last executing test programs: 23.794972609s ago: executing program 0 (id=3083): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800460000200000000000019078ac1e0001ac1414bb9404010010009078000814143670e41487fafa322b995897412b01cea2bf89"], 0x0) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x98}}, 0x801) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) unshare(0x22020400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') read(r5, &(0x7f0000000200)=""/196, 0xc4) accept4(r1, &(0x7f0000000200)=@ieee802154={0x24, @short}, &(0x7f0000000280)=0x80, 0x40800) sendmsg(r1, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) (async) syz_emit_ethernet(0x2e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffffffffffffff0800460000200000000000019078ac1e0001ac1414bb9404010010009078000814143670e41487fafa322b995897412b01cea2bf89"], 0x0) (async) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1], 0x98}}, 0x801) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r2, 0x0) (async) unshare(0x22020400) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1a0000004a00010000010000000000000a"], 0x1c}}, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') (async) read(r5, &(0x7f0000000200)=""/196, 0xc4) (async) accept4(r1, &(0x7f0000000200)=@ieee802154={0x24, @short}, &(0x7f0000000280)=0x80, 0x40800) (async) sendmsg(r1, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) (async) 23.562416887s ago: executing program 0 (id=3086): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r0, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r2, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x36}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x108, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3000}, {0x8, 0x15, 0xeeb}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x42f}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6}, {0x8, 0x15, 0x509}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x51de}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x4}}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x81, 0xfffff000, {{0x11, 0x4, 0x0, 0x22, 0x44, 0x64, 0x0, 0x1, 0x2d, 0x0, @empty, @broadcast, {[@end, @generic={0x44, 0xc, "cb3db24604d5d6084e53"}, @timestamp={0x44, 0x20, 0xb9, 0x0, 0x2, [0x9, 0xfffffff2, 0xffffffff, 0x1000, 0x7, 0x8, 0x2]}, @noop]}}}}}) sendmsg$nl_xfrm(r4, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)=@newae={0x238, 0x1e, 0x100, 0x70bd25, 0x25dfdbfc, {{@in6=@loopback, 0x4d4, 0x2, 0x6c}, @in=@multicast2, 0x9, 0x3501}, [@policy_type={0xa, 0x10, {0x1}}, @sa={0xe4, 0x6, {{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x4e22, 0x8, 0x4e23, 0x8, 0x2, 0x0, 0xa0, 0x3e, r5, 0xee00}, {@in=@multicast1, 0x4d6, 0x3c}, @in6=@local, {0x8, 0xe5, 0x1, 0x31, 0x7f, 0x1, 0x7fff, 0xffffffff}, {0x3, 0x81, 0x1, 0x401}, {0x9, 0x4, 0x42}, 0x70bd29, 0x3501, 0x2, 0x4, 0xa, 0x80}}, @mark={0xc, 0x15, {0x35075d, 0x898a}}, @coaddr={0x14, 0xe, @in=@multicast2}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}, @algo_auth={0xe0, 0x1, {{'sha3-384-generic\x00'}, 0x4c0, "9488aff6dd195c780aee87c0a31f42f7d0705f6931edb04949a1ca8fd556fd69dbd86ea219b1de68e491393d2e2a3df1ff7c8fb31097010e623943387d641bd72dac964a19b82e5a256ded8e19b03447bbf1294bf19ae22cb7eb17f9a0435a274f0eaf67910f6fcc0b3b5f0bb1be337f74e27be2ba888f74acdb514d1ad4ab7a3f6baa3329ddf5a227e03ca8291e4d347653c6155df2d72f"}}]}, 0x238}, 0x1, 0x0, 0x0, 0x80d4}, 0x20000000) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1bc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x50}, 0x8050) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000c80), r1) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x68, r6, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x9d}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xb23}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xcd0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8000}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x400}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000150}, 0x8001) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r3) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x1c, r7, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044881}, 0x2000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000f00)={0x0, 0x19}, &(0x7f0000000f40)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000f80)=r8, 0x4) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}]}, 0x24}}, 0x6e8fc50a54f8673a) r9 = accept4(r4, &(0x7f00000010c0)=@in={0x2, 0x0, @initdev}, &(0x7f0000001140)=0x80, 0x80000) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000001180), 0x3) syz_genetlink_get_family_id$devlink(&(0x7f00000011c0), r4) getpeername$unix(r3, &(0x7f0000001200), &(0x7f0000001280)=0x6e) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r10, &(0x7f0000001440)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x58, r11, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4805) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_DEFRAG_RANGE(r13, 0x40309410, &(0x7f0000001480)={0x8000, 0xb, 0x1, 0xfffffffd, 0x2, [0x1, 0x2, 0x7ff, 0x5]}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x44, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5995}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9e3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x2404001d) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r14, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x38, 0x0, 0x9, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008891}, 0x40000) 23.358186781s ago: executing program 0 (id=3087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x2404c844) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a003000"], 0xb8}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a050000000000000000000100000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380000001e0a01020000000000000000070000000900020073797a31000000000900010073797a30000000000900010009007a3000000000140000001000010000000000000000000084000a"], 0xbc}}, 0x0) r5 = socket(0x2d, 0x2, 0x0) sendmmsg$alg(r5, &(0x7f0000003180)=[{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="5df508ae54230bb0db1cdabba9943dc1bf06", 0x12}, {&(0x7f0000002d00)="9518c7a2d71f99629c76b26cc3162ff7f3d91ad1377493e3ed5f0a3347ea5b7f380961c2233cf48ef1cdcaf4087ef98c7403b9d9ce94c6f5d6ce08c8e5ce35c4c0b30f8037e40fe40c647856aa738e8a13c7373bf5c56242383bc3ca78ba74832f1e20f2d8ca71adfe214d2d940a75b4772ed801a048d0919c54c864455de31c", 0x80}, {&(0x7f0000002d80)="bbb69339b9f89650bd4bf2ab9a2f02ba0d84f1d30119be218533c166e4f0d2b8765007ecd5b7626635595aafd42178a2ea693645f1ca9a7a099ee9e176b0755dbc305fdb3b34a31554e82c991425d36fee0a3742d883831dd27be3f01a8dc294ac4fe520ec8de2d594b52efa6426616e48a68d888b384d89c7b64e18db8fe129ba63a3eab630dab21ecd039bf583bf8222ebef5bd476494a93df00034fec67b890a55a853a4914154e00fbabcf0a948362dbed22701a29b2", 0xb8}, {&(0x7f0000002e40)="f2f60b04c343362404ed1d0bec97a25ec35ab4b5fc6d61430f8786c9c38d05dd15998dc29b2ba018d9b9d9a361d4da13577be818b388b0b5e6476fbd5517413a1d77f1fc962101a60fcdb633f54789570e7e32214ea016cd7af6deb5ef64e03ed7d0c18b5eefc25b56f9af4f52320c5de64425e0f4ae2b2346a76bb5156476efe6745cd6400d369736ad61007129e132629377c4ccba93b12a12603dee7d562c540fa2c0a25692adba63cb6cb0396cd7784f1157031c04cfff0b4e5003ca4fe57b9fb797b46ac861dec3b235ec081b282bc550a451e2d3321176bdfb", 0xdc}, {&(0x7f0000002f40)="53659d9f1a0ea9e5ba0c5d4be92daf02e7c7d556d70bef8b67367de92973996a671083e0c840f5f8dd6d54602c86a87b1b301501bbe0e01ef1ce982adecaf36565de59737c57d38dfaa5abfd393587a434d50972a894d39f33fc", 0x5a}, {&(0x7f0000002fc0)="d6a9bf35938f8449dad6c5a444d71439b15e953bc6927baad565b6c89be59cbefbdb16be1ccf3141a2868525b1875a560b99d76fc9ea98f8c654b4259d8e357319caec81e0166246d3cc799dd044c8b9e2a96eeca35ea334d7e0550729d3022a64b787c44f1f632f80824ecd6a22a9b0fb3a6f01c684125dce264766aed422edf1e3fbd2bb6821c9ce5424f1a5b66eb5855d25feb99d185a821ea10d52a95d2d3f8af1fc9edb3bae618141ae6d451ad350c022f4688a710e0818e1279390e069bba892f3015497eb845ad5ac53c360bebd29c764cc36e44f11e7828068a5a1e9f33df794", 0xe4}], 0x7, &(0x7f0000003140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8c1}], 0x1, 0x9ed514cf098227c3) connect$qrtr(r5, &(0x7f0000000300)={0x2d, 0xffffffff, 0x2}, 0xc) bind$xdp(r5, &(0x7f0000000000)={0x2d, 0x8, 0x0, 0x12, r5}, 0x10) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e30000", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c00058018000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aa"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff}) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x6}, [@RTA_NH_ID={0x8, 0x1e, 0xa8600}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010100}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x0, 0xe2}}]}, 0x38}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000400)=0x401, 0x4) 23.309432509s ago: executing program 0 (id=3088): r0 = socket(0x9, 0x800, 0x4) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x108, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_USERDATA={0xc7, 0xd, 0x1, 0x0, "ade8cb30cb565f89f19dc9bafe63f184a787dd46160a7e009751487823859d20b5fbb93d2616c05f43725af44cd9e86acf1a637cb29c35815e3f6539319ade39c48d2128dbb16cad67c01959cb99bc364403a7396c44642040c4da5236c487bf620c5aaebdcbb888c41c5570b8614c3a62f7f2d4921bd44c4fa6f8868721d666b605676e23cf1bf7d331fa67c4589abf1e7944d7956b5e3a564e31b25d9d90f2d309b3f01d8c46e2697caff43db39f8e2fee6da4f43c36136558856db09010be083c2c"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x118, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x97, 0x6, "53879f137a10df6171b94f91c5d02b6494de93c69ce39d70b8af029444efa6baff405f4708f2845a0e7eab542599d1080b735f0960d6a2c5dd5411efe96806899ac93bb2f712baff152ab49b7b12608010bf0e985bf631831db63818d5977c2f0302a07eb52b38597cf71fbab3619226dd0753cb3034ea478bb4141e96d74abe57502fbec72f7eec476a6f462b699661265833"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x248}, 0x1, 0x0, 0x0, 0x4080}, 0x24004891) unshare(0x0) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xaa69031060c8d329, &(0x7f00000003c0)=0x7, 0x4) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r5 = epoll_create1(0x80000) r6 = getuid() r7 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x130, 0x30, 0x100, 0x70bd2d, 0x25dfdbfe, {0x1d}, [@typed={0x8, 0x87, 0x0, 0x0, @uid=0xee01}, @generic="21c8792239d4", @typed={0x8, 0x9d, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xb5, 0x0, 0x0, @uid=r6}, @nested={0xfc, 0x46, 0x0, 0x1, [@generic="bae232ded48efd565e20ec932d0516cce1ec590f9bb3381bd537f0a3e37a8e953366009bc35167ab33217da05be8e6bb407c6442ef1ce46f6b346c8325649327214b782cfeefc501388c38bed9e1c4451c9a93b16e1644674d34e7a4439f78340a1f09c5e9bc638cec14dcf0c46635193b7bc854d956a83df728b3568573f88eef6c6a263a3d3476be32063dc837a6380b131094e21e75476b618f7b8207151f0149dcd4f802a24086a026871f38c7c05431d28bc0c49c32e8441e2f7c362029cd5854078048e1c76246a33be2155df20e", @generic="1008161a5599a1b6824590dc62c101e1292417e6399444febaf11a", @nested={0x4, 0x30}, @typed={0x8, 0x41, 0x0, 0x0, @pid=r7}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x2404c040}, 0x20044010) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={0x0, @loopback, @dev}, &(0x7f0000000680)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@remote, @in=@multicast2, 0x4e20, 0x4, 0x4e24, 0x6, 0x8, 0x20, 0x80, 0x2f, r8, r6}, {0x4, 0x0, 0x9, 0x9, 0x1, 0x7, 0x8, 0x400}, {0x9e, 0xffffffff, 0x4, 0xfffffffffffffff7}, 0x101, 0x6e6bb7, 0x3596e49ecc2004a9, 0x1, 0x2}, {{@in6=@private2, 0x4d6, 0xff}, 0xa, @in=@rand_addr=0x64010100, 0x3500, 0x1, 0x0, 0x7, 0x7, 0x9}}, 0xe8) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000840)={{&(0x7f00000007c0)=""/3, 0x3}, &(0x7f0000000800), 0x1a}, 0x20) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$XFS_IOC_GOINGDOWN(r5, 0x8004587d, &(0x7f0000000880)=0x5) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r10, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c805}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000a40), &(0x7f0000000a80)=0x6) r12 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r12, 0x0, 0x482, &(0x7f0000000ac0)=""/102, &(0x7f0000000b40)=0x66) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0x58, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)=@getnexthop={0x30, 0x6a, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r8}, @NHA_OIF={0x8, 0x5, r13}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x4) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000d40)={0x2, 0x4e22, @private=0xa010102}, 0x10) r14 = openat$cgroup_type(r4, &(0x7f0000000d80), 0x2, 0x0) sendfile(r14, r3, &(0x7f0000000dc0)=0x7, 0x7) recvmmsg(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000e00)=""/43, 0x2b}, {&(0x7f0000000e40)=""/229, 0xe5}, {&(0x7f0000000f40)=""/236, 0xec}, {&(0x7f0000001040)=""/214, 0xd6}, {&(0x7f0000001140)=""/91, 0x5b}], 0x5}, 0xfffffbff}], 0x1, 0x2000, &(0x7f0000001280)={0x0, 0x989680}) 22.392023631s ago: executing program 0 (id=3097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000208000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000000000440000000220500020007000000480001800c0001006269747769736500300002800800034000000002080001400000001408000240000000120c0007800800010060ec697208000640000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0x114}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), 0xffffffffffffffff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x10, 0x0, 0x4, 0x20, 0x0, 0x0, 0x5, 0x6}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}]}, 0x34}, 0x1, 0xba01, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000001080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01001000f0004d5bf37b6f9d00000c00990001"], 0x20}, 0x1, 0x0, 0x0, 0x4008054}, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r9, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1000}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r9, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x4}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x1000}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x14, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x8, 0x7c}}, 0x14}}, 0x4008030) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r7, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x24}}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80640, 0x0) (async) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80640, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000080)={'veth1_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) (async) ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000080)={'veth1_to_batadv\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) 21.954176954s ago: executing program 0 (id=3105): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) (async) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2, 0x800}, 0x8) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) (async) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0xfc) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f00000006c0)='ns/time_for_children\x00') (async) sendmsg$nl_generic(r4, &(0x7f00000029c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002980)={&(0x7f0000001700)={0x1264, 0x22, 0x100, 0x70bd27, 0x25dfdbfb, {0x1c}, [@typed={0x8, 0x11c, 0x0, 0x0, @str='fib\x00'}, @nested={0x1004, 0xdc, 0x0, 0x1, [@generic="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"]}, @nested={0x65, 0x4e, 0x0, 0x1, [@generic="f6979f8cf35b350045c5c79ffac1c2ba5553e21b9c1c423c70139adf10f5c29468381852", @typed={0x8, 0xcb, 0x0, 0x0, @pid=r5}, @generic="6320589945624c94bf2a655fa6ec87a719747668a31ca3ab8cc2619d63916dec25869a4a00db79b36dc7ff9351c6f16a1d0c1aaaed"]}, @generic="85528ae68904f06168b5538df8295cb482204b46ffb57e5eef67747055ba6d6ccfa86da926e25d3b4cfd46c04e3c23a1eaf547766b8f93d378325e42992fc2189e6b794e15fe32e4f63c99eebcd1bab2fa32c43a0f2dadcb79c7791a8d5e745901a14e70b6034f7c3db3eebcd36f3022db812be254052863c3ffa3a11695fba72a71be87228c8414d9664e0322f260ced0e2aa35f76cf25a7b32744086f9790ab45b47176920059f870d8babc3cc986f98939a39206210c73f31b814f55847c4fa2039bed1d68ad74d244a422879c374aa04c0", @generic="bf831b1ddb98370f95259afa31fa20364ed9da63d93429b1bc837eae20e20a0141c26d59c0b9a99cc0ec34527446e7750fa66613f1335ccf1d4ba47d1119f7fac253123d0ab1367b4af366969b5c018d9a49d1472fc13e581d504e8a485ff6abf1957ff958f5b5ed2c9200b14cbe0c67f1d96e45585ff1de4772f3d2eb3bc8eebbdb3da3f188e4e37eb76b0537e9e5b9c23bc66b22400d60eb", @generic="5bbbcf52f8c87f7474119ad3a8c1ef7607517f7f54c85fbdc6bee8a4d8293fa2d771d3dafc93265224a91d2988be8bb2c8a5d8683a05360e7d74e3e474b5b505f3d0ac4479e8791e9d59c2e206b76d514974eb8ae8b7cf571e68715604013f3a5ddc8a0a8f761306d94070c721a881"]}, 0x1264}, 0x1, 0x0, 0x0, 0x24048041}, 0x8000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000040)={r6, @in6={{0x2, 0x0, 0x0, @empty}}}, &(0x7f0000000300)=0x90) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r6, 0x9}, &(0x7f0000000140)=0x8) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000060a090498748a0000000000000000020000001c0004801800018008000100666962001000028008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x70}}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000002c0)={0x7, 'veth1_vlan\x00', {0x1}, 0x1000}) (async) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2.083059484s ago: executing program 2 (id=3233): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x2, 0xff0}, &(0x7f0000000480)=0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004095) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0xa, 0xfff9}}, [@TCA_CHAIN={0x8, 0xb, 0xec}, @filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x4c}}, 0x24004000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.940243795s ago: executing program 2 (id=3235): r0 = socket$key(0xf, 0x3, 0x2) accept(r0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (rerun: 32) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) socket$key(0xf, 0x3, 0x2) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) accept4(r8, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000240)=0x80, 0x800) (async) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x1d}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0xffffffffffffff30, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0xffffffffffffff64}]}, 0x58}}, 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, 0x0, 0x0) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r12, 0x29, 0x50, 0x0, &(0x7f0000000280)) (async) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4c855}, 0xc000) r13 = accept$unix(r9, &(0x7f0000000540), &(0x7f00000005c0)=0x6e) (async, rerun: 32) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) vmsplice(r14, &(0x7f0000001800)=[{&(0x7f0000000000)="c5", 0x1}, {&(0x7f00000006c0)="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", 0x941}, {&(0x7f00000016c0)="681b0ab8b588", 0x6}, {&(0x7f00000017c0)="9046", 0x2}], 0x4, 0xa) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r13, 0x8002f515, &(0x7f0000002ac0)) 1.830922563s ago: executing program 1 (id=3238): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0xe}]}}, &(0x7f0000001f80)=""/237, 0x26, 0xed, 0x2}, 0x1a) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6400000002060301000000000000000000000000140007800800114000000000050015000c00000005000100060000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574000000090002"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40005) 1.658992717s ago: executing program 1 (id=3240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000002030104fa00000000000000000000000800034000000000080004400000000008000540000000000800010001"], 0x34}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0) (async) 1.550941191s ago: executing program 2 (id=3241): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x0, 0x0}, 0x78) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb0104180000000000000000000000000000000200000000006b6dda946664ca391a2d91024871a79e08e73ba3a11a78127c1f99cc4a7f2d0e37c60d5f9dbcc42387506e7021828d5db7b362a1e9b4fd8b053649f513b1e68c87a70c5c318d086b8b4d90130b931ca9ecf78ca9fbb76d1048a688f8952c32cf9d5faea3d973207ba08cbde84019fa9d6006ff91032d58a5f827b633c148bf054af5"], 0x0, 0x1a, 0x0, 0x1}, 0x28) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) (async) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x18000000000002a0, 0xfea7, 0xfffffffffffffdea, &(0x7f00000004c0)="b9fe14f088a865f986dd0000000000000000", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0xa) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)=@getpolicy={0x6c, 0x15, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x100, 0x2}, [@encap={0x1c, 0x4, {0xfffffffffffffffe, 0x4e21, 0x4e21, @in=@private=0xa010100}}]}, 0x6c}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00'}) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x4, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f0000000200)=0x18) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@migrate={0xac, 0x21, 0x1, 0x70bd27, 0x25dfdbfd, {{@in6=@private2, @in6=@remote, 0x4e21, 0x0, 0x4e21, 0x9ffd, 0x7, 0x180, 0x20, 0x87}, 0x6e6ba8, 0x1}, [@migrate={0x50, 0x11, [{@in=@private=0xa010100, @in6=@loopback, @in=@broadcast, @in=@empty, 0x6c, 0x1, 0x0, 0x3504, 0xa, 0x2}]}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x200040c0) (rerun: 32) 1.461231858s ago: executing program 1 (id=3243): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x5, 0x1, 0x0, 0x8, 0xc, 0xffff}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xffe0, 0xc}, {0x0, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000811}, 0x24045810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) pwrite64(r6, &(0x7f0000000100)='b', 0x1, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) listen(r7, 0x3) ppoll(&(0x7f0000000280)=[{r7, 0xc0}], 0x1, &(0x7f0000000440), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000480)={{r7, &(0x7f0000000100)='}[/\x00', 0x80141, &(0x7f0000000140)={@_ha_fsid={[0xeb, 0xfff]}, {0xf, 0x101, 0x4, 0x4}}, 0x9, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x10001}, {[0x2, 0x0, 0x0, 0x3]}, 0xd, 0x9, &(0x7f0000000400)=""/9}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x4010744d, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.319102992s ago: executing program 3 (id=3244): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000020000103000006000020093568c7b80ad0c9814dc88e1a46fc2777d66329", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB], 0x28}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x1]}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r7, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xebbd, 0x1}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0xc845}, 0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f00000002c0)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x111, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0xfd, 0x0, @opaque="e37072a32bc1a29b53cf48d215433eb7956cee84c41bb99e22c08d7de107c4125cc05489aa9829365cd26ff54e309490ab212a2199314f0fe97172eb7795978ddf7979d3324fef1f3452197e74ad355dc21e2f22642d84e7cb07dfbb5e84b07e9dd947571e90ea79445f7638db46bc37e3dc144ebe297e15b2e739b56da0781f25b44a784d627e11c37a7933b7d3b7c99a35c088136538ef4c5c23cb63404d45704ff259a4a10578088f8b18781491e3c2bb5ca3b0f878a0687464a75968c8781a56c67faaae03841ac630be204782cff6495d964678738ec71949c72b8bf8ba2a79d7cc10b33b6831bc01fb9e6edeb7e89574cc9c"}}}, 0x11f) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.252414649s ago: executing program 4 (id=3245): sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24000041) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r1, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000100)={&(0x7f0000000040)=@can={{0x1, 0x1}, 0x7, 0x3, 0x0, 0x0, "b84deece47bb12eb"}, 0x10}, 0x1, 0x0, 0x0, 0x4773de44734917b3}, 0x20044000) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4], 0x48}}, 0x0) 1.198771188s ago: executing program 2 (id=3246): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x10012, r0, 0xffffe000) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r4, r2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.026564796s ago: executing program 3 (id=3247): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)={0x18, r1, 0x1, 0x3, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000000)='\a\x00S') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0xa, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0xc2d7, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r13, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) (async) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0x6}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) socket$kcm(0x29, 0x0, 0x0) 963.342601ms ago: executing program 2 (id=3248): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001ac0), 0x6) ioctl$sock_bt_hci(r0, 0x400448dc, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="955232d6c9", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000000c0)="fb43d3958653c4", 0x7}], 0x1}}], 0x2, 0x4044805) splice(r1, 0x0, r2, 0x0, 0x8000000000025a5, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280060014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r5, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @ldst={0x3, 0x0, 0x0, 0x9, 0x1, 0xfffffffffffffff8, 0x1}, @generic={0x6, 0x9, 0xf, 0x8001, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001}, @tail_call, @map_fd={0x18, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x27ac0000, 0x60, &(0x7f0000000480)=""/96, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x0, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x0, 0x5, 0x10, 0x2}], 0x10, 0x200}, 0x94) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0x0, 0x1ff, 0x10}, 0xc) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2c9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0x8, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x100, 0x49, &(0x7f0000000180)=""/73, 0x41000, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x2, 0xc, 0x1, 0x4}, 0x10, r5, r6, 0x7, &(0x7f0000000980)=[r7, r8, r9, 0xffffffffffffffff, r0, r10, r11], &(0x7f00000009c0)=[{0x1, 0x1, 0x9, 0x7}, {0x4, 0x3, 0xb, 0xc}, {0x3, 0x4, 0x4, 0x8}, {0x3, 0x3, 0xd, 0xc}, {0x5, 0x3, 0x6, 0x7}, {0x1, 0x2, 0x2, 0x9}, {0x3, 0x3, 0x9, 0xa}], 0x10, 0x5}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r13, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r14, @ANYBLOB="f5ff0f00250e72dc0f52152155b21c03000000000000006f6e64000000000c0002"], 0x3c}}, 0x20000000) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r14}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newlink={0xc0, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x20}}]}}}, @IFLA_MASTER={0x8, 0xa, r14}, @IFLA_PHYS_SWITCH_ID={0x4}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'vxcan0\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, @IFLA_PORT_SELF={0x40, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "0147f3398f4fb4931076484b581085c2"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "00000000000000000000000002abdfd3"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'ip6gre\x00'}]}, @IFLA_IFALIAS={0x14, 0x14, 'ip6_vti0\x00'}]}, 0xc0}}, 0x0) socket(0x200000000000011, 0x2, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r15, &(0x7f0000003680)={&(0x7f0000000400)=@proc={0x10, 0x0, 0x25dfdbfc, 0x5202000}, 0xc, &(0x7f0000003640)=[{&(0x7f00000036c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="afe94b8915fcd3c7cd355fb39c1885fc9dce3e1c0ce5da13cc75d750f5ac8539397d5b9284ce6ad02225aae40d7b7f8679d9cc8a270c3c374b20d86d075994a15a067dfec472330ed381318e529199de152a0ba5bf0443524dfca826caff5a3c6d06eafd4e42e1e737d5402a4c02408e6d010e6dad673f55ef5d"], 0x1098}], 0x1, 0x0, 0x0, 0x10}, 0x20000800) 840.207668ms ago: executing program 4 (id=3249): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2d24d, 0x11f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x400, 0xce4d}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0xa, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040001}, 0x4080) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000400)={{r2}, "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"}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x6}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) 828.009213ms ago: executing program 1 (id=3250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) (async, rerun: 32) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000002c0)=[@mss={0x2, 0x9}, @mss={0x2, 0x6}, @sack_perm, @mss={0x2, 0x400009}, @mss={0x2, 0x7}, @timestamp, @mss={0x2, 0xf}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0xcab9, 0x6}], 0xb) sendmsg$netlink(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000600)=ANY=[], 0x72}, {0x0}], 0x2, 0x0, 0x0, 0x4040000}, 0x4080) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000900)={0x42, 0x1, 0x3}, 0x10) (async) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async, rerun: 64) r6 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x2, 0x2}, 0x10) (async) sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40040d0}, 0x0) (async) connect$unix(r0, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0xa0030000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) syz_open_procfs$namespace(r8, &(0x7f0000000140)='ns/uts\x00') (async) openat$cgroup_type(r7, &(0x7f0000000100), 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 571.10475ms ago: executing program 4 (id=3251): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0xf, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}, @jmp={0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff0}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 568.712603ms ago: executing program 3 (id=3252): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000024c0)={r3, "74e6e85bb1196dc6b14e83ecaadb5f69"}) write$cgroup_subtree(r2, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r4}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r4, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$xdp(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="39683eb405fd9d2e58a333f3419b7e1ae787e7d6390e2bcc352571005c", 0x1d}, {&(0x7f0000000040)="e891f339ae1861e4fdb23b896ac4ecca65a464bbe84c595133f5ac572b4f0e32f61cbb1319eb6d9e881cfabdbb7777d13d8fd8fbc831c5b3e2082a6659ad25e91fad35c27b0f0721a54db30b7c05063465ef95533720da22685cc8f429bfa6cce47ac78b279c850cc0d31e75f56881e80620fc172bedf35b3b46ed50261ae829aed6501f3b3496dded17714083e0f0ee14652b71cbe489afebc5a2a99cc07e97be3c030c16ef13fe899ca5d67b8d74b486159ba9b6da9293af1a9e1b323d2e2376d480900ae80fac56", 0xc9}, {&(0x7f0000000140)="7b9dbd8451bfa9cda80029cb2a936ffb934f5d4c8c8319a810266908ab398a27a1cdd349ae7623b161035c0c73d9f984cb953a0ea85de5f1d60f38c1511b7b1d13ba9f190e36e640504c4761caaf88cf0b01030690f51699c8a1bb3c0e1ac8e19a7611", 0x63}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="e04f625122949ca30f735aaf4d25c3eeede2ecd540c2c85e6a1237d0cf2de0b44b0e04c7c5e3fcbadc7296166286cf28a793a431b80808f8a5e6820b4edeba35eeeb030ac37aa466ceacbf9ad0935e8f91b7d802d1ddd44f00ed8b43cc005118291e4e0af17a0db7c548cce9897dc7e159b574ab24a9467dcc96dd365b0e69080574b3b301f957ba2b5cdcda341f3fc725db43920ca04ddd4052c4458754ad3fb8a1ddae53c6c668ee501633caa9de61816d9a839a5ff8cc9ded305da71b0964d88b", 0xc2}], 0x5, 0x0, 0x0, 0x20040081}, 0x80) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000001740)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f00000024c0)={r3, "74e6e85bb1196dc6b14e83ecaadb5f69"}) (async) write$cgroup_subtree(r2, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1, 0x42, 0x40, 0x0, 0x1}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x107d, r4}, 0x38) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001dc0)={r4, &(0x7f0000000d00), &(0x7f0000000dc0)=""/4096}, 0x20) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$xdp(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000000)="39683eb405fd9d2e58a333f3419b7e1ae787e7d6390e2bcc352571005c", 0x1d}, {&(0x7f0000000040)="e891f339ae1861e4fdb23b896ac4ecca65a464bbe84c595133f5ac572b4f0e32f61cbb1319eb6d9e881cfabdbb7777d13d8fd8fbc831c5b3e2082a6659ad25e91fad35c27b0f0721a54db30b7c05063465ef95533720da22685cc8f429bfa6cce47ac78b279c850cc0d31e75f56881e80620fc172bedf35b3b46ed50261ae829aed6501f3b3496dded17714083e0f0ee14652b71cbe489afebc5a2a99cc07e97be3c030c16ef13fe899ca5d67b8d74b486159ba9b6da9293af1a9e1b323d2e2376d480900ae80fac56", 0xc9}, {&(0x7f0000000140)="7b9dbd8451bfa9cda80029cb2a936ffb934f5d4c8c8319a810266908ab398a27a1cdd349ae7623b161035c0c73d9f984cb953a0ea85de5f1d60f38c1511b7b1d13ba9f190e36e640504c4761caaf88cf0b01030690f51699c8a1bb3c0e1ac8e19a7611", 0x63}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="e04f625122949ca30f735aaf4d25c3eeede2ecd540c2c85e6a1237d0cf2de0b44b0e04c7c5e3fcbadc7296166286cf28a793a431b80808f8a5e6820b4edeba35eeeb030ac37aa466ceacbf9ad0935e8f91b7d802d1ddd44f00ed8b43cc005118291e4e0af17a0db7c548cce9897dc7e159b574ab24a9467dcc96dd365b0e69080574b3b301f957ba2b5cdcda341f3fc725db43920ca04ddd4052c4458754ad3fb8a1ddae53c6c668ee501633caa9de61816d9a839a5ff8cc9ded305da71b0964d88b", 0xc2}], 0x5, 0x0, 0x0, 0x20040081}, 0x80) (async) syz_emit_ethernet(0x20, &(0x7f0000002480)={@random="2b893c1caa3e", @random="caf66222e6aa", @void, {@llc_tr={0x11, {@snap={0xaa, 0xab, "a3", "d6d9cc", 0x884c, "45bb8c97ec23fa20ead1"}}}}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000040)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x800}, 0x2004c008) (async) 433.581163ms ago: executing program 4 (id=3253): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x100, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r1, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82b83f", 0x3}], 0x1}, 0x4) 411.985697ms ago: executing program 1 (id=3254): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xbb42, 0xdc}, &(0x7f0000000380)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[], 0x0, 0x3f, 0x0, 0x2}, 0x28) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={r1, 0x9, 0x4, [0x1, 0xa, 0x3, 0x4]}, &(0x7f0000000400)=0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000440)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x80000) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x7fffffff}, &(0x7f0000000340)=0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) pipe(&(0x7f0000000580)={0xffffffffffffffff}) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000000)=r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x140f, 0x1, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40008c0}, 0x40810) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0x0, 0x5, 0x3, 0x6, 0x4}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) recvmmsg(r10, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) sendmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 307.263475ms ago: executing program 3 (id=3255): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r2, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r2}, 0x94) 227.208228ms ago: executing program 4 (id=3256): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="6102330050300100080211000001080211"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 190.327968ms ago: executing program 3 (id=3257): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @private2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110000000040004"], 0x28}, 0x4004004) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}, {0x0, 0x700}, {&(0x7f0000000280)='4', 0x1}], 0x3}, 0x804) socket$inet6_tcp(0xa, 0x1, 0x0) 27.238761ms ago: executing program 4 (id=3258): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000240)={0x1080}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="240000001200211700000000000000f706000000", @ANYRES32=0x0, @ANYRES32=r1], 0x24}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000120000030000000000000000e000000100000000000000000000000000000000000033005c00120067636d5f62617365287834732d63617374362d6176782c777035313229000000000000000000000000000000000000000000000000000000000000000000000042000000a0000000662d5b0cd89eac5484a1f7ff9dcba0e8080016003c000000"], 0x8c}}, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x2c, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$802154_dgram(r3, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x11, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008c10}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc00000010000100feffffff0001000000000000000000000000000000000000fc010000000000000000000000000001000107144e230005000000006c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0) 26.528344ms ago: executing program 3 (id=3259): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) (async) sendmsg$can_j1939(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x1d, r2, 0x0, {0x0, 0xf0, 0x4}, 0x2}, 0x18, &(0x7f00000002c0)={&(0x7f0000000240)="d89c9a9e5d5b5d7ee98bcbff89690ad44f5333f03e8667130f7edeac1f6266d83be0e44bd7aa5a0480976757", 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x882}, 0x0) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}], 0x1}}], 0x1, 0x41) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000180)=0x1, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfff2, 0xfff2}, {0x5, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2000c083}, 0x20000050) 15.371023ms ago: executing program 2 (id=3260): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x95, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) listen(r1, 0x1) r4 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaeaaffffffffff74ab00450001280000000000019078ac1e0001ffffffff0e0090787fff01fbfffffff30054271e"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'macvtap0\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r8, 0x29, 0x3a, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32=r7, @ANYBLOB="14000100ff05000000000000dfce00000000000108000800"], 0x34}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 1 (id=3261): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000880000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) kernel console output (not intermixed with test programs): te type 1 has an invalid length. [ 205.425238][T11421] netlink: 'syz.0.1498': attribute type 1 has an invalid length. [ 205.500995][T11421] 8021q: adding VLAN 0 to HW filter on device bond14 [ 205.685410][T11429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.720054][T11443] netlink: 'syz.0.1506': attribute type 1 has an invalid length. [ 205.820587][T11429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.061902][T11449] ip6gretap2: entered promiscuous mode [ 206.091899][T11449] ip6gretap2: entered allmulticast mode [ 206.122790][T11449] bond15: (slave ip6gretap2): making interface the new active one [ 206.138902][T11449] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 206.151010][T11449] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 206.159077][T11449] bond15: (slave ip6gretap2): Enslaving as an active interface with an up link [ 206.194660][T11468] netlink: 'syz.4.1510': attribute type 1 has an invalid length. [ 206.331577][T11471] netlink: 'syz.0.1513': attribute type 64 has an invalid length. [ 206.432598][T11481] __nla_validate_parse: 5 callbacks suppressed [ 206.432616][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1515'. [ 206.490841][T11481] veth0_macvtap: left promiscuous mode [ 206.556419][T11485] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1518'. [ 206.594054][T11485] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1518'. [ 206.926571][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 206.971750][T11517] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 207.172450][T11529] netlink: 'syz.3.1530': attribute type 1 has an invalid length. [ 207.339943][T11529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.370995][T11535] netlink: 'syz.0.1533': attribute type 1 has an invalid length. [ 207.437055][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 207.450983][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1533'. [ 207.537146][T11550] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 207.653023][T11536] xfrm1: entered promiscuous mode [ 207.672890][T11536] xfrm1: entered allmulticast mode [ 207.695134][T11556] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1538'. [ 207.844257][T11570] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1541'. [ 207.878254][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1541'. [ 207.957744][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1543'. [ 208.080455][T11572] block nbd0: Unsupported socket: should be TCP or UNIX. [ 208.377186][T11596] veth1_macvtap: left promiscuous mode [ 208.480728][T11604] netlink: 'syz.4.1554': attribute type 21 has an invalid length. [ 209.348853][T11648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.462891][T11657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.557859][T11657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.707914][T11675] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 209.923040][T11679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.009548][T11679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.061212][T11679] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 210.079686][T11679] veth0_to_bond: left promiscuous mode [ 210.099628][T11679] bond0 (unregistering): Released all slaves [ 210.585996][T11712] lo: entered promiscuous mode [ 210.624963][T11712] tunl0: entered promiscuous mode [ 210.657520][T11712] tunl0: entered allmulticast mode [ 210.695677][T11712] gre0: entered promiscuous mode [ 210.710724][T11712] gre0: entered allmulticast mode [ 210.768067][T11712] bridge0: port 1(gretap0) entered disabled state [ 210.804947][T11712] erspan0: entered allmulticast mode [ 210.824339][T11712] ip_vti0: entered promiscuous mode [ 210.844287][T11712] ip_vti0: entered allmulticast mode [ 210.864322][T11712] ip6_vti0: entered promiscuous mode [ 210.882821][T11712] ip6_vti0: entered allmulticast mode [ 210.901251][T11712] sit0: entered promiscuous mode [ 210.916479][T11712] sit0: entered allmulticast mode [ 210.941638][T11712] ip6tnl0: entered promiscuous mode [ 210.955856][T11712] ip6tnl0: entered allmulticast mode [ 210.974934][T11712] ip6gre0: entered promiscuous mode [ 210.980347][T11712] ip6gre0: entered allmulticast mode [ 210.988138][T11712] syz_tun: entered promiscuous mode [ 210.993531][T11712] syz_tun: entered allmulticast mode [ 211.002125][T11712] ip6gretap0: entered promiscuous mode [ 211.007614][T11712] ip6gretap0: entered allmulticast mode [ 211.016967][T11712] bridge0: entered promiscuous mode [ 211.022358][T11712] bridge0: entered allmulticast mode [ 211.031406][T11712] vcan0: entered promiscuous mode [ 211.036602][T11712] vcan0: entered allmulticast mode [ 211.043604][T11712] bond0: entered promiscuous mode [ 211.050208][T11712] batadv0: entered promiscuous mode [ 211.055643][T11712] bond0: entered allmulticast mode [ 211.061226][T11712] batadv0: entered allmulticast mode [ 211.069428][T11712] team0: entered allmulticast mode [ 211.076297][T11712] nlmon0: entered promiscuous mode [ 211.081833][T11712] nlmon0: entered allmulticast mode [ 211.090851][T11712] vxcan0: entered promiscuous mode [ 211.096014][T11712] vxcan0: entered allmulticast mode [ 211.103079][T11712] vxcan1: entered promiscuous mode [ 211.108248][T11712] vxcan1: entered allmulticast mode [ 211.119533][T11712] veth0: entered promiscuous mode [ 211.124703][T11712] veth0: entered allmulticast mode [ 211.134211][T11712] veth1: entered promiscuous mode [ 211.139602][T11712] veth1: entered allmulticast mode [ 211.150838][T11712] wg0: entered promiscuous mode [ 211.155884][T11712] wg0: entered allmulticast mode [ 211.165123][T11712] wg1: entered promiscuous mode [ 211.170838][T11712] wg1: entered allmulticast mode [ 211.176609][T11712] wg2: entered promiscuous mode [ 211.181998][T11712] wg2: entered allmulticast mode [ 211.189393][T11712] veth0_to_bridge: entered promiscuous mode [ 211.195324][T11712] veth0_to_bridge: entered allmulticast mode [ 211.203759][T11712] bridge_slave_0: entered promiscuous mode [ 211.212324][T11712] veth1_to_bridge: entered promiscuous mode [ 211.218861][T11712] veth1_to_bridge: entered allmulticast mode [ 211.226898][T11712] bridge_slave_1: entered promiscuous mode [ 211.233432][T11712] bridge_slave_1: entered allmulticast mode [ 211.240908][T11712] veth0_to_bond: entered promiscuous mode [ 211.246840][T11712] veth0_to_bond: entered allmulticast mode [ 211.254808][T11712] bond_slave_0: entered promiscuous mode [ 211.261065][T11712] bond_slave_0: entered allmulticast mode [ 211.269689][T11712] veth1_to_bond: entered promiscuous mode [ 211.275462][T11712] veth1_to_bond: entered allmulticast mode [ 211.283987][T11712] bond_slave_1: entered promiscuous mode [ 211.289752][T11712] bond_slave_1: entered allmulticast mode [ 211.297214][T11712] veth1_to_team: entered promiscuous mode [ 211.303803][T11712] veth1_to_team: entered allmulticast mode [ 211.312779][T11712] team_slave_1: entered promiscuous mode [ 211.319826][T11712] team_slave_1: entered allmulticast mode [ 211.327972][T11712] veth0_to_batadv: entered promiscuous mode [ 211.334095][T11712] veth0_to_batadv: entered allmulticast mode [ 211.342450][T11712] batadv_slave_0: entered promiscuous mode [ 211.348410][T11712] batadv_slave_0: entered allmulticast mode [ 211.356240][T11712] veth1_to_batadv: entered promiscuous mode [ 211.363160][T11712] veth1_to_batadv: entered allmulticast mode [ 211.371728][T11712] batadv_slave_1: entered promiscuous mode [ 211.377593][T11712] batadv_slave_1: entered allmulticast mode [ 211.386031][T11712] xfrm0: entered promiscuous mode [ 211.391602][T11712] xfrm0: entered allmulticast mode [ 211.398712][T11712] veth0_to_hsr: entered promiscuous mode [ 211.404388][T11712] veth0_to_hsr: entered allmulticast mode [ 211.414366][T11712] veth1_to_hsr: entered promiscuous mode [ 211.420141][T11712] veth1_to_hsr: entered allmulticast mode [ 211.430879][T11712] 0·: entered promiscuous mode [ 211.438829][T11712] veth1_virt_wifi: entered promiscuous mode [ 211.444776][T11712] veth1_virt_wifi: entered allmulticast mode [ 211.453130][T11712] veth0_virt_wifi: entered promiscuous mode [ 211.459398][T11712] veth0_virt_wifi: entered allmulticast mode [ 211.467167][T11712] virt_wifi0: entered promiscuous mode [ 211.473500][T11712] virt_wifi0: entered allmulticast mode [ 211.479605][T11712] veth1_vlan: entered allmulticast mode [ 211.486990][T11712] veth0_vlan: entered allmulticast mode [ 211.495521][T11712] vlan0: entered promiscuous mode [ 211.500989][T11712] vlan0: entered allmulticast mode [ 211.509733][T11712] vlan1: entered promiscuous mode [ 211.514915][T11712] vlan1: entered allmulticast mode [ 211.522348][T11712] macvlan0: entered allmulticast mode [ 211.530248][T11712] macvlan1: entered promiscuous mode [ 211.535591][T11712] macvlan1: entered allmulticast mode [ 211.543426][T11712] ipvlan0: entered promiscuous mode [ 211.548750][T11712] ipvlan0: entered allmulticast mode [ 211.554147][T11712] ipvlan1: entered promiscuous mode [ 211.560604][T11712] ipvlan1: entered allmulticast mode [ 211.566151][T11712] veth1_macvtap: entered promiscuous mode [ 211.572242][T11712] veth1_macvtap: entered allmulticast mode [ 211.586501][T11712] macvtap0: entered promiscuous mode [ 211.591999][T11712] macvtap0: entered allmulticast mode [ 211.599549][T11712] macsec0: entered allmulticast mode [ 211.605223][T11712] geneve0: entered promiscuous mode [ 211.610673][T11712] geneve0: entered allmulticast mode [ 211.617996][T11712] geneve1: entered promiscuous mode [ 211.623294][T11712] geneve1: entered allmulticast mode [ 211.631295][T11712] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 211.640048][T11712] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 211.647348][T11712] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 211.663233][T11712] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 211.670587][T11712] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 211.681391][T11712] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 211.688875][T11712] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 211.699337][T11712] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 211.706588][T11712] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 211.714916][T11712] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 211.722045][T11712] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 211.730764][T11712] bond1: entered promiscuous mode [ 211.735848][T11712] bond1: entered allmulticast mode [ 211.741312][T11712] syztnl2: entered promiscuous mode [ 211.746555][T11712] syztnl2: entered allmulticast mode [ 211.752159][T11712] ieee802154 phy1 wpan2: entered promiscuous mode [ 211.758693][T11712] ieee802154 phy1 wpan2: entered allmulticast mode [ 211.765286][T11712] ieee802154 phy1 wpan1: entered promiscuous mode [ 211.772544][T11712] ieee802154 phy1 wpan1: entered allmulticast mode [ 211.779313][T11712] vxlan0: entered promiscuous mode [ 211.784428][T11712] vxlan0: entered allmulticast mode [ 211.789965][T11712] mac80211_hwsim hwsim2 rose0: entered promiscuous mode [ 211.796996][T11712] mac80211_hwsim hwsim2 rose0: entered allmulticast mode [ 211.804429][T11712] sit1: entered promiscuous mode [ 211.825463][T11712] macvlan2: entered promiscuous mode [ 211.831205][T11712] macvlan2: entered allmulticast mode [ 211.836840][T11712] vcan1: entered promiscuous mode [ 211.842047][T11712] vcan1: entered allmulticast mode [ 211.849571][T11712] bond2: entered promiscuous mode [ 211.854731][T11712] bond2: entered allmulticast mode [ 211.863108][T11712] bridge1: entered promiscuous mode [ 211.868390][T11712] bridge1: entered allmulticast mode [ 211.875142][T11712] mac80211_hwsim hwsim15 wlan2: entered promiscuous mode [ 211.882743][T11712] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 211.890499][T11712] veth2: entered promiscuous mode [ 211.895586][T11712] veth2: entered allmulticast mode [ 211.900977][T11712] veth3: entered promiscuous mode [ 211.906023][T11712] veth3: entered allmulticast mode [ 211.911749][T11712] bridge2: entered promiscuous mode [ 211.917239][T11712] bridge2: entered allmulticast mode [ 211.923269][T11712] ipip0: entered promiscuous mode [ 211.928541][T11712] ipip0: entered allmulticast mode [ 211.934615][T11712] ipip1: entered promiscuous mode [ 211.939883][T11712] ipip1: entered allmulticast mode [ 211.945933][T11712] syztnl1: entered promiscuous mode [ 211.951247][T11712] syztnl1: entered allmulticast mode [ 211.956633][T11712] ip6gre1: entered promiscuous mode [ 211.961934][T11712] ip6gre1: entered allmulticast mode [ 211.967910][T11712] bridge3: entered promiscuous mode [ 211.973656][T11712] bridge3: entered allmulticast mode [ 211.980789][T11712] bond3: entered promiscuous mode [ 211.985817][T11712] geneve2: entered promiscuous mode [ 211.992684][T11712] vlan2: entered promiscuous mode [ 211.999769][T11712] gre1: entered promiscuous mode [ 212.004742][T11712] gre1: entered allmulticast mode [ 212.024361][T11712] bridge4: entered promiscuous mode [ 212.029731][T11712] bridge4: entered allmulticast mode [ 212.036540][T11712] gre2: entered promiscuous mode [ 212.042748][T11712] gre2: entered allmulticast mode [ 212.049479][T11712] bond4: entered promiscuous mode [ 212.054543][T11712] bond4: entered allmulticast mode [ 212.063115][T11712] bond5: entered promiscuous mode [ 212.068164][T11712] bond5: entered allmulticast mode [ 212.169852][T11733] __nla_validate_parse: 4 callbacks suppressed [ 212.169869][T11733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1585'. [ 212.243315][ T1059] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.276396][ T1059] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.364450][ T1059] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.410033][ T1059] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.807057][T11764] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.819367][T11765] bridge: RTM_NEWNEIGH with invalid ether address [ 212.830682][T11765] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.837940][T11765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.845551][T11765] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.852822][T11765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.374748][T11787] tun0: tun_chr_ioctl cmd 1074025675 [ 213.393959][T11787] tun0: persist disabled [ 213.655659][T11799] syzkaller0: entered promiscuous mode [ 213.663497][T11802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1605'. [ 213.686067][T11799] syzkaller0: entered allmulticast mode [ 213.717977][T11806] sctp: [Deprecated]: syz.0.1606 (pid 11806) Use of int in max_burst socket option deprecated. [ 213.717977][T11806] Use struct sctp_assoc_value instead [ 214.061033][T11814] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1608'. [ 214.218652][T11831] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1613'. [ 214.568144][T11850] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1618'. [ 214.706478][T11857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1619'. [ 214.725941][T11857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1619'. [ 214.900258][T11866] netlink: 'syz.3.1624': attribute type 12 has an invalid length. [ 215.055803][T11878] nftables ruleset with unbound set [ 215.113423][T11871] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 215.131213][T11871] bond0 (unregistering): Released all slaves [ 215.423583][T11890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.430889][T11890] IPv6: NLM_F_CREATE should be set when creating new route [ 215.485900][T11894] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 216.024082][T11932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1641'. [ 216.045017][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1641'. [ 216.073513][T11932] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1641'. [ 216.809991][T11982] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.886548][T11985] syzkaller0: entered promiscuous mode [ 216.892863][T11985] syzkaller0: entered allmulticast mode [ 217.379380][T12019] __nla_validate_parse: 5 callbacks suppressed [ 217.379397][T12019] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1663'. [ 217.441158][T12021] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1667'. [ 219.336880][T12032] tipc: Enabling of bearer rejected, failed to enable media [ 219.427915][T12045] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 219.447897][T12045] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 219.748122][T12062] bridge5: entered promiscuous mode [ 219.756371][T12062] bridge5: entered allmulticast mode [ 219.869672][T12068] tipc: Started in network mode [ 219.890938][T12068] tipc: Node identity 9e328445348c, cluster identity 4711 [ 219.914520][T12068] tipc: Enabled bearer , priority 0 [ 220.007383][T12065] syzkaller0: entered promiscuous mode [ 220.013109][T12065] syzkaller0: entered allmulticast mode [ 220.035106][T12065] tipc: Resetting bearer [ 220.062371][T12081] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.070208][T12081] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.114988][T12064] tipc: Resetting bearer [ 220.677136][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1688'. [ 222.305750][T12064] tipc: Disabling bearer [ 222.330452][T12113] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 222.330712][ T5766] tipc: Node number set to 2864612421 [ 222.910084][T12157] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.117585][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 223.169179][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1705'. [ 223.317803][T12186] syzkaller0: entered promiscuous mode [ 223.347949][T12186] syzkaller0: entered allmulticast mode [ 223.353201][T12184] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 223.390207][T12184] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 223.443460][T12193] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1708'. [ 223.604948][T12204] netlink: 'syz.0.1711': attribute type 29 has an invalid length. [ 223.632387][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 223.774352][T12204] netlink: 'syz.0.1711': attribute type 29 has an invalid length. [ 223.815420][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1711'. [ 223.866166][T12198] vxcan1 speed is unknown, defaulting to 1000 [ 223.971954][T12225] gre1: entered promiscuous mode [ 224.673892][T12267] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 224.826001][T12276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1728'. [ 225.292358][T12293] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1733'. [ 225.327717][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 225.356796][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1733'. [ 225.432704][T12297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1735'. [ 225.873625][T12319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.107299][T12393] bond6: entered promiscuous mode [ 227.115196][T12393] bond6: entered allmulticast mode [ 227.262806][T12415] netlink: 'syz.4.1764': attribute type 15 has an invalid length. [ 227.370880][T12415] netlink: 'syz.4.1764': attribute type 15 has an invalid length. [ 227.380793][ T35] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 227.406805][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 227.438238][T12421] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 227.472606][ T35] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 227.504935][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 228.138074][T12456] netlink: 'syz.1.1777': attribute type 4 has an invalid length. [ 228.423244][T12470] __nla_validate_parse: 19 callbacks suppressed [ 228.423263][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'. [ 228.458171][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1780'. [ 228.680801][T12492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1785'. [ 228.819918][T12495] syzkaller0: entered promiscuous mode [ 228.841185][T12495] syzkaller0: entered allmulticast mode [ 228.949891][T12505] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 228.975561][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1791'. [ 228.987970][T12507] xt_policy: output policy not valid in PREROUTING and INPUT [ 229.084214][T12515] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1792'. [ 229.126907][T12515] nbd: socks must be embedded in a SOCK_ITEM attr [ 229.177808][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'. [ 229.183479][T12521] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1792'. [ 229.187938][T12518] netlink: 'syz.4.1794': attribute type 3 has an invalid length. [ 229.204035][T12518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'. [ 229.245657][T12518] netlink: 'syz.4.1794': attribute type 3 has an invalid length. [ 229.536830][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 229.571106][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1799'. [ 230.036756][T12570] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.044493][T12570] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.254703][T12577] vlan3: entered promiscuous mode [ 230.271937][T12577] bridge0: entered promiscuous mode [ 230.821582][T12619] syzkaller1: entered promiscuous mode [ 230.842300][T12619] syzkaller1: entered allmulticast mode [ 231.222175][T12642] netlink: 'syz.2.1833': attribute type 2 has an invalid length. [ 231.353436][T12644] bond6: option min_links: invalid value (18446744073709551614) [ 231.378671][T12644] bond6: option min_links: allowed values 0 - 2147483647 [ 231.422400][T12644] bond6 (unregistering): Released all slaves [ 233.105292][T12706] Bluetooth: MGMT ver 1.23 [ 233.186169][T12711] netlink: 'syz.0.1854': attribute type 15 has an invalid length. [ 233.255653][ T148] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 233.291231][ T148] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 233.321163][ T148] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 233.359568][ T148] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 233.383769][T12719] xt_check_target_common: 55 callbacks suppressed [ 233.383787][T12719] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 233.441352][T12718] __nla_validate_parse: 15 callbacks suppressed [ 233.441368][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 233.462246][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1856'. [ 233.484651][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'. [ 233.723129][ T1059] tipc: Subscription rejected, illegal request [ 233.788015][T12736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.992707][T12753] syzkaller0: entered promiscuous mode [ 233.999239][T12753] syzkaller0: entered allmulticast mode [ 234.018654][T12754] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1866'. [ 234.345819][T12772] IPv6: NLM_F_REPLACE set, but no existing node found! [ 234.557942][T12770] tipc: Started in network mode [ 234.570913][T12770] tipc: Node identity 080211000001, cluster identity 4711 [ 234.578705][T12770] tipc: Enabled bearer , priority 0 [ 234.610077][T12789] netlink: 'syz.2.1876': attribute type 2 has an invalid length. [ 234.851679][T12804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1880'. [ 234.933674][T12806] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1879'. [ 235.218268][T12824] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1886'. [ 235.368096][T12835] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1889'. [ 235.423438][T12835] netlink: 384 bytes leftover after parsing attributes in process `syz.0.1889'. [ 235.434225][T12837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.545502][T12843] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 235.698508][ T5738] tipc: Node number set to 134418688 [ 235.722518][T12850] netlink: 512 bytes leftover after parsing attributes in process `syz.4.1895'. [ 235.738718][T12850] netlink: 'syz.4.1895': attribute type 21 has an invalid length. [ 236.451383][T12883] ipip2: entered allmulticast mode [ 238.034280][T12950] bridge_slave_0: left allmulticast mode [ 238.040233][T12950] bridge_slave_0: left promiscuous mode [ 238.046182][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.111881][T12950] bridge_slave_1: left allmulticast mode [ 238.117578][T12950] bridge_slave_1: left promiscuous mode [ 238.133430][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.241505][T12950] bond0: (slave bond_slave_0): Releasing backup interface [ 238.273018][T12950] bond0: (slave bond_slave_1): Releasing backup interface [ 238.316052][T12967] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 238.317791][T12950] team0: Port device team_slave_0 removed [ 238.359731][T12950] team0: Port device team_slave_1 removed [ 238.367704][T12967] netlink: 'syz.4.1927': attribute type 2 has an invalid length. [ 238.378244][T12962] netlink: 'syz.4.1927': attribute type 1 has an invalid length. [ 238.384818][T12950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.386656][T12962] netlink: 'syz.4.1927': attribute type 4 has an invalid length. [ 238.408855][T12950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.422108][T12950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.438477][T12950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.462183][T12950] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 238.507444][T12953] tipc: Enabled bearer , priority 0 [ 238.730084][ T1059] tipc: Resetting bearer [ 238.856753][T12980] __nla_validate_parse: 6 callbacks suppressed [ 238.856769][T12980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1930'. [ 239.310867][T12998] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 239.339767][T12998] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1937'. [ 239.372712][T13003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1937'. [ 239.610350][T13005] syz_tun: entered allmulticast mode [ 239.629369][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 239.664474][T13005] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1938'. [ 240.132556][T13038] IPVS: set_ctl: invalid protocol: 51 172.20.20.68:20004 [ 240.370605][T13045] syzkaller0: entered promiscuous mode [ 240.400273][T13045] syzkaller0: entered allmulticast mode [ 240.585529][T12839] Set syz1 is full, maxelem 65536 reached [ 240.632378][T13043] ipvlan2: entered promiscuous mode [ 240.773390][T13064] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 240.834925][T13067] geneve3: entered promiscuous mode [ 240.848840][T13064] macvlan3: entered promiscuous mode [ 240.855475][T13064] bond6: entered promiscuous mode [ 240.862538][T13064] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 240.872246][T13070] netlink: 'syz.2.1952': attribute type 1 has an invalid length. [ 240.886237][T13064] bond6: left promiscuous mode [ 240.889027][T13069] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1954'. [ 240.920597][T13070] netlink: 'syz.2.1952': attribute type 3 has an invalid length. [ 240.948572][T13070] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1952'. [ 241.408192][T13093] netlink: 'syz.3.1961': attribute type 12 has an invalid length. [ 241.617954][T13109] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 241.679142][T13100] bond2: (slave veth0_to_bond): Releasing backup interface [ 241.727160][T13100] veth0_to_bond: left promiscuous mode [ 241.752483][T13100] veth0_to_bond: left allmulticast mode [ 241.772204][T13121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1966'. [ 241.931675][T13124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1968'. [ 241.992857][T13129] IPVS: set_ctl: invalid protocol: 135 172.20.20.46:19999 [ 242.148140][T13141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1974'. [ 242.306359][T13152] netlink: 'syz.4.1978': attribute type 6 has an invalid length. [ 242.338450][T13152] netlink: 'syz.4.1978': attribute type 5 has an invalid length. [ 242.368194][T13151] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.932578][T13186] tipc: Enabling of bearer rejected, failed to enable media [ 243.650448][T13224] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 243.702031][T13218] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 243.905074][T13237] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 243.922550][T13237] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 243.941483][T13237] syzkaller0: mtu less than device minimum [ 244.425382][T13272] __nla_validate_parse: 13 callbacks suppressed [ 244.425400][T13272] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2010'. [ 244.585157][T13266] bond17: entered allmulticast mode [ 244.633751][T13266] 8021q: adding VLAN 0 to HW filter on device bond17 [ 244.694785][T13275] tc_dump_action: action bad kind [ 245.061617][T13299] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2015'. [ 245.095943][T13299] tipc: Enabled bearer , priority 10 [ 245.845363][T13337] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2027'. [ 246.172369][T13356] netlink: 'syz.1.2032': attribute type 1 has an invalid length. [ 246.184590][T13356] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 246.302029][T13368] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2034'. [ 246.706725][T13394] Cannot find add_set index 2 as target [ 247.404298][T13427] netlink: 'syz.0.2048': attribute type 30 has an invalid length. [ 247.510788][T13412] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.754968][T13412] veth1_to_bond: left promiscuous mode [ 247.825270][T13412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.132579][T13412] geneve2: left promiscuous mode [ 248.137774][T13412] geneve2: left allmulticast mode [ 248.160115][T13412] veth3: left allmulticast mode [ 248.165827][T13412] bond3: left promiscuous mode [ 248.171054][T13412] bridge4: left promiscuous mode [ 248.193847][T13412] macvtap1: left allmulticast mode [ 248.199848][T13412] macvtap2: left allmulticast mode [ 248.207763][T13412] ipvlan1: left promiscuous mode [ 248.225200][T13412] macsec0: left promiscuous mode [ 248.240910][T13412] bond7: left allmulticast mode [ 248.272879][T13412] ipvlan2: left promiscuous mode [ 248.314579][T13427] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 248.321412][ T35] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 248.374481][ T35] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.547055][T13421] ieee80211 phy22: Failed to add default virtual iface [ 248.562751][ T35] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 248.572580][ T35] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.582886][ T35] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 248.609502][ T35] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.665583][T13441] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 248.732877][ T1059] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 248.774824][ T1059] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.834319][T13462] netlink: 'syz.1.2051': attribute type 1 has an invalid length. [ 248.847712][T13454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2052'. [ 249.151471][T13467] veth7: entered promiscuous mode [ 249.235517][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 249.265317][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 249.278567][T13472] xfrm0: entered promiscuous mode [ 249.301733][T13472] team0: Device xfrm0 is of different type [ 249.534192][T13495] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2059'. [ 249.546358][T13501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2061'. [ 249.773694][T13509] veth0: entered promiscuous mode [ 250.171689][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2068'. [ 250.218067][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 250.294399][T13500] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2062'. [ 250.430774][T13503] veth0: left promiscuous mode [ 250.447813][T13550] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2073'. [ 250.473887][T13547] x_tables: duplicate underflow at hook 2 [ 250.483344][T13550] netlink: 'syz.3.2073': attribute type 2 has an invalid length. [ 250.867710][T13571] netlink: 'syz.0.2078': attribute type 1 has an invalid length. [ 250.946515][T13576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2078'. [ 250.980936][T13576] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2078'. [ 252.264711][T13560] bridge_slave_1: mtu less than device minimum [ 252.306711][T13571] 8021q: adding VLAN 0 to HW filter on device bond18 [ 252.417641][ T1059] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.442287][ T187] vxcan1 speed is unknown, defaulting to 1000 [ 252.448098][ T1059] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.467924][ T187] syz2: Port: 1 Link DOWN [ 252.474171][ T1059] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 252.502383][ T1059] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.524887][ T1059] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.547015][ T1059] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 252.574342][T13627] netlink: 'syz.4.2083': attribute type 4 has an invalid length. [ 252.594565][ T5819] vxcan1 speed is unknown, defaulting to 1000 [ 252.606547][ T1059] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.629700][ T1059] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.639420][ T1059] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 252.654461][ T1059] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.665153][ T1059] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.676209][ T1059] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 252.705023][T13640] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2088'. [ 252.894587][T13652] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2090'. [ 253.246067][T13669] netlink: 'syz.0.2094': attribute type 2 has an invalid length. [ 253.287615][T13663] netlink: 'syz.0.2094': attribute type 2 has an invalid length. [ 253.318006][T13662] netlink: 'syz.0.2094': attribute type 2 has an invalid length. [ 253.668567][T13695] ip6t_srh: unknown srh invflags 4000 [ 254.519041][T13739] veth1_to_bond: entered allmulticast mode [ 254.616986][T13740] veth1_to_bond: left allmulticast mode [ 255.012760][T13775] netlink: 'syz.1.2122': attribute type 3 has an invalid length. [ 255.487594][T13808] syz_tun: entered allmulticast mode [ 255.562554][T13808] dvmrp8: entered allmulticast mode [ 255.600618][T13807] syz_tun: left allmulticast mode [ 255.827815][T13828] __nla_validate_parse: 10 callbacks suppressed [ 255.827832][T13828] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2134'. [ 256.171979][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2138'. [ 256.211298][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.211700][T13836] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 256.353657][T13849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 256.383649][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'. [ 257.851449][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2163'. [ 257.986847][T13950] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2165'. [ 258.044886][T13954] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2166'. [ 258.083333][T13954] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2166'. [ 258.121902][T13954] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2166'. [ 258.630250][T13983] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 258.648096][T13983] bond7: option packets_per_slave: allowed values 0 - 65535 [ 258.669563][T13983] bond7 (unregistering): Released all slaves [ 258.696469][T13993] xt_TPROXY: Can be used only with -p tcp or -p udp [ 258.770004][T13988] bond0: (slave batadv0): Releasing backup interface [ 259.045181][T14008] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2185'. [ 259.125822][T14018] syzkaller0: entered promiscuous mode [ 259.145653][T14018] syzkaller0: entered allmulticast mode [ 259.181753][T14017] netlink: 'syz.0.2188': attribute type 11 has an invalid length. [ 259.389666][T14029] openvswitch: netlink: IP tunnel dst address not specified [ 259.440751][T14029] openvswitch: netlink: IP tunnel dst address not specified [ 259.462321][T14030] netlink: 'syz.1.2193': attribute type 2 has an invalid length. [ 259.488567][T14030] netlink: 'syz.1.2193': attribute type 8 has an invalid length. [ 260.735161][T14101] syzkaller0: entered promiscuous mode [ 260.757281][T14101] syzkaller0: entered allmulticast mode [ 261.045035][T14113] tipc: Enabled bearer , priority 0 [ 261.166781][T14111] tipc: Disabling bearer [ 262.092876][T14162] __nla_validate_parse: 5 callbacks suppressed [ 262.092894][T14162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2216'. [ 262.121256][T14161] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2215'. [ 262.176645][T14165] smc: net device team0 applied user defined pnetid SYZ2 [ 262.496157][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 262.550127][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2223'. [ 263.114007][T14217] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2233'. [ 263.270148][T14220] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 263.317532][T14220] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 263.329091][T14220] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 263.347776][T14220] sctp: [Deprecated]: syz.1.2234 (pid 14220) Use of int in max_burst socket option. [ 263.347776][T14220] Use struct sctp_assoc_value instead [ 263.742776][T14244] xt_hashlimit: size too large, truncated to 1048576 [ 263.994161][T14253] netlink: 'syz.0.2241': attribute type 23 has an invalid length. [ 264.360254][T14277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2248'. [ 264.389433][T14277] macvtap0: left promiscuous mode [ 264.521382][T14285] syzkaller0: entered promiscuous mode [ 264.542271][T14285] syzkaller0: entered allmulticast mode [ 264.562798][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'. [ 264.693764][T14289] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2251'. [ 264.853176][T14294] can: request_module (can-proto-4) failed. [ 264.874303][T14299] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2255'. [ 264.883752][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 265.701972][T14344] netlink: 'syz.1.2271': attribute type 32 has an invalid length. [ 265.724156][T14348] netlink: 'syz.4.2269': attribute type 21 has an invalid length. [ 265.850538][T14344] bond4: Setting coupled_control to off (0) [ 266.037988][T14367] syzkaller1: entered promiscuous mode [ 266.057088][T14367] syzkaller1: entered allmulticast mode [ 266.712263][T14402] syzkaller0: entered promiscuous mode [ 266.742170][T14402] syzkaller0: entered allmulticast mode [ 267.646527][T14466] __nla_validate_parse: 9 callbacks suppressed [ 267.646547][T14466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2303'. [ 267.669570][T14466] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2303'. [ 267.815662][T14473] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 268.118089][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2309'. [ 268.198090][T14491] netlink: 'syz.4.2310': attribute type 4 has an invalid length. [ 268.223465][T14491] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2310'. [ 268.262444][T14491] .`: renamed from bond0 [ 268.293423][T14498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2312'. [ 268.622920][T14515] netlink: 'syz.2.2318': attribute type 1 has an invalid length. [ 268.765802][T14515] bond7: entered promiscuous mode [ 268.802263][T14515] 8021q: adding VLAN 0 to HW filter on device bond7 [ 268.839412][T14521] netlink: 'syz.1.2319': attribute type 5 has an invalid length. [ 268.860541][T14519] macvlan0: entered promiscuous mode [ 268.927699][T14520] macvtap0: entered allmulticast mode [ 268.972380][T14515] macvtap1: entered allmulticast mode [ 269.017256][T14517] bond7: (slave bridge12): making interface the new active one [ 269.034404][T14517] bridge12: entered promiscuous mode [ 269.054268][T14517] bond7: (slave bridge12): Enslaving as an active interface with an up link [ 269.518572][T14529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2321'. [ 269.583491][T14529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.940171][T14555] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2329'. [ 269.971644][T14556] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2329'. [ 269.992354][T14560] netlink: 'syz.3.2331': attribute type 1 has an invalid length. [ 270.023175][T14556] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2329'. [ 270.042661][T14555] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2329'. [ 270.111015][T14568] bond7: (slave geneve4): making interface the new active one [ 270.125998][T14568] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 270.157684][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 270.187881][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 270.207121][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 270.441716][T14579] syzkaller0: entered promiscuous mode [ 270.461921][T14579] syzkaller0: entered allmulticast mode [ 270.475741][T14578] tipc: Enabled bearer , priority 0 [ 270.547680][T14585] 8021q: adding VLAN 0 to HW filter on device bond5 [ 270.566634][T14575] tipc: Resetting bearer [ 272.575077][T14575] tipc: Disabling bearer [ 272.770261][T14625] __nla_validate_parse: 4 callbacks suppressed [ 272.770279][T14625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2343'. [ 272.839354][T14633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2347'. [ 273.006044][T14640] netlink: 'syz.3.2350': attribute type 2 has an invalid length. [ 273.016819][T14640] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2350'. [ 273.126922][T14645] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2351'. [ 273.385437][T14662] netlink: 'syz.1.2357': attribute type 30 has an invalid length. [ 273.478174][T14662] bond6: option arp_missed_max: invalid value (0) [ 273.485815][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'. [ 273.503481][T14662] bond6: option arp_missed_max: allowed values 1 - 255 [ 273.572793][T14674] netlink: 'syz.2.2356': attribute type 13 has an invalid length. [ 273.590444][T14674] netlink: 'syz.2.2356': attribute type 58 has an invalid length. [ 273.607199][T14674] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2356'. [ 273.875398][T14662] bond6 (unregistering): Released all slaves [ 274.015360][T14681] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2361'. [ 274.103444][T14681] vxcan1 speed is unknown, defaulting to 1000 [ 274.426310][T14698] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2365'. [ 274.520649][T14702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2368'. [ 275.081698][T14718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2373'. [ 275.514072][T14742] bridge0: entered promiscuous mode [ 275.529216][T14742] bridge0: entered allmulticast mode [ 275.723115][T14753] netlink: 'syz.1.2383': attribute type 13 has an invalid length. [ 275.852632][T14757] netlink: 'syz.1.2383': attribute type 39 has an invalid length. [ 275.974207][T14754] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 276.117751][T14763] vlan3: entered allmulticast mode [ 276.150327][T14763] bridge6: entered allmulticast mode [ 276.255151][T14760] syzkaller0: entered promiscuous mode [ 276.263231][T14760] syzkaller0: entered allmulticast mode [ 276.670771][T14793] team1: entered promiscuous mode [ 276.682097][T14793] team1: entered allmulticast mode [ 276.761331][T14790] syzkaller0: entered promiscuous mode [ 276.788114][T14790] syzkaller0: entered allmulticast mode [ 276.939191][T14809] geneve5: entered promiscuous mode [ 277.010617][T14814] lo: Caught tx_queue_len zero misconfig [ 277.628082][ T6000] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.641563][ T6000] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.653138][ T6000] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.666580][ T6000] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 277.803592][T14856] __nla_validate_parse: 76 callbacks suppressed [ 277.803610][T14856] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2410'. [ 277.940958][T14862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2412'. [ 278.237015][T14875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2416'. [ 278.240893][T14871] syzkaller1: entered promiscuous mode [ 278.252643][T14871] syzkaller1: entered allmulticast mode [ 278.265578][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 278.339268][T14877] tipc: Enabling of bearer rejected, already enabled [ 278.441325][T14879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2419'. [ 278.468730][T14879] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2419'. [ 278.542911][T14884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2421'. [ 278.542946][T14881] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 278.565473][T14881] bond6 (unregistering): Released all slaves [ 278.626010][T14885] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 278.709252][T14885] bond6 (unregistering): Released all slaves [ 278.764575][T14894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2423'. [ 278.923312][T14902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2422'. [ 279.054621][T14909] vlan0: entered allmulticast mode [ 279.063772][T14909] bridge7: entered allmulticast mode [ 279.076866][T14912] veth0: entered promiscuous mode [ 279.084606][T14911] veth0: left promiscuous mode [ 279.100580][T14902] erspan0: left allmulticast mode [ 279.122827][T14902] bridge7: port 1(erspan0) entered blocking state [ 279.134570][T14902] bridge7: port 1(erspan0) entered disabled state [ 279.143693][T14902] erspan0: entered allmulticast mode [ 279.164809][T14922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'. [ 279.307793][T14927] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 279.334328][T14927] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 280.329652][T14992] erspan0: entered promiscuous mode [ 280.348013][T14992] 8021q: adding VLAN 0 to HW filter on device .` [ 280.356379][T14992] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.371221][T14992] batadv0: left promiscuous mode [ 280.380101][T14992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.425850][T14992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.439514][T14992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 280.458478][T14992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.473547][T14992] veth1_vlan: left promiscuous mode [ 280.481416][T14992] veth0_vlan: left promiscuous mode [ 280.487705][T14992] veth0_vlan: entered promiscuous mode [ 280.495626][T14992] veth1_vlan: entered promiscuous mode [ 280.501641][T14992] veth1_vlan: entered allmulticast mode [ 280.513709][T14992] veth0_macvtap: left promiscuous mode [ 280.520762][T14992] veth0_macvtap: entered promiscuous mode [ 280.532802][T14992] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 280.542214][T14992] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 280.550932][T14992] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 280.560302][T14992] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 280.568910][T14992] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 280.600763][T14990] nbd0: detected capacity change from 0 to 63 [ 280.617981][ T5634] block nbd0: Receive control failed (result -32) [ 280.617981][ T51] block nbd0: Receive control failed (result -32) [ 280.637802][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.644989][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.645311][ T10] block nbd0: Dead connection, failed to find a fallback [ 280.665396][ T10] block nbd0: shutting down sockets [ 280.671779][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.682005][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 280.690428][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.700074][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 280.702163][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.709003][ T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.715042][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.732709][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 280.742062][ T10] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.752595][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 280.765136][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 280.774519][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 280.782450][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 280.790381][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 280.798248][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 280.806387][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 280.815955][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 280.823882][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 280.832138][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 280.842031][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 280.851658][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 280.861085][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 280.886067][ T5645] ldm_validate_partition_table(): Disk read failed. [ 280.928137][ T5645] Dev nbd0: unable to read RDB block 0 [ 280.936412][ T5645] nbd0: unable to read partition table [ 280.953989][ T5645] ldm_validate_partition_table(): Disk read failed. [ 280.963058][ T5645] Dev nbd0: unable to read RDB block 0 [ 280.971372][ T5645] nbd0: unable to read partition table [ 281.018256][ T35] bridge0: port 3(macvlan0) entered blocking state [ 281.025049][ T35] bridge0: port 3(macvlan0) entered forwarding state [ 281.034002][T14994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.055057][ T1059] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.071737][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.113184][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.187487][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.555517][T15030] netlink: 'syz.1.2457': attribute type 2 has an invalid length. [ 281.571097][T15030] netlink: 'syz.1.2457': attribute type 8 has an invalid length. [ 282.015616][T15050] netlink: 'syz.1.2460': attribute type 83 has an invalid length. [ 283.160650][T15114] __nla_validate_parse: 6 callbacks suppressed [ 283.160668][T15114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2473'. [ 283.296323][T15123] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 283.903086][T15153] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2484'. [ 283.983671][T15157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2485'. [ 284.030052][T15158] vxcan1 speed is unknown, defaulting to 1000 [ 284.133678][T15166] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 284.316323][T15180] netlink: 'syz.0.2489': attribute type 4 has an invalid length. [ 284.324520][T15177] netlink: 'syz.0.2489': attribute type 4 has an invalid length. [ 284.767411][T15196] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2494'. [ 284.924420][T15200] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 284.942975][T15201] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 285.672060][T15248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2504'. [ 286.256013][T15268] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2508'. [ 286.847012][T15302] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2515'. [ 286.874741][T15304] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2516'. [ 286.906888][T15302] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 287.144139][T15314] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2519'. [ 287.184875][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2520'. [ 287.719198][T15338] netlink: 'syz.1.2524': attribute type 49 has an invalid length. [ 288.230343][T15360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.605488][T15360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.641158][T15388] __nla_validate_parse: 2 callbacks suppressed [ 288.641176][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2535'. [ 288.808272][T15360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.135940][T15360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.201808][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2541'. [ 289.249164][T15415] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.398053][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2541'. [ 289.446499][T15432] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2544'. [ 289.472631][T15419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2541'. [ 289.652648][ T1178] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.764760][ T1178] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.829353][ T1178] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.896330][ T1131] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.272022][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2552'. [ 290.300011][T15468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2552'. [ 290.328216][T15461] syzkaller0: entered promiscuous mode [ 290.362884][T15461] syzkaller0: entered allmulticast mode [ 290.837297][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 292.699497][T15497] batadv_slave_0: Caught tx_queue_len zero misconfig [ 293.521834][T15561] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2570'. [ 293.645422][T15565] syzkaller0: entered promiscuous mode [ 293.669995][T15565] syzkaller0: entered allmulticast mode [ 293.765729][T15575] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2573'. [ 293.817236][T15574] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2574'. [ 293.845992][T15573] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2574'. [ 294.174591][T15593] ipt_REJECT: ECHOREPLY no longer supported. [ 294.296318][T15597] netlink: 'syz.4.2582': attribute type 23 has an invalid length. [ 294.345297][T15601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.560007][T15613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2587'. [ 294.675282][T15613] bond19: entered promiscuous mode [ 294.707260][T15613] bond19: entered allmulticast mode [ 295.109789][T15651] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2598'. [ 295.182948][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2600'. [ 295.502104][T15681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 295.533747][T15681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2604'. [ 295.550365][T15685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2607'. [ 295.565140][T15680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 295.603778][T15680] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 295.655984][T15691] veth0: entered promiscuous mode [ 295.675685][T15690] veth0: left promiscuous mode [ 298.337672][T15671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.350356][T15708] netlink: 'syz.3.2613': attribute type 11 has an invalid length. [ 298.488110][T15719] ÿÿÿÿÿÿ: renamed from vlan1 [ 298.565863][T15723] netlink: 'syz.1.2617': attribute type 1 has an invalid length. [ 299.021828][T15757] netlink: 'syz.0.2626': attribute type 1 has an invalid length. [ 299.137921][T15757] 8021q: adding VLAN 0 to HW filter on device bond20 [ 299.161794][T15761] bond20: (slave gretap3): making interface the new active one [ 299.173853][T15761] bond20: (slave gretap3): Enslaving as an active interface with an up link [ 299.460193][T15784] netlink: 'syz.4.2631': attribute type 1 has an invalid length. [ 299.624678][T15784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.644623][T15787] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 299.656919][T15801] __nla_validate_parse: 7 callbacks suppressed [ 299.656936][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2637'. [ 299.676315][T15787] bond0: entered allmulticast mode [ 299.679713][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 299.893574][T15816] netlink: 'syz.4.2639': attribute type 30 has an invalid length. [ 300.316729][T15832] SET target dimension over the limit! [ 300.415578][T15841] openvswitch: netlink: IP tunnel dst address not specified [ 300.512057][T15845] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2650'. [ 300.645740][T15852] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2654'. [ 300.683812][T15852] bond2: (slave lo): Releasing backup interface [ 300.691964][T15852] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 300.713114][T15852] bridge_slave_0: left allmulticast mode [ 300.721267][T15852] bridge_slave_0: left promiscuous mode [ 300.727239][T15852] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.742311][T15852] bridge_slave_1: left allmulticast mode [ 300.748016][T15852] bridge_slave_1: left promiscuous mode [ 300.754542][T15852] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.772056][T15852] bond8: (slave veth0_to_bond): Releasing active interface [ 300.785140][T15852] .`: (slave bond_slave_0): Releasing backup interface [ 300.800263][T15852] .`: (slave bond_slave_1): Releasing backup interface [ 300.823984][T15852] team0: Port device team_slave_0 removed [ 300.842354][T15852] team0: Port device team_slave_1 removed [ 300.852141][T15852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.860977][T15852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.875227][T15852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 301.404125][T15884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.411434][T15884] IPv6: NLM_F_CREATE should be set when creating new route [ 301.415833][T15878] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2660'. [ 301.420106][T15884] IPv6: NLM_F_CREATE should be set when creating new route [ 301.486404][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2665'. [ 301.528099][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 301.575873][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2665'. [ 301.970573][T15910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2672'. [ 302.171259][T15917] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2675'. [ 302.201481][T15917] netlink: 'syz.4.2675': attribute type 3 has an invalid length. [ 302.219159][T15917] netlink: 'syz.4.2675': attribute type 2 has an invalid length. [ 302.594941][T15938] C: renamed from lo [ 302.609878][T15938] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 302.645858][T15938] netlink: 'syz.2.2683': attribute type 24 has an invalid length. [ 302.901416][T15950] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 302.907871][T15948] vxcan1 speed is unknown, defaulting to 1000 [ 302.910022][T15951] IPVS: set_ctl: invalid protocol: 115 127.0.0.1:20000 [ 302.934133][T15948] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 303.376193][T15974] x_tables: unsorted entry at hook 3 [ 303.609784][T15985] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 303.884162][T15999] ip6tnl0: Caught tx_queue_len zero misconfig [ 304.443283][T16033] veth1: Caught tx_queue_len zero misconfig [ 304.511313][T16039] netlink: 'syz.2.2716': attribute type 7 has an invalid length. [ 304.526188][T16037] syzkaller0: entered promiscuous mode [ 304.531433][T16039] netlink: 'syz.2.2716': attribute type 8 has an invalid length. [ 304.535598][T16037] syzkaller0: entered allmulticast mode [ 304.605727][T16039] erspan0: entered promiscuous mode [ 304.612835][T16039] erspan0: left promiscuous mode [ 304.650080][T16046] netlink: 'syz.3.2718': attribute type 1 has an invalid length. [ 304.699946][T16045] veth0_to_bridge: mtu less than device minimum [ 304.719704][T16046] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 304.834150][T16053] __nla_validate_parse: 15 callbacks suppressed [ 304.834169][T16053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2720'. [ 304.843792][T16051] bridge_slave_0: invalid flags given to default FDB implementation [ 305.084792][T16073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2725'. [ 305.096201][T16072] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2725'. [ 305.108000][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2725'. [ 305.133039][T16072] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2725'. [ 305.156827][T16072] netlink: 'syz.4.2725': attribute type 3 has an invalid length. [ 305.172073][T16078] netlink: 'syz.3.2726': attribute type 2 has an invalid length. [ 305.181736][T16072] netlink: 'syz.4.2725': attribute type 2 has an invalid length. [ 305.191137][T16072] netlink: 31 bytes leftover after parsing attributes in process `syz.4.2725'. [ 305.198495][T16078] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2726'. [ 305.289330][T16081] bond8: entered promiscuous mode [ 305.307191][T16081] bond8: entered allmulticast mode [ 305.321432][T16081] 8021q: adding VLAN 0 to HW filter on device bond8 [ 305.562354][T16112] netlink: 'syz.0.2735': attribute type 83 has an invalid length. [ 305.777055][T16121] xt_CT: You must specify a L4 protocol and not use inversions on it [ 305.878226][T16125] syzkaller0: entered promiscuous mode [ 305.906802][T16125] syzkaller0: entered allmulticast mode [ 306.077512][T16103] infiniband syz0: set down [ 306.097890][T16103] infiniband syz0: added batadv_slave_0 [ 306.198035][T16103] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 306.268185][T16103] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 306.390938][T16103] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 306.437441][T16153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2745'. [ 306.509560][T16103] RDS/IB: syz0: added [ 306.519643][T16103] smc: adding ib device syz0 with port count 1 [ 306.544246][T16103] smc: ib device syz0 port 1 has no pnetid [ 307.269789][T16202] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2754'. [ 307.287726][T16200] syzkaller0: entered promiscuous mode [ 307.302877][T16200] syzkaller0: entered allmulticast mode [ 307.363952][T16200] tipc: Enabled bearer , priority 0 [ 307.424418][T16197] tipc: Resetting bearer [ 307.472827][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2756'. [ 307.482977][T16197] tipc: Disabling bearer [ 308.390625][ T5634] block nbd1: Receive control failed (result -107) [ 308.416565][T16217] nbd1: detected capacity change from 0 to 63 [ 308.445111][ T51] block nbd1: Receive control failed (result -104) [ 308.716787][T16249] team_slave_0: Caught tx_queue_len zero misconfig [ 309.503889][T16286] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 309.524044][T16286] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 309.762804][T16306] netlink: 'syz.2.2781': attribute type 21 has an invalid length. [ 309.992684][T16319] __nla_validate_parse: 12 callbacks suppressed [ 309.992711][T16319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2787'. [ 310.118719][T16326] netlink: 'syz.3.2788': attribute type 23 has an invalid length. [ 310.197235][T16328] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 310.440808][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.460483][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.470029][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.478152][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.489234][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.519874][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.530703][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.541808][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.552076][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.562500][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.836027][T16351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'. [ 311.178066][T16369] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 311.311205][T10143] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.335352][T16373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2803'. [ 311.380994][T16376] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 311.407909][T16369] sit3: entered promiscuous mode [ 311.415813][T16369] sit3: entered allmulticast mode [ 311.427523][T16376] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 311.510751][T10143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.567860][T16383] netlink: 'syz.2.2805': attribute type 10 has an invalid length. [ 311.592889][T16383] openvswitch: netlink: Flow key attr not present in new flow. [ 311.743804][T10143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.771276][T16393] bridge0: port 3(macvlan0) entered blocking state [ 311.781897][T16393] bridge0: port 3(macvlan0) entered disabled state [ 311.789765][T16393] macvlan0: entered allmulticast mode [ 311.797118][T16393] macvlan0: entered promiscuous mode [ 311.807566][T16396] netlink: 'syz.0.2809': attribute type 2 has an invalid length. [ 311.833242][T16389] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 311.840809][T16389] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 311.852862][T16394] veth1_vlan: entered allmulticast mode [ 311.902526][T10143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.947508][T16401] xt_l2tp: invalid flags combination: 0 [ 312.009677][T16332] vxcan1 speed is unknown, defaulting to 1000 [ 312.265951][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 312.289107][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 312.293977][T16417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2814'. [ 312.359428][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2812'. [ 312.398694][T16412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2812'. [ 312.534890][T16425] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2815'. [ 312.561190][T16425] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2815'. [ 312.608582][ T51] Bluetooth: hci5: command tx timeout [ 313.223659][T16456] netlink: 'syz.2.2818': attribute type 1 has an invalid length. [ 313.353834][T10143] macvlan0: left allmulticast mode [ 313.370586][T16461] IPVS: length: 40 != 24 [ 313.374040][T10143] veth1_vlan: left allmulticast mode [ 313.403436][T10143] bridge0: port 3(macvlan0) entered disabled state [ 313.554393][T10143] pim6reg: left allmulticast mode [ 313.560088][T10143] dvmrp8: left allmulticast mode [ 313.725541][T10143] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 313.840029][T10143] bond4 (unregistering): (slave gretap1): Releasing active interface [ 313.906468][T10143] team0: Port device geneve1 removed [ 313.955064][T10143] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 313.974234][T10143] bond5 (unregistering): (slave bridge5): Releasing active interface [ 314.024642][T10143] .` (unregistering): Released all slaves [ 314.034579][T10143] bond1 (unregistering): Released all slaves [ 314.053019][T10143] bond2 (unregistering): Released all slaves [ 314.073425][T10143] bond3 (unregistering): Released all slaves [ 314.087056][T10143] bond4 (unregistering): Released all slaves [ 314.116388][T10143] bond5 (unregistering): Released all slaves [ 314.142170][T10143] bond6 (unregistering): Released all slaves [ 314.161002][T10143] bond7 (unregistering): Released all slaves [ 314.175344][T10143] bond8 (unregistering): Released all slaves [ 314.190032][T10143] bond0 (unregistering): Released all slaves [ 314.316925][T16460] veth15: entered promiscuous mode [ 314.328156][T16460] bond9: (slave veth15): Enslaving as a backup interface with a down link [ 314.434712][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 314.496363][T10143] : left promiscuous mode [ 314.578075][T16483] tc_dump_action: action bad kind [ 314.688705][ T51] Bluetooth: hci5: command tx timeout [ 314.706614][T10143] tipc: Disabling bearer [ 314.723632][T10143] tipc: Left network mode [ 314.806053][T16500] netlink: 'syz.1.2826': attribute type 11 has an invalid length. [ 315.097385][T16508] netlink: 'syz.2.2829': attribute type 11 has an invalid length. [ 315.572241][T16528] __nla_validate_parse: 1 callbacks suppressed [ 315.572261][T16528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2834'. [ 315.683052][T16528] Cannot find map_set index 135 as target [ 316.341485][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 316.546381][T16332] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.567905][T16332] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.579536][T16332] bridge_slave_0: entered allmulticast mode [ 316.587370][T16332] bridge_slave_0: entered promiscuous mode [ 316.739356][T16332] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.748265][T16332] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.757385][T16332] bridge_slave_1: entered allmulticast mode [ 316.771853][ T51] Bluetooth: hci5: command tx timeout [ 316.786330][T16332] bridge_slave_1: entered promiscuous mode [ 316.929526][T16332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.025639][T16332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.164079][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'. [ 317.216333][T16589] netlink: 'syz.3.2846': attribute type 11 has an invalid length. [ 317.248674][T16589] netlink: 4320 bytes leftover after parsing attributes in process `syz.3.2846'. [ 317.533000][T16332] team0: Port device team_slave_0 added [ 317.620995][T16603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2848'. [ 317.662260][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.687595][T16332] team0: Port device team_slave_1 added [ 318.055836][T16332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.104120][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.195216][T16332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.364794][T16332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.389119][T16332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 318.467933][T16332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.845968][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2857'. [ 318.848790][ T51] Bluetooth: hci5: command tx timeout [ 318.924262][T16652] netlink: 'syz.3.2857': attribute type 30 has an invalid length. [ 318.954147][T16652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 318.986614][T16332] hsr_slave_0: entered promiscuous mode [ 318.997059][T16332] hsr_slave_1: entered promiscuous mode [ 319.050254][T10143] hsr_slave_0: left promiscuous mode [ 319.056488][T10143] hsr_slave_1: left promiscuous mode [ 319.091077][T10143] veth1_vlan: left promiscuous mode [ 319.098419][T10143] veth0_vlan: left promiscuous mode [ 319.489802][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 319.723703][T16663] netlink: 'syz.2.2861': attribute type 4 has an invalid length. [ 319.787638][T16666] tunl0: Caught tx_queue_len zero misconfig [ 319.844438][T16666] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 319.876849][T16666] netlink: 'syz.1.2860': attribute type 3 has an invalid length. [ 319.902831][T16666] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2860'. [ 319.921332][T16666] NCSI netlink: No device for ifindex 813332851 [ 320.304239][T16692] netlink: 'syz.3.2867': attribute type 1 has an invalid length. [ 320.461951][T16692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 320.542990][T16697] vlan1: entered allmulticast mode [ 320.559861][T16697] bond8: entered allmulticast mode [ 320.834025][T16714] geneve4: entered promiscuous mode [ 321.333172][T16723] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 321.370500][T16723] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 322.280708][T16771] bridge8: entered promiscuous mode [ 322.297141][T16771] bridge8: entered allmulticast mode [ 322.333223][T16332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 322.457122][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 322.466192][T16332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 322.530472][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 322.559798][T16332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 322.597737][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.631218][T16787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.646018][T16332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 322.695196][T16332] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.852477][T16780] syzkaller1: entered promiscuous mode [ 322.871677][T16780] syzkaller1: entered allmulticast mode [ 322.895227][T16800] netlink: 'syz.2.2888': attribute type 4 has an invalid length. [ 322.990115][T16799] netlink: 'syz.2.2888': attribute type 10 has an invalid length. [ 323.220077][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.240138][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.264666][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 323.326497][T16332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.392314][T16332] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.432498][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.439814][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.469514][T16817] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2891'. [ 323.483646][T10142] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.490868][T10142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.761377][T16821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2892'. [ 324.101174][T16836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2895'. [ 324.178255][T16840] openvswitch: netlink: Multiple metadata blocks provided [ 324.246714][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.355065][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.367938][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.419922][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.432127][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.463055][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.487714][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.508750][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.533755][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.548186][T16842] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 324.630366][T16857] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 324.639542][T16858] netlink: 'syz.3.2898': attribute type 1 has an invalid length. [ 324.727209][T16857] bond9: entered promiscuous mode [ 324.734174][T16857] 8021q: adding VLAN 0 to HW filter on device bond9 [ 324.951113][T16870] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2900'. [ 324.984151][T16870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2900'. [ 325.072647][T16332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.814566][T16332] veth0_vlan: entered promiscuous mode [ 325.858068][T16332] veth1_vlan: entered promiscuous mode [ 325.982510][T16332] veth0_macvtap: entered promiscuous mode [ 325.997394][T16836] Can't find ip_set type h?sh:ip,port,ip [ 326.039628][T16918] netlink: 'syz.1.2908': attribute type 10 has an invalid length. [ 326.047682][T16332] veth1_macvtap: entered promiscuous mode [ 326.061631][T16918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2908'. [ 326.109475][T16332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.197753][T16918] team0: Port device geneve1 added [ 326.247154][T16922] ip6tnl1: entered promiscuous mode [ 326.267923][T16922] ip6tnl1: entered allmulticast mode [ 326.284550][T16664] Set syz1 is full, maxelem 65536 reached [ 326.301636][T16332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.380693][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.400637][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.436190][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.474062][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.837084][T16943] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2914'. [ 327.028946][T10143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.075018][T10143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.155960][T16978] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.163247][T16978] IPv6: NLM_F_CREATE should be set when creating new route [ 327.195233][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.213029][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.792474][T17002] netlink: 'syz.2.2930': attribute type 21 has an invalid length. [ 327.834219][T17002] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2930'. [ 327.862090][T17002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2930'. [ 328.034021][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.049773][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.060626][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.068911][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.082147][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.763865][T17044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2940'. [ 328.886691][T17059] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2943'. [ 328.995661][T17064] netlink: 'syz.0.2944': attribute type 1 has an invalid length. [ 329.215063][T17064] 8021q: adding VLAN 0 to HW filter on device bond21 [ 329.344345][T17078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 329.375478][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2946'. [ 329.432805][T17012] vxcan1 speed is unknown, defaulting to 1000 [ 329.461530][T17084] macvlan0: left promiscuous mode [ 329.507878][T17084] netlink: 'syz.1.2947': attribute type 1 has an invalid length. [ 329.552656][T17084] netlink: 'syz.1.2947': attribute type 2 has an invalid length. [ 329.558606][T17091] netlink: 'syz.0.2948': attribute type 3 has an invalid length. [ 329.658788][T17095] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2948'. [ 330.099697][T17110] veth0: entered promiscuous mode [ 330.130339][ T5634] Bluetooth: hci1: command tx timeout [ 330.159199][T17110] veth0: left promiscuous mode [ 331.205682][T17151] netlink: 'syz.4.2958': attribute type 10 has an invalid length. [ 331.285972][T17151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.306648][T17151] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 331.437961][T17012] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.458279][T17012] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.476526][T17157] sctp: [Deprecated]: syz.0.2959 (pid 17157) Use of int in maxseg socket option. [ 331.476526][T17157] Use struct sctp_assoc_value instead [ 331.486402][T17012] bridge_slave_0: entered allmulticast mode [ 331.501313][T17012] bridge_slave_0: entered promiscuous mode [ 331.516723][T17012] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.533061][T17012] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.541087][T17012] bridge_slave_1: entered allmulticast mode [ 331.549053][T17012] bridge_slave_1: entered promiscuous mode [ 331.587300][T17012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.620617][T17012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.699616][T17012] team0: Port device team_slave_0 added [ 331.715209][T17012] team0: Port device team_slave_1 added [ 331.785303][T17012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.793648][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.820847][T17012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.834615][T17012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.841677][T17012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.870062][T17012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.960376][T17012] hsr_slave_0: entered promiscuous mode [ 331.967061][T17012] hsr_slave_1: entered promiscuous mode [ 331.975191][T17012] debugfs: 'hsr0' already exists in 'hsr' [ 331.988881][T17012] Cannot create hsr debugfs directory [ 331.998748][T17186] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2960'. [ 332.218810][ T5634] Bluetooth: hci1: command tx timeout [ 332.224276][T17012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.224340][T17012] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 332.335492][T17012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.347954][T17012] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 332.420865][T17012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.431672][T17012] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 333.051224][T17108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.079803][T17012] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 333.248150][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.268208][T17012] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 333.346767][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 333.440357][T17012] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 333.465159][T17237] netlink: 'syz.1.2963': attribute type 1 has an invalid length. [ 333.493448][T17237] netlink: 'syz.1.2963': attribute type 2 has an invalid length. [ 333.515376][T17231] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2961'. [ 333.518686][T17237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2963'. [ 333.558821][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 333.600019][T17012] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.627882][T17012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 333.835762][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 333.925633][T17260] bond22: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 333.936736][T17260] bond22 (unregistering): Released all slaves [ 334.104437][T17012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.142543][T17012] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.171214][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.178442][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.226396][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.233591][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.290470][ T5634] Bluetooth: hci1: command tx timeout [ 334.360294][T17282] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 335.021849][T17319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2982'. [ 335.067002][T17319] openvswitch: netlink: Missing key (keys=40, expected=100) [ 335.073462][T17324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2982'. [ 335.285605][T17012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.461409][T17012] veth0_vlan: entered promiscuous mode [ 335.497373][T17012] veth1_vlan: entered promiscuous mode [ 335.622554][T17012] veth0_macvtap: entered promiscuous mode [ 335.666921][T17012] veth1_macvtap: entered promiscuous mode [ 335.732977][T17012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.776735][T17012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.830959][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.873460][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.887848][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.914639][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.085569][T17369] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2997'. [ 336.213136][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.243218][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.294799][T17380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3001'. [ 336.310371][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.318252][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.379068][ T5634] Bluetooth: hci1: command tx timeout [ 338.770755][ T25] block nbd1: Connection timed out, retrying (0/2 alive) [ 338.779214][ T25] block nbd1: Dead connection, failed to find a fallback [ 338.787515][ T25] block nbd1: shutting down sockets [ 338.793237][ T25] blk_print_req_error: 124 callbacks suppressed [ 338.793251][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 338.812272][ T25] buffer_io_error: 138 callbacks suppressed [ 338.812284][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 338.826132][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 338.834049][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 338.841877][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 338.851675][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.861056][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 338.869348][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 338.878659][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 338.887603][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 338.895601][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 338.903583][ T10] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.908143][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 338.917040][ T10] Buffer I/O error on dev nbd1, logical block 0, async page read [ 338.921932][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 338.937586][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.938510][ T10] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.947100][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 338.965072][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.969837][ T10] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 338.985066][ T5645] ldm_validate_partition_table(): Disk read failed. [ 338.993416][ T5645] Dev nbd1: unable to read RDB block 0 [ 339.000674][ T5645] nbd1: unable to read partition table [ 339.017898][ T5645] ldm_validate_partition_table(): Disk read failed. [ 339.027520][ T5645] Dev nbd1: unable to read RDB block 0 [ 339.035559][ T5645] nbd1: unable to read partition table [ 379.090055][ T1320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.679291][ T5634] Bluetooth: hci1: link tx timeout [ 385.689081][ T5634] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 385.702522][T17393] veth0: entered promiscuous mode [ 385.724292][ T51] Bluetooth: hci1: link tx timeout [ 385.729627][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 385.737371][ T51] Bluetooth: hci1: link tx timeout [ 385.743694][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 385.751543][ T51] Bluetooth: hci1: link tx timeout [ 385.756693][ T51] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 385.767768][T17392] veth0: left promiscuous mode [ 385.862829][T17394] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 385.876401][T17394] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 385.886164][T17394] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 385.895156][T17394] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 385.904214][T17394] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.028210][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3007'. [ 386.372648][T17400] vxcan1 speed is unknown, defaulting to 1000 [ 386.797172][ T5628] syz_tun (unregistering): left allmulticast mode [ 386.865278][T17443] syzkaller0: entered promiscuous mode [ 386.873214][T17443] syzkaller0: entered allmulticast mode [ 386.921233][T17448] tipc: Started in network mode [ 386.933053][T17448] tipc: Node identity 5a5bbd11951d, cluster identity 4711 [ 386.947503][T17448] tipc: Enabled bearer , priority 0 [ 386.991252][T17440] tipc: Resetting bearer [ 387.043198][T17440] tipc: Disabling bearer [ 387.141601][T17461] netlink: 'syz.4.3022': attribute type 2 has an invalid length. [ 387.153466][T17461] netlink: 'syz.4.3022': attribute type 11 has an invalid length. [ 387.183829][T17461] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3022'. [ 387.466843][T17479] veth0: entered promiscuous mode [ 387.557725][T17487] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 387.582093][T17486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.610291][T17485] ip6tnl2: entered promiscuous mode [ 387.615676][T17485] ip6tnl2: entered allmulticast mode [ 387.647512][T17475] veth0: left promiscuous mode [ 387.731841][T17394] Bluetooth: hci1: command 0x0406 tx timeout [ 387.805032][T17497] xt_ecn: cannot match TCP bits for non-tcp packets [ 387.823201][T17495] bridge1: entered allmulticast mode [ 387.931858][T17502] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 387.970610][ T5634] Bluetooth: hci0: command tx timeout [ 387.981331][T17502] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 388.004521][T17502] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 388.004724][T17504] netlink: 'syz.2.3036': attribute type 1 has an invalid length. [ 388.085169][T17502] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 388.125966][T17509] macvlan3: entered promiscuous mode [ 388.133749][T17502] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 388.137551][T17509] macvlan3: entered allmulticast mode [ 388.148342][T17509] bond10: entered promiscuous mode [ 388.154417][T17509] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 388.171292][T17509] bond10: left promiscuous mode [ 388.434571][T17529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3042'. [ 388.617425][T17540] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 388.633497][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.648148][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.662328][T17400] bridge_slave_0: entered allmulticast mode [ 388.666716][T13433] hid-generic 0005:4C4C:100F.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 388.676406][T17400] bridge_slave_0: entered promiscuous mode [ 388.702786][T17548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 388.725568][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.739773][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.756816][T17400] bridge_slave_1: entered allmulticast mode [ 388.778083][T17400] bridge_slave_1: entered promiscuous mode [ 388.800045][T17540] dummy0: entered promiscuous mode [ 388.816836][T17540] team0: Port device dummy0 added [ 388.922870][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.972211][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.071505][T17400] team0: Port device team_slave_0 added [ 389.083372][T17400] team0: Port device team_slave_1 added [ 389.092626][T17560] siw: device registration error -23 [ 389.196289][T17560] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.205074][T17560] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.246648][T17570] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3052'. [ 389.340057][T17560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.353488][T17560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.555324][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.565480][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.576141][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.584554][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.612295][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.621490][T17581] netlink: 6716 bytes leftover after parsing attributes in process `syz.4.3054'. [ 389.640240][T17581] netlink: 6716 bytes leftover after parsing attributes in process `syz.4.3054'. [ 389.653672][ T1131] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.663368][ T1131] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.682138][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.700922][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.730374][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.772759][T17585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'. [ 389.974416][T17400] hsr_slave_0: entered promiscuous mode [ 389.995252][T17400] hsr_slave_1: entered promiscuous mode [ 390.014700][T17400] debugfs: 'hsr0' already exists in 'hsr' [ 390.028070][T17400] Cannot create hsr debugfs directory [ 390.049248][T17394] Bluetooth: hci0: command tx timeout [ 390.244638][T17602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3061'. [ 390.384816][T17600] syzkaller0: entered promiscuous mode [ 390.391449][T17600] syzkaller0: entered allmulticast mode [ 390.541631][T17400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.555336][T17400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.566408][T17400] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.620922][T17617] netlink: 'syz.0.3066': attribute type 4 has an invalid length. [ 390.645623][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3062'. [ 390.789958][T17400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.801067][T17400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.811984][T17400] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 390.825995][T17626] netlink: 'syz.0.3068': attribute type 2 has an invalid length. [ 390.840968][T17626] netlink: 'syz.0.3068': attribute type 2 has an invalid length. [ 390.962580][T17400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.973178][T17400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.004135][T17400] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 391.040657][T17623] syzkaller1: entered promiscuous mode [ 391.046206][T17623] syzkaller1: entered allmulticast mode [ 391.146469][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'. [ 391.369550][T17641] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 393.556963][T17629] netlink: 'syz.0.3069': attribute type 11 has an invalid length. [ 393.785413][T17400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 393.800111][T17400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.812301][T17400] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 394.012014][T17400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 394.034753][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.046602][T17400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 394.060965][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.070505][T17400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 394.082821][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.093019][T17400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 394.106594][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 394.261521][T17400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.310488][T17400] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.353268][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.360519][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.411255][T10143] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.418466][T10143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.765662][T17689] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3081'. [ 394.779866][T17688] netlink: 'syz.2.3079': attribute type 2 has an invalid length. [ 395.120836][T17711] openvswitch: netlink: Multiple metadata blocks provided [ 395.261590][T17714] netlink: 'syz.0.3086': attribute type 2 has an invalid length. [ 395.348200][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3087'. [ 395.432961][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.477376][T17400] veth0_vlan: entered promiscuous mode [ 395.488776][T17400] veth1_vlan: entered promiscuous mode [ 395.522485][T17400] veth0_macvtap: entered promiscuous mode [ 395.533593][T17400] veth1_macvtap: entered promiscuous mode [ 395.553794][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.568213][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.583220][ T1124] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.595199][ T1124] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.604431][ T1124] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.617253][ T1124] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.721655][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.733042][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.763656][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.772769][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.964912][T17728] netlink: 'syz.1.3090': attribute type 1 has an invalid length. [ 396.043180][T17728] bond1 (unregistering): Released all slaves [ 396.091849][T17739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3090'. [ 396.111706][T17741] tipc: Trying to set illegal importance in message [ 396.156592][T17735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.182872][T17730] netlink: 766 bytes leftover after parsing attributes in process `syz.2.3089'. [ 396.437069][T17764] netlink: 'syz.1.3095': attribute type 2 has an invalid length. [ 396.463046][T17764] netlink: 'syz.1.3095': attribute type 2 has an invalid length. [ 396.665112][T17770] tipc: MTU too low for tipc bearer [ 396.796263][T17780] netlink: 277 bytes leftover after parsing attributes in process `syz.4.3103'. [ 397.113451][T17802] IPv6: NLM_F_CREATE should be specified when creating new route [ 397.138601][T17802] netlink: 'syz.1.3108': attribute type 1 has an invalid length. [ 397.181634][T17394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.197293][T17394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.207086][T17394] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.218805][T17394] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.227885][T17394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 397.460892][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3110'. [ 397.544611][T17818] veth1_to_bond: entered allmulticast mode [ 397.561684][T17818] veth1_to_bond: entered promiscuous mode [ 397.581824][T17818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3111'. [ 397.634068][T17818] veth1_to_bond (unregistering): left allmulticast mode [ 397.679482][T17818] veth1_to_bond (unregistering): left promiscuous mode [ 397.735109][T17818] bond0: (slave bond_slave_1): Releasing backup interface [ 397.762326][T17818] bond_slave_1 (unregistering): left allmulticast mode [ 397.850840][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 397.874090][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 397.921675][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 397.934594][T17804] vxcan1 speed is unknown, defaulting to 1000 [ 397.960156][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 397.975857][T17826] tipc: Started in network mode [ 397.982389][T17826] tipc: Node identity 76224a9faf84, cluster identity 4711 [ 397.990857][T17826] tipc: Enabled bearer , priority 0 [ 398.005750][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 398.074653][T17826] syzkaller0: entered promiscuous mode [ 398.088662][T17826] syzkaller0: entered allmulticast mode [ 398.101951][T17826] tipc: Resetting bearer [ 398.113989][T17828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3114'. [ 398.145033][T17825] tipc: Resetting bearer [ 399.328737][ T5634] Bluetooth: hci2: command tx timeout [ 400.707947][T17825] tipc: Disabling bearer [ 400.873151][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 400.906056][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.917001][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 401.049953][T13433] tipc: Node number set to 3651553951 [ 401.413978][ T5634] Bluetooth: hci2: command tx timeout [ 403.349093][T17876] __nla_validate_parse: 5 callbacks suppressed [ 403.349110][T17876] netlink: 300 bytes leftover after parsing attributes in process `syz.2.3127'. [ 403.398019][T17879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3128'. [ 403.417188][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 403.447410][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.460038][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 403.488606][ T5634] Bluetooth: hci2: command tx timeout [ 403.617021][T17894] netlink: 'syz.1.3133': attribute type 3 has an invalid length. [ 403.754420][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 403.776321][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.798098][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 403.989181][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 404.009414][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.022161][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 404.162252][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3135'. [ 404.635302][T17930] Bluetooth: MGMT ver 1.23 [ 404.752841][T17932] netlink: 'syz.3.3142': attribute type 10 has an invalid length. [ 405.575229][ T5634] Bluetooth: hci2: command tx timeout [ 406.646052][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3140'. [ 406.655315][T17923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3140'. [ 406.739255][T17932] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.752934][T17932] bond0: (slave team0): Enslaving as an active interface with an up link [ 406.926360][T17942] netlink: zone id is out of range [ 406.953020][T17942] netlink: get zone limit has 4 unknown bytes [ 407.155283][ T12] batadv1: left allmulticast mode [ 407.190268][ T12] batadv1: left promiscuous mode [ 407.195988][T17955] netlink: 'syz.2.3150': attribute type 1 has an invalid length. [ 407.205154][ T12] bridge0: port 3(batadv1) entered disabled state [ 407.543251][ T12] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 407.625406][ T12] bond15 (unregistering): (slave ip6gretap2): Releasing active interface [ 407.641728][T17983] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3155'. [ 407.671374][T17984] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3155'. [ 407.882331][ T12] bond6 (unregistering): (slave gretap1): Releasing active interface [ 407.930632][ T12] bond13 (unregistering): (slave gretap2): Releasing active interface [ 407.961967][ T12] bond20 (unregistering): (slave gretap3): Releasing active interface [ 408.042515][ T12] bond3 (unregistering): (slave geneve2): Releasing active interface [ 408.074585][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 408.083423][ T12] bridge1 (unregistering): left promiscuous mode [ 408.090030][ T12] bridge1 (unregistering): left allmulticast mode [ 408.108643][ T12] bond12 (unregistering): (slave bridge4): Releasing backup interface [ 408.116848][ T12] bridge4 (unregistering): left promiscuous mode [ 408.157500][ T12] bond0 (unregistering): Released all slaves [ 408.167514][ T12] bond1 (unregistering): Released all slaves [ 408.184811][ T12] bond2 (unregistering): Released all slaves [ 408.204066][ T12] bond3 (unregistering): Released all slaves [ 408.217429][ T12] bond4 (unregistering): Released all slaves [ 408.234022][ T12] bond5 (unregistering): Released all slaves [ 408.255144][ T12] bond6 (unregistering): Released all slaves [ 408.268575][ T12] bond7 (unregistering): Released all slaves [ 408.283608][ T12] bond8 (unregistering): Released all slaves [ 408.302964][ T12] bond9 (unregistering): Released all slaves [ 408.316425][ T12] bond10 (unregistering): Released all slaves [ 408.332017][ T12] bond11 (unregistering): Released all slaves [ 408.355587][ T12] bond12 (unregistering): Released all slaves [ 408.370004][ T12] bond13 (unregistering): Released all slaves [ 408.385403][ T12] bond14 (unregistering): Released all slaves [ 408.405323][ T12] bond15 (unregistering): Released all slaves [ 408.419444][ T12] bond16 (unregistering): Released all slaves [ 408.433478][ T12] bond17 (unregistering): Released all slaves [ 408.447671][ T12] bond18 (unregistering): Released all slaves [ 408.466361][ T12] bond19 (unregistering): Released all slaves [ 408.487073][ T12] bond20 (unregistering): Released all slaves [ 408.501607][ T12] bond21 (unregistering): Released all slaves [ 408.519258][T17955] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 408.570967][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3151'. [ 408.694706][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 409.026704][ T12] tipc: Disabling bearer [ 409.069953][ T12] tipc: Left network mode [ 409.180775][T18025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3163'. [ 409.385042][T18034] netlink: 'syz.4.3164': attribute type 2 has an invalid length. [ 409.406202][T18039] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3165'. [ 409.709553][T17804] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.727428][T17804] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.748011][T17804] bridge_slave_0: entered allmulticast mode [ 409.755928][T17804] bridge_slave_0: entered promiscuous mode [ 409.766858][T17804] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.778000][T17804] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.785480][T17804] bridge_slave_1: entered allmulticast mode [ 409.795486][T17804] bridge_slave_1: entered promiscuous mode [ 410.127287][T18079] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 410.142170][T17804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 410.277501][T17804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.363807][T18087] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3173'. [ 410.455593][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 410.482124][T18092] nbd: must specify an index to disconnect [ 410.501254][T17804] team0: Port device team_slave_0 added [ 410.632544][T18098] netlink: 'syz.4.3177': attribute type 1 has an invalid length. [ 410.681527][T18098] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3177'. [ 410.707720][T17804] team0: Port device team_slave_1 added [ 410.926133][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 411.071012][T17804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.091565][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.120919][T17804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.140079][T17804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.157046][T17804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 411.199270][T17804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.282665][ T1131] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 411.354548][T18120] bridge0: port 4(ipvlan3) entered blocking state [ 411.361639][T18120] bridge0: port 4(ipvlan3) entered disabled state [ 411.368271][T18120] ipvlan3: entered allmulticast mode [ 411.373727][T18120] bridge0: entered allmulticast mode [ 411.382567][T18120] ipvlan3: left allmulticast mode [ 411.387617][T18120] bridge0: left allmulticast mode [ 411.406276][ T12] hsr_slave_0: left promiscuous mode [ 411.413726][ T12] hsr_slave_1: left promiscuous mode [ 411.881616][T17804] hsr_slave_0: entered promiscuous mode [ 411.899940][T17804] hsr_slave_1: entered promiscuous mode [ 411.906573][T17804] debugfs: 'hsr0' already exists in 'hsr' [ 411.916448][T17804] Cannot create hsr debugfs directory [ 412.204580][T18150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3189'. [ 412.346061][T18150] vxcan1 speed is unknown, defaulting to 1000 [ 412.714957][ T12] IPVS: stop unused estimator thread 0... [ 413.092944][T18187] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 413.130837][T18187] netlink: 'syz.2.3199': attribute type 2 has an invalid length. [ 413.502462][T18187] : entered promiscuous mode [ 413.701887][T18208] sctp: [Deprecated]: syz.3.3202 (pid 18208) Use of int in maxseg socket option. [ 413.701887][T18208] Use struct sctp_assoc_value instead [ 413.963625][T18228] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3207'. [ 414.470002][T18251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3211'. [ 414.787190][T18264] bond1: Unable to set up delay as MII monitoring is disabled [ 414.799384][T18264] bond1 (unregistering): Released all slaves [ 414.836323][T18271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 414.846107][T17804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.876701][T17804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.897500][T18273] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3217'. [ 414.926384][ T5634] block nbd2: Receive control failed (result -107) [ 414.954209][T17804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 415.030158][T17804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.062338][T18275] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3217'. [ 415.072369][T17804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 415.133604][T17804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.175846][T17804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 415.205678][T17804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.217600][T18285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3219'. [ 415.231628][T18285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3219'. [ 415.556012][T17804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.622931][T17804] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.670598][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.677789][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.854623][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.861878][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.057710][T18336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3227'. [ 416.160637][T18328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 416.198501][T18328] bond0: (slave bond1): Enslaving as an active interface with an up link [ 416.279438][T18345] syzkaller0: entered promiscuous mode [ 416.313749][T18345] syzkaller0: entered allmulticast mode [ 416.353398][T18343] syzkaller1: entered promiscuous mode [ 416.363813][T18343] syzkaller1: entered allmulticast mode [ 416.480764][T18356] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.3230'. [ 417.593256][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 417.644981][T18427] bridge0: port 3(batadv1) entered blocking state [ 417.675409][T18427] bridge0: port 3(batadv1) entered disabled state [ 417.697893][T18427] batadv1: entered allmulticast mode [ 417.724301][T18427] batadv1: entered promiscuous mode [ 417.790120][T18438] nbd: must specify a size in bytes for the device [ 417.827894][T18439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.834805][T17804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.010413][T18449] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 418.083539][ T5745] IPVS: starting estimator thread 0... [ 418.140666][ T1131] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 418.150018][ T1131] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 418.151096][T17804] veth0_vlan: entered promiscuous mode [ 418.198579][T18457] IPVS: using max 35 ests per chain, 84000 per kthread [ 418.254871][T17804] veth1_vlan: entered promiscuous mode [ 418.363912][T17804] veth0_macvtap: entered promiscuous mode [ 418.384792][T17804] veth1_macvtap: entered promiscuous mode [ 418.454424][T18472] netlink: 'syz.1.3254': attribute type 12 has an invalid length. [ 418.471816][T17804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.535237][T17804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.593987][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.631028][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.669628][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.695341][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.837340][T18484] netlink: 'syz.4.3258': attribute type 4 has an invalid length. [ 418.901025][T18496] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 418.976507][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 418.990443][T18491] [ 418.992804][T18491] ====================================================== [ 418.999819][T18491] WARNING: possible circular locking dependency detected [ 419.006840][T18491] syzkaller #0 Not tainted [ 419.011252][T18491] ------------------------------------------------------ [ 419.018258][T18491] syz.2.3260/18491 is trying to acquire lock: [ 419.024314][T18491] ffffffff8ec847a0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x61/0x660 [ 419.033630][T18491] [ 419.033630][T18491] but task is already holding lock: [ 419.040978][T18491] ffff888054235530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 419.050204][T18491] [ 419.050204][T18491] which lock already depends on the new lock. [ 419.050204][T18491] [ 419.060590][T18491] [ 419.060590][T18491] the existing dependency chain (in reverse order) is: [ 419.069587][T18491] [ 419.069587][T18491] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 419.077145][T18491] __mutex_lock+0x19d/0x1550 [ 419.082250][T18491] __ipv6_dev_mc_inc+0x4e/0xa40 [ 419.087617][T18491] __ipv6_sock_mc_join+0x4f7/0x740 [ 419.093245][T18491] ipv6_mcast_join_leave+0x1a2/0x240 [ 419.099047][T18491] do_ipv6_setsockopt+0x1990/0x3180 [ 419.104756][T18491] ipv6_setsockopt+0x59/0x170 [ 419.109942][T18491] do_sock_setsockopt+0x17c/0x1b0 [ 419.115477][T18491] __x64_sys_setsockopt+0x13d/0x1b0 [ 419.121193][T18491] do_syscall_64+0x174/0x580 [ 419.126297][T18491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.132700][T18491] [ 419.132700][T18491] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 419.140425][T18491] lock_sock_nested+0x41/0x100 [ 419.145697][T18491] inet_shutdown+0x6a/0x390 [ 419.150711][T18491] nbd_mark_nsock_dead+0x2cb/0x550 [ 419.156336][T18491] recv_work+0x1cee/0x1e10 [ 419.161260][T18491] process_scheduled_works+0xa8e/0x14e0 [ 419.167320][T18491] worker_thread+0xa47/0xfb0 [ 419.172418][T18491] kthread+0x388/0x470 [ 419.177016][T18491] ret_from_fork+0x514/0xb70 [ 419.182121][T18491] ret_from_fork_asm+0x1a/0x30 [ 419.187393][T18491] [ 419.187393][T18491] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 419.195043][T18491] __mutex_lock+0x19d/0x1550 [ 419.200156][T18491] nbd_queue_rq+0x373/0x1150 [ 419.205262][T18491] blk_mq_dispatch_rq_list+0x499/0x1990 [ 419.211352][T18491] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 419.218196][T18491] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 419.224714][T18491] blk_mq_run_work_fn+0x16c/0x300 [ 419.230265][T18491] process_scheduled_works+0xa8e/0x14e0 [ 419.236327][T18491] worker_thread+0xa47/0xfb0 [ 419.241428][T18491] kthread+0x388/0x470 [ 419.246009][T18491] ret_from_fork+0x514/0xb70 [ 419.251122][T18491] ret_from_fork_asm+0x1a/0x30 [ 419.256395][T18491] [ 419.256395][T18491] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 419.263623][T18491] __mutex_lock+0x19d/0x1550 [ 419.268736][T18491] nbd_queue_rq+0xc1/0x1150 [ 419.273756][T18491] blk_mq_dispatch_rq_list+0x499/0x1990 [ 419.279813][T18491] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 419.286656][T18491] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 419.293156][T18491] blk_mq_run_work_fn+0x16c/0x300 [ 419.298713][T18491] process_scheduled_works+0xa8e/0x14e0 [ 419.304775][T18491] worker_thread+0xa47/0xfb0 [ 419.309878][T18491] kthread+0x388/0x470 [ 419.314469][T18491] ret_from_fork+0x514/0xb70 [ 419.319575][T18491] ret_from_fork_asm+0x1a/0x30 [ 419.324849][T18491] [ 419.324849][T18491] -> #3 (set->srcu){.+.+}-{0:0}: [ 419.331979][T18491] __synchronize_srcu+0xc9/0x2f0 [ 419.337446][T18491] elevator_switch+0x1e8/0x7b0 [ 419.342734][T18491] elevator_change+0x2fa/0x480 [ 419.348018][T18491] elevator_set_default+0x375/0x440 [ 419.353727][T18491] blk_register_queue+0x3f3/0x4e0 [ 419.359267][T18491] __add_disk+0x6cb/0xe30 [ 419.364115][T18491] add_disk_fwnode+0xfb/0x4b0 [ 419.369329][T18491] nbd_dev_add+0x733/0xb60 [ 419.374266][T18491] nbd_init+0x15f/0x1e0 [ 419.378935][T18491] do_one_initcall+0x250/0x870 [ 419.384210][T18491] do_initcall_level+0x10a/0x1a0 [ 419.389657][T18491] do_initcalls+0x59/0xa0 [ 419.394527][T18491] kernel_init_freeable+0x29d/0x3e0 [ 419.400323][T18491] kernel_init+0x1d/0x1d0 [ 419.405166][T18491] ret_from_fork+0x514/0xb70 [ 419.410269][T18491] ret_from_fork_asm+0x1a/0x30 [ 419.415538][T18491] [ 419.415538][T18491] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 419.423349][T18491] __mutex_lock+0x19d/0x1550 [ 419.428458][T18491] elevator_change+0x1af/0x480 [ 419.433735][T18491] elevator_set_none+0xb5/0x140 [ 419.439092][T18491] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 419.445411][T18491] nbd_start_device+0x189/0xb30 [ 419.450773][T18491] nbd_genl_connect+0x1597/0x1c10 [ 419.456309][T18491] genl_family_rcv_msg_doit+0x233/0x340 [ 419.462362][T18491] genl_rcv_msg+0x614/0x7a0 [ 419.467372][T18491] netlink_rcv_skb+0x226/0x4a0 [ 419.472644][T18491] genl_rcv+0x28/0x40 [ 419.477132][T18491] netlink_unicast+0x7bb/0x940 [ 419.482401][T18491] netlink_sendmsg+0x813/0xb40 [ 419.487675][T18491] sock_sendmsg_nosec+0x13a/0x180 [ 419.493206][T18491] ____sys_sendmsg+0x54e/0x850 [ 419.498490][T18491] ___sys_sendmsg+0x2a5/0x360 [ 419.503679][T18491] __x64_sys_sendmsg+0x1b1/0x290 [ 419.509126][T18491] do_syscall_64+0x174/0x580 [ 419.514223][T18491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.520629][T18491] [ 419.520629][T18491] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 419.529223][T18491] blk_alloc_queue+0x544/0x690 [ 419.534496][T18491] __blk_mq_alloc_disk+0x194/0x390 [ 419.540118][T18491] nbd_dev_add+0x494/0xb60 [ 419.545045][T18491] nbd_init+0x15f/0x1e0 [ 419.549712][T18491] do_one_initcall+0x250/0x870 [ 419.555003][T18491] do_initcall_level+0x10a/0x1a0 [ 419.560545][T18491] do_initcalls+0x59/0xa0 [ 419.565384][T18491] kernel_init_freeable+0x29d/0x3e0 [ 419.571101][T18491] kernel_init+0x1d/0x1d0 [ 419.575935][T18491] ret_from_fork+0x514/0xb70 [ 419.581038][T18491] ret_from_fork_asm+0x1a/0x30 [ 419.586310][T18491] [ 419.586310][T18491] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 419.593506][T18491] __lock_acquire+0x1520/0x2cf0 [ 419.598870][T18491] lock_acquire+0x106/0x350 [ 419.603881][T18491] fs_reclaim_acquire+0x71/0x100 [ 419.609327][T18491] __kmalloc_cache_noprof+0x61/0x660 [ 419.615124][T18491] __ipv6_dev_mc_inc+0x447/0xa40 [ 419.620582][T18491] __ipv6_sock_mc_join+0x4f7/0x740 [ 419.626203][T18491] inet6_addr_add+0x3a4/0xb50 [ 419.631389][T18491] inet6_rtm_newaddr+0x9f3/0xdf0 [ 419.636838][T18491] rtnetlink_rcv_msg+0x802/0xc00 [ 419.642285][T18491] netlink_rcv_skb+0x226/0x4a0 [ 419.647568][T18491] netlink_unicast+0x7bb/0x940 [ 419.652840][T18491] netlink_sendmsg+0x813/0xb40 [ 419.658117][T18491] sock_sendmsg_nosec+0x13a/0x180 [ 419.663651][T18491] ____sys_sendmsg+0x54e/0x850 [ 419.668926][T18491] ___sys_sendmsg+0x2a5/0x360 [ 419.674117][T18491] __x64_sys_sendmsg+0x1b1/0x290 [ 419.679567][T18491] do_syscall_64+0x174/0x580 [ 419.684669][T18491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.691067][T18491] [ 419.691067][T18491] other info that might help us debug this: [ 419.691067][T18491] [ 419.701275][T18491] Chain exists of: [ 419.701275][T18491] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 419.701275][T18491] [ 419.713867][T18491] Possible unsafe locking scenario: [ 419.713867][T18491] [ 419.721299][T18491] CPU0 CPU1 [ 419.726645][T18491] ---- ---- [ 419.731989][T18491] lock(&idev->mc_lock); [ 419.736308][T18491] lock(sk_lock-AF_INET6); [ 419.743318][T18491] lock(&idev->mc_lock); [ 419.750152][T18491] lock(fs_reclaim); [ 419.754119][T18491] [ 419.754119][T18491] *** DEADLOCK *** [ 419.754119][T18491] [ 419.762241][T18491] 3 locks held by syz.2.3260/18491: [ 419.767420][T18491] #0: ffffffff9002bb40 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65e/0xdf0 [ 419.776816][T18491] #1: ffff888032a08260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_addr_add+0x394/0xb50 [ 419.786640][T18491] #2: ffff888054235530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa40 [ 419.796293][T18491] [ 419.796293][T18491] stack backtrace: [ 419.802183][T18491] CPU: 0 UID: 0 PID: 18491 Comm: syz.2.3260 Not tainted syzkaller #0 PREEMPT(full) [ 419.802202][T18491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 419.802219][T18491] Call Trace: [ 419.802227][T18491] [ 419.802234][T18491] dump_stack_lvl+0xe8/0x150 [ 419.802258][T18491] print_circular_bug+0x2e1/0x300 [ 419.802274][T18491] check_noncircular+0x12e/0x150 [ 419.802306][T18491] __lock_acquire+0x1520/0x2cf0 [ 419.802329][T18491] ? rcu_is_watching+0x15/0xb0 [ 419.802351][T18491] ? trace_contention_end+0x3d/0x140 [ 419.802366][T18491] ? __mutex_lock+0x30d/0x1550 [ 419.802386][T18491] ? __kmalloc_cache_noprof+0x61/0x660 [ 419.802404][T18491] lock_acquire+0x106/0x350 [ 419.802423][T18491] ? __kmalloc_cache_noprof+0x61/0x660 [ 419.802441][T18491] ? __ipv6_dev_mc_inc+0x4e/0xa40 [ 419.802464][T18491] ? __pfx___mutex_lock+0x10/0x10 [ 419.802484][T18491] fs_reclaim_acquire+0x71/0x100 [ 419.802502][T18491] ? __kmalloc_cache_noprof+0x61/0x660 [ 419.802520][T18491] __kmalloc_cache_noprof+0x61/0x660 [ 419.802538][T18491] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 419.802559][T18491] ? __ipv6_dev_mc_inc+0x447/0xa40 [ 419.802582][T18491] __ipv6_dev_mc_inc+0x447/0xa40 [ 419.802607][T18491] __ipv6_sock_mc_join+0x4f7/0x740 [ 419.802630][T18491] ? __local_bh_enable_ip+0xd0/0x130 [ 419.802648][T18491] inet6_addr_add+0x3a4/0xb50 [ 419.802672][T18491] inet6_rtm_newaddr+0x9f3/0xdf0 [ 419.802693][T18491] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 419.802714][T18491] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 419.802738][T18491] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 419.802756][T18491] rtnetlink_rcv_msg+0x802/0xc00 [ 419.802778][T18491] ? netlink_sendmsg+0x5d4/0xb40 [ 419.802800][T18491] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 419.802819][T18491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.802838][T18491] ? __lock_acquire+0x683/0x2cf0 [ 419.802861][T18491] netlink_rcv_skb+0x226/0x4a0 [ 419.802882][T18491] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.802902][T18491] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.802927][T18491] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.802947][T18491] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.802975][T18491] netlink_unicast+0x7bb/0x940 [ 419.802997][T18491] netlink_sendmsg+0x813/0xb40 [ 419.803022][T18491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.803044][T18491] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.803061][T18491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.803081][T18491] sock_sendmsg_nosec+0x13a/0x180 [ 419.803099][T18491] ____sys_sendmsg+0x54e/0x850 [ 419.803122][T18491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.803145][T18491] ? import_iovec+0x73/0xa0 [ 419.803166][T18491] ___sys_sendmsg+0x2a5/0x360 [ 419.803186][T18491] ? __lock_acquire+0x683/0x2cf0 [ 419.803206][T18491] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.803228][T18491] ? futex_wait+0x2a2/0x390 [ 419.803253][T18491] ? __fget_files+0x2a/0x420 [ 419.803271][T18491] ? __fget_files+0x3a2/0x420 [ 419.803292][T18491] __x64_sys_sendmsg+0x1b1/0x290 [ 419.803314][T18491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.803340][T18491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.803356][T18491] do_syscall_64+0x174/0x580 [ 419.803375][T18491] ? trace_irq_disable+0x3b/0x140 [ 419.803393][T18491] ? clear_bhb_loop+0x40/0x90 [ 419.803409][T18491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.803424][T18491] RIP: 0033:0x7fb35559de59 [ 419.803442][T18491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.803455][T18491] RSP: 002b:00007fb356497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.803472][T18491] RAX: ffffffffffffffda RBX: 00007fb355826090 RCX: 00007fb35559de59 [ 419.803483][T18491] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 419.803494][T18491] RBP: 00007fb355633e6f R08: 0000000000000000 R09: 0000000000000000 [ 419.803505][T18491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 419.803515][T18491] R13: 00007fb355826128 R14: 00007fb355826090 R15: 00007fff72eee2d8 [ 419.803532][T18491] [ 420.204535][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.220390][T17804] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 420.513150][T18488] __nla_validate_parse: 6 callbacks suppressed [ 420.513170][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'. [ 420.669426][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.804872][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.870851][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.960273][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.033882][ T12] bridge_slave_1: left allmulticast mode [ 421.041295][ T12] bridge_slave_1: left promiscuous mode [ 421.047031][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.058182][ T12] bridge_slave_0: left allmulticast mode [ 421.065158][ T12] bridge_slave_0: left promiscuous mode [ 421.071379][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.205356][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.217041][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.236901][ T12] bond0 (unregistering): (slave bond1): Releasing backup interface [ 421.246071][ T12] bond0 (unregistering): Released all slaves [ 421.259890][ T12] bond1 (unregistering): Released all slaves [ 421.335376][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 421.635702][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 421.669304][ T12] hsr_slave_0: left promiscuous mode [ 421.675162][ T12] hsr_slave_1: left promiscuous mode [ 421.681455][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.689102][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.697195][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.705229][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.716657][ T12] veth1_macvtap: left promiscuous mode [ 421.722610][ T12] veth0_macvtap: left promiscuous mode [ 421.728195][ T12] veth1_vlan: left promiscuous mode [ 421.734090][ T12] veth0_vlan: left promiscuous mode [ 421.923560][ T12] team0 (unregistering): Port device team_slave_1 removed [ 421.945766][ T12] team0 (unregistering): Port device team_slave_0 removed [ 422.014511][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 422.204610][ T12] IPVS: stop unused estimator thread 0... [ 422.247096][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.305478][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.318107][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 422.353990][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.394984][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.721000][ T5289] 8021q: adding VLAN 0 to HW filter on device eth5 [ 422.731412][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.774872][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.824850][ T12] bond0: (slave netdevsim1): Releasing backup interface [ 422.833278][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.876623][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.980845][ T5289] 8021q: adding VLAN 0 to HW filter on device eth6 [ 422.999247][ T12] bridge_slave_1: left allmulticast mode [ 423.008230][ T12] bridge_slave_1: left promiscuous mode [ 423.014101][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.022657][ T12] bridge_slave_0: left allmulticast mode [ 423.029033][ T12] bridge_slave_0: left promiscuous mode [ 423.034710][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.044935][ T12] bridge_slave_1: left allmulticast mode [ 423.050685][ T12] bridge_slave_1: left promiscuous mode [ 423.056322][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.064506][ T12] bridge_slave_0: left allmulticast mode [ 423.070209][ T12] bridge_slave_0: left promiscuous mode [ 423.075837][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.086835][ T12] batadv1: left allmulticast mode [ 423.092000][ T12] batadv1: left promiscuous mode [ 423.097041][ T12] bridge0: port 3(batadv1) entered disabled state [ 423.105307][ T12] bridge_slave_1: left allmulticast mode [ 423.111099][ T12] bridge_slave_1: left promiscuous mode [ 423.116754][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.126124][ T12] bridge_slave_0: left allmulticast mode [ 423.131818][ T12] bridge_slave_0: left promiscuous mode [ 423.137454][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.199682][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.210973][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.222262][ T12] bond0 (unregistering): Released all slaves [ 423.271425][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.283008][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.293432][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 423.302878][ T12] bond0 (unregistering): Released all slaves [ 423.331047][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.341265][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.352438][ T12] bond0 (unregistering): Released all slaves [ 423.416463][ T12] tipc: Left network mode [ 423.646341][ T5289] 8021q: adding VLAN 0 to HW filter on device eth7 [ 424.040587][ T5289] 8021q: adding VLAN 0 to HW filter on device eth8 [ 424.266922][ T12] hsr_slave_0: left promiscuous mode [ 424.272921][ T12] hsr_slave_1: left promiscuous mode [ 424.279168][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.286596][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.315042][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.327092][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.337800][ T12] hsr_slave_0: left promiscuous mode [ 424.344303][ T12] hsr_slave_1: left promiscuous mode [ 424.350240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.357955][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.371029][ T12] hsr_slave_0: left promiscuous mode [ 424.376944][ T12] hsr_slave_1: left promiscuous mode [ 424.384117][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.391646][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.400175][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.407599][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.422036][ T12] veth1_macvtap: left promiscuous mode [ 424.427562][ T12] veth0_macvtap: left promiscuous mode [ 424.433163][ T12] veth1_vlan: left promiscuous mode [ 424.438619][ T12] veth0_vlan: left promiscuous mode [ 424.444942][ T12] veth1_macvtap: left promiscuous mode [ 424.450875][ T12] veth0_macvtap: left promiscuous mode [ 424.456399][ T12] veth1_vlan: left promiscuous mode [ 424.462110][ T12] veth0_vlan: left promiscuous mode [ 424.574782][ T12] team0 (unregistering): Port device team_slave_1 removed [ 424.585918][ T12] team0 (unregistering): Port device team_slave_0 removed [ 424.722285][ T12] team0 (unregistering): Port device team_slave_1 removed [ 424.734102][ T12] team0 (unregistering): Port device team_slave_0 removed [ 424.834294][ T12] team0 (unregistering): Port device team_slave_1 removed [ 424.844633][ T12] team0 (unregistering): Port device team_slave_0 removed [ 424.890338][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 425.201796][ T5289] 8021q: adding VLAN 0 to HW filter on device eth10 [ 425.508859][ T5289] 8021q: adding VLAN 0 to HW filter on device eth11 [ 425.729440][ T5289] 8021q: adding VLAN 0 to HW filter on device eth12 [ 425.955968][ T5289] 8021q: adding VLAN 0 to HW filter on device eth13 [ 426.151696][ T5289] 8021q: adding VLAN 0 to HW filter on device eth14 [ 426.347364][ T5289] 8021q: adding VLAN 0 to HW filter on device eth15 [ 426.547075][ T5289] 8021q: adding VLAN 0 to HW filter on device eth16