last executing test programs: 2.20684183s ago: executing program 0 (id=6635): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000000c0)={'filter\x00', 0x0, 0x3, 0x0, [0x80000000, 0x0, 0xfffffffffffffff8, 0x8, 0x5, 0x3], 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x78) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) 2.187930941s ago: executing program 0 (id=6636): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="a7000100794383a05aaa5f2543000000", 0x10) close(r0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x2, r3}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2000}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4008004) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, &(0x7f0000000400)='bridge_slave\x00', 0xd) 2.017975997s ago: executing program 0 (id=6637): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r2 = socket(0x2a, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000021c0)="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", 0x171}, {&(0x7f00000003c0)="bf06c9e7028a0f80ad61379f059360863a4a567cea849a05da71d8c66971c5a36591236100b88ea3c0c465", 0x2b}, {&(0x7f0000000400)="d9e7ebaadc2611", 0x7}], 0x5, 0x0, 0x0, 0x40014}], 0x1, 0x40840) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_BURST={0x8}]}}}]}]}], {0x14}}, 0x74}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r8, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300010062726f6164636173fd6def9e6e6b"], 0x1ac}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r11, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0x6, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}]}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x3, 0x0, 0x1}, {0x4, 0x0, 0x1}}}}]}]}]}}]}, 0xab}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@target_btf_id=r6}, 0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@target_btf_id=r12}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000020000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x32, '\x00', r5, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.834106329s ago: executing program 3 (id=6640): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/150, 0x96}, {&(0x7f0000003c00)=""/4108, 0x100c}, {&(0x7f0000002a00)=""/15, 0xf}], 0x3}, 0xec}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.595123897s ago: executing program 3 (id=6644): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r4, @ANYBLOB="010000000d000000000201000000fcffffff01410000001c001700000000000000006574683a737230"], 0x38}}, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) (async) socket$unix(0x1, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'bond_slave_1\x00'}) 1.427060671s ago: executing program 4 (id=6648): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_ethernet(0x14, &(0x7f0000002e00)={@random="25f0504a4e97", @local, @void, {@llc={0x4, {@llc={0x0, 0xf4, "bf", "cd7015"}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x2, 0x52) listen(r0, 0x0) 1.404072407s ago: executing program 4 (id=6650): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000021c0)=@acquire={0x16c, 0x17, 0x90d, 0x0, 0x0, {{@in=@broadcast}, @in=@dev, {@in6=@remote, @in6=@mcast2}, {{@in6=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x44, 0x10, [{{@in=@multicast2}}]}]}, 0x16c}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000140)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 1.380646273s ago: executing program 0 (id=6651): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000800)={0x58, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x4004}}, 0x26) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_TARGET={0x4}, @TCA_CODEL_CE_THRESHOLD={0xffffffffffffff79}]}}]}, 0x44}}, 0x0) 1.29786067s ago: executing program 3 (id=6653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @remote, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x0, {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, r5, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}]}, 0x18}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x15, 0x2a, [@mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x7, 0x8}}, @mesh_id={0x72, 0x6}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x74, 0xfc, "6110e8a21d353236344801f8603de706cdd1f523dc8dfa8cb3265a7f0dc36f187e45dfb390e85efd32150621b9c45038c869ed39b624524d918085da7b646023e52202b9c933700484b0afd0738056ce1e6297fa2b599f08e07fa9676db9148ed98189de5ece93fa27b00936c965b40c"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8ed}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x5}]]}, 0xb0}, 0x1, 0x0, 0x0, 0x20004010}, 0xc0) 1.265117511s ago: executing program 4 (id=6654): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084"], 0x0, 0x26}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0020000000000000000000000093c356696cf7afea00000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x28, &(0x7f0000000540)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4b70}}, @ldst={0x0, 0x1, 0x4, 0x8, 0x8, 0xffffffffffffffe0, 0x4}, @alu={0x0, 0x0, 0x9, 0x2, 0x2, 0xfffffffffffffffe, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @generic={0x40, 0x2, 0x0, 0x6, 0x1000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}], &(0x7f0000000680)='GPL\x00', 0x1, 0xa7, &(0x7f00000006c0)=""/167, 0x40f00, 0x8f07d481d198d3d8, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xa, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000940)=[r4], &(0x7f0000000980)=[{0x0, 0x5, 0xa, 0x1}], 0x10, 0xab}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) socket$unix(0x1, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000001880)=""/4105, 0x1009}}, 0x10) 1.215065234s ago: executing program 1 (id=6655): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000100)=0xd, 0x4) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x400, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 1.213962587s ago: executing program 2 (id=6656): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, 0x0, 0x44004) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r1, 0x0) (async) write(r1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001ce2ffff1b000000"], 0x0, 0x36}, 0x28) r2 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') 1.213292746s ago: executing program 0 (id=6657): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000003800018006000100e2fffff7"], 0x4c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 1.167008015s ago: executing program 1 (id=6658): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x8, 0xfff2, 0x0, 0x4, 0x6e, 0x0, 0x2, 0xffffffff}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) ioctl$int_out(r3, 0x0, &(0x7f0000000300)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000340)={r1, 0xd, 0x2, 0x1}) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000380), 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000700)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000880}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x290, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xd}, {0x6, 0x16, 0xfff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x4f60}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x19c000}, {0x6, 0x16, 0x1c8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf801}, {0x8, 0xb, 0x3501}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd17}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x637}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x784}, {0x8, 0xb, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8c}, {0x6, 0x16, 0x162}, {0x5}, {0x6, 0x11, 0xc}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6, 0x16, 0xff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfff8}, {0x8, 0xb, 0x7}}]}, 0x290}, 0x1, 0x0, 0x0, 0x5}, 0x4014) setsockopt$MRT6_TABLE(r4, 0x29, 0xcf, &(0x7f0000000740)=0xffffffff, 0x4) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x8841}, 0x8004) sendto$inet6(r4, &(0x7f0000000880)="e8183bb21a9825d1aa744ce3bbb2b4ab5cab678ca7a3503f9a1065d3651267882313974d5c5de4d3c7dd8ec7cd5d03d470307391916cabb3c762c9f5a73a5eee7fbd024b651f1d16eb4c80e9a00ae1f7e2bd5cf242ba785f2170cd7fb6dd477fb8c7d0eb37d2a9c9adc610092201a3fda49054408c2072dc01cd07d95d1a59eff31f51830a9c84559264a39d5f1760e9e632c0ac0e35d735db62d75e43fbaae9c9884e5e5c48e7cde315aa9d98789a4bdf04a5cf5741d5512add1cdbac86f4ce2f47434381a59a75bd1d62214b47c1bb549828504b60f38f30f9591c4a62600e2db41d7fe59b9bb42a033d9322dab804d3f4c061d6602cb04ddffc43b4a207a2497aeab0b308b21ed5beff74b24546cc79c2355c902862c7a16409017f465c383302a98173cc66c22100548ba211adb76ac9078ac346df8d966f81fb169b455eedb2638cf363c4857d418ddb217853a8e05bedd5ec4d7abbf7eb7c0dcb160b9519da6823c6ac9c6f93387e83afc5444a0bca2590a7a8f5d80b6ad7d58fef889767e0d6a11272f32af68ff6e3555ca20664b220386e6109ed8def964a356d68f5d600dbf048126bd80f60da7256267465d9a610fd39a9690776a9071dba42a42619b270ecd57a4fdecf358ab62371105754cab760dca80dd57a5e18390bb110c706bde72b2c8ec65b366a0eb3a4136574f653dcfc35235ddd7fa78d779b33986636ba4f820219b3a13b94450cbe7a8c25c726fc967aef359a1e5d6077cfa870d995b552e7cb9881fcfb7a70e534a3482b527dc5802968870ea4d04ca34569a6dafe879689b8b5d456911765d8a5caf1b072d43110c16b7d7487b66268341bee3cc01c0e086d111f252f43ce38c080c16741816610c716ec367ff90ce496164e675da31881ee8c7bbcb69932a53392c3f8c8da72680dbe25bb8dbf849d1db34b21c367fd85588b78f53a0dd9375416644ab332f21dabc1718c49dcdf91509ea62d2caa9247cfe27317cd86b22a1e5d4048b76df2fd0c475750acd70ee7d17c610477a54ec2fc61fda03a1efb78506b9bf7f9c769f56104c4a1be0ec851ae4efd2efc45b138451cf040f2294525f0367e786bdc8aa7c3d76add7e576ff292b248bc6d0b6a7e3b1464f3b8817eabbf9064c571bd069d47bf28b2f55596bb4795b276df6ffcaa1bc51db211e2636f7efd6e79cfbee86deae56522368d5a197bac6d3a2b5d84e51873895332862b14ad7ae868fef6789e31d0d9c18939444d7e1cb9f569eb03d9dc2dd80d37d485aef544cdb831652ddcc8cd19122b3894484179f1b1ab2b6766cbd243a2fc1a9ba616715b2c7db13cead3d3466fe0b71aa44d5fab7e241c55b8ca473004c4c7608f5695e8b1f8513b3aefc5ba7e81a55c4119a6f5a7298d0e056f00724ddfa2ba63437382c5b697debc23064e8a90d06830e5b86171f7d5b7b207ccdcd30299811f7723b4d6d50c42eae2ae2467eafa46ff68945c982adcc85f2113b63912080d9363a3099c86246b472649eadf51d1ba8a5ccf586b8259e9332c0d1a5e1c04083acfac09a8c9bb6b31cd79a29c5a9e5affa21664a4331e40ea869e86a1b77c99189408d2346127f3ffd44e0ea8b092fefabd1e547d1e50dd4337b3ccd53bf91e79f1c7480b722f6b2d42643b7ddd8377ca189c1fcc40c8efe5919c24aa299110391332296385dc3b28d14946ca595e83cfc205ad1c488cb9aafcf2f876b3aeefdb240fc7edff8b2c1dcfb67eaffed0acf7a5a5fd455411d329c66b827118b34b8fd4dd9ebd829bf51cc395bbff0c643fd8178f95462db41d36489cfb89986907bc474a0315a4eaf36373795925b0e12bd1bd1d51e080675412cd55c6f2ed9c25655da9dc14061dd9d4a77963631121efde0fc4a88041d4e767a823ea24fd4c490af5f7c75132ec4e4b38f1afd96ce555b789ccdb06ed7bf4b14ebeba94c59fc44a36218fd080bec604c2f07b05f8276e2ccbdcc43f40cba52f133841c6292f3dbd8b22e3c63a25ee25025f65c22ad2b5650fa33d287a6ed987f25f164d5f40f3f5c88615ee8a2835dacbf7bf5a3883ab8ce6806c55c00ac2549b5a9c78518573304aab6dac13c02beb7bd6b381aff8fc6ef7dd0430d80365084aa7c3b684837fa13b735d2eab81ed9cf7e07eaea9acfc8c08c58e4ae8e901c1ee0738b81aa70b564a72bb12f86a9ef0098f0bdb40b20d551cf3c82731faa3bdaba47d1eed11718266a5cf4932bca244d888d447984ade3e0c525006a1152348d519c64305cc843352928a5e1820910a6ef7ae7af4657d2ec35769be27ea9e561714c4b172ed04cdda3da3b0123066d6607325a48f0c9f2ddf93b9baac491de717782a8e0d06bad2cfd5794b64ab12cb79fd179397e3b99a8de38d661f24581b331dbd81c6320d8411184c07e3e6a0a70194fc70ecba40950c2d2b490dcb12bb78519876d6d19c3f94b8b5cd7cb40996a3a9034d0a4f80304f9f288cfcf104629e47abef7bcd71ed353fe976604430a76c8624a13afb4d983d5a3f9ef69a677e391b8ba740bae60fbe322914262411d20b34d291179d77ce5bf78f039fb2149be20205bf8a308d3264e3e0c8b35d1772742a537bee9908162764eb235b06e568b05af9ecfbe3d9b31cab0fd3a19731e7dd9019d3a845a49bc2e8d8b8133556d9a7698046e3fc22c578c66c0da91a4d12cf713a75939ebfc1eb2b1e24186743342c26651340b472fdd6bca7bfd8851dc5607bdc3bb0fde5c9977756bb204b13bbef632215dfe0eeaf925435c0526d6f900ce2f62a661cea9651ec1e3a83d897ef65bb29c210b10576b79bfdac07d3cfd5acf456919d45fd671c59f8f59922e41dcfe5702c7c480c0c52336563b1eb1707c1030ad5c131328091736763e539cc220783d384e22df1161e5349cac62b743376f876c32beb46cd8f2a87ea1ee879ad2da7ad23178acec179c9a3a3c4ca9d8f719683b5b7869e85106914b9cb1865611937e0d7fe6e3b448a859296a548a2dc492e08a399f86fe279abf5f8bca35920ee1549337ab39bee0e7dfbd022b2266068b245c1f9f1513eb841ee9d074cd7f9b64d8f288604202667ba7550e0baab1bbc016efd5d1ff37e4f27c248d4fbcef2df27bee1073530385b21d66edbb15681b29dde167a5d0fb106fb135caaf1c486a5d19369176be9c4d4f49d316aeaaef7628b5fb9ceb0dee4097056a9f525bbe74ed68264975717cd3c95a55ca0acee5d1ae778081035e29aefe09984870a064a257e85d108ceb64499dd7a4b4986e1cdb703f4c03f22c3fd434a9c5695d9e7ec850e6e4d95c72bdb8645f8049f287f1c5731f4b77297bb1e60a155a094c82c3bd71c85ff832974d4c5f9e074fdfbbfd2e73ed91ad34c06799fc92389300dc7dbf8d4d5485d80082e14a2bf1c1cce766455c0a760d1f182f7e69e819a82364d09636e72d0f18724b6229809a1fa1ebe4b230ac87ec28f1b478a52ded057c5235c75b5ee6ae037d20f295ffa64df06e3ab83f8fa6627acd1f32034d9eaa4328afdeb33e4c2139d2288787209bc76f80393f8e0472607d72cd5f0f218b598ae1edb1ec79ea06d41aeb4a0b0302e2f13ea1c632a1233617d21ae459250c5a7b367ddc03cfc58e8fee574ee25a0ecf2f69b132c1ca9ebedf2650731b718fe23e0754689e0c5057144997a9940f7a42965ae93e0dca00c92922f47357e3a922683454e01c75d71007fa30d51c505078babd0ed3fe2f24730b6aa06472d5cc5aeca1ec755bbc3bb48c46225cce893e9b5a4403ed46e980034a44e98599c8dde04957ca40c02e4beeba0b3fbc08a41456420c6be9fe6232957900c35203652d4b96080d88303e2c7ecfdd3a5cc1de98319faa26d8a7e59886250194bba1e58b6073826d2c1cd2c751ac39bdf701b05fb9cca92f2af31f4ddb365dbdac9661010084ef1bae08708cd2b28fd948f6543f86f44c9dadc8cc5fcc061bffddb62f9052afd06c943210c196892b57cd01b012c76fd341a7b9e5377b6f8b0eb7001824addb67d40e4c085c057d7b739fccee983e8d2d8d7d2e99994b54f28a2ebefeaecc9e44cfc6a63403864aa5f6cdcdadbda3f14e05f357acf6ea7e21993edeb4a8c1192f5f56cc4b3fa16e6fa43e4c278a64c8f98d5cb497b02de0bc2a66f693e29c39c91c54d43bc2dc85f7fd4dd52a02c0684b2d3d501ba5756a6be139d162ad60e905c9edb25e6a653cb64d22e00ab50d0793267165d1eb514f376726ff0a61991e1d69b4260c7b6086b7e2eee7a3a74857e9d7b93692dfd669cba817ef2b58832ead3f5612201e665d81bfe73d2080a2fc79a15c4a905ca5c466f87e66d369abe93a03f90caf7a5349370e95dd5c6d90c0da88ac23e8833c63985d6b1aa05a55e00fa204d5f606614d980295e79bef943e14a75202be68d9883aca72c1483823106adf69f708a07d56404c9531c1d1900b400af277c96a2b58558a4fe2d9f828ea6f2a19c31d2b86d8c5708b98ed73c82aca5221115b0a1ed7bee2cfbfcc09c86c1d621b6904eec4677855ce7670e678e723071a1ed4f4ec0f7a6b45317e4c6af4bd2b49b3372bad6fab40fd9a21db682de7e9b80cd6c165cfdd2acff8bc6591aee418823da18667a7718435b03da5bbed21faa0ada61fb5a5703d8ca7c593f0a0123a97e7728199d1a987b0cbf381aa8f9a873dc844b5876720d3b34c5a7c16bb0a01e19a671f2c830eb3ca4d0f14f9561002bbee95359f64dde2b08b58cce1232df6a57eeb3a3f76119f6f1b7a6a270f1f3aa51423d14cbf0b34a906e8ac748359b2bfd29f911b595183c0c6f0df3c7fae08a83646d4a689561df2b4c214716077d43d13395fe346b0229c0005a1580c3c16d40f0a988b11e77c70a3bd9b4f2ffed8ae297d60879a4b5eafae47fa86f5f99a80a5025043c6f1a714bd253d84cdb6f9ad5e225b3f91f63838f2ef223db90ab082e6ba1199df08ea2fa232e2e4877d4eb6034c882fc5741b66e773112e8b2c40cd19edcf7713d1d88ad992c9df84f976cedc608295bda2be12a6ba85fc3bcd5f9aa39ce7ebf5b2e3591369646ab04978499c22b9f24da443c3ce016783b9d17b67b375c85e63fa35b2c4be983316bfc428b859f5cc5757ccda5422a124dafae72d485ec1a3fb2e297e8a73fd88c44e755cc5328a2ede7ee271d9879ba8ee24b60d403f45658251dffaa430acc86673a71557a0aa1ddd97ebfb5f2252d55bf9140815a665b37ba41b3d3c6a6b8167ae30fcda157bd613147d640c8341c963d740eb6c9256e8c264be1ff7e67b0ae1d5538189457fa6840386d8d69eb548c4c8b96166b84db3852c462b12eb080cacd32483a01230fa5f4f94730d15fb1dbee9ae50111d5b5feea833cb22e14b8d4bed47b9c208b236ff79905efbb01ba0f29c1395a3d15c821028f7ff80e3158ab9671702d1cf3a579746b07d8aeed182529a0175105d9879cf68643c7023930677c263a91949dd7fcfe83fe5e07a7a8555015061dec81fab3c94d4749ff82341370582deafc9e8a34d72dee5720c1e8d235b8c4d918ab9f14fa2323edc45ae46a2e01640745f5bc864362c2cf9c929f2d8693f85aa8d401efbc04867442c03860342ae92e35fd5ebc50b0326a796816aa0a2535520bb623ad157bd744cb8f7c5231687237afdadb04a46258510c712eab8fa7d99d86dfc090ca2064baaeb1025b0a905cc9ac6ab9463a7b85630b4431438c3b7239e38ad52d1dbb0383098652b0c8787c7dd7194e5ab3d57e2132d684176d67decbc125c7938968e5d743934d", 0x1000, 0x0, &(0x7f0000001880)={0xa, 0x4e23, 0x7eb, @mcast1, 0x2}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000018c0)={0x21, @dev={0xac, 0x14, 0x14, 0x27}, 0x4e21, 0x2, 'lc\x00', 0x2, 0x0, 0x63}, 0x2c) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000001900)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000019c0)={0x0}, &(0x7f0000001a00)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0}, &(0x7f0000001a80)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0xc) sendmsg$nl_generic(r5, &(0x7f0000001dc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001b40)={0x240, 0x40, 0x20, 0x70bd2d, 0x25dfdbfd, {0x16}, [@nested={0x14, 0x22, 0x0, 0x1, [@typed={0xe, 0xe0, 0x0, 0x0, @str='netdevsim\x00'}]}, @nested={0xbb, 0xbf, 0x0, 0x1, [@typed={0x8, 0xe5, 0x0, 0x0, @u32}, @typed={0x8, 0x32, 0x0, 0x0, @pid=r6}, @generic="091390a0eb0675f3fcccb7261c8f25d72e45a246a574a695d4fc88e385a16da67f7323bc8d07ccf7f54fc398209a2115da02a05b2960ade8374d5e6bfdda1ba0d8a0ffdedb848f4e47378bb8b9242adf161221cf87c0621a5f23cfb1e9e1b7a625186491fb06ad1f77ec9946b4c9b9261740e1ed38df645ea386e44b0add635996205a5ef4d3516ae56e13058d958d810a57608c54c6009cfe623c", @nested={0x4, 0x29}, @typed={0x8, 0xcf, 0x0, 0x0, @u32=0x3}]}, @generic="3d91fa0da583143e8e3fba9a9224291355390a3319c39d2ebf2b5dcaa2f04d610199826ae88c7663e472a92efb077f29de5ba528a8167a9e95ff1817183d3bec", @nested={0x119, 0x65, 0x0, 0x1, [@typed={0x8, 0xdf, 0x0, 0x0, @uid=r7}, @nested={0x4, 0x144}, @typed={0x8, 0xda, 0x0, 0x0, @pid=r8}, @generic="bb2ad40bf94093d151bede68829da75cee2c70293b95e03b92fa54c956489572e73d2b24856f92f6bb80e7dc348d50429731f0d6be65830b8eb8f134627b02346556eaf5fce9b795ec4b499586ab8ecd24df366a3272f657f8775f17d09aa096e59e484fe262afc0883b545961d125fd0b22dcca960c3b66c50892c651e743a34a756c8be522fdb42c22077f8ee265dc3dc203931cd48ec22f9a60257233de9dfd4d46e4b515f2f12bc8f2073148485c55aac11f8204495f9e6d24004de3ea459496f29f64dbbe93031ba87b00c5c3e368c26dbeea3f1bbdf6", @nested={0x4, 0x15d}, @nested={0x4, 0xf4}, @nested={0x4, 0x126}, @typed={0x8, 0xf9, 0x0, 0x0, @u32=0x9}, @typed={0x11, 0x138, 0x0, 0x0, @str='0000:00:10.0\x00'}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x40000}, 0x100) r9 = socket$igmp6(0xa, 0x3, 0x2) ioctl$XFS_IOC_GET_RESBLKS(r9, 0x80105873, &(0x7f0000001e00)) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_P2P_DEVICE(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, r2, 0x100, 0x1, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24040000) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001fc0), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x24, r11, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$kcm(r4, &(0x7f0000003340)={&(0x7f00000020c0)=@llc={0x1a, 0x30d, 0x0, 0xd0, 0x1, 0x6}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002140)="b6f2e162f9a83fe2dedc10ce074f2baf181c82adff0d870a66c2afcd5e1ca28dad8765147b73b78964e9a6f627", 0x2d}, {&(0x7f0000002180)="8ef8951c42ab24ab64ca8097d0cf1922b2003e7b3c4576eb2bdfe4b9e89e662995e5f4b711c736489bdc119b7234483c8a10cb685e7b100d6ec6908f1f88f783129e9cc5fbe69fd84d603a773915f9311f9d9dfc3e38288a842ec05bc0c5ff28dba8479a3515ceb5f4323c901a16a1df7b6c9a14e8beb0fcd5b57904bd0725e0d4438b57bc46f32fbeafc69684b2c78f66518084c3ac0c275efd8219dc3db8dfb076af10dbf07719cf157bf6d9dc9657798b1b523653060a9a31a28e61fa", 0xbe}, {&(0x7f0000002240)="68fa05b2c778aa84182afc6df84c075aa8c18aea062940e8b1387dd10bbd11583446e950347d650280466de5e2d018ec78a6f9886d9be0d653c1e59f44eb72f78a4bda9471aab3516e7f4ac25a8c9b2370b1e8bcc3a96e13b7ad73f22153bfbf836a373109957940cf1327ec5724b15a840698bd7e879c093ccb05036a01940fa43875c99f4a87cd27c2062a6f84f85caef96bb519f927c2b34034d2f544eee1e1", 0xa1}, {&(0x7f0000002300)="ae61d308e82c69c5ffa34f30476f7949d321dea3b06f06a7e3ab5ab36c6cfd535b8ce0a7c68bb21ade6b03f35ee91894c36e565e130b11f8a996fe675afdf25a66ec989c4351bc32e31bacfa29a54550ad80cd189d2cfe7ce4c940c2f213b490fe491e8652a9c5fe2bdb3f692f3239c7993dcb1c70dbbd41f8153ee870476c492e7ae12e6b9cd7d1d4fea0bd4d66bb60a340af7835ec6418fd409d3df13365eab2d3c04881613d65bb00b92a42d6c6de29af28f320cbf93be6b6aeca2c523130876f25960178eb07b14e09b1a1e663df71ec7355509e1b7717073ccedc3205a54489ed5fb9092921a5f7ae1c74b8b4e98028af71741ee9a2492d13f0f1cb3b16dac45df2424a1003eb17f7ee1f5c25f386998db2eda215082c28383424ff8040801bbcbbb54ce23bef20356b7ed5ca796369faa73756aa3a11617ea28f23e5ff349cbcb6998a4427f1dbb59b04563b2b82f071c65c9f1182320cf65442c3db5a1f6374ff552d47141ec345ad5c06fc7241fb1ed3ff5666cd240bb082f586ee7fbbc8fc7ae207607008877b9068f50a185655d9dfb18479148ab4ae176d5d41acd8bd10c4f42cc541ae55b92959436ab8f1bd6ef2eb0fc23753c5a2222448898d57d434411d1c39f188ed10568cb63d3759c757d7cf7f49f7c4c3a73df88b36975dd6eef39cbe83fd4730f4b575d6bb7240256041219fa96d0d18ee39684f4c2594347a1df1bfe0432fe55184a2da87ffbf48d815a0b53d3156aad77a59578e2e89ffda5dc6158e6d2cdd83bd3bbcbcffc71c25f886ba4f4c3c842fdaa3f49e6ac3eb3621693e8019bf0abe2c9bfad9fef85c5e6ff7cd5c396bdfbc9683b367ea8c56f959f3c6651026813c3dc4bb0dae7cfe06256e5bd42bbf7877b1195a5a58fe21a2e55fb171443828ff0e6c0e1bb2ee11271085f4ff0a0607eed68d5b507005eef21d306eb75c3037afd8bdb2aeef2ca5d5adf1f2a8a90aef18ab3c0dd468021043c09bb10ded13922ed2555d1022cb22f0a51ddb5d3106c6d6819ef9006bb23bf6c373a6511ef56481f5a3b4ecdad80c4e24e001d6813ee56de5e8dac06d45016ee1a25e04646ec742310f2e2d76d5bd279ae9eafac7faddb07dd6d30b0f6ee4dfda8e8cbdee805f5c7861bc36ff1bfc552bfbe18ca67469ac5fef40620089b57cdf02b0dcf543eba1a39258de1f93725dab4052e1c947d2fbaff8d611b3c3564ea1ba07d1475163cedcf3a8a7ed841a08e6fc08cf91395fb6603d45fc8dc939b9bb725096c44bf5e4f587e4d3bec1f8c9da3b0aeb82a6b6ca8e32510d504eaac8c09aca1bf1e5bca2f32dc986d36177b54fbc41f1e968278cf19b980cce52a1a42adb3807c66d509c75b2397f156421e44216017f32f8c415245943ddcbebc89dd3ac7e4c66b982563f76a81256c18c1aa747ecbbdcd3a47cee53e561c497e8d14350a64285d7f70ec7295293b22bb3f359f06496582911e9667998bc854a0aff45b722dc82b50b343c34140b64d7c6bbae59d78381b2289d5504985494d509f0f2e97edfd4d6691f2136abb3a326eaf79d7eab1ee90d32240af2df7d73530d904e6a209610af98569e8a7fd5d1fb9b6cef57f83928f229dd273381d730ed5e77cefb8a75fc6fbc1cf11df945c4aaef324075c19cd3497acf88ea254e97a9f81a3218bb24aa8d64e366890b4f06acad1ac08ef70486d1a25226a794b313295ad1a9152152176aa56550ada94789cd59c71286af63c73fe401b5d00c917e37070643f38846b75af7d2823375f6cbdd12d823c7ac88536da859e49ac7181745b3a94a15fe49ec13827c39a102d58e696d95c235f9504d74efa34bd4fdbb95c26e738e0bfe52a9eb58e33ec48aba88a73aaf1d211554e3498b8cd235347fbe9fcd8a2f55abf678e6331e4109f0722ca1242ed1f3bfff1db9444e07fbf719f9a494cb99fb83108db04f633338205553307ba8793964e891ed5f162d71958f44b5da75fa7b14e6ba884fa23fe46a80f22d428972b08830ea661b1c0c3280face7a26ce34f052b6e0beeb1e62e0c945e20906a35a85f9856c7d8814db3c9bbf135dfb4ed4c75f3f55ea9f7e45cf4e82372d3241cdb1e5b38c762006a295a93711c2861439631c74afbd23da8899a3ca537700e1414edf0bed6e258605d340c54475a6d372ede29d6e0f109c86ad219a798ffa02668c07e8b2139f7318d1aed1282f0d9770fb3dc0bd9d10655685541220b6a6b18a908a314b6d017d3d82a256a650450d5c9b6d7c0e659fcb037a478b404aba75d11c1188c91c622271266bb40a1573677e773645d715c80b775a8fa944ad97eebcfe91db399e9ab6ddcbf5a59f5d30c0609c16e69d9c229b4a417dfa660b7189cfd1fe9599e325a4a6d739ff56fc1e3572f18f5c0754853d52b7e52320b971c34ddf0e3bc312e2f511415d3c98ef9a550d7b1c0a3505d4269f5b126cbaaec9eba5cc0188317ec7c7b1c7a67f6f95a4013d5727e122499312249bdb6ee200f4c68afb00f0be2a8cabc5aee83a744b9233fafd728a9851528b1011234772f28f66616af2696e106236431a6034c3d460a31887de1e525878f020c118379e81f6201e205f05ffa29fc6356317d34a27bde9a513d7428b434083b0b2796d34b92868d40824c1eab6bf8466ca935fd0f3f3048bd065fd9c4b989bc373fcf91d78ab359d78c784b9c6b814e07516246bb32126f9bb503bc79282d97a67867d4dda0d4de175f0f9302929f5d17ec13b9a3395a1df7ac8777ccd0166ae964a66a07a2aef2932f0ac164ca28d3949d0dfc8b4840abfd0f09bec1376162e3297b16c1498148e7163adf8941b029834ea57229523c366bab3bb10812007ac1c4799acb21f17b1c68812473e65a044a495aae808cf28b7ddb2e1aea948ef8c8ef3ca447befedb9f483de0721662dc7abd036a56d40642ec1a947530d8ea805929d9761f5162e55fd3b6a95735e1a86caf92af9259630833b950ec2237d285fd92d6a4a4b09ff38841ec4b1b0c94657f177bee3db8c9b56b7a592d0fa53453187650deecaf6599092b818103cbfb06d724524282b101c31da388522ca2c0f99348837db1264acb684ec9ba9c80fbf5c1cbe2dce93e769e84ff1fe5fcff42d701809018554a967bdf0029293deef728d194b557b13e1a9665f77c7c1de581ae8c8f3158c5fa3410951ac293a87c953e223d8360e9dd4f8b0a558014a1a306543152f5063941ff395654f4d9e3625c7dee51b9d96cbe7910840229066cd7bb8572ac8b66359cc1c08c61876f3919e5a31eaca8cbadfd0fc68d5feb8e3db480589da188be56e59e6313049dbc61bd5406fac110c2d06f654857dde5db3288582b66139db2aedec212b842b53384fcf42d74814a2b6dd7e03fcaa0fb616033bda577a38eab07342ee05482113a23331966091bb28e24f6e0ee16fb10b70882ce07286a9e3a51f4b2e3d90df3827c2906172b007d25e98fc09bf8ec777deea4bbf71d58af2e6f7fbbc710c11dcb51e535af80377daf57959343823ed9ede2c79b3e68a1268cd27497e222ee4318e7af33890feed5ec8ad869dfc5a8c73bcbc6044bb69a125111beab66ea09e882a730f01e40551c984f935fe6d5edccb1aa09dd35d294bbc17c1bb10c4f9ec38dc095ab5022809916be7648cecf86205896aa7cc8cc89b37a052f35f6ecc83f64dffdee13973323a200932c0a0e4ec5a5ce722825db746bebf4c1da71a0e8f269c19c9ca274b0b21e4f916a3fedd65dafc813e5bd1ca12591ea5ca38f8808916d87c31038627b1de57f1d770b0af90742131db3628fd291c1ef97dc40b1dda467fcea3b3aa6cb0a3083b4fcf69d29ea15ba5eaf03aa01b521d6797348edd527828a830a2b0e9936dcd73925274169fe1d6086385e15d1166a5ecd3e9c7f13bfdda9ddde6252bae3b93dd437a595ab307fcbb898c6d1835c8702c5a3d21e8f5363bcc7cbd60799670b9f985d306609ffd581fa07f19ee07d61e2d60f2ee70f070aa0a122aeca87ec7d0f96b22703bc1ae173423427df53d96f10e286edd98229c8c52be8af064ffa9d4754ba304c7cecd117d6521f769c495cf40fcc725f0318b9081ae01677854dc89a7de25e83c9ff6f318d220f4f0026f7bb1161f691654596b9adb6f459b57cc38efa2330df6396cf22081bade9eb2964cb1d708a1fa8a5690f7714ae33a0a5722154d0341ea7b8e6f04515914e447da91f45c7b539425d7f12be8c1384f42d22f9c6b94de9d93687b6483871de9d344e00f61989a952a4115079fc4179c86f4b613fab55978fcab86077d506dcf0f535bdf0b800a3992dbc98c1cfc3d74eb94616c3619cbe860d420868bed93eb6c7c67b4b6f6e0173c541cac7a988391c8fc5077629815db0fce9c24bdf9b5fe114cee19788d50556d4f280b6db4416a54064477ab25c86a0bdf59ed9679f3928a10c5be2bba44a34ff841207e49274833488e043e6a2602bc4c2b2d550c2ab3356c9d45b8a21fd4757bff4dcdd449fe816d56e03d0218cb1cddc313676737e0d3f71f2b4e10ff91ed866cd001bb2d10d9d3a07f7178ed8d55e73eb279cf0129f8c9a440bd6812d11017a738ce79a520052cd4a8985b59b96e21582f87b98c4ba86177f9d4631567b46ce4ac6809afcec72b35b88012472a0a4b72f03ec8c241b9a4ed33d706d233be7b7a29ba28bc1d73178fabae7552a9dbee80b47d579c58c708fcf9a0c5f61d60897d50293cd7275839eff9072a0d7ff9125d80325bf695f76de92360298951d9ea6b7a0be324633aa52a3194d1e7035d690bb297dacc7733c5339eb4cc0ebda047abd5aaf7f3890243094a92321ae3a1a818e1a098382e1f5176eff72cda167266563e5841b5a97a0565086728dee0838db023904aca8794727b7f4e1a9b3a68a830819d58cb368aa76d6bcf53d7cd5efe04d1f2f824f1a5a8139c4797681f18e569ecb4e047560582718366a5a5b1c703307a59c36aa78f81ddeac70272ad12d9bc339ecc55e418e050192ce25a4ed4a78c666646a8626514dc0cc0210dd2819a42e43b2102cc98dcb93b3719f04dc12e80cc82cf0c04f7040cec2602097780cc1a6976b6a6df2af6a4678e7f638a86dced00d74626aa6b38495192a1c037c00e1afd4449f87c89ae81e3d8baa286fd5ff2e9ca78b333b7958435b29f0a7adf27f627aed54eb70c953269b780b56e92c0cd37c33ee25f0669f8bf4172495738bd55927a2329012a6fc8d9880d08eae40f8a14370d40c7f5691fde95b77e4c30ac981dd7d1b51f8dd8ea27a51684a71ac196c7fb91ea55475066992613f727c6a01f821b1941573a34ad52066d99246b4413bef9df947dc2a3c72925857a1a2cc751fd4ea3c1ec14e6611aeddfcd8e8ad6ed249bd6ad28db380c9e2a2c7347d540778e219456823505944e84aeaf62b9bf4dbcb33d4afb963d1c77a349ea016469664e4627ef1230ccaca5477fbc7799d9fba12303024e40a2f079cba3e717f66b88560a8615eed6a1f0c964daccca8333fe59c6068ab22176e159eaaaed60027889ac118795264b474033ab0448e56960dc737f4b2e16c0088ed32fad9d16f81010f7749a653a99f663ffea4ef1436a963d87ee70b8216f14932903125ee1d5508a95f75c717b6c1f9ab3af7dbbdbb53b5e30f8a449e8e4c0779ef4b3d425eec59641beef1aec98509bf8cb40f798cfde81bf1b534760a9b123a47ee1830c8bc2826c00ae880e8228ab2e520465fda8ddeae148192a555f8f66af35891a3537bb588b7c660d38d049a4", 0x1000}], 0x4}, 0x20004014) socket$nl_route(0x10, 0x3, 0x0) 1.092237835s ago: executing program 1 (id=6659): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') 1.001292823s ago: executing program 3 (id=6660): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x80}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x184, r2, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x60, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xff}]}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x80, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff09}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x8f0db96ae339482c}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1fffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x74, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffd}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xb6f1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000440)={0x5, 0x3, 0x6, 0x7}, 0x10) (async) r3 = socket$kcm(0x29, 0x7, 0x0) close(r3) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x88280, 0x0) ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f00000004c0)=""/51) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x14, 0x800) sendto$packet(r5, &(0x7f0000000580)="b45a36ae8c62e18b469c139fbd04b594d1048cac4871542f9bbb91a46fa44c358a23c85dcb3a56840f5c3b3d232055b6e93c84e231db20785a4235059febac53ad1b5d7c1d474ed1435746cac4cdf7b7575e3d2f1fd3b9b163aa8ea05f8ea2faba907c3b27e16640804da173e407fac017b0da2a5b7350b1d041c162d3c8dc11f73ac8c167d44018cff69da177fe7828b11ddf64e0753c88fc", 0x99, 0x20000000, 0x0, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r0, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x48040) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000800)=0x0, &(0x7f0000000840)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1400}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000880)=@setlink={0x60c, 0x13, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x10, 0x40}, [@IFLA_VFINFO_LIST={0x214, 0x16, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @random="dff47e1316a6"}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x3}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x0, 0xffffffffffffffff}}, @IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0x20a, 0x1, 0x88a8}}, {0x14, 0x1, {0x0, 0x153, 0xfffffff1}}]}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x8, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x3}}]}, {0xb0, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x9}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xda5, 0x4b0}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x10001, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1, 0xc}}, @IFLA_VF_TRUST={0xc, 0x9, {0x10000, 0x71}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x1ed}}, @IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0xb, 0xd12, 0x3, 0xccfc}}, {0x14, 0x1, {0x7f, 0xe19, 0x6, 0x88a8}}, {0x14, 0x1, {0x7, 0xc23, 0x7, 0x9a8}}]}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x4000000, 0x883, 0x2, 0x88a8}}]}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0xd}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x9, 0x7fff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x7}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x2}}, @IFLA_VF_TRUST={0xc, 0x9, {0x2, 0x2}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x0, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0xf, 0x200, 0x200}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x8}}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfff, 0x2}}, @IFLA_VF_VLAN={0x10, 0x2, {0x3, 0x801, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2, 0xec1, 0x1}}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x58d8, 0x596, 0xff}}]}]}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}, @IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_TXQLEN={0x8, 0xd, 0x1d}, @IFLA_VF_PORTS={0x104, 0x18, 0x0, 0x1, [{0x94, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b4a8d3798a9873b64e69e18af4b1ea13"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1935c54be6e196c061713e1c33f7f0fd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f8daace4f0bb2ff657739fda9dea96de"}, @IFLA_PORT_PROFILE={0xa, 0x2, '*/:<-\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c7577a8e339942aef220cd51e88ea806"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffff0}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6913153edac590289ea82bebbb7e010b"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xfa}, @IFLA_PORT_VF={0x8, 0x1, 0x9f24}, @IFLA_PORT_VF={0x8, 0x1, 0xd5a7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "6939fa7d8381678bb51ca43cbff77669"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "77a7eb072498609f1a0f1d2629542439"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ef70aff7e90fe9bf2557dda5e5c6cec0"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xd, 0x2, 'nl802154\x00'}]}]}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}, @IFLA_VF_PORTS={0x2a0, 0x18, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d7f96eb6246089dfb60deb21fb9a8806"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "64324f40c5d6fa89d44220c08ffcd031"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e46c754089ad06441700a1908e22a0a6"}, @IFLA_PORT_VF={0x8, 0x1, 0xe1db}]}, {0x78, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "31d487c8d61278dfd5e92de10c999da8"}, @IFLA_PORT_PROFILE={0x9, 0x2, '/%^#\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c6df2901b84bedf0c23c27c3ac43699d"}, @IFLA_PORT_PROFILE={0x7, 0x2, '.^\x00'}, @IFLA_PORT_PROFILE={0x11, 0x2, '802.15.4 MAC\x00'}, @IFLA_PORT_PROFILE={0x6, 0x2, '!\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "1b8d53554dd10d21dd3ae2875c0770b3"}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x76}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "712a4a0d80e31b572e182d01dc61c1f9"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9fd8b0403dc49a7826911191f5a5a8fb"}]}, {0x50, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "6c1532fdbc5af6a3017704441ca39fcc"}, @IFLA_PORT_VF={0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "13735c2c0906816fffbb9bbbdf2113a1"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c1f44ad9e70cbead9bafbde1c126d633"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x10, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x9, 0x2, '[\xaa)p\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c7754da545cfd816d80e68e15f8b04bd"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "609c65d35d512eda7d63719e9a427af4"}, @IFLA_PORT_PROFILE={0x8, 0x2, '+*[\x00'}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x11, 0x2, '/dev/net/tun\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "34264de2f85bc10e7e107d4712723575"}, @IFLA_PORT_VF={0x8, 0x1, 0xd}, @IFLA_PORT_VF={0x8, 0x1, 0xf3}, @IFLA_PORT_PROFILE={0xb, 0x2, '.\'\xf5@)+\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "93039affb74b635447ff0f032fa6421d"}, @IFLA_PORT_PROFILE={0x6, 0x2, '*\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5125c00e0a41012c3da0c55a2e5a32c5"}, @IFLA_PORT_PROFILE={0x7, 0x2, '#)\x00'}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "47d2ce2e057bbd80c233b09dad5bfe75"}, @IFLA_PORT_PROFILE={0xd, 0x2, 'nl802154\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x59}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "053611cf2895ccf2d796a9ddcd550ee8"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x11, 0x2, '802.15.4 MAC\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "03c4ab457d3838eac667d84d06b188ca"}, @IFLA_PORT_PROFILE={0x7, 0x2, '/&\x00'}]}]}, @IFLA_PHYS_PORT_ID={0xe, 0x22, "c2704d118e3bc45e269b"}]}, 0x60c}}, 0x800) (async) r8 = accept4(r5, &(0x7f0000000f40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000fc0)=0x80, 0x80800) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001000)={0x0, 0xfffffffb}, &(0x7f0000001040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000001080)={r10, @in6={{0xa, 0x4e22, 0x8, @local, 0x9}}, 0x6, 0x40, 0x0, 0x3, 0x400}, &(0x7f0000001140)=0x98) (async) getpeername$packet(r9, &(0x7f0000001180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000011c0)=0x14) (async) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001200), 0xc2040, 0x0) write$rfkill(r11, &(0x7f0000001240)={0x9, 0x7, 0x0, 0x0, 0x1}, 0x8) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001280), r12) (async) ioctl$FS_IOC_GETFSSYSFSPATH(r4, 0x80811501, &(0x7f00000012c0)={0x80}) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000013c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r13, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x4c, r14, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001540)={0x68, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x48800) 1.000945601s ago: executing program 4 (id=6661): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r0], 0x32600) pread64(r0, &(0x7f0000000b40)=""/4096, 0x1000, 0x3) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x110}}, 0x0) preadv(r4, &(0x7f0000000140), 0x0, 0x4000008, 0x0) pread64(r4, &(0x7f0000000240)=""/5, 0x5, 0xcd32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xbc}, 0x1, 0x0, 0x0, 0x801}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080)={r7, r8/1000+60000}, 0x10) r9 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r9) 958.691374ms ago: executing program 2 (id=6662): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x41cc, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r1, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0715000008000000440012800c0001006d6163766c616e0034abbd8e087e34f1f9000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000a00cf9eaaaa05aaaaaa0000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000f40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000040)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) socket(0x10, 0x3, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000280)=0x41cc, 0x4) (async) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) (async) recvfrom(r1, 0x0, 0xffffffffffffffd1, 0x40012052, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0715000008000000440012800c0001006d6163766c616e0034abbd8e087e34f1f9000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000a00cf9eaaaa05aaaaaa0000080003"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000f40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) accept4(r3, 0x0, 0x0, 0x800) (async) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c61766500000000440005800500050000000000050020000100000005000800000000000600"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) 917.801401ms ago: executing program 1 (id=6663): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000089000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) accept4$llc(r0, 0x0, 0x0, 0x80000) 823.163501ms ago: executing program 4 (id=6664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x32, 0x112, 0x800, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 816.617909ms ago: executing program 1 (id=6665): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @var={0x5, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x4f]}}, 0x0, 0x3b}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x4e, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d00"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432"], 0x428}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002e000100000000000000f8e323670004001980043f8e2589f67942155b2f9d8acc6308ba4df9777e449f76acd89f9637ea9c2aed5a63b25695300e1563f655b38c13488f1663405299f308b8319d1a746cdd6e810dbfbc0758a0a765c36ff41bb4499c4bbcabb4e73975ad003f55e1fb9d0c145c9b7382ad8444d7a1a313a6a716b2ccf37955bb02c38c7b5fcb13228c9ce7242a3762239ccf0ea966638289618a4f6a7b46cdba034b4a53c88038f2e85bf79d273fe0c69e32e2fab15f8a82aa0078562eb0dab9b482d26723ea4aaef4d7c738bc9b9e3471375d08b69207f1c0bad13b0874f9"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 705.441947ms ago: executing program 2 (id=6666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x61}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0xba01}, 0x4000000) 335.009016ms ago: executing program 2 (id=6667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001100)={0x24, r1, 0x101, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}]}, 0x24}}, 0x8814) 333.515139ms ago: executing program 3 (id=6668): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000000)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800460500600067000004029078ac1ec9404d5e76a5e0bbadf01e079078e000000191707f69d564eddeffffffff082a3a13a02f27554a9a490b8f2d5366d2d9db250cbfea8cb7c529ff470da3758af9168169f2c5e06e3e526a4afa6c94175eceacdb29f6a921f5333ed50d4b4b74f52b93f33abfab0398a45025986c2c273b3ca0d2332780dec1b1f9d23393b64125d2e619ffaa5a53fc2315344d"], 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x1, 0x4) 333.131672ms ago: executing program 4 (id=6669): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst]}, 0x0}, 0x90) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={r4, 0x7, 0x8a, "221aefbc961fb4a2d3ec2a2974da667d413cd6c787df01258dbae70ac5488e92e7e77c68d2d8b8566101b78fcc984f00004a107940cda8deca1d95f0dda7658b8fab3b750292ca4ca218aa0bf9bacdcacb19d88ee008437cbeb3fbd549b114a3f90917b6f3fa97ef159f8513ee749643ea70566c92e4e982607f2bd4575de180ff05bfdf177c3649fad6"}, 0x92) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x1c, 0x1402, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x62, 'syz1\x00'}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) 297.456936ms ago: executing program 0 (id=6670): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 223.212625ms ago: executing program 3 (id=6671): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000008280)) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x14, r3, 0x1}, 0x14}}, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0xce20, @remote}, 0x2) 139.634192ms ago: executing program 2 (id=6672): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {0x19}]}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) syz_emit_ethernet(0xa6, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x70, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, [{0x0, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af2602"}, {0x0, 0x1, "00000500000000002600"}, {0x19}]}}}}}}, 0x0) (async) 94.60693ms ago: executing program 2 (id=6673): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000839600fadbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="08002600f316000005001801270000000800a100081000000500190108"], 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x40400c4) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x74, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "47afe01e24"}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "3beda21d0f"}]}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0xffff5257, 0x22e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0xffff}}) 0s ago: executing program 1 (id=6674): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e2a, 0xfffffffb, @local, 0x80009}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0xe325, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xb}, {0xffff, 0xffee}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000200)=0x2) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x20000000) unshare(0x1a040000) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r9, &(0x7f00000000c0), 0x0}, 0x20) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmsg$kcm(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000780)="5b34307b5d5ab4d0da618c917d17d72617b51de3b058db3741c1ad288ab3d41b6393e90e9c35c278107469c5069f9af1b6cce3add48acf544e1ea61e9706b8311fde34712a361da44539559336541173354d63a7443c34bf3956a7d39dfde18f0ef3f45b4a695e6663524020e87c5f94e4bb4fd9243eb345fc806b6a763acb8b0debff7f96696466798cc6d40471c26cf1cd03a40d72ba67c831a1ab417eeedf86904ac662460a2ee7f9830f6ff1e15957580ae75bbcb393ed98850dd00a952a931584869bc3da8f9054dfc58d7309c1d5024afd7c862d21ce", 0xd9}, {&(0x7f0000000880)="90045127107781b2802972e8d927a800a56c62861f6a44957e17a30de6f8e1a6c1fe3056d3cf94594169a8284764158bdbec8292978798", 0x37}], 0x2}, 0x40000000) recvmmsg$unix(r11, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000001040)=""/31, 0x56}, {&(0x7f0000001080)=""/215, 0xd7}], 0x2}}], 0x1, 0x200, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x3ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000004040)="c6e697672a51a487d9ca14399d5ce05b152021347f7ccfe2483ed507655b1fc5a06aab3212c77ae93b0f4527ef7ee9e71c076f95f9b4ba83bec4ad80221a984b62c2117b5c6d213d1effe432656b3e70ee5af415622653e662e7b2e9bd418fc421b2e6d8fbf811b4c8762b8ba36cc975359e51509922fad1874e65eb1b52193ad2eef042083d643422a160c01bb8b2d48ddd2b3966dda9a128670dab95f485c26f6e2b270a55d36160a5a8edbe7ab508b3a70b2191d7a095a84690332b5be7c2433742f7cd9004ae25cdd86c1161fe33fe10dddcfee377ef81575e73bddc4e3cfdcd8f3e7ac09aaa67c516bc9b13c2ae6dac55e706c8f307679db70075c2cf3ba93c752a4d33f4cfa748173b1e94a6fd7da62e0b4a2ebfe3c1cbfc9c2dae21b5b090c04f571213cf0daaf4b61c2ed5786b88573e3e9b30bcabef94e885929ce2e28cf6a0d6cc1956c3575afdeb1778420f414303dffeffaffa6f469eabfc94857e79e3202d1db3720531aece8ef062892ceab79b0a88dae86d86c72c84c8ee255834efb9b3223bbe0b3f02bdae3ccb6d8078d302fcaee1417cea925dd2ed205ab19668675a984888dd9e55d139a8d59988e5aac5237f42040b392a2d2ee2a1518779942fa5a26132a4f95070e5959b7bbd48b982de617d67835e0a06b9284130889fe6d8ff7c374891c8a9b4d2117d46a170726239388a053f5bbb81f41ad921450f27ec73555e6d4c79b009f69b42da0b998324546e8e0dc8477a3af20832e7a6341961bf53104f838c859ffd22bcbfc8a32aa428bff2d3dca79a09c6a7982e1d220a102d0174a20f28a3ab1c95ca633d4f87d23e29a6a96d558486d87a0ea8e3fb8b58aaa6a0ad629cfdfffcb0db381429adb503f3d81dca62857115f7b2adb7aa6daf0a550800000000000083b8c025d746872e2f91f32f701deb0040601df7c8105e0eb5a6abcb8dae7faa6f8f881212c86cf74c6fbda5bd34340b7b37c4ce99f858d6f0d8c92e519f74e98109e46cc3fed06d6aad8bc2bf4295a008e31f25be6cfcce0eb3d94db6a81e5faf", 0x2ee}], 0x1}}], 0x1, 0x200040c4) kernel console output (not intermixed with test programs): 72 bytes leftover after parsing attributes in process `syz.2.5199'. [ 558.819980][T24509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5199'. [ 558.892587][T24516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5200'. [ 559.114827][T24532] netlink: 'syz.3.5206': attribute type 1 has an invalid length. [ 559.211459][T24537] bond11: (slave geneve3): making interface the new active one [ 559.220353][T24537] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 559.234150][T14557] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.248593][T14557] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.258190][T14557] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.434277][T14557] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 559.551995][T24553] netlink: 'syz.2.5211': attribute type 18 has an invalid length. [ 559.607116][T24557] tunl0: entered promiscuous mode [ 559.624495][T24557] netlink: 'syz.4.5213': attribute type 3 has an invalid length. [ 559.632246][T24557] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5213'. [ 559.645785][T24555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5212'. [ 560.120109][T24591] syzkaller0: entered promiscuous mode [ 560.128050][T24591] syzkaller0: entered allmulticast mode [ 560.212298][T24596] netlink: 'syz.2.5227': attribute type 1 has an invalid length. [ 560.239903][T24597] netlink: 'syz.2.5227': attribute type 1 has an invalid length. [ 560.265581][T24596] bond7: entered promiscuous mode [ 560.270974][T24596] 8021q: adding VLAN 0 to HW filter on device bond7 [ 560.295310][T24596] bond7: (slave bridge8): making interface the new active one [ 560.303103][T24596] bridge8: entered promiscuous mode [ 560.311701][T24596] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 561.210733][T24657] sch_tbf: burst 0 is lower than device bridge68 mtu (1514) ! [ 561.557668][T24675] TC_ACT_REPEAT abuse ? [ 561.570832][T24680] netlink: 'syz.1.5247': attribute type 1 has an invalid length. [ 561.911139][T24705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 561.922015][T24706] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 562.169834][T24724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.183988][T24725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.188711][T24723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 562.385094][T24732] __nla_validate_parse: 16 callbacks suppressed [ 562.385112][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 562.417175][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5271'. [ 562.430775][T24732] netlink: 'syz.0.5271': attribute type 1 has an invalid length. [ 562.578747][T24732] 8021q: adding VLAN 0 to HW filter on device bond14 [ 562.670545][T24751] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5276'. [ 562.767768][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.870573][T24762] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5279'. [ 563.052835][T24773] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.074517][T24773] tc action pedit 'at' offset -2147483648 out of bounds [ 563.239203][T24780] tc action pedit 'at' offset -2147483648 out of bounds [ 563.357273][T24782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5287'. [ 563.601853][T24798] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5290'. [ 563.665732][T24800] xfrm0: Caught tx_queue_len zero misconfig [ 563.812143][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5295'. [ 563.941688][T24809] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 563.961543][T24813] SET target dimension over the limit! [ 564.228795][T24826] netlink: 198160 bytes leftover after parsing attributes in process `syz.3.5302'. [ 564.495614][T24840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5306'. [ 567.247003][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 567.312619][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5311'. [ 567.506723][T24867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5316'. [ 567.560844][T24874] netlink: 'syz.4.5315': attribute type 1 has an invalid length. [ 567.600105][T24876] netlink: 'syz.1.5317': attribute type 1 has an invalid length. [ 567.657706][T24879] x_tables: duplicate underflow at hook 2 [ 567.764941][T24876] 8021q: adding VLAN 0 to HW filter on device bond13 [ 567.879563][T24880] vlan2: entered allmulticast mode [ 567.896305][T24880] bond13: entered allmulticast mode [ 567.980165][T24890] bond13: (slave geneve4): making interface the new active one [ 567.991149][T24890] geneve4: entered allmulticast mode [ 568.002568][T24890] bond13: (slave geneve4): Enslaving as an active interface with an up link [ 568.031867][T24891] netlink: 'syz.3.5320': attribute type 12 has an invalid length. [ 568.054784][T24891] netlink: 'syz.3.5320': attribute type 29 has an invalid length. [ 568.068029][T24891] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5320'. [ 568.079991][T24891] netlink: 59 bytes leftover after parsing attributes in process `syz.3.5320'. [ 568.246974][T24906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5325'. [ 568.449029][T24922] netlink: 'syz.3.5330': attribute type 10 has an invalid length. [ 568.525743][T24922] ipvlan0: entered allmulticast mode [ 568.539854][T24922] veth0_vlan: entered allmulticast mode [ 568.568828][T24922] team0: Device ipvlan0 failed to register rx_handler [ 568.749739][T24933] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5334'. [ 568.788974][T24933] xt_hashlimit: size too large, truncated to 1048576 [ 568.798725][T24929] syzkaller0: entered promiscuous mode [ 568.828177][T24929] syzkaller0: entered allmulticast mode [ 569.188260][T24952] netlink: 'syz.3.5337': attribute type 19 has an invalid length. [ 569.281572][T24952] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5337'. [ 569.899575][T24990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 569.959368][T24996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5352'. [ 570.086293][T24999] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 570.123650][T24999] bond14: (slave lo): Enslaving as an active interface with an up link [ 570.135953][T24999] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 570.264890][T25007] lo speed is unknown, defaulting to 1000 [ 570.375819][T25013] lo speed is unknown, defaulting to 1000 [ 570.563037][T25017] syzkaller0: entered promiscuous mode [ 570.568556][T25017] syzkaller0: entered allmulticast mode [ 570.961782][T25026] pim6reg1: entered promiscuous mode [ 570.967120][T25026] pim6reg1: entered allmulticast mode [ 571.157914][T25024] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5359'. [ 571.185033][T25024] openvswitch: netlink: Missing key (keys=40, expected=100) [ 571.289467][T25036] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5362'. [ 573.976430][T25057] __nla_validate_parse: 4 callbacks suppressed [ 573.976449][T25057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5366'. [ 573.992229][T25057] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5366'. [ 574.004735][T25057] tipc: Trying to set illegal importance in message [ 574.072133][T25051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'. [ 574.081026][T25051] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5365'. [ 574.354697][T25062] tc action pedit 'at' offset -2147483648 out of bounds [ 574.754840][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5370'. [ 574.763797][T25068] openvswitch: netlink: Flow actions attr not present in new flow. [ 574.772847][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5370'. [ 574.784455][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5370'. [ 574.793319][T25068] openvswitch: netlink: Flow actions attr not present in new flow. [ 574.893992][T25076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5372'. [ 574.902999][T25076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5372'. [ 574.968084][T25079] netlink: 'syz.0.5372': attribute type 10 has an invalid length. [ 575.017725][T25086] netlink: 'syz.3.5375': attribute type 20 has an invalid length. [ 575.044363][T25086] IPv6: NLM_F_CREATE should be specified when creating new route [ 575.056411][T25086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5375'. [ 575.157828][T25090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.240006][T25094] siw: device registration error -23 [ 575.523839][T25103] netlink: 'syz.1.5379': attribute type 1 has an invalid length. [ 575.733387][T25103] bond15: (slave bridge69): making interface the new active one [ 575.749954][T25103] bond15: (slave bridge69): Enslaving as an active interface with an up link [ 575.786297][T25107] macvlan2: entered promiscuous mode [ 575.792652][T25107] macvlan2: entered allmulticast mode [ 575.809395][T25107] bond15: entered promiscuous mode [ 575.823029][T25107] bridge69: entered promiscuous mode [ 575.837398][T25107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 575.855112][T25107] bond15: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 575.910706][T25107] bond15: left promiscuous mode [ 575.927606][T25107] bridge69: left promiscuous mode [ 576.110133][T25122] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 576.222577][T25128] sctp: [Deprecated]: syz.3.5386 (pid 25128) Use of int in maxseg socket option. [ 576.222577][T25128] Use struct sctp_assoc_value instead [ 579.153246][T25154] netlink: 'syz.4.5395': attribute type 1 has an invalid length. [ 579.259222][T25154] bond12: (slave bridge10): making interface the new active one [ 579.268453][T25154] bond12: (slave bridge10): Enslaving as an active interface with an up link [ 579.294462][T25154] macvlan2: entered promiscuous mode [ 579.299875][T25154] macvlan2: entered allmulticast mode [ 579.307807][T25154] bond12: entered promiscuous mode [ 579.313126][T25154] bridge10: entered promiscuous mode [ 579.319783][T25154] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 579.332975][T25154] bond12: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 579.350745][T25154] bond12: left promiscuous mode [ 579.357860][T25154] bridge10: left promiscuous mode [ 579.393243][T25158] __nla_validate_parse: 3 callbacks suppressed [ 579.393276][T25158] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.5397'. [ 579.481379][T25172] netlink: 'syz.3.5401': attribute type 1 has an invalid length. [ 579.486420][T25171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5400'. [ 579.536580][T25172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5401'. [ 579.553017][T25171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5400'. [ 579.672785][T25181] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5403'. [ 579.690648][T25180] macvlan2: entered promiscuous mode [ 579.743130][T25180] macvlan2: entered allmulticast mode [ 579.760099][T25180] bond12: entered promiscuous mode [ 579.767059][T25180] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 579.785972][T25180] bond12: left promiscuous mode [ 579.942485][T25202] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 580.167669][T25217] netlink: 'syz.3.5413': attribute type 1 has an invalid length. [ 580.231044][T25217] bond13: (slave bridge9): making interface the new active one [ 580.239609][T25217] bond13: (slave bridge9): Enslaving as an active interface with an up link [ 580.261225][T25217] macvlan2: entered promiscuous mode [ 580.266558][T25217] macvlan2: entered allmulticast mode [ 580.272732][T25217] bond13: entered promiscuous mode [ 580.280317][T25217] bridge9: entered promiscuous mode [ 580.286403][T25217] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 580.294789][T25217] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 580.311029][T25217] bond13: left promiscuous mode [ 580.316550][T25217] bridge9: left promiscuous mode [ 580.346141][T25225] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5416'. [ 580.458417][T25231] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5417'. [ 580.506933][T25235] netlink: 'syz.0.5419': attribute type 1 has an invalid length. [ 580.516445][T25235] netlink: 'syz.0.5419': attribute type 1 has an invalid length. [ 580.524415][T25235] netlink: 'syz.0.5419': attribute type 1 has an invalid length. [ 580.532379][T25235] netlink: 'syz.0.5419': attribute type 2 has an invalid length. [ 580.540149][T25235] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5419'. [ 580.603367][T25238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 580.739604][T25253] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5424'. [ 580.778431][T25255] netlink: 'syz.3.5426': attribute type 12 has an invalid length. [ 580.808913][T25253] unsupported nla_type 7424 [ 580.872289][T25265] netlink: 'syz.3.5429': attribute type 1 has an invalid length. [ 580.880051][T25265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5429'. [ 580.986085][T25276] netlink: 'syz.4.5431': attribute type 1 has an invalid length. [ 581.005716][T25278] sctp: [Deprecated]: syz.2.5433 (pid 25278) Use of int in max_burst socket option. [ 581.005716][T25278] Use struct sctp_assoc_value instead [ 581.123783][T25276] bond13: (slave bridge11): making interface the new active one [ 581.132501][T25276] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 581.155871][T25288] netlink: 'syz.2.5436': attribute type 1 has an invalid length. [ 581.180723][T25285] macvlan2: entered promiscuous mode [ 581.200949][T25285] macvlan2: entered allmulticast mode [ 581.207248][T25285] bond13: entered promiscuous mode [ 581.212388][T25285] bridge11: entered promiscuous mode [ 581.247689][T25285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 581.255614][T25285] bond13: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 581.288146][T25285] bond13: left promiscuous mode [ 581.308991][T25285] bridge11: left promiscuous mode [ 581.585806][T25309] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 581.595414][T25309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 581.960516][T25339] x_tables: duplicate underflow at hook 2 [ 581.983958][T25340] vlan2: entered allmulticast mode [ 581.989239][T25340] gretap0: entered allmulticast mode [ 582.346785][T25360] netlink: 'syz.4.5453': attribute type 1 has an invalid length. [ 582.405218][T25359] bridge0: port 3(ipvlan2) entered blocking state [ 582.417658][T25359] bridge0: port 3(ipvlan2) entered disabled state [ 582.441572][T25359] ipvlan2: entered allmulticast mode [ 582.453858][T25359] bridge0: entered allmulticast mode [ 582.461595][T25359] ipvlan2: left allmulticast mode [ 582.466703][T25359] bridge0: left allmulticast mode [ 582.572495][T25360] bond14: (slave bridge12): making interface the new active one [ 582.583094][T25360] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 582.616685][T25380] macvlan2: entered promiscuous mode [ 582.622023][T25380] macvlan2: entered allmulticast mode [ 582.628212][T25380] bond14: entered promiscuous mode [ 582.660490][T25380] bridge12: entered promiscuous mode [ 582.666811][T25380] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 582.674775][T25380] bond14: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 582.690923][T25380] bond14: left promiscuous mode [ 582.695788][T25380] bridge12: left promiscuous mode [ 583.298810][T25408] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 583.333654][T25408] syzkaller0: entered promiscuous mode [ 583.347347][T25408] syzkaller0: entered allmulticast mode [ 584.483519][T25458] lo speed is unknown, defaulting to 1000 [ 584.629267][T25469] __nla_validate_parse: 9 callbacks suppressed [ 584.629284][T25469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5479'. [ 584.822976][T25476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5480'. [ 584.939301][T25482] sctp: [Deprecated]: syz.2.5482 (pid 25482) Use of int in maxseg socket option. [ 584.939301][T25482] Use struct sctp_assoc_value instead [ 584.979139][T25482] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5482'. [ 585.216531][T25494] validate_nla: 3 callbacks suppressed [ 585.216550][T25494] netlink: 'syz.3.5485': attribute type 1 has an invalid length. [ 585.237084][T25497] veth0: entered promiscuous mode [ 585.261593][T25494] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5485'. [ 585.286812][T25494] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5485'. [ 585.331204][T25494] netlink: 'syz.3.5485': attribute type 1 has an invalid length. [ 585.349579][T25494] netlink: 'syz.3.5485': attribute type 8 has an invalid length. [ 585.362477][T25494] netlink: 582 bytes leftover after parsing attributes in process `syz.3.5485'. [ 585.600831][T25510] tc action pedit 'at' offset -2147483648 out of bounds [ 586.045789][T25495] veth0: left promiscuous mode [ 586.243319][T25538] openvswitch: netlink: Key type 16363 is out of range max 32 [ 586.293420][T25543] netlink: 'syz.2.5499': attribute type 7 has an invalid length. [ 586.326643][T25543] netlink: 'syz.2.5499': attribute type 8 has an invalid length. [ 586.980122][T25572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5505'. [ 587.121178][T25581] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5504'. [ 587.136967][T25579] netlink: 'syz.0.5505': attribute type 1 has an invalid length. [ 587.163657][T25581] netlink: 'syz.2.5504': attribute type 21 has an invalid length. [ 588.028597][T25628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5517'. [ 588.039086][T25627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5517'. [ 588.378358][T25647] netlink: 'syz.2.5525': attribute type 11 has an invalid length. [ 588.523108][T25660] syzkaller0: entered promiscuous mode [ 588.528655][T25660] syzkaller0: entered allmulticast mode [ 588.654572][T25671] netlink: 'syz.3.5532': attribute type 1 has an invalid length. [ 588.729682][T25671] 8021q: adding VLAN 0 to HW filter on device bond14 [ 588.761163][T25671] bond14: (slave veth0_to_bond): making interface the new active one [ 588.772798][T25671] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 588.967733][T25685] batadv0: mtu less than device minimum [ 588.987324][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 588.999967][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 589.011545][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 589.023016][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 589.034504][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 589.045966][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 589.057388][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 589.068956][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 589.080575][T25685] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (0) [ 589.410543][T25718] netlink: 'syz.0.5549': attribute type 1 has an invalid length. [ 589.468863][T25718] bond15: entered promiscuous mode [ 589.474505][T25718] 8021q: adding VLAN 0 to HW filter on device bond15 [ 589.498241][T25718] bond15: (slave bridge13): making interface the new active one [ 589.505933][T25718] bridge13: entered promiscuous mode [ 589.512635][T25718] bond15: (slave bridge13): Enslaving as an active interface with an up link [ 589.886147][T25743] xt_hashlimit: size too large, truncated to 1048576 [ 590.077510][T25752] 8021q: adding VLAN 0 to HW filter on device bond15 [ 590.313455][T25762] syzkaller0: entered promiscuous mode [ 590.337400][T25762] syzkaller0: entered allmulticast mode [ 590.474325][T25775] tunl0: Caught tx_queue_len zero misconfig [ 590.728647][T25784] validate_nla: 1 callbacks suppressed [ 590.728664][T25784] netlink: 'syz.3.5566': attribute type 1 has an invalid length. [ 590.810486][T25784] 8021q: adding VLAN 0 to HW filter on device bond16 [ 590.992093][T25759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.211845][T25813] xt_hashlimit: size too large, truncated to 1048576 [ 591.539466][T25824] IPv6: sit1: Disabled Multicast RS [ 591.965400][T25848] __nla_validate_parse: 12 callbacks suppressed [ 591.965435][T25848] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5582'. [ 591.989791][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5582'. [ 592.101828][T25850] syzkaller0: entered promiscuous mode [ 592.161806][T25863] xt_hashlimit: size too large, truncated to 1048576 [ 592.252094][T25872] netlink: 'syz.1.5591': attribute type 8 has an invalid length. [ 592.267869][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5591'. [ 592.279297][T25872] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.287104][T25872] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.418078][T25878] tipc: Started in network mode [ 592.423207][T25878] tipc: Node identity 4e7f78306123, cluster identity 4711 [ 592.430960][T25878] tipc: Enabled bearer , priority 0 [ 592.441910][T25877] tipc: Disabling bearer [ 592.607577][T25890] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 592.799564][T25906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5600'. [ 592.828063][T25906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5600'. [ 592.864490][T25909] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 592.876305][T25906] netlink: 186392 bytes leftover after parsing attributes in process `syz.2.5600'. [ 593.021140][T25921] xt_hashlimit: size too large, truncated to 1048576 [ 593.191538][T25931] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5606'. [ 593.356766][T25937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5608'. [ 593.510204][T25945] bond14: option mode: unable to set because the bond device has slaves [ 593.570034][T25945] netlink: 'syz.1.5610': attribute type 1 has an invalid length. [ 593.913454][T25978] netlink: 'syz.3.5618': attribute type 21 has an invalid length. [ 593.921424][T25978] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5618'. [ 594.195799][T25995] xt_hashlimit: size too large, truncated to 1048576 [ 594.293731][T26001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5623'. [ 594.324670][T26002] sctp: [Deprecated]: syz.0.5623 (pid 26002) Use of int in maxseg socket option. [ 594.324670][T26002] Use struct sctp_assoc_value instead [ 594.909951][T26033] sctp: [Deprecated]: syz.2.5635 (pid 26033) Use of int in max_burst socket option deprecated. [ 594.909951][T26033] Use struct sctp_assoc_value instead [ 594.960398][T26036] batadv0: entered promiscuous mode [ 594.966377][T26036] macsec1: entered promiscuous mode [ 594.972952][T26036] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 594.983759][T26036] batadv0: left promiscuous mode [ 595.029020][T26040] netlink: 'syz.4.5636': attribute type 1 has an invalid length. [ 595.074005][T26040] bond16: entered promiscuous mode [ 595.079547][T26040] 8021q: adding VLAN 0 to HW filter on device bond16 [ 595.596614][T26068] 1·: renamed from c0· (while UP) [ 595.601937][ T50] block nbd2: Receive control failed (result -32) [ 595.609294][ T5628] block nbd2: Receive control failed (result -32) [ 595.633566][T26068] net_ratelimit: 11 callbacks suppressed [ 595.633599][T26068] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 595.690983][T26023] nbd2: detected capacity change from 0 to 63 [ 595.715025][T25898] block nbd2: Dead connection, failed to find a fallback [ 595.745057][T25898] block nbd2: shutting down sockets [ 595.750752][T25898] blk_print_req_error: 138 callbacks suppressed [ 595.750766][T25898] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.825888][T25898] buffer_io_error: 138 callbacks suppressed [ 595.825904][T25898] Buffer I/O error on dev nbd2, logical block 0, async page read [ 595.839701][T25898] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.864995][T25898] Buffer I/O error on dev nbd2, logical block 1, async page read [ 595.919948][T25898] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.939634][T25898] Buffer I/O error on dev nbd2, logical block 2, async page read [ 595.947559][T25898] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 595.972830][T25898] Buffer I/O error on dev nbd2, logical block 3, async page read [ 595.981027][T25898] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.015747][T26089] gre2: entered promiscuous mode [ 596.025302][T25898] Buffer I/O error on dev nbd2, logical block 0, async page read [ 596.033256][T25898] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.042721][T25898] Buffer I/O error on dev nbd2, logical block 1, async page read [ 596.050615][T25898] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.061394][T25898] Buffer I/O error on dev nbd2, logical block 2, async page read [ 596.069565][T26093] syzkaller0: entered promiscuous mode [ 596.075093][T26093] syzkaller0: entered allmulticast mode [ 596.082579][T25898] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.114490][T25898] Buffer I/O error on dev nbd2, logical block 3, async page read [ 596.122865][T25898] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.131912][T25898] Buffer I/O error on dev nbd2, logical block 0, async page read [ 596.160233][T25898] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 596.175911][T25898] Buffer I/O error on dev nbd2, logical block 1, async page read [ 596.191868][T25898] ldm_validate_partition_table(): Disk read failed. [ 596.205940][T26089] gre2: entered promiscuous mode [ 596.208841][T25898] Dev nbd2: unable to read RDB block 0 [ 596.273749][T25898] nbd2: unable to read partition table [ 596.314273][T25898] ldm_validate_partition_table(): Disk read failed. [ 596.329327][T25898] Dev nbd2: unable to read RDB block 0 [ 596.353520][T25898] nbd2: unable to read partition table [ 596.399390][T26089] gre2: entered promiscuous mode [ 596.411316][T26110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.419056][T26110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.474859][T26104] Cannot find add_set index 65532 as target [ 596.482692][T26110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.495469][T26110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.592375][T26089] gre2: entered promiscuous mode [ 596.752695][T26089] gre2: entered promiscuous mode [ 597.515553][T26163] __nla_validate_parse: 12 callbacks suppressed [ 597.515610][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 597.544921][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 597.587368][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 597.611658][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 597.634697][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 597.670713][T26168] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5677'. [ 597.681453][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 597.728540][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 597.744771][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 597.780222][T26163] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5674'. [ 598.008005][T26179] syzkaller0: entered promiscuous mode [ 598.017904][T26179] syzkaller0: entered allmulticast mode [ 598.027936][T26189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 598.110756][T26182] 8021q: adding VLAN 0 to HW filter on device bond18 [ 598.137000][T26182] bond18 (unregistering): Released all slaves [ 598.181536][T26193] netlink: 'syz.2.5685': attribute type 7 has an invalid length. [ 598.189316][T26193] netlink: 'syz.2.5685': attribute type 8 has an invalid length. [ 598.450517][T26206] netlink: zone id is out of range [ 598.479965][T26206] netlink: zone id is out of range [ 598.507177][T26206] netlink: zone id is out of range [ 598.522757][T26206] netlink: zone id is out of range [ 598.535803][T26206] netlink: zone id is out of range [ 598.542510][T26206] netlink: zone id is out of range [ 598.566967][T26206] netlink: zone id is out of range [ 598.582408][T26206] netlink: zone id is out of range [ 599.247366][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 599.742413][T26279] lo: entered allmulticast mode [ 599.796225][T26279] lo: left allmulticast mode [ 599.828120][T26279] netlink: 'syz.0.5710': attribute type 1 has an invalid length. [ 599.968817][T26290] ip6tnl0: Caught tx_queue_len zero misconfig [ 600.309928][T26307] netlink: 'syz.4.5717': attribute type 4 has an invalid length. [ 600.712222][T26339] veth0_to_team: Caught tx_queue_len zero misconfig [ 600.848943][T26344] syzkaller1: entered promiscuous mode [ 600.864127][T26344] syzkaller1: entered allmulticast mode [ 600.907565][T26339] macvlan2: entered promiscuous mode [ 600.923810][T26336] udevd[26336]: inotify_add_watch(7, /dev/nbd14, 10) failed: No such file or directory [ 600.928110][T26339] macvlan2: entered allmulticast mode [ 600.939686][T26339] team0: Device macvlan2 is already an upper device of the team interface [ 601.118550][T26354] syzkaller0: entered promiscuous mode [ 601.124060][T26354] syzkaller0: entered allmulticast mode [ 602.002974][T26393] sctp: [Deprecated]: syz.0.5738 (pid 26393) Use of int in maxseg socket option. [ 602.002974][T26393] Use struct sctp_assoc_value instead [ 603.809992][T26395] netlink: 'syz.1.5741': attribute type 11 has an invalid length. [ 603.843539][T26395] __nla_validate_parse: 31 callbacks suppressed [ 603.843575][T26395] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5741'. [ 603.903586][T26397] team0: Device gtp1 is up. Set it down before adding it as a team port [ 603.961846][T26405] netlink: 'syz.3.5740': attribute type 3 has an invalid length. [ 604.183108][T26417] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5745'. [ 604.356239][T26430] netlink: 'syz.1.5749': attribute type 1 has an invalid length. [ 604.376376][T26431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5750'. [ 604.399890][T26415] netlink: 'syz.2.5742': attribute type 1 has an invalid length. [ 604.431672][T26415] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5742'. [ 604.558682][T26436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5751'. [ 604.582989][T26436] net_ratelimit: 53 callbacks suppressed [ 604.583009][T26436] openvswitch: netlink: Flow actions attr not present in new flow. [ 604.980574][T26462] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 605.162212][T26472] netlink: 'syz.2.5762': attribute type 10 has an invalid length. [ 605.428102][T26491] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5769'. [ 605.477149][T26497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5769'. [ 605.553111][T26499] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5767'. [ 605.666314][T26507] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 605.702283][T26511] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5770'. [ 605.714670][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5772'. [ 606.333088][T26544] netlink: 'syz.4.5783': attribute type 28 has an invalid length. [ 606.348308][T26545] netlink: 'syz.1.5782': attribute type 1 has an invalid length. [ 606.353399][T26544] netlink: 'syz.4.5783': attribute type 3 has an invalid length. [ 606.364534][T26545] netlink: 'syz.1.5782': attribute type 10 has an invalid length. [ 606.377907][T26545] veth1_vlan: left promiscuous mode [ 606.383757][T26545] macvlan1: entered promiscuous mode [ 606.390561][T26545] macvlan1: entered allmulticast mode [ 606.404675][T26545] veth1_vlan: entered promiscuous mode [ 606.419632][T26545] veth1_vlan: entered allmulticast mode [ 606.429517][T26545] team0: Port device macvlan1 added [ 606.833039][T26577] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 606.843866][T26577] netlink: 'syz.3.5793': attribute type 1 has an invalid length. [ 606.859771][T26577] lo: entered allmulticast mode [ 606.864818][T26577] tunl0: entered allmulticast mode [ 606.870092][T26577] gre0: entered allmulticast mode [ 606.879010][T26577] gretap0: entered allmulticast mode [ 606.884448][T26577] erspan0: entered allmulticast mode [ 606.889885][T26577] ip_vti0: entered allmulticast mode [ 606.895388][T26577] ip6_vti0: entered allmulticast mode [ 606.971063][T26577] sit0: entered allmulticast mode [ 606.976236][T26577] ip6tnl0: entered allmulticast mode [ 606.981599][T26577] ip6gre0: entered allmulticast mode [ 606.986989][T26577] syz_tun: entered allmulticast mode [ 606.992430][T26577] ip6gretap0: entered allmulticast mode [ 606.998101][T26577] bridge0: entered allmulticast mode [ 607.003483][T26577] bond0: entered allmulticast mode [ 607.008581][T26577] bond_slave_0: entered allmulticast mode [ 607.029619][T26577] bond_slave_1: entered allmulticast mode [ 607.035542][T26577] team0: left promiscuous mode [ 607.040327][T26577] team_slave_0: left promiscuous mode [ 607.045920][T26577] team_slave_1: left promiscuous mode [ 607.051483][T26577] team0: entered allmulticast mode [ 607.065211][T26577] team_slave_0: entered allmulticast mode [ 607.071024][T26577] team_slave_1: entered allmulticast mode [ 607.077034][T26577] dummy0: entered allmulticast mode [ 607.084003][T26577] nlmon0: entered allmulticast mode [ 607.089489][T26577] batadv0: entered allmulticast mode [ 607.094938][T26577] vxcan0: entered allmulticast mode [ 607.100275][T26577] vxcan1: entered allmulticast mode [ 607.106348][T26577] veth0: entered allmulticast mode [ 607.111560][T26577] veth1: entered allmulticast mode [ 607.118994][T26577] wg0: entered allmulticast mode [ 607.124106][T26577] wg2: entered allmulticast mode [ 607.129228][T26577] veth0_to_bridge: entered allmulticast mode [ 607.142774][T26577] veth0_to_bond: entered allmulticast mode [ 607.150198][T26577] veth1_to_bond: entered allmulticast mode [ 607.158519][T26577] veth0_to_team: entered allmulticast mode [ 607.167408][T26577] veth1_to_team: entered allmulticast mode [ 607.176520][T26577] veth0_to_batadv: entered allmulticast mode [ 607.192536][T26577] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.200038][T26577] batadv_slave_0: entered allmulticast mode [ 607.208499][T26577] veth1_to_batadv: entered allmulticast mode [ 607.216207][T26577] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.223617][T26577] batadv_slave_1: entered allmulticast mode [ 607.231453][T26577] xfrm0: entered allmulticast mode [ 607.263160][T26577] veth0_to_hsr: entered allmulticast mode [ 607.272356][T26577] hsr_slave_0: entered allmulticast mode [ 607.281697][T26577] veth1_to_hsr: entered allmulticast mode [ 607.289159][T26577] hsr_slave_1: entered allmulticast mode [ 607.296943][T26577] hsr0: entered allmulticast mode [ 607.303664][T26577] veth1_virt_wifi: entered allmulticast mode [ 607.311376][T26577] veth0_virt_wifi: entered allmulticast mode [ 607.318933][T26577] virt_wifi0: entered allmulticast mode [ 607.324740][T26577] veth1_vlan: entered allmulticast mode [ 607.335427][T26577] vlan0: entered allmulticast mode [ 607.342135][T26577] vlan1: entered allmulticast mode [ 607.360135][T26577] macvlan0: entered allmulticast mode [ 607.368340][T26577] macvlan1: entered allmulticast mode [ 607.375472][T26577] ipvlan1: entered allmulticast mode [ 607.380983][T26577] veth1_macvtap: entered allmulticast mode [ 607.388488][T26577] veth0_macvtap: entered allmulticast mode [ 607.396242][T26577] macvtap0: entered allmulticast mode [ 607.403357][T26577] macsec0: entered allmulticast mode [ 607.412166][T26577] geneve0: entered allmulticast mode [ 607.419114][T26577] geneve1: entered allmulticast mode [ 607.426270][T26577] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 607.435653][T26577] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 607.447569][T26577] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 607.480687][T26577] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 607.558068][T26577] mac80211_hwsim hwsim38 wlan0: entered allmulticast mode [ 607.591244][T26577] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 607.602253][T26577] 0: entered allmulticast mode [ 607.616210][T26577] vlan0.4: entered allmulticast mode [ 607.623040][T26577] ip6tnl1: entered allmulticast mode [ 607.632518][T26577] mac80211_hwsim hwsim40 wlan2: entered allmulticast mode [ 607.643217][T26577] bond1: left promiscuous mode [ 607.651539][T26577] bond1: entered allmulticast mode [ 607.667501][T26577] bridge1: entered allmulticast mode [ 607.696067][T26577] batadv1: entered allmulticast mode [ 607.701614][T26577] bond2: entered allmulticast mode [ 607.707133][T26577] gretap1: entered allmulticast mode [ 607.715171][T26577] bridge2: entered allmulticast mode [ 607.721588][T26577] veth2: entered allmulticast mode [ 607.726884][T26577] veth3: entered allmulticast mode [ 607.732395][T26577] gretap2: left promiscuous mode [ 607.742259][T26577] gretap2: entered allmulticast mode [ 607.748833][T26577] syztnl2: entered allmulticast mode [ 607.754205][T26577] ip6gretap1: entered allmulticast mode [ 607.759812][T26577] veth4: entered allmulticast mode [ 607.765025][T26577] veth5: entered allmulticast mode [ 607.770281][T26577] ;: entered allmulticast mode [ 607.775645][T26577] wireguard0: left promiscuous mode [ 607.781782][T26577] bridge3: entered allmulticast mode [ 607.799957][T26577] vxcan2: entered allmulticast mode [ 607.816806][T26577] vxcan3: entered allmulticast mode [ 607.822938][T26577] mac80211_hwsim hwsim50 wlan3: entered allmulticast mode [ 607.830631][T26577] mac80211_hwsim hwsim51 wlan4: entered allmulticast mode [ 607.838024][T26577] bond3: entered allmulticast mode [ 607.843240][T26577] bridge4: entered allmulticast mode [ 607.850006][T26577] bond4: entered allmulticast mode [ 607.856089][T26577] ip6gretap2: entered allmulticast mode [ 607.861734][T26577] bond5: entered allmulticast mode [ 607.866832][T26577] vxcan5: entered allmulticast mode [ 607.872094][T26577] vxcan4: entered allmulticast mode [ 607.878354][T26577] vxcan6: entered allmulticast mode [ 607.883875][T26577] vxcan7: entered allmulticast mode [ 607.890068][T26577] bond6: entered allmulticast mode [ 607.895174][T26577] geneve2: entered allmulticast mode [ 607.913759][T26577] veth6: entered allmulticast mode [ 607.921039][T26577] veth7: entered allmulticast mode [ 607.926266][T26577] bond7: entered allmulticast mode [ 607.931361][T26577] bridge5: entered allmulticast mode [ 607.937789][T26577] bond8: entered allmulticast mode [ 607.942893][T26577] bridge6: entered allmulticast mode [ 607.949259][T26577] bond9: entered allmulticast mode [ 607.954361][T26577] bridge7: entered allmulticast mode [ 607.961361][T26577] bridge8: entered allmulticast mode [ 607.968324][T26577] bond10: left promiscuous mode [ 607.973171][T26577] bond10: entered allmulticast mode [ 607.978998][T26577] bond11: entered allmulticast mode [ 607.984186][T26577] geneve3: entered allmulticast mode [ 607.990532][T26577] batadv2: entered allmulticast mode [ 607.995901][T26577] vxlan0: entered allmulticast mode [ 608.001284][T26577] erspan1: entered allmulticast mode [ 608.006626][T26577] bond12: entered allmulticast mode [ 608.023573][T26577] bond13: entered allmulticast mode [ 608.030038][T26577] bridge9: entered allmulticast mode [ 608.036947][T26577] bond14: entered allmulticast mode [ 608.043419][T26577] bond15: entered allmulticast mode [ 608.048811][T26577] gtp0: entered allmulticast mode [ 608.054277][T26577] bond16: entered allmulticast mode [ 608.060102][T26577] bond17: entered allmulticast mode [ 608.065631][T26577] bridge10: entered allmulticast mode [ 608.185077][T14556] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.193982][T14556] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 608.205152][T14556] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.214295][T14556] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 608.244568][T14556] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.253462][T14556] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 608.268695][T14556] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.293028][T14556] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 608.303008][T26595] lo speed is unknown, defaulting to 1000 [ 609.307364][T26658] validate_nla: 1 callbacks suppressed [ 609.307382][T26658] netlink: 'syz.2.5815': attribute type 1 has an invalid length. [ 609.321018][T26658] netlink: 'syz.2.5815': attribute type 2 has an invalid length. [ 609.500985][T26669] netlink: 'syz.3.5820': attribute type 1 has an invalid length. [ 609.509850][T26669] netlink: 'syz.3.5820': attribute type 1 has an invalid length. [ 609.521469][T26669] __nla_validate_parse: 5 callbacks suppressed [ 609.521482][T26669] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.5820'. [ 609.613446][T26674] syzkaller0: entered promiscuous mode [ 609.629921][T26674] syzkaller0: entered allmulticast mode [ 609.660221][T26682] netlink: 'syz.3.5823': attribute type 11 has an invalid length. [ 609.947782][T26698] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5826'. [ 612.157598][T26695] syzkaller1: entered promiscuous mode [ 612.174203][T26695] syzkaller1: entered allmulticast mode [ 612.369901][T26705] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5830'. [ 612.527582][T26702] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 612.545774][T26709] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5831'. [ 612.557445][T26702] bond9 (unregistering): Released all slaves [ 612.744703][T26709] bond16 (unregistering): Released all slaves [ 613.043276][T26725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5836'. [ 613.274972][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5839'. [ 613.981286][T26742] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.5842'. [ 615.906234][T26748] netdevsim netdevsim3: Direct firmware load for 0 failed with error -2 [ 615.931273][T26748] netdevsim netdevsim3: Falling back to sysfs fallback for: 0 [ 616.063991][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5847'. [ 616.176633][T26759] can: request_module (can-proto-0) failed. [ 617.169119][T26841] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5869'. [ 619.503459][T26808] netlink: 'syz.1.5863': attribute type 2 has an invalid length. [ 619.518389][T26815] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 619.596414][T26841] vlan3: entered allmulticast mode [ 619.607012][T26841] erspan0: entered allmulticast mode [ 619.735842][T26864] sctp: [Deprecated]: syz.3.5872 (pid 26864) Use of int in maxseg socket option. [ 619.735842][T26864] Use struct sctp_assoc_value instead [ 619.986624][T26875] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5877'. [ 620.028039][T26875] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5877'. [ 620.068454][T26875] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5877'. [ 620.078654][T26883] netlink: 'syz.1.5879': attribute type 61 has an invalid length. [ 620.120682][T26887] batadv_slave_0: Caught tx_queue_len zero misconfig [ 620.128375][T26885] netlink: 'syz.1.5879': attribute type 61 has an invalid length. [ 620.298779][T26894] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5882'. [ 620.312516][T26893] netlink: 'syz.3.5883': attribute type 1 has an invalid length. [ 620.333343][T26894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5882'. [ 620.400977][T26893] bond18: entered promiscuous mode [ 620.407738][T26893] 8021q: adding VLAN 0 to HW filter on device bond18 [ 620.499825][T26898] bridge11: entered promiscuous mode [ 620.507793][T14560] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 620.555541][T26898] bond18: (slave bridge11): Enslaving as an active interface with an up link [ 620.680034][T14560] bond18: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 620.688067][T26914] veth1_macvtap: entered promiscuous mode [ 620.695693][T26914] veth1_macvtap: entered allmulticast mode [ 620.752355][T26919] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5890'. [ 621.043569][T26940] openvswitch: netlink: EtherType 50a is less than min 600 [ 621.094817][T26940] openvswitch: netlink: EtherType 50a is less than min 600 [ 621.326076][T26957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5903'. [ 621.427639][T26965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5905'. [ 621.440702][T26957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5903'. [ 621.440737][T26957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5903'. [ 621.566530][T26965] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 621.574122][T26965] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 621.916834][T26983] IPv6: sit1: Disabled Multicast RS [ 622.019346][T26991] syzkaller0: entered promiscuous mode [ 622.029505][T26991] syzkaller0: entered allmulticast mode [ 622.046989][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5916'. [ 622.056051][T26991] netlink: 'syz.1.5914': attribute type 3 has an invalid length. [ 622.319022][T27016] syzkaller0: entered promiscuous mode [ 622.326226][T27016] syzkaller0: entered allmulticast mode [ 622.362034][T27016] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 622.498090][T27023] pim6reg1: entered promiscuous mode [ 622.503426][T27023] pim6reg1: entered allmulticast mode [ 622.720418][T27037] syzkaller0: entered promiscuous mode [ 622.726054][T27037] syzkaller0: entered allmulticast mode [ 623.034672][T27059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5937'. [ 623.050778][T27061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5938'. [ 623.065660][T27059] xfrm1: entered promiscuous mode [ 623.070796][T27059] xfrm1: entered allmulticast mode [ 623.078960][T27059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5937'. [ 623.323844][T27077] tunl0: entered promiscuous mode [ 623.332932][T27078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5939'. [ 623.342055][T27077] tunl0: left allmulticast mode [ 623.352299][T27077] netlink: 'syz.3.5942': attribute type 3 has an invalid length. [ 623.390684][T27081] IPv6: Can't replace route, no match found [ 623.399138][T27077] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5942'. [ 623.488387][T27088] netlink: 'syz.2.5948': attribute type 29 has an invalid length. [ 623.531761][T27087] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.539005][T27087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.546553][T27087] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.553755][T27087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.578587][T27090] netdevsim netdevsim4 : renamed from netdevsim0 [ 623.599596][T27088] netlink: 'syz.2.5948': attribute type 29 has an invalid length. [ 623.979119][T27123] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 624.172476][T27138] syzkaller0: entered promiscuous mode [ 624.229176][T27138] syzkaller0: entered allmulticast mode [ 624.265029][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.296131][T27149] tipc: Resetting bearer [ 624.366163][T27149] tipc: Disabling bearer [ 624.392388][T27142] hsr_slave_1 (unregistering): left promiscuous mode [ 624.568399][T27171] netlink: 'syz.1.5973': attribute type 7 has an invalid length. [ 624.576339][T27171] netlink: 'syz.1.5973': attribute type 8 has an invalid length. [ 624.893669][T27190] netlink: 'syz.3.5977': attribute type 1 has an invalid length. [ 625.066461][T27190] bond19: entered promiscuous mode [ 625.072220][T27190] 8021q: adding VLAN 0 to HW filter on device bond19 [ 625.091844][T27201] netlink: 'syz.1.5980': attribute type 1 has an invalid length. [ 625.128718][T27189] bridge13: entered promiscuous mode [ 625.149067][T27189] bond19: (slave bridge13): Enslaving as a backup interface with an up link [ 625.160570][T27191] team_slave_1: Caught tx_queue_len zero misconfig [ 625.186182][ T13] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 625.343777][T27201] bond16: (slave bridge70): making interface the new active one [ 625.358300][T27201] bond16: (slave bridge70): Enslaving as an active interface with an up link [ 625.404576][T27201] macvlan2: entered promiscuous mode [ 625.417860][T27201] macvlan2: entered allmulticast mode [ 625.420266][T14564] bond19: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 625.428857][T27201] bond16: entered promiscuous mode [ 625.440699][T27216] tipc: Failed to remove unknown binding: 66,0,0/0:2911696765/2911696766 [ 625.479066][T27201] bridge70: entered promiscuous mode [ 625.480087][T27209] tipc: Failed to remove unknown binding: 66,0,0/0:2911696765/2911696766 [ 625.497073][T27201] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 625.505083][T27201] bond16: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 625.550007][T27201] bond16: left promiscuous mode [ 625.555697][T27201] bridge70: left promiscuous mode [ 625.580718][T27222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.624793][T27227] ipvlan1: entered promiscuous mode [ 625.630224][T27227] ipvlan1: entered allmulticast mode [ 625.637458][T27227] veth0_vlan: entered allmulticast mode [ 625.741839][T27233] netlink: 'syz.0.5991': attribute type 3 has an invalid length. [ 625.810064][T27233] netlink: 'syz.0.5991': attribute type 63 has an invalid length. [ 625.844799][T27233] netlink: 'syz.0.5991': attribute type 63 has an invalid length. [ 625.957423][T27246] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 626.260747][T27260] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 626.467344][T27272] bridge0: left allmulticast mode [ 626.599703][T27280] __nla_validate_parse: 24 callbacks suppressed [ 626.599723][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6009'. [ 626.623937][T27280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6009'. [ 626.782428][T27288] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6012'. [ 626.967649][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.983796][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.019397][T27298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.160433][T27309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6019'. [ 627.186368][T27309] nbd: nbd0 already in use [ 627.191673][T27309] block nbd0: NBD_DISCONNECT [ 627.197496][T27309] block nbd0: Send disconnect failed -32 [ 627.204820][T27309] block nbd0: Send disconnect failed -32 [ 627.459964][T27297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.625375][T27332] netlink: 248 bytes leftover after parsing attributes in process `syz.1.6025'. [ 627.721336][T27341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6029'. [ 628.033363][T27352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6031'. [ 628.335945][T27372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.616643][T27389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6042'. [ 628.646623][T27389] 8021q: adding VLAN 0 to HW filter on device bond17 [ 628.663579][T27389] ipvlan2: entered allmulticast mode [ 628.668907][T27389] bond17: entered allmulticast mode [ 628.870696][T27397] bond17: (slave ipip0): refused to change device type [ 628.968400][T27404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6045'. [ 629.088961][T27419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6051'. [ 629.097947][T27419] nbd: must specify at least one socket [ 629.615491][T27447] netlink: 'syz.0.6061': attribute type 1 has an invalid length. [ 629.628885][T27447] netlink: 'syz.0.6061': attribute type 2 has an invalid length. [ 629.641012][T27447] netlink: 'syz.0.6061': attribute type 2 has an invalid length. [ 629.649410][T27447] netlink: 'syz.0.6061': attribute type 2 has an invalid length. [ 629.813833][T27454] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 629.981562][T27461] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 630.221900][T27477] openvswitch: netlink: Flow actions attr not present in new flow. [ 630.264037][T27477] team_slave_0: Caught tx_queue_len zero misconfig [ 630.300711][T27474] xt_hashlimit: invalid interval [ 630.305821][T27479] syzkaller0: entered promiscuous mode [ 630.305844][T27479] syzkaller0: entered allmulticast mode [ 630.796924][T27494] sch_tbf: peakrate 1 is lower than or equals to rate 8 ! [ 630.862989][T27496] syzkaller0: entered promiscuous mode [ 630.887772][T27496] syzkaller0: entered allmulticast mode [ 630.993536][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 631.022106][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 631.030150][ T5628] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 631.049531][T27511] netlink: 'syz.0.6083': attribute type 1 has an invalid length. [ 631.070305][ T5628] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 631.081925][ T5628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 631.344877][T14560] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 631.736299][T27508] lo speed is unknown, defaulting to 1000 [ 631.913230][T27548] netlink: 'syz.1.6091': attribute type 39 has an invalid length. [ 631.964510][T27548] syz_tun (unregistering): left allmulticast mode [ 632.530432][T27571] xt_TCPMSS: Only works on TCP SYN packets [ 632.838176][T27508] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.845753][T27508] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.853035][T27508] bridge_slave_0: entered allmulticast mode [ 632.860863][T27508] bridge_slave_0: entered promiscuous mode [ 632.896447][T27508] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.903680][T27508] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.911012][T27508] bridge_slave_1: entered allmulticast mode [ 632.919006][T27508] bridge_slave_1: entered promiscuous mode [ 633.124620][T27508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.137610][T27508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.218764][ T50] Bluetooth: hci1: command tx timeout [ 633.262752][T27508] team0: Port device team_slave_0 added [ 633.271394][T27508] team0: Port device team_slave_1 added [ 633.304596][T27508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.311574][T27508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.365227][T27508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.377864][T27508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.384834][T27508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.410712][T27508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.515068][T27622] __nla_validate_parse: 10 callbacks suppressed [ 633.515087][T27622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6109'. [ 633.552042][T27508] hsr_slave_0: entered promiscuous mode [ 633.558926][T27508] hsr_slave_1: entered promiscuous mode [ 633.630187][T27626] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.6111'. [ 633.648465][T27622] bond20: entered promiscuous mode [ 633.654448][T27622] bond20: entered allmulticast mode [ 633.714192][T27627] openvswitch: netlink: Missing valid actions attribute. [ 633.730837][T27627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.734800][T27626] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 633.750858][T27626] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 633.758686][T27626] gretap3: entered promiscuous mode [ 633.763904][T27626] gretap3: entered allmulticast mode [ 633.893050][T27633] netlink: 'syz.0.6115': attribute type 29 has an invalid length. [ 633.948989][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6118'. [ 633.971767][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6118'. [ 633.986947][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6118'. [ 634.004402][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6118'. [ 634.018772][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6118'. [ 634.044826][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6118'. [ 634.067814][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6118'. [ 634.105985][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6118'. [ 634.148836][T27508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.161062][T27508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.184464][T27636] netlink: 'syz.0.6115': attribute type 29 has an invalid length. [ 634.192810][T27633] netlink: 'syz.0.6115': attribute type 29 has an invalid length. [ 634.201059][T27633] netlink: 'syz.0.6115': attribute type 29 has an invalid length. [ 634.426217][T27508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.437324][T27508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.511848][T27659] x_tables: duplicate underflow at hook 1 [ 634.553235][T27508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 634.565137][T27508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.849146][T27508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 634.888119][T27508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 634.906729][T27508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 634.931824][T27508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.963397][T27508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 634.975431][T27508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 634.983739][T27508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 634.999450][T27508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 635.212072][T27508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.251544][ T5628] Bluetooth: hci1: command tx timeout [ 635.300953][T27508] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.349488][T14556] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.356689][T14556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.407974][T14556] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.415176][T14556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.719339][T27710] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 635.731282][T27710] xt_hashlimit: size too large, truncated to 1048576 [ 635.892826][T27720] openvswitch: netlink: Flow key attr not present in new flow. [ 636.011108][T27723] netlink: 'syz.1.6139': attribute type 1 has an invalid length. [ 636.248378][T27723] bond18: (slave bridge72): making interface the new active one [ 636.266213][T27723] bond18: (slave bridge72): Enslaving as an active interface with an up link [ 636.289243][T27730] macvlan2: entered promiscuous mode [ 636.295833][T27730] macvlan2: entered allmulticast mode [ 636.303716][T27730] bond18: entered promiscuous mode [ 636.316696][T27730] bridge72: entered promiscuous mode [ 636.323953][T27730] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 636.333414][T27730] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 636.351267][T27730] bond18: left promiscuous mode [ 636.357638][T27730] bridge72: left promiscuous mode [ 636.395225][T27508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.452102][T27508] veth0_vlan: entered promiscuous mode [ 636.469233][T27508] veth1_vlan: entered promiscuous mode [ 636.646355][T27508] veth0_macvtap: entered promiscuous mode [ 636.656457][T27508] veth1_macvtap: entered promiscuous mode [ 636.705940][T27508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.724625][T27508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.754144][T27745] bond16: entered allmulticast mode [ 636.772882][T14552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.781702][T14552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.884926][T14552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.926958][T27753] netlink: 'syz.1.6145': attribute type 10 has an invalid length. [ 636.955352][T14552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.971721][T27753] batman_adv: batadv0: Interface deactivated: dummy0 [ 636.984980][T27753] batman_adv: batadv0: Removing interface: dummy0 [ 636.991775][T27756] netlink: 'syz.1.6145': attribute type 10 has an invalid length. [ 637.007765][T27753] team0: Port device dummy0 added [ 637.061617][T27756] team0: Port device dummy0 removed [ 637.072394][T27756] : (slave dummy0): Enslaving as an active interface with an up link [ 637.257767][T14564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.265614][T14564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.312805][T27770] team0: Caught tx_queue_len zero misconfig [ 637.340411][T14563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.361541][ T5628] Bluetooth: hci1: command tx timeout [ 637.374977][T14563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.415508][T27775] macvtap1: entered promiscuous mode [ 637.420905][T27775] bridge0: entered promiscuous mode [ 637.524578][T27777] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 637.546708][T27783] netlink: 'syz.4.6155': attribute type 1 has an invalid length. [ 637.751272][T27783] bond18: (slave bridge17): making interface the new active one [ 637.760261][T27783] bond18: (slave bridge17): Enslaving as an active interface with an up link [ 637.832572][T27786] macvlan2: entered promiscuous mode [ 637.860821][T27786] macvlan2: entered allmulticast mode [ 637.895405][T27786] bond18: entered promiscuous mode [ 637.917946][T27786] bridge17: entered promiscuous mode [ 637.955818][T27786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 637.968769][T27786] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 637.993461][T27786] bond18: left promiscuous mode [ 637.998478][T27786] bridge17: left promiscuous mode [ 638.036679][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 638.049796][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 638.058964][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 638.068910][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 638.080313][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 638.294683][T27812] 8021q: VLANs not supported on ip6_vti0 [ 638.602816][T27806] lo speed is unknown, defaulting to 1000 [ 638.782450][T27825] netlink: 'syz.4.6165': attribute type 8 has an invalid length. [ 639.027752][T27837] netlink: 'syz.4.6168': attribute type 1 has an invalid length. [ 639.035520][T27837] __nla_validate_parse: 35 callbacks suppressed [ 639.035538][T27837] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6168'. [ 639.050712][T27837] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6168'. [ 639.059570][T27837] netlink: 'syz.4.6168': attribute type 1 has an invalid length. [ 639.067306][T27837] netlink: 'syz.4.6168': attribute type 8 has an invalid length. [ 639.075038][T27837] netlink: 582 bytes leftover after parsing attributes in process `syz.4.6168'. [ 639.321740][T27849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6172'. [ 639.445760][ T5628] Bluetooth: hci1: command tx timeout [ 639.903850][T27868] x_tables: duplicate underflow at hook 1 [ 639.921183][T27868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6174'. [ 640.102084][T27883] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6176'. [ 640.138023][ T5628] Bluetooth: hci2: command tx timeout [ 640.173328][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880842f9000: rx timeout, send abort [ 640.675311][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880ab3da800: rx timeout, send abort [ 640.684698][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880842f9000: abort rx timeout. Force session deactivation [ 641.187341][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880ab3da800: abort rx timeout. Force session deactivation [ 642.205158][ T5628] Bluetooth: hci2: command tx timeout [ 642.785258][T27872] tipc: Enabling of bearer rejected, already enabled [ 642.950677][T27891] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6179'. [ 642.974139][T27891] netlink: 'syz.2.6179': attribute type 7 has an invalid length. [ 642.982757][T27896] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6180'. [ 642.994479][T27891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6179'. [ 643.300290][T27806] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.307761][T27806] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.315048][T27806] bridge_slave_0: entered allmulticast mode [ 643.322832][T27806] bridge_slave_0: entered promiscuous mode [ 643.338154][T27919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6187'. [ 643.356509][T27806] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.363883][T27806] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.371594][T27806] bridge_slave_1: entered allmulticast mode [ 643.380148][T27806] bridge_slave_1: entered promiscuous mode [ 643.476876][T27806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.506963][T27806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.291332][ T5628] Bluetooth: hci2: command tx timeout [ 646.366182][ T5628] Bluetooth: hci2: command tx timeout [ 647.231292][T27806] team0: Port device team_slave_0 added [ 647.353900][T27806] team0: Port device team_slave_1 added [ 647.483420][T27806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.510810][T27806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.571368][T27806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.605642][T27806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.625921][T27806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.675075][T27806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.914735][T27806] hsr_slave_0: entered promiscuous mode [ 647.936181][T27806] hsr_slave_1: entered promiscuous mode [ 647.965031][T27806] debugfs: 'hsr0' already exists in 'hsr' [ 647.992656][T27806] Cannot create hsr debugfs directory [ 648.026351][T28026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6233'. [ 648.085281][T28026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6233'. [ 648.227946][T28030] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 648.370964][T28037] netlink: 'syz.0.6240': attribute type 1 has an invalid length. [ 648.459512][T28044] xt_hashlimit: size too large, truncated to 1048576 [ 648.971801][T28048] bond17: (slave bridge15): making interface the new active one [ 648.980869][T28048] bond17: (slave bridge15): Enslaving as an active interface with an up link [ 649.000893][T28037] macvlan5: entered promiscuous mode [ 649.024144][T28037] macvlan5: entered allmulticast mode [ 649.035621][T28037] bond17: entered promiscuous mode [ 649.040768][T28037] bridge15: entered promiscuous mode [ 649.046832][T28037] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 649.055013][T28037] bond17: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 649.096329][T28037] bond17: left promiscuous mode [ 649.101364][T28037] bridge15: left promiscuous mode [ 649.130978][T28054] 8021q: VLANs not supported on lo [ 649.569935][T28081] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6250'. [ 649.608516][T28076] veth0: entered promiscuous mode [ 649.618824][T28076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6252'. [ 649.667503][T28084] xt_hashlimit: size too large, truncated to 1048576 [ 649.904490][T28097] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 650.085508][T28111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6260'. [ 650.094639][T28111] openvswitch: netlink: Flow actions attr not present in new flow. [ 650.103872][T28108] tipc: Started in network mode [ 650.108902][T28108] tipc: Node identity 72b1f428d6d, cluster identity 4711 [ 650.117300][T28108] tipc: Enabled bearer , priority 0 [ 650.144171][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6260'. [ 650.153403][T28111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6260'. [ 650.168086][T28108] syzkaller0: entered promiscuous mode [ 650.176638][T28108] syzkaller0: entered allmulticast mode [ 650.190358][T28108] tipc: Resetting bearer [ 650.204277][T28111] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6260'. [ 650.219317][T28112] xt_hashlimit: size too large, truncated to 1048576 [ 650.236421][T28107] tipc: Resetting bearer [ 650.243809][T28111] xt_hashlimit: size too large, truncated to 1048576 [ 650.327228][T28117] netlink: 'syz.1.6261': attribute type 1 has an invalid length. [ 653.111679][T28107] tipc: Disabling bearer [ 653.150523][T28117] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 653.319951][ T5758] tipc: Node number set to 2757882920 [ 653.541198][T28156] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6268'. [ 653.607005][T28154] tipc: Enabled bearer , priority 0 [ 653.949155][T28162] syzkaller0: entered promiscuous mode [ 653.958943][T28162] syzkaller0: entered allmulticast mode [ 653.969638][T28162] tipc: Resetting bearer [ 653.986138][T28177] veth0_vlan: entered promiscuous mode [ 654.009366][T28177] veth0_vlan: left promiscuous mode [ 654.029820][T28177] vlan0: entered promiscuous mode [ 654.050483][T28177] veth0_vlan: entered promiscuous mode [ 654.096909][T28184] netlink: 'syz.2.6275': attribute type 9 has an invalid length. [ 654.131785][T28152] tipc: Resetting bearer [ 656.541647][T28152] tipc: Disabling bearer [ 656.651627][T28194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6278'. [ 656.683441][ T5360] tipc: Node number set to 794589232 [ 656.711351][T14563] bridge_slave_1: left allmulticast mode [ 656.728282][T14563] bridge_slave_1: left promiscuous mode [ 656.756116][T14563] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.783719][T14563] pimreg: left allmulticast mode [ 656.941969][T14563] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 656.951097][T14563] ip6gre1 (unregistering): left promiscuous mode [ 657.050412][T14563] bond3 (unregistering): (slave gretap1): Releasing active interface [ 657.069973][T14563] bond3 (unregistering): (slave gretap1): the permanent HWaddr of slave - 46:ae:61:69:27:92 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 657.148841][T14563] bond21 (unregistering): (slave gretap2): Releasing active interface [ 657.300571][T14563] bond4 (unregistering): (slave geneve2): Releasing active interface [ 657.308854][T14563] geneve2 (unregistering): left allmulticast mode [ 657.432317][T14563] bond3 (unregistering): (slave bridge2): Releasing active interface [ 657.472176][T14563] bond6 (unregistering): (slave bridge3): Releasing active interface [ 657.529225][T14563] bond7 (unregistering): (slave bridge4): Releasing active interface [ 657.571703][T14563] bond8 (unregistering): (slave bridge5): Releasing active interface [ 657.662911][T14563] bond11 (unregistering): (slave bridge7): Releasing active interface [ 657.709768][T14563] bond13 (unregistering): (slave bridge8): Releasing active interface [ 657.759411][T14563] bond14 (unregistering): (slave bridge9): Releasing active interface [ 657.846174][T14563] bond23 (unregistering): (slave bridge11): Releasing active interface [ 657.954690][T14563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.967052][T14563] bond_slave_0: left promiscuous mode [ 657.975702][T14563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.985162][T14563] bond_slave_1: left promiscuous mode [ 657.991050][T14563] bond0 (unregistering): Released all slaves [ 658.005699][T14563] bond1 (unregistering): Released all slaves [ 658.026160][T14563] bond2 (unregistering): Released all slaves [ 658.049650][T14563] bond3 (unregistering): Released all slaves [ 658.075934][T14563] bond4 (unregistering): Released all slaves [ 658.099043][T14563] bond5 (unregistering): Released all slaves [ 658.133052][T14563] bond6 (unregistering): Released all slaves [ 658.156982][T14563] bond7 (unregistering): Released all slaves [ 658.180543][T14563] bond8 (unregistering): Released all slaves [ 658.218139][T14563] bond9 (unregistering): Released all slaves [ 658.242076][T14563] bond10 (unregistering): Released all slaves [ 658.266469][T14563] bond11 (unregistering): Released all slaves [ 658.287874][T14563] bond12 (unregistering): Released all slaves [ 658.314143][T14563] bond13 (unregistering): Released all slaves [ 658.333524][T14563] bond14 (unregistering): Released all slaves [ 658.367958][T14563] bond15 (unregistering): Released all slaves [ 658.392260][T14563] bond16 (unregistering): (slave vxcan13): Releasing backup interface [ 658.409161][T14563] bond16 (unregistering): (slave vxcan15): Releasing backup interface [ 658.425325][T14563] bond16 (unregistering): Released all slaves [ 658.446152][T14563] bond17 (unregistering): Released all slaves [ 658.465312][T14563] bond18 (unregistering): Released all slaves [ 658.487978][T14563] bond19 (unregistering): Released all slaves [ 658.516343][T14563] bond20 (unregistering): Released all slaves [ 658.536550][T14563] bond21 (unregistering): Released all slaves [ 658.562353][T14563] bond22 (unregistering): Released all slaves [ 658.582361][T14563] bond23 (unregistering): Released all slaves [ 658.616083][T14563] bond24 (unregistering): Released all slaves [ 658.915475][T27806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 658.973430][T27806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 659.016651][T27806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 659.061902][T27806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 659.080553][T27806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 659.089883][T28223] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6285'. [ 659.162258][T27806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 659.191268][T14563] : left promiscuous mode [ 659.271928][T27806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 659.307883][T27806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 659.322702][T28235] netlink: 'syz.1.6288': attribute type 29 has an invalid length. [ 659.378123][T28235] netlink: 'syz.1.6288': attribute type 29 has an invalid length. [ 659.518501][T28254] xt_hashlimit: size too large, truncated to 1048576 [ 659.645174][T27806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.664693][T27806] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.678927][T14564] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.686088][T14564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.739021][T14563] tipc: Left network mode [ 659.748047][T14564] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.755190][T14564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.832998][T27806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.843387][T27806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.899744][T28263] netlink: 'syz.1.6295': attribute type 8 has an invalid length. [ 659.925537][T14563] IPVS: stopping backup sync thread 7876 ... [ 660.340998][T28273] veth3: entered allmulticast mode [ 660.803400][T28297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6302'. [ 661.188900][T28308] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6305'. [ 661.235037][T28308] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6305'. [ 661.290760][T28314] xt_hashlimit: size too large, truncated to 1048576 [ 661.297937][T28308] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6305'. [ 661.328707][T28308] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6305'. [ 661.337680][T28308] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6305'. [ 661.758933][T27806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.063427][T28331] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 662.155995][T27806] veth0_vlan: entered promiscuous mode [ 662.172809][T27806] veth1_vlan: entered promiscuous mode [ 662.273840][T27806] veth0_macvtap: entered promiscuous mode [ 662.284568][T27806] veth1_macvtap: entered promiscuous mode [ 662.308612][T27806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.388125][T14563] hsr_slave_0: left promiscuous mode [ 662.395380][T14563] hsr_slave_1: left promiscuous mode [ 662.401756][T14563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.409947][T14563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.558481][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6315'. [ 662.583538][T28347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6315'. [ 662.826545][T27806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.860263][T14564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.869011][T14564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.919126][T14564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.940724][T14564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.224948][T14564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.253299][T14564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.265018][T28363] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 663.277536][T14555] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 663.410618][T14564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.445887][T14564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.576341][T28373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6323'. [ 663.591998][T28373] ip6gre3: entered allmulticast mode [ 663.995155][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 664.010189][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 664.018160][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 664.030408][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 664.054751][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 664.152836][T28385] netlink: 'syz.4.6320': attribute type 4 has an invalid length. [ 664.427026][T14563] IPVS: stop unused estimator thread 0... [ 664.971843][T28416] __nla_validate_parse: 3 callbacks suppressed [ 664.971862][T28416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6334'. [ 665.020464][T28418] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 665.452662][T28441] openvswitch: netlink: Key type 161 is out of range max 32 [ 665.495657][T28442] netlink: 'syz.4.6337': attribute type 1 has an invalid length. [ 665.771360][T28447] bond19: (slave bridge18): making interface the new active one [ 665.780039][T28447] bond19: (slave bridge18): Enslaving as an active interface with an up link [ 665.810799][T28442] macvlan2: entered promiscuous mode [ 665.830366][T28442] macvlan2: entered allmulticast mode [ 665.840733][T28442] bond19: entered promiscuous mode [ 665.855310][T28442] bridge18: entered promiscuous mode [ 665.871675][T28442] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 665.887074][T28442] bond19: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 665.926262][T28442] bond19: left promiscuous mode [ 665.937683][T28442] bridge18: left promiscuous mode [ 666.065249][ T50] Bluetooth: hci4: command tx timeout [ 666.149163][T28386] lo speed is unknown, defaulting to 1000 [ 667.256006][T28495] sctp: [Deprecated]: syz.3.6347 (pid 28495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 667.256006][T28495] Use struct sctp_sack_info instead [ 667.774698][T28516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6351'. [ 667.953118][T28520] xt_recent: Unsupported userspace flags (000000b1) [ 668.156034][ T50] Bluetooth: hci4: command tx timeout [ 668.302525][T28532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 668.471547][T16822] syz_tun (unregistering): left allmulticast mode [ 668.478024][T16822] syz_tun (unregistering): left promiscuous mode [ 668.493465][T28541] netlink: 'syz.2.6358': attribute type 1 has an invalid length. [ 668.494495][T16822] bridge0: port 3(syz_tun) entered disabled state [ 668.735266][T28544] bond1: (slave gretap1): making interface the new active one [ 668.745361][T28544] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 668.808357][T28557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6362'. [ 668.846517][T28541] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 668.914015][T28544] macvlan2: entered promiscuous mode [ 668.925101][T28544] macvlan2: entered allmulticast mode [ 668.964824][T28544] bond1: entered promiscuous mode [ 668.975619][T28544] gretap1: entered promiscuous mode [ 668.991533][T28544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 669.009246][T28544] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 669.089133][T28544] bond1: left promiscuous mode [ 669.093949][T28544] gretap1: left promiscuous mode [ 669.265485][T28571] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6364'. [ 669.609391][T28591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6368'. [ 669.662173][T28586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6367'. [ 669.680082][T28386] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.695154][T28386] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.713705][T28386] bridge_slave_0: entered allmulticast mode [ 669.741216][T28386] bridge_slave_0: entered promiscuous mode [ 669.765966][T28386] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.775942][T28386] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.790162][T28386] bridge_slave_1: entered allmulticast mode [ 669.798320][T28386] bridge_slave_1: entered promiscuous mode [ 669.969382][T28386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.010848][T28386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.117831][T28617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6375'. [ 670.126740][T28617] netlink: 'syz.1.6375': attribute type 1 has an invalid length. [ 670.143457][T28386] team0: Port device team_slave_0 added [ 670.156226][T28617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6375'. [ 670.178129][T28386] team0: Port device team_slave_1 added [ 670.181980][T28617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6375'. [ 670.192558][T28617] netlink: 'syz.1.6375': attribute type 1 has an invalid length. [ 670.203741][T28617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6375'. [ 670.245273][ T50] Bluetooth: hci4: command tx timeout [ 670.286378][T28386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.294535][T28386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.322731][T28386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.336559][T28625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6378'. [ 670.358431][T28386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.373655][T28386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.400658][T28386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.615552][T28386] hsr_slave_0: entered promiscuous mode [ 670.622610][T28386] hsr_slave_1: entered promiscuous mode [ 670.629615][T28386] debugfs: 'hsr0' already exists in 'hsr' [ 670.635744][T28386] Cannot create hsr debugfs directory [ 670.756141][T28650] ip6t_srh: unknown srh invflags 4000 [ 670.830043][T28647] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 670.850987][T28647] bond2 (unregistering): Released all slaves [ 671.009199][T28662] openvswitch: netlink: IP tunnel dst address not specified [ 671.193229][T28669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6387'. [ 671.373487][T28386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 671.397471][T28386] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.420487][T28685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6389'. [ 671.461147][T28683] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6390'. [ 671.609032][T28677] netlink: 'syz.3.6389': attribute type 1 has an invalid length. [ 671.704590][T28677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6389'. [ 672.038894][T28386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.049210][T28386] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.078392][T28714] syzkaller0: entered promiscuous mode [ 672.083913][T28714] syzkaller0: entered allmulticast mode [ 672.312995][ T50] Bluetooth: hci4: command tx timeout [ 672.333443][T28733] netlink: 83 bytes leftover after parsing attributes in process `syz.2.6400'. [ 672.496121][T28740] netlink: 'syz.4.6401': attribute type 64 has an invalid length. [ 672.573735][T28386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 672.615961][T28386] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.008673][T28386] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.043942][T28386] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.185948][T28771] vlan0: entered promiscuous mode [ 673.529648][T28386] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 673.553296][T28386] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 673.613462][T28386] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 673.630750][T28386] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.639168][T28386] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 673.650773][T28386] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 673.720702][T28386] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 673.734703][T28386] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 674.110879][T28802] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.118550][T28802] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.420496][T28802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.465842][T28802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.851065][T14563] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.863762][T14563] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.872666][T14563] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.882329][T14563] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.926041][T28828] netlink: 'syz.2.6418': attribute type 1 has an invalid length. [ 674.991393][T28828] bond2: (slave bridge2): making interface the new active one [ 674.999744][T28828] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 675.025030][T28828] macvlan2: entered promiscuous mode [ 675.030463][T28828] macvlan2: entered allmulticast mode [ 675.040149][T28828] bond2: entered promiscuous mode [ 675.045250][T28828] bridge2: entered promiscuous mode [ 675.051024][T28828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 675.058713][T28828] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 675.074805][T28828] bond2: left promiscuous mode [ 675.079556][T28828] bridge2: left promiscuous mode [ 675.116612][T28386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.149814][T28386] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.163396][T14566] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.170560][T14566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.196656][T14566] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.203812][T14566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.266163][T28386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 675.276586][T28386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 675.413344][T28844] netlink: 'syz.4.6422': attribute type 1 has an invalid length. [ 675.470109][T28851] __nla_validate_parse: 4 callbacks suppressed [ 675.470128][T28851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6424'. [ 675.540190][T28844] bond20: entered promiscuous mode [ 675.545806][T28844] 8021q: adding VLAN 0 to HW filter on device bond20 [ 675.556454][T28846] netlink: 'syz.2.6423': attribute type 1 has an invalid length. [ 675.610750][T28844] 8021q: adding VLAN 0 to HW filter on device bond20 [ 675.618005][T28844] bond20: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 675.638915][T28844] bond20: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 675.652809][T28844] bond20: (slave ip6gre1): making interface the new active one [ 675.675182][T28844] ip6gre1: entered promiscuous mode [ 675.683600][T28844] bond20: (slave ip6gre1): Enslaving as an active interface with an up link [ 676.033709][T28891] netlink: 'syz.3.6432': attribute type 1 has an invalid length. [ 676.137887][T28891] bond1: (slave gretap1): making interface the new active one [ 676.166337][T28891] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 676.190242][T28891] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 676.205438][T28891] macvlan2: entered promiscuous mode [ 676.210765][T28891] macvlan2: entered allmulticast mode [ 676.216988][T28891] bond1: entered promiscuous mode [ 676.222011][T28891] gretap1: entered promiscuous mode [ 676.240008][T28891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 676.248738][T28891] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 676.274443][T28891] bond1: left promiscuous mode [ 676.279253][T28891] gretap1: left promiscuous mode [ 676.293109][T28900] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6434'. [ 676.323022][T28386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.436757][T28904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6435'. [ 676.448693][T28904] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6435'. [ 676.473469][T28386] veth0_vlan: entered promiscuous mode [ 676.489186][T28386] veth1_vlan: entered promiscuous mode [ 676.519009][T28906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6436'. [ 676.522058][T28386] veth0_macvtap: entered promiscuous mode [ 676.538390][T28386] veth1_macvtap: entered promiscuous mode [ 676.590773][T28386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.603289][T28386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.622022][T28908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6437'. [ 676.628312][T14556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.631311][T28908] netlink: 'syz.4.6437': attribute type 7 has an invalid length. [ 676.639670][T14556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.639704][T14556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.639735][T14556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.648440][T28908] netlink: 'syz.4.6437': attribute type 8 has an invalid length. [ 676.691271][T28908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6437'. [ 677.151344][T14542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.181474][T14542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.264960][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.279581][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.521832][T28941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6445'. [ 677.763881][T28953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6325'. [ 678.193615][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 678.211924][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 678.219929][ T5628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 678.230222][ T5628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 678.240285][ T5628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 678.389954][T28977] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 678.640468][T28989] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6458'. [ 679.188548][T28964] lo speed is unknown, defaulting to 1000 [ 679.391855][T29032] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 679.429641][T29032] bond1 (unregistering): Released all slaves [ 679.716555][T29051] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 679.874626][T29047] syzkaller0: entered promiscuous mode [ 679.896763][T29047] syzkaller0: entered allmulticast mode [ 680.296358][ T5628] Bluetooth: hci0: command tx timeout [ 680.321752][ T29] audit: type=1804 audit(1777819185.324:8): pid=29084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.6485" name="/newroot/92/cgroup.controllers" dev="tmpfs" ino=487 res=1 errno=0 [ 680.359400][ T29] audit: type=1800 audit(1777819185.374:9): pid=29084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6485" name="cgroup.controllers" dev="tmpfs" ino=487 res=0 errno=0 [ 680.382979][T29083] bridge0: port 3(batadv1) entered blocking state [ 680.389600][T29083] bridge0: port 3(batadv1) entered disabled state [ 680.396479][T29083] batadv1: entered allmulticast mode [ 680.404282][T29083] batadv1: entered promiscuous mode [ 680.439669][T29088] Bluetooth: MGMT ver 1.23 [ 680.483386][T28964] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.490622][T28964] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.497949][T28964] bridge_slave_0: entered allmulticast mode [ 680.505821][T28964] bridge_slave_0: entered promiscuous mode [ 680.513587][T29093] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 680.522537][T28964] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.529751][T28964] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.537054][T28964] bridge_slave_1: entered allmulticast mode [ 680.544878][T28964] bridge_slave_1: entered promiscuous mode [ 680.619822][T28964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.632391][T28964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.670150][T28964] team0: Port device team_slave_0 added [ 680.693589][T28964] team0: Port device team_slave_1 added [ 680.726000][T28964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.740437][T28964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.766343][T28964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.857239][T14563] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 680.866688][T14563] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 680.883227][T28964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.890197][T28964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.951353][T28964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.952345][T29108] netlink: 'syz.0.6489': attribute type 4 has an invalid length. [ 681.012036][T28964] hsr_slave_0: entered promiscuous mode [ 681.018703][T28964] hsr_slave_1: entered promiscuous mode [ 681.024840][T28964] debugfs: 'hsr0' already exists in 'hsr' [ 681.038871][T28964] Cannot create hsr debugfs directory [ 681.143119][T29105] __nla_validate_parse: 3 callbacks suppressed [ 681.143155][T29105] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6490'. [ 681.161293][T29105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6490'. [ 681.330554][T29111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6491'. [ 682.401980][ T5628] Bluetooth: hci0: command tx timeout [ 683.771265][T29129] IPv6: sit1: Disabled Multicast RS [ 683.920307][T28964] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.933168][T28964] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.032604][T29144] tipc: Enabling of bearer rejected, failed to enable media [ 684.134078][T28964] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.161258][T29149] netlink: 'syz.1.6503': attribute type 58 has an invalid length. [ 684.161282][T29149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6503'. [ 684.183779][T28964] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.398357][T28964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.410456][T28964] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.444406][ T5628] Bluetooth: hci0: command tx timeout [ 684.455705][T29151] lo: Caught tx_queue_len zero misconfig [ 684.549430][T28964] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 684.576768][T28964] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.720906][T29170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6511'. [ 684.947668][T28964] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 684.990900][T28964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 684.998315][T29189] netlink: 'syz.3.6517': attribute type 12 has an invalid length. [ 685.006143][T29189] netlink: 'syz.3.6517': attribute type 29 has an invalid length. [ 685.013953][T29189] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6517'. [ 685.027601][T29189] netlink: 'syz.3.6517': attribute type 1 has an invalid length. [ 685.035347][T29189] netlink: 'syz.3.6517': attribute type 2 has an invalid length. [ 685.048122][T28964] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 685.061093][T28964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 685.091844][T29192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6518'. [ 685.141782][T28964] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 685.181865][T29200] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6519'. [ 685.201087][T28964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 685.209454][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6518'. [ 685.213427][T29200] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.6519'. [ 685.224112][T29192] xfrm1: entered promiscuous mode [ 685.232764][T29192] xfrm1: entered allmulticast mode [ 685.238292][T28964] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 685.249054][T28964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 685.499898][T29220] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20001 [ 685.560393][T28964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.606639][T28964] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.619583][T14542] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.638205][T14542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.657372][T14542] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.664518][T14542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.704935][T28964] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.714391][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.715291][T28964] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.013273][T29242] syzkaller1: entered promiscuous mode [ 686.018913][T29242] syzkaller1: entered allmulticast mode [ 686.180882][T29255] lo speed is unknown, defaulting to 1000 [ 686.243861][T28964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.646177][ T5628] Bluetooth: hci0: command tx timeout [ 686.654197][T28964] veth0_vlan: entered promiscuous mode [ 686.666179][T28964] veth1_vlan: entered promiscuous mode [ 686.692475][T28964] veth0_macvtap: entered promiscuous mode [ 686.702977][T28964] veth1_macvtap: entered promiscuous mode [ 686.748325][T28964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.782458][T28964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.852934][T14556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.922158][T14556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.930910][T14556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.939619][T14556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.992829][T29274] __nla_validate_parse: 64 callbacks suppressed [ 686.992848][T29274] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6531'. [ 687.141799][T14542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.149644][T14542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.157068][T29285] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6533'. [ 687.213721][T29286] macvlan0: entered promiscuous mode [ 687.224441][T14542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.232377][T14542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.557298][T29305] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6539'. [ 687.882796][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 687.902408][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 687.910968][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 687.931568][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 687.940723][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 688.074194][T29315] atomic_op ffff88807a036998 conn xmit_atomic 0000000000000000 [ 688.236844][T29318] netlink: 'syz.2.6543': attribute type 21 has an invalid length. [ 688.244705][T29318] IPv6: NLM_F_CREATE should be specified when creating new route [ 688.772349][T29312] lo speed is unknown, defaulting to 1000 [ 688.878554][T29349] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 688.889540][T29349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6551'. [ 689.111934][T29360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6554'. [ 689.137603][T29360] netlink: 'syz.4.6554': attribute type 1 has an invalid length. [ 689.145612][T29360] netlink: 'syz.4.6554': attribute type 2 has an invalid length. [ 689.404136][T29366] syzkaller0: entered promiscuous mode [ 689.424226][T29366] syzkaller0: entered allmulticast mode [ 689.629388][T29312] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.636623][T29312] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.643915][T29312] bridge_slave_0: entered allmulticast mode [ 689.651705][T29312] bridge_slave_0: entered promiscuous mode [ 689.660246][T29312] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.667375][T29312] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.674652][T29312] bridge_slave_1: entered allmulticast mode [ 689.682545][T29312] bridge_slave_1: entered promiscuous mode [ 689.744984][T29312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.762318][T29312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.795530][T29312] team0: Port device team_slave_0 added [ 689.804673][T29312] team0: Port device team_slave_1 added [ 689.845387][T29312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.852349][T29312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.878217][T29312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.890182][T29312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.897201][T29312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.923047][T29312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.112313][T29312] hsr_slave_0: entered promiscuous mode [ 690.139583][T29312] hsr_slave_1: entered promiscuous mode [ 690.159459][T29312] debugfs: 'hsr0' already exists in 'hsr' [ 690.167957][T29312] Cannot create hsr debugfs directory [ 690.205363][ T50] Bluetooth: hci3: command tx timeout [ 690.493089][T29402] syz_tun: refused to change device tx_queue_len [ 690.557667][T29405] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6570'. [ 690.595681][T29312] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.605734][T29312] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.628589][T29405] syzkaller1: entered promiscuous mode [ 690.634124][T29405] syzkaller1: entered allmulticast mode [ 690.932924][T29312] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.944672][T29312] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.063264][T29312] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.075798][T29312] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.090786][T29410] netlink: 'syz.0.6571': attribute type 1 has an invalid length. [ 691.144171][T29410] bond1: (slave gretap1): making interface the new active one [ 691.153237][T29410] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 691.194247][T29410] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 691.213027][T29410] macvlan0: entered promiscuous mode [ 691.218328][T29410] macvlan0: entered allmulticast mode [ 691.224366][T29410] bond1: entered promiscuous mode [ 691.229495][T29410] gretap1: entered promiscuous mode [ 691.235191][T29410] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 691.242769][T29410] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 691.258850][T29410] bond1: left promiscuous mode [ 691.263610][T29410] gretap1: left promiscuous mode [ 691.431341][T29312] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.442676][T29312] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.900728][T29429] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 692.012131][T29439] netlink: 'syz.2.6583': attribute type 64 has an invalid length. [ 692.060604][T29440] netlink: 'syz.2.6583': attribute type 64 has an invalid length. [ 692.076073][T29312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 692.140447][T29312] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 692.148440][T29312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 692.162435][T29312] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 692.225634][T29312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 692.243235][T29312] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 692.251223][T29312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 692.285514][T29312] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 692.310230][ T50] Bluetooth: hci3: command tx timeout [ 692.347438][T29454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6588'. [ 692.374834][T29458] netlink: 'syz.2.6587': attribute type 1 has an invalid length. [ 692.462446][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6590'. [ 692.547032][T29458] bond3: (slave bridge3): making interface the new active one [ 692.575849][T29458] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 692.658641][T29464] macvlan2: entered promiscuous mode [ 692.665417][T29464] macvlan2: entered allmulticast mode [ 692.671900][T29464] bond3: entered promiscuous mode [ 692.678303][T29464] bridge3: entered promiscuous mode [ 692.687606][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6590'. [ 692.711109][T29464] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 692.724705][T29464] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 692.738988][T29472] netlink: 51 bytes leftover after parsing attributes in process `syz.3.6591'. [ 692.746566][T29464] bond3: left promiscuous mode [ 692.767179][T29464] bridge3: left promiscuous mode [ 692.843008][T29312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.855730][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6590'. [ 692.920130][T29312] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.979005][T29475] IPVS: set_ctl: invalid protocol: 44 172.20.20.26:20003 [ 693.099092][T14556] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.106291][T14556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.137435][T29465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6590'. [ 693.167660][T29483] netlink: 'syz.3.6594': attribute type 10 has an invalid length. [ 693.171515][T29477] syzkaller1: entered promiscuous mode [ 693.189368][T29477] syzkaller1: entered allmulticast mode [ 693.252512][T29483] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.261935][T29483] bond0: (slave team0): Enslaving as an active interface with an up link [ 693.281261][T14564] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.288485][T14564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.482111][T29490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6596'. [ 693.505743][T29312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 693.517696][T29312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 693.679063][T29498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6599'. [ 693.707843][T29498] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 693.783530][T29502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6600'. [ 693.810551][T29498] netlink: 'syz.2.6599': attribute type 11 has an invalid length. [ 693.829004][T29503] netlink: 'syz.0.6601': attribute type 1 has an invalid length. [ 693.977619][T29503] bond2: (slave bridge2): making interface the new active one [ 693.987406][T29503] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 694.020180][T29503] macvlan0: entered promiscuous mode [ 694.030003][T29503] macvlan0: entered allmulticast mode [ 694.036439][T29503] bond2: entered promiscuous mode [ 694.041514][T29503] bridge2: entered promiscuous mode [ 694.047735][T29503] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 694.056213][T29503] bond2: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 694.072310][T29503] bond2: left promiscuous mode [ 694.077423][T29503] bridge2: left promiscuous mode [ 694.365885][ T50] Bluetooth: hci3: command tx timeout [ 694.418643][T29518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6605'. [ 694.680962][T29312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.709504][T29539] openvswitch: netlink: IP tunnel dst address not specified [ 694.880528][T29312] veth0_vlan: entered promiscuous mode [ 694.918137][T29542] netlink: 'syz.3.6614': attribute type 1 has an invalid length. [ 694.935535][T29312] veth1_vlan: entered promiscuous mode [ 695.018667][T29550] netlink: 'syz.2.6615': attribute type 12 has an invalid length. [ 695.054887][T29542] bond2: (slave bridge4): making interface the new active one [ 695.114180][T29542] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 695.164082][T29542] macvlan2: entered promiscuous mode [ 695.169426][T29542] macvlan2: entered allmulticast mode [ 695.179845][T29542] bond2: entered promiscuous mode [ 695.183765][T29554] netlink: 'syz.2.6615': attribute type 21 has an invalid length. [ 695.184906][T29542] bridge4: entered promiscuous mode [ 695.185711][T29542] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 695.254519][T29542] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 695.270772][T29542] bond2: left promiscuous mode [ 695.275570][T29542] bridge4: left promiscuous mode [ 695.393285][T29312] veth0_macvtap: entered promiscuous mode [ 695.443627][T29312] veth1_macvtap: entered promiscuous mode [ 695.514721][T29312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.541141][T29312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.577480][T14566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.587378][T14566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.613350][T14566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.622290][T14566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.746452][T29578] netlink: 'syz.3.6625': attribute type 3 has an invalid length. [ 695.846965][T29583] xt_TCPMSS: Only works on TCP SYN packets [ 695.881479][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.889721][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.934404][T11095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.942257][T11095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.076719][T29592] bond4: (slave bridge4): making interface the new active one [ 696.115639][T29592] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 696.133415][T29592] macvlan2: entered promiscuous mode [ 696.138755][T29592] macvlan2: entered allmulticast mode [ 696.149331][T29592] bond4: entered promiscuous mode [ 696.154392][T29592] bridge4: entered promiscuous mode [ 696.160492][T29592] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 696.168850][T29592] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 696.172299][T29598] validate_nla: 1 callbacks suppressed [ 696.172314][T29598] netlink: 'syz.3.6633': attribute type 1 has an invalid length. [ 696.185001][T29592] bond4: left promiscuous mode [ 696.225937][T29592] bridge4: left promiscuous mode [ 696.297666][T29598] bond3: entered promiscuous mode [ 696.303291][T29598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 696.378397][T29598] 8021q: adding VLAN 0 to HW filter on device bond3 [ 696.385609][T29598] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 696.395872][T29598] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 696.463754][T29598] bond3: (slave ip6gre1): making interface the new active one [ 696.471542][T29598] ip6gre1: entered promiscuous mode [ 696.478157][T29598] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 696.486009][ T50] Bluetooth: hci3: command tx timeout [ 696.809903][T14564] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.827035][T14564] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.844164][T14564] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 696.857030][T14564] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.008387][T29639] lo: entered allmulticast mode [ 697.018210][T29639] lo: left allmulticast mode [ 697.323715][T29655] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 697.430125][T29662] bridge0: port 3(veth0_to_bridge) entered blocking state [ 697.438118][T29662] bridge0: port 3(veth0_to_bridge) entered disabled state [ 697.445519][T29662] veth0_to_bridge: entered allmulticast mode [ 697.453428][T29662] veth0_to_bridge: entered promiscuous mode [ 697.459540][T29662] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.473199][T29662] bridge0: port 3(veth0_to_bridge) entered blocking state [ 697.480999][T29662] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 697.494201][T29663] __nla_validate_parse: 16 callbacks suppressed [ 697.494220][T29663] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6657'. [ 697.559850][T29674] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6657'. [ 697.570784][T29674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6657'. [ 697.773248][T29678] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6662'. [ 697.921533][T29693] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6665'. [ 697.953086][ T50] block nbd0: Receive control failed (result -1) [ 697.969141][T29693] netlink: 'syz.1.6665': attribute type 16 has an invalid length. [ 697.977181][T29693] netlink: 'syz.1.6665': attribute type 17 has an invalid length. [ 698.082014][T29697] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 698.107398][T29685] netlink: 'syz.4.6664': attribute type 11 has an invalid length. [ 698.117314][T29685] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.6664'. [ 698.490561][T29711] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 698.531284][T29711] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 698.539962][T29711] [ 698.542308][T29711] ====================================================== [ 698.549326][T29711] WARNING: possible circular locking dependency detected [ 698.556343][T29711] syzkaller #0 Not tainted [ 698.560743][T29711] ------------------------------------------------------ [ 698.567745][T29711] syz.2.6673/29711 is trying to acquire lock: [ 698.573803][T29711] ffffffff8ea854e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x40/0x660 [ 698.583137][T29711] [ 698.583137][T29711] but task is already holding lock: [ 698.590510][T29711] ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 698.599393][T29711] [ 698.599393][T29711] which lock already depends on the new lock. [ 698.599393][T29711] [ 698.609788][T29711] [ 698.609788][T29711] the existing dependency chain (in reverse order) is: [ 698.618791][T29711] [ 698.618791][T29711] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 698.625916][T29711] __mutex_lock+0x1a3/0x1550 [ 698.631036][T29711] get_device_parent+0x16f/0x3a0 [ 698.636486][T29711] device_add+0x2e1/0xbb0 [ 698.641323][T29711] device_create+0x269/0x300 [ 698.646421][T29711] msr_device_create+0x33/0x50 [ 698.651700][T29711] cpuhp_invoke_callback+0x445/0x860 [ 698.657499][T29711] cpuhp_thread_fun+0x36b/0x780 [ 698.662864][T29711] smpboot_thread_fn+0x541/0xa50 [ 698.668316][T29711] kthread+0x388/0x470 [ 698.672900][T29711] ret_from_fork+0x514/0xb70 [ 698.678003][T29711] ret_from_fork_asm+0x1a/0x30 [ 698.683281][T29711] [ 698.683281][T29711] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 698.690826][T29711] cpuhp_thread_fun+0x127/0x780 [ 698.696187][T29711] smpboot_thread_fn+0x541/0xa50 [ 698.701633][T29711] kthread+0x388/0x470 [ 698.706214][T29711] ret_from_fork+0x514/0xb70 [ 698.711310][T29711] ret_from_fork_asm+0x1a/0x30 [ 698.716582][T29711] [ 698.716582][T29711] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 698.724308][T29711] cpus_read_lock+0x42/0x160 [ 698.729516][T29711] static_key_slow_inc+0x12/0x30 [ 698.734976][T29711] udp_tunnel_encap_enable+0x86/0xb0 [ 698.740774][T29711] udp_lib_setsockopt+0x2da/0x6b0 [ 698.746309][T29711] udpv6_setsockopt+0x67/0xb0 [ 698.751493][T29711] do_sock_setsockopt+0x17c/0x1b0 [ 698.757026][T29711] __x64_sys_setsockopt+0x13d/0x1b0 [ 698.762733][T29711] do_syscall_64+0x15f/0xf80 [ 698.767834][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.774241][T29711] [ 698.774241][T29711] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 698.781976][T29711] lock_sock_nested+0x41/0x100 [ 698.787255][T29711] inet_shutdown+0x6a/0x390 [ 698.792272][T29711] nbd_mark_nsock_dead+0x2e9/0x560 [ 698.797889][T29711] recv_work+0x1c2e/0x1d40 [ 698.802810][T29711] process_scheduled_works+0xb5d/0x1860 [ 698.808863][T29711] worker_thread+0xa53/0xfc0 [ 698.813962][T29711] kthread+0x388/0x470 [ 698.818540][T29711] ret_from_fork+0x514/0xb70 [ 698.823638][T29711] ret_from_fork_asm+0x1a/0x30 [ 698.828912][T29711] [ 698.828912][T29711] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 698.836549][T29711] __mutex_lock+0x1a3/0x1550 [ 698.841656][T29711] nbd_queue_rq+0x37b/0x1100 [ 698.846755][T29711] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 698.852815][T29711] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 698.859667][T29711] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 698.866170][T29711] blk_mq_run_hw_queue+0x348/0x4f0 [ 698.871793][T29711] blk_mq_dispatch_list+0xd16/0xe10 [ 698.877504][T29711] blk_mq_flush_plug_list+0x48d/0x570 [ 698.883395][T29711] __blk_flush_plug+0x3ed/0x4d0 [ 698.888759][T29711] __submit_bio+0x28d/0x580 [ 698.893781][T29711] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 698.899935][T29711] block_read_full_folio+0x599/0x830 [ 698.905733][T29711] filemap_read_folio+0x137/0x3b0 [ 698.911271][T29711] do_read_cache_folio+0x358/0x590 [ 698.916892][T29711] read_part_sector+0xb6/0x2b0 [ 698.922171][T29711] adfspart_check_ICS+0xb1/0x960 [ 698.927623][T29711] bdev_disk_changed+0x817/0x1770 [ 698.933164][T29711] blkdev_get_whole+0x380/0x510 [ 698.938529][T29711] bdev_open+0x31e/0xd30 [ 698.943283][T29711] blkdev_open+0x470/0x610 [ 698.948203][T29711] do_dentry_open+0x785/0x14e0 [ 698.953473][T29711] vfs_open+0x3b/0x340 [ 698.958052][T29711] path_openat+0x2e08/0x3860 [ 698.963158][T29711] do_file_open+0x23e/0x4a0 [ 698.968173][T29711] do_sys_openat2+0x113/0x200 [ 698.973362][T29711] __x64_sys_openat+0x138/0x170 [ 698.978724][T29711] do_syscall_64+0x15f/0xf80 [ 698.983826][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.990242][T29711] [ 698.990242][T29711] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 698.997440][T29711] __mutex_lock+0x1a3/0x1550 [ 699.002543][T29711] nbd_queue_rq+0xc6/0x1100 [ 699.007553][T29711] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 699.013611][T29711] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 699.020453][T29711] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 699.026948][T29711] blk_mq_run_hw_queue+0x348/0x4f0 [ 699.032572][T29711] blk_mq_dispatch_list+0xd16/0xe10 [ 699.038283][T29711] blk_mq_flush_plug_list+0x48d/0x570 [ 699.044169][T29711] __blk_flush_plug+0x3ed/0x4d0 [ 699.049533][T29711] __submit_bio+0x28d/0x580 [ 699.054547][T29711] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 699.060692][T29711] block_read_full_folio+0x599/0x830 [ 699.066490][T29711] filemap_read_folio+0x137/0x3b0 [ 699.072028][T29711] do_read_cache_folio+0x358/0x590 [ 699.077654][T29711] read_part_sector+0xb6/0x2b0 [ 699.082935][T29711] adfspart_check_ICS+0xb1/0x960 [ 699.088386][T29711] bdev_disk_changed+0x817/0x1770 [ 699.093925][T29711] blkdev_get_whole+0x380/0x510 [ 699.099287][T29711] bdev_open+0x31e/0xd30 [ 699.104044][T29711] blkdev_open+0x470/0x610 [ 699.108967][T29711] do_dentry_open+0x785/0x14e0 [ 699.114236][T29711] vfs_open+0x3b/0x340 [ 699.118810][T29711] path_openat+0x2e08/0x3860 [ 699.123911][T29711] do_file_open+0x23e/0x4a0 [ 699.128931][T29711] do_sys_openat2+0x113/0x200 [ 699.134127][T29711] __x64_sys_openat+0x138/0x170 [ 699.139491][T29711] do_syscall_64+0x15f/0xf80 [ 699.144595][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.150997][T29711] [ 699.150997][T29711] -> #3 (set->srcu){.+.+}-{0:0}: [ 699.158109][T29711] __synchronize_srcu+0xca/0x300 [ 699.163562][T29711] elevator_switch+0x1e8/0x7a0 [ 699.168854][T29711] elevator_change+0x2cc/0x450 [ 699.174146][T29711] elevator_set_default+0x36c/0x430 [ 699.179873][T29711] blk_register_queue+0x3e9/0x4e0 [ 699.185414][T29711] __add_disk+0x677/0xd50 [ 699.190257][T29711] add_disk_fwnode+0xfb/0x480 [ 699.195440][T29711] nbd_dev_add+0x72c/0xb50 [ 699.200365][T29711] nbd_init+0x168/0x1f0 [ 699.205026][T29711] do_one_initcall+0x250/0x870 [ 699.210301][T29711] do_initcall_level+0x104/0x190 [ 699.215752][T29711] do_initcalls+0x59/0xa0 [ 699.220599][T29711] kernel_init_freeable+0x2a6/0x3e0 [ 699.226308][T29711] kernel_init+0x1d/0x1d0 [ 699.231157][T29711] ret_from_fork+0x514/0xb70 [ 699.236256][T29711] ret_from_fork_asm+0x1a/0x30 [ 699.241531][T29711] [ 699.241531][T29711] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 699.249339][T29711] __mutex_lock+0x1a3/0x1550 [ 699.254615][T29711] elevator_change+0x1b3/0x450 [ 699.259894][T29711] elevator_set_none+0xb5/0x140 [ 699.265257][T29711] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 699.271571][T29711] nbd_start_device+0x17f/0xb10 [ 699.276932][T29711] nbd_genl_connect+0x165b/0x1cf0 [ 699.282471][T29711] genl_family_rcv_msg_doit+0x22a/0x330 [ 699.288540][T29711] genl_rcv_msg+0x61c/0x7a0 [ 699.293569][T29711] netlink_rcv_skb+0x232/0x4b0 [ 699.298843][T29711] genl_rcv+0x28/0x40 [ 699.303336][T29711] netlink_unicast+0x75c/0x8e0 [ 699.308606][T29711] netlink_sendmsg+0x813/0xb40 [ 699.313880][T29711] ____sys_sendmsg+0x972/0x9f0 [ 699.319152][T29711] ___sys_sendmsg+0x2a5/0x360 [ 699.324347][T29711] __x64_sys_sendmsg+0x1bd/0x2a0 [ 699.329810][T29711] do_syscall_64+0x15f/0xf80 [ 699.334923][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.341328][T29711] [ 699.341328][T29711] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 699.349923][T29711] blk_alloc_queue+0x546/0x680 [ 699.355199][T29711] __blk_mq_alloc_disk+0x197/0x390 [ 699.360823][T29711] nbd_dev_add+0x499/0xb50 [ 699.365746][T29711] nbd_init+0x168/0x1f0 [ 699.370409][T29711] do_one_initcall+0x250/0x870 [ 699.375690][T29711] do_initcall_level+0x104/0x190 [ 699.381142][T29711] do_initcalls+0x59/0xa0 [ 699.385983][T29711] kernel_init_freeable+0x2a6/0x3e0 [ 699.391691][T29711] kernel_init+0x1d/0x1d0 [ 699.396534][T29711] ret_from_fork+0x514/0xb70 [ 699.401633][T29711] ret_from_fork_asm+0x1a/0x30 [ 699.406926][T29711] [ 699.406926][T29711] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 699.414146][T29711] __lock_acquire+0x15a5/0x2cf0 [ 699.419521][T29711] lock_acquire+0x106/0x350 [ 699.424540][T29711] fs_reclaim_acquire+0x71/0x100 [ 699.430011][T29711] __kmalloc_cache_noprof+0x40/0x660 [ 699.435844][T29711] get_device_parent+0x255/0x3a0 [ 699.441295][T29711] device_add+0x2e1/0xbb0 [ 699.446136][T29711] firmware_fallback_sysfs+0x2e4/0xa30 [ 699.452110][T29711] _request_firmware+0x1052/0x1780 [ 699.457736][T29711] request_firmware+0x36/0x50 [ 699.462930][T29711] devlink_compat_flash_update+0x15a/0x2c0 [ 699.469259][T29711] dev_ethtool+0x1874/0x1ae0 [ 699.474386][T29711] dev_ioctl+0x392/0x1150 [ 699.479239][T29711] sock_do_ioctl+0x23e/0x320 [ 699.484353][T29711] sock_ioctl+0x5c6/0x7f0 [ 699.489204][T29711] __se_sys_ioctl+0xfc/0x170 [ 699.494313][T29711] do_syscall_64+0x15f/0xf80 [ 699.499420][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.505839][T29711] [ 699.505839][T29711] other info that might help us debug this: [ 699.505839][T29711] [ 699.516051][T29711] Chain exists of: [ 699.516051][T29711] fs_reclaim --> cpuhp_state-up --> gdp_mutex [ 699.516051][T29711] [ 699.528043][T29711] Possible unsafe locking scenario: [ 699.528043][T29711] [ 699.535483][T29711] CPU0 CPU1 [ 699.540834][T29711] ---- ---- [ 699.546183][T29711] lock(gdp_mutex); [ 699.550066][T29711] lock(cpuhp_state-up); [ 699.556899][T29711] lock(gdp_mutex); [ 699.563299][T29711] lock(fs_reclaim); [ 699.567268][T29711] [ 699.567268][T29711] *** DEADLOCK *** [ 699.567268][T29711] [ 699.575399][T29711] 3 locks held by syz.2.6673/29711: [ 699.580589][T29711] #0: ffff88807bb62258 (&devlink->lock_key#11){+.+.}-{4:4}, at: devlink_compat_flash_update+0xa6/0x2c0 [ 699.591739][T29711] #1: ffffffff8e7f9ae8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 699.602207][T29711] #2: ffffffff8f38d3a0 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 699.611530][T29711] [ 699.611530][T29711] stack backtrace: [ 699.617411][T29711] CPU: 0 UID: 0 PID: 29711 Comm: syz.2.6673 Not tainted syzkaller #0 PREEMPT(full) [ 699.617443][T29711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.617455][T29711] Call Trace: [ 699.617465][T29711] [ 699.617475][T29711] dump_stack_lvl+0xe8/0x150 [ 699.617495][T29711] print_circular_bug+0x2e1/0x300 [ 699.617519][T29711] check_noncircular+0x12e/0x150 [ 699.617542][T29711] __lock_acquire+0x15a5/0x2cf0 [ 699.617563][T29711] ? lockdep_unlock+0x5d/0xd0 [ 699.617577][T29711] ? __lock_acquire+0x146e/0x2cf0 [ 699.617595][T29711] ? __mutex_lock+0x319/0x1550 [ 699.617619][T29711] ? __kmalloc_cache_noprof+0x40/0x660 [ 699.617641][T29711] lock_acquire+0x106/0x350 [ 699.617657][T29711] ? __kmalloc_cache_noprof+0x40/0x660 [ 699.617684][T29711] fs_reclaim_acquire+0x71/0x100 [ 699.617707][T29711] ? __kmalloc_cache_noprof+0x40/0x660 [ 699.617728][T29711] __kmalloc_cache_noprof+0x40/0x660 [ 699.617751][T29711] ? get_device_parent+0x255/0x3a0 [ 699.617767][T29711] ? do_raw_spin_unlock+0xf5/0x210 [ 699.617792][T29711] get_device_parent+0x255/0x3a0 [ 699.617811][T29711] device_add+0x2e1/0xbb0 [ 699.617828][T29711] firmware_fallback_sysfs+0x2e4/0xa30 [ 699.617846][T29711] ? kfree+0x1c5/0x640 [ 699.617867][T29711] _request_firmware+0x1052/0x1780 [ 699.617899][T29711] ? __pfx__request_firmware+0x10/0x10 [ 699.617922][T29711] ? xa_get_mark+0x6fc/0x7b0 [ 699.617948][T29711] request_firmware+0x36/0x50 [ 699.617975][T29711] devlink_compat_flash_update+0x15a/0x2c0 [ 699.618000][T29711] ? __pfx_netdev_run_todo+0x10/0x10 [ 699.618022][T29711] ? __pfx_devlink_compat_flash_update+0x10/0x10 [ 699.618047][T29711] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 699.618067][T29711] dev_ethtool+0x1874/0x1ae0 [ 699.618096][T29711] ? __pfx_dev_ethtool+0x10/0x10 [ 699.618117][T29711] ? dev_load+0x21/0x1f0 [ 699.618144][T29711] ? dev_load+0x21/0x1f0 [ 699.618160][T29711] dev_ioctl+0x392/0x1150 [ 699.618178][T29711] sock_do_ioctl+0x23e/0x320 [ 699.618204][T29711] ? __pfx_sock_do_ioctl+0x10/0x10 [ 699.618227][T29711] ? do_futex+0x333/0x420 [ 699.618251][T29711] sock_ioctl+0x5c6/0x7f0 [ 699.618276][T29711] ? __pfx_sock_ioctl+0x10/0x10 [ 699.618299][T29711] ? __fget_files+0x2a/0x420 [ 699.618318][T29711] ? __fget_files+0x3a0/0x420 [ 699.618336][T29711] ? __fget_files+0x2a/0x420 [ 699.618355][T29711] ? bpf_lsm_file_ioctl+0x9/0x20 [ 699.618378][T29711] ? __pfx_sock_ioctl+0x10/0x10 [ 699.618400][T29711] __se_sys_ioctl+0xfc/0x170 [ 699.618424][T29711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.618441][T29711] do_syscall_64+0x15f/0xf80 [ 699.618461][T29711] ? trace_irq_disable+0x3b/0x140 [ 699.618485][T29711] ? clear_bhb_loop+0x40/0x90 [ 699.618503][T29711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.618519][T29711] RIP: 0033:0x7f9c5bd9cdd9 [ 699.618535][T29711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.618549][T29711] RSP: 002b:00007f9c5cc3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.618567][T29711] RAX: ffffffffffffffda RBX: 00007f9c5c015fa0 RCX: 00007f9c5bd9cdd9 [ 699.618579][T29711] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000005 [ 699.618590][T29711] RBP: 00007f9c5be32d69 R08: 0000000000000000 R09: 0000000000000000 [ 699.618601][T29711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.618611][T29711] R13: 00007f9c5c016038 R14: 00007f9c5c015fa0 R15: 00007ffc85ad59e8 [ 699.618630][T29711] [ 700.189161][T29719] sock: sock_timestamping_bind_phc: sock not bind to device [ 701.653144][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.665687][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.679544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.692505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.705678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.718342][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.731586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.744374][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.757482][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.770127][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.654446][ C0] net_ratelimit: 10094 callbacks suppressed [ 706.654478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.673539][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.687579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.700244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.713450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.726105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.739370][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.752062][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.766189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.779329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)