last executing test programs: 6.583377198s ago: executing program 2 (id=18408): socket$kcm(0x29, 0x5, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r3, @ANYBLOB="0c00018008a0010062000204"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xe) r7 = socket$netlink(0x10, 0x3, 0xc) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$sock_int(r8, 0x1, 0x12, &(0x7f000000a440)=0x20, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="0c000000040000000400000022bf000000040000", @ANYRES32, @ANYBLOB="09000600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0xf, 0xfff3}, {0x0, 0xe}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r11, 0x84, 0x20, &(0x7f00000000c0)=0x10000, 0x4) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 6.001355652s ago: executing program 2 (id=18414): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r1, 0xc8036ab6d6cbef07, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x41}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x45080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(r2, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r9, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r10 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r8, 0x0, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x3}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r10}]}, 0x3c}, 0x1, 0x620b, 0x0, 0x1}, 0x800) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r11, &(0x7f0000000180)="a40141ad", 0x4, 0x4, &(0x7f0000000000)={0xa, 0x0, 0x20000, @mcast2, 0x4}, 0x1c) ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f00000000c0)) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c00)}, 0x40002000) 5.078560024s ago: executing program 2 (id=18434): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x44b, 0x70bd28, 0x0, {0x7a, 0x0, 0x0, r2, 0x0, 0x12}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r3, &(0x7f0000006dc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10002, 0x0) r4 = socket(0x1, 0x3, 0x0) connect$inet6(r4, &(0x7f0000000380)={0xa, 0x4e20, 0x1b47, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x9, 0x6, 0x2, 0x5, 0x0}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000480)={r5, 0x3}, 0x8) r6 = socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000040)={0x4, &(0x7f0000000180)=[{}, {@none}, {@none}, {@none}]}) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x20}, 0x1, 0x0, 0x0, 0x2040004}, 0x0) 4.542474398s ago: executing program 2 (id=18440): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000012006b00000000d86e6c1d0000147ea60864160af36504b68675f8001d000a008be6050017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x74, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x5c, 0x1, 0x0, 0x1, [@nested={0x58, 0x5c, 0x0, 0x1, [@generic="2dde06dd2d6fb527ff41e9716a45cce84f369c2a36346365fd7f05704d7102cd0898a0a0a91a923e7e7a7afe1ceb1d3ce47c0e7b6a133a34ed1ecb8f348616e8abb9ea", @generic="9c733c3c70c7af1225882ffac8", @nested={0x4, 0x12b}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) 4.342250849s ago: executing program 2 (id=18444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd60d2004000583a00fe800000000000000000000000000000fe8000000000000000000000000000aa04009078000000006031c90900002b0000000000000000000000000000000000fe8000ffffffffffffffff00000000bb6c04040200000000fe880000000000000000000000000001fe8000000000000000000000000000bb4d3ae04a7ed61a6b3ebd854d7de76f36c2e41b70bba2ce85c57536c1e5193503a5c2b5bcb3aaa8911eca26f30c84c8a799b3a36ca6f767b54e1fe3ff8aa01ddf5508bff3d906d0d021d2fec5a1fe4c69bf09c17d45a96a86bca4aee66ebb3c1477e72982051e3af94ca6e6"], 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000180)=@ax25={{0x3, @netrom}, [@bcast, @null, @rose, @netrom, @rose, @rose, @null, @bcast]}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/231, 0xe7}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000500)=""/74, 0x4a}, {&(0x7f0000000580)=""/96, 0x60}], 0x4, &(0x7f0000000100)=""/28, 0x1c}, 0x10}, {{&(0x7f0000000600)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000340)}, {&(0x7f00000007c0)=""/180, 0xb4}], 0x2, &(0x7f00000009c0)=""/25, 0x19}, 0x9}], 0x2, 0x12000, &(0x7f0000000a80)) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "623b5772c9af0700", "7378c95c95026683a39c2efb58516bfbb74cd639538ad4eebdad35ad9231b1ed", "0b12e457", "b0adca45d66941a2"}, 0x38) writev(r0, &(0x7f0000000740)=[{&(0x7f00000008c0)="581a17919cc7749e9438c65fb69e487bd1c16731510e7fc4ed9fb860505f1495ff92f16a38f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6e07473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bd25a62c560cb63836556c63de020000000000000013af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc00"/252, 0xfc}, {&(0x7f00000006c0)="1d4ac370cf8c47025bd7a6546c8bd229bbf8fa504cc3774c0f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f50aa794861c0296ca92cb6c2ef9", 0x47}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000ac0)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9609f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f19511a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aaf8d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec624728200000000000000d9725c6e0d64ec9c66ce1a9bcdfde5a71439b4e11e0651498248c673ee7a0879d2f0d23b72bfd6ed10ca608f246294bcd171217dd63694047e20e7dc8093d9860ccc734fc5d55c0de576e80ef2077349b114637164a9a0157323d2b519362afbb36498703297bde328c09a9f7bec48822d9db4c0e54e94f1c149451304e7848e0fd47850cedeef00000000452db1529000"/346, 0x15a}, {&(0x7f0000004480)="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", 0xd93}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 4.177020798s ago: executing program 2 (id=18445): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="540000000002010400000000000000000200000524000280140001800800010000000000080002"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002500090122bd7008f9ffffff0200000008003e00ffffffff0800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r0, 0x0, r2, 0x0, 0x800, 0xf) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008b00000044"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@deltaction={0x84, 0x31, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}]}, @TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x82aa}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x51}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000c00)=[{{&(0x7f00000002c0)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000480)="efe079e7fc133ad01ab37f814a7c7821167e50487a2524686c91f02b6cc19ddd6eb8363be9c98eb38806ef6bffc3c6ecafc1fe265f98bb1055adb6d863eaee5b198f46ef04f48e1dea73e44073c15500f2783881d73791a20eadbf6dfb122512f358a25d31f009753f998b9749b13d0237cc5d7aef0c63f53afe9597a480060c31dc6999e6da6d3a96dc8659d8d82cda1687c15c301f5353eff29d6def6b046eb26eec1b6a8b3bf499999adf3ea01ce971f89455b6e2ecbba3bdfe1feacc2c178aecb90f353af2e65374016ce43411e7e6e27d80", 0xd4}, {&(0x7f0000000200)="433af92b597516e4ce9de332e8231e196860c4", 0x13}, {&(0x7f0000000340)="2773ea0afb6af8048b55bc1d8e75f29887dbf1f1673ab8a30953b8837a61bb1e787f715a51e0e32253ef22d507b94872e0b26ee32aaf978f500e98f578425f12afac3dbbae8363b228971c33e8bed29ba9d6651de4d0665e0cfd18ea62fb4760a7903b94ec00b0b9", 0x68}, {&(0x7f0000000640)="c57af0a89c14a01fe627df4591deebd907d66212d1e9b7e2bd4a0458956b0fd2f5b77ef5d6d011a35b208cacc2b6cd2ec2d2297e05089849425ef5a82acc6da3970f774a58b317df92453757fa90f3fbe9c2d03fb82a05f4b0ee12f8a5c9a2beb7f05a50eb1ba07aeb34ff9ca0f06753077f8f05258027284c7b0384ca44ceb9", 0x80}, {&(0x7f00000006c0)="4917b486cab9609d875f66fbbcfd0dccb9a4bdf277829c2a3e278ab987b39c8bbe82e04e3c4bb1f78a84a46c1da9b39fd5401c21dc08f6788d17388d40cf8ff6027c9b81a961c94c927c08724b7dc4d4f7f749883da80508259ba56a17eeedc8d25aab61e38def70fee47998f746618594bbf8b54f9945173ac37990a79beba534e5d97b7f1b0ed4fcc3f3a2573345fb3a251535b79d366f5a6bb646576bf802cfd46fc6259bf486ed21231f97d8e5237eb89cbdc0655947ec457ec722dc78ab8c68f363b1d9894df99db9", 0xcb}, {&(0x7f0000000580)="7c50ea0badb30958cbc70e8f8c3302a9a82fcb51dd3cf9", 0x17}, {&(0x7f00000007c0)="43e8ae3ee1584388a402281ed74649aeeea904e6a2529c1734862b8c5805b615ea5f387f65955d27a421448f9d517bbccea6b3baebae9b7abb25a82ca5e66eb895ca627e53214d7bca5e9ec9", 0x4c}, {&(0x7f0000000840)="06ad6c705f0fdaa8d389a26d33abc8c205aec70a1fe1b5d1fcda368d82688cdf49d5808f4cad45a81d4a0edc182520dbee2c43b40ecbdc47da31f9cd966bdef8e775893a36b685bc541e1c96e9a7b6d4feba4316311422fca7c4ad644ad5d1fcf2f64fb316775fed8d6d1bd78318e14dceffab794f3cd0ad57147e80ac82d41f573916b940527f97b8be288f02dba535c0a6f94396b185d7c00b34f92ff89ed93906cbda3aafd20725ecfeabcc9a31381158ed7a653bd90cbb01b408c0fa4450abe2aff8803499d6385f7413cb79f7d3f570a47633a8757b1b1d3c1f75cfb7fa", 0xe0}], 0x8}}, {{&(0x7f00000009c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a40)="b75f9aaea3ad7fda32e52b9cdc94f8675d5e6c2135447c9e67e5ff18b5f4347da79ed4c4678f6aaef809c9958027cb46cff396c3f5ae801a148fbd573cc82a66a93c7c4b4aba1162c10801539ac24b1916b6fd3cc16867065c11470ae21cd6826c19f657df6a2491943a3d72f29d2f6116f3d15701a418ff235f2e0eac9e1e8e6effc2ff933c33e585b7a3152b1ee97369a415913d29987fb2c0e0643a71441d3bb2afb087b4052c73b6ddde9b20bc70841f8aeb319d2b0ba5e4af794b0772d5fdfa6e326ef4cd414a01346269d0a0937d0e33", 0xd3}], 0x1, &(0x7f0000000b80)=[{0x50, 0x1, 0x3, "cc06ce8f591abc55f1fc32d430d33fc03bef6b990f2120088410a0d04e5805f3fcf9a024f393c5f7b22c0b417deeaa986243939c574bdd4a2b102225e92f"}], 0x50}}], 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x705, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xffe0}, {0x10, 0x8}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.145321039s ago: executing program 3 (id=18470): syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) (async) socket$inet6(0x10, 0x2, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfff00001}, {0x16}]}, 0x10) (async) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) (async) 2.00159397s ago: executing program 3 (id=18473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xfffffdf9, 0x21, 0x9}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x2}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.811733357s ago: executing program 4 (id=18475): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c0007800800080000000000050001000600000005000500020000000500040000000016000300686173683a6e65742c706f72742c6e657400"/92], 0x5c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x34281, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socketpair(0x2a, 0x4, 0x9, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x44, 0x0, 0xc6, 0x9, 0x9, 0x3]}, &(0x7f0000000140)=0x78) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xffffff81, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000004500)=@newtaction={0x185c, 0x30, 0x108, 0x70bd2a, 0x25dfdbfb, {}, [{0x1848, 0x1, [@m_bpf={0x1040, 0x11, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0xc, 0x4, [{0x1, 0xe, 0x2}]}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x1004, 0x6, "62e8f7ec24796731ed478425134adcd9f9f780af237f624532aed5f92f3d0c9b04357e2409c8a1c7c2da808a9abb6bef5640d2f8510f062bfba0cff5194e6a8790b1be2693e0af33f3e5e18ec756ffcc0b58a3d763b9604070502b7b3db5f7765daf3e4f645622bbc8d7f0ee927688e469c5cc5561cc6b393e217e916e196fe01372e1c4196ae3d3ec19865244e6c12b2b6663c8c99746fe631cee97341ac727a7e9c6ae2cb6703bb29a2733d643de25cdecb15be537017512cd7a57eb3e792a4d58733271d35d0638d26d11a239a43035098cfdd69d988c9d50f0f98d5d6c5e9188ff41ac2feb30ba66461c0fbc419e5e04a5777d23329ea5c61668fab1470443a50a5c69dd8f094e6bd17886a89dd0248d999b6de6af23cae89a2e522f6cc37f15adb5886aaff9307f40be44735fdbba0109dbf4dd31c163f902abc7e329c22b1ded949d30d720a778dfecd3334cce4a47cef24c2d2d04ff2803e716354347e4e541c146fbe0c111995e76a16c38837518d61ef04953d8e81da510bdf6ca0b78c3d4fb3490653f8058606e6d4be80fb62c11fcd72d887980af0340cfea1846c6362fb2a93cf19eac4afc5a5f0c95835c8c1f016ec434f75fda9eee3f26aa9358c727756eb2455f840387edb3944da336c5a23e1ca2660417a5bf09c806d1c43f6821f22f4782f2f20ecc3aed13fbb2a56642a99116c896173f2f337fb60daab44d57eb08c51b32a9cf6eadfd87fc5b0da5ca7dd0d02d1780217a9a75d5244a0f7a3d98be896aaeb07a937aabecc3515740098f164c3fc1033f781f4723aa856d94b82944ca50f01bed5ef5c4a501239154b767e2fada7210be0fc1909d76afb74233f36cb45f1b4c834e1632f30e3c3f65956540a9411370e7928eb4ad083cb9f43cdfe7911016b268a83fcc28e5214c4bbb260b3abb60df504d79bcd8d378c17453a5dc86617c5f613eca97ceb7249f6a0d936b0a7c61efd8c539105682f3339bdb84589080fccf50c93165c80b1459241c8942d9ec83810294f506237560151789bca90075521e9df804f08931fc2ba230ea8a7645e50fe0a60054b53aa29c6c146e5f02517b313f7205775edbdb9666a93d230a3b2d0023265aec76b149b380d73b502ed766e9ed331cd319065a539c781436561607fea17321d8184b55d95781b5be027cf9284a5c87dc89c10889130c354c7669f6b6325659a60caa44c99bb02145710429dde13795692e6e9a3c51dea0d91bd72904e6b2a0469eb68e52ed1b1dd0efa27292b0a5d7021388c23ec2d031bd18537410b5147023f5eb113e3ae05957e35b63d8bf3d21ad09a61dbf8f67a0d30a8b60a462495400da169c09e12b548e4ccc8dfb4e4f66a649daf80b0abacbcdac69681a746087272fd383d72e20511aa7186cdbe1700141ef322c8d271461ea327af60221dec7ee09d0f8325a55da267b14f22f0c3b060dea39972ebc6e833394f9b156d02db22c21f134a2bedb17ef6869bf318711daef391ae80e56bff4deb632ee0ca9f7fc23a4de45c3758ea75bb8490816cbdb6034d3caf0bb1b0012cb87989439577ddc3ee9337656e1ff15fb68a912c524e054e0a267b7ea931880f17289844a587cac6b8e787d157aea9c2a43ca88a397615d8d0aef0dce5b7c31690fb1a6b10ad0edfaac98f657f6eb14fb0e096f626eaad81524197c65f6a1c25431556b21e781cebf23b85e60f382d4543226d7e3f2797b470e1755019e466cfdd05f3c748edc0314af8693ec48eaa15ddec31cd1c3b32caf0d5020ce93552b8bd608f8bd285b2dda1468f3a0e0cdf1e84baeda5841ec7596a52d6f633feec1e5a3dd03caf4464b5c90dd6c320a40c714b390c8011f02927b37364a59bf471ef1dbecebc1c57d18fd649a3000981368f55409518c05ade88554a009e8f45f181ea09d59e9bdcb2f166f76675dd08a60141d02cad4ac5df53a1ac4c9dc001e221f3695aa36ec7fccca92eb1b38c2ce69afc9d973727e744fc671e9cc198d8e20f3414bc82916b93975d85fc9644f113b33e609d9f00e92ac76bcb4220a642c388b6404bfa1b9c750e5bf69e2181517e634585a334d597debfc2dbdf5b03e945cf02c5c2abe9693bf1afe9c69431dbc175ca042f2ed1a65df169d72c455bc7aa7b9b053d3d1e633d6229b1e8f5aafedac0fe739e1b8fb4a0836813228830880a0fb73ac533ca195ec4fac4237508f937c0db131d951195bec953788e976ecd50e737d1caa3c61a629c24fbb0e79791061c60948c7cc32c7be083090275714fafd9a704a0c726acd9cf1564dd3643dce86943293cd6524c3d91a4f07a523cb53bef40ece589a025f89172b4e6787b8170e8b89f5c63148c66e06e57bfa71f7b6ad1fe1b8e51d6a7a98f4a5b6ac41a835ead93c4962930477ee0d40c91ae56562dcc3cc7b42316eead196a9320b03097927a03577c9e4810da8f34c77537531960959bddda58bc905e87974abd36f9adbbe9fbab400c21ff321c90a0c6bc4c04e25260d46f4fcbd075f8baf93cabb41d175b6c220b5417bbe49fb3b178385fc7141de64535bc939ca092befdf921b05ddd5d2214b9046b51dddfb660244d697fb904d6ceea6672e1c6f9c1bca7532608d32ed3699ee6df08e5637136f8aa2cea59c37ce0106f02760a1d2702431082405e249494aa24d5fe063421fc5b01252feb32971365dc2ac702069f8bb39af6493687284d6cf789c94dac14d76a726cfd608ea7774b78caf60c4d3a0157b938460ac01293244ebca5200ec95ae9ea0a1c0538b7796321f5f348e5e83a826ea6fc577fac5964fee8f6424eb5b730f0b222c995d36dfaeb5634ed73bde67af15449a45d2333150230019cc596341c560febbcf00eb82de177b5969f928d371bbd5fb810b30e737028f6a7d1b40d29e2ee7795cdaba82c16e09cca309641e30999ce2a5993998a0b44624c637e9e590d1b062cd012f4b0a26da7537dc98d0456192ae57308f5edbc0cd0d330d0ee02032ac0847e340096bd4a1c7b1f156a2ca398f7ab48371b0ba013a2f97220498a73a88c50156f69d8744e34c2f108457163fa6cf0c655a4b88771d990557f2e13226847206e68f2f13311ec657297c5cef2137309d12333f41ea536d68f564c86d908d82fa1c4b35a5afb8674456396813dc6f2854861e44fc57e3384fde6528ccf23e2eb985c81e30514e187b4f3ac2fbc72331b82353fd10f67cd254bdb6d9d9a6ccf1ba278b194eba9e980e71100f826d96e8940c494e16e38f6966aac243b8d61eb2be4e877219a6ec6100274e4bd6a8a70e1a91528466437cb1bff080b7936230a63c6277de246aba2e9e3be2bc542aad6f0287b62f0e2a1afb3e41e8049405afb8d46577835b99c72c99e3a0d89b620422be0a03f64be693ebc2ec09da27c6aad05919d6cc79f3cb445b860297b4ad175d9823a186e33d61c1489612c82dad3b371c795300b2b7948d352122681492b4b6603d807d9d03bf74fe6a9907febdc7d3686b143930684af540d91995d0929570cc4466ee83058f1ba9641bea7b66da2351c6bd7b06a8c703a1479a9fd73085a7a03d5c9896cde628dac8c6e2e9ca9e2c1b30970a89c05741a5f5d2316d5d0778f2e45ad004180d9e85a320afb0242eea730ba27c6e75181dc7ea52e92e289b95ac84e4d661a80a104c5b9b5d57f9d4416c5070003aca9153ec9d5830ccd7fc75787093c70224848688017ca81d53e57c6fed0a9446898383f566155abf6a0131c4054daf85eb034548d9b63f0682db60fd788cc46554b237f4260a3974c4a94f6a92b17780bf17927b446b9268640fe55fc76facacbeb2989de0665829c05b9268acd72ec180c5c89a4302439bc19afb99a147eb523eca7066540d63408d387c57d91bce3b6b98e1184571c0d0585797c6c2e1ee326651bf2b2dbb32292135e788ac1245f32341cd5a9329ccc55ca38c8d306d6fc9b5933d515725b60420fb3b3e4e70d8f4dd2ec03609bd40c1fbe001943e19007fbc8052f4bf0c348b204c8371914f9ed351ae67fb2d131edc6c57541b75a21527afc18560871e96247a2a8d64bf4e81f7b69ce611a37731d798c9b79d0489e281a0bd92f89910ff16b43b7a88b83c2077d5f3ea2eb8a9ce30dd1cc07f4b786655724c046c97258ce7ae91f6f24ffcf308e105722875dd9e9ba46ae6b2e171d6e23beeb5ce5d01c0bd15d3116c15f67dd6c6b9f0da86e5fb5ed87830f8df2f33c888ad5eab3b1c9da59fe358069d9892d2e52a8d5d6f2f3529eb5e91952ea595c107aff3681adc266ee8b6efba6848c52b942799563ef5e9df64595260dcadc5fd87b176ee7dfc3d5e7a1303c90dad0a73892992a8eb5e2374cbf363a75388a0413ed36e994f9f8ed2576bad46fb2d9c050fd829b610aa889a66439e4a2e0d56469a5450ae96ccea4f6213f892780d39e20ed89b4e276a0760c3a746bdfbc9d8424ef741dbe3d4e48fde10bc9bf7d48dfb8f3f43361948c123449eaf852a35aa968ff3bbd580a1d7f7cc73c9456321d90f5f83996008f47c85bceffd47634f36bd9935f21080a5aa76981ae35646a873fa66c277b74b061f13a29142ff77a93d065a4aaf57efe0a46560093c35458eb51fcccef537627a232081ffe1d19261fde7841d1eb368a9a3f9d33bc82447a52654d99a2a38d4ac458a7dcd15b72914f583dd2cc57abc961fa93af7c1fe380b6e45c24f4bbaf0c097fff975ada411f800493efa90e6b64e9eb1ac474a3cc321c30cda20ebb40a106fe729ee326f27e9600356ce04577242d4aad04dcc4a5c74007a8868afe4d8629247f2eea128ffe7d6ee764c2af373dd6e285cfee5942ed4beb6700e2d4b992396df70e0a5fab5f7544a7be13402434dd4e170c70f41d5c908fb45f7efe8e89f7d444e218e3ee8794989d1e5e3217e9e19f7b04953bc95e546ed5a80469587b27d423f50b7e7df282a14b8f9ba10c84b1cd34f1c1afb3b982113fa44786701bd118182208987adace3286bd03a8d5dee61d1b177f230ce866adfedf745949107454763b9eea9951d8761428f68883a956a5b5e8f3a2baea6ebbc3dcd064b5fb8f5f7226af0a02e6bd3f7f220fb86d68e6636e3527b4a3ca3cae673cb570015eb78890f3edd78e258e3cabbcd880691317e579d19a99bb8ec14f42af024424d5b22390322ada9f82171882bfe572de015c10c5af5b8aed60a5b5f1808f4155197513a1bbfa6381cce16fd89dfa87dea27f6ee4b1d26a02851fd6322a49844accbe73a250e113e4e2b10a35095a585b5d3eee05846b3064b215c58616d330a8b86ffdd9ef6074f866d2795e59b5c2a6a6b415b53fbebafbc6d23b953fb2fd358896f6172ffa24431e62eb106b519f908d9b5ddf54b65eda987bb43ab05304381d9741ec1afbf557f05430315df07c63a3b7dde61470f34510818ee23ba46b38f59a80ceda18eb1d5ebad4506ec25f62c041e55015ea0352fe48a9fc5e8585d01f9aee736c4240eab3a8a4f03927fc0a9b9e44bc5d762251e08acbc64e6065db2d6bbfc25b3d0d2b0ad70f220ef6be1d96c055c30c421e5b4666633d877b847ed7715bb82079ac9a6d653995aa9efab63f048fe8266fc695ae0daf01d7593b38d590e20dd7d8d4e8a8854543126fb0a878075b787f2586eb24fa5980b00797de7481ae0cef96eb3ee2210d2a48c60a7e8faae5bdb848b3524442497a412e7f64e014bb23cf8f6a0a710b79f9a87fe73212c6bdf298240770e39e273a8f59e0299861e03ff84894e66f3108c298e26afe19bd124"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0xb8, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xaf, 0x0, 0xc, 0x3, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x6, 0x0, 0xfffffffb}, 0x39}}]}, {0x53, 0x6, "51875e5854d3fe8fd653adf80dfe51d76d71bcc664b1a90596dc7a573d60dfdec13dab96bea67b24e40cb1ac398618453b9f7c7f4556694966a9b979da359b508f23d8d196622d5a93a95474d686a8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x30, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xbc, 0x17, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x35, 0x701, 0x20000000, 0x9686, 0x9}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x80}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff1}}]}, {0x5f, 0x6, "948da99281fe999b291fbb1911b36a27e07099e51e68cfb824668667569434dc272340ad31ff89853be4bc310cfd11f8c0bf59e37252be7b273f2fa085fde76ef9107dc4032efb9f08d7600a59c8f3ab919d6fb03743b56b06ea3d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x6}}}}, @m_nat={0x1d8, 0x5, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffff19, 0x8e, 0xffffffffffffffff, 0x0, 0x3}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x0, 0x6, 0xf94, 0x4f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x5, 0x3, 0x800, 0x9}, @empty, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0xc, 0x1, 0x101, 0x3}, @multicast2, @remote, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x100, 0x800, 0xc, 0x43df, 0x2f38}, @multicast2, @empty, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x0, 0x5, 0x2, 0x6}, @empty, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x1, 0x20000000, 0x5, 0x2}, @remote, @loopback, 0xffffff00, 0x1}}]}, {0x98, 0x6, "b7ce8a4a99a1cf5924dce0d485060bd00058086e351a97c2b07f13add6422b9cba1543aa5ec7848ff9931d9739eeb7658b20742693d4536e2c0e68480b3cc2d1447669fd8ad6fef9cf3767adf33fe3e2f5b88a251c792d5cc75418e0407e0f21543fda84992338df08d85eeb9e90754e75ad48f2f3fa44cdf236e3134c8a367f183562377f49fe398e59b6466806aa635da3e1ca"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0xd0, 0x17, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xef, 0x8, 0x5, 0x8, 0x401}}, @TCA_DEF_DATA={0x6, 0x3, '!\x00'}, @TCA_DEF_DATA={0x9, 0x3, 'syz1\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x10000000, 0x8, 0x7ff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x7fffffff, 0x6, 0x4, 0x80}}, @TCA_DEF_DATA={0x9, 0x3, 'syz0\x00'}]}, {0x32, 0x6, "25c1a46829b47a2b29a8ddd0baa0488171017e40f1878c405424cc85712b426006f0cbe89530a0f80a800b9c1342"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x134, 0x6, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x7, 0xa2, 0x20000000, 0x4, 0x924}}]}, {0xee, 0x6, "78328059f4f0a587e06b05c057a2d2dc0de0ad45647c99eca97c77e92faae19dadf9ca27f10eeee2f70ca786c9a768b1f065701c0affdcde56aa32c3f9fa1df21d3c504b99b94b11592de4188aaa35cc361852eb5e4c7c1a5757cbe2dfcf413a1e6f59c7b9c3a748f88a231d62199a3675f3a7581fb084e729c34a045ff9eb2dcb387cc8175f4c574e3ce6cc9fd2765d698a4c4714eab743dd7a301374be60ab5b043aea51ca265b20c60d924b2424258de0615cf8c9a04afc4207e324a63b21e0bea0e7574749486914b3cd4dcbafe9eaf42479f1cbf5bd25274ef27b732747da837671ddb9ebcdc4f2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x170, 0x1e, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_LABELS={0x14, 0x7, "f0e57e939308847f77537fa7893f19e2"}, @TCA_CT_MARK={0x8, 0x5, 0x5}, @TCA_CT_ACTION={0x6, 0x3, 0x20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x47}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e23}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}]}, {0xf6, 0x6, "4686888f6d0e3fe3149d38ec10fcf909f93dca304af868ff36c2e06c83fee9849154ae6fd62c4ef09868df646747eaf777bf307d76e2e231aeb4689b15f2c4d1e05f4554211022a53c824777d5abe9ca2320867d70917772a0e6d123929f0da5f1946512cfaccf0e6659fcf1093a52724db9234a3b95341f72a052789b5844e1e82204e7725cf9dd5450320497592452293d95eaedd6cb820b5a8a6a392b0c81b64815ffd8a05a01e56062b8b3561e8103d80983434d7fc11f21ad5a72c84740f4d9242013d9fa50afd699a26ad804174c0254d9a52e29f0391cd5e916c372732bb3b17209fe71d43fe53b30f5bc98acf820"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_vlan={0x114, 0x13, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x59d}]}, {0xce, 0x6, "aa8fc9f2fd39897997476b572de3403926fe18c9581a2f60a0aa906fe25ebdca78a62ef479a135ebea311d7dcdd9dd6d5d7c721c031d4a4d259cc37f98bcfc9a003834f2d9119aa2b3c737fb039fe5220d56b199b71aa361e37e28bc7fb2328a9a8db48e20c8c5133dae11744ced40562f6d4621e9c315992db083623f09762852fa4e390ba5e86d1328ce991022c36a4a01daffa7be425f4a26424bd6fe4b30005fbb9209e38199d5f45884379ab5733c9d818d6af2a09274c8d9a82fcc171e9a0989ba224dc45edac0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x185c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4014) recvmmsg(r0, &(0x7f0000002fc0)=[{{0x0, 0x0, 0x0}, 0x20b512de}], 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x0) 1.706214523s ago: executing program 3 (id=18477): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(r0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000012c0)=0xe) accept4(r0, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1.531929007s ago: executing program 3 (id=18479): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x8, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000090}, 0x4004020) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) (async) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x20000400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendfile(r7, r6, 0x0, 0xe25) r8 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0001000000000000000000050009000000000008000500", @ANYRES32=r2], 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x88c4) 1.520609395s ago: executing program 4 (id=18481): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0xc}, {0x0, 0xfff1}, {0x3, 0x1c}}, [@TCA_CHAIN={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x200008c2) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000180)=0x401) listen(r7, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000100000000009887120008000300", @ANYRES32=r10, @ANYBLOB="0a0018000303030303030000080026"], 0x30}}, 0x0) (async) ioctl$sock_SIOCSPGRP(r7, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) (async) shutdown(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4000000, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8, 0x2}}, {0x57, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0x5d, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 1.347294399s ago: executing program 3 (id=18483): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket(0x2, 0x80805, 0x0) gettid() r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70fd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x200004e4) 1.209016803s ago: executing program 0 (id=18485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) recvmmsg(r4, &(0x7f0000000a00)=[{{&(0x7f0000000400)=@isdn, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/65, 0x41}, {&(0x7f0000000040)=""/30, 0x1e}], 0x2}, 0x3}, {{&(0x7f0000000500)=@nfc_llcp, 0x80, &(0x7f0000000900)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f0000000580)=""/232, 0xe8}, {&(0x7f0000000680)=""/173, 0xad}, {&(0x7f0000000740)=""/78, 0x4e}, {&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000840)=""/184, 0xb8}], 0x7, &(0x7f0000000980)=""/88, 0x58}, 0x297a}], 0x2, 0x120, &(0x7f0000000340)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r9, 0x3d, 0x0}, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x38, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1.104793511s ago: executing program 4 (id=18486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) recvfrom(r1, &(0x7f0000000080)=""/43, 0x2b, 0x42, 0x0, 0x0) getsockopt$bt_hci(r2, 0x84, 0x7d, 0x0, &(0x7f0000000000)) (async) getsockopt$bt_hci(r2, 0x84, 0x7d, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 934.78608ms ago: executing program 0 (id=18488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r2, 0x1, 0x1, &(0x7f0000000140), &(0x7f0000000200)=0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) socketpair(0x25, 0x2, 0x6, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010004b0428bd7000000000007a00252f9bb633926a72e55f3c2f31d817d6e6b6f9ae", @ANYRES32=r3, @ANYBLOB="00000000160000001c0012800b00010062726964676500000c000280080003001b000000"], 0x3c}, 0x1, 0x0, 0x0, 0x30008095}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000400)=0x1) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="49000e0080000900ffffffffffff080211000001ffff2e000000000000000000000000000700010000060101010101010406f0027f0006a7060206002503018c087206030303030303000000"], 0x68}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r9, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="8b", 0x1}], 0x2}, 0x4000) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r14 = socket$key(0xf, 0x3, 0x2) ioctl$XFS_IOC_GETPARENTS(r7, 0xc028583e, &(0x7f00000003c0)={{[0x4, 0x0, 0x9, 0x4]}, 0x0, 0x3, 0x0, 0x0, &(0x7f0000000500)=[{{@_ha_fsid={[0x9, 0x2]}, {0xfffb, 0x5, 0x9, 0xaa66}}, 0x7, 0x0, ',^.#\x00\xdb%\xf2\x1d\x9b\xd4\xab\x03\xfcl}\x9f.\xb50\xcf\xed\x8dZEZ\xc4hs\xba\xd2\xc3w1h\x8bf&b2gs\xd5t\xaa\x8e\xf2'}]}) sendmsg$key(r14, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="021800000b0000000000000000000000030005000000000002000000e00000010e00000000000000030012000000000002000000000000000000000000000000030006000000000002000000ffffffff0000000000000000"], 0x58}}, 0x0) sendmsg$802154_dgram(r13, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) 888.364825ms ago: executing program 4 (id=18489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xa, 0xb}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x4d}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 880.776987ms ago: executing program 1 (id=18490): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002540)={0x48, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@nested={0x18, 0xb, 0x0, 0x1, [@typed={0x14, 0x6f, 0x0, 0x0, @ipv6=@private0}]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$rxrpc(0x21, 0x2, 0x2) close(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x7fffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000280)='GPL\x00', 0x4, 0xd1, &(0x7f00000002c0)=""/209, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x8, 0x8895, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002000010000000000fbdbdf25020117800c00160006ac0f00000000001400010000000000000000000000ffff0000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d2a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c00dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c290400eb000000000008141156bf47b0f63a881b1c7172ceb83eff34218229b190ec9172f6c4d2050eecdb24d5767b32665a02f4f57fec1719457e8f11d2dadb99d7c88f71e274a4a89a77337b08a25e72270213905e61d8967036d472072dddcc4192a1a318eb8452b26d6729d77e8b5eba19d14f9897422a6ee65e85370a6f64acb52940c482c0b6c49d8d5c128ffb65bb11c1c53b8efa98402ae40e8a119d6a7a608866272dffd0fdc38a7c03c96764ac6c407566bc0957a04dc2e18db43bee0bfb7847d2b08ce3db4f1ae5151bf1817d"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0xfac1f, 0xfac10]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4084}, 0x20000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r7, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x80) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r9 = accept$alg(r8, 0x0, 0x0) recvmsg(r9, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$alg(r9, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r9, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x8058) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCGUNIT(r11, 0x80047456, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000040)='GPL\x00', 0xfffffff7, 0x53, &(0x7f0000000080)=""/83, 0x41000, 0x2, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xb, 0x3, 0x10001}, 0x10, 0x0, r2, 0x1, &(0x7f0000000500)=[r10], &(0x7f0000000540)=[{0x3, 0x1, 0xf, 0x1}], 0x10, 0x26f55a78}, 0x94) 778.826341ms ago: executing program 0 (id=18491): r0 = socket(0x1e, 0x1, 0x0) (async, rerun: 32) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 32) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x100, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0xa0000, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x3, 0x4050732b, 0x1, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0xfffffff5, 0xbf2, 0x10001, 0x2, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0xd05, 0x7a, 0x11dc294f, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc31, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x8, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x5, 0x6, 0x4, 0x1, 0x3, 0xb9, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x5, 0x89, 0x8, 0x100e, 0x7, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x8, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0xaa, 0x2, 0xedd5, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x34, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0x2, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0x0, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x2, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0xd, 0x1, 0x9, 0x5, 0x1ff, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x7, 0x7, 0x7, {0x4, 0x2, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcf, 0x1, 0x800, 0x2}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x0, 0x7, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x0, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0x9, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x3, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x1, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x7fff, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdfb, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0xf, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0x80000000, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x5, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0x1, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xff, 0x8, 0x5, 0x0, 0x0, 0x12, 0x0, 0xf, 0xbb4f, 0x8, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x9, 0x81, 0x10000, 0x70, 0x3, 0x4, 0x80, 0x8, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0xffffffff, 0x401, 0x7, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async, rerun: 64) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x2}}}, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 763.2859ms ago: executing program 4 (id=18492): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007600090b000000000000000003000200000000000800050000000eb5"], 0x20}}, 0x0) write$tun(r1, &(0x7f0000000040)=ANY=[], 0x38) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000001300)={0x1, 0x2, 0x1000, 0xab, &(0x7f0000000180)="6b853dae1ea38283814108d71ef01ff8d92bb595bb444bb75d25671644a6217db5bb31999fa7cd22ff8abf069df298f29729cb77fdfb234922e63ad658eef61c1682b16fb5829a46f7201529704ecccad4d92732ac618609b4a9a62110ee9b9d4b45a4a7a3ac30c2eda13c313309828b50346440205111187ef7ad57e1947a00dc7dc6e56de29276507b900e8d38c69af59604a0c50aeabc650f89b1728bd5feff8dca52c691836eaf4f23", 0x1000, 0x0, &(0x7f0000000300)="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"}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000006000500"], 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r6, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x4, 0x3}}, 0x2e) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 590.738191ms ago: executing program 1 (id=18493): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000000000)=0xfffffffffffffea1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000006800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0xffeff000}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x20}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x2b}}}], 0x30}}], 0x1, 0x4044800) socket$inet6(0xa, 0x800, 0x1000) 531.570446ms ago: executing program 0 (id=18494): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'pim6reg1\x00', {0x1}, 0x6}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'virt_wifi0\x00', {0x2}, 0x400}) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'virt_wifi0\x00', {0x2}, 0x400}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000006480)={0x14, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x44}}, 0x0) 309.232856ms ago: executing program 1 (id=18495): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x7, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000089000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 291.574585ms ago: executing program 4 (id=18496): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @loopback}, 0x60, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='veth0_to_hsr\x00', 0x1, 0x6, 0x1}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @loopback}, 0x22e, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)='bridge_slave_0\x00', 0x8, 0x3, 0xff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) syz_extract_tcp_res(&(0x7f0000000200)={0x41424344}, 0x2, 0x8) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0x4, 0x5) write$tun(r3, &(0x7f0000000280)={@void, @void, @ipv4=@tcp={{0xe, 0x4, 0x1, 0x11, 0xa2, 0x66, 0x0, 0x1, 0x6, 0x0, @private=0xa010101, @multicast1, {[@timestamp={0x44, 0x24, 0x97, 0x0, 0xd, [0xdd1, 0x0, 0x4, 0x1, 0x8, 0x4acc, 0x0, 0x5]}]}}, {{0x4e22, 0x4e22, r4, r5, 0x1, 0x0, 0x7, 0x80, 0x2, 0x0, 0x1, {[@generic={0x15, 0x4, "af89"}, @nop]}}, {"594066af55a644d1cc10becb8e6a016fef8a38a2fc3792e31240c274a3871b959361e7cb765aba5519e6579eb5d7848562e9ca502dae2da0745e71564421cf79a1ea3604158817a16c1df361cfec"}}}}, 0xa2) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000340)={'bridge_slave_0\x00', 0x200}) read(r1, &(0x7f0000000380)=""/237, 0xed) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00000004c0)=@add_del={0x2, &(0x7f0000000480)='syzkaller0\x00'}) write$tun(r3, &(0x7f0000000500)={@void, @val={0x1, 0x0, 0x3ff, 0x2, 0x3ff, 0x6}, @ipv4=@generic={{0x1d, 0x4, 0x3, 0x37, 0x1074, 0x64, 0x0, 0x4, 0x0, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4, 0x1}, @generic={0x0, 0x2}, @lsrr={0x83, 0x13, 0x29, [@remote, @local, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0xf7, 0x3, 0x9, [{@multicast1, 0x4}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0xc490}, {@multicast2, 0x1000}, {@remote, 0x9}, {@broadcast, 0x101}, {@private=0xa010101, 0x2}]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x88, 0x3, "9c"}, @end]}}, "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"}}, 0x107e) socket$kcm(0x29, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000017c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001780)={&(0x7f00000015c0)={0x1a8, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xb7, 0xa8, @random="99e4e944b85f1589a8d49d11443d91af38a749ce2c0104a0d3da50d6285574fe18313c578029e1aa40e789db1c0ba07224fb7c20adc5e8a9163aa17c18be9f59a5caccdf44e89dac46104cb7b2b652009cdaf98af68b61966f8748984151929434b20faa918af19dcbdce8806db1e2295dd629bff5155b20009a396821979b6726c82105d73ff3a5d958de14d529c8e8787ef1ebbfe332e243492d9e23414e5607dd8d59a25d39bcd8600edd0730ea2c81384c"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xc0, 0xa9, @random="ce4f76277f681878deafb88a30e5d0b7638c147c75e4a1c47b2cec7cbcca7f2b354e3b0f0e57d33633034f5cf435b140b6005b4927d658e39769004390b19fd748e4eadd2af66beecfa012fd2c02818aa698042afce64aba0fe622beccc0f9b7d9b4cb347934529304a99ffb6c9a60c651bfdfd4c15b2668a7375c3660d19f92509b9975e80f51f80307c930e573ff35d8b1f657b7e951c0b4f894a424457a5f524c19fa002bf1a59ec2b29e44bd189cd38ebfbac4669eb3e4b44e08"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7c2e6a4c}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000001900)={r2, &(0x7f0000001800)='veth0_to_hsr\x00', 0x200103, &(0x7f0000001840)={@align, {0x9, 0x8001, 0x294, 0x2}}, 0xffffffff, &(0x7f0000001880)={@_ha_fsid}, &(0x7f00000018c0)=0x400}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r6) sendmsg$NL80211_CMD_RADAR_DETECT(r7, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x48, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfc, 0x7e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc0000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x324}]}, 0x48}, 0x1, 0x0, 0x0, 0x20}, 0x1) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001ac0), 0x40001, 0x0) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000001b00)=0x1) read(r1, &(0x7f0000001b40)=""/160, 0xa0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001c40)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r10, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x54, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x280000d4}, 0x80080) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000001d80)={'vlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001e00), r6) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000001ec0)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x2c, r12, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) r13 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r13, 0x65, 0x5, &(0x7f0000001f00), &(0x7f0000001f40)=0x4) 290.162783ms ago: executing program 1 (id=18497): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) bind$bt_hci(r2, &(0x7f0000000000)={0x2}, 0x62) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="64000000000101610b0c5800141a000002000000240001801400018008000100e0000001080000010c0002800500010000000000240002801400018008000100ac1e000108002200ac1e00010c0002800500010000000040ffff639c00000000f73744"], 0x64}}, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r7, 0x2, 0x20}, &(0x7f00000001c0)=0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x5c, r9, 0x20, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x77}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24004044}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 277.232109ms ago: executing program 3 (id=18498): epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003002f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 167.014876ms ago: executing program 1 (id=18499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000260300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a14000000020a0102000000000000000002000005140000001100010000000000050000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4008005}, 0x4000000) 87.342939ms ago: executing program 0 (id=18500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_netdev_private(r0, 0x20089fe, &(0x7f0000000240)="23610f9ca0536dd06a1abe108665c6374a5a4b359f4a3c3b1a45f714fe1d39247839d8b1654458ffce05c1b9c7e4cb6231651da23ed6c5e89c7b014397a6adc85f56edd17bef90b889cdc975451af64ab13e43bd101ade0bc8779b489bb14c8648195691832bec837d155428a0574d4e08fbb9adeacbd1fafa9a79510b1e716eba70a43beb515e4eba29111226c2c9fb25e8000ca95012b55f96e461c85c06e6006bfc5fb9d73fb307b974b73e36ecc661e3e36fcf54bfe99df9291376b9d79048f582c94c472096ee05190928c63b896d6270fe575be79507d652ee29cf61") (async) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) 1.961758ms ago: executing program 0 (id=18501): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) accept4$netrom(r0, 0x0, &(0x7f0000000100), 0x80000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4030}, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003e000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async) socket(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'tunl0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) (async) accept4$netrom(r0, 0x0, &(0x7f0000000100), 0x80000) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0xf, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4030}, 0x84) (async) 0s ago: executing program 1 (id=18502): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) socket$isdn_base(0x22, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendto(r2, 0x0, 0x0, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="65572abd7000f9dbdf2504000000220c381af4addb654e485f4d6f088a189b5d63ad257e56a26c9804215e707a0a881896843b3d9e36"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r6, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a92604fa34700", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x44, 0x1, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): sing attributes in process `syz.4.16905'. [ 1500.181663][T21840] IPVS: starting estimator thread 0... [ 1500.240080][ T3222] : entered promiscuous mode [ 1500.259989][ T30] audit: type=1107 audit(1771776710.962:53): pid=3221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{Eö [ 1500.259989][ T30] CrY:%m؅L?a$' [ 1500.280196][ T3218] IPVS: using max 35 ests per chain, 84000 per kthread [ 1500.321339][ T3224] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.16908'. [ 1500.335712][ T3224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16908'. [ 1500.751772][ T3256] netlink: 'syz.0.16919': attribute type 2 has an invalid length. [ 1500.761626][ T3256] netlink: 244 bytes leftover after parsing attributes in process `syz.0.16919'. [ 1501.487532][T29263] net_ratelimit: 153 callbacks suppressed [ 1501.487556][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1501.511609][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1501.659057][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1501.668897][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1501.787974][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1501.798386][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1501.910966][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1501.959592][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1501.977987][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1502.107323][ T3314] netlink: 'syz.1.16936': attribute type 3 has an invalid length. [ 1502.117468][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1502.128570][ T3308] netlink: 'syz.4.16935': attribute type 1 has an invalid length. [ 1502.207920][T21476] block nbd0: Receive control failed (result -107) [ 1502.254060][ T3314] block nbd0: reconnected socket [ 1502.865843][ T3360] xt_socket: unknown flags 0x50 [ 1506.548558][T26611] net_ratelimit: 158 callbacks suppressed [ 1506.548573][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1506.563512][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1506.677132][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1506.685114][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1506.798190][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1506.806138][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1506.917150][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1506.925026][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1507.037684][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1507.045900][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1511.657654][T29269] net_ratelimit: 80 callbacks suppressed [ 1511.657677][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1511.671796][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1511.787429][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1511.795464][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1511.907485][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1511.915364][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1512.027682][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1512.035525][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1512.147849][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1512.155719][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1516.667839][T29263] net_ratelimit: 78 callbacks suppressed [ 1516.667855][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1516.682123][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1516.797334][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1516.805379][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1516.917551][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1516.925399][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1517.047522][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1517.055681][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1517.167311][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1517.175376][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1517.267545][T20994] Bluetooth: hci1: command 0x0405 tx timeout [ 1521.717185][T29255] net_ratelimit: 80 callbacks suppressed [ 1521.717207][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1521.731159][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1521.847267][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1521.855136][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1521.967874][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1521.975826][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1522.087236][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1522.095591][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1522.207211][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1522.215157][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1522.400026][ T7401] lec:lec_start_xmit: lec0:No lecd attached [ 1524.148548][ T5159] block nbd0: Possible stuck request ffff88806573a800: control (read@0,1024B). Runtime 150 seconds [ 1524.162247][ T5159] block nbd0: Possible stuck request ffff88806573aa00: control (read@1024,1024B). Runtime 150 seconds [ 1524.175291][ T25] block nbd0: Dead connection, failed to find a fallback [ 1524.185646][ T5159] block nbd0: Possible stuck request ffff88806573ac00: control (read@2048,1024B). Runtime 150 seconds [ 1524.197963][ T5159] block nbd0: Possible stuck request ffff88806573ae00: control (read@3072,1024B). Runtime 150 seconds [ 1526.747294][T29255] net_ratelimit: 80 callbacks suppressed [ 1526.747315][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1526.761263][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1526.877134][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1526.885001][T26614] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1526.997513][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1527.005448][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1527.117079][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1527.124944][T26614] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1527.247867][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1527.255748][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1527.826997][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1527.835036][ C1] lec:lec_tx_timeout: lec0 [ 1529.245717][ T3410] netlink: 'syz.1.16961': attribute type 10 has an invalid length. [ 1529.292733][ T3410] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1529.359985][ T3418] __nla_validate_parse: 9 callbacks suppressed [ 1529.360004][ T3418] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16961'. [ 1529.404645][ T3420] lo: entered promiscuous mode [ 1529.437753][ T3410] bridge5: entered promiscuous mode [ 1529.463461][ T3410] bridge5: entered allmulticast mode [ 1529.487780][ T3410] team0: Port device bridge5 added [ 1529.505823][ T3416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16965'. [ 1529.538093][ T3416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.896543][ T3441] netlink: 'syz.2.16970': attribute type 39 has an invalid length. [ 1530.607725][T29255] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1530.624998][T29255] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 1530.636189][T29255] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1530.652542][T29255] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1530.663924][T29255] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 1530.664203][ T3470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16978'. [ 1530.673413][T29255] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1530.693259][T29255] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1530.702407][T29255] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 1530.713083][T29255] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1530.748516][ T3473] veth3: entered allmulticast mode [ 1530.754213][T29255] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1530.764213][ T3478] netlink: 'syz.0.16979': attribute type 1 has an invalid length. [ 1530.765886][T29255] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 1530.808130][T29255] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1531.038564][ T3487] SET target dimension over the limit! [ 1531.062611][ T3494] netlink: 'syz.3.16986': attribute type 4 has an invalid length. [ 1531.263391][ T3509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16990'. [ 1531.307535][ T3509] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1531.329737][ T3509] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.16990'. [ 1531.348345][ T3509] netlink: 'syz.4.16990': attribute type 1 has an invalid length. [ 1531.367463][ T3509] netlink: 224 bytes leftover after parsing attributes in process `syz.4.16990'. [ 1531.476355][ T3524] netlink: 64 bytes leftover after parsing attributes in process `syz.2.16995'. [ 1531.509197][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16996'. [ 1531.558684][ T3520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16995'. [ 1531.574538][ T3520] nbd: must specify at least one socket [ 1531.802065][ T3548] net_ratelimit: 121 callbacks suppressed [ 1531.802090][ T3548] openvswitch: netlink: IP tunnel dst address not specified [ 1531.840872][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1531.850973][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1531.910033][ T3557] netlink: 'syz.2.17005': attribute type 21 has an invalid length. [ 1531.918894][ T3557] IPv6: NLM_F_CREATE should be specified when creating new route [ 1531.926684][ T3557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1531.933963][ T3557] IPv6: NLM_F_CREATE should be set when creating new route [ 1531.941239][ T3557] IPv6: NLM_F_CREATE should be set when creating new route [ 1531.948497][ T3557] IPv6: NLM_F_CREATE should be set when creating new route [ 1531.967283][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1531.975357][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1532.087414][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1532.095288][T26614] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1532.217023][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1532.224990][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1532.338045][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1532.653998][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17013'. [ 1532.710481][T20994] Bluetooth: hci1: command 0x0405 tx timeout [ 1533.021349][ T3588] syzkaller1: entered promiscuous mode [ 1533.028108][ T3588] syzkaller1: entered allmulticast mode [ 1534.737936][ T3542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1534.755447][ T3584] netlink: 'syz.0.17014': attribute type 3 has an invalid length. [ 1534.779321][ T3584] __nla_validate_parse: 1 callbacks suppressed [ 1534.779340][ T3584] netlink: 244 bytes leftover after parsing attributes in process `syz.0.17014'. [ 1534.871558][ T3601] netlink: 'syz.3.17021': attribute type 4 has an invalid length. [ 1534.905256][ T3606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17022'. [ 1535.199339][ T3627] netlink: 'syz.4.17029': attribute type 1 has an invalid length. [ 1535.252919][ T3637] netlink: 256 bytes leftover after parsing attributes in process `syz.2.17034'. [ 1535.263340][ T3637] netlink: 'syz.2.17034': attribute type 1 has an invalid length. [ 1535.275763][ T3627] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1535.335804][ T3628] bond7: (slave veth7): Enslaving as an active interface with a down link [ 1535.380749][ T3644] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 1535.385510][ T3628] netlink: 'syz.4.17029': attribute type 26 has an invalid length. [ 1535.398344][ T3634] netlink: 'syz.4.17029': attribute type 26 has an invalid length. [ 1535.409030][ T3634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17029'. [ 1535.418710][ T3628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17029'. [ 1535.423734][ T3637] bond3: (slave bridge5): Enslaving as a backup interface with a down link [ 1535.466327][ T3627] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1535.545181][ T3651] syzkaller0: entered promiscuous mode [ 1535.559538][ T3651] syzkaller0: entered allmulticast mode [ 1535.793596][ T3670] team0: Device gtp1 is up. Set it down before adding it as a team port [ 1535.838750][ T3674] x_tables: duplicate underflow at hook 1 [ 1535.839652][ T3672] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17043'. [ 1535.974362][ T3689] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17045'. [ 1536.217578][ T3703] x9: renamed from bridge_slave_0 [ 1536.763456][ T3711] syzkaller0: entered promiscuous mode [ 1536.770322][ T3711] syzkaller0: entered allmulticast mode [ 1536.807028][T29281] net_ratelimit: 95 callbacks suppressed [ 1536.807048][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1536.821474][T29281] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1536.949306][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1536.957454][T29281] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1537.067545][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1537.075447][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1537.197475][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1537.205499][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1537.317420][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1537.325469][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1538.861788][ T3678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1539.235174][ T3746] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17065'. [ 1539.274098][ T3746] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17065'. [ 1539.349153][ T3749] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1539.563508][ T3770] bond4: Removing last arp target with arp_interval on [ 1539.766169][ T3786] netlink: 'syz.4.17074': attribute type 13 has an invalid length. [ 1539.800317][ T3786] netlink: 'syz.4.17074': attribute type 58 has an invalid length. [ 1539.826558][ T3786] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17074'. [ 1539.838757][ T3796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17076'. [ 1540.020071][ T3805] bond9: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1540.035335][ T3805] bond9 (unregistering): Released all slaves [ 1540.109206][ T3811] 8021q: VLANs not supported on tunl0 [ 1540.139460][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1540.149058][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1540.446786][ T3832] netlink: 'syz.3.17088': attribute type 33 has an invalid length. [ 1540.451146][ T3833] netlink: 14 bytes leftover after parsing attributes in process `syz.3.17088'. [ 1540.495399][ T3832] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17088'. [ 1541.863242][ T3882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17103'. [ 1541.873135][T29255] net_ratelimit: 112 callbacks suppressed [ 1541.873155][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1541.927015][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1541.945951][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17106'. [ 1541.967075][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1541.995484][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1542.035711][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1542.090335][ T3877] syzkaller0: entered promiscuous mode [ 1542.095912][ T3877] syzkaller0: entered allmulticast mode [ 1542.177988][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1542.237204][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1542.285776][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1542.317518][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1542.348122][ T3907] syzkaller0: entered promiscuous mode [ 1542.353773][ T3907] syzkaller0: entered allmulticast mode [ 1542.359538][T29264] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1542.432769][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17109'. [ 1545.926591][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1546.567776][ T3926] netlink: 'syz.4.17113': attribute type 12 has an invalid length. [ 1546.575747][ T3926] netlink: 'syz.4.17113': attribute type 29 has an invalid length. [ 1546.593898][ T3926] netlink: 148 bytes leftover after parsing attributes in process `syz.4.17113'. [ 1546.604095][ T3926] netlink: 'syz.4.17113': attribute type 2 has an invalid length. [ 1546.612994][ T3926] netlink: 23 bytes leftover after parsing attributes in process `syz.4.17113'. [ 1546.726035][ T3944] netlink: 'syz.0.17118': attribute type 2 has an invalid length. [ 1546.739981][ T3944] netlink: 100 bytes leftover after parsing attributes in process `syz.0.17118'. [ 1546.750890][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17117'. [ 1546.772693][ T3942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17117'. [ 1546.817053][ T3942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17117'. [ 1546.898907][T26611] net_ratelimit: 209 callbacks suppressed [ 1546.898927][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1546.939284][ T3953] openvswitch: netlink: Invalid VLAN frame [ 1546.971460][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1547.051399][ T3966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17125'. [ 1547.071022][ T3966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1547.090011][ T3966] batadv0: entered promiscuous mode [ 1547.097777][ T3966] batadv0: entered allmulticast mode [ 1547.103728][ T3968] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17126'. [ 1547.104916][ T3966] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 1547.127059][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1547.135660][ T3966] team0: Failed to send options change via netlink (err -105) [ 1547.143926][ T3966] team0: Port device batadv0 added [ 1547.151373][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1547.177094][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1547.206161][ T3975] netlink: 'syz.2.17129': attribute type 10 has an invalid length. [ 1547.217100][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1547.225051][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1547.277992][ T3975] bridge_slave_1: left allmulticast mode [ 1547.287368][ T3975] bridge_slave_1: left promiscuous mode [ 1547.293399][ T3975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.371675][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1547.393206][T29281] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1547.410269][ T30] audit: type=1107 audit(1771776758.112:54): pid=3985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 1547.503636][ T3994] IPv6: sit5: Disabled Multicast RS [ 1547.525562][ T3994] sit5: entered allmulticast mode [ 1547.535514][ T3997] xt_l2tp: invalid flags combination: 8 [ 1547.569872][T29263] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1547.579325][T29263] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1547.906326][ T4017] wg1 speed is unknown, defaulting to 1000 [ 1548.038476][ T4017] lo speed is unknown, defaulting to 1000 [ 1548.088377][ T4030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17143'. [ 1548.098548][ T4033] syzkaller0: entered promiscuous mode [ 1548.104041][ T4033] syzkaller0: entered allmulticast mode [ 1549.036028][ T4059] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17152'. [ 1549.099001][ T4061] netlink: 'syz.1.17152': attribute type 8 has an invalid length. [ 1549.512700][ T4075] xt_hashlimit: size too large, truncated to 1048576 [ 1549.544187][ T4083] netlink: 'syz.2.17157': attribute type 15 has an invalid length. [ 1549.751370][ T4083] syzkaller0: entered allmulticast mode [ 1550.153395][ T4116] netlink: 'syz.2.17168': attribute type 5 has an invalid length. [ 1550.184589][ T4108] pim6reg1: entered promiscuous mode [ 1550.192711][ T4108] pim6reg1: entered allmulticast mode [ 1550.314851][ T4126] netlink: 'syz.3.17171': attribute type 4 has an invalid length. [ 1550.321810][ T4128] netlink: 'syz.2.17172': attribute type 13 has an invalid length. [ 1550.326420][ T4126] x_tables: duplicate underflow at hook 1 [ 1550.531973][ T4136] bpq0: entered allmulticast mode [ 1550.579011][ T4145] : entered promiscuous mode [ 1550.589175][ T4143] syzkaller0: entered promiscuous mode [ 1550.594707][ T4143] syzkaller0: entered allmulticast mode [ 1550.937981][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1550.946085][ C1] lec:lec_tx_timeout: lec0 [ 1550.996671][ T4164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.656459][ T4202] validate_nla: 5 callbacks suppressed [ 1551.656480][ T4202] netlink: 'syz.3.17197': attribute type 9 has an invalid length. [ 1551.705715][ T4208] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1551.751843][ T4212] __nla_validate_parse: 6 callbacks suppressed [ 1551.751862][ T4212] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17200'. [ 1551.773554][ T4210] netlink: 'syz.1.17199': attribute type 1 has an invalid length. [ 1551.783553][ T4210] netlink: 'syz.1.17199': attribute type 4 has an invalid length. [ 1551.792391][ T4210] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.17199'. [ 1551.916461][ T4221] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17205'. [ 1551.947421][T29263] net_ratelimit: 136 callbacks suppressed [ 1551.947442][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1551.971227][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1552.070928][ T4232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17208'. [ 1552.087334][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1552.099517][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1552.218447][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1552.266151][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1552.279537][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1552.413814][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1552.424833][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1552.425403][ T4256] netlink: 'syz.2.17217': attribute type 11 has an invalid length. [ 1552.443354][ T4257] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1552.453693][ T4256] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17217'. [ 1553.276663][ T4288] tipc: Enabled bearer , priority 0 [ 1553.294392][ T4288] syzkaller0: entered promiscuous mode [ 1553.302118][ T4288] syzkaller0: entered allmulticast mode [ 1553.372164][ T4287] tipc: Resetting bearer [ 1553.422179][ T4287] tipc: Disabling bearer [ 1553.429319][ T4304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17235'. [ 1553.441860][ T4304] netlink: 156012 bytes leftover after parsing attributes in process `syz.0.17235'. [ 1553.678097][ T4328] bond2: (slave lo): Releasing backup interface [ 1553.685399][ T4328] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1553.698711][ T4328] team0: left allmulticast mode [ 1553.705464][ T4328] team_slave_0: left allmulticast mode [ 1553.712293][ T4328] team_slave_1: left allmulticast mode [ 1553.721130][ T4328] team0: left promiscuous mode [ 1553.726160][ T4328] team_slave_0: left promiscuous mode [ 1553.733564][ T4328] team_slave_1: left promiscuous mode [ 1553.742097][ T4328] bridge0: port 2(team0) entered disabled state [ 1553.754447][ T4328] x9: left allmulticast mode [ 1553.761337][ T4328] x9: left promiscuous mode [ 1553.766272][ T4328] bridge0: port 1(1x9) entered disabled state [ 1553.778600][ T4328] bond0: (slave bridge_slave_1): Releasing backup interface [ 1553.790387][ T4328] bond0: (slave bond_slave_0): Releasing backup interface [ 1553.799942][ T4328] bond0: (slave bond_slave_1): Releasing backup interface [ 1553.810297][ T4328] team0: Port device team_slave_0 removed [ 1553.819804][ T4328] team0: Port device team_slave_1 removed [ 1553.820455][ T4339] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1554.191598][ T4349] netlink: 'syz.4.17244': attribute type 4 has an invalid length. [ 1554.200693][ T4349] netlink: 17 bytes leftover after parsing attributes in process `syz.4.17244'. [ 1556.393005][ T4308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1556.625458][ T4361] netlink: 256 bytes leftover after parsing attributes in process `syz.0.17249'. [ 1556.657401][ T4361] netlink: 256 bytes leftover after parsing attributes in process `syz.0.17249'. [ 1556.770299][ T4371] bond2: (slave ip6gretap0): making interface the new active one [ 1556.799671][ T4371] bond2: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1556.809921][ T4373] netlink: 'syz.0.17254': attribute type 29 has an invalid length. [ 1556.821850][ T4373] netlink: 'syz.0.17254': attribute type 29 has an invalid length. [ 1556.831834][ T4371] __nla_validate_parse: 1 callbacks suppressed [ 1556.831850][ T4371] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17253'. [ 1556.855004][ T4371] vlan0: entered allmulticast mode [ 1556.866690][ T4371] gretap0: entered allmulticast mode [ 1556.957435][T26611] net_ratelimit: 105 callbacks suppressed [ 1556.957457][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1556.970257][ T4373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17254'. [ 1556.983527][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1557.118739][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1557.143451][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1557.198138][ T4394] netlink: 'syz.1.17259': attribute type 10 has an invalid length. [ 1557.216034][ T4394] team0 (unregistering): Port device bridge3 removed [ 1557.254892][ T4394] team0 (unregistering): Port device bridge5 removed [ 1557.277482][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1557.308112][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1557.348305][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1557.356356][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1557.368667][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17261'. [ 1557.497652][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1557.509243][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1557.621700][ T4413] netlink: 'syz.4.17264': attribute type 1 has an invalid length. [ 1557.683025][ T4418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17266'. [ 1557.938135][ T4429] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1558.061951][ T4436] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17273'. [ 1558.523441][ T4470] wg1 speed is unknown, defaulting to 1000 [ 1558.533278][ T4470] lo speed is unknown, defaulting to 1000 [ 1558.914734][ T4495] netlink: 'syz.0.17291': attribute type 9 has an invalid length. [ 1558.951329][ T4495] bond2: option mode: unable to set because the bond device has slaves [ 1558.960189][ T4496] bond2: option mode: unable to set because the bond device has slaves [ 1558.992259][ T4495] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1559.120246][ T4514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17296'. [ 1559.225567][ T4516] IPv6: NLM_F_CREATE should be specified when creating new route [ 1559.309985][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17298'. [ 1560.130002][ T4548] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17308'. [ 1560.140155][ T4548] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17308'. [ 1560.185854][ T4547] macsec2: entered promiscuous mode [ 1560.235307][ T4554] syzkaller0: entered promiscuous mode [ 1560.241374][ T4554] syzkaller0: entered allmulticast mode [ 1560.388915][ T4571] netlink: 178 bytes leftover after parsing attributes in process `syz.2.17316'. [ 1561.278532][ T4629] bond3: (slave wg0): Device is not bonding slave [ 1561.310943][ T4629] bond3: option active_slave: invalid value (wg0) [ 1561.333393][ T4629] bond3 (unregistering): Released all slaves [ 1561.714543][ T4655] netlink: 'syz.4.17340': attribute type 10 has an invalid length. [ 1561.837678][ T4661] __nla_validate_parse: 8 callbacks suppressed [ 1561.837696][ T4661] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.17341'. [ 1561.868188][ T4661] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.17341'. [ 1561.940827][ T4652] syzkaller0: entered promiscuous mode [ 1561.961038][ T4652] syzkaller0: entered allmulticast mode [ 1561.967618][T29269] net_ratelimit: 125 callbacks suppressed [ 1561.967639][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1561.974279][ T4665] netlink: 'syz.2.17341': attribute type 1 has an invalid length. [ 1561.983225][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1562.009872][ T4655] veth0_vlan: left promiscuous mode [ 1562.015835][ T4665] netlink: 124 bytes leftover after parsing attributes in process `syz.2.17341'. [ 1562.032836][ T4655] veth0_vlan: entered promiscuous mode [ 1562.042023][ T4655] team0: Device veth0_vlan failed to register rx_handler [ 1562.119388][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1562.149160][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1562.198373][ T4673] netlink: 'syz.3.17344': attribute type 1 has an invalid length. [ 1562.206768][ T4673] netlink: 'syz.3.17344': attribute type 2 has an invalid length. [ 1562.230208][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1562.257305][ T4673] netlink: 'syz.3.17344': attribute type 1 has an invalid length. [ 1562.299192][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1562.310068][ T4673] netlink: 'syz.3.17344': attribute type 3 has an invalid length. [ 1562.337611][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1562.356673][ T4673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17344'. [ 1562.407042][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1562.430708][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1562.460932][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1565.170523][ T5194] udevd[5194]: worker [31055] /devices/virtual/block/nbd0 timeout; kill it [ 1565.181770][ T5194] udevd[5194]: seq 68312 '/devices/virtual/block/nbd0' killed [ 1565.346749][ T4684] wg1 speed is unknown, defaulting to 1000 [ 1565.367728][ T4684] lo speed is unknown, defaulting to 1000 [ 1565.398261][ T4701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17351'. [ 1565.452693][ T4701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.479388][ T4701] batadv0: entered promiscuous mode [ 1565.505007][ T4701] batadv0: entered allmulticast mode [ 1565.527597][ T4701] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 1565.549567][ T4701] team0: Failed to send options change via netlink (err -105) [ 1565.561612][ T4701] team0: Port device batadv0 added [ 1565.579047][ T4703] veth0: entered promiscuous mode [ 1565.590377][ T4703] veth0: left promiscuous mode [ 1565.790607][ T4718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17357'. [ 1565.921828][ T4727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17361'. [ 1565.934814][T29255] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1565.944361][T29255] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1565.968915][ T4727] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1565.994333][ T4727] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1566.106723][ T4727] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1566.127572][ T4727] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1566.262341][ T4727] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1566.284478][ T4727] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1566.300522][ T4748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17365'. [ 1566.437340][ T4727] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1566.467071][ T4727] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1566.733017][T29255] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1566.770871][T29255] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1566.900875][T29255] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1566.912237][T29255] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1566.939509][T29255] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1566.957930][T29255] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1566.991047][T29255] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1567.006623][T29255] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1567.054748][T29255] net_ratelimit: 183 callbacks suppressed [ 1567.054765][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1567.087104][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1567.115104][ T4780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17376'. [ 1567.150422][ T4778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17375'. [ 1567.175426][ T4784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17377'. [ 1567.200520][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1567.221376][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1567.359300][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1567.368772][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1567.487011][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1567.493741][ T4813] netlink: 'syz.3.17381': attribute type 10 has an invalid length. [ 1567.495822][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1567.615663][ T4821] sctp: [Deprecated]: syz.1.17387 (pid 4821) Use of int in maxseg socket option. [ 1567.615663][ T4821] Use struct sctp_assoc_value instead [ 1567.642963][ T4822] sctp: [Deprecated]: syz.1.17387 (pid 4822) Use of int in maxseg socket option. [ 1567.642963][ T4822] Use struct sctp_assoc_value instead [ 1567.678704][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1567.697461][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1567.759423][ T4822] can: request_module (can-proto-5) failed. [ 1567.797201][ T4821] can: request_module (can-proto-5) failed. [ 1567.893932][ T4842] xt_hashlimit: size too large, truncated to 1048576 [ 1567.963097][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17391'. [ 1568.011706][ T4851] bond0: (slave ip6tnl1): refused to change device type [ 1568.044080][ T4856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17393'. [ 1568.244270][ T4864] veth0_to_bridge: left allmulticast mode [ 1568.251931][ T4864] veth0_to_bridge: left promiscuous mode [ 1568.261655][ T4864] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1568.299726][ T4864] team0: left allmulticast mode [ 1568.305414][ T4864] team_slave_0: left allmulticast mode [ 1568.320020][ T4864] team_slave_1: left allmulticast mode [ 1568.326278][ T4864] batadv1: left allmulticast mode [ 1568.331828][ T4864] batadv0: left allmulticast mode [ 1568.337418][ T4864] team0: left promiscuous mode [ 1568.342209][ T4864] team_slave_0: left promiscuous mode [ 1568.348336][ T4864] team_slave_1: left promiscuous mode [ 1568.355961][ T4864] batadv1: left promiscuous mode [ 1568.361477][ T4864] batadv0: left promiscuous mode [ 1568.366765][ T4864] bridge0: port 3(team0) entered disabled state [ 1568.378687][ T4864] bridge_slave_1: left allmulticast mode [ 1568.385145][ T4864] bridge_slave_1: left promiscuous mode [ 1568.392577][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.419566][ T4864] bridge_slave_0: left allmulticast mode [ 1568.425347][ T4864] bridge_slave_0: left promiscuous mode [ 1568.433049][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.512443][ T4869] bpq0: entered promiscuous mode [ 1568.533665][ T4873] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1568.568431][ T4868] wg1 speed is unknown, defaulting to 1000 [ 1568.576635][ T4868] lo speed is unknown, defaulting to 1000 [ 1569.038793][ T4900] netlink: 'syz.3.17408': attribute type 10 has an invalid length. [ 1569.060486][ T4901] ip6gre1: entered allmulticast mode [ 1569.219282][ T4908] veth0_to_bridge: entered promiscuous mode [ 1569.241914][ T4908] netlink: 'syz.2.17411': attribute type 4 has an invalid length. [ 1569.250340][ T4908] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17411'. [ 1569.265631][ T4907] veth0_to_bridge: left promiscuous mode [ 1569.277625][ T4910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17412'. [ 1569.289563][ T4910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17412'. [ 1569.454736][ T4913] tipc: Enabled bearer , priority 11 [ 1569.561804][ T4919] syz_tun: entered allmulticast mode [ 1569.675599][ T4916] syz_tun: left allmulticast mode [ 1569.901345][ T4941] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17421'. [ 1570.142861][ T4952] netlink: 'syz.2.17426': attribute type 4 has an invalid length. [ 1570.158579][ T4959] netlink: 192 bytes leftover after parsing attributes in process `syz.1.17428'. [ 1570.391696][ T4980] netlink: 'syz.2.17435': attribute type 11 has an invalid length. [ 1570.685741][ T5004] team_slave_1: Caught tx_queue_len zero misconfig [ 1571.129835][ T5037] x_tables: unsorted underflow at hook 1 [ 1572.058718][T29263] net_ratelimit: 103 callbacks suppressed [ 1572.058740][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1572.081298][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1572.199156][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1572.230178][T26614] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1572.347033][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1572.379286][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1572.399763][ T5126] __nla_validate_parse: 12 callbacks suppressed [ 1572.399783][ T5126] netlink: 27 bytes leftover after parsing attributes in process `syz.4.17478'. [ 1572.418082][T29263] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1572.557822][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1572.586039][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1572.601066][ T5134] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1572.641192][ T5150] ip6gre0: Master is either lo or non-ether device [ 1572.709407][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1572.752615][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17483'. [ 1572.783850][ T5160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17484'. [ 1572.804871][ T5163] netlink: 'syz.0.17485': attribute type 16 has an invalid length. [ 1572.850547][ T5163] netlink: 'syz.0.17485': attribute type 17 has an invalid length. [ 1572.860197][ T5160] netlink: 'syz.4.17484': attribute type 1 has an invalid length. [ 1572.967478][ T5165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17486'. [ 1573.022685][ T5180] xt_TCPMSS: Only works on TCP SYN packets [ 1573.036710][ T5177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17489'. [ 1573.087642][ T5184] netlink: 'syz.4.17489': attribute type 11 has an invalid length. [ 1573.125360][ T5184] netlink: 'syz.4.17489': attribute type 11 has an invalid length. [ 1573.148781][ T5184] netlink: 224 bytes leftover after parsing attributes in process `syz.4.17489'. [ 1573.530872][ T5211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17498'. [ 1573.749212][ T5234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1573.775238][ T5235] netlink: 128 bytes leftover after parsing attributes in process `syz.1.17503'. [ 1573.847192][ T5237] netlink: 112 bytes leftover after parsing attributes in process `syz.4.17505'. [ 1574.176333][ T5252] sit0: entered promiscuous mode [ 1574.185380][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17503'. [ 1574.202327][ T5250] wg1 speed is unknown, defaulting to 1000 [ 1574.211080][ T5250] lo speed is unknown, defaulting to 1000 [ 1575.747401][ T5336] netlink: 'syz.4.17527': attribute type 1 has an invalid length. [ 1575.904611][ T5337] bond9: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1575.958227][ T5337] bond9: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 1575.997020][ T5337] bond9: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 1576.369241][ T5373] netlink: 'syz.1.17533': attribute type 21 has an invalid length. [ 1576.551929][ T5373] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1576.569784][ T5373] bond3 (unregistering): Released all slaves [ 1577.136512][ T5398] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 1577.137440][T29270] net_ratelimit: 118 callbacks suppressed [ 1577.137458][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1577.165757][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1577.199171][ T5406] sctp: [Deprecated]: syz.3.17543 (pid 5406) Use of int in max_burst socket option. [ 1577.199171][ T5406] Use struct sctp_assoc_value instead [ 1577.277527][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1577.329570][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1577.370062][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1577.380024][ T5412] macsec0: entered promiscuous mode [ 1577.385364][ T5412] macsec0: entered allmulticast mode [ 1577.409811][ T5412] veth1_macvtap: entered allmulticast mode [ 1577.416425][ T5412] macsec0: left promiscuous mode [ 1577.422550][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1577.443707][ T5412] macsec0: left allmulticast mode [ 1577.483271][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1577.496454][ T5412] veth1_macvtap: left allmulticast mode [ 1577.510124][ T5423] __nla_validate_parse: 11 callbacks suppressed [ 1577.510144][ T5423] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17544'. [ 1577.517264][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1577.587510][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1577.601564][ T5429] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17548'. [ 1577.628182][ T5429] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1577.679594][ T5412] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1577.869082][ T5441] x_tables: duplicate underflow at hook 4 [ 1578.368469][ T5472] tipc: Enabling of bearer rejected, failed to enable media [ 1578.625177][ T5485] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17560'. [ 1578.636145][ T5492] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17561'. [ 1579.103296][ T5513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17566'. [ 1579.297017][ T5519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17568'. [ 1579.337289][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17568'. [ 1579.793621][ T5544] netlink: 156 bytes leftover after parsing attributes in process `syz.3.17575'. [ 1580.002790][ T5560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17578'. [ 1580.198557][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17582'. [ 1580.338107][ T5576] veth0_to_batadv (unregistering): left promiscuous mode [ 1580.906489][ T5599] xt_TCPMSS: Only works on TCP SYN packets [ 1581.216142][ T5616] netlink: 'syz.2.17593': attribute type 4 has an invalid length. [ 1581.256720][ T5618] netlink: 'syz.3.17594': attribute type 1 has an invalid length. [ 1581.275058][ T5618] netlink: 'syz.3.17594': attribute type 10 has an invalid length. [ 1581.692659][ T5663] xt_cluster: node mask cannot exceed total number of nodes [ 1581.758148][ T5665] x_tables: duplicate entry at hook 3 [ 1582.208270][T29269] net_ratelimit: 112 callbacks suppressed [ 1582.208292][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1582.222691][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1582.337682][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1582.345585][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1582.457264][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1582.465162][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1582.563219][ T5716] geneve2: entered promiscuous mode [ 1582.571425][T29281] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 34862 - 0 [ 1582.580518][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1582.598747][T29281] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 34862 - 0 [ 1582.608011][T29281] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 34862 - 0 [ 1582.616602][T29281] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 34862 - 0 [ 1582.625790][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1582.657124][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1582.665326][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1582.709666][ T5725] __nla_validate_parse: 7 callbacks suppressed [ 1582.709681][ T5725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17620'. [ 1582.814444][ T5733] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.17622'. [ 1584.594328][ T5648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1584.829307][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17625'. [ 1584.998126][ T5767] netlink: 'syz.4.17628': attribute type 83 has an invalid length. [ 1585.067862][ T5764] netlink: 'syz.4.17628': attribute type 1 has an invalid length. [ 1585.079505][ T5764] netlink: 228 bytes leftover after parsing attributes in process `syz.4.17628'. [ 1585.103223][ T5771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17630'. [ 1585.285671][ T5780] xt_hashlimit: size too large, truncated to 1048576 [ 1585.308788][ T5788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17635'. [ 1585.433476][ T5793] netlink: 'syz.3.17636': attribute type 1 has an invalid length. [ 1585.504103][ T5793] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1585.551616][ T5798] bond10: Unable to set up delay as MII monitoring is disabled [ 1585.569083][ T5798] bond10 (unregistering): Released all slaves [ 1586.231899][ T5827] netlink: 68 bytes leftover after parsing attributes in process `syz.2.17646'. [ 1586.436569][ T5829] syzkaller0: entered promiscuous mode [ 1586.445762][ T5829] syzkaller0: entered allmulticast mode [ 1586.556425][ T7401] lec:lec_start_xmit: lec0:No lecd attached [ 1586.782819][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17654'. [ 1587.217679][T29281] net_ratelimit: 109 callbacks suppressed [ 1587.217702][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.252432][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.281281][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.311933][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.341337][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.383224][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.414550][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.445062][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.467152][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1587.487440][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1589.785155][ T5891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17657'. [ 1589.807729][ T5891] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17657'. [ 1590.006850][ T5916] netlink: 108 bytes leftover after parsing attributes in process `syz.4.17660'. [ 1590.069113][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17660'. [ 1590.241495][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17666'. [ 1590.432394][ T5944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17670'. [ 1590.513419][ T5948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17670'. [ 1590.921949][ T5979] netlink: 'syz.1.17678': attribute type 2 has an invalid length. [ 1591.034294][ T5983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17678'. [ 1591.826934][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms [ 1591.836177][ C1] lec:lec_tx_timeout: lec0 [ 1592.227248][T29281] net_ratelimit: 202 callbacks suppressed [ 1592.227272][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.261647][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.298164][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.318109][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.338506][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.358402][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.401675][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.431475][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.465818][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1592.487703][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1593.792085][ T5979] 9: entered promiscuous mode [ 1594.206228][ T6027] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17688'. [ 1594.282049][ T6031] syzkaller1: entered promiscuous mode [ 1594.307851][ T6031] syzkaller1: entered allmulticast mode [ 1594.539395][ T6049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17695'. [ 1594.895692][ T6069] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.17699'. [ 1595.432564][ T6092] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1595.476269][ T6090] syzkaller1: entered promiscuous mode [ 1595.503154][ T6090] syzkaller1: entered allmulticast mode [ 1595.553497][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17708'. [ 1595.761200][ T6099] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1596.161837][ T6099] bond2: left promiscuous mode [ 1596.172120][ T6099] gtp0: left promiscuous mode [ 1596.177781][ T6099] gtp0: left allmulticast mode [ 1596.218775][ T6099] geneve2: left promiscuous mode [ 1596.253328][ T6106] bond0: (slave gre0): Error: Device type is different from other slaves [ 1596.313451][ T6117] syzkaller0: entered promiscuous mode [ 1596.319588][ T6117] syzkaller0: entered allmulticast mode [ 1596.326780][T26611] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 34862 - 0 [ 1597.237663][T29269] net_ratelimit: 179 callbacks suppressed [ 1597.237686][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.274844][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.307016][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.317218][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.338125][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.357549][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.378347][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.398446][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.419191][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1597.457148][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1599.268250][T26611] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 34862 - 0 [ 1599.290693][T26611] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 34862 - 0 [ 1599.328945][T26611] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 34862 - 0 [ 1599.499098][ T6149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17719'. [ 1599.688624][ T6165] syzkaller0: entered promiscuous mode [ 1599.701251][ T6165] syzkaller0: entered allmulticast mode [ 1600.008843][ T6184] tipc: Enabling of bearer rejected, failed to enable media [ 1600.074906][ T6186] syzkaller0: entered promiscuous mode [ 1600.100038][ T6186] syzkaller0: entered allmulticast mode [ 1600.121873][ T6186] netlink: 1 bytes leftover after parsing attributes in process `syz.4.17729'. [ 1600.356172][ T6202] veth0: entered promiscuous mode [ 1600.465809][ T6221] netlink: 260 bytes leftover after parsing attributes in process `syz.1.17737'. [ 1600.742824][ T6229] syzkaller0: entered promiscuous mode [ 1600.749648][ T6229] syzkaller0: entered allmulticast mode [ 1602.253303][T26614] net_ratelimit: 200 callbacks suppressed [ 1602.253324][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.288111][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.308165][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.327467][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.355111][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.384357][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.414883][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.444887][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.475201][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1602.519100][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.893441][ T6202] veth0: left promiscuous mode [ 1603.942341][ T6258] syzkaller1: entered promiscuous mode [ 1603.956162][ T6258] syzkaller1: entered allmulticast mode [ 1604.028302][ T6271] erspan0: entered allmulticast mode [ 1604.048835][ T6281] netlink: 'syz.2.17752': attribute type 1 has an invalid length. [ 1604.068096][ T6281] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17752'. [ 1604.210954][ T6291] netlink: 'syz.0.17754': attribute type 39 has an invalid length. [ 1604.244966][ T6292] netlink: 'syz.3.17755': attribute type 5 has an invalid length. [ 1604.248298][ T6288] bond10: entered promiscuous mode [ 1604.261523][ T6288] bond10: entered allmulticast mode [ 1604.261792][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.268827][ T6288] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1604.318323][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.343946][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.361086][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.384111][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.400265][ T6294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1604.587538][ T6309] netlink: 'syz.0.17760': attribute type 4 has an invalid length. [ 1604.612087][ T6309] netlink: 'syz.0.17760': attribute type 4 has an invalid length. [ 1604.809361][ T6326] netlink: 'syz.0.17764': attribute type 1 has an invalid length. [ 1604.889678][ T6326] macvlan3: entered promiscuous mode [ 1604.895425][ T6326] macvlan3: entered allmulticast mode [ 1604.902948][ T6326] bond6: (slave macvlan3): Opening slave failed [ 1605.049615][ T6329] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1605.352285][ T6370] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.17773'. [ 1606.113732][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17776'. [ 1607.297374][T29255] net_ratelimit: 138 callbacks suppressed [ 1607.297395][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1607.313936][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1607.351511][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1607.427660][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1607.435606][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1607.547712][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1607.556123][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1607.667612][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1607.676048][ T131] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1607.787093][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1607.796263][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1608.021526][ T6352] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1608.259611][ T6403] syzkaller0: entered promiscuous mode [ 1608.271582][ T6403] syzkaller0: entered allmulticast mode [ 1608.293344][ T6410] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17781'. [ 1608.333942][ T6403] tipc: Enabled bearer , priority 0 [ 1608.744276][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17786'. [ 1608.758786][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17788'. [ 1609.035299][ T6402] tipc: Resetting bearer [ 1609.150465][ T6402] tipc: Disabling bearer [ 1609.252430][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17799'. [ 1609.276349][ T6466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17799'. [ 1609.288045][ T6466] bridge0: entered allmulticast mode [ 1609.368976][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17801'. [ 1609.544219][ T6473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17802'. [ 1609.570787][ T6483] SET target dimension over the limit! [ 1609.699734][ T6487] ip6t_rpfilter: unknown options [ 1609.734098][ T6489] xt_l2tp: v2 doesn't support IP mode [ 1609.794750][ T6499] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.17807'. [ 1609.846714][ T6492] syzkaller0: entered promiscuous mode [ 1609.853581][ T6492] syzkaller0: entered allmulticast mode [ 1610.426503][ T6513] netlink: 232 bytes leftover after parsing attributes in process `syz.0.17810'. [ 1610.703477][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17815'. [ 1612.324851][T26611] net_ratelimit: 160 callbacks suppressed [ 1612.324873][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.361393][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.391914][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.424893][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.457203][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.497517][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.532782][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.571880][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.602464][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.630476][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1612.786840][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1612.796859][ C1] lec:lec_tx_timeout: lec0 [ 1613.499291][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17822'. [ 1613.576389][ T6543] netlink: 'syz.4.17820': attribute type 4 has an invalid length. [ 1613.634205][ T6542] tipc: New replicast peer: 255.255.255.255 [ 1613.643291][ T6548] netlink: 'syz.4.17820': attribute type 4 has an invalid length. [ 1613.693764][ T6542] tipc: Enabled bearer , priority 10 [ 1613.708891][ T6554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17825'. [ 1613.774870][ T6554] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000 [ 1613.793213][ T6557] syzkaller0: entered promiscuous mode [ 1613.828258][ T6557] syzkaller0: entered allmulticast mode [ 1613.938639][ T6567] netlink: 232 bytes leftover after parsing attributes in process `syz.4.17828'. [ 1614.103104][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17831'. [ 1614.346739][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17835'. [ 1614.365784][ T6596] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1614.410494][ T6600] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17835'. [ 1614.434530][ T5489] veth1_macvtap: left promiscuous mode [ 1614.559266][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17835'. [ 1614.570556][ T6601] nbd: device at index 64 is going down [ 1614.718323][T31511] udevd[31511]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1614.725487][ T6626] IPv6: NLM_F_CREATE should be specified when creating new route [ 1614.736060][ T4672] udevd[4672]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1614.763125][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17840'. [ 1617.327952][T29281] net_ratelimit: 106 callbacks suppressed [ 1617.327973][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1617.342945][T29281] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1617.455781][ T6606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1617.457455][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1617.501724][T29281] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1617.646982][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1617.655053][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1617.816149][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1617.838879][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1617.977329][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.007524][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.129310][ T6680] C: renamed from lo (while UP) [ 1618.156603][ T6692] sctp: [Deprecated]: syz.3.17856 (pid 6692) Use of int in maxseg socket option. [ 1618.156603][ T6692] Use struct sctp_assoc_value instead [ 1618.567757][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17862'. [ 1618.601149][ T6712] netlink: 'syz.4.17862': attribute type 6 has an invalid length. [ 1618.616290][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17862'. [ 1618.671122][ T6717] netlink: 32 bytes leftover after parsing attributes in process `syz.0.17864'. [ 1618.685209][ T6719] netlink: 'syz.0.17864': attribute type 26 has an invalid length. [ 1618.704892][ T6717] netlink: 'syz.0.17864': attribute type 26 has an invalid length. [ 1618.705586][ T6719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17864'. [ 1618.718753][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17862'. [ 1618.747689][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17864'. [ 1618.816609][ T6712] netlink: 'syz.4.17862': attribute type 6 has an invalid length. [ 1618.828160][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17862'. [ 1618.898687][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17866'. [ 1618.999211][ T6730] bridge5: port 1(veth7) entered blocking state [ 1619.006665][ T6730] bridge5: port 1(veth7) entered disabled state [ 1619.037721][ T6730] veth7: entered allmulticast mode [ 1619.060251][ T6730] veth7: entered promiscuous mode [ 1619.204668][ T6750] netlink: 512 bytes leftover after parsing attributes in process `syz.4.17873'. [ 1619.209034][ T6755] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1619.235989][ T6755] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1619.296611][ T6759] wg1 speed is unknown, defaulting to 1000 [ 1619.312493][ T6759] lo speed is unknown, defaulting to 1000 [ 1619.336401][ T6752] netlink: 'syz.0.17874': attribute type 3 has an invalid length. [ 1619.363582][ T6752] netlink: 'syz.0.17874': attribute type 1 has an invalid length. [ 1619.380621][ T6752] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.17874'. [ 1619.390546][ T6763] tipc: Enabled bearer , priority 0 [ 1619.470133][ T6763] syzkaller0: entered promiscuous mode [ 1619.476248][ T6763] syzkaller0: entered allmulticast mode [ 1619.484433][ T6763] tipc: Resetting bearer [ 1619.503828][ T6762] tipc: Resetting bearer [ 1621.029902][T21476] Bluetooth: hci1: command 0x0405 tx timeout [ 1622.325164][ T6762] tipc: Disabling bearer [ 1622.337515][T26611] net_ratelimit: 173 callbacks suppressed [ 1622.337537][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.367379][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.400745][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.439419][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.467910][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.507402][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.525659][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1622.550226][ T6792] netlink: 'syz.1.17882': attribute type 64 has an invalid length. [ 1622.680918][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.747492][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.778050][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1622.871849][ T6806] netlink: 'syz.4.17890': attribute type 7 has an invalid length. [ 1623.138459][T30749] IPVS: starting estimator thread 0... [ 1623.238111][ T6820] IPVS: using max 32 ests per chain, 76800 per kthread [ 1623.549861][ T6826] syzkaller0: entered promiscuous mode [ 1623.556424][ T6826] syzkaller0: entered allmulticast mode [ 1623.582079][ T6847] __nla_validate_parse: 2 callbacks suppressed [ 1623.582099][ T6847] netlink: 56 bytes leftover after parsing attributes in process `syz.0.17897'. [ 1626.388723][ T6849] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1626.481876][ T6871] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17906'. [ 1626.632462][ T6875] netlink: 9 bytes leftover after parsing attributes in process `syz.0.17909'. [ 1626.667074][ T6875] 0: renamed from hsr_slave_1 (while UP) [ 1626.681700][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17910'. [ 1626.698798][ T6875] 0: entered allmulticast mode [ 1626.716663][ T6875] netlink: 179596 bytes leftover after parsing attributes in process `syz.0.17909'. [ 1626.786019][ T6888] netlink: 'syz.3.17912': attribute type 4 has an invalid length. [ 1626.802738][ T6888] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17912'. [ 1626.872344][ T6898] lo: Caught tx_queue_len zero misconfig [ 1626.975136][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17915'. [ 1627.407253][T26614] net_ratelimit: 192 callbacks suppressed [ 1627.407273][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1627.422465][T26614] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1627.538394][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1627.547801][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1627.623999][ T6940] wg1 speed is unknown, defaulting to 1000 [ 1627.633478][ T6940] lo speed is unknown, defaulting to 1000 [ 1627.657492][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1627.666204][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1627.777017][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1627.796944][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1627.817612][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1627.825674][T26614] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1627.898626][ T6944] netlink: 'syz.1.17924': attribute type 10 has an invalid length. [ 1629.709850][ T6883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1630.009881][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17930'. [ 1630.353201][ T6982] sctp: [Deprecated]: syz.0.17934 (pid 6982) Use of int in max_burst socket option deprecated. [ 1630.353201][ T6982] Use struct sctp_assoc_value instead [ 1630.586445][ T7003] lo: entered allmulticast mode [ 1630.657144][ T7003] lo: left allmulticast mode [ 1630.699900][ T7011] veth1_to_bond: entered allmulticast mode [ 1630.719913][ T7009] netlink: 'syz.0.17941': attribute type 1 has an invalid length. [ 1630.734291][ T7011] veth1_to_bond: left allmulticast mode [ 1630.773882][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17941'. [ 1630.904877][ T7009] bond7: entered promiscuous mode [ 1630.956557][ T7009] bond7: entered allmulticast mode [ 1630.989713][ T7009] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1631.044997][ T7015] macvlan4: entered promiscuous mode [ 1631.051545][ T7015] macvlan4: entered allmulticast mode [ 1631.067669][ T7025] veth1_to_team: entered allmulticast mode [ 1631.171738][ T7027] xt_hashlimit: size too large, truncated to 1048576 [ 1631.240858][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17948'. [ 1631.349722][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1631.385548][ T7037] team0: Port device batadv2 added [ 1631.583590][ T7051] netlink: 84 bytes leftover after parsing attributes in process `syz.3.17952'. [ 1631.845606][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17958'. [ 1631.973661][ T7080] netlink: 'syz.2.17961': attribute type 20 has an invalid length. [ 1632.009712][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17961'. [ 1632.020529][ T7080] netlink: 'syz.2.17961': attribute type 20 has an invalid length. [ 1632.030876][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17961'. [ 1632.090005][ T7085] siw: device registration error -23 [ 1632.130586][ T7087] netlink: 'syz.2.17963': attribute type 1 has an invalid length. [ 1632.141699][ T7087] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.17963'. [ 1632.447842][T29281] net_ratelimit: 90 callbacks suppressed [ 1632.447862][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1632.497597][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1632.505831][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1632.637541][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1632.644394][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17972'. [ 1632.648467][T29281] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1632.777427][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1632.777743][ T7131] syzkaller0: entered promiscuous mode [ 1632.791976][ T7131] syzkaller0: entered allmulticast mode [ 1632.807199][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1632.815174][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1632.927586][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1632.935815][T29269] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1633.351502][ T7134] netlink: 696 bytes leftover after parsing attributes in process `syz.2.17974'. [ 1635.295585][ T7099] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1635.454143][ T7149] netlink: 'syz.1.17980': attribute type 6 has an invalid length. [ 1635.508411][ T7159] netlink: 'syz.4.17983': attribute type 6 has an invalid length. [ 1635.605149][ T7161] __nla_validate_parse: 2 callbacks suppressed [ 1635.605171][ T7161] netlink: 96 bytes leftover after parsing attributes in process `syz.3.17982'. [ 1635.654829][ T7161] vlan0: entered allmulticast mode [ 1635.708033][ T7161] syz_tun: entered allmulticast mode [ 1635.769629][ T7174] netlink: 64 bytes leftover after parsing attributes in process `syz.2.17985'. [ 1635.851103][ T7176] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17987'. [ 1636.396151][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17994'. [ 1636.444256][ T7193] dvmrp0: entered allmulticast mode [ 1636.560546][ T7204] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17996'. [ 1636.827580][ T7222] netlink: 'syz.3.18003': attribute type 2 has an invalid length. [ 1636.938829][ T7228] netlink: 516 bytes leftover after parsing attributes in process `syz.3.18005'. [ 1636.951659][ T7228] SET target dimension over the limit! [ 1636.961986][ T7228] SET target dimension over the limit! [ 1637.049938][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18006'. [ 1637.075583][ T7230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18006'. [ 1637.092306][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18006'. [ 1637.109503][ T7230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18006'. [ 1637.200403][T26611] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1637.250028][T26611] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1637.284002][T26611] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1637.318453][T26611] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1637.331689][ T7247] bridge0: entered allmulticast mode [ 1637.468230][T29270] net_ratelimit: 94 callbacks suppressed [ 1637.468279][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1637.501488][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1637.533707][ T7255] gtp0: entered promiscuous mode [ 1637.545084][ T7255] gtp0: entered allmulticast mode [ 1637.627619][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1637.635997][T29270] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1637.760431][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1637.787454][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1637.862585][ T7273] No such timeout policy "syz0" [ 1637.907892][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1637.911860][ T7272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.949235][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1637.977687][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1638.108222][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1638.178229][ T7294] netlink: 'syz.0.18028': attribute type 9 has an invalid length. [ 1638.476211][ T3111] IPVS: starting estimator thread 0... [ 1638.587544][ T7317] IPVS: using max 35 ests per chain, 84000 per kthread [ 1638.802687][ T7336] sch_fq: defrate 0 ignored. [ 1638.932525][ T7347] delete_channel: no stack [ 1642.000824][ T7364] __nla_validate_parse: 16 callbacks suppressed [ 1642.000859][ T7364] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18050'. [ 1642.004012][ T7370] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18048'. [ 1642.010407][ T7364] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18050'. [ 1642.020253][ T7372] siw: device registration error -23 [ 1642.056885][ T7364] netlink: 'syz.4.18050': attribute type 6 has an invalid length. [ 1642.077686][ T7364] netlink: 'syz.4.18050': attribute type 5 has an invalid length. [ 1642.104337][ T7364] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18050'. [ 1642.388113][ T7395] syzkaller0: entered promiscuous mode [ 1642.400973][ T7395] syzkaller0: entered allmulticast mode [ 1642.503500][ T7408] netlink: 666 bytes leftover after parsing attributes in process `syz.2.18060'. [ 1642.538916][T26614] net_ratelimit: 151 callbacks suppressed [ 1642.538939][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1642.580858][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1642.627888][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1642.641743][T29281] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1642.744169][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18065'. [ 1642.776996][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1642.791847][ T7424] bond8: entered promiscuous mode [ 1642.801671][ T7424] bond8: entered allmulticast mode [ 1642.807534][ T7424] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1642.827814][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1642.850756][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1642.868795][ T7422] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1642.925658][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1642.954015][ T7425] bridge_slave_0: left allmulticast mode [ 1642.967457][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1643.003968][ T7425] bridge_slave_0: left promiscuous mode [ 1643.040199][ T7425] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.126720][ T7425] bridge0 (unregistering): left allmulticast mode [ 1643.143000][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18068'. [ 1643.209613][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18068'. [ 1643.295451][T21476] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1643.314119][T21476] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1643.338120][T21476] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1643.356152][T21476] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1643.368901][T21476] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1643.445084][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18070'. [ 1643.778721][ T7455] syzkaller0: entered promiscuous mode [ 1643.788081][ T7455] syzkaller0: entered allmulticast mode [ 1643.800111][ T7443] wg1 speed is unknown, defaulting to 1000 [ 1643.825987][ T7443] lo speed is unknown, defaulting to 1000 [ 1643.844145][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18074'. [ 1644.241039][ T7474] pim6reg1: entered promiscuous mode [ 1644.255268][ T7474] pim6reg1: entered allmulticast mode [ 1644.972763][ T7443] chnl_net:caif_netlink_parms(): no params data found [ 1645.312976][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.348115][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1645.356410][ T7443] bridge_slave_0: entered allmulticast mode [ 1645.399085][ T7443] bridge_slave_0: entered promiscuous mode [ 1645.425060][ T7443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1645.440036][T20994] Bluetooth: hci0: command tx timeout [ 1645.470410][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1645.487205][ T7443] bridge_slave_1: entered allmulticast mode [ 1645.496596][ T7443] bridge_slave_1: entered promiscuous mode [ 1645.589888][ T7526] syzkaller0: entered promiscuous mode [ 1645.595509][ T7526] syzkaller0: entered allmulticast mode [ 1645.632991][ T7443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1645.637315][ T7526] netlink: 'syz.4.18093': attribute type 1 has an invalid length. [ 1645.675213][ T7443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.828499][ T7443] team0: Port device team_slave_0 added [ 1645.840922][ T7443] team0: Port device team_slave_1 added [ 1645.914960][ T7538] tc_dump_action: action bad kind [ 1645.923410][ T7541] tc_dump_action: action bad kind [ 1645.937915][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.945382][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.005026][ T7443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1646.035162][ T7443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1646.064769][ T7443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1646.101341][ T7443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1646.212581][ T7553] IPVS: set_ctl: invalid protocol: 58 10.1.1.0:20001 [ 1646.275577][ T7443] hsr_slave_0: entered promiscuous mode [ 1646.285891][ T7443] hsr_slave_1: entered promiscuous mode [ 1646.298006][ T7443] debugfs: 'hsr0' already exists in 'hsr' [ 1646.304260][ T7443] Cannot create hsr debugfs directory [ 1646.442894][ T7564] netlink: 'syz.1.18105': attribute type 2 has an invalid length. [ 1646.843268][ T7443] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1646.861091][ T7443] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1646.933574][ T7573] pim6reg1: entered promiscuous mode [ 1646.939524][ T7573] pim6reg1: entered allmulticast mode [ 1647.013963][ T7443] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1647.020935][ T7582] x_tables: duplicate underflow at hook 2 [ 1647.042769][ T7582] __nla_validate_parse: 11 callbacks suppressed [ 1647.042792][ T7582] netlink: 68 bytes leftover after parsing attributes in process `syz.2.18111'. [ 1647.069139][ T7443] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1647.088644][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18111'. [ 1647.165625][ T7443] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1647.190529][ T7443] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1647.222812][ T7584] syzkaller0: entered promiscuous mode [ 1647.230009][ T7584] syzkaller0: entered allmulticast mode [ 1647.274308][ T7584] tipc: Enabled bearer , priority 0 [ 1647.284825][ T7583] tipc: Resetting bearer [ 1647.328641][ T7583] tipc: Disabling bearer [ 1647.379383][ T7443] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1647.417772][ T7443] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1647.418333][ T7595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18116'. [ 1647.511016][T20994] Bluetooth: hci0: command tx timeout [ 1647.617460][T26614] net_ratelimit: 164 callbacks suppressed [ 1647.617480][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1647.644648][T26614] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1647.767249][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1647.800804][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1647.859423][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1647.885899][T26614] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1647.956523][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18125'. [ 1647.985163][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18125'. [ 1648.008576][ T7629] geneve3: entered promiscuous mode [ 1648.013925][ T7629] geneve3: entered allmulticast mode [ 1648.019802][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.032120][ T131] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.047246][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.058410][ T131] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.077820][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.108167][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.139721][ T131] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.178671][ T131] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.181740][ T7639] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18128'. [ 1648.198561][ T7443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1648.211815][ T7443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1648.262774][ T7443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1648.302029][ T7443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1648.326023][ T7645] can: request_module (can-proto-0) failed. [ 1648.348365][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18133'. [ 1648.648971][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18136'. [ 1648.705307][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18136'. [ 1648.765816][ T7443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.811238][ T7443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1648.880346][ T7669] syzkaller0: entered promiscuous mode [ 1648.885957][ T7669] syzkaller0: entered allmulticast mode [ 1648.898941][ T7687] IPVS: set_ctl: invalid protocol: 54 172.20.20.170:20004 [ 1648.910137][T29269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.917353][T29269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1648.933781][T29269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.941029][T29269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.172300][ T7705] netlink: 'syz.1.18144': attribute type 1 has an invalid length. [ 1649.589866][T20994] Bluetooth: hci0: command tx timeout [ 1650.905699][ T7401] lec:lec_start_xmit: lec0:No lecd attached [ 1651.675263][T20994] Bluetooth: hci0: command tx timeout [ 1652.092898][ T7717] netlink: 48 bytes leftover after parsing attributes in process `syz.1.18148'. [ 1652.169620][ T7725] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18149'. [ 1652.241901][ T7736] netlink: 'syz.3.18150': attribute type 1 has an invalid length. [ 1652.301158][ T7736] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1652.392197][ T7743] bond11: (slave veth9): Enslaving as an active interface with a down link [ 1652.428086][ T7736] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1652.569995][ T7443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1652.628431][T29281] net_ratelimit: 183 callbacks suppressed [ 1652.628449][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1652.668578][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1652.689866][ T7760] netlink: 'syz.4.18158': attribute type 1 has an invalid length. [ 1652.697712][T29281] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1652.722777][ T7760] netlink: 224 bytes leftover after parsing attributes in process `syz.4.18158'. [ 1652.740929][ T7443] veth0_vlan: entered promiscuous mode [ 1652.857578][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1652.878017][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1652.897256][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1652.919402][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1652.950929][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1652.977805][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.014332][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.121311][ T7777] bond12: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1653.178462][ T7443] veth1_vlan: entered promiscuous mode [ 1653.260140][ T7443] veth0_macvtap: entered promiscuous mode [ 1653.286093][ T7443] veth1_macvtap: entered promiscuous mode [ 1653.348882][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1653.401448][ T7443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1653.463958][T29270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.551994][T29270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.568367][T29281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.654525][T29281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.668289][ T7808] netlink: 14316 bytes leftover after parsing attributes in process `syz.3.18171'. [ 1653.899193][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18177'. [ 1653.920123][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18177'. [ 1653.939049][T29269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.978951][T29269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.101016][T29264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.148120][T29264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1654.653380][ T7871] netlink: 'syz.0.18188': attribute type 1 has an invalid length. [ 1654.671196][ T7873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18189'. [ 1654.702922][ T7871] erspan1: entered allmulticast mode [ 1654.795633][T21476] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1654.817228][T21476] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1654.837630][T21476] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1654.875892][T21476] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1654.884838][T21476] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1655.053990][ T7879] wg1 speed is unknown, defaulting to 1000 [ 1655.078671][ T7879] lo speed is unknown, defaulting to 1000 [ 1655.117268][ T7890] IPv6: NLM_F_CREATE should be specified when creating new route [ 1655.220256][ T7900] netlink: 84 bytes leftover after parsing attributes in process `syz.4.18194'. [ 1655.280776][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18198'. [ 1655.473998][ T7913] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18200'. [ 1655.626378][ T7917] netlink: 'syz.4.18202': attribute type 10 has an invalid length. [ 1655.899305][ T7896] netlink: 'syz.2.18196': attribute type 5 has an invalid length. [ 1655.908744][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1655.917185][ C1] lec:lec_tx_timeout: lec0 [ 1656.048401][ T7939] syzkaller0: entered promiscuous mode [ 1656.054888][ T7939] syzkaller0: entered allmulticast mode [ 1656.120019][ T7947] syzkaller0: entered promiscuous mode [ 1656.138212][ T7947] syzkaller0: entered allmulticast mode [ 1656.167130][ T7946] veth9: entered allmulticast mode [ 1656.182273][ T7879] chnl_net:caif_netlink_parms(): no params data found [ 1656.252275][ T7950] netlink: 'syz.0.18205': attribute type 1 has an invalid length. [ 1656.704311][ T7879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.713083][ T7879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.722342][ T7879] bridge_slave_0: entered allmulticast mode [ 1656.731727][ T7879] bridge_slave_0: entered promiscuous mode [ 1656.744098][ T7879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.752985][ T7879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.761402][ T7879] bridge_slave_1: entered allmulticast mode [ 1656.770352][ T7879] bridge_slave_1: entered promiscuous mode [ 1656.886057][ T7879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1656.931998][ T7879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1656.947091][T21476] Bluetooth: hci2: command tx timeout [ 1657.050978][ T7879] team0: Port device team_slave_0 added [ 1657.075336][ T7879] team0: Port device team_slave_1 added [ 1657.139026][ T8007] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1657.155305][ T8007] netlink: 'syz.4.18222': attribute type 4 has an invalid length. [ 1657.183806][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.209120][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.242405][ T7879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.257709][ T7879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.276199][ T7879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.323101][ T7879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.648046][T26611] net_ratelimit: 158 callbacks suppressed [ 1657.648068][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.692882][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.730254][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.759489][T29264] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.783810][ T8039] __nla_validate_parse: 3 callbacks suppressed [ 1657.783830][ T8039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18232'. [ 1657.802188][T29264] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.829198][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.837622][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18232'. [ 1657.868161][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.897479][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.918284][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1657.954411][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1659.037190][T21476] Bluetooth: hci2: command tx timeout [ 1660.416638][ T8025] netlink: 'syz.2.18230': attribute type 4 has an invalid length. [ 1660.455811][ T7879] hsr_slave_0: entered promiscuous mode [ 1660.465276][ T7879] hsr_slave_1: entered promiscuous mode [ 1660.476382][ T7879] debugfs: 'hsr0' already exists in 'hsr' [ 1660.486009][ T7879] Cannot create hsr debugfs directory [ 1660.518845][ T8036] veth3: entered allmulticast mode [ 1660.737276][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18238'. [ 1660.802006][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18238'. [ 1660.883476][ T8062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18238'. [ 1660.912774][ T8068] netlink: 'syz.4.18239': attribute type 4 has an invalid length. [ 1661.022620][ T8087] sctp: [Deprecated]: syz.2.18242 (pid 8087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1661.022620][ T8087] Use struct sctp_sack_info instead [ 1661.116363][ T7879] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.117047][T21476] Bluetooth: hci2: command tx timeout [ 1661.254692][ T8101] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18245'. [ 1661.266130][ T7879] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.355121][ T7879] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.442595][ T7879] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.594483][ T8118] syzkaller0: entered promiscuous mode [ 1661.601819][ T8118] syzkaller0: entered allmulticast mode [ 1661.618962][ T8121] netlink: 'syz.2.18251': attribute type 1 has an invalid length. [ 1661.751964][ T8130] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18251'. [ 1662.667872][T29270] net_ratelimit: 197 callbacks suppressed [ 1662.667898][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.702084][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.731532][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.760568][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.804030][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.831813][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.858880][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.903220][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.930060][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1662.960696][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1663.197706][T21476] Bluetooth: hci2: command tx timeout [ 1664.241957][ T8121] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1664.412103][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18257'. [ 1664.457264][ T8145] : entered promiscuous mode [ 1664.468018][ T7879] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1664.510634][ T8143] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1664.521815][ T7879] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1664.534682][ T7879] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1664.561959][ T7879] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1664.669678][ T8163] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 1664.883009][ T7879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1664.964747][ T7879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1664.980301][ T8180] netlink: 'syz.3.18267': attribute type 6 has an invalid length. [ 1664.997443][T29264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1665.004671][T29264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1665.020100][ T8180] netlink: 'syz.3.18267': attribute type 6 has an invalid length. [ 1665.040200][T29264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1665.047595][T29264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1665.115265][ T8180] netlink: 164 bytes leftover after parsing attributes in process `syz.3.18267'. [ 1665.154213][ T7879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1665.442548][ T7879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1665.453972][ T8214] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 1665.545155][ T7879] veth0_vlan: entered promiscuous mode [ 1665.570483][ T7879] veth1_vlan: entered promiscuous mode [ 1665.626413][ T8222] veth0: entered promiscuous mode [ 1665.644990][ T8221] veth0: left promiscuous mode [ 1665.660964][ T7879] veth0_macvtap: entered promiscuous mode [ 1665.679701][ T7879] veth1_macvtap: entered promiscuous mode [ 1665.774935][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.822953][ T7879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1665.867503][T29270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.889275][T29270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.912448][T29270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.958125][T29270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.137766][ T8257] ip6tnl0: Caught tx_queue_len zero misconfig [ 1666.260954][T29270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.275481][ T8260] netlink: 'syz.4.18287': attribute type 2 has an invalid length. [ 1666.300974][T29270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.310479][ T8260] netlink: 'syz.4.18287': attribute type 2 has an invalid length. [ 1666.358619][T29270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.385237][T29270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.538818][ T8276] netlink: 'syz.1.18186': attribute type 10 has an invalid length. [ 1666.551159][ T8277] netlink: 'syz.0.18292': attribute type 8 has an invalid length. [ 1666.561129][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18292'. [ 1666.592386][ T8276] veth0_vlan: left promiscuous mode [ 1666.635243][ T8276] veth0_vlan: entered promiscuous mode [ 1666.684923][ T8276] team0: Device veth0_vlan failed to register rx_handler [ 1666.774281][ T8277] bond0: entered promiscuous mode [ 1666.783374][ T8277] bond_slave_0: entered promiscuous mode [ 1666.788365][ T8286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1666.792819][ T8277] bond_slave_1: entered promiscuous mode [ 1666.803658][ T8286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1666.814133][ T8286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1666.816583][ T8277] gretap0: entered promiscuous mode [ 1666.837820][ T8286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1666.845636][ T8286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1666.853662][ T8277] bond0: left promiscuous mode [ 1666.871752][ T8277] bond_slave_0: left promiscuous mode [ 1666.897108][ T8277] bond_slave_1: left promiscuous mode [ 1666.921476][ T8277] gretap0: left promiscuous mode [ 1666.998921][ T8284] wg1 speed is unknown, defaulting to 1000 [ 1667.006677][ T8284] lo speed is unknown, defaulting to 1000 [ 1667.155055][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18295'. [ 1667.230926][ T8300] netlink: 96 bytes leftover after parsing attributes in process `syz.2.18296'. [ 1667.276167][ T8296] bridge1: entered promiscuous mode [ 1667.310018][ T8303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18297'. [ 1667.319412][ T8296] bridge1: entered allmulticast mode [ 1667.488081][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18297'. [ 1667.677446][T29255] net_ratelimit: 153 callbacks suppressed [ 1667.677466][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1667.693852][T29255] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1667.724853][ T8320] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1667.731163][ T8320] syzkaller1: Linktype set failed because interface is up [ 1667.740521][ T8320] openvswitch: netlink: Flow actions attr not present in new flow. [ 1667.749614][ T3122] syzkaller1: tun_net_xmit 90 [ 1667.817916][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1667.819262][ T8284] chnl_net:caif_netlink_parms(): no params data found [ 1667.847371][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1667.876915][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1667.890206][ T8325] syzkaller1: entered promiscuous mode [ 1667.895879][ T8325] syzkaller1: entered allmulticast mode [ 1667.904724][T29281] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1667.923032][ T30] audit: type=1107 audit(1771776878.622:55): pid=8327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1667.927905][ T8326] netlink: 84 bytes leftover after parsing attributes in process `syz.3.18304'. [ 1667.937620][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1668.048272][ T8326] netlink: 84 bytes leftover after parsing attributes in process `syz.3.18304'. [ 1668.062643][ T8324] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18304'. [ 1668.073244][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1668.083970][ T8326] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1668.423766][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.438609][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.454065][ T8284] bridge_slave_0: entered allmulticast mode [ 1668.478895][ T8284] bridge_slave_0: entered promiscuous mode [ 1668.490060][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.498870][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.506416][ T8284] bridge_slave_1: entered allmulticast mode [ 1668.530214][ T8284] bridge_slave_1: entered promiscuous mode [ 1668.675641][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1668.709084][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1668.795504][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1668.825159][ T8284] team0: Port device team_slave_0 added [ 1668.865864][ T8284] team0: Port device team_slave_1 added [ 1668.867637][ T8286] Bluetooth: hci3: command tx timeout [ 1668.935719][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1668.943075][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1668.990878][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1669.017854][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1669.025691][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1669.061900][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1669.164874][ T8284] hsr_slave_0: entered promiscuous mode [ 1669.184077][ T8284] hsr_slave_1: entered promiscuous mode [ 1669.193033][ T8284] debugfs: 'hsr0' already exists in 'hsr' [ 1669.199653][ T8284] Cannot create hsr debugfs directory [ 1669.250899][ T8389] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 1670.081882][ T8400] netlink: 'syz.1.18324': attribute type 27 has an invalid length. [ 1670.149228][ T8406] sctp: [Deprecated]: syz.2.18326 (pid 8406) Use of int in max_burst socket option. [ 1670.149228][ T8406] Use struct sctp_assoc_value instead [ 1670.169415][ T8405] __nla_validate_parse: 2 callbacks suppressed [ 1670.169439][ T8405] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18325'. [ 1670.230625][ T8406] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 1670.333527][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18329'. [ 1670.389171][ T8413] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18329'. [ 1670.648532][ T8284] `: (slave netdevsim0): Releasing backup interface [ 1670.699541][ T8429] Unsupported ieee802154 address type: 0 [ 1670.718496][ T8429] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1670.737276][ T8429] netlink: 'syz.0.18333': attribute type 6 has an invalid length. [ 1670.780675][ T8432] netlink: 'syz.3.18335': attribute type 10 has an invalid length. [ 1670.938805][ T8440] netlink: 'syz.3.18337': attribute type 1 has an invalid length. [ 1670.949507][ T8286] Bluetooth: hci3: command tx timeout [ 1671.021944][ T8284] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1671.038630][ T8284] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1671.061361][ T8284] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1671.081857][ T8284] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1671.168953][ T8455] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18340'. [ 1671.227645][ T8455] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18340'. [ 1671.291255][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1671.313205][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1671.331030][T29269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.338344][T29269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1671.353869][ T8459] netlink: 'syz.3.18341': attribute type 10 has an invalid length. [ 1671.423089][ T8461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18342'. [ 1671.428561][T29269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.439514][T29269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1671.465363][ T8465] syzkaller0: entered promiscuous mode [ 1671.486022][ T8465] syzkaller0: entered allmulticast mode [ 1671.568938][ T8469] dvmrp0: left allmulticast mode [ 1671.920778][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1672.044338][ T8500] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18348'. [ 1672.687754][T29263] net_ratelimit: 159 callbacks suppressed [ 1672.687775][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1672.732610][ T8284] veth0_vlan: entered promiscuous mode [ 1672.768123][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1672.785934][ T8284] veth1_vlan: entered promiscuous mode [ 1672.792337][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1672.825584][ T8531] syzkaller1: entered promiscuous mode [ 1672.835387][ T8531] syzkaller1: entered allmulticast mode [ 1672.842924][T29269] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1672.877671][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1672.908259][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1672.948655][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1672.986950][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1672.996732][ T8542] bond1 (unregistering): Released all slaves [ 1673.008596][ T131] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.028399][ T8286] Bluetooth: hci3: command tx timeout [ 1673.060977][ T8284] veth0_macvtap: entered promiscuous mode [ 1673.080468][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.125689][ T8284] veth1_macvtap: entered promiscuous mode [ 1673.162783][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.214777][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.280216][ T8556] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1673.335192][T29263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.415843][T29263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.471924][ T8567] xt_hashlimit: size too large, truncated to 1048576 [ 1673.505316][T29263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.558767][T29263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.827882][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 1673.836175][ C1] lec:lec_tx_timeout: lec0 [ 1673.944355][T29263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.984635][T29263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.083818][T29263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.099906][T29263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.145728][ T8585] netlink: 'syz.0.18366': attribute type 1 has an invalid length. [ 1674.156149][ T8585] netlink: 'syz.0.18366': attribute type 2 has an invalid length. [ 1674.295839][ T8593] veth0: Caught tx_queue_len zero misconfig [ 1674.456567][ T8609] macvtap1: entered promiscuous mode [ 1674.480688][ T8609] macvtap1: entered allmulticast mode [ 1674.494014][ T8609] veth1_vlan: entered allmulticast mode [ 1674.583442][ T8622] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18373'. [ 1674.593837][ T8623] Bluetooth: MGMT ver 1.23 [ 1674.675099][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18377'. [ 1674.783235][ T8638] netlink: 'syz.4.18380': attribute type 1 has an invalid length. [ 1674.906484][ T8643] netlink: 'syz.4.18381': attribute type 23 has an invalid length. [ 1674.983695][ T8654] Bluetooth: MGMT ver 1.23 [ 1675.117445][ T8286] Bluetooth: hci3: command tx timeout [ 1675.366651][ T8668] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18388'. [ 1675.456166][ T8627] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1675.500430][ T8675] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1675.674332][ T8681] tipc: Enabling of bearer rejected, media not registered [ 1675.703000][ T8683] bond0: Caught tx_queue_len zero misconfig [ 1675.880146][ T8698] batadv1: entered allmulticast mode [ 1675.918892][ T8696] syzkaller0: entered promiscuous mode [ 1675.922993][ T8701] netlink: 7 bytes leftover after parsing attributes in process `syz.0.18398'. [ 1675.934017][ T8696] syzkaller0: entered allmulticast mode [ 1675.966824][ T8704] xt_bpf: check failed: parse error [ 1675.971673][ T8701] erspan0: entered promiscuous mode [ 1676.302230][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18409'. [ 1676.373514][ T8731] bridge0: entered promiscuous mode [ 1676.391070][ T8731] macsec1: entered promiscuous mode [ 1676.402851][ T8731] macsec1: entered allmulticast mode [ 1676.417786][ T8737] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1676.439360][ T8731] bridge0: entered allmulticast mode [ 1676.464016][ T8731] bridge0: port 3(macsec1) entered blocking state [ 1676.487783][ T8731] bridge0: port 3(macsec1) entered disabled state [ 1676.624013][ T8731] bridge0: left allmulticast mode [ 1676.637409][ T8731] bridge0: left promiscuous mode [ 1676.828556][ T8751] netlink: 'syz.1.18412': attribute type 8 has an invalid length. [ 1677.082219][ T8768] netlink: 94 bytes leftover after parsing attributes in process `syz.0.18419'. [ 1677.159452][ T8772] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1677.186267][ T8772] vlan0: entered allmulticast mode [ 1677.196353][ T8772] bond13: entered allmulticast mode [ 1677.220683][ T5897] IPVS: starting estimator thread 0... [ 1677.268493][ T8786] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18424'. [ 1677.307980][ T8783] IPVS: using max 33 ests per chain, 79200 per kthread [ 1677.314277][ T8788] netlink: 'syz.1.18425': attribute type 10 has an invalid length. [ 1677.371576][ T8788] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1677.532175][ T8803] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18430'. [ 1677.543629][ T8803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18430'. [ 1677.555729][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18430'. [ 1677.767687][T26611] net_ratelimit: 128 callbacks suppressed [ 1677.767707][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1677.812600][T26611] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1677.898404][ T8819] veth1_to_bond: entered allmulticast mode [ 1677.932502][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1677.944417][ T8813] NFSD: Failed to start, no listeners configured. [ 1677.997017][T29264] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.029453][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.057131][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.075208][ T8819] veth1_to_bond: left allmulticast mode [ 1678.081086][T29270] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.097238][T29264] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.125787][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.133031][ T8833] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 1678.178551][T26611] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.201524][ T8833] bond1 (unregistering): Released all slaves [ 1678.528562][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18443'. [ 1678.571288][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18441'. [ 1679.225236][T21476] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1679.241366][T21476] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1679.255419][T21476] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1679.269409][T21476] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1679.281064][T21476] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1679.386565][ T8886] netlink: 'syz.0.18451': attribute type 1 has an invalid length. [ 1679.514217][ T8886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1679.561412][ T8888] kthread_run failed with err -4 [ 1679.591323][ T8891] vlan2: entered promiscuous mode [ 1679.640682][ T8891] bond1: entered promiscuous mode [ 1679.646442][ T8891] vlan2: entered allmulticast mode [ 1679.654153][ T8891] bond1: entered allmulticast mode [ 1679.681613][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.711545][ T8881] wg1 speed is unknown, defaulting to 1000 [ 1679.942859][ T8881] lo speed is unknown, defaulting to 1000 [ 1680.004186][ T8926] netlink: 'syz.3.18460': attribute type 10 has an invalid length. [ 1680.058410][ T8921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1680.255524][ T8935] netlink: 'syz.1.18462': attribute type 1 has an invalid length. [ 1680.296235][ T8936] netlink: 'syz.1.18462': attribute type 1 has an invalid length. [ 1680.399096][ T8935] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1680.400494][ T8936] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1680.539677][ T8955] __nla_validate_parse: 5 callbacks suppressed [ 1680.539697][ T8955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18466'. [ 1680.728580][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18468'. [ 1680.770270][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18468'. [ 1680.925601][ T8981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18473'. [ 1681.074527][ T8986] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18475'. [ 1681.131390][ T8989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18474'. [ 1681.234184][ T8881] chnl_net:caif_netlink_parms(): no params data found [ 1681.349531][ T8286] Bluetooth: hci4: command tx timeout [ 1681.367380][ T9005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18480'. [ 1681.724028][ T9037] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18486'. [ 1681.739640][ T8881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1681.749319][ T8881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.760523][ T8881] bridge_slave_0: entered allmulticast mode [ 1681.779822][ T8881] bridge_slave_0: entered promiscuous mode [ 1681.787307][ T9038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18486'. [ 1681.788245][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18486'. [ 1681.809993][ T8881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1681.829258][ T8881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.836719][ T8881] bridge_slave_1: entered allmulticast mode [ 1681.855774][ T8881] bridge_slave_1: entered promiscuous mode [ 1681.874125][ T9037] xfrm1: entered promiscuous mode [ 1681.879758][ T9037] xfrm1: entered allmulticast mode [ 1681.983934][ T9046] netlink: 'syz.1.18490': attribute type 1 has an invalid length. [ 1681.995536][ T8881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1682.044536][ T8881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1682.201238][ T8881] team0: Port device team_slave_0 added [ 1682.232457][ T8881] team0: Port device team_slave_1 added [ 1682.458201][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1682.465272][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.522237][ T8881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1682.583524][ T9068] bond2: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1682.600085][ T8881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1682.608343][ T8881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1682.637902][ T8881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1682.725126][ T8881] hsr_slave_0: entered promiscuous mode [ 1682.738247][ T8881] hsr_slave_1: entered promiscuous mode [ 1682.744958][ T8881] debugfs: 'hsr0' already exists in 'hsr' [ 1682.751626][ T8881] Cannot create hsr debugfs directory [ 1682.781607][T29263] net_ratelimit: 148 callbacks suppressed [ 1682.781626][T29263] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1682.813966][T29264] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1682.847340][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1682.869065][ T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 1682.888733][T29264] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1682.908190][ T31] Not tainted syzkaller #0 [ 1682.927522][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1682.929754][ T9090] base_sock_release(ffff8880a5035c00) sk=ffff888081232000 [ 1682.945262][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1682.953898][ T31] task:kworker/1:0H state:D stack:26536 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1682.967622][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1682.998280][ T31] Workqueue: kblockd blk_mq_requeue_work [ 1683.012347][T26614] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.014588][ T31] Call Trace: [ 1683.034608][ T31] [ 1683.042523][ T31] __schedule+0x1585/0x5340 [ 1683.047514][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.061087][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1683.066589][ T31] ? __pfx___schedule+0x10/0x10 [ 1683.072301][ T31] ? schedule+0x90/0x360 [ 1683.077658][ T31] schedule+0x164/0x360 [ 1683.077875][T29255] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.081940][ T31] schedule_timeout+0x158/0x2c0 [ 1683.081970][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1683.101766][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1683.110054][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1683.116246][ T31] ? prepare_to_wait_event+0x436/0x480 [ 1683.119510][T29264] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.123166][ T31] nbd_queue_rq+0x857/0x1100 [ 1683.135280][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1683.142063][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1683.149477][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1683.155148][ T31] ? sbitmap_get+0x229/0x390 [ 1683.160076][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1683.166328][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1683.172793][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1683.182809][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1683.190854][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1683.198705][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 1683.204382][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 1683.210642][ T31] blk_mq_run_hw_queues+0x26c/0x3f0 [ 1683.216532][ T31] blk_mq_requeue_work+0x71c/0x780 [ 1683.223171][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 1683.230134][ T31] ? process_scheduled_works+0xa25/0x1830 [ 1683.236667][ T31] ? process_scheduled_works+0xa25/0x1830 [ 1683.244361][ T31] process_scheduled_works+0xb02/0x1830 [ 1683.250527][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1683.256915][ T31] ? assign_work+0x3d5/0x5e0 [ 1683.261817][ T31] worker_thread+0xa50/0xfc0 [ 1683.266654][ T31] kthread+0x388/0x470 [ 1683.271774][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1683.277821][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.282751][ T31] ret_from_fork+0x51e/0xb90 [ 1683.287940][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1683.293066][ T31] ? __switch_to+0xc7d/0x1450 [ 1683.298544][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.303439][ T31] ret_from_fork_asm+0x1a/0x30 [ 1683.308735][ T31] [ 1683.312124][ T31] [ 1683.312124][ T31] Showing all locks held in the system: [ 1683.343214][ T31] 3 locks held by ksoftirqd/0/15: [ 1683.353638][ T31] #0: ffff8880b863ade0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1683.364532][ T31] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 1683.374126][ T31] #2: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: __queue_work+0x1a1/0x1020 [ 1683.384105][ T31] 4 locks held by kworker/1:0H/25: [ 1683.390328][ T31] #0: ffff8880202e3148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 1683.402469][ T31] #1: ffffc900001f7c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 1683.417656][ T31] #2: ffff888035a60198 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 1683.428355][ T31] #3: ffff88806573a980 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 1683.437263][ T8286] Bluetooth: hci4: command tx timeout [ 1683.438678][ T31] 1 lock held by khungtaskd/31: [ 1683.451122][ T31] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1683.462028][ T31] 1 lock held by syslogd/5176: [ 1683.467544][ T31] 2 locks held by getty/5581: [ 1683.472358][ T31] #0: ffff888035ea30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1683.483744][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1683.495235][ T31] 1 lock held by udevd/31055: [ 1683.500340][ T31] #0: ffff888056483358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1683.512658][ T31] 8 locks held by syz-executor/8881: [ 1683.518579][ T31] #0: ffff888032cf0420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 1683.527965][ T31] #1: ffff8880b2580088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1683.539354][ T31] #2: ffff888028e8e5a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1683.550437][ T31] #3: ffffffff8f440508 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1683.560973][ T31] #4: ffff888031e440e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x860 [ 1683.572047][ T31] #5: ffff888046238250 (&devlink->lock_key#30){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1683.583274][ T31] #6: ffffffff8fbcb808 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xed/0x680 [ 1683.594476][ T31] #7: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1683.608817][ T31] [ 1683.611168][ T31] ============================================= [ 1683.611168][ T31] [ 1683.623951][ T8881] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1683.635635][ T31] NMI backtrace for cpu 1 [ 1683.635650][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1683.635662][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1683.635669][ T31] Call Trace: [ 1683.635675][ T31] [ 1683.635682][ T31] dump_stack_lvl+0xe8/0x150 [ 1683.635701][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1683.635715][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1683.635729][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1683.635743][ T31] sys_info+0x135/0x170 [ 1683.635753][ T31] watchdog+0xfd9/0x1030 [ 1683.635770][ T31] ? watchdog+0x21a/0x1030 [ 1683.635788][ T31] kthread+0x388/0x470 [ 1683.635798][ T31] ? __pfx_watchdog+0x10/0x10 [ 1683.635811][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.635820][ T31] ret_from_fork+0x51e/0xb90 [ 1683.635834][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1683.635846][ T31] ? __switch_to+0xc7d/0x1450 [ 1683.635858][ T31] ? __pfx_kthread+0x10/0x10 [ 1683.635868][ T31] ret_from_fork_asm+0x1a/0x30 [ 1683.635890][ T31] [ 1683.635894][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1683.758408][ C0] NMI backtrace for cpu 0 [ 1683.758426][ C0] CPU: 0 UID: 0 PID: 3122 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 1683.758445][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1683.758455][ C0] Workqueue: events_power_efficient nf_flow_offload_work_gc [ 1683.758480][ C0] RIP: 0010:check_preemption_disabled+0x1/0xe0 [ 1683.758498][ C0] Code: 20 a4 27 8c 48 c7 c6 60 a4 27 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 53 65 8b 05 57 73 6e 07 65 8b 0d 4c 73 6e 07 f7 c1 ff [ 1683.758512][ C0] RSP: 0018:ffffc9000dccf8c8 EFLAGS: 00000046 [ 1683.758524][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000046 [ 1683.758534][ C0] RDX: ffff8880310ddac0 RSI: ffffffff8e161ede RDI: ffffffff8c27a480 [ 1683.758545][ C0] RBP: 00000000ffffffff R08: ffff8880685d918b R09: 1ffff1100d0bb231 [ 1683.758556][ C0] R10: dffffc0000000000 R11: ffffed100d0bb232 R12: 0000000000000246 [ 1683.758567][ C0] R13: ffff8880310ddac0 R14: ffffffff8e7602e0 R15: 0000000000000002 [ 1683.758578][ C0] FS: 0000000000000000(0000) GS:ffff888125466000(0000) knlGS:0000000000000000 [ 1683.758597][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1683.758607][ C0] CR2: 00007f10b81e7c38 CR3: 000000007d190000 CR4: 00000000003526f0 [ 1683.758621][ C0] Call Trace: [ 1683.758628][ C0] [ 1683.758634][ C0] lock_is_held_type+0xdf/0x150 [ 1683.758658][ C0] rcu_read_lock_any_held+0x33/0x90 [ 1683.758680][ C0] __rhashtable_walk_find_next+0x1f3/0x9b0 [ 1683.758707][ C0] nf_flow_table_iterate+0xc7/0x1f0 [ 1683.758722][ C0] ? __pfx_nf_flow_offload_gc_step+0x10/0x10 [ 1683.758738][ C0] ? __pfx_nf_flow_table_iterate+0x10/0x10 [ 1683.758760][ C0] nf_flow_offload_work_gc+0x22/0x70 [ 1683.758775][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1683.758793][ C0] process_scheduled_works+0xb02/0x1830 [ 1683.758822][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1683.758842][ C0] ? assign_work+0x3d5/0x5e0 [ 1683.758861][ C0] worker_thread+0xa50/0xfc0 [ 1683.758890][ C0] kthread+0x388/0x470 [ 1683.758904][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1683.758921][ C0] ? __pfx_kthread+0x10/0x10 [ 1683.758935][ C0] ret_from_fork+0x51e/0xb90 [ 1683.758954][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1683.758971][ C0] ? __switch_to+0xc7d/0x1450 [ 1683.758988][ C0] ? __pfx_kthread+0x10/0x10 [ 1683.759003][ C0] ret_from_fork_asm+0x1a/0x30 [ 1683.759029][ C0] [ 1684.015043][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1684.021928][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1684.031250][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1684.041484][ T31] Call Trace: [ 1684.044790][ T31] [ 1684.047788][ T31] vpanic+0x56c/0xa60 [ 1684.051860][ T31] ? __pfx___schedule+0x10/0x10 [ 1684.056904][ T31] ? __pfx_vpanic+0x10/0x10 [ 1684.061827][ T31] ? __pfx_console_unlock+0x10/0x10 [ 1684.067996][ T31] panic+0xc5/0xd0 [ 1684.071816][ T31] ? __pfx_panic+0x10/0x10 [ 1684.076227][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1684.081938][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1684.088084][ T31] watchdog+0x1023/0x1030 [ 1684.092612][ T31] ? watchdog+0x21a/0x1030 [ 1684.097052][ T31] kthread+0x388/0x470 [ 1684.101133][ T31] ? __pfx_watchdog+0x10/0x10 [ 1684.105818][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.110408][ T31] ret_from_fork+0x51e/0xb90 [ 1684.115006][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1684.120337][ T31] ? __switch_to+0xc7d/0x1450 [ 1684.125111][ T31] ? __pfx_kthread+0x10/0x10 [ 1684.129705][ T31] ret_from_fork_asm+0x1a/0x30 [ 1684.134596][ T31] [ 1684.138061][ T31] Kernel Offset: disabled [ 1684.142579][ T31] Rebooting in 86400 seconds..