last executing test programs: 13.758993233s ago: executing program 2 (id=2994): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4f20, 0x0, @mcast1, 0x1}, 0x1c) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r4 = socket$inet6(0xa, 0x5, 0xfffffffd) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) (async) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async, rerun: 32) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (rerun: 32) socket$inet6(0xa, 0x4, 0x3ff) 13.674622381s ago: executing program 2 (id=2996): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000340)=0xb) 13.534974588s ago: executing program 2 (id=2997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "87d0e8"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x20008000) 13.491276509s ago: executing program 2 (id=2999): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf6566994c681001000080065b40028000000002c001948d4c8a3069078ac1414bbac14", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780000"], 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f00000003c0)="dc8daf8d760c0b5d5c8caa98fa19c6a35a188a3775d272c579ff33a6effc0c49320ff86badc0d7f8b91fbc6ce4baa16de55d0ee6203b6db86008599c5d2f19dda7e34e3693cbb469728ec4005e4f00000000000053c282394f9f31d9210d4e736b769be32865f7dc70c5bdd6cdd0e82ac0e85e8ae59456bcda96de64e44f063dd60011126f90ef97069e", 0x8a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4", @ANYRESHEX=r1, @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x7101}) r4 = socket(0x1, 0x4, 0xff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000070ef7c5486b42d96af3ed6c1bb22d23a598e34eae38a0a179201eeb0bc5c512621dd", @ANYRES16=r6, @ANYBLOB="010065bd7000fedbdf25010000000e0001006e65742f6c32636170000000"], 0x24}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50, 0x1f, 0xfc}, {0x6, 0x8, 0x0, 0x3}]}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=@newchain={0x44, 0x64, 0x8, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xe}, {0xffff, 0xd}, {0x2, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x2989}, @TCA_CHAIN={0x8, 0xb, 0xe6b}, @TCA_CHAIN={0x8, 0xb, 0x6594}]}, 0x44}, 0x1, 0x0, 0x0, 0x8887}, 0x20008850) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001038f86b13a210fab9f2000000000000", @ANYRES32=0x0, @ANYBLOB="15010000812000001c0012800d5e00000003000947ba4e37643ab2f1e5da16bbba7f2900", @ANYRESHEX=r0, @ANYRES32, @ANYRES16=r5, @ANYRES8=r2, @ANYRESDEC], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x28000000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0xfd}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="0000000000000000003a98ce428e08a79300"/28], 0x48) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r12, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRESHEX=r10, @ANYRES32=r13], 0x44}}, 0x2000800) 13.015886399s ago: executing program 2 (id=3005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c001800030a01010000000000c1000000070900010073797a31000000000900030073797a320000000014000000110001eb04a66768276c47fa5e3ecff0dba3bf47aefbb5e1655e1a793702994c82309a9609e402e67762863e749bd55d17e2c83c4741214acbafcea9fc765ae86495b145555bf058e33972f2e757e16a001a808035f731fa4c45be22751899d1ad022665941ddeeada49f41d5de4c479e5a394b36067cea650e81fa71f3df6f3c002c225871877437f4ea71c0781363a4449b0f95ace0a5552caa1e4f9d0ddbf42d0676b374064ae8b7d71f7f2a07d47d4908f1335fa7d772799fd22b462aae6d994de5005668627ee47fbbb1bcdcbc0a0e80f6b1cf01288d20d5c674931608dc1c22cedea8ba750826a68fc9f5261efc8ce2d33db739d37c6f1df9b488afb74be307cef92624557c10aa5a3ee89f8df57eedb01e9351b90f627e72e6cbbf303f4c9e927cf2a1ff07249521aca1967"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 12.877582731s ago: executing program 2 (id=3008): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "87d0e8"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x20008000) 2.423252255s ago: executing program 3 (id=3084): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}]}}, &(0x7f0000000f40)=""/4073, 0x26, 0xfe9, 0x9}, 0x28) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={r5, 0x5}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000040000850000002f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.371424278s ago: executing program 4 (id=3085): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f00000001c0)=0x9, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xf0c, 0x30, 0xb, 0x0, 0x0, {}, [{0xef8, 0x1, [@m_gact={0x3c, 0x1, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1815, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x20003, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffbc, 0x80, 0x3}, {0x3ff, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0x80000000, 0x2, 0x9163ef6c, 0x80003}, {0xffffffff, 0x3, 0x80, 0x0, 0xacc4, 0x42}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0x1001, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x5}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0x7, 0x1, 0x3fd, 0x1}, {0x4, 0x8, 0x7, 0xb, 0x40008, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x1, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x5, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x5, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x4, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x2, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0xfffffffe, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x3, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x3, 0x40007023, 0x1ff, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0xc000, 0x2, 0x89, 0x2}, {0x10001, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x1, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x5}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xffd, 0x5d7c, 0x0, 0x8001}, {0x8, 0x1, 0x7, 0xfffffffb, 0x8, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0x9, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x55, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff4, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x8, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0xf6, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0xffffffff, 0x8}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x2, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0xfffffff1, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0x40c651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1ac6}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x7, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d3, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x808, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x40000004, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xebd8}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b}], [{0x5}, {0x4, 0x1}, {0x5}, {0x4}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0c}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), 0x0}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180800f9fdffffff0079466a3d08000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x140, 0xc8, 0x8, 0x0, 0x5803, 0x140, 0x2e8, 0x2e8, 0x208, 0x2e8, 0x3, 0x0, {[{{@ipv6={@local, @private1, [0xffffff00, 0xff000000], [0xff, 0x34da508f3e8fb0eb, 0xffffff00, 0xff], 'veth0_to_batadv\x00', 'veth1_to_team\x00', {0xff}, {0xff}, 0x89, 0x7, 0x7, 0x38}, 0x0, 0x108, 0x140, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x100000001}, {0xbd8}], 0x0, 0x2}}, @common=@inet=@set2={{0x28}, {{0xffbe, 0x5, 0x4}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x6, 0x7}, {0x3, 0x3, 0x6}, {0x1, 0x1, 0x2}, 0x3, 0x29b}}}, {{@ipv6={@private1, @loopback, [], [0xffffff00], 'macvtap0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x94) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (rerun: 32) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x64, 0x6, 0x4f8, 0x340, 0x1a0, 0x0, 0x0, 0x1a0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [0x0, 0x0, 0x6f7594ef4243f52d], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'}) (async) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r10, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00'}) 2.365047345s ago: executing program 0 (id=3086): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffe}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0x10}]}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x7d, &(0x7f0000000180)=""/125, 0x41000, 0x4}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305839, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2, 0x25, 0x5fd0a13a}) 2.305972548s ago: executing program 3 (id=3087): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x6e, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='bic', 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r4, &(0x7f0000000180)="89", 0x1, 0x4c041, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x6c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x28, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="85"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6, 0x2}, {0x5, 0x40}}}, @TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR="d4"]}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.202918392s ago: executing program 0 (id=3088): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2.168085549s ago: executing program 4 (id=3089): r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = epoll_create(0xff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x80000000}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="74721c88", @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf2504000000060002000100000006001a004e240000080009000000000008001900ffffffff05001200d700000008001900ac1e010108000b0002000000080009000000000014002000fc01000000000000000000000000000108001900e0000002"], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20008080) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='pids.current\x00', 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1c, r7, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008884}, 0x20000004) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r5, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f0000000000)={0x6, 0x80000001}) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r2) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000008000000000000d000000911176000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r10 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r10, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "be"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf251400000008000300", @ANYRES32=r3, @ANYBLOB="08001d00", @ANYRES32, @ANYRES64=r12, @ANYRES32, @ANYBLOB="97ce00b5bdc5df009fd64fce70ead665cb433efdafb52b27b3048847bab0647438e60d8cbde4320944a13d76df563e64a72b3abfb1a31a9448761f26380e9db5a2e389f785376ae47c21173db5e6597287a384c6149be174f54b0d4c2413025c027fb8a82b494c7a7c3e2af5a79a10ba1644845874404483eb7533d9893a645b2520c64a67d44d86d1b3efa179a5ebf1354c0d48058fbc141dffa955c197d921d96c67fed404b294bc4f23c7a054bda9cc90b578f9077460b20756671ac9a15886799955736e57d640d10bbf2a53bb64959c9b7f92a8f9b0f5710217a0060d7666602f8f82678bedd0b3ecca0e", @ANYRES32, @ANYRES16=r2, @ANYRES32, @ANYBLOB="0800010001000000"], 0x44}, 0x1, 0x0, 0x0, 0xc001}, 0x4880) 1.88101211s ago: executing program 4 (id=3090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="02060200f67389344a79832d3ff50000636706b4664cddd3129ce618639eb5"], 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800"], 0x150}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="180000008f08000000", @ANYBLOB="0000000000000000b702000014000000bf030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xc}, 0x15, 0x3, 'fo\x00', 0x20, 0x57, 0x8}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'ovf\x00', 0x23, 0x81, 0x2005}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x2000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.658740319s ago: executing program 0 (id=3091): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x48, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) 1.600559203s ago: executing program 3 (id=3092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000006000000000000000000000085000000300000001801000020786c2500000000002020207b1af8ff00000000bf0300000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x50) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00fa4d180601d40100000000000000040500010007ff00000000000007d619314fe6a6a1d048a8bc42ab34ba7c1650bdb659079adb0044e41033104b79af8a48f3141c701467edc6e4d6d30f0fcf19fd9df3d42177ca43f462b74cf84f6e22417fce2445b31352f6ddcbfc33798855cd33d5ff944c3d8aa97b5e2f92b2c7e9b8b51616ce90aeb7b4d7733d67bbae93750b0e5b7693d2768e7cc122e2f8e5c2f7ed3ce2aa36562108691a9dece98508c50303d4c0e9aacceb5d3d4cb6cc2b76e283a1a517c692b0986ab114fd4da993cb67ddf96585aadf8de62239234b608954521f1775566cfb10fe6eff72fd9ea669223ed1b189031a1e611557f2f989bcb5be3888cc7b0df0a8229aaeecf0dc2aba0c5b5a219464f21227bdcf81f4c759d1da67eba8c27767b045f0a2109ca8000d6d07"], 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="8500000008000000350000008400000085000000070000009500000000000000fed023d1d405000000c7d4012507000000c71adb05d72768b8242dd90d17e4c52505750482b009546a5f3f00573f31b53fd3e52bd87184446d165ae2939bbca322a415a98c885faad395f3e4e0635559362ed862ce7c69ad133037af3a000000000000000000000058c122dff93c54caec3751652d11fd4f66711918d3604b92666d60c88b658fe57bb5d365c5b89625385f230ba21f570635837c7bc74be573bfd68aaaf06d842085f84b96c4709e2c9449f0818f6fc5657572fb3e5bb8ff6f643e52f4964c62a70a011ede8b504c8a30381b8eff01d7615e1789bb4b3b7ef3668a98a785a80aa2d1ab149b9316091fb3025f0716799d8280acb3880a882f28dd3111e02c3b0b2818bf5bb902cc9c1666f5fdd2e43901ca4796f04db25c3df35cdfc17c54936202b45b7a09816aa76e8b9bbe24022007aae367025040e8b2255ced48a4b2db3f280dc6fd2f5374548c499ae74631f3be04e28d601369f9488fb074eb35540df5e053376ea29125d6bb916496b04b8e359c1edef91677414729967cffa736d7789c14e918b77518ee8e5d5aff9148be69267fff35"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x8b63bfea1a14a3c7}, 0x16) unshare(0x22020400) (async) unshare(0x22020400) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) (async) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x570, 0x368, 0x8, 0x7f02ae, 0x368, 0x200, 0x4a0, 0x2e8, 0x2e8, 0x4a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x340, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r3}}, @common=@inet=@iprange={{0x68}, {@ipv4, @ipv4=@remote, @ipv6=@mcast2, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0xfc}, @private2, [], [], 'veth0_to_team\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@mh={{0x28}, {"a27d"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 1.507118899s ago: executing program 0 (id=3093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0xa, 0x300) (async, rerun: 32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (rerun: 32) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080) 1.338761412s ago: executing program 3 (id=3094): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000114000e1208000f0100810401a80016ea1f000840032e5f54c9201114000000000000000000000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101005ee4001b14620d9de656d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x3ff, 0x8000, 0x9}, 0x10) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000040)={r0, 0x1, 0x49, "b9c919a74842c4a7da542df68cc606ba56f5e48e66ad61e3fcdb6d"}) 1.232186633s ago: executing program 1 (id=3095): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x30, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4, 0x1}, {0xe, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x44004) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x4) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="040014000a000100000000000000000008000f0004"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x2a0, r3, 0x104, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_WANTED={0x218, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb4, 0x4, "73024a5ffb29c2371fa9f041d89d9666c4f4bd11c0a4de3c2c2c22c16001897b390329454ba8a0fe2d6214b91ee64e8bc9fbc7a2085906562d1c1da4c54c02ba9edfa50a8d2441488dbfffbb92dcc98d26909f4a6f0b060076e0e70dd235f5a093a7b0dde26d4555090c284989f6f364698518fa23c13da0edc7f51a70ee8331adf685980bffe61844dfd983b6959f9aa1bf5b61df7679360b2f440339325d370f43c0181d0a50db06e225544607f016"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x96}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'fw\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "1c77bd4e6b97052317ae9b385b3caee50d480e43bab7746ca909b1cbe1d6e60e52b20606fc03da0841c3a8de30cd529194f12ca096e9a3e01119b9d5a4d5301d61f0c88cb943ebed15257f292c77fb9a5c822fb20119e84437e98dd2c93a10fe694cc51139e454f74401bc0f50c3c498def04792c5b1f8423dbe0f331d22517a1b4c4358704a2abee8849d808ca5cbfd0cea8182df2eef9a886873b57906490276f9bd7cab75bfcee73c9f353f6a3340edee7943335cc67b0fa95988e6a644a00d801bd27563497cec417fed908086a3ec3ad0bec972efcc8e5b0d89f22d1c3ba3c2ede9ae6c872f61a390fc6854b373fae6c97884a6"}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500ca20000028001280080001006772650014000280060008000600ac141426673ca5c995c63c049b6b0266263a53efc1401d9ea30aa960539a9eef340c90881e974a5edbf3fa83b4c5b74a71646b4134e9c0f33fc2a382a75ed9250125b56ff9c00821ca3dc5729f0c90c3fb83aa04"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.205684356s ago: executing program 3 (id=3096): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x5a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa6cf65694c681009078640151e8afd1aecbe6aa40981740800000000000000000020000004ec0a2e2d3a186cd5fc3ab887c3f4643500241c204f040315b305fad97db47ca8608d30aad367ae5615e084e774253979f97c419ed3d15b88658107af4ec2316078e56745cacb21aa97fbc2e4559786dffe4327c2120e1f1981926154240470a443acbac0091cb1043b7333dd2c79f8c0ddcfadfdb8223aed48a6a95b392087ec0", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d002000190780000080a00000009000000030204fe00051200004800000000620000000500000009"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000380)=""/46, 0xfffffeb4) socket$kcm(0x2, 0x200000000000003, 0x106) (async) r2 = socket$kcm(0x2, 0x200000000000003, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300080c1) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000080), 0x4) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x50, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x50, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x2000000}}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xfe}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400049}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf253100000005003400021a0000"], 0x1c}}, 0x50) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400049}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000328bd7000fbdbdf253100000005003400021a0000"], 0x1c}}, 0x50) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002740)=@newtaction={0x18, 0x30, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000640)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000280)=[{&(0x7f00000006c0)="8e71b7dfae1affc36a2279d6810656d71ba8f8a471526a0a56d12e5162622e2ef19db64ca18e5f16a86e61ada19102fb2af8ea9b5eeb9aa26c3702682ac65ff18ff8a07f4618b75c22695b073f56ef8c95ca0ad2fae9fa8ee03c2db7ff47b124c35b1605e55204128a2b5d5fb57998082ded15729a1f670882585d630becb3a1a9707bac1e98513917c2c757f0ed1b071b23c760b9c96d41f92a950824898c263f980d4d271ab7cea905792f00c278820a0d149ff62500d1", 0xb8}, {&(0x7f0000000780)="01cd879ab7846960ed35c505f5c48d7fbee02064dc89eae4545753ffc75af245e2db78a1f688a63c02", 0x29}], 0x2, &(0x7f0000000900)=[{0x88, 0x102, 0x594a5333, "7a35b683b87b2f0c23b74e557bd5050b67f47d158b31ac297b829c52b653fd0d79a7f6e082b27ab9228b4ecdd76023e890c9c4d7de4eb187d2388154ca1f258db477699662982fd9af795c630d13081085b8137d41919b089bc98d54ea48d2eaef782c218ff4b1a24ddce98083f27220fa1fcae933a724"}, {0x790, 0x110, 0x3ff, "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"}, {0x30, 0x1, 0x1, "68610f2426fea37f4f1a7885e9cf4526307e32724006247ef900"}, {0x48, 0x107, 0x6, "f7f89e140710c7e3ff001f300342b39719af6c59d24b435a0b0f9c66263344d545f417315c64341fd6413227e5b5ebd1bac4e065"}], 0x890}, 0x4000080) socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$FITRIM(r10, 0xc0185879, &(0x7f00000000c0)={0x100, 0x8, 0x1}) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r13, @ANYRES32=0x1, @ANYBLOB="090000400400"/20, @ANYRES32=r12, @ANYRES32, @ANYRESHEX=r0], 0x50) 826.629745ms ago: executing program 0 (id=3097): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x3, {0x0, 0x0, 0x2}, 0x1}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) (async) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0xfffffffd) (async) r7 = socket$inet(0xa, 0x801, 0x84) listen(r7, 0x8) r8 = socket$inet(0xa, 0x801, 0x84) listen(r8, 0x8) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r9, 0x7) (async) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r10, 0x100) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000200)=0x1c, 0x4) r11 = socket$netlink(0x10, 0x3, 0x4) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r11) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x1, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x7, 0x5, 0x1a2007252c5bad6a, 0x0, 0x1000}, 0x6}, [{0x3, 0x4800000, 0x6, 0x1, 0xa}, {0x401, 0x1ff, 0x2, 0x27c, 0x40000000, 0x31a3c3fe}, {0x2, 0x4, 0x400, 0x8, 0x9, 0xc4}, {0x7, 0xff, 0x5, 0x995, 0x0, 0x81}, {0x6, 0xe31, 0x1, 0x3, 0xfffffffa, 0xfffffffa}, {0x7bf4, 0x400, 0x8001, 0x2, 0x5, 0x5}, {0x33, 0x4, 0x5, 0x800, 0x8, 0x6}, {0x2, 0x7, 0xd71, 0xe, 0x8, 0x7fe0000}, {0x2b71, 0x200000, 0x5, 0x101, 0x7}, {0xbc, 0x80000000, 0x3, 0xa0b, 0x8, 0x6}, {0xcb3, 0x6, 0xa, 0x8001, 0x10001, 0x6}, {0x14, 0x7ff, 0x8f3, 0x3, 0xa0, 0x7f}, {0x7, 0x8954, 0x5, 0x2b65, 0x10001, 0xa508}, {0x3, 0x3, 0xc, 0x1000, 0x0, 0x10000}, {0x5, 0x4, 0x1, 0x82cc, 0x5c, 0x5}, {0x3, 0xc5a3, 0x80000000, 0xfffffff8, 0x0, 0x8}, {0x400, 0x10001, 0x0, 0x9, 0x4, 0x9}, {0x4, 0x2, 0xa, 0x5, 0x5e, 0x2bcb}, {0xa0b, 0x6, 0x2e2723f8, 0x1000, 0x7, 0xbde}, {0xcf, 0x8, 0x80000000, 0x3, 0x2, 0x3}, {0x8, 0x6, 0xb, 0x3, 0x9, 0x10}, {0x1, 0x0, 0x400, 0x5c, 0xb, 0x2}, {0x80, 0x1ff, 0x101, 0x2, 0x7, 0x1}, {0x5e3b, 0x0, 0x2, 0x8, 0x208, 0x2}, {0x3, 0xf, 0xfffffff9, 0x3, 0x6, 0x7fffffff}, {0x101, 0xfffffffb, 0x6, 0xff, 0x0, 0x40}, {0x6, 0x9, 0x9, 0x3, 0xc862, 0xb42}, {0x101, 0x6, 0x9, 0x3f, 0x86, 0x6}, {0x200000, 0x1, 0x80000000, 0x8000, 0x101, 0x9}, {0xfffffffc, 0x7fffffff, 0x2, 0x0, 0x6, 0x7}, {0x97, 0x7fff, 0x9bc, 0x7, 0xfff, 0xc867}, {0x5, 0x6, 0x4, 0x2, 0x5, 0x6}, {0x0, 0x3, 0x7, 0xdd, 0x0, 0x1}, {0xb, 0xbb86, 0xa, 0x240, 0xb, 0x5}, {0xb2c, 0x8, 0x4, 0x8, 0x1ff, 0x1}, {0x8, 0x6, 0x0, 0x7, 0x4e, 0x7}, {0x6, 0x39, 0x9, 0x7, 0x4, 0x8}, {0x5, 0x7f, 0x6e67bb35, 0xb, 0xab9, 0x7}, {0xffff, 0x8, 0x3, 0x1, 0x0, 0x7}, {0x8, 0x3ff, 0x7, 0x9932, 0x7f, 0x9}, {0x8, 0x3, 0x1, 0x8, 0xfff, 0xe250}, {0x2, 0x33f, 0x4, 0x9, 0x7, 0x8}, {0x2, 0x2, 0x4, 0x8, 0x85c8, 0xa387}, {0x7, 0x6, 0x80000001, 0x7, 0xc390, 0x2d}, {0x5b4, 0x2, 0xfff, 0x3, 0x0, 0x10001}, {0x7fff, 0xa1c4, 0x8001, 0xcc18, 0x7, 0x3}, {0x7, 0xc1, 0x0, 0x401, 0x8, 0x1ff}, {0x2, 0x280000, 0xfffffbe2, 0x3, 0x6, 0x7f}, {0x7, 0x80000000, 0x7, 0x2, 0x6, 0x101}, {0x6, 0xc, 0x9, 0xfffffe00, 0x6, 0x8}, {0x7fffffff, 0x0, 0x8, 0xfffffeff, 0x8}, {0x3, 0x80, 0x10000, 0x0, 0x9, 0x7}, {0xfffffffc, 0x9, 0x3, 0x768d26ce, 0x1, 0xfffffffc}, {0x2, 0xfffffffb, 0x0, 0x8, 0x2, 0xfff}, {0x9, 0x0, 0x5, 0x6c, 0x4, 0x2}, {0x10001, 0x400, 0x6, 0xea0000, 0x3, 0x8}, {0x2, 0x4, 0x6, 0x8, 0x9, 0xc3}, {0x5, 0x2, 0x2, 0x8, 0x7, 0xe}, {0xb, 0x1, 0x7, 0x4226c711, 0x1, 0x6}, {0x4, 0x7fff, 0xf, 0x7f, 0x2, 0xffffffff}, {0x6, 0x1, 0xfffffff7, 0x6, 0x5, 0x7f}, {0x2, 0x3, 0xd, 0x89b, 0x100, 0x6}, {0x1032, 0x1000, 0x7, 0x400000, 0x8e01, 0x200}, {0x7, 0x6, 0x9, 0x5, 0x96, 0x21}, {0x2eb, 0x382b3bc2, 0x3, 0x3, 0xe, 0x4}, {0x0, 0xad6, 0x98c5, 0x1ff, 0x49c, 0x4}, {0x8, 0xda2, 0x4, 0x10, 0x3, 0xa1e}, {0x6, 0x4d, 0x6, 0x80000001, 0x6, 0x5}, {0x83f9, 0xc, 0x100, 0xc, 0x77445d47, 0x6}, {0xb, 0x8cb, 0xfffff800, 0xcfae, 0xf4be, 0x3ff}, {0x4800, 0x3ff, 0x7, 0x3, 0xfed, 0xfffffffb}, {0x1, 0x401, 0x7fbcc23, 0x1, 0x8, 0x9}, {0x2, 0x46, 0x3, 0xc, 0x6, 0x3}, {0x4, 0x7, 0xb, 0x0, 0x80, 0x2}, {0x5, 0x7, 0xc6, 0x1, 0x0, 0xb6bb}, {0x5, 0x3ff, 0x2, 0x3, 0x7, 0x9}, {0x1, 0x7, 0x9, 0x3, 0x3, 0x5}, {0x4, 0x7, 0x776, 0x8, 0x8, 0x3}, {0x7, 0x7, 0x4, 0xfffff801, 0x2, 0x41df}, {0x280, 0x9f, 0xffff, 0xffff, 0x0, 0x36b3}, {0xffffffff, 0x5, 0x0, 0x8, 0x1, 0x3}, {0x9, 0x48, 0x6, 0x5, 0x6, 0x9}, {0x4, 0x2, 0x4, 0x9, 0x1000, 0x120000}, {0x0, 0x3ff, 0xc21c, 0x9, 0x7}, {0x6, 0x7ff, 0x4, 0x7f, 0x5, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x200}, {0xff, 0x6, 0x9b, 0x6, 0x800, 0x10}, {0x9, 0x6, 0x8, 0x0, 0x401, 0x400}, {0x5, 0xfad, 0x8, 0x0, 0x2}, {0x8000, 0x3, 0x3, 0x4, 0x7, 0x101}, {0x1, 0xff, 0x80000, 0xbca, 0x5, 0x6}, {0x2, 0x2, 0x3, 0x4, 0x1, 0xff}, {0x2, 0xd, 0x3, 0xf6, 0xd, 0x4}, {0x4e, 0xd, 0x800, 0x80000001, 0x1, 0x9}, {0x9325, 0x4, 0x2, 0x4, 0x0, 0x8}, {0x86, 0x0, 0x7, 0xfffffffe, 0x1, 0xa001}, {0x9, 0x2, 0x7bb0, 0xff, 0x7, 0x4}, {0xed42, 0x0, 0x7, 0x3bf0, 0x1}, {0x5e5ce201, 0xff, 0xfff, 0x2, 0x5, 0x51}, {0x1, 0x4, 0x1, 0x81, 0x5, 0x40}, {0xfff, 0x6, 0x2, 0x800, 0x7ff, 0x9}, {0x4, 0x1, 0x3, 0x7, 0x0, 0x9}, {0x5f, 0x7, 0x400, 0xc, 0x2, 0x5}, {0x3, 0xf0a, 0x3, 0x22, 0x40000}, {0x1, 0xfffffffc, 0x401, 0xb, 0x7fffffff, 0x9}, {0xfff, 0x9, 0x0, 0x5, 0x2, 0xe}, {0x5, 0x60000000, 0x6, 0x5, 0xd250, 0x4}, {0x4111, 0x2, 0x8, 0x39, 0x5, 0xfffffffd}, {0x10, 0x10000, 0x5, 0x6}, {0x9, 0x4, 0x9, 0x77, 0x4, 0x7}, {0x3, 0x6, 0x7, 0x8, 0x7f, 0x3}, {0x6, 0x2, 0x9, 0x7, 0x6}, {0x3, 0x1, 0x5, 0xfff, 0x26, 0xffff}, {0x0, 0x2, 0x7, 0x8, 0xa2d}, {0xd2, 0x5, 0x200, 0x7fffffff, 0x0, 0x3}, {0x9, 0x80, 0x7fff, 0x349, 0x9, 0x1e4}, {0xfff, 0x84d0, 0x3, 0xf0, 0xfffff5fb, 0x80}, {0xbef, 0x6c, 0x8, 0x7, 0x0, 0xd}, {0x8, 0xfffffffb, 0xfff, 0x7, 0x4, 0x8001}, {0x20000003, 0x3, 0x9, 0xff, 0x1ff}, {0x3, 0x6, 0x6ef7, 0x1400, 0x7, 0x7}, {0x6, 0x89, 0x7, 0x6, 0x7ff, 0x5}, {0x9a9f, 0x4, 0x3, 0x8, 0x10000, 0xd1b0}, {0x2, 0x101, 0x8d, 0x6, 0x8, 0x100}, {0x3, 0x1, 0x7fffffff, 0x80000001, 0x7}, {0xdfdd, 0x7, 0x400000, 0x3, 0x800, 0x5}, {0x10000, 0x8, 0x7, 0x8000, 0x514, 0x9}, {0xfffff84f, 0xb6d5, 0x6, 0xb9f4, 0x5, 0x8}], [{0x3}, {0x3}, {0x5}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x5, 0xd24aca7c5f76df8d}, {0x2}, {0x4, 0x1}, {0x3}, {0x2}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x5}, {0x2}, {0x4}, {0x2}, {0x3}, {0x0, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x4}, {0x6b51a62c4477e1a4, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x50394376409f7ae3, 0x394eb60bf677eb7}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0xa141cbd9266dd55c, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x4}, {}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x1}, {0x5}, {0x4}, {}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) bind$can_j1939(r1, &(0x7f00000001c0)={0x1d, r3, 0x3, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 826.023178ms ago: executing program 3 (id=3098): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000100)=""/128, &(0x7f0000000080)=0x80) r2 = socket(0x2b, 0x1, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @tail_call]}, &(0x7f00000000c0)='GPL\x00', 0x18, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000040)={r5, 0x6}, 0x8) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) write$bt_hci(r6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r5, 0x9}, 0x8) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f00000005c0), 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r9, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x10}}], 0x1, 0x4004804) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 676.498834ms ago: executing program 0 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0xa, 0x2, {{0x0, 0x2, 0x30000002}, 0x2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000540)}, 0x10fff}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200000034000480300001800ef70000696d6d6564696174650000001c000280100002800c00028008000180fffffffe08000140000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) 675.001827ms ago: executing program 1 (id=3100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x560, 0x270, 0x84, 0x4c8, 0x0, 0x270, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0xff, 'caif0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x0, 0x3, 0x8}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x43}}}, {{@uncond, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x7fff]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xf, 0x0, @ipv4=@remote, 0x4e21}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x8, 0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xff, 'sit0\x00', 'caif0\x00', {0xff}, {0xff}, 0xc, 0x1, 0x4}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4bfc, 0xa40, @multicast1, 0x4e23}}}, {{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x3, 0x8, 0x4, 0x1, 'syz1\x00', 0x5}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x85}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000900800034000000007080004400000000f0800014000000000240005800c0001047061796c6f6164000800028008000340000040b908000240000000040900010073797a30000000000900020073797a32"], 0xb0}}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r2, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000d40)=""/213, 0xd5}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000000240)=""/40, 0x28}, {&(0x7f0000001140)=""/226, 0xe2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x6}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2120, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000000)={'veth0_virt_wifi\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 573.645ms ago: executing program 4 (id=3101): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) close(0x3) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000140)='FROZEN\x00', 0x7) (async) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000ab31322500000043c24e41a439afb874c9000000000000000a2c000000030a010400000000000000000100ffff090003000400000000797a3100000000140000001100010000000000000000000100"], 0x54}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000000)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x33}, @empty}}}], 0x20}, 0x400c804) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001580)=""/4088, 0xff8}], 0x2) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'netdevsim0\x00', 0x100}) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x20) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0x0, 0xf8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'bond0\x00', {}, {}, 0x11, 0x0, 0x4}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}, @common=@unspec=@connmark={{0x30}, {0x1, 0x2, 0xfe}}]}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @rand_addr=0x64010101, 0x0, 0x0, 'dvmrp0\x00', 'dvmrp1\x00', {0xb25f05e6834eb86f}, {0xff}, 0x1d, 0x1, 0x49}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x60b, 0xe03, 0x1, 0x20000000}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x0, 0x2, 0x0, 0x5], 0x0, 0x2}, {0x1, [0x3, 0x8, 0x5, 0x6, 0x2], 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) (async, rerun: 32) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) (async, rerun: 32) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x20) sendmsg$unix(r9, &(0x7f0000000300)={&(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x200488c0}, 0x4000855) (async, rerun: 32) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xba, 0x757}) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001100000228bd7000ffdbdf25000000006f695b5bef8cbb375d3b0293b82db1bec43dbebfd2d193bf080138aeb4b19f16fb71148b99bc33b2578b3aee2fb5b5076114a750a131ee54fb9446421cf362f83261cad594512bb9cb156d11ea558865c78bfe3a2c38a08f71c295422fc80ad9306f9d46efc6c607334fdcc2c41f2cbaeb07234d57211bde3b709f96e58dc82449e9c38d7a0320e74585c4362abb9770809008d976925bf65952052e3f70", @ANYRES32=0x0, @ANYBLOB="80900500000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008004) 427.233536ms ago: executing program 1 (id=3102): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r0, &(0x7f0000000140), 0x492492492492756, 0xc4) 367.635249ms ago: executing program 4 (id=3103): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x80004}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffedb, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 338.627802ms ago: executing program 1 (id=3104): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xffffffffffffffa7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50) (async) unshare(0x480) (async) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="400096040a000200aa"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xa}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x400c1c0) close(r1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) unshare(0x22020400) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="5800000100002000000000001601000062010c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000002879400e75ae90a316cb5cb3e0f8599436b690aae7755bea2559c299d200a5b5a644641b847bbbe8dbc99eb736f4e8e4b325ea508743135c3e0371b754991e1d21d15680bad8003a4183088d4db7637cd6c291c587e5ca10a1e0ea239ed691f87db96fb4f7e3397ffd0a9f92f9098a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x18000, 0x0) write$tun(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="010805ec2f48a68d9b2d4873417c1133a33688aa114c191b325aaa166ec7987e964bcf93bec04e2b54bbff8c4a3e7ea55b324df3c951cae03297ec8592d25e550506cdde8515b9ddd3d6224a82028ad8"], 0xa1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r9}, &(0x7f0000000080), &(0x7f00000000c0)=r8}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000580000001c0a01000000000000000000010000000900010073"], 0xfc}}, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0x30, r7, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PEERS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c4}, 0x20000010) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r7, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) r12 = socket$nl_rdma(0x10, 0x3, 0x14) accept4$inet6(r12, 0x0, &(0x7f0000000100), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xb0, 0x1403, 0x1, 0x70bd2a, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gretap0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'geneve1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 230.666878ms ago: executing program 4 (id=3105): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) unshare(0x22020600) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008041}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0xe, 0x0, &(0x7f0000000500)="f8ad48cc02cb29dc88007f5b88a8", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0xffff7b6e, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r6, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'erspan0\x00', @link_local}) 169.885121ms ago: executing program 1 (id=3106): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r5 = socket(0x10, 0x5, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000030", @ANYBLOB="01000000000000001c00128009000100626f6e64000000000c0002"], 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x60040044}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket(0x11, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x30}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0xf8, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c000) syz_emit_ethernet(0xa7, 0x0, 0x0) 0s ago: executing program 1 (id=3107): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000db68000000009500000000000026085c1f0202fb88b9"], &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): ing attributes in process `syz.1.1148'. [ 169.096190][T10531] lo speed is unknown, defaulting to 1000 [ 169.109054][T10527] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 169.124275][T10531] lo speed is unknown, defaulting to 1000 [ 169.132473][T10527] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 169.189835][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 169.194079][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 169.684870][T10569] openvswitch: netlink: Duplicate or invalid key (type 0). [ 169.692426][T10569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.990515][T10582] lo speed is unknown, defaulting to 1000 [ 170.030985][T10582] lo speed is unknown, defaulting to 1000 [ 170.230037][T10595] netlink: 'syz.1.1161': attribute type 5 has an invalid length. [ 170.241977][T10595] syzkaller1: entered promiscuous mode [ 170.248576][T10595] syzkaller1: entered allmulticast mode [ 170.813324][T10611] netlink: 'syz.4.1166': attribute type 13 has an invalid length. [ 170.821155][T10611] netlink: 'syz.4.1166': attribute type 17 has an invalid length. [ 170.935658][T10611] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.942975][T10611] bridge0: port 1(bridge_slave_0) entered listening state [ 170.973165][T10611] 0X: left allmulticast mode [ 170.989436][T10611] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 171.038056][T10605] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 171.328870][T10640] netlink: 'syz.1.1173': attribute type 2 has an invalid length. [ 171.470782][T10652] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 172.041282][T10698] netlink: 'syz.1.1186': attribute type 10 has an invalid length. [ 172.176112][T10712] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 172.186344][T10698] veth0_vlan: left promiscuous mode [ 172.214278][T10698] veth0_vlan: entered promiscuous mode [ 172.231859][T10698] team0: Device veth0_vlan failed to register rx_handler [ 172.903278][T10750] unsupported nla_type 142 [ 172.917049][T10752] __nla_validate_parse: 6 callbacks suppressed [ 172.917067][T10752] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1199'. [ 173.074685][T10761] vxcan2: entered allmulticast mode [ 173.111554][T10763] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1204'. [ 173.126909][T10763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1204'. [ 173.137332][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 173.338031][T10779] netlink: 'syz.3.1209': attribute type 21 has an invalid length. [ 173.350776][T10779] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1209'. [ 173.395311][T10783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1209'. [ 173.413763][T10781] syz_tun: entered allmulticast mode [ 173.440134][T10781] syz_tun: left allmulticast mode [ 173.445656][T10788] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1212'. [ 173.446339][T10788] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1212'. [ 173.487584][T10783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 173.511250][T10788] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1212'. [ 173.730325][T10796] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.760528][T10800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.798065][ T9] IPVS: starting estimator thread 0... [ 173.886098][T10800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 173.892862][T10804] IPVS: using max 35 ests per chain, 84000 per kthread [ 173.931697][T10800] team0: Port device bond3 added [ 174.007749][T10823] netlink: 'syz.0.1220': attribute type 1 has an invalid length. [ 174.352922][T10838] lo speed is unknown, defaulting to 1000 [ 174.364149][T10838] lo speed is unknown, defaulting to 1000 [ 174.545218][T10858] netlink: 'syz.3.1230': attribute type 1 has an invalid length. [ 174.721615][T10867] dummy0: Device is already in use. [ 175.324205][T10890] netlink: zone id is out of range [ 175.333715][T10890] netlink: zone id is out of range [ 175.350249][T10890] netlink: zone id is out of range [ 175.379906][T10890] netlink: zone id is out of range [ 175.391247][T10890] netlink: zone id is out of range [ 175.409813][T10890] netlink: zone id is out of range [ 175.431315][T10890] netlink: zone id is out of range [ 175.472751][T10890] netlink: zone id is out of range [ 176.143782][T10918] batadv1: entered promiscuous mode [ 176.151622][T10918] batadv1: entered allmulticast mode [ 176.158606][T10918] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 176.461584][T10941] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 176.580127][T10947] ..0{X: left allmulticast mode [ 176.626560][T10947] wg1: left promiscuous mode [ 176.653904][T10947] wg1: left allmulticast mode [ 176.725604][T10947] wireguard0: left promiscuous mode [ 176.731939][T10947] syzkaller0: left promiscuous mode [ 176.737765][T10947] syzkaller0: left allmulticast mode [ 176.800636][T10952] syzkaller1: entered promiscuous mode [ 176.817573][T10952] syzkaller1: entered allmulticast mode [ 176.838773][T10952] geneve2: entered promiscuous mode [ 176.844355][T10952] geneve2: entered allmulticast mode [ 177.031985][T10957] tipc: Enabled bearer , priority 0 [ 177.067678][T10957] syzkaller0: entered promiscuous mode [ 177.074165][T10957] syzkaller0: entered allmulticast mode [ 177.134520][T10957] tipc: Resetting bearer [ 177.145112][T10956] tipc: Resetting bearer [ 177.165689][T10956] tipc: Disabling bearer [ 177.895228][T11012] netlink: 'syz.1.1283': attribute type 1 has an invalid length. [ 177.955413][T11022] IPVS: set_ctl: invalid protocol: 65112 172.20.20.25:20002 [ 177.966967][T11023] IPVS: set_ctl: invalid protocol: 65112 172.20.20.25:20002 [ 178.405461][T11048] __nla_validate_parse: 48 callbacks suppressed [ 178.405480][T11048] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1294'. [ 178.422371][T11051] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1295'. [ 178.472778][T11050] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1295'. [ 178.665486][T11070] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 178.709123][T11071] syzkaller1: entered promiscuous mode [ 178.715766][T11071] syzkaller1: entered allmulticast mode [ 178.916643][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 178.974073][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1304'. [ 179.149009][T11102] netlink: 'syz.1.1309': attribute type 1 has an invalid length. [ 179.170953][T11103] netlink: 'syz.0.1306': attribute type 13 has an invalid length. [ 179.185472][T11103] netlink: 'syz.0.1306': attribute type 17 has an invalid length. [ 179.202747][T11106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1309'. [ 179.216797][T11100] bond4: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 179.229191][T11100] bond4 (unregistering): Released all slaves [ 179.311750][T11102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.386601][T11103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.395061][T11103] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.406403][T11103] net_ratelimit: 47 callbacks suppressed [ 179.406412][T11103] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.441313][T11109] bond4: (slave ip6gretap3): making interface the new active one [ 179.450356][T11109] bond4: (slave ip6gretap3): Enslaving as an active interface with an up link [ 179.628963][T11127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.184804][T11162] netlink: 'syz.1.1326': attribute type 3 has an invalid length. [ 180.202439][T11162] netlink: 'syz.1.1326': attribute type 3 has an invalid length. [ 180.230494][T11174] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1328'. [ 180.414978][T11184] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1331'. [ 180.765301][T11205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 180.920342][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 180.956486][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 181.078212][T11218] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 181.232296][T11229] : renamed from bond_slave_0 [ 181.255552][T11233] netlink: 'syz.1.1340': attribute type 1 has an invalid length. [ 181.279625][T11224] can: request_module (can-proto-5) failed. [ 181.441331][T11244] sctp: [Deprecated]: syz.0.1344 (pid 11244) Use of int in max_burst socket option deprecated. [ 181.441331][T11244] Use struct sctp_assoc_value instead [ 181.656795][T11258] netlink: 'syz.4.1349': attribute type 5 has an invalid length. [ 181.856922][T11278] smc: net device wlan0 applied user defined pnetid SYZ0 [ 181.897897][T11280] bridge_slave_0: left allmulticast mode [ 181.907311][T11280] bridge_slave_0: left promiscuous mode [ 181.914401][T11280] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.930353][T11280] bond0: (slave bridge_slave_1): Releasing backup interface [ 181.975974][T11280] team0: Port device team_slave_0 removed [ 181.994338][T11280] team0: Port device team_slave_1 removed [ 182.011423][T11280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.047132][T11280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.060145][T11280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.106731][T11288] gretap0: entered promiscuous mode [ 182.127954][T11288] debugfs: 'hsr0' already exists in 'hsr' [ 182.156426][T11288] Cannot create hsr debugfs directory [ 182.161894][T11288] hsr0: entered promiscuous mode [ 182.208935][T11272] lo speed is unknown, defaulting to 1000 [ 182.218412][T11272] lo speed is unknown, defaulting to 1000 [ 182.755324][T11313] netlink: 'syz.0.1357': attribute type 5 has an invalid length. [ 183.400230][T11326] netlink: 'syz.1.1362': attribute type 1 has an invalid length. [ 183.513874][T11339] bond5: (slave gretap3): making interface the new active one [ 183.573616][T11339] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 183.806096][T11361] netlink: 'syz.3.1372': attribute type 1 has an invalid length. [ 183.920301][T11361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.995489][T11368] lo speed is unknown, defaulting to 1000 [ 183.997849][T11372] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 184.004946][T11368] lo speed is unknown, defaulting to 1000 [ 184.060372][T11374] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 184.078444][T11377] pimreg: entered allmulticast mode [ 184.241834][T11385] lo speed is unknown, defaulting to 1000 [ 184.309411][T11389] netlink: 'syz.3.1378': attribute type 1 has an invalid length. [ 184.328167][T11391] __nla_validate_parse: 9 callbacks suppressed [ 184.328186][T11391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1380'. [ 184.370470][T11385] lo speed is unknown, defaulting to 1000 [ 184.386249][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1380'. [ 184.705632][T11402] lo speed is unknown, defaulting to 1000 [ 184.714150][T11402] lo speed is unknown, defaulting to 1000 [ 185.866263][T11447] syzkaller0: entered promiscuous mode [ 185.888448][T11447] syzkaller0: entered allmulticast mode [ 185.918140][T11452] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1397'. [ 186.170175][ T9011] udevd[9011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 186.293354][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1400'. [ 186.389767][T11472] netlink: 'syz.3.1402': attribute type 10 has an invalid length. [ 186.442932][T11472] veth0_vlan: left promiscuous mode [ 186.457466][T11472] veth0_vlan: entered promiscuous mode [ 186.511018][T11472] team0: Device veth0_vlan failed to register rx_handler [ 186.533631][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 187.227985][T11522] netlink: 'syz.1.1415': attribute type 1 has an invalid length. [ 187.283525][T11522] 8021q: adding VLAN 0 to HW filter on device bond6 [ 187.506345][T11529] unsupported nlmsg_type 40 [ 187.532635][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 187.534767][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1418'. [ 187.657153][T11538] netlink: 'syz.2.1422': attribute type 1 has an invalid length. [ 187.684260][T11538] netlink: 'syz.2.1422': attribute type 3 has an invalid length. [ 187.708390][T11538] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1422'. [ 187.719320][T11538] NCSI netlink: No device for ifindex 813332851 [ 187.741316][T11539] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.828557][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1426'. [ 187.850594][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 187.861845][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1425'. [ 187.887896][T11539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.906767][T11539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.918125][T11539] xfrm0: left promiscuous mode [ 187.943177][T11539] xfrm0: left allmulticast mode [ 188.088245][T11539] bond1: left promiscuous mode [ 188.098288][T11539] ip6gre1: left promiscuous mode [ 188.103791][T11539] ip6gre1: left allmulticast mode [ 188.131418][T11539] bond5: left promiscuous mode [ 188.141662][T11539] batadv1: left promiscuous mode [ 188.147000][T11539] batadv1: left allmulticast mode [ 188.156236][ T797] lo speed is unknown, defaulting to 1000 [ 188.169632][ T797] sqz0: Port: 1 Link DOWN [ 188.170634][T11549] bond0: entered promiscuous mode [ 188.182283][T11549] bridge3: entered promiscuous mode [ 188.187663][T11549] bridge4: entered promiscuous mode [ 188.194279][T11549] gretap0: entered promiscuous mode [ 188.200565][T11549] hsr1: entered promiscuous mode [ 188.206714][ T6521] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.207079][T11562] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 188.215339][ T6521] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.215398][ T6521] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.215419][ T6521] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.215448][ T6521] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.309557][ T6521] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.355738][ T797] lo speed is unknown, defaulting to 1000 [ 188.361614][ T6521] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.370406][ T6521] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.371438][ T29] audit: type=1800 audit(1772491940.531:8): pid=11566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1430" name="memory.events" dev="tmpfs" ino=1340 res=0 errno=0 [ 188.400913][T11541] lo speed is unknown, defaulting to 1000 [ 188.412599][T11541] lo speed is unknown, defaulting to 1000 [ 189.576314][T11634] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 189.728473][T11634] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.807886][T11640] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 189.855850][T11634] bond4: (slave veth5): Enslaving as an active interface with a down link [ 189.880821][T11638] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 189.891618][T11638] bond4: (slave batadv1): making interface the new active one [ 189.901144][T11638] batadv1: entered promiscuous mode [ 189.907269][T11638] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 190.173345][T11662] syzkaller1: entered promiscuous mode [ 190.178850][T11662] syzkaller1: entered allmulticast mode [ 190.201057][T11655] __nla_validate_parse: 5 callbacks suppressed [ 190.201073][T11655] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1453'. [ 190.201555][T11660] lo speed is unknown, defaulting to 1000 [ 190.236143][T11659] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ..btf_total_size: 26 [ 190.236143][T11659] Invalid ma [ 190.267733][T11660] lo speed is unknown, defaulting to 1000 [ 190.613355][T11681] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1460'. [ 190.789805][T11693] Cannot find del_set index 2 as target [ 191.082667][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1469'. [ 191.427518][T11721] lo speed is unknown, defaulting to 1000 [ 191.478113][T11721] lo speed is unknown, defaulting to 1000 [ 192.495359][T11737] lo speed is unknown, defaulting to 1000 [ 192.736307][T11737] lo speed is unknown, defaulting to 1000 [ 192.761978][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1476'. [ 192.802258][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1476'. [ 192.952031][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1479'. [ 193.160735][T11769] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 193.496953][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1482'. [ 193.509675][T11783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1482'. [ 193.536170][T11782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1482'. [ 193.887686][ T29] audit: type=1107 audit(1772491946.051:9): pid=11790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 193.956804][T11797] xt_TPROXY: Can be used only with -p tcp or -p udp [ 194.087135][T11793] syzkaller1: entered promiscuous mode [ 194.106272][T11793] syzkaller1: entered allmulticast mode [ 194.124727][T11803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1486'. [ 194.170830][T11803] xt_cgroup: invalid path, errno=-2 [ 194.221068][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.784543][T11835] lo speed is unknown, defaulting to 1000 [ 194.836583][T11835] lo speed is unknown, defaulting to 1000 [ 194.864795][T11842] lo speed is unknown, defaulting to 1000 [ 195.367265][T11846] macvtap1: entered promiscuous mode [ 195.372929][T11846] macvtap1: entered allmulticast mode [ 195.378713][T11846] dummy0: entered allmulticast mode [ 195.384522][T11846] dummy0: entered promiscuous mode [ 195.390883][T11846] team0: Device macvtap1 failed to register rx_handler [ 195.399125][T11846] dummy0: left allmulticast mode [ 195.404453][T11846] dummy0: left promiscuous mode [ 195.448051][T11842] lo speed is unknown, defaulting to 1000 [ 195.896445][T11881] __nla_validate_parse: 3 callbacks suppressed [ 195.896465][T11881] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1507'. [ 195.940946][T11884] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1509'. [ 195.960425][T11881] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 196.076487][T11887] netlink: 'syz.4.1510': attribute type 11 has an invalid length. [ 196.128863][T11880] lo speed is unknown, defaulting to 1000 [ 196.305565][T11880] lo speed is unknown, defaulting to 1000 [ 196.378386][T11893] vlan3: entered promiscuous mode [ 196.383982][T11893] geneve1: entered promiscuous mode [ 196.389706][T11893] vlan3: entered allmulticast mode [ 196.403343][T11893] geneve1: entered allmulticast mode [ 196.621161][T11895] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 196.707496][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1515'. [ 196.930783][T11915] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1517'. [ 197.350319][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1524'. [ 197.481567][T11942] lo speed is unknown, defaulting to 1000 [ 197.513462][T11942] lo speed is unknown, defaulting to 1000 [ 197.563453][T11952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1528'. [ 197.573446][T11952] netlink: 'syz.0.1528': attribute type 7 has an invalid length. [ 197.583994][T11952] netlink: 'syz.0.1528': attribute type 8 has an invalid length. [ 197.609706][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1528'. [ 197.641392][T11952] gretap0: entered promiscuous mode [ 197.656884][T11952] gretap0: left promiscuous mode [ 197.866862][T11968] TCP: TCP_TX_DELAY enabled [ 197.891383][T11967] 8021q: VLANs not supported on gre0 [ 198.095583][T11973] netlink: 'syz.2.1534': attribute type 12 has an invalid length. [ 198.220650][T11988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1537'. [ 198.499074][T12000] raw_sendmsg: syz.0.1539 forgot to set AF_INET. Fix it! [ 198.509185][T12002] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 198.582024][T12002] netlink: 'syz.3.1540': attribute type 1 has an invalid length. [ 199.040913][T12027] batadv0: entered promiscuous mode [ 199.058801][T12027] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 199.239772][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1552'. [ 199.469917][T12057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1557'. [ 200.195078][T12113] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 200.446133][T12126] IPVS: ip_vs_edit_dest(): server weight less than zero [ 200.672370][T12131] lo speed is unknown, defaulting to 1000 [ 200.823663][T12136] netlink: 'syz.2.1578': attribute type 1 has an invalid length. [ 200.832267][T12131] lo speed is unknown, defaulting to 1000 [ 200.923657][T12136] 8021q: adding VLAN 0 to HW filter on device bond5 [ 200.938470][T12144] __nla_validate_parse: 2 callbacks suppressed [ 200.938487][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 201.137561][T12140] bond6: Unable to set up delay as MII monitoring is disabled [ 201.156843][T12140] bond6 (unregistering): Released all slaves [ 201.177551][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 201.196513][T12150] ipvlan2: entered promiscuous mode [ 201.262478][T12132] dvmrp0: entered allmulticast mode [ 201.343465][ T78] batadv1: left promiscuous mode [ 201.355633][T12168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1584'. [ 201.424785][T12170] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20002 [ 201.515070][T12173] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1586'. [ 201.641469][T12173] vlan2: left promiscuous mode [ 201.652607][T12173] bridge0: left promiscuous mode [ 201.669020][T12173] vlan3: left promiscuous mode [ 201.674287][T12173] geneve1: left promiscuous mode [ 201.680224][T12173] vlan3: left allmulticast mode [ 201.687576][T12173] geneve1: left allmulticast mode [ 201.704930][T12173] ipvlan2: left promiscuous mode [ 201.824351][T12189] atomic_op ffff88801f2e3198 conn xmit_atomic 0000000000000000 [ 201.911405][T12198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1593'. [ 202.641059][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1599'. [ 202.697496][T12222] tipc: Enabled bearer , priority 0 [ 202.710700][T12222] syzkaller0: entered promiscuous mode [ 202.716874][T12222] syzkaller0: entered allmulticast mode [ 202.839825][T12219] tipc: Resetting bearer [ 202.898239][T12219] tipc: Disabling bearer [ 202.962836][T12238] caif0: entered allmulticast mode [ 203.794084][T12284] veth0: entered promiscuous mode [ 203.825474][T12284] veth0: left promiscuous mode [ 203.859394][T12292] sch_tbf: burst 2 is lower than device tunl0 mtu (1480) ! [ 204.105139][T12309] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.1620'. [ 204.537957][T12319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1624'. [ 204.661428][T12321] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 204.700249][T12328] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 204.927113][T12339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1629'. [ 205.025128][T12348] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 205.045139][T12349] netlink: 'syz.0.1632': attribute type 10 has an invalid length. [ 205.053485][T12348] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1632'. [ 205.155576][T12354] IPVS: set_ctl: invalid protocol: 51 172.30.1.2:20001 [ 205.409879][T12372] netlink: 'syz.3.1638': attribute type 298 has an invalid length. [ 205.452878][T12372] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 205.459134][T12372] pim6reg1: linktype set to 805 [ 206.059765][T12418] lo speed is unknown, defaulting to 1000 [ 206.078444][T12418] lo speed is unknown, defaulting to 1000 [ 206.440725][T12439] netlink: 'syz.3.1659': attribute type 61 has an invalid length. [ 206.487815][T12439] __nla_validate_parse: 4 callbacks suppressed [ 206.487835][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1659'. [ 206.662675][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1662'. [ 206.698679][T12452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1663'. [ 206.796147][T12458] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1663'. [ 206.830977][T12463] sctp: [Deprecated]: syz.3.1665 (pid 12463) Use of int in max_burst socket option. [ 206.830977][T12463] Use struct sctp_assoc_value instead [ 207.083705][T12479] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 207.147303][T12479] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 207.231468][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 207.557414][T12498] netlink: 'syz.1.1675': attribute type 4 has an invalid length. [ 207.652868][T12506] netlink: 'syz.1.1675': attribute type 4 has an invalid length. [ 207.804663][T12520] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20003 [ 207.933936][T12528] trusted_key: syz.0.1680 sent an empty control message without MSG_MORE. [ 207.990073][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 208.128479][T12535] sctp: [Deprecated]: syz.1.1683 (pid 12535) Use of int in max_burst socket option deprecated. [ 208.128479][T12535] Use struct sctp_assoc_value instead [ 208.145930][T12536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1682'. [ 208.156691][T12535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1683'. [ 208.314298][T12540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1684'. [ 208.334609][T12540] siw: device registration error -23 [ 208.618234][T12551] syzkaller0: entered promiscuous mode [ 208.624096][T12551] syzkaller0: entered allmulticast mode [ 208.850498][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1692'. [ 210.419071][T12583] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 210.788623][T12606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.075801][T12629] lo speed is unknown, defaulting to 1000 [ 211.123984][T12629] lo speed is unknown, defaulting to 1000 [ 211.173284][T12634] batadv_slave_1: entered allmulticast mode [ 211.190833][T12634] batadv_slave_1: left allmulticast mode [ 211.272402][T12637] veth7: entered promiscuous mode [ 211.287810][T12642] netlink: 'syz.0.1712': attribute type 1 has an invalid length. [ 211.296670][T12640] netlink: 'syz.4.1711': attribute type 1 has an invalid length. [ 211.404171][T12642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 211.467690][T12644] bond3: (slave gretap1): making interface the new active one [ 211.523463][T12644] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 211.663177][T12660] nbd: couldn't find a device at index 0 [ 211.819877][T12671] x_tables: (null)_tables: pkttype.0 match: invalid size 8 (kernel) != (user) 16 [ 212.431115][T12701] tipc: Started in network mode [ 212.436366][T12701] tipc: Node identity , cluster identity 4711 [ 212.906284][T12732] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 213.118368][T12752] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 213.260826][T12757] delete_channel: no stack [ 213.267506][T12755] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.505674][T12769] __nla_validate_parse: 35 callbacks suppressed [ 213.505694][T12769] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1741'. [ 213.601309][T12777] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 213.609246][T12777] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 213.609687][T12772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1745'. [ 213.633819][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1746'. [ 213.837150][T12797] bridge_slave_0: invalid flags given to default FDB implementation [ 214.035810][T12807] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1754'. [ 214.051700][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1752'. [ 214.063184][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1753'. [ 214.252038][T12815] netlink: 'syz.3.1756': attribute type 1 has an invalid length. [ 214.315527][T12820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1758'. [ 214.333683][T12820] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1758'. [ 214.400565][T12826] vlan4: entered promiscuous mode [ 214.414069][T12826] vlan4: entered allmulticast mode [ 214.489538][T12831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1762'. [ 214.741345][T12850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.753731][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1763'. [ 214.791017][T12847] lo speed is unknown, defaulting to 1000 [ 214.810611][T12846] gretap0: left promiscuous mode [ 214.838709][T12857] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 214.876338][T12847] lo speed is unknown, defaulting to 1000 [ 215.147596][T12873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.517836][T12938] xt_hashlimit: size too large, truncated to 1048576 [ 216.707632][T12927] team0: Port device veth9 added [ 216.788420][T12943] bridge_slave_0 (unregistering): left allmulticast mode [ 216.819320][T12943] bridge_slave_0 (unregistering): left promiscuous mode [ 216.876677][T12943] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.244196][T12956] batadv_slave_1: entered allmulticast mode [ 217.410895][T12970] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 217.501567][T12975] pim6reg1: entered promiscuous mode [ 217.507404][T12975] pim6reg1: entered allmulticast mode [ 217.614936][T12981] SET target dimension over the limit! [ 217.947952][T12999] ieee802154 phy0 wpan0: encryption failed: -22 [ 217.959537][T13003] block nbd1: Unsupported socket: should be TCP or UNIX. [ 218.241002][T13016] bond0: (slave dummy0): Releasing backup interface [ 218.273823][T13016] bridge_slave_1: left allmulticast mode [ 218.285686][T13016] bridge_slave_1: left promiscuous mode [ 218.294751][T13016] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.333928][T13016] bond0: (slave bond_slave_0): Releasing backup interface [ 218.347986][T13016] bond0: (slave bond_slave_1): Releasing backup interface [ 218.364330][T13016] team0: Port device team_slave_0 removed [ 218.374131][T13016] team0: Port device team_slave_1 removed [ 218.380758][T13016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.392055][T13016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.450218][T13016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 218.469403][T13022] team0: Mode changed to "roundrobin" [ 218.866493][T13050] syzkaller0: entered promiscuous mode [ 218.888731][T13050] syzkaller0: entered allmulticast mode [ 219.083259][T13057] lo speed is unknown, defaulting to 1000 [ 219.122237][T13057] lo speed is unknown, defaulting to 1000 [ 219.212700][T13063] sctp: [Deprecated]: syz.4.1830 (pid 13063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.212700][T13063] Use struct sctp_sack_info instead [ 219.283498][T13064] sctp: [Deprecated]: syz.4.1830 (pid 13064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 219.283498][T13064] Use struct sctp_sack_info instead [ 219.777182][T13078] sctp: [Deprecated]: syz.4.1833 (pid 13078) Use of int in max_burst socket option. [ 219.777182][T13078] Use struct sctp_assoc_value instead [ 219.832732][T13075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.852029][T13075] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.981486][T13075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.996646][T13075] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.070994][T13095] netlink: 'syz.4.1837': attribute type 2 has an invalid length. [ 220.134950][T13095] : entered promiscuous mode [ 220.187514][T13075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.198136][T13075] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.313718][T13075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.324431][T13075] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.645618][ T6525] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.654143][ T6525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.679317][ T6525] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.694657][ T6525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.713561][ T6525] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.721765][ T6525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.750570][ T6525] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.762340][ T6525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.147794][T13115] lo speed is unknown, defaulting to 1000 [ 221.167433][T13115] lo speed is unknown, defaulting to 1000 [ 221.455057][T13140] __nla_validate_parse: 11 callbacks suppressed [ 221.455078][T13140] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1847'. [ 221.491102][T13140] ip6gre1: entered promiscuous mode [ 221.496825][T13140] ip6gre1: entered allmulticast mode [ 221.553962][T13140] netlink: 'syz.3.1847': attribute type 7 has an invalid length. [ 222.251073][T13182] netlink: 'syz.4.1860': attribute type 1 has an invalid length. [ 222.632186][T13190] gretap1: entered allmulticast mode [ 222.681534][T13190] bond6: (slave gretap1): making interface the new active one [ 222.703081][T13190] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 222.934205][T13214] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 222.941390][T13214] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 223.074473][T13226] lo speed is unknown, defaulting to 1000 [ 223.114931][T13226] lo speed is unknown, defaulting to 1000 [ 223.233313][T13234] netlink: 'syz.2.1871': attribute type 13 has an invalid length. [ 223.262645][T13234] netlink: 'syz.2.1871': attribute type 17 has an invalid length. [ 223.454665][T13234] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.484719][T13234] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.538735][ T9] lo speed is unknown, defaulting to 1000 [ 223.562689][ T9] syz2: Port: 1 Link ACTIVE [ 223.689500][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1878'. [ 223.865310][T13272] tipc: Enabling of bearer rejected, failed to enable media [ 223.959431][T13273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'. [ 223.982921][T13278] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1880'. [ 224.009179][T13280] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.275281][T13296] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1887'. [ 224.334754][T13295] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1885'. [ 224.495956][T13302] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1888'. [ 224.516752][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1888'. [ 224.661851][T13307] syzkaller1: entered promiscuous mode [ 224.672835][T13307] syzkaller1: entered allmulticast mode [ 225.036186][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 225.052741][T13336] dummy0: left allmulticast mode [ 225.058045][T13336] bridge0: port 3(dummy0) entered disabled state [ 225.079189][T13336] bridge_slave_1: left allmulticast mode [ 225.093803][T13336] bridge_slave_1: left promiscuous mode [ 225.099843][T13336] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.134515][T13336] x9: left allmulticast mode [ 225.139861][T13336] x9: left promiscuous mode [ 225.160280][T13345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1898'. [ 225.161398][T13336] bridge0: port 1(1x9) entered disabled state [ 225.478042][T13361] x_tables: duplicate entry at hook 2 [ 225.875613][T13380] syzkaller0: entered promiscuous mode [ 225.881555][T13380] syzkaller0: entered allmulticast mode [ 226.026321][T13381] ip6erspan0: entered allmulticast mode [ 226.151283][T13393] macsec1: entered promiscuous mode [ 226.157859][T13393] syzkaller0: port 1(macsec1) entered blocking state [ 226.165421][T13393] syzkaller0: port 1(macsec1) entered disabled state [ 226.174177][T13393] macsec1: entered allmulticast mode [ 226.186263][T13393] macsec1: left allmulticast mode [ 226.477971][T13413] netlink: 'syz.1.1920': attribute type 1 has an invalid length. [ 226.600675][T13413] 8021q: adding VLAN 0 to HW filter on device bond7 [ 226.717399][T13413] bond7: (slave bridge6): making interface the new active one [ 226.789713][T13413] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 226.846072][T13443] __nla_validate_parse: 9 callbacks suppressed [ 226.846092][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 226.864637][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 226.876903][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 226.889171][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 226.919593][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 226.965014][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 226.979669][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 227.014058][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 227.035651][T13443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'. [ 227.052825][T13448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1927'. [ 227.070016][T13443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.079930][T13443] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.093432][T13443] caif0: left allmulticast mode [ 227.098323][T13443] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 227.211811][T13448] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.283480][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 227.414405][T13469] gretap0: entered promiscuous mode [ 227.426188][T13469] macsec1: entered promiscuous mode [ 227.445697][T13469] gretap0: left promiscuous mode [ 227.499367][T13478] syzkaller0: entered promiscuous mode [ 227.514871][T13478] syzkaller0: entered allmulticast mode [ 227.560243][T13480] batadv_slave_1: entered promiscuous mode [ 227.588514][T13479] batadv_slave_1: left promiscuous mode [ 227.882665][T13505] netlink: 'syz.0.1944': attribute type 21 has an invalid length. [ 227.964118][T13510] netlink: 'syz.0.1946': attribute type 2 has an invalid length. [ 228.433084][T13542] netpci0: tun_chr_ioctl cmd 1074025678 [ 228.438903][T13542] netpci0: group set to 0 [ 228.617812][T13551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.679471][T13552] xt_connbytes: Forcing CT accounting to be enabled [ 228.977015][T13559] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 228.987033][T13559] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 229.298900][T13579] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.052546][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 230.432775][T13618] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 230.441091][T13618] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 230.464312][T13618] netlink: 'syz.3.1981': attribute type 33 has an invalid length. [ 230.578679][T13622] rdma_rxe: rxe_newlink: failed to add bond0 [ 230.856443][T13628] lo speed is unknown, defaulting to 1000 [ 230.868422][T13628] lo speed is unknown, defaulting to 1000 [ 230.953029][T13634] syzkaller0: entered promiscuous mode [ 230.974250][T13634] syzkaller0: entered allmulticast mode [ 230.995992][T13636] tipc: Enabled bearer , priority 0 [ 231.008400][T13633] tipc: Resetting bearer [ 232.893853][T13633] tipc: Disabling bearer [ 232.911079][T13649] __nla_validate_parse: 18 callbacks suppressed [ 232.911092][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1989'. [ 232.962361][T13659] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 233.051701][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 233.100754][ T6524] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.100847][T13663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1992'. [ 233.121353][ T6524] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.154401][ T6524] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.176795][ T6524] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.667787][T13693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.702337][ T5893] lo speed is unknown, defaulting to 1000 [ 233.702370][T13691] lo speed is unknown, defaulting to 1000 [ 233.711194][ T5893] syz2: Port: 1 Link DOWN [ 233.765887][T13691] lo speed is unknown, defaulting to 1000 [ 233.928040][T13703] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 233.966735][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2003'. [ 234.076811][T13707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 234.204224][T13713] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 234.236754][T13715] bond0: entered promiscuous mode [ 234.262843][T13715] bond_slave_0: entered promiscuous mode [ 234.283207][T13715] bond_slave_1: entered promiscuous mode [ 234.298813][T13715] batadv0: entered promiscuous mode [ 234.342542][T13715] debugfs: 'hsr1' already exists in 'hsr' [ 234.365276][T13715] Cannot create hsr debugfs directory [ 234.382893][T13715] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 234.399814][T13715] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 234.417728][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2011'. [ 234.420093][T13715] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 234.450310][T13715] bond0: left promiscuous mode [ 234.456303][T13715] bond_slave_0: left promiscuous mode [ 234.462982][T13715] bond_slave_1: left promiscuous mode [ 234.469326][T13715] batadv0: left promiscuous mode [ 234.486225][T13723] vlan0: entered promiscuous mode [ 234.491657][T13723] erspan0: entered promiscuous mode [ 234.537434][T13732] geneve3: entered promiscuous mode [ 234.564582][ T35] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.573786][ T6097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.608229][ T6097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.642969][ T6097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.654220][T13730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2011'. [ 234.690235][T13730] netlink: 197116 bytes leftover after parsing attributes in process `syz.1.2011'. [ 234.717271][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 234.769415][T13746] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 234.810805][T13742] 8021q: adding VLAN 0 to HW filter on device bond6 [ 234.829555][T13746] bond6: (slave veth0_to_bridge): Enslaving as an active interface with a down link [ 235.077700][T13759] syzkaller1: entered promiscuous mode [ 235.080535][T13747] delete_channel: no stack [ 235.095451][T13759] syzkaller1: entered allmulticast mode [ 235.260544][T13762] lo speed is unknown, defaulting to 1000 [ 235.310517][T13762] lo speed is unknown, defaulting to 1000 [ 235.448855][T13773] sctp: [Deprecated]: syz.4.2023 (pid 13773) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.448855][T13773] Use struct sctp_sack_info instead [ 236.168060][T13798] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check. [ 236.689612][T13831] netlink: 'syz.0.2039': attribute type 4 has an invalid length. [ 236.844550][T13838] netlink: 'syz.4.2041': attribute type 10 has an invalid length. [ 236.968655][T13838] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 237.065045][T13846] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 237.076671][T13846] netlink: 'syz.0.2043': attribute type 2 has an invalid length. [ 237.086236][T13846] netlink: 'syz.0.2043': attribute type 1 has an invalid length. [ 237.099999][T13846] netlink: 'syz.0.2043': attribute type 3 has an invalid length. [ 237.717318][T13872] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 238.180267][ T9011] udevd[9011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 238.230375][ T9011] udevd[9011]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 238.468263][T13905] __nla_validate_parse: 15 callbacks suppressed [ 238.468284][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2053'. [ 238.775880][T13907] lo speed is unknown, defaulting to 1000 [ 238.857235][T13907] lo speed is unknown, defaulting to 1000 [ 238.884627][T13926] xt_hashlimit: max too large, truncated to 1048576 [ 238.946921][T13928] netlink: 1600 bytes leftover after parsing attributes in process `syz.3.2057'. [ 238.983554][T13928] openvswitch: netlink: Flow key attr not present in new flow. [ 239.481355][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2054'. [ 239.925564][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 240.728770][T13997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.926665][T14008] syzkaller0: entered promiscuous mode [ 240.947134][T14008] syzkaller0: entered allmulticast mode [ 241.144779][T14025] sctp: [Deprecated]: syz.4.2076 (pid 14025) Use of int in max_burst socket option. [ 241.144779][T14025] Use struct sctp_assoc_value instead [ 241.715810][T14067] netlink: 'syz.2.2087': attribute type 1 has an invalid length. [ 241.724260][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 241.742542][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 241.752828][T14070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2086'. [ 241.769056][T14067] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 241.780582][T14067] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 241.811028][T14074] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2087'. [ 241.849757][T14074] bond7: (slave bridge9): Enslaving as an active interface with a down link [ 241.891197][T14076] netlink: 'syz.4.2089': attribute type 1 has an invalid length. [ 241.981855][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2091'. [ 242.012398][ T5878] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 242.013271][T14076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2089'. [ 242.045280][T14076] bond0: entered promiscuous mode [ 242.053416][T14076] bond_slave_0: entered promiscuous mode [ 242.059371][T14076] bond_slave_1: entered promiscuous mode [ 242.066292][T14076] gretap0: entered promiscuous mode [ 242.075457][T14076] debugfs: 'hsr1' already exists in 'hsr' [ 242.081214][T14076] Cannot create hsr debugfs directory [ 242.094622][T14076] hsr1: entered promiscuous mode [ 242.262485][ T6097] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.012415][ T5878] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.298407][T14181] openvswitch: netlink: EtherType 1c is less than min 600 [ 243.317741][T14183] delete_channel: no stack [ 243.337133][ T6110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.362622][ T6110] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.422301][ T5878] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 243.498867][T14200] netlink: 'syz.2.2120': attribute type 16 has an invalid length. [ 243.526632][T14200] netlink: 'syz.2.2120': attribute type 17 has an invalid length. [ 243.626887][T14200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.653474][ T5808] lo speed is unknown, defaulting to 1000 [ 243.659786][T14207] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 243.669731][ T5808] syz2: Port: 1 Link ACTIVE [ 244.031430][T14224] __nla_validate_parse: 6 callbacks suppressed [ 244.031450][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 244.073748][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'. [ 244.116154][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2128'. [ 244.137621][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2128'. [ 244.147963][T14234] netlink: 'syz.3.2132': attribute type 1 has an invalid length. [ 244.284366][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2133'. [ 244.547197][T14266] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2139'. [ 244.707999][T14279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 244.864899][T14285] geneve2: entered promiscuous mode [ 244.870223][T14285] geneve2: entered allmulticast mode [ 244.877557][T14275] lo speed is unknown, defaulting to 1000 [ 244.888504][T14275] lo speed is unknown, defaulting to 1000 [ 244.915866][T14284] lo speed is unknown, defaulting to 1000 [ 245.030451][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2144'. [ 245.340442][T14284] lo speed is unknown, defaulting to 1000 [ 245.454393][T14297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2147'. [ 245.492448][T14297] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2147'. [ 245.497028][T14295] netlink: 'syz.2.2146': attribute type 1 has an invalid length. [ 245.609535][T14295] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 245.656133][T14295] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 245.699089][T14295] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 246.449837][T14319] bond9: option lp_interval: invalid value (0) [ 246.463168][T14319] bond9: option lp_interval: allowed values 1 - 2147483647 [ 247.094708][T14319] bond9 (unregistering): Released all slaves [ 247.606984][T14347] netlink: zone id is out of range [ 247.613160][T14347] netlink: zone id is out of range [ 247.621415][T14347] netlink: zone id is out of range [ 247.627340][T14347] netlink: zone id is out of range [ 247.633793][T14347] netlink: zone id is out of range [ 247.641975][T14347] netlink: zone id is out of range [ 247.674341][T14347] netlink: zone id is out of range [ 247.682266][T14347] netlink: zone id is out of range [ 247.697777][T14347] netlink: zone id is out of range [ 247.724223][T14347] netlink: zone id is out of range [ 247.813256][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 247.817583][T14350] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 248.707683][T14393] lo speed is unknown, defaulting to 1000 [ 248.728428][T14393] lo speed is unknown, defaulting to 1000 [ 248.959825][ T29] audit: type=1800 audit(1772492001.121:10): pid=14407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2180" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2165 res=0 errno=0 [ 249.079911][T14416] __nla_validate_parse: 3 callbacks suppressed [ 249.079929][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'. [ 249.144434][T14416] vlan5: entered promiscuous mode [ 249.159710][T14416] bridge0: entered promiscuous mode [ 249.204227][T14421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2184'. [ 249.689792][T14445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2190'. [ 249.723598][T14444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2190'. [ 249.876641][T14455] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2193'. [ 249.895568][T14457] rdma_rxe: rxe_newlink: failed to add lo [ 249.947700][T14461] netlink: 'syz.4.2195': attribute type 13 has an invalid length. [ 250.095197][T14472] netlink: 'syz.0.2199': attribute type 10 has an invalid length. [ 250.119770][T14475] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.144933][T14479] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 250.155278][T14472] team0: Cannot enslave team device to itself [ 250.169362][T14479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'. [ 250.227380][T14475] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.273625][T14487] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 250.299680][T14475] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.331599][T14489] macsec1: entered promiscuous mode [ 250.364435][T14475] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.491084][ T136] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.518006][ T136] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.552560][ T136] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.621956][T14500] lo speed is unknown, defaulting to 1000 [ 250.633584][ T136] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.654336][T14500] lo speed is unknown, defaulting to 1000 [ 250.728118][T14507] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 250.869065][T14512] vlan2: entered allmulticast mode [ 250.935866][T14513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2212'. [ 250.965127][T14512] team0: entered allmulticast mode [ 250.970287][T14512] team_slave_0: entered allmulticast mode [ 251.005233][T14512] team_slave_1: entered allmulticast mode [ 251.359667][T14534] netlink: 'syz.2.2219': attribute type 3 has an invalid length. [ 251.382510][T14534] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2219'. [ 255.655442][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.932360][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 274.852414][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.468770][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 303.476962][T14580] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2227'. [ 303.498244][T14579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 303.513165][T14580] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'. [ 303.522734][T14583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2230'. [ 303.531770][T14583] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 303.552642][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2228'. [ 303.580234][T14583] xt_connbytes: Forcing CT accounting to be enabled [ 303.618929][T14583] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 304.083098][T14629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2242'. [ 304.290288][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2244'. [ 304.397266][T14647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2246'. [ 304.413865][T14647] caif0: Master is either lo or non-ether device [ 304.640243][T14657] netlink: 'syz.0.2249': attribute type 11 has an invalid length. [ 304.696230][T14657] No such timeout policy "syz0" [ 304.707086][T14659] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.714404][T14659] IPv6: NLM_F_CREATE should be set when creating new route [ 304.757562][T14661] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2251'. [ 304.900766][T14669] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 304.924616][T14672] net_ratelimit: 44 callbacks suppressed [ 304.924634][T14672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.988320][T14676] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 305.089840][T14684] xt_TPROXY: Can be used only with -p tcp or -p udp [ 305.438937][T14695] netlink: 'syz.2.2262': attribute type 1 has an invalid length. [ 305.501135][T14699] team_slave_0: left allmulticast mode [ 305.508834][T14699] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 305.520769][T14699] team0 (unregistering): Port device team_slave_0 removed [ 305.530710][T14699] team_slave_1: left allmulticast mode [ 305.540180][T14699] team0 (unregistering): Failed to send options change via netlink (err -105) [ 305.562871][T14699] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 305.583811][T14699] team0 (unregistering): Port device team_slave_1 removed [ 305.627553][T14695] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 305.705404][T14722] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 305.899105][T14730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 305.930584][T14733] syzkaller1: entered promiscuous mode [ 305.936756][T14733] syzkaller1: entered allmulticast mode [ 306.187219][T14753] netlink: 'syz.2.2277': attribute type 1 has an invalid length. [ 306.488496][T14774] xt_ipcomp: unknown flags 1D [ 306.935319][T14798] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 306.948897][T14800] netlink: 'syz.0.2292': attribute type 4 has an invalid length. [ 306.991549][T14798] bond8: entered promiscuous mode [ 307.000037][T14812] netlink: 'syz.0.2292': attribute type 4 has an invalid length. [ 307.001890][T14798] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.206854][T14830] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 307.219915][T14831] syzkaller0: entered promiscuous mode [ 307.245025][T14831] syzkaller0: entered allmulticast mode [ 307.330711][T14843] netlink: 'syz.0.2303': attribute type 11 has an invalid length. [ 307.339566][T14838] bond9: (slave bridge0): making interface the new active one [ 307.348299][T14838] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 307.408893][T14850] IPv6: addrconf: prefix option has invalid lifetime [ 307.658630][T14865] netlink: 'syz.0.2309': attribute type 1 has an invalid length. [ 307.673382][T14868] netlink: 'syz.4.2311': attribute type 1 has an invalid length. [ 307.686675][T14868] netlink: 'syz.4.2311': attribute type 6 has an invalid length. [ 307.695335][T14868] netlink: 'syz.4.2311': attribute type 3 has an invalid length. [ 307.721108][T14869] veth0_to_bridge: entered promiscuous mode [ 307.727918][T14869] macvtap1: entered promiscuous mode [ 307.794656][T14869] macvtap1: entered allmulticast mode [ 307.800077][T14869] veth0_to_bridge: entered allmulticast mode [ 307.824054][T14869] veth0_to_bridge: left allmulticast mode [ 307.830039][T14869] veth0_to_bridge: left promiscuous mode [ 307.927959][T14861] lo speed is unknown, defaulting to 1000 [ 308.071792][T14870] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 308.084069][T14870] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 308.109061][T14874] 8021q: adding VLAN 0 to HW filter on device bond7 [ 308.145108][T14877] macvlan5: entered promiscuous mode [ 308.150631][T14877] macvlan5: entered allmulticast mode [ 308.160911][T14877] bond7: entered promiscuous mode [ 308.172348][T14877] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 308.190387][T14877] bond7: left promiscuous mode [ 308.210412][T14861] lo speed is unknown, defaulting to 1000 [ 308.591987][T14902] __nla_validate_parse: 23 callbacks suppressed [ 308.592006][T14902] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.2315'. [ 308.638487][T14907] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2318'. [ 309.010327][T14922] bond8: entered promiscuous mode [ 309.022691][T14922] 8021q: adding VLAN 0 to HW filter on device bond8 [ 309.037261][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2322'. [ 309.050884][T14933] netlink: 6856 bytes leftover after parsing attributes in process `syz.1.2322'. [ 309.060682][T14933] netlink: 6856 bytes leftover after parsing attributes in process `syz.1.2322'. [ 309.129480][T14939] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2324'. [ 309.275516][T14940] lo speed is unknown, defaulting to 1000 [ 309.296123][ T51] block nbd1: Receive control failed (result -32) [ 309.360680][T14940] lo speed is unknown, defaulting to 1000 [ 309.397659][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'. [ 309.425674][T14951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2325'. [ 309.630715][T14959] lo speed is unknown, defaulting to 1000 [ 309.821638][T14959] lo speed is unknown, defaulting to 1000 [ 310.147437][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 310.195324][T14996] sit1: entered promiscuous mode [ 310.614509][T15014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2343'. [ 310.692241][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 310.859847][T15028] block nbd2: Unsupported socket: should be TCP or UNIX. [ 310.904785][T15028] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 310.912301][T15028] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 311.286049][T15043] openvswitch: netlink: IP tunnel dst address not specified [ 311.456986][T15059] validate_nla: 1 callbacks suppressed [ 311.457006][T15059] netlink: 'syz.3.2353': attribute type 2 has an invalid length. [ 311.483865][T15059] netlink: 'syz.3.2353': attribute type 2 has an invalid length. [ 311.537806][T15065] openvswitch: netlink: Flow actions attr not present in new flow. [ 311.707292][T15075] x_tables: duplicate underflow at hook 3 [ 311.833678][T15081] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 311.980995][T15101] tipc: Started in network mode [ 311.997088][T15101] tipc: Node identity , cluster identity 4711 [ 312.004685][T15101] tipc: Failed to obtain node identity [ 312.011166][T15101] tipc: Enabling of bearer rejected, failed to enable media [ 312.021875][T15101] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 312.041927][T15101] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 312.261110][T15125] veth12: entered allmulticast mode [ 312.575503][T15145] netlink: 'syz.2.2384': attribute type 19 has an invalid length. [ 312.595264][T15145] netlink: 'syz.2.2384': attribute type 19 has an invalid length. [ 312.813514][T15166] netlink: 'syz.1.2388': attribute type 30 has an invalid length. [ 312.913506][T15166] netlink: 'syz.1.2388': attribute type 30 has an invalid length. [ 312.982840][T15180] bond11 (unregistering): Released all slaves [ 313.195771][T15193] lo speed is unknown, defaulting to 1000 [ 313.257550][T15193] lo speed is unknown, defaulting to 1000 [ 313.305134][T15188] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 313.514946][T15188] bond10: entered promiscuous mode [ 313.548499][T15188] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.624605][T15209] 8021q: adding VLAN 0 to HW filter on device bond10 [ 313.633558][T15209] bond10: (slave vti2): The slave device specified does not support setting the MAC address [ 313.644174][T15209] bond10: (slave vti2): Setting fail_over_mac to active for active-backup mode [ 313.660638][T15209] bond10: (slave vti2): making interface the new active one [ 313.668392][T15209] vti2: entered promiscuous mode [ 313.690274][T15209] bond10: (slave vti2): Enslaving as an active interface with an up link [ 313.704325][T15218] bridge_slave_0: left allmulticast mode [ 313.710156][T15218] bridge_slave_0: left promiscuous mode [ 313.716847][T15218] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.763806][T15234] IPv6: addrconf: prefix option has invalid lifetime [ 313.830411][T15237] __nla_validate_parse: 21 callbacks suppressed [ 313.830433][T15237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 313.847341][T15223] team_slave_0: left promiscuous mode [ 313.854034][T15223] team_slave_1: left promiscuous mode [ 313.886206][T15238] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2407'. [ 313.954266][T15242] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2409'. [ 313.986601][T15223] vlan2: left promiscuous mode [ 313.991538][T15223] veth0_to_team: left promiscuous mode [ 313.998290][T15223] vlan2: left allmulticast mode [ 314.003428][T15223] veth0_to_team: left allmulticast mode [ 314.012969][T15223] bond0: left promiscuous mode [ 314.019786][T15243] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2409'. [ 314.032416][T15223] bond1: left promiscuous mode [ 314.037295][T15223] bond1: left allmulticast mode [ 314.046427][T15223] geneve2: left promiscuous mode [ 314.051462][T15223] geneve2: left allmulticast mode [ 314.078634][T15223] sit1: left promiscuous mode [ 314.130561][ T8893] syz0: Port: 1 Link DOWN [ 314.130705][ T13] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.146501][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.155543][ T13] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.191822][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.216779][ T13] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.240132][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.276184][ T13] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.286588][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.637379][T15283] gretap4: entered promiscuous mode [ 314.642960][T15283] gretap4: entered allmulticast mode [ 314.746206][T15286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2414'. [ 314.805952][T15288] bridge0: entered allmulticast mode [ 314.831650][T15288] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 314.889463][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2422'. [ 314.908525][T15294] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2422'. [ 315.048360][T15299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2424'. [ 315.089505][T15299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2424'. [ 315.152409][T15307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2427'. [ 315.973395][T15362] lo speed is unknown, defaulting to 1000 [ 315.993598][T15362] lo speed is unknown, defaulting to 1000 [ 316.946102][T15403] netlink: 'syz.0.2454': attribute type 4 has an invalid length. [ 316.983855][T15403] netlink: 'syz.0.2454': attribute type 4 has an invalid length. [ 317.000145][T15409] bond9: option ad_actor_sys_prio: invalid value (0) [ 317.010631][T15409] bond9: option ad_actor_sys_prio: allowed values 1 - 65535 [ 317.021385][T15409] bond9 (unregistering): Released all slaves [ 317.098290][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.320566][T15428] lo speed is unknown, defaulting to 1000 [ 317.328146][T15432] syzkaller0: entered promiscuous mode [ 317.334097][T15432] syzkaller0: entered allmulticast mode [ 317.367590][T15428] lo speed is unknown, defaulting to 1000 [ 317.424804][T15437] xt_hashlimit: size too large, truncated to 1048576 [ 317.805873][T15459] bond3: option mode: unable to set because the bond device has slaves [ 318.004521][T15470] lo speed is unknown, defaulting to 1000 [ 318.030349][T15470] lo speed is unknown, defaulting to 1000 [ 318.139554][T15432] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 318.147996][T15432] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 318.527452][T15485] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma? [ 318.654228][T15487] bridge4: entered promiscuous mode [ 318.672617][T15487] macsec1: entered promiscuous mode [ 318.679466][T15487] bridge4: port 1(macsec1) entered blocking state [ 318.687137][T15487] bridge4: port 1(macsec1) entered disabled state [ 318.694761][T15487] macsec1: entered allmulticast mode [ 318.700282][T15487] bridge4: entered allmulticast mode [ 318.712787][T15487] macsec1: left allmulticast mode [ 318.722370][T15487] bridge4: left allmulticast mode [ 318.734236][T15487] bridge4: left promiscuous mode [ 318.836898][T15497] netlink: 'syz.4.2480': attribute type 8 has an invalid length. [ 318.953368][T15501] __nla_validate_parse: 24 callbacks suppressed [ 318.953385][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2481'. [ 318.987721][T15507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2482'. [ 318.998404][T15508] sock: sock_timestamping_bind_phc: sock not bind to device [ 319.018242][T15508] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2483'. [ 319.061033][T15509] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2482'. [ 319.083785][T15509] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2482'. [ 319.299371][T15519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2485'. [ 319.723680][T15554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2493'. [ 319.770502][T15554] ip6gre2: entered promiscuous mode [ 319.778915][T15554] ip6gre2: entered allmulticast mode [ 320.319301][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2509'. [ 320.338045][T15601] veth0_to_team: entered promiscuous mode [ 320.360491][T15601] veth0_to_team: entered allmulticast mode [ 320.983455][T15647] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2518'. [ 320.996637][T15649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2520'. [ 321.046953][T15649] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 321.255909][T15664] 8021q: adding VLAN 0 to HW filter on device bond9 [ 321.986291][T15705] netlink: 'syz.0.2531': attribute type 1 has an invalid length. [ 322.059175][T15719] x_tables: duplicate underflow at hook 4 [ 322.099903][T15718] syzkaller0: entered promiscuous mode [ 322.106488][T15718] syzkaller0: entered allmulticast mode [ 322.228212][T15722] syzkaller0: left promiscuous mode [ 322.234217][T15722] syzkaller0: left allmulticast mode [ 322.444802][T15736] IPv6: Can't replace route, no match found [ 322.955165][T15758] siw: device registration error -23 [ 323.561460][T15801] syz_tun: entered allmulticast mode [ 323.896755][T15826] netlink: 'syz.4.2581': attribute type 1 has an invalid length. [ 324.019465][T15826] bond9: entered promiscuous mode [ 324.048020][T15826] bond9: entered allmulticast mode [ 324.063626][T15826] 8021q: adding VLAN 0 to HW filter on device bond9 [ 324.088318][T15834] erspan1: entered allmulticast mode [ 324.099735][T15834] bond9: (slave erspan1): making interface the new active one [ 324.108228][T15834] erspan1: entered promiscuous mode [ 324.115713][T15834] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 324.130255][T15836] tipc: Enabled bearer , priority 10 [ 324.308894][T15852] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.568577][T15869] netlink: 'syz.1.2599': attribute type 1 has an invalid length. [ 324.648314][T15869] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 324.673563][T15869] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 324.754040][T15883] bond10: (slave bridge10): Enslaving as an active interface with a down link [ 324.895819][T15892] __nla_validate_parse: 207 callbacks suppressed [ 324.895838][T15892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2609'. [ 324.924550][T15894] netlink: 'syz.1.2608': attribute type 7 has an invalid length. [ 324.980917][T15893] syzkaller0: entered promiscuous mode [ 325.007297][T15893] syzkaller0: entered allmulticast mode [ 325.053913][T15902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.016537][T15913] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 327.037183][T15933] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 327.045014][T15933] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 327.119070][T15948] lo speed is unknown, defaulting to 1000 [ 327.157354][T15948] lo speed is unknown, defaulting to 1000 [ 327.216156][T15955] netlink: 'syz.1.2632': attribute type 21 has an invalid length. [ 327.224963][T15955] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2632'. [ 327.301583][T15960] netlink: 'syz.1.2632': attribute type 1 has an invalid length. [ 327.310138][T15955] netlink: 'syz.1.2632': attribute type 4 has an invalid length. [ 327.318929][T15960] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2632'. [ 327.365828][T15955] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2632'. [ 327.615187][T15955] bond11: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 327.647384][T15955] bond11 (unregistering): Released all slaves [ 328.030901][T15987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 328.074794][T15990] dvmrp0: left allmulticast mode [ 328.155982][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2644'. [ 328.170285][T15996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2646'. [ 328.190277][T15993] gretap2: entered promiscuous mode [ 328.200026][ T8893] IPVS: starting estimator thread 0... [ 328.302458][T15997] IPVS: using max 39 ests per chain, 93600 per kthread [ 328.536721][T16007] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 329.106284][T16006] lo speed is unknown, defaulting to 1000 [ 329.137132][T16006] lo speed is unknown, defaulting to 1000 [ 329.197130][T16028] netlink: 'syz.4.2652': attribute type 1 has an invalid length. [ 329.225080][T16028] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 329.553186][T16045] bridge0: entered allmulticast mode [ 329.609141][T16047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2657'. [ 329.612900][T16045] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 329.636538][T16047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2657'. [ 330.068972][T16072] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2663'. [ 330.306544][T16070] lo speed is unknown, defaulting to 1000 [ 330.325357][T16070] lo speed is unknown, defaulting to 1000 [ 330.327609][T16083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 330.423128][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2669'. [ 330.438726][T16089] : entered promiscuous mode [ 331.083219][T16105] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2674'. [ 331.179455][T16112] veth1_virt_wifi: entered allmulticast mode [ 331.585826][T16133] netlink: 'syz.4.2683': attribute type 10 has an invalid length. [ 331.647582][T16135] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 331.707113][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2684'. [ 331.929659][T16159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2689'. [ 332.155032][T16169] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 332.173013][T16162] bond11 (unregistering): Released all slaves [ 332.305445][T16183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.328904][T16183] No such timeout policy "syz0" [ 332.505232][T16195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2700'. [ 332.539224][T16192] tipc: Enabled bearer , priority 0 [ 332.571963][T16199] : renamed from vlan1 [ 332.581250][T16192] syzkaller0: entered promiscuous mode [ 332.602114][T16192] syzkaller0: entered allmulticast mode [ 332.666924][T16192] tipc: Resetting bearer [ 332.673112][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.696082][T16192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.714302][T16191] tipc: Resetting bearer [ 332.736324][T16191] tipc: Disabling bearer [ 332.821726][T16207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2703'. [ 332.863924][T16209] netlink: 'syz.3.2704': attribute type 1 has an invalid length. [ 333.008014][T16212] lo speed is unknown, defaulting to 1000 [ 333.039238][T16212] lo speed is unknown, defaulting to 1000 [ 333.214709][T16233] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2710'. [ 333.527320][T16252] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2714'. [ 333.777132][T16263] policy can only be matched on NF_INET_PRE_ROUTING [ 333.777153][T16263] unable to load match [ 334.217513][T16285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2722'. [ 334.311838][T16292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.456665][T16296] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 334.571696][T16303] netlink: 'syz.1.2726': attribute type 58 has an invalid length. [ 334.608914][T16296] 8021q: adding VLAN 0 to HW filter on device bond8 [ 334.691155][T16305] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 334.748829][T16305] bond8: (slave batadv1): making interface the new active one [ 334.764010][T16305] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 335.130323][T16323] lo speed is unknown, defaulting to 1000 [ 335.143823][T16323] lo speed is unknown, defaulting to 1000 [ 335.145340][T16333] __nla_validate_parse: 3 callbacks suppressed [ 335.145356][T16333] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2736'. [ 335.184924][T16337] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 335.240739][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2737'. [ 335.267525][T16340] netlink: 'syz.3.2738': attribute type 1 has an invalid length. [ 335.341466][T16342] vlan1: entered promiscuous mode [ 335.362331][T16342] bridge0: entered promiscuous mode [ 335.383049][T16340] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 335.418102][T16347] tipc: Enabling of bearer rejected, already enabled [ 335.454392][T16347] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2739'. [ 335.479669][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2739'. [ 335.613028][T16363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2743'. [ 335.667475][T16363] syzkaller0: entered promiscuous mode [ 335.676428][T16363] syzkaller0: entered allmulticast mode [ 335.818782][T16365] bridge7: entered allmulticast mode [ 335.927597][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 335.955680][T16368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2746'. [ 336.628033][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2754'. [ 336.873897][T16401] netlink: 464 bytes leftover after parsing attributes in process `syz.0.2757'. [ 336.890087][T16401] netlink: 464 bytes leftover after parsing attributes in process `syz.0.2757'. [ 337.279451][T16429] 8021q: adding VLAN 0 to HW filter on device bond9 [ 337.295338][T16429] bond0: (slave bond9): Enslaving as an active interface with an up link [ 337.348864][T16430] bond0 (unregistering): (slave bond9): Releasing backup interface [ 337.387482][T16430] bond0 (unregistering): Released all slaves [ 338.242737][T16478] netlink: 'syz.1.2776': attribute type 2 has an invalid length. [ 338.804124][T16495] syzkaller0: entered promiscuous mode [ 338.809988][T16495] syzkaller0: entered allmulticast mode [ 340.713098][T16513] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 340.858575][T16526] __nla_validate_parse: 9 callbacks suppressed [ 340.858596][T16526] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2790'. [ 340.902245][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 340.924228][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 340.929092][T16530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2792'. [ 340.949652][T16522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 341.112946][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2795'. [ 341.134323][T16544] No such timeout policy "syz1" [ 341.172432][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2795'. [ 341.181675][T16542] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2795'. [ 341.295084][T16555] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2797'. [ 341.479154][T16558] lo speed is unknown, defaulting to 1000 [ 341.498978][T16558] lo speed is unknown, defaulting to 1000 [ 341.514419][T16575] tipc: Enabling of bearer rejected, failed to enable media [ 341.683965][T16581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2804'. [ 341.950059][T16594] 8021q: adding VLAN 0 to HW filter on device bond11 [ 341.994132][T16602] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 342.004291][T16602] bond11: (slave batadv2): Enslaving as an active interface with an up link [ 342.313105][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.322718][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.332177][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.363347][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.382408][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.448626][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.469401][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.481324][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.515732][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.541473][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.786166][T16630] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 342.915998][T16633] lo speed is unknown, defaulting to 1000 [ 342.996486][T16630] bond11: entered promiscuous mode [ 343.001988][T16630] 8021q: adding VLAN 0 to HW filter on device bond11 [ 343.049642][T16620] lo speed is unknown, defaulting to 1000 [ 343.075744][T16633] lo speed is unknown, defaulting to 1000 [ 343.381928][T16620] lo speed is unknown, defaulting to 1000 [ 343.849847][T16696] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 343.920346][T16703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.541164][T16731] netlink: 'syz.4.2842': attribute type 1 has an invalid length. [ 344.613830][ T51] Bluetooth: hci5: command tx timeout [ 344.660366][T16731] bond11: entered promiscuous mode [ 344.690129][T16731] 8021q: adding VLAN 0 to HW filter on device bond11 [ 345.063103][T16620] chnl_net:caif_netlink_parms(): no params data found [ 345.258530][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.282955][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.306517][T16620] bridge_slave_0: entered allmulticast mode [ 345.321723][T16620] bridge_slave_0: entered promiscuous mode [ 345.338006][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.345589][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.354034][T16620] bridge_slave_1: entered allmulticast mode [ 345.361245][T16620] bridge_slave_1: entered promiscuous mode [ 345.379376][T16776] ip6gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 345.423370][T16620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.445345][T16620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.490850][T16620] team0: Port device team_slave_0 added [ 345.499295][T16620] team0: Port device team_slave_1 added [ 345.525358][T16620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.532531][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.559585][T16620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.573990][T16620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.581040][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.613441][T16620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.725590][T16620] hsr_slave_0: entered promiscuous mode [ 345.733432][T16620] hsr_slave_1: entered promiscuous mode [ 345.740542][T16620] debugfs: 'hsr0' already exists in 'hsr' [ 345.747497][T16620] Cannot create hsr debugfs directory [ 345.763567][T16785] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 345.792468][T16785] openvswitch: netlink: Message has 16 unknown bytes. [ 345.840254][T16785] veth13: entered promiscuous mode [ 346.358976][T16795] netlink: 'syz.4.2856': attribute type 4 has an invalid length. [ 346.375704][T16795] netlink: 'syz.4.2856': attribute type 4 has an invalid length. [ 346.387324][ T5893] lo speed is unknown, defaulting to 1000 [ 346.397247][T16795] SET target dimension over the limit! [ 346.403973][ T5893] sqz0: Port: 1 Link ACTIVE [ 346.408810][ T5893] lo speed is unknown, defaulting to 1000 [ 346.692168][ T51] Bluetooth: hci5: command tx timeout [ 346.939359][ T29] audit: type=1804 audit(1772492099.101:11): pid=16799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2857" name="/newroot/569/cgroup.controllers" dev="tmpfs" ino=2908 res=1 errno=0 [ 346.965075][ T29] audit: type=1800 audit(1772492099.101:12): pid=16799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2857" name="cgroup.controllers" dev="tmpfs" ino=2908 res=0 errno=0 [ 347.970230][T16812] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 347.991963][T16812] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.007174][T16812] macvlan0: entered promiscuous mode [ 348.012933][T16812] macvlan0: entered allmulticast mode [ 348.018575][T16812] bond11: entered allmulticast mode [ 348.024194][T16767] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 348.024345][T16812] bond11: entered promiscuous mode [ 348.039350][T16812] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 348.054690][T16812] team0: Port device macvlan0 added [ 348.060159][T16620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 348.101325][T16620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 348.132526][T16814] __nla_validate_parse: 8 callbacks suppressed [ 348.132546][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 348.195938][T16620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 348.226861][T16620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.359107][T16830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2865'. [ 348.392486][T16830] netlink: 'syz.2.2865': attribute type 7 has an invalid length. [ 348.400259][T16830] netlink: 'syz.2.2865': attribute type 8 has an invalid length. [ 348.442627][T16830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2865'. [ 348.474787][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.544406][T16846] netlink: 'syz.3.2869': attribute type 1 has an invalid length. [ 348.601295][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2870'. [ 348.633141][T16848] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2870'. [ 348.663550][T16846] bond12: entered promiscuous mode [ 348.673746][T16846] 8021q: adding VLAN 0 to HW filter on device bond12 [ 348.701545][T16861] IPv6: Can't replace route, no match found [ 348.720284][T16861] IPv6: Can't replace route, no match found [ 348.723014][T16620] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.765662][T16852] 8021q: adding VLAN 0 to HW filter on device bond12 [ 348.772919][ T51] Bluetooth: hci5: command tx timeout [ 348.773659][T16852] bond12: (slave wireguard0): The slave device specified does not support setting the MAC address [ 348.790781][T16852] bond12: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 348.870204][T16852] bond12: (slave wireguard0): making interface the new active one [ 348.878826][T16852] wireguard0: entered promiscuous mode [ 348.890740][T16852] bond12: (slave wireguard0): Enslaving as an active interface with an up link [ 348.926045][T16861] bond12: (slave wireguard1): The slave device specified does not support setting the MAC address [ 348.939666][T16854] netlink: 64074 bytes leftover after parsing attributes in process `syz.4.2872'. [ 348.954819][T16861] bond12: (slave wireguard1): Enslaving as a backup interface with an up link [ 349.034464][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.041631][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.090274][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.097577][ T6117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.119260][T16883] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2877'. [ 349.134068][T16884] netlink: 364 bytes leftover after parsing attributes in process `syz.1.2877'. [ 349.207239][T16888] netlink: 'syz.2.2878': attribute type 2 has an invalid length. [ 349.300565][T16897] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2880'. [ 349.350491][T16901] netlink: 'syz.4.2881': attribute type 1 has an invalid length. [ 349.447487][T16907] netlink: 'syz.2.2882': attribute type 1 has an invalid length. [ 349.481051][T16907] 8021q: adding VLAN 0 to HW filter on device bond12 [ 349.631374][T16917] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2882'. [ 349.715599][T16907] bond12: (slave veth13): Enslaving as an active interface with a down link [ 349.754172][T16914] bond12: (slave dummy0): making interface the new active one [ 349.773461][T16914] dummy0: entered promiscuous mode [ 349.779247][T16914] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 349.840146][T16917] bond12: (slave dummy0): Releasing active interface [ 349.855181][T16917] dummy0 (unregistering): left promiscuous mode [ 349.867139][T16933] netlink: 'syz.4.2885': attribute type 1 has an invalid length. [ 349.903206][T16620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.968030][T16620] veth0_vlan: entered promiscuous mode [ 350.013419][ T51] block nbd2: Receive control failed (result -32) [ 350.040197][T16939] 8021q: adding VLAN 0 to HW filter on device bond12 [ 350.051673][T16620] veth1_vlan: entered promiscuous mode [ 350.103062][T16939] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 350.123380][T16939] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 350.164000][T16944] bond12 (unregistering): (slave batadv2): Releasing backup interface [ 350.194176][T16944] bond12 (unregistering): Released all slaves [ 350.212910][T16948] bridge0: entered allmulticast mode [ 350.218428][T16948] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 350.238129][T16946] netlink: 'syz.2.2891': attribute type 2 has an invalid length. [ 350.248420][T16620] veth0_macvtap: entered promiscuous mode [ 350.260279][T16620] veth1_macvtap: entered promiscuous mode [ 350.297468][T16620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.321069][T16620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.378868][ T6129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.388136][T16957] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20004 [ 350.396839][ T6129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.429089][ T6129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.448871][ T6129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.693418][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.704575][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.832141][ T6105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.857260][ T6105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.866597][ T51] Bluetooth: hci5: command tx timeout [ 350.962513][T16961] lo speed is unknown, defaulting to 1000 [ 350.971695][T16961] lo speed is unknown, defaulting to 1000 [ 351.300987][T17006] netlink: 'syz.1.2906': attribute type 3 has an invalid length. [ 351.333674][T17006] netlink: 'syz.1.2906': attribute type 3 has an invalid length. [ 352.084176][T17033] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 352.092150][T17033] netlink: 'syz.1.2913': attribute type 1 has an invalid length. [ 352.229014][T16982] syz.2.2902 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 352.267749][T16982] CPU: 0 UID: 0 PID: 16982 Comm: syz.2.2902 Not tainted syzkaller #0 PREEMPT(full) [ 352.267772][T16982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 352.267788][T16982] Call Trace: [ 352.267795][T16982] [ 352.267802][T16982] dump_stack_lvl+0xe8/0x150 [ 352.267902][T16982] dump_header+0xd3/0x4c0 [ 352.267936][T16982] oom_kill_process+0x3ab/0x970 [ 352.267981][T16982] out_of_memory+0x106c/0x1410 [ 352.267996][T16982] ? percpu_ref_put+0x19/0x180 [ 352.268040][T16982] ? __pfx___mutex_lock+0x10/0x10 [ 352.268176][T16982] ? __pfx_out_of_memory+0x10/0x10 [ 352.268193][T16982] ? do_raw_spin_unlock+0xf5/0x210 [ 352.268235][T16982] try_charge_memcg+0xc53/0x1560 [ 352.268258][T16982] ? __lock_acquire+0x6b5/0x2cf0 [ 352.268292][T16982] ? __pfx_try_charge_memcg+0x10/0x10 [ 352.268309][T16982] ? xa_load+0x60/0x210 [ 352.268390][T16982] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 352.268415][T16982] ? mem_cgroup_swapin_charge_folio+0x36/0x4d0 [ 352.268438][T16982] mem_cgroup_swapin_charge_folio+0x2e3/0x4d0 [ 352.268461][T16982] __swap_cache_prepare_and_add+0x52a/0x700 [ 352.268513][T16982] swap_cache_alloc_folio+0xf1/0x240 [ 352.268541][T16982] swap_cluster_readahead+0x369/0x690 [ 352.268572][T16982] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 352.268609][T16982] ? get_vma_policy+0x27b/0x3c0 [ 352.268633][T16982] swapin_readahead+0x196/0xc50 [ 352.268657][T16982] ? filemap_map_pages+0x185/0x2050 [ 352.268686][T16982] ? __pfx_swapin_readahead+0x10/0x10 [ 352.268713][T16982] ? swap_table_get+0x1e/0x260 [ 352.268735][T16982] ? swap_table_get+0x1e/0x260 [ 352.268758][T16982] ? swap_table_get+0x1e/0x260 [ 352.268781][T16982] ? swap_table_get+0x216/0x260 [ 352.268805][T16982] ? swap_cache_get_folio+0x513/0x520 [ 352.268835][T16982] do_swap_page+0x54f/0x58d0 [ 352.268868][T16982] ? __lock_acquire+0x6b5/0x2cf0 [ 352.268908][T16982] ? do_swap_page+0x12c/0x58d0 [ 352.268929][T16982] ? __pfx_do_swap_page+0x10/0x10 [ 352.268950][T16982] ? __pte_offset_map+0x1ae/0x240 [ 352.268977][T16982] ? pte_offset_map_rw_nolock+0xea/0x160 [ 352.269005][T16982] handle_mm_fault+0x12d2/0x3310 [ 352.269043][T16982] ? handle_mm_fault+0xee/0x3310 [ 352.269074][T16982] ? __pfx_handle_mm_fault+0x10/0x10 [ 352.269095][T16982] ? lock_vma_under_rcu+0x45a/0x500 [ 352.269145][T16982] do_user_addr_fault+0xa73/0x1340 [ 352.269190][T16982] ? rcu_is_watching+0x15/0xb0 [ 352.269227][T16982] ? trace_page_fault_user+0x84/0x210 [ 352.269252][T16982] exc_page_fault+0x6a/0xc0 [ 352.269304][T16982] asm_exc_page_fault+0x26/0x30 [ 352.269371][T16982] RIP: 0033:0x7f9d9c26e70a [ 352.269389][T16982] Code: 73 9a 0f b7 45 00 4c 8b 43 28 4d 89 fa 48 89 44 24 18 49 89 c3 41 8b 02 4c 89 c7 48 29 c7 49 89 c5 4c 01 ff 66 44 3b 1f 75 56 <48> 8b 54 24 18 48 89 ee 4c 89 44 24 10 4c 89 54 24 08 89 4c 24 04 [ 352.269404][T16982] RSP: 002b:00007ffdf4697700 EFLAGS: 00010246 [ 352.269420][T16982] RAX: 0000000000000a60 RBX: 00007f9d9d145720 RCX: 000000000001cfc4 [ 352.269432][T16982] RDX: 0000001b30a07046 RSI: 0000001b30424240 RDI: 0000001b30a235a0 [ 352.269444][T16982] RBP: 0000001b30a0703c R08: 00000000005ffde8 R09: 0000000000000006 [ 352.269454][T16982] R10: 0000001b30424218 R11: 000000000000000c R12: 000000000001cfb8 [ 352.269465][T16982] R13: 0000000000000a60 R14: 0000001b30424220 R15: 0000001b30424218 [ 352.269494][T16982] [ 352.271935][T16982] memory: usage 307200kB, limit 307200kB, failcnt 639 [ 352.642422][T16982] memory+swap: usage 298256kB, limit 9007199254740988kB, failcnt 0 [ 352.650351][T16982] kmem: usage 296784kB, limit 9007199254740988kB, failcnt 0 [ 352.703532][T16982] Memory cgroup stats for /syz2: [ 352.703854][T16982] cache 0 [ 352.730776][T16982] rss 24576 [ 352.734480][T16982] rss_huge 0 [ 352.737691][T16982] shmem 0 [ 352.740629][T16982] mapped_file 0 [ 352.782123][T16982] dirty 0 [ 352.785197][T16982] writeback 0 [ 352.788657][T16982] workingset_refault_anon 15 [ 352.832203][T16982] workingset_refault_file 44 [ 352.839620][T17044] lo speed is unknown, defaulting to 1000 [ 352.857303][T16982] swap 159744 [ 352.860627][T16982] swapcached 208896 [ 352.882881][T17044] lo speed is unknown, defaulting to 1000 [ 352.884653][T16982] pgpgin 74977 [ 352.913539][T16982] pgpgout 74965 [ 352.917444][T16982] pgfault 139593 [ 352.921117][T16982] pgmajfault 11 [ 352.942631][T16982] inactive_anon 20480 [ 352.950050][T16982] active_anon 28672 [ 352.967617][T16982] inactive_file 0 [ 352.983455][T16982] active_file 0 [ 352.992314][T16982] unevictable 0 [ 352.995813][T16982] hierarchical_memory_limit 314572800 [ 353.016446][T17052] PKCS7: Unknown OID: [4] (bad) [ 353.021424][T17052] PKCS7: Only support pkcs7_signedData type [ 353.027770][T16982] hierarchical_memsw_limit 9223372036854771712 [ 353.027785][T16982] total_cache 0 [ 353.027793][T16982] total_rss 24576 [ 353.027800][T16982] total_rss_huge 0 [ 353.027807][T16982] total_shmem 0 [ 353.027815][T16982] total_mapped_file 0 [ 353.027821][T16982] total_dirty 0 [ 353.027828][T16982] total_writeback 0 [ 353.027836][T16982] total_workingset_refault_anon 15 [ 353.027844][T16982] total_workingset_refault_file 44 [ 353.027852][T16982] total_swap 159744 [ 353.027859][T16982] total_swapcached 208896 [ 353.027867][T16982] total_pgpgin 79809 [ 353.027874][T16982] total_pgpgout 79797 [ 353.027881][T16982] total_pgfault 144432 [ 353.027889][T16982] total_pgmajfault 11 [ 353.027896][T16982] total_inactive_anon 20480 [ 353.027904][T16982] total_active_anon 28672 [ 353.027912][T16982] total_inactive_file 0 [ 353.027919][T16982] total_active_file 0 [ 353.027927][T16982] total_unevictable 0 [ 353.027934][T16982] anon_cost 0 [ 353.027941][T16982] file_cost 0 [ 353.027960][T16982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2902,pid=16982,uid=0 [ 353.238482][T16982] Memory cgroup out of memory: Killed process 16982 (syz.2.2902) total-vm:104332kB, anon-rss:1260kB, file-rss:22936kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 353.274763][T17047] vlan2: entered promiscuous mode [ 353.285746][T17047] geneve1: entered promiscuous mode [ 353.386637][T17047] __nla_validate_parse: 13 callbacks suppressed [ 353.386657][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2918'. [ 353.816697][T17071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2925'. [ 353.951828][T17073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.085200][ T8893] IPVS: starting estimator thread 0... [ 354.172784][T17097] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2931'. [ 354.192292][T17094] IPVS: using max 36 ests per chain, 86400 per kthread [ 354.284216][T17098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.293562][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.320114][T17100] lo speed is unknown, defaulting to 1000 [ 354.359353][T17105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.473915][T17100] lo speed is unknown, defaulting to 1000 [ 354.593732][T17111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 354.915599][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2939'. [ 355.094457][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 355.123121][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 355.131765][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 355.145521][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 355.154636][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.217181][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2941'. [ 355.417835][T17131] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 355.446668][T17131] bond1 (unregistering): Released all slaves [ 355.551883][T17140] netlink: 'syz.2.2945': attribute type 3 has an invalid length. [ 355.597735][T17138] lo speed is unknown, defaulting to 1000 [ 355.773380][T17126] lo speed is unknown, defaulting to 1000 [ 355.789279][T17138] lo speed is unknown, defaulting to 1000 [ 355.942947][T17149] netlink: 'syz.0.2947': attribute type 21 has an invalid length. [ 355.962767][T17149] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2947'. [ 356.112133][T17155] lo speed is unknown, defaulting to 1000 [ 356.283646][T17126] lo speed is unknown, defaulting to 1000 [ 356.583321][T17167] lo speed is unknown, defaulting to 1000 [ 356.650806][T17155] lo speed is unknown, defaulting to 1000 [ 356.877507][T17126] chnl_net:caif_netlink_parms(): no params data found [ 356.975085][T17167] lo speed is unknown, defaulting to 1000 [ 357.036751][T17160] delete_channel: no stack [ 357.093387][T17126] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.101216][T17126] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.109910][T17126] bridge_slave_0: entered allmulticast mode [ 357.143710][T17126] bridge_slave_0: entered promiscuous mode [ 357.153568][T17126] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.160847][T17126] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.172550][ T5830] Bluetooth: hci1: command tx timeout [ 357.192352][T17126] bridge_slave_1: entered allmulticast mode [ 357.201515][T17126] bridge_slave_1: entered promiscuous mode [ 357.411680][T17126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.416300][T17183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2955'. [ 357.444339][T17126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.675157][T17197] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2958'. [ 357.754509][T17197] IPv6: sit1: Disabled Multicast RS [ 357.761353][T17197] sit1: entered allmulticast mode [ 357.817337][T17126] team0: Port device team_slave_0 added [ 357.867562][T17126] team0: Port device team_slave_1 added [ 357.993428][T17126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.012626][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.063522][T17126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.076887][T17126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.084588][T17126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.128185][T17126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.296875][T17126] hsr_slave_0: entered promiscuous mode [ 358.313774][T17126] hsr_slave_1: entered promiscuous mode [ 358.320385][T17126] debugfs: 'hsr0' already exists in 'hsr' [ 358.339846][T17126] Cannot create hsr debugfs directory [ 359.230121][T17226] netlink: 'syz.2.2965': attribute type 1 has an invalid length. [ 359.238321][T17226] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2965'. [ 359.252226][ T5830] Bluetooth: hci1: command tx timeout [ 359.273626][T17226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2965'. [ 359.283415][T17226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2965'. [ 360.076366][T17264] netlink: 'syz.0.2978': attribute type 9 has an invalid length. [ 360.085339][T17264] netlink: 'syz.0.2978': attribute type 6 has an invalid length. [ 360.123435][T17266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2975'. [ 360.184507][T17126] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.214558][T17126] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.249678][T17126] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.288887][T17126] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.416821][T17269] netlink: 'syz.3.2979': attribute type 1 has an invalid length. [ 360.436693][T17267] dvmrp12: entered allmulticast mode [ 360.477306][T17269] bond13: entered promiscuous mode [ 360.485739][T17269] 8021q: adding VLAN 0 to HW filter on device bond13 [ 360.511430][T17258] dvmrp12: left allmulticast mode [ 360.635559][T17126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.663482][T17126] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.688793][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.696137][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.757582][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.764963][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.014182][T17290] lo speed is unknown, defaulting to 1000 [ 361.021893][T17294] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2983'. [ 361.056210][T17290] lo speed is unknown, defaulting to 1000 [ 361.088058][T17296] xt_l2tp: wrong L2TP version: 0 [ 361.104821][T17296] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 361.125248][T17296] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 361.332242][ T5830] Bluetooth: hci1: command tx timeout [ 361.421120][T17126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.523876][T17126] veth0_vlan: entered promiscuous mode [ 361.555142][T17126] veth1_vlan: entered promiscuous mode [ 361.649454][T17126] veth0_macvtap: entered promiscuous mode [ 361.674480][T17126] veth1_macvtap: entered promiscuous mode [ 361.699260][T17126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.776428][T17126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.804536][ T6105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.818592][ T6105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.855467][ T6105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.888872][ T6105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.088460][T17343] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'. [ 362.112431][T17343] netlink: 'syz.0.2998': attribute type 7 has an invalid length. [ 362.133448][T17343] netlink: 'syz.0.2998': attribute type 8 has an invalid length. [ 362.141765][T17343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2998'. [ 362.313142][T17346] bond6: (slave veth0_to_bridge): Releasing active interface [ 362.334770][T17346] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.383264][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.399608][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.473983][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3002'. [ 362.493843][ T6129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.529901][ T6129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.680445][T17369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'. [ 362.998862][T17392] netlink: 'syz.3.3012': attribute type 1 has an invalid length. [ 363.058897][T17389] IPv6: Can't replace route, no match found [ 363.066205][T17389] IPv6: Can't replace route, no match found [ 363.133563][T17392] bond14: entered promiscuous mode [ 363.153732][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.170636][T17392] 8021q: adding VLAN 0 to HW filter on device bond14 [ 363.187281][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.197523][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.212329][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.224084][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.273874][T17387] delete_channel: no stack [ 363.367629][T17409] xt_policy: neither incoming nor outgoing policy selected [ 363.397200][T17400] lo speed is unknown, defaulting to 1000 [ 363.417373][ T51] Bluetooth: hci1: command tx timeout [ 363.460760][T17400] lo speed is unknown, defaulting to 1000 [ 363.555911][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3015'. [ 363.654822][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.681199][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.806939][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.838027][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.073642][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.087918][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.114680][T17437] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 364.207350][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 364.224786][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.243867][T17442] openvswitch: netlink: Missing valid actions attribute. [ 364.251045][T17442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 364.287830][T17444] geneve3: entered promiscuous mode [ 364.839417][T17471] xt_TCPMSS: Only works on TCP SYN packets [ 364.940693][T17490] __nla_validate_parse: 1 callbacks suppressed [ 364.940713][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3032'. [ 364.979263][T17489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3033'. [ 365.063872][T17489] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3033'. [ 365.257331][ T136] bond1 (unregistering): (slave ip6gretap0): Releasing backup interface [ 365.340381][ T51] Bluetooth: hci4: command tx timeout [ 365.578659][ T136] gretap0 (unregistering): left promiscuous mode [ 365.745867][ T136] bond0 (unregistering): (slave bridge3): Releasing backup interface [ 365.754183][ T136] bond0 (unregistering): (slave bridge3): the permanent HWaddr of slave - 1a:35:f1:a9:bd:90 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 365.773491][ T136] bridge3 (unregistering): left promiscuous mode [ 365.797243][ T136] bond0 (unregistering): (slave bridge4): Releasing backup interface [ 365.807035][ T136] bridge4 (unregistering): left promiscuous mode [ 366.175147][ T136] bond7 (unregistering): (slave bridge9): Releasing active interface [ 366.410370][ T136] bond0 (unregistering): left promiscuous mode [ 366.421263][ T136] bond0 (unregistering): Released all slaves [ 366.433839][ T136] bond1 (unregistering): Released all slaves [ 366.449452][ T136] bond2 (unregistering): Released all slaves [ 366.468028][ T136] team0: Port device bond3 removed [ 366.474254][ T136] bond3 (unregistering): Released all slaves [ 366.488290][ T136] bond4 (unregistering): (slave veth5): Releasing active interface [ 366.496448][ T136] batadv1: entered promiscuous mode [ 366.504464][ T136] bond4 (unregistering): (slave batadv1): Releasing active interface [ 366.515970][ T136] bond4 (unregistering): Released all slaves [ 366.530905][ T136] bond5 (unregistering): Released all slaves [ 366.544181][ T136] bond6 (unregistering): Released all slaves [ 366.556837][ T136] bond7 (unregistering): Released all slaves [ 366.570290][ T136] bond8 (unregistering): Released all slaves [ 366.584692][ T136] bond9 (unregistering): Released all slaves [ 366.597971][ T136] bond10 (unregistering): Released all slaves [ 366.617083][ T136] bond11 (unregistering): (slave batadv2): Releasing backup interface [ 366.628360][ T136] bond11 (unregistering): Released all slaves [ 366.643400][ T136] bond12 (unregistering): (slave veth13): Releasing active interface [ 366.653552][ T136] bond12 (unregistering): Released all slaves [ 366.665502][T17462] lo speed is unknown, defaulting to 1000 [ 366.665772][T17400] chnl_net:caif_netlink_parms(): no params data found [ 366.724058][T17462] lo speed is unknown, defaulting to 1000 [ 366.756826][T17467] lo speed is unknown, defaulting to 1000 [ 367.040444][T17536] sctp: [Deprecated]: syz.0.3040 (pid 17536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 367.040444][T17536] Use struct sctp_sack_info instead [ 367.180667][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.223092][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.230640][T17400] bridge_slave_0: entered allmulticast mode [ 367.263754][T17400] bridge_slave_0: entered promiscuous mode [ 367.402643][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.409869][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.425869][ T51] Bluetooth: hci4: command tx timeout [ 367.461621][T17400] bridge_slave_1: entered allmulticast mode [ 367.486409][T17400] bridge_slave_1: entered promiscuous mode [ 367.623588][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.694248][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.828449][T17467] lo speed is unknown, defaulting to 1000 [ 368.094721][T17400] team0: Port device team_slave_0 added [ 368.130697][T17574] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 368.146938][T17574] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 368.196177][T17400] team0: Port device team_slave_1 added [ 368.448316][T17587] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 368.493371][T17588] delete_channel: no stack [ 368.563010][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.580187][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.616509][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.692552][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.699530][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.742447][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.887149][T17603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 369.193699][T17400] hsr_slave_0: entered promiscuous mode [ 369.209476][T17400] hsr_slave_1: entered promiscuous mode [ 369.230780][T17400] debugfs: 'hsr0' already exists in 'hsr' [ 369.247416][T17400] Cannot create hsr debugfs directory [ 369.275215][T17611] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 369.314268][T17614] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 369.497691][ T51] Bluetooth: hci4: command tx timeout [ 369.853769][T17607] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 370.049621][T17607] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 370.308902][ T136] hsr_slave_0: left promiscuous mode [ 370.315967][ T136] hsr_slave_1: left promiscuous mode [ 370.390932][ T136] team0 (unregistering): Port device veth9 removed [ 370.420252][ T136] pimreg (unregistering): left allmulticast mode [ 370.525547][ T136] batadv_slave_1 (unregistering): left allmulticast mode [ 370.740198][ T5808] lo speed is unknown, defaulting to 1000 [ 370.740912][T17645] netlink: 'syz.3.3064': attribute type 1 has an invalid length. [ 370.746460][ T5808] infiniband syz2: ib_query_port failed (-19) [ 370.930776][T17654] lo speed is unknown, defaulting to 1000 [ 370.955413][T17657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3067'. [ 371.207584][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3066'. [ 371.247265][T17660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3066'. [ 371.290775][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3066'. [ 371.329968][T17660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3066'. [ 371.404139][T17677] vcan0: entered promiscuous mode [ 371.409210][T17677] vcan0: entered allmulticast mode [ 371.571437][T17675] bond12: entered promiscuous mode [ 371.582429][ T51] Bluetooth: hci4: command tx timeout [ 372.078853][ T136] IPVS: stop unused estimator thread 0... [ 372.618799][T17400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.646065][T17737] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.3079'. [ 372.686468][T17400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.724212][T17400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.763981][T17738] lo speed is unknown, defaulting to 1000 [ 372.776878][T17400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 373.181016][T17758] Cannot find set identified by id 0 to match [ 373.770529][T17790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3090'. [ 373.803003][ T136] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.833257][ T136] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.912170][ T136] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 373.921550][ T136] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.028932][T17795] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 374.069564][T17796] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 374.204392][T17798] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3093'. [ 374.383626][T17400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.446383][T17400] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.514505][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.521767][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.562531][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.569710][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.676777][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 374.727030][T17815] netlink: 'syz.1.3095': attribute type 8 has an invalid length. [ 374.749533][T17815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 375.068364][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.167698][T17400] veth0_vlan: entered promiscuous mode [ 375.203833][T17400] veth1_vlan: entered promiscuous mode [ 375.281683][T17400] veth0_macvtap: entered promiscuous mode [ 375.306396][T17400] veth1_macvtap: entered promiscuous mode [ 375.347559][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.373633][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.418431][ T6129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.443975][ T6129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.462914][ T6129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.482724][ T6129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.649185][ T6110] [ 375.651637][ T6110] ============================================ [ 375.654296][ T6129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.657865][ T6110] WARNING: possible recursive locking detected [ 375.657887][ T6110] syzkaller #0 Not tainted [ 375.657896][ T6110] -------------------------------------------- [ 375.657902][ T6110] kworker/u8:16/6110 is trying to acquire lock: [ 375.670239][T17400] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 375.671844][ T6110] ffff888060e9c158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 375.690005][ T6129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.696516][ T6110] [ 375.696516][ T6110] but task is already holding lock: [ 375.696527][ T6110] ffff88807c6a3d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 375.696577][ T6110] [ 375.696577][ T6110] other info that might help us debug this: [ 375.696583][ T6110] Possible unsafe locking scenario: [ 375.696583][ T6110] [ 375.696588][ T6110] CPU0 [ 375.696592][ T6110] ---- [ 375.696596][ T6110] lock(&qdisc_xmit_lock_key#3); [ 375.696612][ T6110] lock(&qdisc_xmit_lock_key#3); [ 375.696627][ T6110] [ 375.696627][ T6110] *** DEADLOCK *** [ 375.696627][ T6110] [ 375.696631][ T6110] May be due to missing lock nesting notation [ 375.696631][ T6110] [ 375.696637][ T6110] 11 locks held by kworker/u8:16/6110: [ 375.696646][ T6110] #0: ffff8880859d8948 ((wq_completion)bond9#3){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 375.796588][ T6110] #1: ffffc90004b7fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 375.809634][ T6110] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 375.819406][ T6110] #3: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 375.829518][ T6110] #4: ffff88805c6bc228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x10c0/0x38d0 [ 375.842232][ T6110] #5: ffff88807c6a3d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 375.852506][ T6110] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 375.861449][ T6110] #7: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 375.871180][ T6110] #8: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 375.880040][ T6110] #9: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 375.889955][ T6110] #10: ffff88807bce9228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x10c0/0x38d0 [ 375.902756][ T6110] [ 375.902756][ T6110] stack backtrace: [ 375.908657][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 375.908674][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 375.908683][ T6110] Workqueue: bond9 bond_alb_monitor [ 375.908710][ T6110] Call Trace: [ 375.908715][ T6110] [ 375.908721][ T6110] dump_stack_lvl+0xe8/0x150 [ 375.908740][ T6110] print_deadlock_bug+0x279/0x290 [ 375.908760][ T6110] __lock_acquire+0x253f/0x2cf0 [ 375.908775][ T6110] ? skb_network_protocol+0x23d/0x3f0 [ 375.908858][ T6110] ? netif_skb_features+0x9bc/0xe40 [ 375.908876][ T6110] ? ret_from_fork_asm+0x1a/0x30 [ 375.908894][ T6110] ? validate_xmit_skb+0xc5f/0x14a0 [ 375.908914][ T6110] lock_acquire+0xf0/0x2e0 [ 375.908930][ T6110] ? sch_direct_xmit+0x15f/0x4c0 [ 375.908947][ T6110] _raw_spin_lock+0x2e/0x40 [ 375.908998][ T6110] ? sch_direct_xmit+0x15f/0x4c0 [ 375.909010][ T6110] sch_direct_xmit+0x15f/0x4c0 [ 375.909026][ T6110] ? __pfx_sch_direct_xmit+0x10/0x10 [ 375.909039][ T6110] ? arp_create+0xf0/0xa00 [ 375.909055][ T6110] ? arp_send_dst+0xa7/0x2a0 [ 375.909076][ T6110] __dev_queue_xmit+0x1615/0x38d0 [ 375.909090][ T6110] ? __dev_queue_xmit+0x28d/0x38d0 [ 375.909105][ T6110] ? arpt_do_table+0x261/0x1ec0 [ 375.909160][ T6110] ? __pfx___dev_queue_xmit+0x10/0x10 [ 375.909175][ T6110] ? __pfx_arpt_do_table+0x10/0x10 [ 375.909189][ T6110] ? trace_kmem_cache_alloc+0x29/0xf0 [ 375.909213][ T6110] ? NF_HOOK+0xa2/0x3c0 [ 375.909230][ T6110] NF_HOOK+0x33a/0x3c0 [ 375.909245][ T6110] ? __pfx_arp_xmit_finish+0x10/0x10 [ 375.909261][ T6110] ? NF_HOOK+0xa2/0x3c0 [ 375.909275][ T6110] ? __pfx_NF_HOOK+0x10/0x10 [ 375.909291][ T6110] ? __pfx_arp_xmit_finish+0x10/0x10 [ 375.909310][ T6110] arp_xmit+0x16c/0x270 [ 375.909324][ T6110] ? arp_xmit+0x23/0x270 [ 375.909340][ T6110] arp_solicit+0xbe0/0xe40 [ 375.909357][ T6110] ? arp_solicit+0x119/0xe40 [ 375.909373][ T6110] ? __pfx_arp_solicit+0x10/0x10 [ 375.909391][ T6110] ? __neigh_event_send+0xe9d/0x1530 [ 375.909452][ T6110] ? __pfx_arp_solicit+0x10/0x10 [ 375.909468][ T6110] __neigh_event_send+0xf05/0x1530 [ 375.909486][ T6110] neigh_resolve_output+0x198/0x750 [ 375.909502][ T6110] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 375.909521][ T6110] ? ip_finish_output2+0x3c2/0x1070 [ 375.909536][ T6110] ip_finish_output2+0xca9/0x1070 [ 375.909552][ T6110] ? ip_skb_dst_mtu+0x109/0xa50 [ 375.909567][ T6110] ? ip_finish_output+0x33a/0x3f0 [ 375.909583][ T6110] ip_output+0x29f/0x450 [ 375.909597][ T6110] ? ip_output+0x5b/0x450 [ 375.909611][ T6110] iptunnel_xmit+0x59f/0xa00 [ 375.909677][ T6110] ip_tunnel_xmit+0x193a/0x1f20 [ 375.909700][ T6110] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 375.909717][ T6110] ? __pfx_gre_build_header+0x10/0x10 [ 375.909774][ T6110] ? kmem_cache_free+0x187/0x630 [ 375.909786][ T6110] ? pskb_expand_head+0x4bb/0x1320 [ 375.909847][ T6110] __gre_xmit+0x19e/0x240 [ 375.909862][ T6110] ? __pfx___gre_xmit+0x10/0x10 [ 375.909878][ T6110] erspan_xmit+0xa81/0x1670 [ 375.909898][ T6110] ? __pfx_erspan_xmit+0x10/0x10 [ 375.909916][ T6110] dev_hard_start_xmit+0x2d8/0x870 [ 375.909939][ T6110] sch_direct_xmit+0x251/0x4c0 [ 375.909954][ T6110] ? __pfx_sch_direct_xmit+0x10/0x10 [ 375.909967][ T6110] ? kthread+0x370/0x470 [ 375.909985][ T6110] ? ret_from_fork+0x51e/0xb90 [ 375.910003][ T6110] __dev_queue_xmit+0x1615/0x38d0 [ 375.910016][ T6110] ? __dev_queue_xmit+0x28d/0x38d0 [ 375.910032][ T6110] ? __pfx___dev_queue_xmit+0x10/0x10 [ 375.910058][ T6110] ? rcu_is_watching+0x15/0xb0 [ 375.910076][ T6110] ? trace_kmem_cache_alloc+0x29/0xf0 [ 375.910094][ T6110] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 375.910116][ T6110] ? ret_from_fork_asm+0x1a/0x30 [ 375.910138][ T6110] ? alb_send_lp_vid+0x14e/0x550 [ 375.910151][ T6110] alb_send_lp_vid+0x348/0x550 [ 375.910162][ T6110] ? stack_depot_save_flags+0x33/0x810 [ 375.910250][ T6110] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 375.910261][ T6110] ? __lock_acquire+0x6b5/0x2cf0 [ 375.910278][ T6110] ? kthread+0x388/0x470 [ 375.910288][ T6110] ? ret_from_fork+0x51e/0xb90 [ 375.910302][ T6110] ? ret_from_fork_asm+0x1a/0x30 [ 375.910326][ T6110] alb_send_learning_packets+0x12c/0x300 [ 375.910345][ T6110] ? register_lock_class+0x31/0x2e0 [ 375.910359][ T6110] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 375.910381][ T6110] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 375.910404][ T6110] bond_alb_monitor+0x3d5/0x17e0 [ 375.910429][ T6110] ? bond_alb_monitor+0xf8/0x17e0 [ 375.910451][ T6110] ? __pfx_bond_alb_monitor+0x10/0x10 [ 375.910469][ T6110] ? process_scheduled_works+0xa25/0x1830 [ 375.910484][ T6110] ? process_scheduled_works+0xa25/0x1830 [ 375.910500][ T6110] process_scheduled_works+0xb02/0x1830 [ 375.910524][ T6110] ? __pfx_process_scheduled_works+0x10/0x10 [ 375.910545][ T6110] ? assign_work+0x3d5/0x5e0 [ 375.910560][ T6110] worker_thread+0xa50/0xfc0 [ 375.910589][ T6110] kthread+0x388/0x470 [ 375.910600][ T6110] ? __pfx_worker_thread+0x10/0x10 [ 375.910615][ T6110] ? __pfx_kthread+0x10/0x10 [ 375.910626][ T6110] ret_from_fork+0x51e/0xb90 [ 375.910642][ T6110] ? __pfx_ret_from_fork+0x10/0x10 [ 375.910656][ T6110] ? __switch_to+0xc7d/0x1450 [ 375.910682][ T6110] ? __pfx_kthread+0x10/0x10 [ 375.910694][ T6110] ret_from_fork_asm+0x1a/0x30 [ 375.910719][ T6110] [ 376.434719][ T6110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.442896][ T6110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.067379][T17860] syz_tun (unregistering): left allmulticast mode [ 377.425923][ T6129] bond10 (unregistering): (slave vti2): Releasing backup interface [ 377.442143][ T6129] vti2 (unregistering): left promiscuous mode [ 377.663966][ T6129] bond9 (unregistering): (slave bridge0): Releasing active interface [ 377.786250][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.796006][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.805861][ T6129] bond0 (unregistering): Released all slaves [ 377.814114][ T6129] bond1 (unregistering): Released all slaves [ 377.823934][ T6129] bond2 (unregistering): Released all slaves [ 377.832816][ T6129] bond3 (unregistering): Released all slaves [ 377.841542][ T6129] bond4 (unregistering): Released all slaves [ 377.851468][ T6129] bond5 (unregistering): Released all slaves [ 377.861142][ T6129] bond6 (unregistering): Released all slaves [ 377.873350][ T6129] bond7 (unregistering): Released all slaves [ 377.883060][ T6129] bond8 (unregistering): Released all slaves [ 377.894313][ T6129] bond9 (unregistering): Released all slaves [ 377.903698][ T6129] bond10 (unregistering): Released all slaves [ 377.914750][ T6129] bond11 (unregistering): Released all slaves [ 377.924682][ T6129] bond12 (unregistering): (slave wireguard0): Releasing backup interface [ 377.939424][ T6129] wireguard0: left promiscuous mode [ 377.945624][ T6129] bond12 (unregistering): (slave wireguard1): Releasing backup interface [ 377.954882][ T6129] bond12 (unregistering): Released all slaves [ 377.966263][ T6129] bond13 (unregistering): Released all slaves [ 377.977533][ T6129] bond14 (unregistering): Released all slaves [ 378.068417][ T6129] : left promiscuous mode [ 378.125929][ T6129] tipc: Left network mode [ 378.441884][ T6129] hsr_slave_0: left promiscuous mode [ 378.447992][ T6129] hsr_slave_1: left promiscuous mode [ 378.534127][ T1301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.547367][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.177526][ T6129] IPVS: stop unused estimator thread 0... [ 379.304644][ T6129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.386356][ T6129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.429022][ T6129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.469169][ T6129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.574522][ T6129] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.606897][ T6129] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.679107][ T6129] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.744919][ T6129] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.883527][ T6129] bridge_slave_1: left allmulticast mode [ 379.889204][ T6129] bridge_slave_1: left promiscuous mode [ 379.895693][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.907216][ T6129] bridge_slave_0: left allmulticast mode [ 379.913542][ T6129] bridge_slave_0: left promiscuous mode [ 379.919304][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.929182][ T6129] bridge_slave_1: left allmulticast mode [ 379.937071][ T6129] bridge_slave_1: left promiscuous mode [ 379.943549][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.955003][ T6129] bridge_slave_0: left allmulticast mode [ 379.960689][ T6129] bridge_slave_0: left promiscuous mode [ 379.967458][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.164155][ T6129] bond9 (unregistering): (slave erspan1): Releasing active interface [ 380.172512][ T6129] erspan1 (unregistering): left promiscuous mode [ 380.193926][ T6129] gretap0 (unregistering): left promiscuous mode [ 380.205706][ T6129] bond6 (unregistering): (slave gretap1): Releasing active interface [ 380.245207][ T6129] dvmrp0 (unregistering): left allmulticast mode [ 380.377587][ T6129] bond4 (unregistering): (slave bridge3): Releasing active interface [ 380.386942][ T6129] bond4 (unregistering): (slave bridge3): the permanent HWaddr of slave - e6:b8:0b:c6:63:d2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 380.456621][ T6129] bond4 (unregistering): (slave bridge4): Releasing active interface [ 380.715778][ T6129] bond0 (unregistering): left promiscuous mode [ 380.721984][ T6129] bond_slave_0: left promiscuous mode [ 380.727975][ T6129] bond_slave_1: left promiscuous mode [ 380.735948][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.746245][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.757249][ T6129] bond0 (unregistering): Released all slaves [ 380.765449][ T6129] bond1 (unregistering): Released all slaves [ 380.775517][ T6129] bond2 (unregistering): Released all slaves [ 380.785060][ T6129] bond3 (unregistering): (slave veth3): Releasing active interface [ 380.795434][ T6129] bond3 (unregistering): (slave veth5): Releasing active interface [ 380.804108][ T6129] bond3 (unregistering): Released all slaves [ 380.813241][ T6129] bond4 (unregistering): Released all slaves [ 380.821936][ T6129] bond5 (unregistering): Released all slaves [ 380.832922][ T6129] bond6 (unregistering): Released all slaves [ 380.841854][ T6129] bond7 (unregistering): Released all slaves [ 380.851992][ T6129] bond8 (unregistering): Released all slaves [ 380.861714][ T6129] bond9 (unregistering): Released all slaves [ 380.870344][ T6129] bond10 (unregistering): Released all slaves [ 380.879219][ T6129] bond11 (unregistering): Released all slaves [ 380.888687][ T6129] bond12 (unregistering): Released all slaves [ 380.941896][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.952342][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.962116][ T6129] bond0 (unregistering): Released all slaves [ 381.011356][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.021555][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.031376][ T6129] bond0 (unregistering): Released all slaves [ 381.170364][ T6129] !9: left promiscuous mode [ 381.234339][ T6129] l24): left promiscuous mode [ 381.255422][ T6129] : left promiscuous mode [ 381.308121][ T6129] : left promiscuous mode [ 381.354635][ T6129] tipc: Left network mode [ 381.381147][ T6129] IPVS: stopping master sync thread 9055 ... [ 381.387758][ T6129] IPVS: stopping master sync thread 17437 ... [ 382.156715][ T6129] hsr_slave_0: left promiscuous mode [ 382.163882][ T6129] hsr_slave_1: left promiscuous mode [ 382.171353][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.182819][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.201397][ T6129] hsr_slave_0: left promiscuous mode [ 382.207684][ T6129] hsr_slave_1: left promiscuous mode [ 382.214072][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.221643][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.232806][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.240248][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.253105][ T6129] hsr_slave_0: left promiscuous mode [ 382.259062][ T6129] hsr_slave_1: left promiscuous mode [ 382.265694][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.274013][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.281708][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.289845][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.303978][ T6129] veth1_macvtap: left promiscuous mode [ 382.309508][ T6129] veth0_macvtap: left promiscuous mode [ 382.315792][ T6129] veth1_vlan: left promiscuous mode [ 382.321153][ T6129] veth0_vlan: left promiscuous mode [ 382.328338][ T6129] veth1_macvtap: left promiscuous mode [ 382.333882][ T6129] veth0_macvtap: left promiscuous mode [ 382.339442][ T6129] veth1_vlan: left promiscuous mode [ 382.344870][ T6129] veth0_vlan: left promiscuous mode [ 382.540908][ T6129] team0 (unregistering): Port device team_slave_1 removed [ 382.551775][ T6129] team0 (unregistering): Port device team_slave_0 removed [ 382.596016][ T6105] smc: removing ib device sqz0 [ 382.722984][ T6129] team0 (unregistering): Port device team_slave_1 removed [ 382.751967][ T6129] team0 (unregistering): Port device team_slave_0 removed [ 382.960632][ T6129] team0 (unregistering): Port device team_slave_1 removed [ 382.979468][ T6129] team0 (unregistering): Port device team_slave_0 removed [ 383.025310][ T5808] lo speed is unknown, defaulting to 1000 [ 383.031076][ T5808] sqz0: Port: 1 Link DOWN [ 383.680187][ T6129] IPVS: stop unused estimator thread 0... [ 383.750124][ T6129] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.798895][ T6129] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.863579][ T6129] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.899054][ T6129] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.971831][ T6129] bridge_slave_1: left allmulticast mode [ 383.990081][ T6129] bridge_slave_1: left promiscuous mode [ 383.996318][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.004866][ T6129] bridge_slave_0: left allmulticast mode [ 384.010961][ T6129] bridge_slave_0: left promiscuous mode [ 384.016846][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.185036][ T6129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.195096][ T6129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.204707][ T6129] bond0 (unregistering): Released all slaves [ 384.388534][ T6129] hsr_slave_0: left promiscuous mode [ 384.400161][ T6129] hsr_slave_1: left promiscuous mode [ 384.407019][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.417128][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.430969][ T6129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.438848][ T6129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.454347][ T6129] veth1_macvtap: left promiscuous mode [ 384.459941][ T6129] veth0_macvtap: left promiscuous mode [ 384.518499][ T6129] team0 (unregistering): Port device team_slave_1 removed [ 384.529351][ T6129] team0 (unregistering): Port device team_slave_0 removed