. [ 851.387450][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.441217][ T4113] netlink: 'syz.2.8184': attribute type 39 has an invalid length. [ 851.449753][ T4112] bridge_slave_0 (unregistering): left allmulticast mode [ 851.466467][ T4112] bridge_slave_0 (unregistering): left promiscuous mode [ 851.474442][ T4112] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.545921][ T4114] tipc: Invalid UDP bearer configuration [ 851.546294][ T4122] netlink: 'syz.0.8186': attribute type 1 has an invalid length. [ 851.551212][ T4114] tipc: Enabling of bearer rejected, failed to enable media [ 851.761410][ T4128] bridge5: entered promiscuous mode [ 851.777614][ T4128] bridge5: entered allmulticast mode [ 852.021718][ T4142] netlink: 'syz.0.8192': attribute type 1 has an invalid length. [ 852.202732][ T4152] __nla_validate_parse: 8 callbacks suppressed [ 852.202754][ T4152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8197'. [ 852.240440][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8195'. [ 852.271746][ T4152] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8197'. [ 852.300274][ T4152] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8197'. [ 852.332874][ T4156] tipc: Enabling of bearer rejected, failed to enable media [ 852.350820][ T4152] netlink: 'syz.1.8197': attribute type 5 has an invalid length. [ 852.375926][ T4152] netlink: 43 bytes leftover after parsing attributes in process `syz.1.8197'. [ 852.376954][ T4157] netlink: 'syz.1.8197': attribute type 12 has an invalid length. [ 852.431682][ T4152] netlink: 'syz.1.8197': attribute type 1 has an invalid length. [ 852.471331][ T4155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8195'. [ 852.487637][ T4157] IPv6: sit2: Disabled Multicast RS [ 852.508606][ T4157] sit2: entered allmulticast mode [ 852.562758][ T4162] netlink: 'syz.2.8198': attribute type 10 has an invalid length. [ 852.663158][ T4162] team0 (unregistering): Port device team_slave_0 removed [ 852.702034][ T4162] team0 (unregistering): Port device team_slave_1 removed [ 852.772127][ T4173] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8201'. [ 852.793921][ T4173] sctp: [Deprecated]: syz.4.8201 (pid 4173) Use of int in max_burst socket option. [ 852.793921][ T4173] Use struct sctp_assoc_value instead [ 853.221078][ T4200] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8208'. [ 853.230636][ T4200] 8021q: VLANs not supported on ip6gre0 [ 853.309724][ T4202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8209'. [ 853.532540][ T4212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8215'. [ 853.596020][ T4212] tipc: Invalid UDP bearer configuration [ 853.596078][ T4212] tipc: Enabling of bearer rejected, failed to enable media [ 853.849072][ T4230] netlink: 'syz.2.8217': attribute type 11 has an invalid length. [ 854.106735][ T4244] bond7: Invalid ad_actor_system MAC address. [ 854.113618][ T4244] bond7: option ad_actor_system: invalid value (1) [ 854.146315][ T4244] bond7 (unregistering): Released all slaves [ 854.336675][ T4253] openvswitch: netlink: Flow key attr not present in new flow. [ 854.958277][ T4292] SET target dimension over the limit! [ 855.143582][ T4299] openvswitch: netlink: Key 2 has unexpected len 160 expected 4 [ 855.180056][ T4308] netlink: 'syz.2.8244': attribute type 4 has an invalid length. [ 855.541379][ T4318] nbd2: detected capacity change from 0 to 63 [ 855.567183][ T51] block nbd2: Receive control failed (result -32) [ 855.575045][ T5840] block nbd2: Receive control failed (result -32) [ 855.585223][ T3521] block nbd2: Send control failed (result -32) [ 855.611245][ T3521] block nbd2: Request send failed, requeueing [ 855.635145][ T11] block nbd2: Dead connection, failed to find a fallback [ 855.648021][ T11] block nbd2: shutting down sockets [ 855.655288][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.668173][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 855.688987][ T3521] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.702240][ T3521] Buffer I/O error on dev nbd2, logical block 1, async page read [ 855.711827][ T3521] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.722388][ T3521] Buffer I/O error on dev nbd2, logical block 2, async page read [ 855.731205][ T3521] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.741474][ T3521] Buffer I/O error on dev nbd2, logical block 3, async page read [ 855.749349][ T3521] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.759039][ T3521] Buffer I/O error on dev nbd2, logical block 0, async page read [ 855.767743][ T3521] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.778692][ T3521] Buffer I/O error on dev nbd2, logical block 1, async page read [ 855.793318][ T3521] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.804391][ T3521] Buffer I/O error on dev nbd2, logical block 2, async page read [ 855.813021][ T3521] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.823752][ T3521] Buffer I/O error on dev nbd2, logical block 3, async page read [ 855.832900][ T3521] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.843420][ T3521] Buffer I/O error on dev nbd2, logical block 0, async page read [ 855.852510][ T3521] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 855.863257][ T3521] Buffer I/O error on dev nbd2, logical block 1, async page read [ 855.872802][ T3521] ldm_validate_partition_table(): Disk read failed. [ 855.898711][ T4336] xt_hashlimit: size too large, truncated to 1048576 [ 855.922016][ T3521] Dev nbd2: unable to read RDB block 0 [ 855.928214][ T3521] nbd2: unable to read partition table [ 855.996998][ T3521] ldm_validate_partition_table(): Disk read failed. [ 856.039767][ T3521] Dev nbd2: unable to read RDB block 0 [ 856.057690][ T3521] nbd2: unable to read partition table [ 856.085665][ T4349] netem: change failed [ 856.175515][ T4353] netlink: 'syz.3.8256': attribute type 21 has an invalid length. [ 856.215783][ T4353] bond9: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 856.227824][ T4353] bond9 (unregistering): Released all slaves [ 856.234621][ T4356] netlink: 'syz.4.8257': attribute type 9 has an invalid length. [ 856.612700][ T4372] netlink: 'syz.2.8262': attribute type 1 has an invalid length. [ 857.156272][ T4390] netlink: 'syz.2.8269': attribute type 4 has an invalid length. [ 857.364966][ T4394] syzkaller0: entered promiscuous mode [ 857.372236][ T4394] syzkaller0: entered allmulticast mode [ 857.459938][ T4411] __nla_validate_parse: 14 callbacks suppressed [ 857.459962][ T4411] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8276'. [ 857.744585][ T4427] netlink: 'syz.4.8280': attribute type 8 has an invalid length. [ 858.278696][ T4461] tc_dump_action: action bad kind [ 858.477823][ T4473] veth0: entered promiscuous mode [ 858.507975][ T4474] veth0: left promiscuous mode [ 858.775078][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8299'. [ 859.175481][ T4502] sctp: [Deprecated]: syz.3.8303 (pid 4502) Use of int in max_burst socket option. [ 859.175481][ T4502] Use struct sctp_assoc_value instead [ 859.423974][ T4515] netlink: 'syz.2.8308': attribute type 8 has an invalid length. [ 859.458724][ T4528] netlink: 'syz.2.8308': attribute type 8 has an invalid length. [ 859.478741][ T4520] netlink: 204 bytes leftover after parsing attributes in process `syz.1.8310'. [ 859.508154][ T4520] IPv6: NLM_F_CREATE should be specified when creating new route [ 859.625194][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8313'. [ 859.707947][ T4540] syzkaller0: entered promiscuous mode [ 859.729357][ T4540] syzkaller0: entered allmulticast mode [ 859.940108][ T4551] syzkaller1: entered promiscuous mode [ 859.958493][ T4551] syzkaller1: entered allmulticast mode [ 860.056908][ T4566] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8320'. [ 860.361529][ T4579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8324'. [ 860.471880][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8326'. [ 860.496958][ T4583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8326'. [ 860.536609][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8326'. [ 860.548012][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8326'. [ 860.598614][ T4589] veth0: entered promiscuous mode [ 860.667917][ T4589] veth0: left promiscuous mode [ 860.774866][ T4598] netlink: 'syz.1.8331': attribute type 1 has an invalid length. [ 861.624080][ T4600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 861.797839][ T4647] tc_dump_action: action bad kind [ 861.931943][ T780] tipc: Subscription rejected, illegal request [ 861.984506][ T4656] syzkaller0: entered promiscuous mode [ 862.002312][ T4656] syzkaller0: entered allmulticast mode [ 862.377099][ T4679] netlink: 'syz.4.8354': attribute type 1 has an invalid length. [ 862.443152][ T4675] netlink: 'syz.1.8352': attribute type 7 has an invalid length. [ 862.655327][ T4696] __nla_validate_parse: 6 callbacks suppressed [ 862.655351][ T4696] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8357'. [ 862.897008][ T4702] bond0: (slave rose0): Enslaving as an active interface with an up link [ 863.026710][ T4704] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.8359'. [ 863.107895][T17317] lec:lec_start_xmit: lec0:No lecd attached [ 863.115421][ T4717] batadv_slave_1: entered promiscuous mode [ 863.128506][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8364'. [ 863.149512][ T4717] syzkaller0: entered promiscuous mode [ 863.163207][ T4717] syzkaller0: entered allmulticast mode [ 863.312649][ T4716] batadv_slave_1: left promiscuous mode [ 863.404033][ T4726] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8368'. [ 863.444040][ T4726] netlink: 96 bytes leftover after parsing attributes in process `syz.2.8368'. [ 863.536985][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8370'. [ 863.562083][ T4732] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8371'. [ 863.575791][ T4732] netlink: Conntrack attr has 4 unknown bytes [ 863.591172][ T4732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8371'. [ 863.605648][ T4736] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8372'. [ 863.682489][ T4740] netlink: 'syz.4.8374': attribute type 21 has an invalid length. [ 863.699146][ T4740] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8374'. [ 863.984959][ T4755] openvswitch: netlink: IPv4 tun info is not correct [ 864.034496][ T4760] sctp: [Deprecated]: syz.4.8381 (pid 4760) Use of int in max_burst socket option. [ 864.034496][ T4760] Use struct sctp_assoc_value instead [ 864.332451][ T4784] netlink: 'syz.4.8388': attribute type 1 has an invalid length. [ 864.357617][ T4781] netlink: 'syz.0.8387': attribute type 1 has an invalid length. [ 864.459162][ T4795] openvswitch: netlink: Key type 30 is not supported [ 865.086157][ T4843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 865.472783][ T4863] vxcan1 speed is unknown, defaulting to 1000 [ 865.614772][ T4818] delete_channel: no stack [ 865.828461][T17151] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 866.143674][ T4894] xt_hashlimit: size too large, truncated to 1048576 [ 866.453129][ T4899] can: request_module (can-proto-0) failed. [ 866.569715][ T4874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.723757][ T4905] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 867.446598][ T4943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 867.670144][ T4956] __nla_validate_parse: 16 callbacks suppressed [ 867.670164][ T4956] netlink: 6036 bytes leftover after parsing attributes in process `syz.4.8443'. [ 867.785292][ T4959] C: renamed from lo [ 867.794270][ T4959] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 867.885688][ T4966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8446'. [ 867.908993][ T4968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8447'. [ 868.124421][ T4988] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 868.232188][ T4992] sctp: [Deprecated]: syz.0.8453 (pid 4992) Use of struct sctp_assoc_value in delayed_ack socket option. [ 868.232188][ T4992] Use struct sctp_sack_info instead [ 868.262310][ T4994] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8455'. [ 868.292914][ T4998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8456'. [ 868.844716][ T5032] netlink: 'syz.0.8466': attribute type 9 has an invalid length. [ 868.854400][ T5032] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8466'. [ 868.880561][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 868.888662][ C1] lec:lec_tx_timeout: lec0 [ 868.911206][ T5034] geneve1: mtu less than device minimum [ 868.933945][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.941632][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.101133][ T5041] netlink: 'syz.0.8470': attribute type 83 has an invalid length. [ 869.145966][ T5046] x_tables: duplicate underflow at hook 2 [ 869.224421][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8461'. [ 869.237209][ T5053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8470'. [ 869.246965][ T5053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8470'. [ 869.423510][ T5058] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 869.443920][ T5058] netlink: 'syz.4.8474': attribute type 1 has an invalid length. [ 869.673807][ T5070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8477'. [ 869.786973][ T5073] team0 (unregistering): Port device team_slave_0 removed [ 869.834987][ T5073] team0 (unregistering): Port device team_slave_1 removed [ 869.909322][ T5072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 870.162551][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 870.225439][ T5102] lo: entered promiscuous mode [ 870.237158][ T5102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.284314][ T5102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.303066][ T5106] netlink: 'syz.2.8489': attribute type 10 has an invalid length. [ 870.402347][ T5114] netlink: 'syz.4.8492': attribute type 1 has an invalid length. [ 870.576210][ T5114] bond8: entered promiscuous mode [ 870.581915][ T5114] 8021q: adding VLAN 0 to HW filter on device bond8 [ 870.589340][ T5121] netlink: 'syz.1.8494': attribute type 4 has an invalid length. [ 870.636789][ T5128] C: entered promiscuous mode [ 870.643702][ T5128] tunl0: entered promiscuous mode [ 870.662169][ T5128] gre0: entered promiscuous mode [ 870.725629][ T5128] gretap0: entered promiscuous mode [ 870.808669][ T5141] x_tables: duplicate entry at hook 2 [ 870.898659][ T5128] erspan0: entered promiscuous mode [ 870.939084][ T5128] ip_vti0: entered promiscuous mode [ 870.971442][ T5138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.277589][ T5187] syzkaller1: entered promiscuous mode [ 871.283376][ T5187] syzkaller1: entered allmulticast mode [ 871.386887][ T5191] netlink: 'syz.0.8509': attribute type 1 has an invalid length. [ 871.413764][ T5190] bond9: option xmit_hash_policy: invalid value (64) [ 871.422957][ T5190] bond9 (unregistering): Released all slaves [ 871.475159][ T5191] bond9: entered promiscuous mode [ 871.485076][ T5191] 8021q: adding VLAN 0 to HW filter on device bond9 [ 871.543340][ T5192] bond9: (slave bridge6): making interface the new active one [ 871.568619][ T5192] bridge6: entered promiscuous mode [ 871.634689][ T5192] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 871.873945][ T5224] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 872.133997][ T5237] netlink: 'syz.3.8520': attribute type 3 has an invalid length. [ 872.942266][ T5279] ipt_REJECT: TCP_RESET invalid for non-tcp [ 873.069056][ T5290] openvswitch: netlink: IP tunnel TTL not specified. [ 873.143270][ T5286] __nla_validate_parse: 17 callbacks suppressed [ 873.143294][ T5286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8533'. [ 873.179903][ T5286] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 873.199521][ T5286] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 873.208845][ T5286] gretap2: entered promiscuous mode [ 873.215134][ T5286] gretap2: entered allmulticast mode [ 873.415205][ T5297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.343065][ T5303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8539'. [ 875.723252][ T5269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 875.733053][ T5280] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8532'. [ 875.744962][ T5280] netlink: 'syz.4.8532': attribute type 2 has an invalid length. [ 875.910249][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 875.918321][ C1] lec:lec_tx_timeout: lec0 [ 875.933108][ T5309] syzkaller0: entered promiscuous mode [ 875.939753][ T5309] syzkaller0: entered allmulticast mode [ 875.973274][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8542'. [ 875.993839][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8544'. [ 876.140029][ T5323] netlink: 'syz.1.8546': attribute type 11 has an invalid length. [ 876.182377][ T5323] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8546'. [ 876.252796][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8548'. [ 876.324854][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8550'. [ 876.337846][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8550'. [ 876.350329][ T5333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8550'. [ 876.403057][ T5327] gre0: left promiscuous mode [ 876.408035][ T5327] gre0: left allmulticast mode [ 876.415035][ T5327] dummy0: left promiscuous mode [ 876.444259][ T5327] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 876.562286][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.607037][ T5345] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 876.692067][ T5350] xt_socket: unknown flags 0x50 [ 876.707187][ T5347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 876.778813][ T5355] hsr_slave_0: left promiscuous mode [ 876.842826][ T5355] hsr0 (unregistering): left allmulticast mode [ 877.213348][ T5385] bridge0: port 3(gretap0) entered blocking state [ 877.234666][ T5385] bridge0: port 3(gretap0) entered disabled state [ 877.249184][ T5385] gretap0: entered allmulticast mode [ 877.291210][ T5390] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 877.310598][ T5394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.359855][ T5398] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 877.443977][ T5400] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 877.534942][ T5406] IPv6: addrconf: prefix option has invalid lifetime [ 877.879127][ T5428] netlink: 'syz.4.8581': attribute type 1 has an invalid length. [ 878.382678][ T5462] bridge_slave_0: left allmulticast mode [ 878.388383][ T5462] bridge_slave_0: left promiscuous mode [ 878.401180][ T5462] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.447525][ T5462] bridge_slave_1: left allmulticast mode [ 878.471222][ T5462] bridge_slave_1: left promiscuous mode [ 878.477264][ T5462] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.518693][ T5462] bond0: (slave bond_slave_0): Releasing backup interface [ 878.535897][ T5462] bond0: (slave bond_slave_1): Releasing backup interface [ 878.564217][ T5462] team0: Port device team_slave_0 removed [ 878.592065][ T5462] team0: Port device team_slave_1 removed [ 878.609403][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.622102][ T5462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.651322][ T5462] bond1: (slave veth3): Releasing active interface [ 878.710131][ T5462] bond4: (slave bridge2): Releasing active interface [ 878.765665][ T5462] bond5: (slave veth5): Releasing active interface [ 878.782777][ T5484] __nla_validate_parse: 10 callbacks suppressed [ 878.782801][ T5484] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8597'. [ 878.813664][ T5462] bond5: (slave veth5): the permanent HWaddr of slave - 36:5d:d6:45:ce:58 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 878.852257][ T5462] gretap1: entered promiscuous mode [ 878.889762][ T5462] bond5: (slave gretap1): Releasing active interface [ 878.899910][ T5462] gretap1: left promiscuous mode [ 878.933721][ T5462] bond6: (slave geneve2): Releasing active interface [ 878.955589][ T5462] bond9: (slave bridge6): Releasing backup interface [ 878.964187][ T5462] bridge6: left promiscuous mode [ 878.972849][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8599'. [ 879.052910][T28039] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 879.077156][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.102597][T28039] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 879.116269][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.126893][T28039] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 879.157080][ T5496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.178234][T28039] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 879.216019][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.265605][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.284590][ T5500] batadv1: entered allmulticast mode [ 879.317316][ T5496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.372104][ T5496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.455969][ T5496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.551752][ T5496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.568375][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.583025][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.599438][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.615117][ T5497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.846188][ T5543] netlink: 'syz.3.8612': attribute type 1 has an invalid length. [ 879.891203][ T5547] pimreg: left allmulticast mode [ 879.922162][ T5549] IPVS: set_ctl: invalid protocol: 47 172.20.20.42:20001 [ 880.242917][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8615'. [ 880.259767][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8615'. [ 880.269936][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8615'. [ 880.280043][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8615'. [ 880.290258][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8615'. [ 880.300105][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8615'. [ 880.310138][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8615'. [ 880.322660][ T5554] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8615'. [ 882.484434][ T5524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.495546][ T5496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.678160][ T5648] vlan2: entered allmulticast mode [ 883.684606][ T5648] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 884.167435][ T5653] __nla_validate_parse: 71 callbacks suppressed [ 884.167461][ T5653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8641'. [ 884.260967][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8641'. [ 906.182630][ T36] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 906.192136][ T36] bridge1 (unregistering): left promiscuous mode [ 906.244812][ T36] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 906.254068][ T36] bridge2 (unregistering): left promiscuous mode [ 906.505109][ T36] bond1 (unregistering): Released all slaves [ 906.519734][ T36] bond2 (unregistering): Released all slaves [ 906.535737][ T36] bond3 (unregistering): Released all slaves [ 906.551829][ T36] bond4 (unregistering): Released all slaves [ 906.569400][ T36] bond5 (unregistering): Released all slaves [ 906.584551][ T36] bond6 (unregistering): Released all slaves [ 906.598710][ T36] bond7 (unregistering): Released all slaves [ 906.613622][ T36] bond0 (unregistering): Released all slaves [ 906.710559][ T36] : left promiscuous mode [ 906.777893][ T36] tipc: Disabling bearer [ 906.784546][ T36] tipc: Left network mode [ 907.243943][ T36] hsr_slave_0: left promiscuous mode [ 907.252819][ T36] hsr_slave_1: left promiscuous mode [ 907.283626][ T36] pimreg3 (unregistering): left allmulticast mode [ 907.541966][T17151] smc: removing ib device syz2 [ 907.627721][ T5710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8652'. [ 908.157927][ T5733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8657'. [ 908.514897][ T5766] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.8663'. [ 908.915861][ T5778] syzkaller1: entered promiscuous mode [ 908.929254][ T5778] syzkaller1: entered allmulticast mode [ 909.035033][ T5786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8670'. [ 909.209268][ T5791] tipc: Enabling not permitted [ 909.216230][ T5791] tipc: Enabling of bearer rejected, failed to enable media [ 909.409559][ T5798] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 909.428377][ T5798] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 909.569458][ T5814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8677'. [ 909.605809][ T5810] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.8678'. [ 909.772498][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8679'. [ 909.928088][ T5828] netlink: 'syz.2.8683': attribute type 11 has an invalid length. [ 910.207414][ T5843] openvswitch: netlink: IP tunnel dst address not specified [ 910.256456][ T5843] netlink: 'syz.3.8688': attribute type 25 has an invalid length. [ 910.324966][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8688'. [ 910.353350][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8688'. [ 910.624761][ T5860] gretap0: left allmulticast mode [ 910.630141][ T5860] bridge0: port 3(gretap0) entered disabled state [ 911.079734][ T5873] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8696'. [ 911.227171][ T5860] bridge_slave_1: left allmulticast mode [ 911.232983][ T5860] bridge_slave_1: left promiscuous mode [ 911.238814][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.270841][ T5860] bridge_slave_0: left allmulticast mode [ 911.276545][ T5860] bridge_slave_0: left promiscuous mode [ 911.300484][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.597869][ T36] IPVS: stop unused estimator thread 0... [ 911.741981][ T5884] syzkaller0: entered promiscuous mode [ 911.757520][ T5884] syzkaller0: entered allmulticast mode [ 913.697100][ T5923] __nla_validate_parse: 3 callbacks suppressed [ 913.697121][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8705'. [ 913.817008][ T5925] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 913.829662][ T5925] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 913.855878][ T5929] netlink: 'syz.2.8708': attribute type 2 has an invalid length. [ 913.874994][ T5929] netlink: 'syz.2.8708': attribute type 2 has an invalid length. [ 914.023680][ T5946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8711'. [ 914.051577][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8713'. [ 914.117460][ T5957] netlink: 'syz.3.8715': attribute type 1 has an invalid length. [ 914.173103][ T5955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8713'. [ 914.403264][ T5967] netlink: 'syz.1.8716': attribute type 4 has an invalid length. [ 914.603446][ T5975] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 914.622091][ T5975] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 914.817271][ T5980] IPVS: Scheduler module ip_vs_sip not found [ 914.979359][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8724'. [ 915.781132][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8738'. [ 915.935403][ T6051] netlink: 'syz.0.8740': attribute type 20 has an invalid length. [ 915.950605][ T6044] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8741'. [ 915.980337][ T6051] IPv6: NLM_F_CREATE should be specified when creating new route [ 916.343038][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8745'. [ 916.822227][ T6093] tipc: Enabling of bearer rejected, failed to enable media [ 917.191421][ T6115] tipc: Enabled bearer , priority 0 [ 917.264153][ T6120] syzkaller0: MTU too low for tipc bearer [ 917.270109][ T6120] tipc: Disabling bearer [ 917.317131][ T6125] netlink: 'syz.0.8759': attribute type 4 has an invalid length. [ 917.551472][ T6141] openvswitch: netlink: IP tunnel dst address not specified [ 917.634521][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8762'. [ 917.845987][ T6150] openvswitch: netlink: Flow actions attr not present in new flow. [ 918.304718][ T6163] syzkaller1: entered promiscuous mode [ 918.310384][ T6163] syzkaller1: entered allmulticast mode [ 920.246576][ T6119] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 920.436599][ T6172] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 920.483404][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8771'. [ 920.698262][ T6190] xt_hashlimit: size too large, truncated to 1048576 [ 920.854754][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8776'. [ 920.894384][ T6202] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8776'. [ 921.308282][ T6233] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8786'. [ 921.454208][ T6245] netlink: 'syz.1.8790': attribute type 1 has an invalid length. [ 921.488390][ T6243] syzkaller0: entered promiscuous mode [ 921.494933][ T6243] syzkaller0: entered allmulticast mode [ 921.553051][ T6245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 921.562845][ T6253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8790'. [ 921.587818][ T6247] bond4: (slave geneve3): making interface the new active one [ 921.598708][ T6253] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8790'. [ 921.610415][ T6247] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 921.619233][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8792'. [ 921.642149][T17150] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 921.651176][T17150] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 921.838510][ T6266] netlink: 252 bytes leftover after parsing attributes in process `syz.0.8795'. [ 923.351007][T17150] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 923.359607][T17150] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 923.505023][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8799'. [ 923.634652][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8803'. [ 923.655586][ T6291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 923.780890][ T6301] netlink: 'syz.4.8805': attribute type 10 has an invalid length. [ 923.796402][ T6299] netlink: 'syz.4.8805': attribute type 10 has an invalid length. [ 923.813495][ T6301] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 923.871445][ T6299] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 924.074321][ T6316] openvswitch: netlink: Invalid VLAN frame [ 924.268422][ T6332] IPVS: Unknown mcast interface: vcan0 [ 924.506260][ T6353] Bluetooth: MGMT ver 1.23 [ 924.718274][ T6364] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 924.728048][ T6364] openvswitch: netlink: Actions may not be safe on all matching packets [ 925.008057][ T6378] macsec1: entered promiscuous mode [ 925.263373][ T6394] netlink: 'syz.4.8832': attribute type 10 has an invalid length. [ 925.498165][ T6402] can: request_module (can-proto-3) failed. [ 925.634521][ T6415] __nla_validate_parse: 7 callbacks suppressed [ 925.634545][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8839'. [ 925.826717][ T6415] bond9: entered promiscuous mode [ 925.836833][ T6415] 8021q: adding VLAN 0 to HW filter on device bond9 [ 925.846774][ T6425] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8844'. [ 925.856871][ T6426] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8844'. [ 925.987311][ T6422] bond9: (slave macvlan2): Opening slave failed [ 926.808066][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8863'. [ 926.832803][ T6492] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8861'. [ 926.841944][ T6492] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8861'. [ 926.856395][ T6492] netlink: 'syz.4.8861': attribute type 6 has an invalid length. [ 926.950980][ T6492] netlink: 'syz.4.8861': attribute type 5 has an invalid length. [ 926.996414][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8862'. [ 927.040207][ T6492] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8861'. [ 927.427846][ T6534] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8868'. [ 927.483290][ T6538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8869'. [ 927.840032][T17317] lec:lec_start_xmit: lec0:No lecd attached [ 927.866176][ T6560] netlink: 'syz.1.8877': attribute type 4 has an invalid length. [ 927.949381][ T6566] netlink: 'syz.0.8878': attribute type 10 has an invalid length. [ 927.960805][ T6564] netlink: 'syz.3.8879': attribute type 1 has an invalid length. [ 927.974458][ T6566] team0: Port device dummy0 added [ 928.068996][ T6574] netlink: 'syz.2.8881': attribute type 2 has an invalid length. [ 928.149437][ T6575] bond10: (slave geneve2): making interface the new active one [ 928.194946][ T6575] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 928.208418][ T780] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 928.218637][ T780] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 928.239045][ T780] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 928.249036][ T780] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 928.358827][ T6591] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 928.376731][ T6579] syzkaller0: entered promiscuous mode [ 928.383822][ T6579] syzkaller0: entered allmulticast mode [ 930.644516][ T6651] bond11: Removing last arp target with arp_interval on [ 930.720942][ T6658] __nla_validate_parse: 10 callbacks suppressed [ 930.720965][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8907'. [ 930.813147][ T6662] veth0: entered promiscuous mode [ 930.841475][ T6662] veth0: left promiscuous mode [ 930.849118][ T6667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8907'. [ 931.054793][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8910'. [ 931.298398][ T6688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8913'. [ 931.831400][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.898017][ T6717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 931.941999][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8924'. [ 931.973465][ T6721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8924'. [ 932.031816][ T6728] netlink: 'syz.1.8926': attribute type 1 has an invalid length. [ 932.039748][ T6728] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8926'. [ 932.051075][ T6728] netlink: 658 bytes leftover after parsing attributes in process `syz.1.8926'. [ 932.070366][ T6728] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8926'. [ 932.143243][ T6732] netlink: 'syz.1.8929': attribute type 1 has an invalid length. [ 932.169639][ T6732] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.8929'. [ 932.259329][ T6736] netlink: 'syz.1.8930': attribute type 10 has an invalid length. [ 932.870312][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 932.878428][ C1] lec:lec_tx_timeout: lec0 [ 932.883172][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 933.076981][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 933.107239][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 933.131076][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 933.161807][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 933.194629][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 933.260452][ T6764] netlink: 'syz.0.8940': attribute type 21 has an invalid length. [ 933.473335][ T6770] openvswitch: netlink: IP tunnel dst address not specified [ 933.646711][ T6756] chnl_net:caif_netlink_parms(): no params data found [ 933.782332][ T6756] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.789750][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.797469][ T6756] bridge_slave_0: entered allmulticast mode [ 933.806255][ T6756] bridge_slave_0: entered promiscuous mode [ 933.815734][ T6756] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.823464][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.833650][ T6756] bridge_slave_1: entered allmulticast mode [ 933.842600][ T6756] bridge_slave_1: entered promiscuous mode [ 933.881554][ T6756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.894852][ T6756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.942179][ T6756] team0: Port device team_slave_0 added [ 933.995744][ T6756] team0: Port device team_slave_1 added [ 934.047997][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.055437][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.083067][ T6756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.097149][ T6756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.116799][ T6756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.154020][ T6756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.282525][ T6756] hsr_slave_0: entered promiscuous mode [ 934.289451][ T6756] hsr_slave_1: entered promiscuous mode [ 934.606485][ T6756] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.629022][ T6756] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 934.754935][ T6756] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.780877][ T6756] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 934.887310][ T6756] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 934.911033][ T6756] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 934.962141][ T6830] mac80211_hwsim hwsim61 syzkaller0: Caught tx_queue_len zero misconfig [ 935.031821][ T6756] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 935.062491][ T6756] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 935.271454][ T51] Bluetooth: hci3: command tx timeout [ 935.407968][ T6756] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 935.454815][ T6756] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 935.475049][ T6756] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 935.486712][ T6756] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 935.713501][ T6756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.739196][ T6756] 8021q: adding VLAN 0 to HW filter on device team0 [ 935.763612][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.770826][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 935.808649][T17150] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.815908][T17150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.069795][ T6888] netlink: 'syz.3.8973': attribute type 1 has an invalid length. [ 936.090741][ T6888] __nla_validate_parse: 14 callbacks suppressed [ 936.090761][ T6888] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8973'. [ 936.112741][ T6892] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8974'. [ 936.148172][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8973'. [ 936.204516][ T6888] netlink: 168 bytes leftover after parsing attributes in process `syz.3.8973'. [ 936.336599][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8976'. [ 936.538453][ T6911] bond8: entered promiscuous mode [ 936.547137][ T6911] bond8: entered allmulticast mode [ 936.557487][ T6911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 936.584832][ T6756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.618219][ T6911] syzkaller0: entered promiscuous mode [ 936.633844][ T6911] syzkaller0: entered allmulticast mode [ 936.685267][ T6911] netlink: 272 bytes leftover after parsing attributes in process `syz.2.8978'. [ 936.793164][ T6926] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8984'. [ 936.818381][ T6756] veth0_vlan: entered promiscuous mode [ 936.829770][ T6926] 0·: renamed from hsr_slave_1 [ 936.838414][ T6926] 0·: entered allmulticast mode [ 936.844473][ T6926] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 936.872509][ T6928] smc: net device wlan0 applied user defined pnetid SYZ0 [ 936.933349][ T6756] veth1_vlan: entered promiscuous mode [ 937.055580][ T6756] veth0_macvtap: entered promiscuous mode [ 937.086616][ T6756] veth1_macvtap: entered promiscuous mode [ 937.096934][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8988'. [ 937.129349][ T6945] nbd: must specify at least one socket [ 937.178510][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 937.252274][ T6954] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.8992'. [ 937.292727][ T6952] netlink: 'syz.2.8991': attribute type 1 has an invalid length. [ 937.306383][ T6756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.355260][ T51] Bluetooth: hci3: command tx timeout [ 937.386765][ T6959] 8021q: adding VLAN 0 to HW filter on device bond10 [ 937.484078][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.587254][ T6971] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8994'. [ 937.599088][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.619464][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.696380][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.910362][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 937.918453][ C1] lec:lec_tx_timeout: lec0 [ 937.975071][ T6997] netlink: 'syz.4.8999': attribute type 7 has an invalid length. [ 938.038148][ T6997] gretap0: entered promiscuous mode [ 938.072089][ T6997] gretap0: left promiscuous mode [ 938.118263][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.145556][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.248850][ T794] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 938.281644][ T794] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 938.376371][ T7004] netlink: 'syz.2.9003': attribute type 1 has an invalid length. [ 938.756815][ T7019] xt_hashlimit: size too large, truncated to 1048576 [ 938.847282][ T7028] netlink: 'syz.0.9009': attribute type 64 has an invalid length. [ 939.436600][ T51] Bluetooth: hci3: command tx timeout [ 939.624119][ T7078] Bluetooth: MGMT ver 1.23 [ 940.388019][ T7121] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 940.441906][ T7122] syzkaller1: entered promiscuous mode [ 940.447443][ T7122] syzkaller1: entered allmulticast mode [ 940.519381][ T7131] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 941.488645][ T7171] netlink: 'syz.2.9041': attribute type 23 has an invalid length. [ 941.517983][ T51] Bluetooth: hci3: command tx timeout [ 941.542415][ T7174] __nla_validate_parse: 8 callbacks suppressed [ 941.542436][ T7174] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9043'. [ 942.064817][ T7202] netlink: 144 bytes leftover after parsing attributes in process `syz.3.9048'. [ 942.095647][ T7205] openvswitch: netlink: IPv4 tunnel dst address is zero [ 942.283951][ T794] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.298152][ T794] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.358505][ T794] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.408466][ T794] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 942.429292][ T7224] siw: device registration error -23 [ 942.655403][ T7237] tipc: Enabled bearer , priority 0 [ 942.674662][ T7235] tipc: Started in network mode [ 942.691176][ T7235] tipc: Node identity 080211000001, cluster identity 4711 [ 942.755009][ T7235] tipc: Enabled bearer , priority 0 [ 943.054876][ T7265] SET target dimension over the limit! [ 943.621780][ T7287] xt_l2tp: missing protocol rule (udp|l2tpip) [ 943.657311][ T7229] tipc: Disabling bearer [ 943.821076][T15338] tipc: Node number set to 134418688 [ 944.261844][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 944.272953][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 944.285938][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 944.298724][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 944.306741][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 944.599575][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9073'. [ 944.949519][ T7338] bridge0: port 1(ipvlan3) entered blocking state [ 944.962322][ T7338] bridge0: port 1(ipvlan3) entered disabled state [ 944.970482][ T7338] ipvlan3: entered allmulticast mode [ 944.976815][ T7338] bridge0: entered allmulticast mode [ 944.988776][ T7338] ipvlan3: left allmulticast mode [ 944.994639][ T7338] bridge0: left allmulticast mode [ 945.078623][ T7346] netlink: 'syz.3.9075': attribute type 1 has an invalid length. [ 945.179935][ T7353] netlink: 'syz.1.9077': attribute type 10 has an invalid length. [ 945.200605][ T7353] team0: Device vxcan1 is of different type [ 945.379748][ T7368] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9079'. [ 945.433934][T28039] bond0: (slave netdevsim0): Releasing backup interface [ 945.494082][ T7313] chnl_net:caif_netlink_parms(): no params data found [ 945.539833][ T7373] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9081'. [ 945.596796][ T794] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.649276][ T794] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.658498][ T794] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.697837][ T794] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.721232][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.728532][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.737976][ T7313] bridge_slave_0: entered allmulticast mode [ 945.747292][ T7313] bridge_slave_0: entered promiscuous mode [ 945.947298][T28039] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 945.955899][T28039] bridge1 (unregistering): left promiscuous mode [ 946.014758][T28039] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 946.023449][T28039] bridge2 (unregistering): left promiscuous mode [ 946.029975][T28039] bridge2 (unregistering): left allmulticast mode [ 946.216481][T28039] bond7 (unregistering): (slave bridge0): Releasing active interface [ 946.379027][T28039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.389499][T28039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.392210][ T51] Bluetooth: hci2: command tx timeout [ 946.407217][T28039] bond0 (unregistering): Released all slaves [ 946.419937][T28039] bond1 (unregistering): Released all slaves [ 946.434617][T28039] bond2 (unregistering): Released all slaves [ 946.449592][T28039] bond3 (unregistering): Released all slaves [ 946.468254][T28039] bond4 (unregistering): Released all slaves [ 946.493460][T28039] bond5 (unregistering): (slave veth7): Releasing active interface [ 946.504150][T28039] bond5 (unregistering): Released all slaves [ 946.518604][T28039] bond6 (unregistering): Released all slaves [ 946.536347][T28039] bond7 (unregistering): Released all slaves [ 946.552416][T28039] bond8 (unregistering): Released all slaves [ 946.567604][T28039] bond9 (unregistering): Released all slaves [ 946.582568][T28039] bond10 (unregistering): Released all slaves [ 946.597489][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.605720][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.624096][ T7313] bridge_slave_1: entered allmulticast mode [ 946.633376][ T7313] bridge_slave_1: entered promiscuous mode [ 946.687306][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.707826][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.750798][T28039] 9: left promiscuous mode [ 946.789720][ T7313] team0: Port device team_slave_0 added [ 946.798916][ T7313] team0: Port device team_slave_1 added [ 946.841466][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.865571][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.896886][ T7313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.910762][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.917761][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.952607][ T7313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.116125][ T7313] hsr_slave_0: entered promiscuous mode [ 947.139309][ T7313] hsr_slave_1: entered promiscuous mode [ 947.156880][ T7313] debugfs: 'hsr0' already exists in 'hsr' [ 947.175920][ T7313] Cannot create hsr debugfs directory [ 947.463900][ T7313] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.493802][T28039] hsr_slave_0: left promiscuous mode [ 947.499834][T28039] 0·: left promiscuous mode [ 947.578726][T28039] team0 (unregistering): Port device batadv1 removed [ 947.706148][T28039] team0 (unregistering): Port device team_slave_1 removed [ 947.724011][T28039] team0 (unregistering): Port device team_slave_0 removed [ 947.839386][ T7313] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.905217][ T7313] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.959723][ T7348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 948.032998][ T7313] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.219640][ T7385] bond0: entered promiscuous mode [ 948.344855][ T7391] syzkaller1: entered promiscuous mode [ 948.366662][ T7391] syzkaller1: entered allmulticast mode [ 948.471576][ T51] Bluetooth: hci2: command tx timeout [ 948.650945][ T7313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 948.694872][ T7313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 948.732497][T28039] IPVS: stop unused estimator thread 0... [ 949.004707][ T7411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.034869][ T7426] IPv6: NLM_F_CREATE should be specified when creating new route [ 949.070498][ T7411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.082152][ T7411] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 949.131090][ T7313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 949.222504][ T7421] bond10: option all_slaves_active: invalid value (222) [ 949.232842][ T7421] bond10 (unregistering): Released all slaves [ 949.363784][ T7313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 949.493333][ T7411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.507659][ T7411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.523786][ T7411] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 949.732107][ T7411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.743312][ T7411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.755101][ T7411] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 949.928476][ T7411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.939018][ T7411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.951659][ T7411] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 950.445305][T28039] bond1 (unregistering): Released all slaves [ 950.460033][T28039] bond0 (unregistering): Released all slaves [ 950.477760][T28039] bond2 (unregistering): Released all slaves [ 950.494659][T28039] bond3 (unregistering): Released all slaves [ 950.519170][T28039] bond4 (unregistering): Released all slaves [ 950.550816][ T51] Bluetooth: hci2: command tx timeout [ 950.719495][T28039] : left promiscuous mode [ 950.757727][ T7490] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9101'. [ 950.831210][ T7492] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9101'. [ 950.845103][ T7492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.863748][ T7492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 950.870372][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.992427][ T36] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 951.001038][T28039] tipc: Left network mode [ 951.002465][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 951.035415][ T36] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 951.054375][T28039] IPVS: stopping master sync thread 20492 ... [ 951.092092][ T780] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 951.101323][ T7500] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 951.113097][ T780] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 951.122334][ T780] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 951.184723][T10547] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 951.213724][T10547] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 951.224587][T10547] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 951.258562][ T7313] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.278964][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9108'. [ 951.288960][T10547] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 951.309172][T10547] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 951.328212][T10547] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 951.342585][ T794] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.349777][ T794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.438712][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.445958][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.554129][ T7521] netlink: 'syz.1.9112': attribute type 1 has an invalid length. [ 951.611114][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9109'. [ 951.848023][ T7536] netlink: 'syz.0.9116': attribute type 62 has an invalid length. [ 952.203498][ T7549] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9117'. [ 952.278664][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9119'. [ 952.299226][ T7552] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 952.352545][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.452449][ T7558] netlink: 'syz.3.9121': attribute type 10 has an invalid length. [ 952.496869][T28039] hsr_slave_0: left promiscuous mode [ 952.508693][T28039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.632069][ T5840] Bluetooth: hci2: command tx timeout [ 953.024538][ T7569] netlink: 'syz.1.9122': attribute type 61 has an invalid length. [ 953.092469][T28039] team0 (unregistering): Port device team_slave_1 removed [ 953.118927][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9122'. [ 953.737103][T17150] tipc: Subscription rejected, illegal request [ 953.751276][ T7589] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 954.157445][ T7313] veth0_vlan: entered promiscuous mode [ 954.173493][ T5840] Bluetooth: hci1: command 0x0419 tx timeout [ 954.175974][ T7313] veth1_vlan: entered promiscuous mode [ 954.359975][ T7313] veth0_macvtap: entered promiscuous mode [ 954.406784][ T7313] veth1_macvtap: entered promiscuous mode [ 954.488494][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.526903][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.626940][ T779] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.713839][ T779] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.728598][ T7622] netlink: 'syz.3.9133': attribute type 23 has an invalid length. [ 954.775574][ T779] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.801331][ T779] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.083501][T28039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.107037][T28039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.212175][T17150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.229734][T17150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.503039][ T7655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9066'. [ 955.556441][ T7657] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9066'. [ 955.839581][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 955.849618][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 955.859228][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 955.868384][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 955.876966][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 956.567482][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079ffdc00: rx timeout, send abort [ 956.576307][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888079ffdc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 957.003247][ T7660] chnl_net:caif_netlink_parms(): no params data found [ 957.072250][ T7711] netlink: 'syz.1.9149': attribute type 1 has an invalid length. [ 957.104523][ T7711] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9149'. [ 957.244594][ T779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.310707][ T779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.442967][ T7733] netlink: 'syz.4.9152': attribute type 1 has an invalid length. [ 957.465131][ T7734] SET target dimension over the limit! [ 957.764712][ T779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.826029][ T779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.992408][ T51] Bluetooth: hci0: command tx timeout [ 958.156095][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9155'. [ 958.225927][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9155'. [ 958.357805][ T779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.381601][ T779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.408270][ T7775] syz_tun: entered allmulticast mode [ 958.424216][ T7660] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.447412][ T7660] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.487012][ T7660] bridge_slave_0: entered allmulticast mode [ 958.521666][ T7660] bridge_slave_0: entered promiscuous mode [ 958.579620][ T7660] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.608632][ T7660] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.627875][ T7660] bridge_slave_1: entered allmulticast mode [ 958.644921][ T7660] bridge_slave_1: entered promiscuous mode [ 958.679052][ T779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.727248][ T779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.904516][ T7660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.946863][ T7660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.108590][ T7660] team0: Port device team_slave_0 added [ 959.134237][ T7660] team0: Port device team_slave_1 added [ 959.209040][ T7810] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 959.296591][ T780] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.345786][ T780] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.396117][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.424395][T15338] IPVS: starting estimator thread 0... [ 959.433608][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.434621][ T7817] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 959.535360][ T7660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.546374][ T7819] IPVS: using max 28 ests per chain, 67200 per kthread [ 959.574658][ T7660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.591588][ T7660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.696912][ T7829] netlink: 'syz.1.9169': attribute type 1 has an invalid length. [ 959.709835][ T7660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.739924][ T7830] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 959.798762][ T7831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 959.825909][ T7837] nft_compat: unsupported protocol 14 [ 959.844549][ T7831] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9170'. [ 959.857261][ T7832] mac80211_hwsim hwsim61 syzkaller0: left promiscuous mode [ 959.866400][ T7832] mac80211_hwsim hwsim61 syzkaller0: left allmulticast mode [ 959.879239][T17150] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.889558][T17150] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.929930][ T7832] x_tables: duplicate underflow at hook 4 [ 959.956979][ T779] bridge_slave_1: left allmulticast mode [ 959.981556][ T779] bridge_slave_1: left promiscuous mode [ 959.992867][ T779] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.071824][ T51] Bluetooth: hci0: command tx timeout [ 960.936441][ T779] bond6 (unregistering): (slave bridge7): Releasing backup interface [ 960.946816][ T779] bridge7 (unregistering): left promiscuous mode [ 960.955206][ T779] bridge7 (unregistering): left allmulticast mode [ 961.137400][ T779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.152179][ T779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.164833][ T779] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 961.177215][ T779] bond0 (unregistering): Released all slaves [ 961.192311][ T779] bond1 (unregistering): Released all slaves [ 961.212832][ T779] bond2 (unregistering): Released all slaves [ 961.234444][ T779] bond3 (unregistering): Released all slaves [ 961.257648][ T779] bond4 (unregistering): Released all slaves [ 961.282929][ T779] bond5 (unregistering): Released all slaves [ 961.314929][ T779] bond6 (unregistering): Released all slaves [ 961.338422][ T779] bond7 (unregistering): Released all slaves [ 961.362801][ T779] bond8 (unregistering): Released all slaves [ 961.416780][ T7660] hsr_slave_0: entered promiscuous mode [ 961.424322][ T7660] hsr_slave_1: entered promiscuous mode [ 961.439137][ T7660] debugfs: 'hsr0' already exists in 'hsr' [ 961.445378][ T7660] Cannot create hsr debugfs directory [ 961.716226][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9177'. [ 961.749527][ T7877] netlink: 187308 bytes leftover after parsing attributes in process `syz.4.9178'. [ 961.999821][ T7883] xt_hashlimit: size too large, truncated to 1048576 [ 962.058384][ T7885] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9183'. [ 962.154869][ T51] Bluetooth: hci0: command tx timeout [ 962.502820][ T7660] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.553479][ T7905] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9185'. [ 962.772272][ T7660] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.974774][ T7660] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.168014][ T7925] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9188'. [ 963.185097][ T7660] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.587069][ T779] veth1_macvtap: left promiscuous mode [ 963.615564][ T779] veth0_macvtap: left promiscuous mode [ 963.630535][ T779] veth1_vlan: left promiscuous mode [ 963.646227][ T779] veth0_vlan: left promiscuous mode [ 963.704257][ T7944] netlink: 'syz.3.9192': attribute type 1 has an invalid length. [ 963.737104][ T7944] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9192'. [ 963.889367][ T7953] netlink: 'syz.1.9194': attribute type 1 has an invalid length. [ 964.233085][ T51] Bluetooth: hci0: command tx timeout [ 964.314232][ T7953] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 964.452857][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9196'. [ 964.645075][ T7660] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 964.735514][ T7660] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 964.845831][ T7660] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 964.905478][ T7988] openvswitch: netlink: Message has 8 unknown bytes. [ 964.913099][ T7986] mac80211_hwsim hwsim61 syzkaller0: entered allmulticast mode [ 964.922470][ T7988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.954476][ T7660] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 965.166526][ T779] IPVS: stop unused estimator thread 0... [ 965.356556][ T8015] xt_hashlimit: size too large, truncated to 1048576 [ 965.529264][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9209'. [ 965.551744][ T7660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.615727][ T7660] 8021q: adding VLAN 0 to HW filter on device team0 [ 965.667871][T10549] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.675118][T10549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 965.768627][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.775933][T10547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 966.132951][ T8047] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.9213'. [ 966.478795][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9217'. [ 966.862619][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9219'. [ 967.023157][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9219'. [ 967.074243][ T7660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.151087][ T8097] mac80211_hwsim hwsim61 syzkaller0: entered promiscuous mode [ 967.283955][ T8096] bond15: option mode: invalid value (133) [ 967.312281][ T8096] bond15 (unregistering): Released all slaves [ 967.695549][ T7660] veth0_vlan: entered promiscuous mode [ 967.732456][ T7660] veth1_vlan: entered promiscuous mode [ 967.884100][ T7660] veth0_macvtap: entered promiscuous mode [ 967.942310][ T7660] veth1_macvtap: entered promiscuous mode [ 967.994124][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.015524][ T8118] Bluetooth: MGMT ver 1.23 [ 968.022469][ T7660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.072292][ T779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.105236][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9226'. [ 968.111143][ T779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.166918][ T779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.183404][ T779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.262359][ T8128] netlink: 'syz.3.9231': attribute type 12 has an invalid length. [ 968.291103][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9231'. [ 968.395606][T10549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.423408][T10549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.510020][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.523881][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.778904][ T8147] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9139'. [ 968.844873][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9139'. [ 969.115647][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9238'. [ 969.132141][ T8158] xt_hashlimit: max too large, truncated to 1048576 [ 969.194934][ T8159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9238'. [ 969.280860][ T8167] sock: sock_set_timeout: `syz.2.9239' (pid 8167) tries to set negative timeout [ 969.599092][ T8176] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9245'. [ 969.636994][ T8179] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 969.650746][ T8179] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 969.659315][ T8179] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 969.676121][ T8179] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 969.686764][ T8179] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 970.447574][ T8205] veth1_to_bond: entered allmulticast mode [ 970.464521][ T8207] veth1_to_bond: left allmulticast mode [ 970.546352][ T8177] chnl_net:caif_netlink_parms(): no params data found [ 970.968259][ T8244] netlink: 'syz.4.9258': attribute type 1 has an invalid length. [ 971.116615][ T8177] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.146954][ T8177] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.166040][ T8177] bridge_slave_0: entered allmulticast mode [ 971.203115][ T8177] bridge_slave_0: entered promiscuous mode [ 971.213123][ T8256] netlink: 'syz.4.9260': attribute type 21 has an invalid length. [ 971.224877][ T8177] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.237519][ T8177] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.249614][ T8177] bridge_slave_1: entered allmulticast mode [ 971.257876][ T8177] bridge_slave_1: entered promiscuous mode [ 971.266212][ T8256] netlink: 'syz.4.9260': attribute type 1 has an invalid length. [ 971.364867][ T8258] bridge0: entered promiscuous mode [ 971.373240][ T8258] bridge0: entered allmulticast mode [ 971.385323][ T8177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.427016][ T8177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.524594][ T8177] team0: Port device team_slave_0 added [ 971.537062][ T8177] team0: Port device team_slave_1 added [ 971.546031][ T8271] netlink: 'syz.2.9264': attribute type 1 has an invalid length. [ 971.620997][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.630597][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.666881][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9265'. [ 971.678205][ T8177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.693084][ T8177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.700429][ T8177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 971.734004][ T8177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.766267][ T51] Bluetooth: hci4: command tx timeout [ 971.878270][ T8177] hsr_slave_0: entered promiscuous mode [ 971.885355][ T8177] hsr_slave_1: entered promiscuous mode [ 971.892364][ T8177] debugfs: 'hsr0' already exists in 'hsr' [ 971.899114][ T8177] Cannot create hsr debugfs directory [ 972.036431][ T8284] pim6reg: entered allmulticast mode [ 972.066101][ T8284] pim6reg: left allmulticast mode [ 972.143651][ T8293] IPv6: NLM_F_CREATE should be specified when creating new route [ 972.399044][ T8177] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.431561][ T8177] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 972.451868][ T8177] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.477190][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9276'. [ 972.549820][ T8306] veth0: entered promiscuous mode [ 972.677624][ T8177] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.692005][ T8320] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9277'. [ 972.712043][ T8177] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 972.750483][ T8177] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 972.975478][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.983243][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.101710][ T8332] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 973.129901][ T8295] veth0: left promiscuous mode [ 973.197879][ T8177] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.229324][ T8177] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 973.262593][ T8177] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 973.329417][ T8347] xt_socket: unknown flags 0x50 [ 973.336523][ T8349] __nla_validate_parse: 2 callbacks suppressed [ 973.336544][ T8349] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9286'. [ 973.379079][ T8177] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.390597][ T8177] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 973.404826][ T8177] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 973.498257][ T8351] netem: incorrect gi model size [ 973.507827][ T8351] netem: change failed [ 973.727011][ T8365] netlink: 'syz.2.9292': attribute type 12 has an invalid length. [ 973.736665][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9292'. [ 973.775454][T17151] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.784419][ T8365] netlink: 'syz.2.9292': attribute type 12 has an invalid length. [ 973.799640][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9292'. [ 973.836190][T17151] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.845121][ T51] Bluetooth: hci4: command tx timeout [ 973.854906][ T8369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9293'. [ 973.914875][T17151] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 973.965192][T17151] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 974.008117][ T8177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 974.038136][ T8177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 974.094997][ T8177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 974.117810][ T8177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 974.209035][ T8381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9298'. [ 974.230033][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9298'. [ 974.393454][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9300'. [ 974.417679][ T8177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.451841][ T8396] bond0: entered promiscuous mode [ 974.468934][ T8396] bond_slave_0: entered promiscuous mode [ 974.483602][ T8396] bond_slave_1: entered promiscuous mode [ 974.494272][ T8396] bond0: left promiscuous mode [ 974.499106][ T8396] bond_slave_0: left promiscuous mode [ 974.521936][ T8396] bond_slave_1: left promiscuous mode [ 974.578494][ T8177] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.626967][T10798] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.634173][T10798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.775746][ T8411] netlink: 'syz.4.9304': attribute type 1 has an invalid length. [ 974.848873][T10798] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.856049][T10798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.968514][ T8411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.005687][ T8418] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.015197][ T8418] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 975.028225][ T8418] bond1: (slave vcan1): Error -95 calling set_mac_address [ 975.130115][ T8421] bond1: (slave gretap1): making interface the new active one [ 975.139303][ T8421] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 975.316921][ T8427] syzkaller0: entered promiscuous mode [ 975.322686][ T8427] syzkaller0: entered allmulticast mode [ 975.924026][ T51] Bluetooth: hci4: command tx timeout [ 977.056066][ T8447] vlan2: entered promiscuous mode [ 977.063483][ T8447] vlan2: entered allmulticast mode [ 977.071072][ T8447] hsr_slave_1: entered allmulticast mode [ 977.113407][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9313'. [ 977.234495][ T8177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 977.312838][ T8468] netlink: 'syz.4.9314': attribute type 1 has an invalid length. [ 977.333983][ T8463] sctp: [Deprecated]: syz.2.9316 (pid 8463) Use of int in maxseg socket option. [ 977.333983][ T8463] Use struct sctp_assoc_value instead [ 977.381317][ T8463] tipc: Failed to obtain node identity [ 977.386858][ T8463] tipc: Enabling of bearer rejected, failed to enable media [ 977.423564][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9317'. [ 977.459899][ T8470] bridge_slave_1: left allmulticast mode [ 977.470016][ T8470] bridge_slave_1: left promiscuous mode [ 977.488165][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.514945][ T8470] bridge_slave_0: left allmulticast mode [ 977.522425][ T8470] bridge_slave_0: left promiscuous mode [ 977.530246][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.551415][ T8474] netlink: 216 bytes leftover after parsing attributes in process `syz.0.9319'. [ 977.584070][ T8480] netlink: 'syz.2.9320': attribute type 1 has an invalid length. [ 977.736668][ T8485] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 977.771286][ T8485] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 977.803022][ T8485] bond1: (slave ip6gre1): making interface the new active one [ 977.814888][ T8485] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 977.892527][ T8494] netlink: 'syz.4.9321': attribute type 11 has an invalid length. [ 977.991006][ T51] Bluetooth: hci4: command tx timeout [ 978.132849][ T8504] vlan3: entered allmulticast mode [ 978.157091][ T8504] bridge1: entered allmulticast mode [ 978.189714][ T8511] bridge1: port 1(erspan0) entered blocking state [ 978.196716][ T8511] bridge1: port 1(erspan0) entered disabled state [ 978.204415][ T8511] erspan0: entered allmulticast mode [ 978.214718][ T8511] erspan0: entered promiscuous mode [ 978.244896][ T8177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.374475][ T8177] veth0_vlan: entered promiscuous mode [ 978.423866][ T8177] veth1_vlan: entered promiscuous mode [ 978.503607][ T8177] veth0_macvtap: entered promiscuous mode [ 978.546724][ T8177] veth1_macvtap: entered promiscuous mode [ 978.606869][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.666848][ T8177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.688324][T10547] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.701193][T10547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.772581][ T779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.784635][ T779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.807044][ T8536] netlink: 'syz.4.9335': attribute type 11 has an invalid length. [ 978.817803][ T8536] netlink: 'syz.4.9335': attribute type 11 has an invalid length. [ 978.829803][ T8536] __nla_validate_parse: 4 callbacks suppressed [ 978.829820][ T8536] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9335'. [ 978.932665][ T8541] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9338'. [ 978.955147][ T8541] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9338'. [ 978.967970][ T8546] netlink: 'syz.1.9337': attribute type 1 has an invalid length. [ 979.065460][ T8546] 8021q: adding VLAN 0 to HW filter on device bond4 [ 979.138181][ T8538] bond4: (slave veth0_to_bond): making interface the new active one [ 979.166941][ T8538] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 979.177189][ T8541] veth0_to_team: entered allmulticast mode [ 979.239672][ T8546] bond4: entered promiscuous mode [ 979.245951][ T8546] veth0_to_bond: entered promiscuous mode [ 979.254054][ T8546] bond4: entered allmulticast mode [ 979.259281][ T8546] veth0_to_bond: entered allmulticast mode [ 979.405559][T10798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.434495][T10798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.506688][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.527409][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.561861][ T8565] netlink: 248 bytes leftover after parsing attributes in process `syz.1.9342'. [ 979.584895][ T8568] syzkaller1: entered promiscuous mode [ 979.602039][ T8568] syzkaller1: entered allmulticast mode [ 979.619896][ T8565] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9342'. [ 979.672170][ T8567] : renamed from team0 (while UP) [ 979.714372][ T8577] netlink: 'syz.4.9344': attribute type 15 has an invalid length. [ 979.746830][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9344'. [ 979.756391][ T8562] x_tables: duplicate underflow at hook 4 [ 979.776936][ T8578] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9341'. [ 979.859107][ T780] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 979.868335][ T780] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 979.885587][ T8577] netlink: 'syz.4.9344': attribute type 15 has an invalid length. [ 979.896985][ T780] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 979.932234][ T780] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 979.941241][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9344'. [ 979.959003][ T8585] netlink: 'syz.3.9241': attribute type 21 has an invalid length. [ 980.000499][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9241'. [ 980.045061][ T779] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.054519][ T779] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.063551][ T779] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.082004][ T779] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.285065][ T8179] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 980.297993][ T8179] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 980.307332][ T8179] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 980.316899][ T8179] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 980.337001][ T8179] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 980.500082][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9350'. [ 981.269394][ T8646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.309268][ T8600] chnl_net:caif_netlink_parms(): no params data found [ 981.684043][ T8600] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.720023][ T8600] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.752268][ T8600] bridge_slave_0: entered allmulticast mode [ 981.794285][ T8600] bridge_slave_0: entered promiscuous mode [ 981.812052][ T8600] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.819258][ T8600] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.861349][ T8600] bridge_slave_1: entered allmulticast mode [ 981.869308][ T8600] bridge_slave_1: entered promiscuous mode [ 981.884244][ T8672] x_tables: duplicate underflow at hook 1 [ 981.942106][ T8672] x_tables: duplicate underflow at hook 1 [ 982.055235][ T8600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.140066][ T8600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.206019][ T51] block nbd3: Receive control failed (result -107) [ 982.241286][ T8696] nbd3: detected capacity change from 0 to 127 [ 982.255089][ T8600] team0: Port device team_slave_0 added [ 982.264285][ T8600] team0: Port device team_slave_1 added [ 982.275543][ T8551] block nbd3: Dead connection, failed to find a fallback [ 982.292663][ T8551] block nbd3: shutting down sockets [ 982.309129][ T8551] blk_print_req_error: 138 callbacks suppressed [ 982.309150][ T8551] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.335882][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.358470][ T8551] buffer_io_error: 138 callbacks suppressed [ 982.358490][ T8551] Buffer I/O error on dev nbd3, logical block 0, async page read [ 982.381053][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.416770][ T51] Bluetooth: hci5: command tx timeout [ 982.431739][ T8551] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.443000][ T8551] Buffer I/O error on dev nbd3, logical block 1, async page read [ 982.451019][ T8600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.461902][ T8551] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.474411][ T8551] Buffer I/O error on dev nbd3, logical block 2, async page read [ 982.484924][ T8551] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.498289][ T8551] Buffer I/O error on dev nbd3, logical block 3, async page read [ 982.499809][ T8600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.506980][ T8551] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.523607][ T8551] Buffer I/O error on dev nbd3, logical block 0, async page read [ 982.531993][ T8551] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.541867][ T8551] Buffer I/O error on dev nbd3, logical block 1, async page read [ 982.571096][ T8551] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.590792][ T8551] Buffer I/O error on dev nbd3, logical block 2, async page read [ 982.604629][ T8600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.630717][ T8551] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.630757][ T8551] Buffer I/O error on dev nbd3, logical block 3, async page read [ 982.630819][ T8551] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.630846][ T8551] Buffer I/O error on dev nbd3, logical block 0, async page read [ 982.630889][ T8551] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 982.630915][ T8551] Buffer I/O error on dev nbd3, logical block 1, async page read [ 982.631602][ T8551] ldm_validate_partition_table(): Disk read failed. [ 982.632096][ T8551] Dev nbd3: unable to read RDB block 0 [ 982.632725][ T8551] nbd3: unable to read partition table [ 982.713567][ T8600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.733414][ T8551] ldm_validate_partition_table(): Disk read failed. [ 982.753380][ T8551] Dev nbd3: unable to read RDB block 0 [ 982.767974][ T8551] nbd3: unable to read partition table [ 982.802536][ T8712] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 982.901673][ T8715] bond0: entered promiscuous mode [ 982.917027][ T8715] bond_slave_0: entered promiscuous mode [ 982.924256][ T8715] bond_slave_1: entered promiscuous mode [ 983.029199][ T8600] hsr_slave_0: entered promiscuous mode [ 983.042835][ T8600] hsr_slave_1: entered promiscuous mode [ 983.053077][ T8600] debugfs: 'hsr0' already exists in 'hsr' [ 983.059444][ T8600] Cannot create hsr debugfs directory [ 983.216172][ T8735] netlink: 'syz.1.9382': attribute type 6 has an invalid length. [ 983.323712][ T8735] netlink: 'syz.1.9382': attribute type 6 has an invalid length. [ 983.424288][ T8743] syzkaller0: entered promiscuous mode [ 983.429921][ T8743] syzkaller0: entered allmulticast mode [ 983.689116][ T8751] syzkaller0: entered promiscuous mode [ 983.718207][ T8751] syzkaller0: entered allmulticast mode [ 984.460651][ T8779] __nla_validate_parse: 9 callbacks suppressed [ 984.460673][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9390'. [ 984.476414][ T8779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9390'. [ 984.489277][ T51] Bluetooth: hci5: command tx timeout [ 985.597775][ T8760] syzkaller1: entered promiscuous mode [ 985.604134][ T8760] syzkaller1: entered allmulticast mode [ 985.703017][ T8600] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 985.726594][ T8600] [ 985.728980][ T8600] ====================================================== [ 985.736028][ T8600] WARNING: possible circular locking dependency detected [ 985.743092][ T8600] syzkaller #0 Not tainted [ 985.747538][ T8600] ------------------------------------------------------ [ 985.754584][ T8600] syz-executor/8600 is trying to acquire lock: [ 985.760770][ T8600] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 985.771464][ T8600] [ 985.771464][ T8600] but task is already holding lock: [ 985.778857][ T8600] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 985.789185][ T8600] [ 985.789185][ T8600] which lock already depends on the new lock. [ 985.789185][ T8600] [ 985.799607][ T8600] [ 985.799607][ T8600] the existing dependency chain (in reverse order) is: [ 985.808641][ T8600] [ 985.808641][ T8600] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 985.816755][ T8600] down_write+0x96/0x200 [ 985.821555][ T8600] kernfs_add_one+0x41/0x5c0 [ 985.826717][ T8600] kernfs_create_dir_ns+0xde/0x130 [ 985.832375][ T8600] internal_create_group+0x425/0x1180 [ 985.838295][ T8600] cpuhp_invoke_callback+0x445/0x860 [ 985.844129][ T8600] cpuhp_issue_call+0x430/0x7a0 [ 985.849524][ T8600] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 985.856148][ T8600] __cpuhp_setup_state+0x3f/0x60 [ 985.861634][ T8600] do_one_initcall+0x250/0x8d0 [ 985.866947][ T8600] do_initcall_level+0x104/0x190 [ 985.872528][ T8600] do_initcalls+0x59/0xa0 [ 985.877429][ T8600] kernel_init_freeable+0x2a6/0x3e0 [ 985.883178][ T8600] kernel_init+0x1d/0x1d0 [ 985.888051][ T8600] ret_from_fork+0x51e/0xb90 [ 985.893180][ T8600] ret_from_fork_asm+0x1a/0x30 [ 985.898487][ T8600] [ 985.898487][ T8600] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 985.906383][ T8600] [ 985.906383][ T8600] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 985.914144][ T8600] cpus_read_lock+0x42/0x160 [ 985.919287][ T8600] static_key_disable+0x12/0x20 [ 985.924718][ T8600] __inet_hash_connect+0x2430/0x2440 [ 985.930635][ T8600] tcp_v4_connect+0xd5f/0x19b0 [ 985.936000][ T8600] __inet_stream_connect+0x25a/0xdd0 [ 985.941867][ T8600] inet_stream_connect+0x66/0xa0 [ 985.947353][ T8600] __sys_connect+0x312/0x450 [ 985.952488][ T8600] __x64_sys_connect+0x7a/0x90 [ 985.957797][ T8600] do_syscall_64+0x14d/0xf80 [ 985.962954][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.969386][ T8600] [ 985.969386][ T8600] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 985.977054][ T8600] lock_sock_nested+0x48/0x100 [ 985.982365][ T8600] inet_shutdown+0x6a/0x390 [ 985.987413][ T8600] nbd_mark_nsock_dead+0x2e9/0x560 [ 985.993155][ T8600] recv_work+0x1c7f/0x1d90 [ 985.998166][ T8600] process_scheduled_works+0xb02/0x1830 [ 986.004258][ T8600] worker_thread+0xa50/0xfc0 [ 986.009411][ T8600] kthread+0x388/0x470 [ 986.014127][ T8600] ret_from_fork+0x51e/0xb90 [ 986.019268][ T8600] ret_from_fork_asm+0x1a/0x30 [ 986.024593][ T8600] [ 986.024593][ T8600] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 986.032274][ T8600] __mutex_lock+0x19f/0x1300 [ 986.037411][ T8600] nbd_queue_rq+0x37b/0x1100 [ 986.042550][ T8600] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 986.048713][ T8600] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 986.055617][ T8600] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 986.062137][ T8600] blk_mq_run_hw_queue+0x348/0x4f0 [ 986.067852][ T8600] blk_mq_dispatch_list+0xd16/0xe10 [ 986.073601][ T8600] blk_mq_flush_plug_list+0x48d/0x570 [ 986.079522][ T8600] __blk_flush_plug+0x3ed/0x4d0 [ 986.084962][ T8600] __submit_bio+0x28d/0x580 [ 986.090000][ T8600] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 986.096165][ T8600] block_read_full_folio+0x599/0x830 [ 986.102018][ T8600] filemap_read_folio+0x137/0x3b0 [ 986.107585][ T8600] do_read_cache_folio+0x358/0x590 [ 986.113251][ T8600] read_part_sector+0xb6/0x2b0 [ 986.118623][ T8600] adfspart_check_ICS+0xa5/0xa40 [ 986.124098][ T8600] bdev_disk_changed+0x7ba/0x1550 [ 986.129660][ T8600] blkdev_get_whole+0x380/0x510 [ 986.135105][ T8600] bdev_open+0x31e/0xd30 [ 986.139893][ T8600] blkdev_open+0x470/0x610 [ 986.144857][ T8600] do_dentry_open+0x785/0x14e0 [ 986.150181][ T8600] vfs_open+0x3b/0x340 [ 986.154810][ T8600] path_openat+0x2e08/0x3860 [ 986.159972][ T8600] do_file_open+0x23e/0x4a0 [ 986.165015][ T8600] do_sys_openat2+0x113/0x200 [ 986.170246][ T8600] __x64_sys_openat+0x138/0x170 [ 986.175652][ T8600] do_syscall_64+0x14d/0xf80 [ 986.180782][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.187226][ T8600] [ 986.187226][ T8600] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 986.194464][ T8600] __mutex_lock+0x19f/0x1300 [ 986.199608][ T8600] nbd_queue_rq+0xc6/0x1100 [ 986.204654][ T8600] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 986.210736][ T8600] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 986.217612][ T8600] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 986.224137][ T8600] blk_mq_run_hw_queue+0x348/0x4f0 [ 986.229798][ T8600] blk_mq_dispatch_list+0xd16/0xe10 [ 986.235535][ T8600] blk_mq_flush_plug_list+0x48d/0x570 [ 986.241446][ T8600] __blk_flush_plug+0x3ed/0x4d0 [ 986.246845][ T8600] __submit_bio+0x28d/0x580 [ 986.251897][ T8600] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 986.258079][ T8600] block_read_full_folio+0x599/0x830 [ 986.263915][ T8600] filemap_read_folio+0x137/0x3b0 [ 986.269484][ T8600] do_read_cache_folio+0x358/0x590 [ 986.275200][ T8600] read_part_sector+0xb6/0x2b0 [ 986.280502][ T8600] adfspart_check_ICS+0xa5/0xa40 [ 986.285990][ T8600] bdev_disk_changed+0x7ba/0x1550 [ 986.291557][ T8600] blkdev_get_whole+0x380/0x510 [ 986.296947][ T8600] bdev_open+0x31e/0xd30 [ 986.301736][ T8600] blkdev_open+0x470/0x610 [ 986.306694][ T8600] do_dentry_open+0x785/0x14e0 [ 986.312010][ T8600] vfs_open+0x3b/0x340 [ 986.316616][ T8600] path_openat+0x2e08/0x3860 [ 986.321743][ T8600] do_file_open+0x23e/0x4a0 [ 986.326792][ T8600] do_sys_openat2+0x113/0x200 [ 986.332025][ T8600] __x64_sys_openat+0x138/0x170 [ 986.337430][ T8600] do_syscall_64+0x14d/0xf80 [ 986.342598][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.349036][ T8600] [ 986.349036][ T8600] -> #4 (set->srcu){.+.+}-{0:0}: [ 986.356185][ T8600] __synchronize_srcu+0xca/0x3e0 [ 986.361669][ T8600] elevator_switch+0x1e8/0x7a0 [ 986.367063][ T8600] elevator_change+0x2cc/0x450 [ 986.372365][ T8600] elevator_set_default+0x36c/0x430 [ 986.378095][ T8600] blk_register_queue+0x366/0x430 [ 986.383659][ T8600] __add_disk+0x677/0xd50 [ 986.388535][ T8600] add_disk_fwnode+0xfb/0x480 [ 986.393766][ T8600] nbd_dev_add+0x72c/0xb50 [ 986.398734][ T8600] nbd_init+0x168/0x1f0 [ 986.403544][ T8600] do_one_initcall+0x250/0x8d0 [ 986.408852][ T8600] do_initcall_level+0x104/0x190 [ 986.414335][ T8600] do_initcalls+0x59/0xa0 [ 986.419210][ T8600] kernel_init_freeable+0x2a6/0x3e0 [ 986.424952][ T8600] kernel_init+0x1d/0x1d0 [ 986.429826][ T8600] ret_from_fork+0x51e/0xb90 [ 986.434962][ T8600] ret_from_fork_asm+0x1a/0x30 [ 986.440304][ T8600] [ 986.440304][ T8600] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 986.448162][ T8600] __mutex_lock+0x19f/0x1300 [ 986.453295][ T8600] elevator_change+0x1b3/0x450 [ 986.458596][ T8600] elevator_set_none+0xb5/0x140 [ 986.463983][ T8600] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 986.470355][ T8600] nbd_start_device+0x17f/0xb10 [ 986.475775][ T8600] nbd_genl_connect+0x165b/0x1cf0 [ 986.481348][ T8600] genl_family_rcv_msg_doit+0x22a/0x330 [ 986.487509][ T8600] genl_rcv_msg+0x61c/0x7a0 [ 986.492549][ T8600] netlink_rcv_skb+0x232/0x4b0 [ 986.497930][ T8600] genl_rcv+0x28/0x40 [ 986.502452][ T8600] netlink_unicast+0x80f/0x9b0 [ 986.507763][ T8600] netlink_sendmsg+0x813/0xb40 [ 986.513074][ T8600] ____sys_sendmsg+0x972/0x9f0 [ 986.518380][ T8600] ___sys_sendmsg+0x2a5/0x360 [ 986.523592][ T8600] __x64_sys_sendmsg+0x1bd/0x2a0 [ 986.529079][ T8600] do_syscall_64+0x14d/0xf80 [ 986.534207][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.540637][ T8600] [ 986.540637][ T8600] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 986.549290][ T8600] blk_alloc_queue+0x546/0x680 [ 986.554611][ T8600] __blk_mq_alloc_disk+0x197/0x390 [ 986.560269][ T8600] nbd_dev_add+0x499/0xb50 [ 986.565246][ T8600] nbd_init+0x168/0x1f0 [ 986.569952][ T8600] do_one_initcall+0x250/0x8d0 [ 986.575266][ T8600] do_initcall_level+0x104/0x190 [ 986.580758][ T8600] do_initcalls+0x59/0xa0 [ 986.585642][ T8600] kernel_init_freeable+0x2a6/0x3e0 [ 986.591383][ T8600] kernel_init+0x1d/0x1d0 [ 986.596249][ T8600] ret_from_fork+0x51e/0xb90 [ 986.601381][ T8600] ret_from_fork_asm+0x1a/0x30 [ 986.606687][ T8600] [ 986.606687][ T8600] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 986.613929][ T8600] fs_reclaim_acquire+0x71/0x100 [ 986.619409][ T8600] kmem_cache_alloc_noprof+0x40/0x650 [ 986.625317][ T8600] __kernfs_iattrs+0xdf/0x340 [ 986.630544][ T8600] kernfs_iop_setattr+0xea/0x3f0 [ 986.636039][ T8600] notify_change+0xc1a/0xf40 [ 986.641172][ T8600] do_truncate+0x1c2/0x250 [ 986.646168][ T8600] path_openat+0x2f89/0x3860 [ 986.651304][ T8600] do_file_open+0x23e/0x4a0 [ 986.656358][ T8600] do_sys_openat2+0x113/0x200 [ 986.661590][ T8600] __x64_sys_openat+0x138/0x170 [ 986.667000][ T8600] do_syscall_64+0x14d/0xf80 [ 986.672132][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.678590][ T8600] [ 986.678590][ T8600] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 986.687129][ T8600] __lock_acquire+0x15a5/0x2cf0 [ 986.692526][ T8600] lock_acquire+0xf0/0x2e0 [ 986.697490][ T8600] down_write+0x96/0x200 [ 986.702269][ T8600] kernfs_unlink_sibling+0x71/0x180 [ 986.708012][ T8600] __kernfs_remove+0x3e7/0x660 [ 986.713440][ T8600] kernfs_remove_by_name_ns+0xaf/0x130 [ 986.719444][ T8600] sysfs_remove_group+0xfc/0x2e0 [ 986.724932][ T8600] sysfs_remove_groups+0x54/0xb0 [ 986.730422][ T8600] net_rx_queue_update_kobjects+0x68d/0x740 [ 986.736936][ T8600] netdev_unregister_kobject+0x113/0x450 [ 986.743114][ T8600] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 986.750074][ T8600] unregister_netdevice_queue+0x31f/0x360 [ 986.756339][ T8600] nsim_destroy+0x1e5/0x680 [ 986.761506][ T8600] __nsim_dev_port_del+0x14d/0x1b0 [ 986.767168][ T8600] nsim_dev_reload_destroy+0x288/0x490 [ 986.773161][ T8600] nsim_drv_remove+0x58/0x170 [ 986.778377][ T8600] device_release_driver_internal+0x46f/0x860 [ 986.785060][ T8600] bus_remove_device+0x34d/0x440 [ 986.790596][ T8600] device_del+0x527/0x8f0 [ 986.795473][ T8600] device_unregister+0x21/0xf0 [ 986.800776][ T8600] del_device_store+0x2b0/0x370 [ 986.806229][ T8600] kernfs_fop_write_iter+0x3af/0x540 [ 986.812182][ T8600] vfs_write+0x61d/0xb90 [ 986.816972][ T8600] ksys_write+0x150/0x270 [ 986.821874][ T8600] do_syscall_64+0x14d/0xf80 [ 986.827015][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.833540][ T8600] [ 986.833540][ T8600] other info that might help us debug this: [ 986.833540][ T8600] [ 986.843780][ T8600] Chain exists of: [ 986.843780][ T8600] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 986.843780][ T8600] [ 986.858247][ T8600] Possible unsafe locking scenario: [ 986.858247][ T8600] [ 986.865818][ T8600] CPU0 CPU1 [ 986.871209][ T8600] ---- ---- [ 986.876595][ T8600] lock(&root->kernfs_rwsem); [ 986.881388][ T8600] lock(cpuhp_state_mutex); [ 986.888528][ T8600] lock(&root->kernfs_rwsem); [ 986.895840][ T8600] lock(&root->kernfs_iattr_rwsem); [ 986.901146][ T8600] [ 986.901146][ T8600] *** DEADLOCK *** [ 986.901146][ T8600] [ 986.909303][ T8600] 8 locks held by syz-executor/8600: [ 986.914601][ T8600] #0: ffff888035be0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 986.923521][ T8600] #1: ffff88807a07b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 986.933297][ T8600] #2: ffff8880217f65a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 986.943345][ T8600] #3: ffffffff8f441888 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 986.953657][ T8600] #4: ffff88804ac200e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 986.964249][ T8600] #5: ffff888031f22250 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 986.974379][ T8600] #6: ffffffff8fbccfc8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 986.983298][ T8600] #7: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 986.994045][ T8600] [ 986.994045][ T8600] stack backtrace: [ 986.999979][ T8600] CPU: 1 UID: 0 PID: 8600 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 987.000002][ T8600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.000014][ T8600] Call Trace: [ 987.000023][ T8600] [ 987.000033][ T8600] dump_stack_lvl+0xe8/0x150 [ 987.000061][ T8600] print_circular_bug+0x2e1/0x300 [ 987.000090][ T8600] check_noncircular+0x12e/0x150 [ 987.000120][ T8600] __lock_acquire+0x15a5/0x2cf0 [ 987.000148][ T8600] ? __lock_acquire+0x6b5/0x2cf0 [ 987.000180][ T8600] lock_acquire+0xf0/0x2e0 [ 987.000204][ T8600] ? kernfs_unlink_sibling+0x71/0x180 [ 987.000239][ T8600] down_write+0x96/0x200 [ 987.000261][ T8600] ? kernfs_unlink_sibling+0x71/0x180 [ 987.000282][ T8600] ? __pfx_down_write+0x10/0x10 [ 987.000303][ T8600] ? kernfs_root+0x1c/0x230 [ 987.000331][ T8600] ? kernfs_root+0x1c/0x230 [ 987.000357][ T8600] ? kernfs_root+0x1c/0x230 [ 987.000386][ T8600] ? kernfs_root+0x1ea/0x230 [ 987.000415][ T8600] kernfs_unlink_sibling+0x71/0x180 [ 987.000438][ T8600] __kernfs_remove+0x3e7/0x660 [ 987.000460][ T8600] kernfs_remove_by_name_ns+0xaf/0x130 [ 987.000483][ T8600] sysfs_remove_group+0xfc/0x2e0 [ 987.000514][ T8600] sysfs_remove_groups+0x54/0xb0 [ 987.000544][ T8600] net_rx_queue_update_kobjects+0x68d/0x740 [ 987.000586][ T8600] netdev_unregister_kobject+0x113/0x450 [ 987.000613][ T8600] unregister_netdevice_many_notify+0x1e0e/0x2370 [ 987.000647][ T8600] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 987.000671][ T8600] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 987.000703][ T8600] unregister_netdevice_queue+0x31f/0x360 [ 987.000725][ T8600] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 987.000755][ T8600] nsim_destroy+0x1e5/0x680 [ 987.000787][ T8600] __nsim_dev_port_del+0x14d/0x1b0 [ 987.000806][ T8600] nsim_dev_reload_destroy+0x288/0x490 [ 987.000827][ T8600] nsim_drv_remove+0x58/0x170 [ 987.000843][ T8600] ? __pfx_nsim_bus_remove+0x10/0x10 [ 987.000868][ T8600] device_release_driver_internal+0x46f/0x860 [ 987.000893][ T8600] bus_remove_device+0x34d/0x440 [ 987.000921][ T8600] device_del+0x527/0x8f0 [ 987.000956][ T8600] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 987.000986][ T8600] ? __pfx_device_del+0x10/0x10 [ 987.001007][ T8600] device_unregister+0x21/0xf0 [ 987.001027][ T8600] del_device_store+0x2b0/0x370 [ 987.001054][ T8600] ? __pfx_del_device_store+0x10/0x10 [ 987.001080][ T8600] ? sysfs_file_kobj+0x1e4/0x230 [ 987.001101][ T8600] ? sysfs_kf_write+0x166/0x260 [ 987.001125][ T8600] ? __pfx_sysfs_kf_write+0x10/0x10 [ 987.001147][ T8600] kernfs_fop_write_iter+0x3af/0x540 [ 987.001170][ T8600] vfs_write+0x61d/0xb90 [ 987.001193][ T8600] ? __pfx_vfs_write+0x10/0x10 [ 987.001219][ T8600] ? kmem_cache_free+0x187/0x630 [ 987.001238][ T8600] ? fd_install+0x94/0x3d0 [ 987.001262][ T8600] ? do_sys_openat2+0x14c/0x200 [ 987.001304][ T8600] ksys_write+0x150/0x270 [ 987.001323][ T8600] ? __pfx_ksys_write+0x10/0x10 [ 987.001347][ T8600] do_syscall_64+0x14d/0xf80 [ 987.001363][ T8600] ? trace_irq_disable+0x3b/0x150 [ 987.001390][ T8600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.001407][ T8600] ? clear_bhb_loop+0x40/0x90 [ 987.001426][ T8600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.001444][ T8600] RIP: 0033:0x7fca7cf5cfce [ 987.001462][ T8600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 987.001477][ T8600] RSP: 002b:00007ffd3491f288 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 987.001496][ T8600] RAX: ffffffffffffffda RBX: 0000555557eb6500 RCX: 00007fca7cf5cfce [ 987.001510][ T8600] RDX: 0000000000000001 RSI: 00007ffd3491f310 RDI: 0000000000000005 [ 987.001521][ T8600] RBP: 00007fca7d03351c R08: 0000000000000000 R09: 0000000000000000 [ 987.001532][ T8600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.001543][ T8600] R13: 00007ffd3491f310 R14: 00007fca7dd44620 R15: 0000000000000003 [ 987.001563][ T8600] [ 987.414737][ T51] Bluetooth: hci5: command tx timeout [ 987.511150][ T8790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 987.569823][ T8600] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.617428][ T8785] pimreg12746755: entered allmulticast mode [ 987.665841][ T8600] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.714212][ T8600] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.812598][ T8600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 987.831394][ T8600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 987.842448][ T8600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 987.852227][ T8600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 987.909572][ T8600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 987.928516][ T8600] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.939981][T10547] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.947121][T10547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 987.962246][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.969370][T10547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 988.109225][ T8600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.144089][ T8600] veth0_vlan: entered promiscuous mode [ 988.154446][ T8600] veth1_vlan: entered promiscuous mode [ 988.177362][ T8600] veth0_macvtap: entered promiscuous mode [ 988.186443][ T8600] veth1_macvtap: entered promiscuous mode [ 988.202429][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.215315][ T8600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.228179][T10549] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.240665][T10549] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.257796][ T780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.267199][ T780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.291256][ T8600] ieee80211 phy100: Selected rate control algorithm 'minstrel_ht' [ 988.318571][ T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.325453][ T8600] ieee80211 phy101: Selected rate control algorithm 'minstrel_ht' [ 988.329658][ T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 988.366016][ T780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 988.374305][ T780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.430932][ T8179] Bluetooth: hci5: command tx timeout [ 991.381947][T17317] lec:lec_start_xmit: lec0:No lecd attached