last executing test programs: 6.720528011s ago: executing program 3 (id=6208): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000007, 0x6, 0x86}, 0x69}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c0ff000000000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 6.416892146s ago: executing program 3 (id=6210): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x81) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}]}, 0x1c}}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x4c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r7) r9 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r9, 0x110, 0x3, &(0x7f0000000080), 0x4) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r10, 0x114, 0x6, 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r8, 0x11, 0x0, 0xffffffff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x44, r8, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x44000) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 6.162442984s ago: executing program 3 (id=6213): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x709d29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000057"], 0xfce) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0x4, 0x3}, {0x2, 0xc}}, [{0x8, 0xb, 0xbec}, {0x8, 0xb, 0x57a0}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x709d29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) (async) socket(0x400000000010, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000057"], 0xfce) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getchain={0x3c, 0x66, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0xb}, {0x4, 0x3}, {0x2, 0xc}}, [{0x8, 0xb, 0xbec}, {0x8, 0xb, 0x57a0}, {0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4005}, 0x80) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000006000000180900002020642500000000002320207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000600000069a0fcff0000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e16}, 0x94) (async) 5.529589585s ago: executing program 3 (id=6218): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) (async) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800e5ff0014060000000000000000000800100000000000"], 0x18}}, 0x0) sendto$packet(r4, &(0x7f0000000380)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r10) sendmsg$NLBL_CALIPSO_C_ADD(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r11, @ANYRES16=r11, @ANYBLOB="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"], 0x24}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r13, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000000180)={r14, 0x6}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000080)={r14, 0xb15}, 0x8) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 5.469536549s ago: executing program 3 (id=6219): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) socketpair(0x11, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000025c0)='ns/cgroup\x00') preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000500)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000408000000fedbdf251900000008005cc963775ac3d4032beb7cad0b945f33fcf9df69e48b4180ce4385940bd13d385dd05b5b4b44", @ANYRES32=0x0, @ANYBLOB="05001c005800000005001e0009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4049081}, 0x20040000) 5.276917521s ago: executing program 3 (id=6221): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) pwrite64(r0, &(0x7f0000000100)="a0b6ccb3f77e1d53204dbab9cab6daef4db0193063899af55010de419373a2a92482e9d361922be31b6648cfadc18a90e17699417379c26adc4d0d0bfc2f47faa858859619f3b655d37eefcb792b91d0bf3c814501a13caf3882741efe081ad5b021a87f7076c3dc6b8bceb7e62e", 0x6e, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x8044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x1c, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$NFT_BATCH(r1, &(0x7f0000002200)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000160a01040000000000000000020000070900010073797a310000000080030000180a01080000000000000000010000080900020073797a31000000007c01038008000240000000040800024000000080b80003801400010070696d7265673100000000000000000014000100776c616e3100000000000000000000001400010073797a5f74756e0000000000000000001400010065727370616e30000000000000000000140001006261746164765f736c6176655f30000014000100626f6e645f736c6176655f3000000000140001006970766c616e310000000000000000001400010076657468315f766c616e00000000000014000100626f6e645f736c6176655f31000000009000038014000100626174616476300000000000000000001400010074756e6c3000000000000000000000001400010070696d367265670000000000000000001400010070696d72656730000000000000000000140001006e6574706369300000000000000000001400010067656e657665300000000000000000001400010067656e657665300000000000000000000800014000000000080002400000000b080001400000000008000140000000000900010073797a31000000000c0005400000000000000005cc010380b800038014000100776732000000000000000000000000001400010076657468305f766972745f776966690014000100766c616e3100000000000000000000001400010076657468315f766972745f7769666900140001006c6f00000000000000000000000000001400010073797a6b616c6c6572310000000000001400010077673100000000000000000000000000140001006970766c616e300000000000000000001400010070696d726567000000000000fcff0000080002400000020040000380140001006970766c616e3100000000000000000014000100626f6e645f736c6176655f300000000014000100677265746170300000000000000000000800024000000002b80003801400010070696d7265673100000000000000000014000100766972745f752c497c30000000000000140001006272696467653000000000000000000014000100626f6e645f736c6176655f300000000014000100766c616e3000000000000000000000001400010076657468305f746f5f7465616d00000014000100677265300000000000000000000000001400010076657468315f6d6163767461700000001400010076657468305f746f5f7465616d00000008000240400000001c000000030a050000000000000000000c000006080007006e61740008070000060a0402000000000000000007000005fe00074099c0816ef15383e22c80d2f915e8e303865b789ce7fae0d6f54986fd3183c7d7cd54fef7ff18414828f306a540da82c78875181c02e5304f670ed02334968be1aa375e1c280c58102c4a9675bebce544a2cc1aae3c720a16b2254c10940347bd96fa67bb2ae63dff5ee4cb72ad6ef04e7cb989e404b8110b81cab520618071496038ea005664b0da103e70b60698a72f8fdc42d69da72d2e07d67695855e8c4d8e0f4cfb60b1d43e7808bd1ba68e5a8b6024362b394619823db89dcbc72a5564a569cf8d90b3598a1e31e1cd7a07e11cc7d7281ccba8cf5a02f7324a5b596fbf294b30757492fd6f5754bfe13cec9a2b737f9ec0253bac307862000008000a4000000002bc050480440001800a0001006c696d697400000034000280080004400000000008000340000000780c00024000000000000008000c000240000000000000000808000340000004012c03018008000100636d70002003028008000140000000130800014000000010200103804900010075d846b55b1e9203af8ab118d105b20a324c59decc7c6a2f55e496b5d2f4f6124b916a4cbd48791c3045fa5bfbe6f2d015e2cd4f88f7c392504d3d30771bf61f0c882ec239000000580001002a0d89b76972fbdecab767ad07f38980ec150c2b533e1b9c4874c29b3db2b242d3a7203407d81c73c8f59f475370c1e5c290005066a5a75e1ed4685ce3be934fb362a84365bd90c3f5500f36d340df2e0c5424081800028008000340000000040900020073797a32000000002400028008000180fffffffe08000180ffffffff080003400000000308000340000000043c00028008000180fffffffe08000180ffffffff080003400000000208000340000000030900020073797a32000000000900020073797a3100000000e40003803000028008000180fffffffd08000180fffffffe080003400000000208000340000000020900020073797a30000000003c000280080003400000000208000340000000040900020073797a300000000008000340000000040900020073797a300000000008000180ffffffff14000280080003400000000308000180ffffffff3800028008000180fffffffd08000180fffffffc08000340000000030900020073797a3000000000080003400000000408000340000000012800028008000180ffffffff08000180ffffffff08000180fffffffb0900020073797a31000000000801038001010100874d207c557e88977619a3a6c5ebd308274518125ee3d800c2a1088c51206f00ca25e5735a9f8d9cbddf507757dd736b740f6344de2d263c13c2cc6a8d2170f651f9c454893275151854d1d2453261d3df7f4fc04219189ef562afe93079fe134bc817ba726baa82f72885c4004a3746554ae8692dbc50f7f9cadc86efafd24295aff3bc5e3d4058f6c486083f897ce2525dcff228056c7e95391d0948f779c23f6519fa43798ea5b8943f1b118218c900c3fa4d8146e879c058d130bdb382266ca542874ac85254eb6b8280143be534b0c840a997aaf096035e64b57dc8dd4abdfe892c00700aac50f70d417d1c829145c273b39b2777a9f042311fef0a5194925e9bfe3db6bee398f6bc6e000000480201800a00010072616e676500000038020280e4010380ee000100025ec4039dfce39e372a12e9829390574bbb014a542c342e354e822ec764cdf1d0b30d6d57c2fad58ba09d1c0742d836b42172bbf013c048641a9c1a881a54d88a4f094a45b24b4dea3a47e0d4f17f211abe5a37d975f15b439f3ffdc33c5b7849021467cf85026ee497ff5183792637cd3e9b0e1147676235987077163d790490986fa62cd8f03f4c0914c10f238177c871b36596173db8e57d591c3dfc2d051354c55532356fc6146d1f573afa54f45997a1238ae6c3d8a8aca39a5af27b4d797a79f8802468e74360bf7bb2732579ae7a668f68351e79aa487c3409ab47410b80b66f7364696cb4e400008700010054e1c6c5936cab611a5f788079459aa7e057ed098e4687c166f230225e3dfa67482448e8bb94d93f04caff3b57ebd1ec8f93f9ac4fbf74672ef2b027f9d2166bd0462e4e6f480bb55e53998e77aadf278dd4377b0d8ae9f94e61a1ea3a056fd36022c623eeec783621f3618df8e65063fa1b81fb3f66c612ca436a65e23796fb06e6bf00100002800900020073797a3000000000560001005eda7bd489d32be96a3b6ac6ab79a5b1c477ff1d22a020e89310cf669b8f666716148047b6b7f9c92234f86f99b0954beedbf736bafd5ac26a40a428104551906cff10d672abea42528d1651b98dd1713d7f000008000240000000013800038033000100fbc3117cf803f8c988f4fa76c845942720370ae2f571727f4ba635b23016edbf9d00932949baee3251d0edf168f3fb00080001400000001208000140000000000900010073797a310000000008000940000000011c00058008000140000000180800014000000033080002400000000120000000120a01020000000000000000030000010c00064000000000000000011400000011"], 0xb0c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44010) r4 = socket(0x400000000010, 0x3, 0x4) socket$inet(0x2, 0x5, 0x8000) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0x7, 0x3, 0x9]}, &(0x7f0000000380)=0x44) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000540)=[@mss={0x2, 0x6}, @window={0x3, 0x401}, @mss={0x2, 0x5e}], 0x3) socket(0x1e, 0x4, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000400), r5) sendmsg$NLBL_MGMT_C_LISTDEF(r5, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110a28bd7009fedbdf250900000008000300", @ANYRES32=r8, @ANYBLOB="05000800010000000500070000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x48814) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fedbdf2514000000080001000300000008000100030000000c000600020000000200000008000300", @ANYRES32=r8, @ANYBLOB="c1ef9d339269d1e30cf8"], 0x38}}, 0x10) socket$unix(0x1, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.661607674s ago: executing program 0 (id=6248): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet6_udp(0xa, 0x2, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffc0900030073790900000000000900010073797a30006d29b8dc000a40000000042c000000080a01080000000000000000010000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) setsockopt$sock_int(r7, 0x1, 0x22, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "baa32ad2976d1307d6faf33ee3a49671"}}}]}, 0x48}}, 0x8804) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "baa32ad2976d1307d6faf33ee3a49671"}}}]}, 0x48}}, 0x8804) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = socket(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5, 0x6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002640)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x5, 0x6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r9, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000000040)=ANY=[@ANYBLOB="68fd7603ffff", @ANYRES16=r0, @ANYBLOB="01002dbd7000ffdbdf250a000000180001801400020077673100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4000000) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4cccb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0) 2.461334731s ago: executing program 0 (id=6251): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001e008d2a00000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000803028"], 0x30}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.262243858s ago: executing program 0 (id=6254): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x30, 0x110, 0x1, "f2c10c53bd736064b900"/25}], 0x30}, 0x404f444) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) 2.071675339s ago: executing program 1 (id=6257): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000100)=@ax25={{0x3, @netrom}, [@netrom, @null, @default, @rose, @bcast, @null, @default, @bcast]}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000240)=""/88, 0x58}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000680)=""/80, 0x50}], 0x4, &(0x7f0000000740)=""/4096, 0x1000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xcd}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0xb, 0x0, 0x0) r2 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000079108100000000000500000000000000950004000000000060a633a45c6314764f8f0d80197bcfaae5c754979187bfd9a21bb0d7209bb7a0807413d4926746aa34"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.055887106s ago: executing program 0 (id=6258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)="99cd8c906943e0b775c54c80feb5af1643dbd8def710f8fa57d7c5779fc04d803e0ae009c7", 0x25}, 0x1, 0x0, 0x0, 0x4090}, 0x40040c4) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000140)=0x1, 0x4) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r5 = socket(0xa, 0x80000, 0x1) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x18, &(0x7f0000000300)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @generic={0x5, 0x1, 0x6, 0x2, 0x8}, @jmp={0x5, 0x0, 0x2, 0x1, 0x3, 0x20, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x14}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}], &(0x7f0000000400)='GPL\x00', 0x881, 0x0, &(0x7f0000000480), 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000580)=[{0x5, 0x4, 0x3, 0xb}, {0x5, 0x4, 0xd, 0x8}, {0x3, 0x2, 0x9, 0x6}, {0x0, 0x3, 0x7, 0x5}, {0x5, 0x4, 0x8, 0x8}], 0x10, 0x3}, 0x94) ioctl$FICLONE(r7, 0x40049409, r1) write(r6, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1200030400000000000001000000280007800cb20a575ff279f5d720f399d48100018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r5, @ANYBLOB="0c00080001000080000000000c000200ff7f000000000000"], 0x54}}, 0x20000000) 2.002489336s ago: executing program 4 (id=6259): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x1, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, 0x0, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000040)=""/177, &(0x7f0000000140)=0xb1) 1.713897061s ago: executing program 4 (id=6262): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbfe, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x20000000) 1.513268188s ago: executing program 0 (id=6263): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 1.385756905s ago: executing program 2 (id=6264): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r4, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfc) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) accept4(r7, 0x0, 0x0, 0x80000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001e00010000000000000000000200000001000007000000000800010000000000080005"], 0x2c}, 0x1, 0x0, 0x0, 0x4008842}, 0x40000) 1.360222349s ago: executing program 4 (id=6265): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r2, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) 1.10192807s ago: executing program 4 (id=6266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r4, 0x3, 0x7}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="6fc510cb666d2722a77bc7bdb94aa41b5a", 0x11, 0x4080, &(0x7f0000000100)={0x11, 0x2, r5, 0x1, 0x9, 0x6, @link_local}, 0x14) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x2}, 0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x300, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.037410199s ago: executing program 1 (id=6267): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$kcm(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x117, 0x4}], 0x10}, 0x20000001) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r2, 0x0, 0x0, 0x800) (async) sendmsg$kcm(r3, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x10, 0x117, 0x4}], 0x10}, 0x20000001) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) 1.009458813s ago: executing program 2 (id=6268): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xfff1, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xfff2, 0xffff}, {0x1, 0xffe4}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x20044800) 717.15204ms ago: executing program 1 (id=6269): socket$key(0xf, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = getpid() write$cgroup_pid(r1, &(0x7f00000000c0)=r2, 0x12) 715.568037ms ago: executing program 2 (id=6270): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x6], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc850}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3) 625.842488ms ago: executing program 0 (id=6271): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b80)={0x6, 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000010000000000000000000097000100ffffffff950000000000000000"], &(0x7f0000001a40)='GPL\x00', 0x7}, 0x94) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c000cc004000202080003000300000007000200eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$can_raw(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/239, 0xef}, {&(0x7f0000000280)=""/70, 0x46}], 0x2}, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x55, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x24}, {0x7d, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x0, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x8}, {0x8000, 0x7fffffff, 0x3, 0x1}}}, @TCF_EM_IPSET={0x0, 0x2, 0x0, 0x0, {{0xb, 0x8, 0xfff0}, {0x1, 0x1, 0x3}}}, @TCF_EM_U32={0x0, 0x1, 0x0, 0x0, {{0x400, 0x3, 0x6}, {0xff, 0x2, 0x10001, 0x5}}}]}]}]}}]}, 0x70}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 528.453322ms ago: executing program 1 (id=6272): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000240)="9eb1d91a92dc7c9fff658bb539e2ffb332da22465422000000000000000000000000000035f34479552d0421ead10755e330878d612074b6c1e9059a8bcb234c833c4e7f52593f30e792485c691a4dbdcf33f3786c212efbb6c4a3b2e7b5e6d05a3884c8dd0185beb27c24b93c2706e27f023a6dc7be4d7e3bf9cd813dd1ca4854f6b8fa22a27a2ab8606510d0a4459f40bd31366a51c52ad9befd33214f19c5b819a83fc7703c2aff40614504832769c54dfcfa45886a", 0xb7}], 0x2}, 0x20008b88) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x3, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66, 0x0, 0x0, 0xfffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ffffdff}, @exit, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) 470.654658ms ago: executing program 2 (id=6273): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000080)={'bridge0\x00', 0x2000}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 355.155193ms ago: executing program 2 (id=6274): syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6002003800080000fe800000000000000000000000000000fe8000000000000000000000000000aa73000103000008"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0xffffffff00000000}, 0x38) socketpair(0xa, 0x1, 0x392897ff, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000040)={'syzkaller1\x00', @remote}) 300.322092ms ago: executing program 1 (id=6275): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @null}, [@default, @rose, @null, @netrom, @rose, @rose, @netrom, @default]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0xce0, 0x2, 0x2, 0xfffffff9, 0x6}, 0x14) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000200)=0x1) bind$ax25(r1, &(0x7f0000000240)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @null, @default, @default, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x1, 0x200, r5, 0x9, '\x00', 0x0, r4, 0x0, 0x4, 0x5, 0xe}, 0x50) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000340)={'bond_slave_0\x00', {0x2, 0x4e21, @loopback}}) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000380)) setsockopt$ax25_int(r6, 0x101, 0xc, &(0x7f00000003c0)=0xc0e, 0x4) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x4, 0x0, {0xa, 0x4e24, 0x4, @private0, 0x2}}}, 0x32) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000440)=0x1, 0x4) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000480)=0xf1d4, &(0x7f00000004c0)=0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000f, 0x4000010, r1, 0xd8cdc000) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000540), r4) sendmsg$SMC_PNETID_FLUSH(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x60, r8, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}]}, 0x60}}, 0x4008) r9 = accept4$tipc(r4, &(0x7f0000000680), &(0x7f00000006c0)=0x10, 0x80000) ioctl$AUTOFS_IOC_CATATONIC(r9, 0x9362, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000740)={'veth0_to_team\x00', &(0x7f0000000700)=@ethtool_sfeatures={0x3b, 0x6, [{0x1, 0xd980}, {0x3, 0x9}, {0x3, 0x5}, {0x5, 0xc}, {0x4b5, 0xc6e}, {0x3, 0x2}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r5) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r10, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, r11, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x5e}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1000000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x20002000}, 0x4001) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, &(0x7f0000000900), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, [0xff, 0xff000000, 0x0, 0xff000000], [0xff000000, 0xffffff00, 0xffffffff], 'tunl0\x00', 'batadv0\x00', {0x80}, {0xff}, 0x6c, 0x63, 0x3, 0x70}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0xf0, 0x110, 0x0, {}, [@common=@hbh={{0x48}, {0x200, 0x7, 0x0, [0x7, 0xb8b2, 0x7, 0x100, 0xb00, 0xff, 0xffff, 0xfffc, 0x0, 0xa7a, 0x84e9, 0x7, 0x1, 0x4, 0x5, 0x6], 0x5}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000cc0), r5) sendmsg$TIPC_NL_BEARER_DISABLE(r10, &(0x7f00000011c0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d00)={0x458, r12, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x120, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2f}]}]}, @TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a6b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28a0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xae9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec5000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3499}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x704}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @private0, 0x2}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x800}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "306d4975e7edfb9be1b44cee431d727eadc664a0a702899779039b3a78"}}]}, @TIPC_NLA_LINK={0x4}]}, 0x458}, 0x1, 0x0, 0x0, 0x44080}, 0x48000) 290.435908ms ago: executing program 4 (id=6276): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x8, 0x0, &(0x7f0000002c40)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x401}, 0x14}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) 89.712578ms ago: executing program 4 (id=6277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f5101004e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f0000001040)='cpu.pressure\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x400}) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x6b, 0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket(0x1e, 0x5, 0x0) socket(0x1, 0x1, 0x7) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2718, 0x0, &(0x7f0000000000)) setsockopt$inet6_int(r6, 0x29, 0xc8, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r3) socket(0x1e, 0x805, 0x0) sendmsg$tipc(r3, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) 83.753194ms ago: executing program 2 (id=6278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000180)={&(0x7f00000005c0)={0x1d, r4}, 0x10, &(0x7f0000000240)={&(0x7f00000003c0)=@can={{}, 0x41, 0x0, 0x4, 0x0, "5000040000008e56"}, 0x10}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)={0x2, 'batadv_slave_0\x00', {0x7}}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000001300)={0x0, 0x6e2}, &(0x7f0000001340)=0x8) (async, rerun: 64) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x2b, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x2, 0x2, 0x0, 0xc, 0x9, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x2, 0x6, 0x5, 0xb, 0xfffffffffffffff4, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11a}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x5, 0x57, &(0x7f00000007c0)=""/87, 0x41000, 0x1, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x1, 0x10, 0x7}, 0x10, 0x27372, r5, 0x0, &(0x7f00000008c0)=[r5, r5, r5, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) (rerun: 64) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000009c0)=r7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000006a00130129bd7000fedbdf250a000000000000000400090006faa4c1363c95a52dff2ca9394df3e6386e00cea8a612aabcc6a309233a913c381ded1edfe3d865cf22"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 0s ago: executing program 1 (id=6279): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010}, 0x18) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfe, {0x80, 0x10, 0x80, 0x4a, 0xfd, 0x4, 0xfe, 0x9, 0x300}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40100}, 0x41) r2 = accept(r1, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @multicast}}, &(0x7f0000000240)=0x80) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000280)=""/145, &(0x7f0000000340)=0x91) recvmsg$unix(r2, &(0x7f0000000840)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/82, 0x52}, {&(0x7f0000000480)=""/183, 0xb7}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f00000005c0)=""/98, 0x62}, {&(0x7f0000000640)=""/45, 0x2d}, {&(0x7f0000000680)=""/189, 0xbd}, {&(0x7f0000000740)=""/114, 0x72}], 0x7}, 0x2000) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xa4, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TUPLE_ORIG={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x24008051) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000d80)={{&(0x7f0000000a00)=[{0x7ff, 0x5, 0x8, {0x7, 0x8000000000000001}, 0x8, 0xc, 0x5}, {0x2c8df5a4, 0x8, 0x8, {0x0, 0x6}, 0x8, 0x8, 0x9}, {0xc, 0x40, 0x0, {0x400, 0xdc}, 0x1, 0x200, 0xba54}, {0x7, 0xff, 0xf8, {0x800, 0x1}, 0x5, 0x9, 0x16}, {0x8, 0x7, 0x3, {0x5, 0x5}, 0x6, 0x8000000000000001, 0x80000001}, {0xab7a, 0x3, 0xc, {0x6, 0x8000000000000001}, 0x5, 0x6, 0x9}], 0x6, 0x40, 0x7, 0x4}, {&(0x7f0000000b80)=[{0x7fffffff, 0x9}, {0x2, 0x2ec}, {0x800, 0x1}, {0x6, 0x1}], 0x4, 0x10, 0x3, 0x19}, {&(0x7f0000000bc0)=[0x4, 0xa00000000000, 0x81], 0x3, 0x8, 0xa7, 0x2}, {&(0x7f0000000c00)=[{0x8, 0xffff, 0x8, 0x51, 0x7}, {0xdb6, 0x9, 0xf3, 0xffe00000000, 0x9}, {0x3fffc0000000, 0x3ff, 0x43, 0xe, 0x800}, {0x4, 0x4, 0x4, 0x1, 0x7}, {0x4, 0x2, 0x9, 0x2, 0x8}, {0x8, 0x9, 0x7fffffffffffffff, 0x0, 0x7}, {0x3, 0x1, 0x1ff, 0x8, 0x100}, {0x1, 0xa, 0x4, 0x8000000000000001, 0x81}], 0x8, 0x28, 0x1, 0x51}, {&(0x7f0000000d40)=[0x2], 0x1, 0x8, 0x3c4, 0xfffffffffffffffa}}) recvmsg(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000e00)=""/148, 0x94}, {&(0x7f0000000ec0)=""/111, 0x6f}, {&(0x7f0000000f40)=""/121, 0x79}, {&(0x7f0000000fc0)=""/136, 0x88}, {&(0x7f0000001080)=""/183, 0xb7}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/6, 0x6}], 0x7, &(0x7f0000002200)}, 0x10121) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x40, 0x1, 0x9, 0x3, 0x0, 0x0, {0x6, 0x0, 0x5}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x9}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xf}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044001}, 0x20008001) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000023c0), r2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000002480)={'syztnl0\x00', &(0x7f0000002400)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0xe, 0x40, 0x4, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x1, 0xac, 0xda}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000002580)={'erspan0\x00', &(0x7f00000024c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x1ff, 0x8, {{0x21, 0x4, 0x0, 0x1b, 0x84, 0x64, 0x0, 0x19, 0x5e, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0x7, 0x94, [@empty]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x9d, 0x0, 0x7, [0x5, 0x5]}, @lsrr={0x83, 0x17, 0x7c, [@multicast2, @multicast1, @rand_addr=0x64010100, @multicast2, @remote]}, @timestamp_prespec={0x44, 0xc, 0x4b, 0x3, 0x9, [{@loopback, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0x23, 0x3, 0x3, [{@multicast1, 0x6}, {@multicast2, 0x10}, {@multicast2}]}, @timestamp={0x44, 0x18, 0xb8, 0x0, 0x1, [0x6, 0xf, 0x368, 0x3, 0x9]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000003c80)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003c40)={&(0x7f00000025c0)={0x1668, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_WOL_SOPASS={0xa0, 0x3, "33e8a7a899f7cacf1b36575a64aaa0347611943e162004ccf0fac5769b5a1c324dd0b1001b9670e7f49eab083e7b63cc9fa57173dcdbebad138a5a96dd0edf9c0a03779096a0ff85ddf8ef436f3549c1aa0f3652dc77d71507e9ca9b889cf52aaf4e7ef23113c525fbbc381770902964d9a272361847dcc0f87452335d6a0a5c7f150c68dbf4f2b35c7c3ce74123545d5ef332351db3f4c72973370a"}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @ETHTOOL_A_WOL_MODES={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "23c7b380f4166e658b70ac065f6ea266acdc8bbf6fa9f5b35c1c2fe4b7395ae0022ffc41904a36bce103222c9e21c128d61d44891e31088ceec253a1f45dcf0a2bc21ff1117f15e5173c5b40f54769388c7ff13a43f9c61af9e98f0fa47aef932680d79c5d1f4957e573ecc79555784f63a36bd40d7039af229f9fd02ad6"}, @ETHTOOL_A_BITSET_MASK={0xda, 0x5, "700102c0e3641c97585aa6c689ef6022e2171bba96017dd2f4355cb7a940d4c4d0e127c41f85f3521eca1b48c72cc6e1241c09a79ed8a84edb5892bcc5498a3236d1c67a4f763c5334e796af1abfadbb486e31106ba9ee841723d1253010692428423fe721a4d7fa13de1b92a147e8224b97575b439ea8e68116a529463c51d993ffe04ea825df1dc0dfeede01581f51c80d1dda9f8d4a094b8230bf53eb284b83f8ba9b4feaf3e2b1a2f7066eca96166eb776b1bb64acb2af637dc51b242b121354a21760199eeba8cc4d9d63b76850146b97d766f8"}, @ETHTOOL_A_BITSET_VALUE={0xc5, 0x4, "a2e3bc632cd64e569a59e5d21bf0c45478f0e9cf7a34e1cd3de630377c6a0c53dd800e9f44503ad872bc967b2d7e1ec5722ba18675049d35a88a0db58f222ac2fde04ac5cc834b91cb2b4093f3f9024cb26fb6701fed137594d0850ee88eb20fe77334045c88e9a94d0f4c842ac605a64720e06740166ed17dc607d2f4336c74a709031df19130db20a2fccafcee38d90ffbacf2c11d6def36a097080dd803174ed95e59b274fb30fdb6d5c02e5dd79d9d986faf439d5c6064b58eba12b3934b5b"}]}, @ETHTOOL_A_WOL_MODES={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6c, 0x4, "bd3f495a328bf5a7f230df64bef3b298d24f488620ed53da45feacba74d650659f09e67f19a51677722f5d851e8d90b87e424b706417385d6683d0234812ffbbc5d40d5a9d2da32c0d2289ab73ca3d9d0b76d1c7837432791ab0f0c3d06012ce583d92e37021092d"}]}, @ETHTOOL_A_WOL_MODES={0x10fc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "4987911cb2058beab57104cb02fdf95bb641ef1b8ebe939d457a5b3ae40de28c29cc8a0b13906844f9e981971b6361dd16b25348417496370b49ede0765b2ec90e7100f6506942d651359a5e602d9bfaf563072be6340c4bc6dd9d75f10058a6e11ae3bf7cd3e8e18c7429f2b6d32821cb4314bb8375bc1c9a09a605b018c11a9de728caa6800a17abd7a009c2a2a862ad0b08f989cfa62dd625bc56da8b8e657a6a9cb01dea3117010995edc576ede1eacd09109e719c59ef591cbdd17c44322cbc6a7ea977537e06aafeaa50986c214cc98468016a835e70b0931c4a3ef5946045c5792725c7bdd89566acef3f027d3f921a8ba0309061ab287c12c232d503ad079c341d8273653e4239b10758269aec01f0e2311d9c6350aece5bfda9acbafd9afe5248640de9389e602d56d5d2370419b55a8548723582df19b8148570b4ba96c1f28d92af6eaac8e0690df579f43b3a12866c5507787fdc4350ed82585df7d6aeccf86a809e17f11d3168ea03a55950d054df69e75e765dfa37db448538093e7818180b5e656aaa552b2f771e6761bdc8900bbcefdb9572de73fdf60e1d0ab70e25ea1bff824e78218752c9c3687475168e713b58214ea1a19efb9e7a0530c32b62c2136dcd57a52eddeb2e54e2d0c52b19c247d3b3e2bb38b9bc042cb77c8a0ae4dd1ed5ff2b4273fbd98a874fc7ec3b6d6b57052c7ccc48fe7f3e88889e2ce5f4d09fdd4bd58278e2b2cb19551c531e14a64cdff983cbd3f22f4aa497ff043a4e48b5eebfac63ad8a20d2b706572b3e2a5f6aeeb85d02dbfd38cda69abb794c2f7435393606e2f2e71152185424dca0efc4da70d70a6f276c420b7ec37bcd56c58bf83fbcea83a7464ee6de0e9fe6f13c8b8b07c519722c023f4a772d71e35be4e547aee147f7f4169b3c229beb5c87b98dae436aaf578acc865e402cd862b418f94e93411130d03ea198f1038112e3f559f766c65feced1288ab70a482583493625a1de4967793577124c04548447fafd87f3007d6feaadef5ac49f1caf890d29acc5f7e8b83c5fb5b6566dac2848494b4844cab24e8984e8668ef01ba639c59589d6f063612ba0d756c207255a73c84666df9cca5f2404a5ff6fe461187d2c88bfacbe5a38276238a9c6bf061836d3bb9cc135f703f7ff7c81666184c1da465502728c64ec3afcb3d3a4ae62cd504ec600596e45e83f5b519e755c65cc110be71383fae1a43212ec569a56bc46caf88e2285c8f6ab8dfa4f0faa0dba99d393aa098753f6479a082d711827c47273de02d577d31c060b0099b0cf1dd32ac4f144c3c1ded328fc098c1ff527b67ebe8216d00c7121d5480bdc1f9f5e8d92fdedb60da957eb87d1d56fd8c50caf553ad14fd4ab8934190af6e9cf75cc984c05d97ba37e59ab22c29da551314aaaf92889c8e8aa8f5f069f7c3f169827091d1aa6eafb4069b24466feb1849d16477d1f20e94b0bebda7d7b0b5acf07250368109ff97d33a5172d3cf2c79b3d9ce0b3da1950f5eaeaea1dc3b3327b654e77b6b684b5a8ecb3fa1e43a58824f662d04888a10bd5553a49396c22e09c5c3e91212c9d58c3d516c67d765a780323d72197ad5b70a5131c27aed3551796901a56ffebaf83dd1e808f217420076a700f707e7c899a48f51d2424077d94f7eac3df69356b216668d8413b347c25bb36016b9d39c13eebc14275c5afc03a33fc3ce48bdb0741aadbdb196c49bcea3a00895cfcb6b6a67679faef1e4805ca075b9c1ae5038925cac2bff8b36a64aabbe9347250c7aea45fea194f23cf8af399540ed0d63ab82ea21cbb925c1a8985be26d038274c70465167a66871259f89688ee53bdac655568b19554353b2f21d96c35ba95b530e27ec7db114f1db2c4d9c2a5a4c69c0f3b616fdd393267d796988e90176cff001dd0a73af0273a32c0c171512091a1e1e3ad2c5b89b64da4379b2a3819904f963042850af65ea721c59e7e784ef9ec4260b2d637d545f011c0ede45a6229dd3a73c450305847720f0a16ddbf4d15ac4d18c0cd569f96f10bb4149a64d812fa7fb7b8ad4bec07096861aab179bcd7ca910d4c2d6b2e6b7e89c16c49aa873af845939d763d276a75698bc8447bb13209050c03dca703289266586e23f100e9eb3165eadaddec5f3c4042569c9bc5f47420c72762ebd424b3d5baaf8b11a7d8f5851983b134e80ea57e6a9251cb4733615027defb9432e4a4685684e652e3a76ac0629f2045d7e5e4a9cc183635ba7bf24ceb1964628d3e78f808d8ed6d54364f389dc50964cea3292ac9001bff21e9176eafd1d6425e3697254b0a92d6c9f283af76946cea0261670350270d7b6f9a9a4f2d037cd67cca2dd39a78784d848b9a8152bf6084d8b18024387642ccd5ce92289502908fd23c81cb915a7d0ac4d5a0bc0a6e1471e936581f147ad78377eadccf0cf40919b2c36db1e994e7239336ac829c5e7df0e61ca1cf022a6eee1a86f4f08364857e303fac75e032c93b8399fba2aa9b54afea449f6bb6d61a60e793409e48cc775ef19fa7fe9bf6b6b2559990880e843c8a482e20b678f972595a65886a9fc64062caada974220a9ae69b139eccb78f7ea98616640109cb3da80034dffd1c0fca1fd00e8c2e558aac7e5bc6f5dd92e9baf854ca3728319e19da7ab8e2d222bf91c38a8f4cc286ac6d1f8196b01bd4c54b3dc9718f8fbbd3f8e6937557d8172729c11f3e9188ddbd5dc71024cb7ccdf5df8e269a7df2ac5d1d1c13209ad6e2c19c99b63f8917bcc7065938d5ceaff83c3c80b60c6f428c03ac9e9b65b7836937c99e2837da90ba3fb3f014c6800c1292fe00775ae4324f680c351d7f790d3472955235d72d61bde684d017f7c168b5d395ddc6a24fb78cbdf217502fe6146377f1f445db4f547f513bf273e213f756f5176366fb0809a84c6f7389202b9ed43cf06af6c6b7e223c1a3fa9452ab1c08150368cd4016353c66864c19a518abcf933782d2187dbd6f2cbd3e91ec6645e7f6ecb77f0c4ece85f1267172d0e7bc04f5d58f1d079ff1d7bdafc1b2703dfb55d3f47ad1300eb754d778b452e3e6d8facf5a7e226ed9e613a126dc8dfe36b978376d01a603e85da113f218420271b79632576ccc9e9285ca9aca71536358389cec266b3de06a5317d8c628424f437d81cf7e9bb74e31ba4d1fda75901f152d18d621cc008f3a2ab8c7ba228baf16ae108f697bcba52e7fabc8b590c1b800cbcc94f76e04b6fb66d8ffb25a9eaa20566a4662671a486de11109c8b7ecf0ebf18278e9db2a9efa64cf57d4b2dd50b21feb600eca27d3acf19d907003aa36a2c8fd522cd6879796b90d91b0bd8188432e818d9433a879b6f76705a209e51547c347234321c6718334948a8da5d1d28bae115f55de57270be9c43ca47b0b0358f54041801dbd3ebe18eb4a160a263bdbdcc29636be277ba430c2eebe13c7f1af9d687879e195876fe2b2514a27116dfb52c943573e0f33323de84d914edf38e004a0512aac3704c7c424e474452a35357af82db0b1fa89a2f0ff84f748bff36b1743cc0d480c47dded8d46056debe7f82c554197410a911817e8168fca47562ce4a3ef1d8f154897dbdcc8e5c9b15b8ee38d692eaeae8dcdb82ddf59eb2f6d591993a7c71974898bfae5bea7641ca47455284c171112042fb5a38248e9795e5dc4b1ea6086250c06fc5aa9c68e822344d63b93a462aeb4f954a09161c8b542f1f901166b5bd6f83043b45a1cf338cc29ab3b381788fc15c60385cf7d0087e5c9e1a429c3bbd95f30b43634af2e9c36a12d3230ab76e47520e1da8f45aa5dd157e3f2c6ff04ff3eb0e197483ad8b8e09c7e319ffb4bf91344df0f6f8fdb1477b2e349b5fad74a5d01b72e0ebf041ec6f5e5fa76e048b3d7f59f81d4a527b567318b4eeca782e10940f6c87739492ba5cc65e79e4b2fb6e52df18fb422926c21a17164c2433e44f2efb92bda2fd2cdb90dc216fa5cea2ea8ce6275a73a382c09942ad0b4d46b8e18e1e490f3079b3a73ebdae911427e68a543d81abf34388332d18c2b4a1917a04c2fe77c5da4d398900c6e531a652b2b538bb1c40f3a874683ee116a3201a818aa1ad15353ec0072d5995c3f647e85a344d9424d7c1109e424bdac2424134127f779955b5a825a513904b542b2f3ea8f8551cd44a73759643eff9e7f5e07320d7a2e2d738a4cc633a000d97087f9a87db53518e7395220ed00a4e3a275c1c1bd7d47d8699c1461ad9f26c4439e9451fe5647c6f3d38acb0777bc35267a939d8672f0e0e998decb639144f32285aacffd863902e5868b013adb4334de607fe0b625c8df43d9db33ff67746ab4bc0052717730d707bd290e0aadbdae1341a794eef56cf247eaec646d62848c588065cff43109e068873cc78fa58b2fa7f65a4ec54693d11e1f2c1f1f7c5e27cec38b24a9b96417fe0c28ec2ac574b05d70aa7a74c32e687aa9d8ebe3d4677c7a99e1b036e56247b0ad3e1b6eccee2c03077ef20e2f3fbf01f4e02eae5879e6f93b36264656ac1d18a344fcb8aefeb69fa23918f79581ab760a35ba7da9143a3124c1b5e706cecfbfd5520209259a02efdce2d0a0aef8e973042c8bec17acdf1cbafebdd78381cca8e69d9c467781caed065a6db02e0a7efba3012602a9a5ee66d2f07712a753ca6f2f433b9dbb7437b92289aa0dae68d04b205f44e2d75a75d4d9ab78f3fb05d74fd3b4efabb24bbd20ae934bb0732e5fe6c7c147d5ff93b724f3895a6ce494eec6ec11a2cc9fedd378000247d83528d158a2d1676d5b0b72cdf2261034f238228541b29940c1edc3e91102cf17997290f22ddef6a537878aabba5bd8234226a410b4e105f577ff37304f0470c917c9f33bb848798f59a7d73e4585e7985207597e352d646080e5a5301253d772753e297abd76dd8cc51c51d105ce656c824745bbb1927b3e6bba7f6c33cdda5f01d82222abd6c4d7a281da666e6186147af14566840e11afaac3d10430fc25b55119dc272b41eed54b2dc37de1f1e9f202fb4f2533fd66650147254d6e05fef241d5c654bcf576dc9d94e5beb3ca075f42c74f0a9e404c4486bafcea959b68f63bd36e746334628fd1768e5cb40091a2f73a22327092c9bf9135b932b89110cc5cc47e86a5b875331192105823cf00ce12380d57e3a30b43b18fe9d34cd3dc36fdd27bfb6174b200b42ba180ea64744747707a4d1b3ce9a363e69bcb524e49cd8f356d8efd194f67790357b8951ff9a1d2f8327b777fd71e1a894ece98934a2d2b232678ab544ce1bfa7b468bb36fc90d78d3d36a3a9a0a200757ac27b7f43289bebc1ef939d7550a5e835184ee403bfc24988cf60c74491c6cf84e1e56070b5533af23a47b3bc6a2890bc0c3a56427c626e317f6b27f99dd302cc66b6fae87f74ae725a5bee7a0f793b79490e24ec05c110959ba6bfff9c769f84c1a1836bb5582c3a5337292d63f166d7b7e85272ec77077b5411007bda119c6495b621b1bfac7535c63397957264809c8b2230a4b8202634adc9e05530a8484b33e2cddcaf36e3842db72785e39d2663c27fc5c7d73bd5214eb05120644c724b50133614e875a656420f6312e8361a0a8f54acba2d627efc5aa0a0e6ee554c7b57bbddf82ecaa350d54cdfec33298d5641f4a9c83d654da9672a44940dce8390c66b8b4e9503687f6a14994ed82a8b20341d53a3864f3ffc76d19892ec4fdd18841dbead1b89b5854118d9569e389e0dc966ccf9c2bdacb82767ab143c4fcec0ce5f12c9b8ba8be9eef648b4bf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf0, 0x4, "d62ce6c9f9a8ad16e984eddde43240726b96a11d5106f2222798e6a79e92bf6248d8d726c26a07b30e08c405542fa695ffd5c607d4194587a014b3bbfc9b69c39afc96ba89ce0a902022e58de77bf1a340bdf3c48d06fffdea2d1f7685ed226e036c0c9d9a11f85de8bc02abaa49858312e0f2dbdace0050a4d80c2298d8c7d5d822a41ef04cc321657916f2e004a11216d4f78165a59f26bcab0b67d7fb347958229dc21360a315d1e0c510e0490adcdd45493970037b2adfd295067eb59aa7fd3db1bec5567282672132bbbdcef99020000bf0a695aea416607f13bc30fdc0f0f87127866ca65db1fa24e6"}]}, @ETHTOOL_A_WOL_MODES={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x140000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x29d}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ' ^[)-}(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7800}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x500}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\&$\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '+^D#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '$*@:)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'm^[@!,/{#\x00'}]}]}]}]}, 0x1668}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000003e00)={0x1, 0x2, 0x1000, 0xd0, &(0x7f0000003cc0)="7cbb6824c84ab3703d7fbe3d3cf5125b3e0706a6b88b59c8f53cb7a9be61cd38838ab6ebf8e72fa73370edc712a5f356f172826f73036ef9a2697dbc6cab8aa4b49bb7878e05ad0671e0fdb9e35a2026dc71ee81dafc93bec7125bd39d24f7058dc80177c66646bf164dd813195f50d1d238e2cff589b6faa1ce05dac8d4eb73ef5458ee4e00121f6f924001590e1d267d4eadd06a039c59e87cc53f3db1f82e7d5ddb0fa712200ecd433f2183ffe8a683c0e089803b2e3391aef283db91cbeaae5e548577297818969807d0f40a11c0", 0xb, 0x0, &(0x7f0000003dc0)="3e8bbadc4b863170b5f625"}) r6 = socket(0x22, 0x80000, 0x8000) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000003f40)={&(0x7f0000003e80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x8881) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xd, 0x20010, r0, 0x3848d000) r7 = socket$isdn_base(0x22, 0x3, 0x0) sendto(r7, &(0x7f0000003f80)="c4414c1acc95a8f4b9c4ca32fa681018e5f78a8fcabe69515a434e037c6e7e82ab465acbb2d9be9877e2224b5a9a9876ecf524e3d236dec74090e90561c8dfffedb67686ed1996e6dab549c624921bedd7f4f42aebf7104c597f72a77a86bd16ea1be62b3e06b09932126be923c133148cea9f079d2d2b7f3403397b79207e23bf3d7e", 0x83, 0x4000000, &(0x7f0000004040)=@isdn={0x22, 0x5d, 0x6, 0x5, 0x4}, 0x80) sendmsg$nl_crypto(r2, &(0x7f0000004240)={&(0x7f00000040c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004200)={&(0x7f0000004100)=@del={0xf0, 0x11, 0x2, 0x70bd25, 0x25dfdbfc, {{'ccm(serpent)\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0x800}, {0x8, 0x1, 0x3}]}, 0xf0}}, 0x24000040) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000004280)={0x0, 0x1d, "cf6c70c23a4008e6d68fa55e1c35dca6af6c7c5f893df5e87e919d03b5"}, &(0x7f00000042c0)=0x25) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000004300)={r8, 0x3ff}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000004340)={r2, 0xfffffffffffffffc, 0xb, 0x1}) openat$cgroup_pressure(r9, &(0x7f0000004380)='memory.pressure\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000005}, 0x801) sendmsg$inet(r1, &(0x7f0000005cc0)={&(0x7f00000044c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000005b80)=[{&(0x7f0000004500)="538707289aed117c77bb07b0e07adca2df8ee28677532d11ceb18eea156a76ffd3cabed5082e65936c6e2aebbe7aa7fba659e727929c5cb3fa5c9d5866d2d0cc46a2533f56fdfd0e590715b53df84d2d77e04008a598f5328daf6ba7b155ff87ff52f72ab50f0edc7e46518bb29b64405315a85b443042c263ab08f2df722d2369ff157ca9a1bf2b84ddbb43def31e4064dc236a885552dcb48b9f11648667ba16a2e33d64730bef3ce27f0a4f2aee047b9053da1aeca3f93144bf4ba658b7cd98e58d788ec9367da324de78f6db1d060a209bc95d6857fcc4a5c210a73318c6e6313db773f0747ac258f7ac7b", 0xed}, {&(0x7f0000004600)="067357b50c01cc54e715912e383c5b3d63ae6f7aaaad53488035f891dc49217c94a70784b0477bdc0d7b107ded872e91e381e64ec0b854729d4e48f0b2d2979261d16d980e5ccdcd87a941d1a0f8884bc2d2e1dc9eb52c785c5c90db5823e270ab6ef568df6af5d10e5efbd9e7c442bb4b7019b28936bc0fab963d07232c5e56579a4642c37d6d96bab197177fdc98101cfca872fc599ccfb9eb2f61eab7fd4289c3922af2479268db46b0aeb815b7dace34e1c500aa97d87b5b7e54dee53578d8e50f53009fb313d6127124696c5fcbaa2afdd039a42a99e1b0d65d4f5b505376d2612b561b32339b643d8f4a1c74638181f02c5106227b8cbd2350edd27f", 0xff}, {&(0x7f0000004700)="3b6c7460b0e77b4bfcda40b43c0f9448166237bbd8777bbccff4c122030aed13fca9c722efaf47f93e1d375d6729817729ba92e6e68e84304b4fa1898367be4e9b5650930025ab34e0a161869a04387dac5cfa7a20222ba155938cd6be0990bd488bf66bbd40f2ca7a9c7e501135f8b2968f56f0e76c8c160edb53c46621492ef69005b6478bc0398052719a2b3220156f4f712811da04e59d569127d83f6904243b0f590c962b57439534ba8343e5dd03e827ef55ec6ff1fbeea706432eba0f3d875ef6dd2487e60230a9dd6d34cad010c4", 0xd2}, {&(0x7f0000004800)="315a279e23c0cdadb3e1528642007c668e45eaa3b5cf7c7fb9538c4e0bcd1546b71057a81c83685cd93fa5eb7881a3e2d7072bce87d7558d969f230fa0e07f50eccafa564b052fb8b8a0e822314fdbb50abb3b07764d78ef9cef7a8b8b73fd9f93d3257234f95463724a1d408622eae3ab334641f382ba4f6998fb05", 0x7c}, {&(0x7f0000004880)="0dc37da2e05b15b986a0779033b95dc6cf0837bdd08ed0e81421b80037f2384ab43e75eb5b56e69fcda6dcff3746d6d1cdf4e89c93fb6381554aa2307cb7495a29e4da09293324092c8d048dad7eab3ff5988446b63d4f1a739a114be1c3f13bd169f3bc329cb9162b2fb1da45e2531dc0644a6bcae3b2eac18e9fd3c1c6bd1b0588bac4ed265c0733c4cf1112d341d1a436e3f23f1e0058ddcaaf89c5839b9d4c2079754c8d6dccbf087de5b741535f7e22fdc10661313a422b0d206bec23197b5d32857f", 0xc5}, {&(0x7f0000004980)="cd657bae770f40939326ff3b", 0xc}, {&(0x7f00000049c0)="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", 0x1000}, {&(0x7f00000059c0)="ea5757f1d357079221806a64086edd17447baaaf57c40551d21b83b8e5647ec4d38acd50cd80e585bea7480917b2b9f6c6baa6f2427dddf583b78c31f21739e2f716062c2b03d739e61574b0a622ad8f0c5870d856567e07ef08ca5ddf35d9e44a7464c41182ad7bd65b49765c593285cc97ebc078a22ce6ba69bce0c828444cc65d85bc0aef409e261b525047de90a2555401c76d0ad4fbd0fe3845ef5c6c7215f8c910a551592a8df15c25e44b9c95b7a1525ca7e8939fa03c22a1d82d5282a69037faffb4dc119495640444ac0f8c7d99ce5b67d1a152f48318d81e2979fe8cf040e834ddb5134b1df4fdbe8d", 0xee}, {&(0x7f0000005ac0)="e2e88a52cbbb88fd300b121ebe7072f39825eb67573b134fc70a3d7a6c9ac0b323af94e7e5b409443b84c862df97fe59903ba85bc0e22b1ae58ccbc0b0533b3c4f58c5a8efbb2915e45267bf9b6c9f278bd14dc4cf65578e467d82b0d5415395737bfc5fb744ee191fada86a81125e3747a03390dea848ecebe84b5d4a2e57e9e89a31b4a9aef1ed20844c1aa765136d80bd169ab3739dc200f7320a62bc5b24f3", 0xa1}], 0x9, &(0x7f0000005c40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x50}, 0x4000) r10 = getpid() write$cgroup_pid(r9, &(0x7f0000005d00)=r10, 0x12) kernel console output (not intermixed with test programs): 4555': attribute type 32 has an invalid length. [ 562.078413][T22977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4555'. [ 562.128459][T22979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4554'. [ 562.140033][T22977] bond6: option coupled_control: invalid value (192) [ 562.165336][T22977] bond6 (unregistering): Released all slaves [ 562.255769][T22979] 0·: left promiscuous mode [ 562.269845][T22979] hsr0 (unregistering): left allmulticast mode [ 562.531164][T22999] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4558'. [ 562.595122][T23002] netlink: 'syz.4.4558': attribute type 1 has an invalid length. [ 562.607841][T23003] netlink: 288 bytes leftover after parsing attributes in process `syz.3.4559'. [ 562.656719][T22992] syzkaller0: entered promiscuous mode [ 562.662470][T22992] syzkaller0: entered allmulticast mode [ 562.776903][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 562.788601][T23009] bond6: (slave geneve2): making interface the new active one [ 562.815634][T23009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.826238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.873373][T23009] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 565.406674][ T1082] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 565.554525][ T1082] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 565.598470][ T1082] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 565.681896][T23049] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4567'. [ 565.728573][ T1082] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 565.742603][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 565.762330][T23045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4567'. [ 566.189020][T23058] syzkaller0: entered promiscuous mode [ 566.207743][T23058] syzkaller0: entered allmulticast mode [ 566.208229][T23077] netlink: 'syz.4.4575': attribute type 1 has an invalid length. [ 566.222949][T23077] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4575'. [ 566.392011][T23081] syzkaller0: entered promiscuous mode [ 566.399466][T23081] syzkaller0: entered allmulticast mode [ 566.584526][T23090] netlink: 'syz.4.4579': attribute type 1 has an invalid length. [ 566.594840][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.603174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.612373][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.620904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.702758][T23090] 8021q: adding VLAN 0 to HW filter on device bond7 [ 566.750054][T23094] bond7: (slave gretap3): making interface the new active one [ 566.790405][T23094] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 566.894000][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 566.902975][ C0] lec:lec_tx_timeout: lec0 [ 566.908142][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 567.275153][T23122] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4588'. [ 567.437018][T23114] syzkaller0: entered promiscuous mode [ 567.469488][T23114] syzkaller0: entered allmulticast mode [ 567.494436][T23132] syzkaller0: entered promiscuous mode [ 567.523329][T23132] syzkaller0: entered allmulticast mode [ 567.558248][T23119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4587'. [ 567.595932][T23137] syzkaller1: entered promiscuous mode [ 567.621522][T23137] syzkaller1: entered allmulticast mode [ 567.672553][T23144] netlink: 4244 bytes leftover after parsing attributes in process `syz.1.4591'. [ 568.009141][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4595'. [ 568.018409][T23156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4595'. [ 568.027878][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4595'. [ 570.134831][T23157] lo: entered promiscuous mode [ 570.142556][T23157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.189483][T23156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4595'. [ 570.201527][ T3573] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.218437][ T3573] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.229533][T23156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4595'. [ 570.268064][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4595'. [ 570.359683][ T3573] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.378238][T23164] sctp: [Deprecated]: syz.1.4598 (pid 23164) Use of int in maxseg socket option. [ 570.378238][T23164] Use struct sctp_assoc_value instead [ 570.394886][ T3573] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.031626][T23194] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4605'. [ 571.405806][T23196] syzkaller0: entered promiscuous mode [ 571.423373][T23196] syzkaller0: entered allmulticast mode [ 571.619613][T23218] netlink: 'syz.3.4613': attribute type 21 has an invalid length. [ 571.682615][T23224] netlink: 'syz.3.4613': attribute type 21 has an invalid length. [ 571.737882][T23227] delete_channel: no stack [ 571.934483][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 571.943464][ C0] lec:lec_tx_timeout: lec0 [ 571.948767][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 574.337376][T23257] __nla_validate_parse: 1 callbacks suppressed [ 574.337393][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4622'. [ 574.355181][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4620'. [ 574.368560][T23261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4620'. [ 574.407786][T23260] xt_TPROXY: Can be used only with -p tcp or -p udp [ 574.518303][T23265] ip_tunnel: non-ECT from 10.1.1.1 with TOS=0x3 [ 574.645974][T23263] geneve2: entered promiscuous mode [ 574.662912][T23263] geneve2: entered allmulticast mode [ 574.687547][ T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 574.706025][ T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 574.748029][T23272] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 574.789261][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 574.830803][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 574.991408][T23281] : entered promiscuous mode [ 575.036339][T23285] block nbd0: server does not support multiple connections per device. [ 575.056779][T23285] block nbd0: shutting down sockets [ 575.212511][T23293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4634'. [ 575.281220][T23297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4636'. [ 575.528725][T23307] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4638'. [ 575.661266][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4638'. [ 576.195891][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.204319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.228025][T23338] delete_channel: no stack [ 576.428855][T23344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4650'. [ 576.458896][T23344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4650'. [ 576.469067][T23349] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4653'. [ 576.538601][T23356] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 577.232971][T23398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.442083][T23405] vcan0: tx address claim with dest, not broadcast [ 577.515375][T23403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.534546][T23410] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 577.565845][T23408] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 577.851053][T23415] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 578.125338][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6170 ms [ 578.129046][T23439] netlink: 'syz.0.4681': attribute type 1 has an invalid length. [ 578.134260][ C0] lec:lec_tx_timeout: lec0 [ 578.147724][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 578.223406][T23439] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 578.249211][T23439] syzkaller1: linktype set to 823 [ 578.715017][T23460] netlink: 'syz.0.4687': attribute type 11 has an invalid length. [ 579.167262][ T3573] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.186570][ T3573] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.194726][ T5967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.219420][T23481] tipc: Enabling of bearer rejected, failed to enable media [ 579.303866][ T5967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.491791][T23493] team0: Cannot enslave team device to itself [ 579.738064][T23506] __nla_validate_parse: 11 callbacks suppressed [ 579.738084][T23506] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4700'. [ 579.784219][ T5967] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.386978][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4708'. [ 580.406001][T23531] tipc: Enabling of bearer rejected, already enabled [ 580.412653][T23533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4708'. [ 580.497285][T23538] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4710'. [ 580.558863][T23538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4710'. [ 581.006357][T23564] xt_hashlimit: overflow, rate too high: 0 [ 581.341001][T23586] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.342306][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4724'. [ 581.348285][T23586] IPv6: NLM_F_CREATE should be set when creating new route [ 581.364394][T23586] IPv6: NLM_F_CREATE should be set when creating new route [ 581.434157][T23587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 581.497344][T23598] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 581.524644][T23593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4728'. [ 581.545486][T23593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4728'. [ 582.932310][T23650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4739'. [ 583.002280][T23650] bond0: entered promiscuous mode [ 583.030434][T23650] bond_slave_0: entered promiscuous mode [ 583.058396][T23650] bond_slave_1: entered promiscuous mode [ 583.074148][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 583.092491][T23650] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 583.119835][T23650] bond0: left promiscuous mode [ 583.125661][T23650] bond_slave_0: left promiscuous mode [ 583.136729][T23650] bond_slave_1: left promiscuous mode [ 583.142407][T23650] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 583.151834][T23663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4743'. [ 583.588517][T23676] netlink: 'syz.1.4746': attribute type 1 has an invalid length. [ 583.661270][T23680] sctp: [Deprecated]: syz.4.4747 (pid 23680) Use of int in max_burst socket option deprecated. [ 583.661270][T23680] Use struct sctp_assoc_value instead [ 583.679711][T23682] sctp: [Deprecated]: syz.4.4747 (pid 23682) Use of int in max_burst socket option deprecated. [ 583.679711][T23682] Use struct sctp_assoc_value instead [ 583.749194][T23677] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 583.761219][T23677] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 583.780620][T23677] bond5: (slave ip6gre1): making interface the new active one [ 583.790667][T23677] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 583.874192][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 583.883055][ C0] lec:lec_tx_timeout: lec0 [ 584.149756][T23703] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 584.177347][T23703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.217930][T23704] netlink: 'syz.1.4753': attribute type 4 has an invalid length. [ 584.259574][T23699] veth3: entered allmulticast mode [ 584.393727][T23714] x_tables: unsorted underflow at hook 1 [ 584.593431][T23722] netlink: 'syz.4.4759': attribute type 2 has an invalid length. [ 584.625875][T23722] netlink: 'syz.4.4759': attribute type 2 has an invalid length. [ 584.658237][T23722] netlink: 'syz.4.4759': attribute type 2 has an invalid length. [ 584.706637][T23722] netlink: 'syz.4.4759': attribute type 2 has an invalid length. [ 585.171737][T23746] syzkaller0: entered promiscuous mode [ 585.317760][T23756] netlink: 'syz.4.4769': attribute type 4 has an invalid length. [ 585.326714][T23761] __nla_validate_parse: 1 callbacks suppressed [ 585.326727][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4770'. [ 585.354872][T23756] ip6erspan1: entered allmulticast mode [ 585.504487][T23765] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4771'. [ 585.523373][T23768] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4773'. [ 585.536871][T23765] netlink: 'syz.1.4771': attribute type 1 has an invalid length. [ 585.548536][T23770] netlink: 'syz.3.4772': attribute type 1 has an invalid length. [ 585.645905][T23770] 8021q: adding VLAN 0 to HW filter on device bond7 [ 585.706724][T23770] bond7: (slave geneve2): making interface the new active one [ 585.716364][T23770] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 586.247302][T23778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4775'. [ 586.262037][T23785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4779'. [ 586.280293][T23784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4774'. [ 586.583620][T23799] syzkaller0: entered promiscuous mode [ 586.598779][T23799] syzkaller0: entered allmulticast mode [ 586.895825][T23814] netlink: 'syz.4.4786': attribute type 21 has an invalid length. [ 586.931402][T23814] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4786'. [ 586.966506][T23814] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4786'. [ 586.981845][T23816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4788'. [ 587.290469][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4792'. [ 588.197396][T23884] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 590.667156][T23888] validate_nla: 3 callbacks suppressed [ 590.667190][T23888] netlink: 'syz.0.4803': attribute type 1 has an invalid length. [ 590.727217][T23899] __nla_validate_parse: 2 callbacks suppressed [ 590.727235][T23899] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4803'. [ 590.759522][T23888] netlink: 'syz.0.4803': attribute type 1 has an invalid length. [ 590.827678][T23899] netlink: 'syz.0.4803': attribute type 16 has an invalid length. [ 590.848527][T23899] netlink: 'syz.0.4803': attribute type 17 has an invalid length. [ 590.914287][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 591.458815][T23933] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4816'. [ 591.664481][T23939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4819'. [ 591.692129][T23939] netlink: 'syz.4.4819': attribute type 1 has an invalid length. [ 591.712321][T23946] netlink: 'syz.1.4822': attribute type 1 has an invalid length. [ 591.770991][T23946] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 592.052313][T23962] netlink: 'syz.3.4824': attribute type 4 has an invalid length. [ 592.206892][T23972] sctp: [Deprecated]: syz.0.4827 (pid 23972) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.206892][T23972] Use struct sctp_sack_info instead [ 592.367271][T23979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4829'. [ 592.505586][T23984] netlink: 'syz.3.4830': attribute type 2 has an invalid length. [ 592.529434][T23988] netlink: 'syz.4.4831': attribute type 2 has an invalid length. [ 592.616291][T23996] netlink: 'syz.4.4831': attribute type 32 has an invalid length. [ 592.651913][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4831'. [ 592.690248][T23995] gre1: entered promiscuous mode [ 592.737534][T24001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4832'. [ 592.887313][T23996] bond9: option coupled_control: invalid value (29) [ 592.926531][T23996] bond9 (unregistering): Released all slaves [ 593.023336][T23998] lo: left promiscuous mode [ 593.127747][T23998] ip6_vti0: left promiscuous mode [ 593.266755][T23998] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 593.358453][T24013] ip6erspan0: entered allmulticast mode [ 593.719082][T24032] IPVS: set_ctl: invalid protocol: 92 10.1.1.2:20001 [ 593.729144][T24034] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4844'. [ 593.902819][T24032] syzkaller1: entered promiscuous mode [ 593.945394][T24032] syzkaller1: entered allmulticast mode [ 594.038087][T24027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4839'. [ 594.094859][T24049] openvswitch: netlink: Message has 4 unknown bytes. [ 594.102978][T24045] syzkaller0: entered promiscuous mode [ 594.130479][T24045] syzkaller0: entered allmulticast mode [ 594.387804][T24056] xt_hashlimit: size too large, truncated to 1048576 [ 594.411610][T24059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4851'. [ 594.586816][T24069] netlink: 1024 bytes leftover after parsing attributes in process `syz.4.4852'. [ 595.099729][T24090] netlink: zone id is out of range [ 595.106292][T24090] netlink: zone id is out of range [ 595.111581][T24090] netlink: zone id is out of range [ 595.121407][T24090] netlink: zone id is out of range [ 595.138773][T24090] netlink: zone id is out of range [ 595.153473][T24090] netlink: zone id is out of range [ 595.166833][T24090] netlink: zone id is out of range [ 595.173535][T24090] netlink: set zone limit has 4 unknown bytes [ 595.446442][T24105] pim6reg1: entered promiscuous mode [ 595.465434][T24105] pim6reg1: entered allmulticast mode [ 595.584473][T24111] IPv6: sit1: Disabled Multicast RS [ 595.787713][T24118] validate_nla: 4 callbacks suppressed [ 595.787729][T24118] netlink: 'syz.0.4866': attribute type 1 has an invalid length. [ 595.801494][T24119] __nla_validate_parse: 2 callbacks suppressed [ 595.801525][T24119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4866'. [ 595.821971][T24118] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 596.139808][T24136] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4872'. [ 596.228262][T24137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4873'. [ 596.692317][T24141] syzkaller0: entered promiscuous mode [ 596.712171][T24141] syzkaller0: entered allmulticast mode [ 596.719358][T24160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4879'. [ 596.966046][T24177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4882'. [ 597.787058][T24176] delete_channel: no stack [ 599.349493][ T5899] IPVS: starting estimator thread 0... [ 599.355365][T24181] net_ratelimit: 1 callbacks suppressed [ 599.355382][T24181] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 599.454113][T24186] IPVS: using max 31 ests per chain, 74400 per kthread [ 599.746976][T24202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4889'. [ 599.853446][T24203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4889'. [ 599.903351][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4889'. [ 599.921501][T24210] netlink: 'syz.3.4889': attribute type 10 has an invalid length. [ 599.933159][T24215] siw: device registration error -23 [ 599.952015][T24202] 8021q: adding VLAN 0 to HW filter on device bond8 [ 599.978137][T24203] bond0: left allmulticast mode [ 600.003081][T24203] bond0: left promiscuous mode [ 600.012051][T24203] bridge0: port 3(bond0) entered disabled state [ 600.056225][T24203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.087908][T24203] bond8: (slave bond0): Enslaving as an active interface with a down link [ 600.112793][T24217] tipc: Started in network mode [ 600.120832][T24217] tipc: Node identity bbbbbb, cluster identity 4711 [ 600.129692][T24217] tipc: Enabled bearer , priority 10 [ 600.180968][T24222] syzkaller0: entered promiscuous mode [ 600.194279][T24222] syzkaller0: entered allmulticast mode [ 600.317718][T24228] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4898'. [ 600.342005][T24235] IPv6: NLM_F_CREATE should be specified when creating new route [ 600.582889][T24243] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4900'. [ 600.661009][T24231] bond6 (unregistering): Released all slaves [ 601.130482][T24263] __nla_validate_parse: 1 callbacks suppressed [ 601.130593][T24263] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4907'. [ 601.244811][ T5899] tipc: Node number set to 3149642496 [ 601.349715][T24280] syzkaller0: entered promiscuous mode [ 601.362728][T24280] syzkaller0: entered allmulticast mode [ 601.469817][T24288] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4914'. [ 601.498452][T24288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4914'. [ 601.526807][T24289] netlink: zone id is out of range [ 601.544327][T24288] netlink: zone id is out of range [ 601.557043][T24289] netlink: zone id is out of range [ 601.562336][T24288] netlink: zone id is out of range [ 601.569081][T24289] netlink: zone id is out of range [ 601.580296][T24288] netlink: zone id is out of range [ 601.659691][T24300] IPVS: set_ctl: invalid protocol: 41 172.20.20.64:20003 [ 601.692513][T24294] bond9: (slave ip_vti0): Device is not bonding slave [ 601.700997][T24294] bond9: option active_slave: invalid value (ip_vti0) [ 601.701389][T24300] netlink: 'syz.4.4916': attribute type 4 has an invalid length. [ 601.779615][T24294] bond9 (unregistering): Released all slaves [ 601.813035][T24302] netlink: 'syz.0.4917': attribute type 1 has an invalid length. [ 601.837701][T24302] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.4917'. [ 601.879340][T24302] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4917'. [ 602.338241][T24323] nbd: must specify a size in bytes for the device [ 602.568026][T24331] veth7: entered allmulticast mode [ 602.688135][T24333] syzkaller0: entered promiscuous mode [ 602.705851][T24333] syzkaller0: entered allmulticast mode [ 602.928171][T24351] netlink: 'syz.1.4932': attribute type 1 has an invalid length. [ 602.954309][T24351] netlink: 400 bytes leftover after parsing attributes in process `syz.1.4932'. [ 602.957822][T24353] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4931'. [ 602.964890][T24351] netlink: 'syz.1.4932': attribute type 1 has an invalid length. [ 602.982786][T24354] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4931'. [ 603.012636][T24353] vlan2: entered allmulticast mode [ 603.018833][T24353] bond0: entered allmulticast mode [ 603.026766][T24353] bond_slave_0: entered allmulticast mode [ 603.042791][T24353] bond_slave_1: entered allmulticast mode [ 603.058619][T24353] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 603.102454][T24351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 603.266684][T24365] netlink: 'syz.2.4935': attribute type 4 has an invalid length. [ 603.293911][ T30] audit: type=1107 audit(1777175014.962:10): pid=24359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ý¼Ïw÷x©)Ã)endOÂ*€Uã{]z{¸Û/®7Å| [ 603.293911][ T30] ¾TñdW°öœ½úög¯ÑÚ‹l³M / `”š¹!ŒJYe¿dFòn*wÉ [ 603.293911][ T30] Òþçq„ÆдÌhmà¨ht•Â±4à§ØÐeŠÿï%AôŒò€ø80Qôlà<ß™íë=S¯÷E‰¤v¬£ûkšiR…ˆL›¦N\¨í$H*ÖsÐpžäI\k j´Ã&:óŒEv šSäŽÿsHüÊdþ' [ 603.426331][T24371] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.4939'. [ 603.536939][T24377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4941'. [ 603.575842][T24379] netlink: 'syz.3.4942': attribute type 1 has an invalid length. [ 603.622248][T24379] 8021q: adding VLAN 0 to HW filter on device bond9 [ 604.403378][ T29] IPVS: starting estimator thread 0... [ 604.459903][T24402] bond6: Unable to set down delay as MII monitoring is disabled [ 604.510345][T24402] bond6 (unregistering): Released all slaves [ 604.524325][T24409] IPVS: using max 28 ests per chain, 67200 per kthread [ 604.638050][T24407] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 604.979976][T24431] syzkaller0: entered promiscuous mode [ 604.999780][T24431] syzkaller0: entered allmulticast mode [ 605.045144][T24434] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 605.103279][T24432] macsec1: entered promiscuous mode [ 605.208390][T24441] sctp: [Deprecated]: syz.2.4962 (pid 24441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 605.208390][T24441] Use struct sctp_sack_info instead [ 605.356559][T24437] openvswitch: netlink: Missing valid actions attribute. [ 605.419820][T24452] tipc: Started in network mode [ 605.426218][T24437] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.439930][T24452] tipc: Node identity , cluster identity 4711 [ 605.457374][T24452] tipc: Failed to obtain node identity [ 605.476475][T24452] tipc: Enabling of bearer rejected, failed to enable media [ 605.512556][T24458] netlink: 'syz.3.4961': attribute type 1 has an invalid length. [ 606.052580][T24482] 8021q: VLANs not supported on ipvlan1 [ 606.167579][T24489] __nla_validate_parse: 4 callbacks suppressed [ 606.167618][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4973'. [ 606.220978][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4973'. [ 606.254133][T24489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4973'. [ 606.274234][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 606.550577][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4978'. [ 607.081819][T24519] veth9: entered promiscuous mode [ 607.102103][T24519] veth9: entered allmulticast mode [ 607.112171][T24527] netlink: 'syz.0.4989': attribute type 1 has an invalid length. [ 607.134819][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4990'. [ 607.308628][T24535] netlink: 'syz.3.4992': attribute type 3 has an invalid length. [ 607.325141][T24535] netlink: 'syz.3.4992': attribute type 1 has an invalid length. [ 607.363249][T24535] gre1: entered promiscuous mode [ 607.389630][T24537] syzkaller0: entered promiscuous mode [ 607.398931][T24537] syzkaller0: entered allmulticast mode [ 607.405974][T24529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4990'. [ 607.986395][T24545] syzkaller0: entered promiscuous mode [ 608.002965][T24545] syzkaller0: entered allmulticast mode [ 608.041521][T24560] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4998'. [ 608.735781][T24588] netlink: 'syz.3.5004': attribute type 1 has an invalid length. [ 608.931630][T24599] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5004'. [ 611.279959][T24588] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 611.353365][ T5511] veth0_macvtap: left promiscuous mode [ 611.440129][T17076] lec:lec_start_xmit: lec0:No lecd attached [ 611.684232][T24624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5012'. [ 611.823572][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5013'. [ 612.094148][T24636] bond1: (slave syz_tun): Removing an active aggregator [ 612.115813][T24636] bond1: (slave syz_tun): Releasing backup interface [ 612.249197][T24636] bridge_slave_0: left allmulticast mode [ 612.280526][T24636] bridge_slave_0: left promiscuous mode [ 612.303354][T24636] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.363472][T24636] bridge_slave_1: left allmulticast mode [ 612.388591][T24636] bridge_slave_1: left promiscuous mode [ 612.404978][T24636] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.481440][T24636] team0: Port device team_slave_0 removed [ 612.527141][T24636] team0: Port device team_slave_1 removed [ 612.551478][T24636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.568238][T24636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.581284][T24636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.593001][T24636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.609480][T24636] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 612.854316][T24673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5022'. [ 612.947348][T24681] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5025'. [ 613.023599][T24673] : entered promiscuous mode [ 613.049446][T24681] sctp: [Deprecated]: syz.3.5025 (pid 24681) Use of int in maxseg socket option. [ 613.049446][T24681] Use struct sctp_assoc_value instead [ 613.178707][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5027'. [ 613.213828][T24690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5027'. [ 613.445568][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5030'. [ 613.751668][T24716] ipt_REJECT: TCP_RESET invalid for non-tcp [ 613.791839][T24716] netlink: 'syz.2.5033': attribute type 1 has an invalid length. [ 613.873329][T24717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5033'. [ 613.945254][T24716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 613.994934][T24717] bond6: up delay (1668546696) is not a multiple of miimon (100), value rounded to 1668546600 ms [ 614.011289][T24717] bond6: entered allmulticast mode [ 614.096364][T24732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 614.241137][T24731] bond5: (slave gre0): Device is not bonding slave [ 614.247940][T24731] bond5: option active_slave: invalid value (gre0) [ 614.258111][T24731] bond5 (unregistering): Released all slaves [ 614.280396][T24741] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5040'. [ 614.292309][T24742] x_tables: unsorted underflow at hook 4 [ 614.583635][T24757] netlink: 'syz.0.5043': attribute type 10 has an invalid length. [ 614.701593][T24766] netlink: 'syz.4.5046': attribute type 21 has an invalid length. [ 614.820221][T24768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.845387][T24769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.859488][T24768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.881080][T24769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.922595][T24769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.943364][T24768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.958330][T24768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.006789][T24777] tipc: Enabled bearer , priority 10 [ 615.039883][T24779] No such timeout policy "syz1" [ 615.314651][T24787] 8021q: VLANs not supported on nr0 [ 615.328057][T24790] netlink: 'syz.2.5054': attribute type 3 has an invalid length. [ 615.338737][T24795] netlink: 'syz.3.5057': attribute type 4 has an invalid length. [ 615.349159][T24790] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5054'. [ 615.666184][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 616.108242][T24835] xt_cgroup: path and classid specified [ 616.214916][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 616.541458][T24857] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.754052][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5310 ms [ 616.762970][ C0] lec:lec_tx_timeout: lec0 [ 617.062976][T24877] __nla_validate_parse: 1 callbacks suppressed [ 617.063011][T24877] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5078'. [ 617.191822][T24883] IPVS: set_ctl: invalid protocol: 137 100.1.1.1:20003 [ 617.231943][T24890] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5080'. [ 617.271808][T24890] netlink: 'syz.3.5080': attribute type 1 has an invalid length. [ 617.281696][T24890] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5080'. [ 617.292165][T24882] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5079'. [ 617.305522][T24894] netlink: 'syz.4.5079': attribute type 1 has an invalid length. [ 617.321073][T24879] bond9: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 617.362215][T24879] bond9 (unregistering): Released all slaves [ 617.657535][T24907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5085'. [ 617.915538][T24922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5088'. [ 617.944390][T24918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5088'. [ 618.138531][T24934] netlink: 'syz.2.5090': attribute type 4 has an invalid length. [ 618.176916][T24934] netlink: 'syz.2.5090': attribute type 1 has an invalid length. [ 618.200950][T24934] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5090'. [ 618.336888][T24943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5094'. [ 618.808892][T24960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5100'. [ 618.879445][T24960] macvlan2: entered allmulticast mode [ 618.890835][T24960] dummy0: entered allmulticast mode [ 618.907203][T24960] dummy0: entered promiscuous mode [ 618.990253][T24974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.069456][T24971] netlink: 'syz.4.5102': attribute type 19 has an invalid length. [ 619.109221][T24971] netlink: 'syz.4.5102': attribute type 19 has an invalid length. [ 619.361447][T24994] netlink: 'syz.4.5108': attribute type 5 has an invalid length. [ 619.669833][T25012] syzkaller0: entered promiscuous mode [ 619.721613][T25012] syzkaller0: entered allmulticast mode [ 619.803118][T25023] syz1: rxe_newlink: already configured on bond_slave_1 [ 620.402092][T25046] tipc: Resetting bearer [ 620.431444][T25046] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 620.480804][T25046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 620.490796][T25046] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 620.512635][T25046] 8021q: adding VLAN 0 to HW filter on device bond2 [ 620.529624][T25046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 620.553478][T25046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 620.697134][T25046] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 620.703352][T25003] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 620.722415][T25004] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 620.921233][ T9172] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 621.138773][T25066] tipc: Started in network mode [ 621.164289][T25066] tipc: Node identity 9689bce5d118, cluster identity 4711 [ 621.199418][T25066] tipc: Enabled bearer , priority 0 [ 621.401734][T25066] tipc: Disabling bearer [ 621.555173][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 621.613643][T25090] sctp: [Deprecated]: syz.0.5129 (pid 25090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 621.613643][T25090] Use struct sctp_sack_info instead [ 621.897947][T25100] veth0_macvtap: left promiscuous mode [ 622.125271][T25111] syz.3.5136 uses old SIOCAX25GETINFO [ 622.345536][T25119] tunl0: entered promiscuous mode [ 622.358042][T25119] netlink: 'syz.1.5139': attribute type 3 has an invalid length. [ 622.390207][T25119] __nla_validate_parse: 7 callbacks suppressed [ 622.390236][T25119] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5139'. [ 622.687359][T25146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5144'. [ 622.938648][T25153] Unsupported ieee802154 address type: 0 [ 623.006128][T25157] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 623.260859][T25175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5153'. [ 623.299997][T25175] unsupported nlmsg_type 40 [ 623.370863][T25180] sctp: [Deprecated]: syz.2.5155 (pid 25180) Use of struct sctp_assoc_value in delayed_ack socket option. [ 623.370863][T25180] Use struct sctp_sack_info instead [ 623.650659][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 623.706884][T25199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5153'. [ 624.076123][T25217] netlink: 'syz.3.5160': attribute type 2 has an invalid length. [ 624.207648][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 624.220734][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 624.929556][T25262] netlink: 'syz.3.5169': attribute type 1 has an invalid length. [ 625.132966][T25272] sctp: [Deprecated]: syz.1.5173 (pid 25272) Use of int in maxseg socket option. [ 625.132966][T25272] Use struct sctp_assoc_value instead [ 625.164547][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.248391][T25278] netlink: 'syz.0.5174': attribute type 13 has an invalid length. [ 625.375343][T25285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5176'. [ 625.567630][T25297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5178'. [ 625.596836][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5180'. [ 625.632096][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5180'. [ 625.642570][T25302] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5179'. [ 625.656939][T25290] can: request_module (can-proto-0) failed. [ 625.667996][T25299] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5179'. [ 625.896221][T25312] netlink: 'syz.3.5182': attribute type 1 has an invalid length. [ 626.171370][T25315] 8021q: adding VLAN 0 to HW filter on device bond11 [ 626.201623][T25329] x_tables: duplicate underflow at hook 1 [ 626.218465][T25315] bond10: (slave bond11): making interface the new active one [ 626.255404][T25315] bond10: (slave bond11): Enslaving as an active interface with an up link [ 626.341166][T25320] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 626.392868][T25312] 8021q: adding VLAN 0 to HW filter on device bond10 [ 628.082829][T25407] __nla_validate_parse: 3 callbacks suppressed [ 628.082863][T25407] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5208'. [ 628.131411][T25406] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5208'. [ 628.397963][T25389] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 628.841321][T25434] netlink: 'syz.3.5213': attribute type 8 has an invalid length. [ 628.867466][T25434] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5213'. [ 628.905378][T25439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5214'. [ 629.131273][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5220'. [ 629.160931][T25453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5220'. [ 629.558249][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5223'. [ 629.605177][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5223'. [ 629.724029][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 629.733008][ C0] lec:lec_tx_timeout: lec0 [ 629.891608][T25492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5229'. [ 629.922739][T25492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5229'. [ 630.177244][T25507] xt_hashlimit: size too large, truncated to 1048576 [ 631.036022][T25546] bond12: entered promiscuous mode [ 631.080422][T25552] openvswitch: netlink: Key type 30 is not supported [ 631.244930][ T5855] Bluetooth: hci2: command 0x0405 tx timeout [ 631.350259][T25570] netlink: 'syz.3.5247': attribute type 1 has an invalid length. [ 631.359126][T25570] netlink: 'syz.3.5247': attribute type 1 has an invalid length. [ 631.368088][T25570] netlink: 'syz.3.5247': attribute type 8 has an invalid length. [ 631.807923][T25585] bond13 (unregistering): Released all slaves [ 632.216009][T25603] netlink: 'syz.3.5259': attribute type 1 has an invalid length. [ 632.360257][T25605] bond13: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 632.371211][T25605] bond13: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 632.384735][T25605] bond13: (slave ip6gre3): making interface the new active one [ 632.402784][T25605] bond13: (slave ip6gre3): Enslaving as an active interface with an up link [ 632.423389][T25610] netlink: 'syz.2.5260': attribute type 12 has an invalid length. [ 632.469988][T25610] netlink: 'syz.2.5260': attribute type 10 has an invalid length. [ 632.543167][T25617] netlink: 'syz.4.5262': attribute type 1 has an invalid length. [ 632.573904][T25610] team0 (unregistering): Port device team_slave_0 removed [ 632.593715][T25617] netlink: 'syz.4.5262': attribute type 1 has an invalid length. [ 632.625624][T25610] team0 (unregistering): Port device team_slave_1 removed [ 632.654277][T25617] netlink: 'syz.4.5262': attribute type 8 has an invalid length. [ 632.967880][T25631] netlink: 'syz.1.5266': attribute type 5 has an invalid length. [ 633.179657][T25640] __nla_validate_parse: 17 callbacks suppressed [ 633.179674][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5269'. [ 633.774808][T25670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5278'. [ 633.804329][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 633.822691][T25670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5278'. [ 634.109283][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5282'. [ 634.146093][T25680] Cannot find set identified by id 65534 to match [ 634.276277][T25676] vlan3: entered allmulticast mode [ 634.294765][T25676] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 634.641341][T25692] bond6 (unregistering): Released all slaves [ 635.037037][T25708] pimreg: entered allmulticast mode [ 635.299798][T25718] tipc: Enabling of bearer rejected, failed to enable media [ 635.310086][T25716] tipc: Enabling of bearer rejected, failed to enable media [ 635.334638][T25722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5295'. [ 635.358984][T25722] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5295'. [ 635.369536][T25722] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5295'. [ 635.428071][T25728] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.5296'. [ 635.442928][T25728] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 636.051545][T25761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5304'. [ 636.060784][T25761] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5304'. [ 636.377158][T25735] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.929941][T25802] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 637.634185][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 638.034200][ T5858] Bluetooth: hci2: command 0x0405 tx timeout [ 638.294173][ T5855] Bluetooth: hci2: link tx timeout [ 638.337378][ T5855] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 638.475857][T25826] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 638.487251][T25826] bond9 (unregistering): Released all slaves [ 638.529446][T25825] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 638.543707][T25825] bond9 (unregistering): Released all slaves [ 639.817598][T25793] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.829901][T25824] validate_nla: 4 callbacks suppressed [ 639.829915][T25824] netlink: 'syz.4.5319': attribute type 1 has an invalid length. [ 640.129686][T25836] syzkaller0: entered promiscuous mode [ 640.145009][T25836] syzkaller0: entered allmulticast mode [ 640.273724][T25845] netlink: 'syz.4.5324': attribute type 1 has an invalid length. [ 640.345361][T25846] __nla_validate_parse: 3 callbacks suppressed [ 640.345378][T25846] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5324'. [ 640.345546][T25849] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5324'. [ 640.386366][ T5855] Bluetooth: hci2: command 0x0405 tx timeout [ 640.421245][T25853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5325'. [ 640.606399][T25865] block nbd0: server does not support multiple connections per device. [ 640.652273][T25865] block nbd0: shutting down sockets [ 640.715181][T25852] xt_CT: No such helper "pptp" [ 640.931474][T25876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5332'. [ 640.996795][T25878] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5332'. [ 641.035771][T25880] tunl0: Caught tx_queue_len zero misconfig [ 641.441386][T25903] ip6tnl0: Caught tx_queue_len zero misconfig [ 641.449519][T25905] netlink: 'syz.1.5338': attribute type 12 has an invalid length. [ 641.625974][T25909] netlink: 'syz.0.5341': attribute type 1 has an invalid length. [ 641.716634][T25912] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5342'. [ 641.737157][T25909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5341'. [ 641.747810][T25909] 8021q: adding VLAN 0 to HW filter on device bond6 [ 641.833452][T25919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5344'. [ 641.872739][T25919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5344'. [ 642.025219][T25924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5344'. [ 642.402034][T25946] netlink: 'syz.4.5354': attribute type 1 has an invalid length. [ 642.570618][T25950] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 642.761993][T25968] IPVS: set_ctl: invalid protocol: 59 172.20.20.38:20001 [ 642.783866][T25968] netlink: 'syz.4.5357': attribute type 2 has an invalid length. [ 642.846146][T25968] tipc: Enabling of bearer rejected, failed to enable media [ 643.161366][T25984] netlink: 'syz.1.5361': attribute type 11 has an invalid length. [ 643.670129][ T5967] hid (null): global environment stack underflow [ 643.792249][T26012] netlink: 'syz.0.5368': attribute type 39 has an invalid length. [ 643.836994][ T5967] hid-generic 0005:15C2:0004.0001: global environment stack underflow [ 643.878123][ T5967] hid-generic 0005:15C2:0004.0001: item 0 0 1 11 parsing failed [ 643.891922][ T5967] hid-generic 0005:15C2:0004.0001: probe with driver hid-generic failed with error -22 [ 644.326071][T26039] netlink: 'syz.2.5376': attribute type 21 has an invalid length. [ 644.678490][T26048] netlink: 'syz.2.5378': attribute type 1 has an invalid length. [ 645.007430][T26061] ±ÿ: renamed from team_slave_1 (while UP) [ 645.630584][T26080] syzkaller0: entered promiscuous mode [ 645.652821][T26083] __nla_validate_parse: 16 callbacks suppressed [ 645.652868][T26083] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5389'. [ 645.661811][T26080] 0: reclassify loop, rule prio 0, protocol 800 [ 645.946361][T26083] vlan4: entered allmulticast mode [ 645.972412][T26083] erspan0: entered allmulticast mode [ 646.436054][T26105] netlink: 'syz.1.5395': attribute type 2 has an invalid length. [ 646.861132][T26119] team0: No ports can be present during mode change [ 646.948313][T26131] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5400'. [ 647.186962][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5403'. [ 647.340560][T26152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5407'. [ 647.364244][T26152] tipc: Invalid UDP bearer configuration [ 647.364362][T26152] tipc: Enabling of bearer rejected, failed to enable media [ 647.492880][T26152] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 647.581552][T26163] netlink: 'syz.0.5410': attribute type 1 has an invalid length. [ 647.590358][T26163] netlink: 2108 bytes leftover after parsing attributes in process `syz.0.5410'. [ 647.719332][T26168] netlink: 'syz.3.5411': attribute type 10 has an invalid length. [ 647.912151][T26174] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5413'. [ 647.933011][T26174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5413'. [ 648.212190][T26183] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5417'. [ 648.265248][T26186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5416'. [ 648.304310][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5416'. [ 648.325982][T26188] netlink: 'syz.4.5419': attribute type 1 has an invalid length. [ 649.061463][T26221] netlink: 'syz.0.5430': attribute type 1 has an invalid length. [ 649.367973][T26241] Cannot find add_set index 0 as target [ 649.500456][T26234] syzkaller0: entered promiscuous mode [ 649.527816][T26234] syzkaller0: entered allmulticast mode [ 649.595189][T26249] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.639942][T26249] team0: Cannot enslave team device to itself [ 650.444264][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 652.263736][T26264] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 652.391276][T26267] bridge9: entered promiscuous mode [ 652.415277][T26267] bridge9: entered allmulticast mode [ 652.472495][T26269] syzkaller0: left promiscuous mode [ 652.479189][T26269] syzkaller0: left allmulticast mode [ 652.961885][T26304] netlink: 'syz.3.5449': attribute type 9 has an invalid length. [ 653.201663][T26317] tipc: Started in network mode [ 653.226687][T26317] tipc: Node identity ac14140f, cluster identity 4711 [ 653.325077][T26317] tipc: Enabled bearer , priority 10 [ 653.622820][T26332] smbdirect: ib_dev[syz1] renamed to [syz2] [ 653.731061][T26349] __nla_validate_parse: 5 callbacks suppressed [ 653.731078][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5458'. [ 653.769862][T26346] SET target dimension over the limit! [ 653.833208][T26349] macvlan2: entered allmulticast mode [ 653.852013][T26349] dummy0: entered allmulticast mode [ 654.197991][T26368] syzkaller0: entered promiscuous mode [ 654.204667][T26368] syzkaller0: entered allmulticast mode [ 654.336106][ T5914] tipc: Node number set to 2886997007 [ 654.352720][T26377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5466'. [ 654.688221][T26389] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5470'. [ 654.733380][T26389] blkio.reset_stats is deprecated [ 654.757381][T26391] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5471'. [ 654.802846][T26392] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5471'. [ 655.162039][T26425] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 655.193214][T26422] netlink: 'syz.2.5475': attribute type 83 has an invalid length. [ 655.630103][T26457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5483'. [ 655.681163][T26457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5483'. [ 655.752518][T26462] netlink: 'syz.3.5484': attribute type 1 has an invalid length. [ 656.004848][T26478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5488'. [ 656.023748][T26464] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 656.036591][T26464] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 656.158468][T26469] bond14: (slave bridge6): Enslaving as an active interface with a down link [ 656.581556][T26496] wireguard0: entered promiscuous mode [ 656.597398][T26496] wireguard0: entered allmulticast mode [ 656.822514][T26503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5497'. [ 657.511414][T26527] syzkaller0: entered promiscuous mode [ 657.540691][T26527] syzkaller0: entered allmulticast mode [ 657.590073][T26534] netlink: 'syz.2.5506': attribute type 29 has an invalid length. [ 657.610710][T26527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5504'. [ 657.628016][T26534] netlink: 'syz.2.5506': attribute type 29 has an invalid length. [ 658.133357][T26551] sch_fq: defrate 0 ignored. [ 658.191276][T26553] netlink: 'syz.3.5513': attribute type 8 has an invalid length. [ 658.303824][T26553] bridge7: entered allmulticast mode [ 658.361481][T26562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 658.368787][T26562] IPv6: NLM_F_CREATE should be set when creating new route [ 658.632844][T26576] veth0: entered promiscuous mode [ 658.761850][T26579] veth0: left promiscuous mode [ 658.902474][T26584] tipc: Enabled bearer , priority 0 [ 659.028293][T26589] __nla_validate_parse: 3 callbacks suppressed [ 659.028310][T26589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5523'. [ 659.232024][T26584] syzkaller0: entered promiscuous mode [ 659.250928][T26584] syzkaller0: entered allmulticast mode [ 659.270693][T26584] tipc: Resetting bearer [ 659.338823][T26583] tipc: Resetting bearer [ 659.650911][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5530'. [ 659.655860][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5530'. [ 659.764794][T26626] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5528'. [ 661.804416][T26583] tipc: Disabling bearer [ 661.838899][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5530'. [ 661.839253][T26619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5530'. [ 661.862492][T26623] bond8: option mode: unable to set because the bond device has slaves [ 661.895351][T26618] bond8: option mode: unable to set because the bond device has slaves [ 661.963006][T26620] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 662.068489][T26634] netlink: 'syz.2.5532': attribute type 1 has an invalid length. [ 662.085039][T26619] bond8: option mode: unable to set because the bond device has slaves [ 662.158210][T26638] netlink: 640 bytes leftover after parsing attributes in process `syz.4.5533'. [ 662.192368][T26638] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 662.259261][T26634] bond7: entered promiscuous mode [ 662.271321][T26634] 8021q: adding VLAN 0 to HW filter on device bond7 [ 662.338991][T26633] ipvlan3: entered allmulticast mode [ 662.353164][T26633] bond7: entered allmulticast mode [ 662.373910][T26648] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5536'. [ 662.395836][T26635] ipvlan4: entered allmulticast mode [ 662.486742][T26644] bond7: option lp_interval: invalid value (0) [ 662.493650][T26644] bond7: option lp_interval: allowed values 1 - 2147483647 [ 662.522942][T26644] bond7 (unregistering): Released all slaves [ 662.624585][T26660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5537'. [ 662.680270][T26634] bond7: (slave bridge9): making interface the new active one [ 662.718088][T26634] bridge9: entered promiscuous mode [ 662.733065][T26634] bridge9: entered allmulticast mode [ 662.758033][T26634] bond7: (slave bridge9): Enslaving as an active interface with an up link [ 663.123259][T26685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5542'. [ 663.256672][T26691] vlan0: entered promiscuous mode [ 663.614616][T26709] veth0: entered promiscuous mode [ 664.102450][T26716] bond15: entered promiscuous mode [ 664.133679][T26716] 8021q: adding VLAN 0 to HW filter on device bond15 [ 664.230561][T26731] __nla_validate_parse: 3 callbacks suppressed [ 664.230579][T26731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5554'. [ 664.348110][T26727] netlink: 'syz.4.5554': attribute type 10 has an invalid length. [ 664.408119][T26727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5554'. [ 664.439949][T26745] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.5561'. [ 664.605410][T26747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5560'. [ 664.642872][T26747] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5560'. [ 664.794290][T26763] netlink: 'syz.4.5565': attribute type 1 has an invalid length. [ 664.897620][T26757] bond7: invalid ARP target 0.0.0.0 specified for addition [ 664.946666][T26757] bond7: option arp_ip_target: invalid value (0) [ 664.961461][T26757] bond7 (unregistering): Released all slaves [ 665.060217][T26779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5570'. [ 665.061569][T26758] bond7: invalid ARP target 0.0.0.0 specified for addition [ 665.084757][T26758] bond7: option arp_ip_target: invalid value (0) [ 665.106020][T26758] bond7 (unregistering): Released all slaves [ 665.215544][T26763] bond9: entered promiscuous mode [ 665.229003][T26763] 8021q: adding VLAN 0 to HW filter on device bond9 [ 665.291676][T26768] 8021q: adding VLAN 0 to HW filter on device bond9 [ 665.322173][T26768] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 665.354366][T26788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5572'. [ 665.362252][T26768] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 665.382232][T26768] bond9: (slave vti0): making interface the new active one [ 665.390961][T26768] vti0: entered promiscuous mode [ 665.405206][T26768] bond9: (slave vti0): Enslaving as an active interface with an up link [ 665.550903][T26784] ipvlan1: entered promiscuous mode [ 665.901868][T26804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5575'. [ 665.924794][T26808] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5576'. [ 665.961470][T26808] netlink: 294 bytes leftover after parsing attributes in process `syz.0.5576'. [ 665.986592][T26808] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 666.582950][T26842] netlink: 'syz.1.5584': attribute type 1 has an invalid length. [ 666.635118][T26846] lo: Caught tx_queue_len zero misconfig [ 666.676359][T26846] netem: incorrect gi model size [ 666.720193][T26846] netem: change failed [ 666.792943][T26854] netlink: 'syz.2.5587': attribute type 1 has an invalid length. [ 666.950787][T26865] ±ÿ: renamed from team_slave_1 (while UP) [ 667.563066][T26894] ipvlan2: entered promiscuous mode [ 669.850827][T26856] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 676.212175][T17076] lec:lec_start_xmit: lec0:No lecd attached [ 681.724135][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5510 ms [ 681.732617][ C0] lec:lec_tx_timeout: lec0 [ 683.714717][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 685.644871][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 685.651367][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 690.755707][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 690.764392][ C0] lec:lec_tx_timeout: lec0 [ 700.994192][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 724.853509][T26937] bond8: option miimon: invalid value (18446744073709551585) [ 724.862036][T26937] bond8: option miimon: allowed values 0 - 2147483647 [ 724.874818][T26937] bond8 (unregistering): Released all slaves [ 724.907848][T26940] __nla_validate_parse: 1 callbacks suppressed [ 724.907880][T26940] netlink: 202832 bytes leftover after parsing attributes in process `syz.3.5607'. [ 725.149876][T26948] netlink: 'syz.2.5612': attribute type 1 has an invalid length. [ 725.158601][T26948] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5612'. [ 725.169933][T26948] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5612'. [ 725.182245][T26948] netlink: 658 bytes leftover after parsing attributes in process `syz.2.5612'. [ 725.537048][T26963] IPVS: Error joining to the multicast group [ 726.061799][T26978] veth0: Caught tx_queue_len zero misconfig [ 726.103823][T26980] bond0: (slave bond_slave_1): Error: Device can not be enslaved while up [ 726.219901][T26993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5623'. [ 726.466963][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5627'. [ 726.478229][T26954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5613'. [ 726.496623][T26954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5613'. [ 726.505850][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5627'. [ 726.698611][T27010] netlink: 'syz.1.5631': attribute type 1 has an invalid length. [ 726.732627][T27010] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5631'. [ 727.385800][T27047] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 730.072923][T27029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 730.550861][T27085] syzkaller0: entered promiscuous mode [ 730.574040][T27085] syzkaller0: entered allmulticast mode [ 730.582820][T27096] __nla_validate_parse: 6 callbacks suppressed [ 730.582837][T27096] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5652'. [ 730.882589][T27108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5656'. [ 730.948684][T27108] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 731.007193][T27108] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 731.028001][T27108] gretap3: entered promiscuous mode [ 731.045803][T27108] gretap3: entered allmulticast mode [ 731.056175][T27119] delete_channel: no stack [ 731.299826][T27129] netlink: 'syz.1.5663': attribute type 1 has an invalid length. [ 731.531687][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5665'. [ 731.751506][T27148] netlink: 'syz.0.5668': attribute type 21 has an invalid length. [ 731.774341][T27150] syzkaller0: entered promiscuous mode [ 731.783441][T27150] syzkaller0: entered allmulticast mode [ 731.804821][T27148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5668'. [ 732.169960][T27171] bridge0: port 3(vlan3) entered blocking state [ 732.191619][T27171] bridge0: port 3(vlan3) entered disabled state [ 732.225338][T27171] vlan3: entered allmulticast mode [ 732.244560][T27171] geneve0: entered allmulticast mode [ 732.265631][T27171] vlan3: entered promiscuous mode [ 732.279561][T27171] geneve0: entered promiscuous mode [ 732.460813][T27184] xt_TCPMSS: Only works on TCP SYN packets [ 732.481907][T27186] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5680'. [ 732.492954][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5680'. [ 732.748826][T27191] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 732.848764][T27199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5685'. [ 732.972487][T27199] bond0: entered promiscuous mode [ 733.016606][T27199] bond_slave_0: entered promiscuous mode [ 733.065446][T27199] bond_slave_1: entered promiscuous mode [ 733.106494][T27199] bridge_slave_1: entered promiscuous mode [ 733.140675][T27199] gretap0: entered promiscuous mode [ 733.172411][T27199] hsr1: entered promiscuous mode [ 733.545572][T27229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5691'. [ 733.629076][T27231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5688'. [ 733.772286][T27235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5693'. [ 733.918430][T26404] bond0: (slave netdevsim0): link status definitely down, disabling slave [ 734.148844][T27258] openvswitch: netlink: IP tunnel TTL not specified. [ 734.196605][T27259] openvswitch: netlink: IP tunnel TTL not specified. [ 735.009619][T27286] netlink: 'syz.1.5704': attribute type 1 has an invalid length. [ 735.075394][T27291] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.302106][T27269] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 735.473723][T27304] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.516999][T27304] netlink: 'syz.3.5713': attribute type 2 has an invalid length. [ 735.538547][T27304] netlink: 'syz.3.5713': attribute type 1 has an invalid length. [ 735.689917][T27312] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 735.721205][T27312] __nla_validate_parse: 5 callbacks suppressed [ 735.721224][T27312] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5716'. [ 735.979646][T27324] xt_hashlimit: size too large, truncated to 1048576 [ 736.683319][T27349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.708855][T27349] bond0: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 736.749907][T27349] bond0: (slave ip6tnl3): Error -95 calling set_mac_address [ 736.773147][T27356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5733'. [ 736.821085][T27353] tipc: New replicast peer: 172.20.20.187 [ 736.832027][T27353] tipc: Enabled bearer , priority 10 [ 737.328239][T27377] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5739'. [ 737.501398][T27383] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5740'. [ 737.573175][T27384] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5742'. [ 737.802698][T27401] xt_ipcomp: unknown flags 1D [ 737.824657][T27401] netlink: 'syz.2.5747': attribute type 1 has an invalid length. [ 737.833268][T27401] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5747'. [ 737.843608][T27401] netlink: 'syz.2.5747': attribute type 1 has an invalid length. [ 737.851691][T27401] netlink: 'syz.2.5747': attribute type 8 has an invalid length. [ 737.859970][T27401] netlink: 606 bytes leftover after parsing attributes in process `syz.2.5747'. [ 737.871263][T27401] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5747'. [ 737.944214][ T5899] tipc: Node number set to 1823920234 [ 738.300553][T27427] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 738.305688][T27428] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 738.454607][T27434] netlink: zone id is out of range [ 738.459923][T27434] netlink: zone id is out of range [ 738.475296][T27434] netlink: zone id is out of range [ 738.495775][T27434] netlink: zone id is out of range [ 738.689613][T27442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5758'. [ 738.769494][T27450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5760'. [ 739.839771][T27501] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20000 [ 740.542923][T17076] lec:lec_start_xmit: lec0:No lecd attached [ 741.261785][T27559] __nla_validate_parse: 6 callbacks suppressed [ 741.261830][T27559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5789'. [ 741.680894][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5794'. [ 741.874289][T27550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.642728][T27610] bridge4: entered promiscuous mode [ 742.655056][T27610] bridge4: entered allmulticast mode [ 743.351418][T27655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5813'. [ 743.485326][T27656] netlink: 'syz.1.5811': attribute type 228 has an invalid length. [ 743.539404][T27656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5811'. [ 743.720495][T27667] netlink: 260 bytes leftover after parsing attributes in process `syz.4.5816'. [ 744.299888][T27689] x_tables: duplicate underflow at hook 1 [ 744.323812][T27688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5821'. [ 744.358920][T27688] netlink: 'syz.1.5821': attribute type 8 has an invalid length. [ 744.465064][T27693] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5825'. [ 744.886709][T27716] bond8: option all_slaves_active: invalid value (222) [ 744.922601][T27716] bond8 (unregistering): Released all slaves [ 745.033778][T27721] bond8: option all_slaves_active: invalid value (222) [ 745.045326][T27721] bond8 (unregistering): Released all slaves [ 745.409916][T27742] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5837'. [ 745.453148][T27738] netlink: 252 bytes leftover after parsing attributes in process `syz.0.5837'. [ 745.510462][T27749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5839'. [ 745.724546][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 745.733558][ C0] lec:lec_tx_timeout: lec0 [ 745.893545][T27771] net_ratelimit: 8 callbacks suppressed [ 745.893578][T27771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.023800][T27771] netlink: 'syz.1.5845': attribute type 15 has an invalid length. [ 746.188201][T27784] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.218731][T27785] IPv6: NLM_F_CREATE should be specified when creating new route [ 746.378076][T27788] __nla_validate_parse: 3 callbacks suppressed [ 746.378093][T27788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5852'. [ 746.443261][T27797] syzkaller1: entered promiscuous mode [ 746.473050][T27797] syzkaller1: entered allmulticast mode [ 746.640795][T27805] 8021q: VLANs not supported on xfrm0 [ 746.660477][T27805] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5854'. [ 746.863459][T27820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5860'. [ 746.947061][T27824] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5861'. [ 747.086828][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 747.097323][ T1314] lec:lec_start_xmit: lec0:No lecd attached [ 747.724661][T27848] netlink: 'syz.3.5867': attribute type 1 has an invalid length. [ 747.750623][T27852] netlink: 'syz.1.5869': attribute type 1 has an invalid length. [ 747.763140][T27848] netlink: 'syz.3.5867': attribute type 1 has an invalid length. [ 747.788851][T27848] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.5867'. [ 747.947822][T27852] bond7: entered promiscuous mode [ 747.988204][T27852] 8021q: adding VLAN 0 to HW filter on device bond7 [ 748.028329][T27863] bond1: option mode: unable to set because the bond device has slaves [ 748.069670][T27863] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 748.986917][T27912] sctp: [Deprecated]: syz.0.5886 (pid 27912) Use of int in max_burst socket option. [ 748.986917][T27912] Use struct sctp_assoc_value instead [ 749.231977][T27922] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5891'. [ 749.487933][T27937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5892'. [ 749.529481][T27937] hsr_slave_0: left promiscuous mode [ 749.820435][T27954] netlink: 'syz.4.5897': attribute type 1 has an invalid length. [ 749.832351][T27956] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 749.887689][T27956] netlink: 'syz.1.5898': attribute type 64 has an invalid length. [ 750.073547][T27970] syzkaller1: entered promiscuous mode [ 750.080303][T27970] syzkaller1: entered allmulticast mode [ 750.180459][T27975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5903'. [ 750.301739][T27979] tipc: Enabled bearer , priority 0 [ 750.338922][T27981] syzkaller0: entered promiscuous mode [ 750.377693][T27981] syzkaller0: entered allmulticast mode [ 750.482292][T27987] netlink: 'syz.4.5906': attribute type 10 has an invalid length. [ 750.511047][T27993] openvswitch: netlink: IPv4 tun info is not correct [ 750.548115][T27981] tipc: Resetting bearer [ 750.638029][T27981] tipc: Disabling bearer [ 750.652751][T28001] TCP: TCP_TX_DELAY enabled [ 751.025589][T28021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5914'. [ 751.071406][T28027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5915'. [ 751.079841][T28020] netlink: 'syz.4.5913': attribute type 3 has an invalid length. [ 751.108881][T28020] netlink: 'syz.4.5913': attribute type 3 has an invalid length. [ 751.600287][T28046] netlink: 'syz.0.5921': attribute type 1 has an invalid length. [ 751.708067][T28046] 8021q: adding VLAN 0 to HW filter on device bond7 [ 751.734409][T28046] syzkaller1: entered promiscuous mode [ 751.749482][T28046] syzkaller1: entered allmulticast mode [ 751.758244][T28052] __nla_validate_parse: 34 callbacks suppressed [ 751.758278][T28052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5923'. [ 752.097473][T28062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5927'. [ 752.123905][T28061] tipc: Enabling of bearer rejected, failed to enable media [ 752.164663][T28062] gretap1: entered promiscuous mode [ 752.176618][T28062] gretap1: entered allmulticast mode [ 752.204691][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 752.598221][T28081] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 752.685252][T28083] syzkaller0: entered promiscuous mode [ 752.706539][T28083] syzkaller0: entered allmulticast mode [ 752.753990][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 752.762969][ C0] lec:lec_tx_timeout: lec0 [ 752.868297][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 752.884617][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 752.896242][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 752.907050][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 752.922167][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 753.055331][T28092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5938'. [ 753.245490][T28097] openvswitch: netlink: IP tunnel dst address not specified [ 753.257469][T28100] netem: change failed [ 753.328430][T28097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5940'. [ 754.168974][T28127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.215160][T28131] xt_hashlimit: size too large, truncated to 1048576 [ 754.787866][T28084] chnl_net:caif_netlink_parms(): no params data found [ 754.954831][T28129] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 754.994609][ T5858] Bluetooth: hci4: command tx timeout [ 755.040313][T28161] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5958'. [ 755.079932][T28161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5958'. [ 755.267505][T28084] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.284877][T28084] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.293295][T28084] bridge_slave_0: entered allmulticast mode [ 755.308301][T28084] bridge_slave_0: entered promiscuous mode [ 755.318528][T28084] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.319304][T28177] netlink: 'syz.1.5961': attribute type 11 has an invalid length. [ 755.326750][T28084] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.327057][T28084] bridge_slave_1: entered allmulticast mode [ 755.372820][T28176] netlink: 'syz.1.5961': attribute type 11 has an invalid length. [ 755.384654][T28084] bridge_slave_1: entered promiscuous mode [ 755.649158][T28084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.677220][T28185] netlink: 'syz.4.5963': attribute type 17 has an invalid length. [ 755.692965][T28185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5963'. [ 755.702423][T28185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5963'. [ 755.713453][T28084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.921586][T28084] team0: Port device team_slave_0 added [ 755.930798][T28084] team0: Port device team_slave_1 added [ 755.982876][T28084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.993725][T28084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.026579][T28084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.062711][T28084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.079473][T28084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 756.123118][T28084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.194737][ T5858] Bluetooth: hci1: command 0x0406 tx timeout [ 756.239460][T28213] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5970'. [ 756.241968][T28084] hsr_slave_0: entered promiscuous mode [ 756.259284][T28084] hsr_slave_1: entered promiscuous mode [ 756.290519][T28211] gtp0: entered promiscuous mode [ 756.305390][T28211] gtp0: entered allmulticast mode [ 756.625941][T28224] bond0: Device is already in use. [ 756.962861][T28084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.976002][T28084] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.005351][T28242] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5974'. [ 757.074296][ T5858] Bluetooth: hci4: command tx timeout [ 757.180364][T28084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.192261][T28084] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.269887][T28257] netlink: 'syz.1.5979': attribute type 1 has an invalid length. [ 757.387582][T28084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.460677][T28084] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.492536][T28254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5978'. [ 757.527002][T28262] nbd0: detected capacity change from 0 to 63 [ 757.584703][ T5855] block nbd0: Receive control failed (result -104) [ 757.585770][ T5858] block nbd0: Receive control failed (result -32) [ 757.656060][T28084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.710536][T28084] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.838829][T28279] netlink: 'syz.3.5984': attribute type 11 has an invalid length. [ 758.108577][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5988'. [ 758.178381][T28284] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5986'. [ 758.280042][T28284] dummy0 (unregistering): left allmulticast mode [ 758.389308][T28292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5991'. [ 758.399860][T28297] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 758.554191][T28084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 758.608293][T28084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 758.648066][T28084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 758.687997][T28305] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5997'. [ 758.698064][T28084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 758.701265][T28084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 758.730637][T28084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 758.738644][T28307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5995'. [ 758.753420][T28084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 758.772825][T28084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.072164][T28084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.109949][T28084] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.145051][T26408] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.152232][T26408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.161518][ T5858] Bluetooth: hci4: command tx timeout [ 759.181611][T26408] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.188799][T26408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.969718][T28084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.109296][T28084] veth0_vlan: entered promiscuous mode [ 760.151442][T28376] tipc: Invalid UDP bearer configuration [ 760.151492][T28376] tipc: Enabling of bearer rejected, failed to enable media [ 760.179363][T28084] veth1_vlan: entered promiscuous mode [ 760.235737][T28084] veth0_macvtap: entered promiscuous mode [ 760.250305][T28084] veth1_macvtap: entered promiscuous mode [ 760.326185][T28084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.338010][T28380] netlink: 'syz.3.6014': attribute type 5 has an invalid length. [ 760.343446][T28084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.381831][T28381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6013'. [ 760.635836][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.657958][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.726342][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.749089][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.186124][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.225872][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.234849][ T5858] Bluetooth: hci4: command tx timeout [ 761.451286][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.497079][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.948187][T28439] xt_TCPMSS: Only works on TCP SYN packets [ 762.381789][T28450] netlink: 'syz.4.6034': attribute type 6 has an invalid length. [ 762.606550][T28458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6036'. [ 763.086410][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 763.102109][ T5855] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 763.116498][ T5855] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 763.146053][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 763.160019][ T5855] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 763.431501][T28461] syzkaller0: entered promiscuous mode [ 765.236325][ T5858] Bluetooth: hci5: command tx timeout [ 767.023618][T28501] vcan0: tx address claim with dest, not broadcast [ 767.090560][T28503] sch_fq: defrate 0 ignored. [ 767.315164][ T5858] Bluetooth: hci5: command tx timeout [ 767.417568][T28513] tipc: Started in network mode [ 767.426189][T28513] tipc: Node identity 229713352ce5, cluster identity 4711 [ 767.436063][T28513] tipc: Enabled bearer , priority 0 [ 767.546304][T28521] syzkaller0: entered promiscuous mode [ 767.552635][T28521] syzkaller0: entered allmulticast mode [ 767.561055][T28521] tipc: Resetting bearer [ 767.598124][T28520] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6050'. [ 767.624069][T28528] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6051'. [ 767.732708][T28521] tipc: Resetting bearer [ 767.770390][T28536] netlink: 'syz.2.6051': attribute type 1 has an invalid length. [ 767.790736][T28536] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6051'. [ 769.400401][ T5858] Bluetooth: hci5: command tx timeout [ 770.363196][T28521] tipc: Disabling bearer [ 770.510557][T28542] netlink: 1024 bytes leftover after parsing attributes in process `syz.0.6054'. [ 770.533649][ T5899] tipc: Node number set to 242357045 [ 770.640329][T28545] netlink: 284 bytes leftover after parsing attributes in process `syz.3.6055'. [ 770.853265][T28555] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6058'. [ 771.029529][T28468] chnl_net:caif_netlink_parms(): no params data found [ 771.031515][T28561] xt_hashlimit: overflow, try lower: 3/0 [ 771.178072][T28567] netlink: 'syz.4.6063': attribute type 1 has an invalid length. [ 771.187626][T28567] netlink: 'syz.4.6063': attribute type 4 has an invalid length. [ 771.200249][T28567] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6063'. [ 771.239347][T28567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6063'. [ 771.313141][T28561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.352052][T28561] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.388107][T28575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6065'. [ 771.475747][ T5858] Bluetooth: hci5: command tx timeout [ 771.775448][T28587] IPv6: NLM_F_CREATE should be specified when creating new route [ 771.796782][T28468] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.823273][T28468] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.854135][T28468] bridge_slave_0: entered allmulticast mode [ 771.890465][T28468] bridge_slave_0: entered promiscuous mode [ 771.989762][T28561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.023743][T28561] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.075152][T28468] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.098145][T28468] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.109342][T28468] bridge_slave_1: entered allmulticast mode [ 772.125600][T28468] bridge_slave_1: entered promiscuous mode [ 772.236474][T28561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.264449][T28561] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.369944][T28468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.479487][T28561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.507804][T28561] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.537132][T26408] nci: nci_ntf_packet: unknown ntf opcode 0x107 [ 772.557828][T28468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.609782][T28468] team0: Port device team_slave_0 added [ 772.641809][T28468] team0: Port device team_slave_1 added [ 772.791608][T28468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.823029][T28468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.895411][T28468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 772.931659][T28468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 772.944010][T28468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.957068][T28616] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6075'. [ 773.002889][T28468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.051696][T26408] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.072636][T26408] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.205651][T26424] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.226291][T26424] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.249019][T28621] netlink: 'syz.3.6077': attribute type 1 has an invalid length. [ 773.301074][T26424] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.312053][T26424] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.357472][T28621] bond16: entered promiscuous mode [ 773.363204][T28621] 8021q: adding VLAN 0 to HW filter on device bond16 [ 773.395383][T28468] hsr_slave_0: entered promiscuous mode [ 773.402359][T28468] hsr_slave_1: entered promiscuous mode [ 773.408916][T28468] debugfs: 'hsr0' already exists in 'hsr' [ 773.416226][T28468] Cannot create hsr debugfs directory [ 773.431454][T28622] macvtap1: entered allmulticast mode [ 773.448375][T26408] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 773.457071][T26408] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.480841][T28621] bond16: (slave bridge10): making interface the new active one [ 773.488904][T28621] bridge10: entered promiscuous mode [ 773.496556][T28621] bond16: (slave bridge10): Enslaving as an active interface with an up link [ 773.553494][T28627] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6078'. [ 773.767196][T28468] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.778441][T28468] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 773.872285][T28468] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.882460][T28468] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 773.944433][T28468] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.956555][T28468] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 774.025505][T28468] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.039424][T28468] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 775.451598][T28607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 775.466965][T28631] netlink: 'syz.0.6078': attribute type 9 has an invalid length. [ 775.514999][T28468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 775.611164][T28468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 775.650029][T28468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 775.706041][T28468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 775.740392][T28640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6081'. [ 775.767692][T28468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 775.810254][T28468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 775.829275][T28468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 775.868834][T28468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 776.148833][T28665] netlink: 'syz.0.6087': attribute type 16 has an invalid length. [ 776.160457][T28665] netlink: 'syz.0.6087': attribute type 17 has an invalid length. [ 776.161847][T26430] nci: nci_rx_work: unknown MT 0x7 [ 776.169736][T28665] lo: left promiscuous mode [ 776.186343][T28665] tunl0: left promiscuous mode [ 776.197428][T28665] gre0: left promiscuous mode [ 776.204499][T28665] gretap0: left promiscuous mode [ 776.216073][T28665] erspan0: left promiscuous mode [ 776.225308][T28665] ip_vti0: left promiscuous mode [ 776.253508][T28671] sctp: [Deprecated]: syz.4.6085 (pid 28671) Use of int in max_burst socket option deprecated. [ 776.253508][T28671] Use struct sctp_assoc_value instead [ 776.269885][T28665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 776.273268][T28670] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6088'. [ 776.303274][T28672] syzkaller0: entered promiscuous mode [ 776.310122][T28672] syzkaller0: entered allmulticast mode [ 776.399761][T28676] 8021q: VLANs not supported on syzkaller0 [ 776.465939][T28676] syzkaller0: left promiscuous mode [ 776.481855][T28676] syzkaller0: left allmulticast mode [ 776.520403][T28468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.595817][T28468] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.642301][T26430] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.650483][T26430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.687179][T26408] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.694404][T26408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.715238][T28684] ipt_REJECT: TCP_RESET invalid for non-tcp [ 776.738669][T28684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6093'. [ 777.030790][T28695] netlink: 'syz.0.6096': attribute type 1 has an invalid length. [ 777.107543][T28697] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6096'. [ 777.123276][T28697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6096'. [ 777.133633][T28697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6096'. [ 777.147562][T28695] 8021q: adding VLAN 0 to HW filter on device bond8 [ 777.225675][T28699] syzkaller0: entered promiscuous mode [ 777.231223][T28699] syzkaller0: entered allmulticast mode [ 779.007997][T28657] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.270043][T28707] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.6100'. [ 779.283807][T28707] netlink: Unknown conntrack attr (type=2304, max=9) [ 780.054804][T28468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.271621][T28468] veth0_vlan: entered promiscuous mode [ 780.325207][T28468] veth1_vlan: entered promiscuous mode [ 780.341978][T28721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6104'. [ 780.412336][T28725] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 780.437483][T28468] veth0_macvtap: entered promiscuous mode [ 780.467464][T28468] veth1_macvtap: entered promiscuous mode [ 780.551576][T28468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 780.609830][T28730] netlink: 'syz.0.6106': attribute type 105 has an invalid length. [ 780.618210][T28468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 780.634346][T28730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6106'. [ 780.657661][T26408] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.683051][T26408] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.721342][T26408] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.743467][T26408] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.020337][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.047095][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.266273][T28756] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6115'. [ 781.319549][T26429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.344215][T26429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.471335][T28763] xt_l2tp: invalid flags combination: 8 [ 781.532285][T28757] syzkaller0: entered promiscuous mode [ 781.538889][T28757] syzkaller0: entered allmulticast mode [ 781.545723][T26427] tipc: Subscription rejected, illegal request [ 782.076278][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 782.096725][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 782.120920][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 782.136253][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 782.146045][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 784.289104][ T5855] Bluetooth: hci0: command tx timeout [ 784.996127][ T5855] Bluetooth: hci2: command 0x0405 tx timeout [ 785.129137][T28775] tipc: Resetting bearer [ 785.170179][T28799] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6125'. [ 785.186388][T28775] tipc: Resetting bearer [ 785.395786][T28803] netlink: 'syz.3.6126': attribute type 1 has an invalid length. [ 785.719824][T28803] 8021q: adding VLAN 0 to HW filter on device bond17 [ 785.891999][T28808] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 785.937431][T28834] netlink: 'syz.1.6132': attribute type 1 has an invalid length. [ 785.948563][T28815] bond17: entered promiscuous mode [ 785.975800][T28815] bond17: entered allmulticast mode [ 786.055279][T28832] geneve2: entered promiscuous mode [ 786.369037][ T5858] Bluetooth: hci0: command tx timeout [ 786.442605][T28845] netlink: 'syz.4.6136': attribute type 4 has an invalid length. [ 786.600972][T28850] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6139'. [ 786.687426][T28853] netlink: 'syz.4.6140': attribute type 18 has an invalid length. [ 787.021096][T28862] netlink: 'syz.2.6141': attribute type 1 has an invalid length. [ 787.058948][T28862] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 787.119894][T28775] chnl_net:caif_netlink_parms(): no params data found [ 787.238530][T28876] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6146'. [ 787.309755][T28879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6147'. [ 787.352132][T28877] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6145'. [ 787.492894][T28895] netlink: 'syz.2.6147': attribute type 3 has an invalid length. [ 787.524810][T28895] netlink: 'syz.2.6147': attribute type 1 has an invalid length. [ 787.556992][T28898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6150'. [ 787.559811][T28895] netlink: 212 bytes leftover after parsing attributes in process `syz.2.6147'. [ 787.566454][T28898] openvswitch: netlink: IP tunnel TTL not specified. [ 787.568007][T28898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6150'. [ 787.598982][T28895] NCSI netlink: No device for ifindex 813332851 [ 787.625353][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6150'. [ 787.654667][T28899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6150'. [ 787.692070][T28775] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.704772][T28775] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.722282][T28775] bridge_slave_0: entered allmulticast mode [ 787.730674][T28775] bridge_slave_0: entered promiscuous mode [ 787.756671][T11007] IPVS: starting estimator thread 0... [ 787.825885][T28899] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 787.856677][T28899] bond18 (unregistering): Released all slaves [ 787.865162][T28903] IPVS: using max 31 ests per chain, 74400 per kthread [ 787.983040][T28775] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.014183][T28775] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.041263][ T5181] block nbd0: Connection timed out, retrying (0/2 alive) [ 788.048584][ T5181] block nbd0: Connection timed out, retrying (0/2 alive) [ 788.056486][ T5181] block nbd0: Connection timed out, retrying (0/2 alive) [ 788.063583][ T5181] block nbd0: Connection timed out, retrying (0/2 alive) [ 788.076701][ T5181] block nbd0: Dead connection, failed to find a fallback [ 788.086945][ T5181] block nbd0: shutting down sockets [ 788.092161][ T5181] blk_print_req_error: 138 callbacks suppressed [ 788.092175][ T5181] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.108498][ T5181] buffer_io_error: 138 callbacks suppressed [ 788.108512][ T5181] Buffer I/O error on dev nbd0, logical block 3, async page read [ 788.122747][ T5181] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.132628][ T5181] Buffer I/O error on dev nbd0, logical block 2, async page read [ 788.140607][ T5181] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.150117][ T5181] Buffer I/O error on dev nbd0, logical block 1, async page read [ 788.159180][ T5181] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.168581][ T5181] Buffer I/O error on dev nbd0, logical block 0, async page read [ 788.176717][T27378] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.186887][T28775] bridge_slave_1: entered allmulticast mode [ 788.205479][T28775] bridge_slave_1: entered promiscuous mode [ 788.211404][T27378] Buffer I/O error on dev nbd0, logical block 0, async page read [ 788.225416][T27378] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.237190][T27378] Buffer I/O error on dev nbd0, logical block 1, async page read [ 788.248340][T27378] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.268993][T27378] Buffer I/O error on dev nbd0, logical block 2, async page read [ 788.278176][T27378] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.287468][T27378] Buffer I/O error on dev nbd0, logical block 3, async page read [ 788.296233][T27378] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.306999][T27378] Buffer I/O error on dev nbd0, logical block 0, async page read [ 788.317031][T27378] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 788.327189][T27378] Buffer I/O error on dev nbd0, logical block 1, async page read [ 788.338228][T27378] ldm_validate_partition_table(): Disk read failed. [ 788.370995][T27378] Dev nbd0: unable to read RDB block 0 [ 788.396275][T27378] nbd0: unable to read partition table [ 788.435486][ T5858] Bluetooth: hci0: command tx timeout [ 788.447470][T27378] ldm_validate_partition_table(): Disk read failed. [ 788.475850][T27378] Dev nbd0: unable to read RDB block 0 [ 788.483543][T27378] nbd0: unable to read partition table [ 788.624542][T28930] syz.2.6154: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 788.641076][T28930] CPU: 1 UID: 0 PID: 28930 Comm: syz.2.6154 Not tainted syzkaller #0 PREEMPT(full) [ 788.641100][T28930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 788.641121][T28930] Call Trace: [ 788.641128][T28930] [ 788.641135][T28930] dump_stack_lvl+0xe8/0x150 [ 788.641166][T28930] warn_alloc+0x249/0x340 [ 788.641190][T28930] ? stack_trace_save+0xa9/0x100 [ 788.641216][T28930] ? __pfx_warn_alloc+0x10/0x10 [ 788.641243][T28930] ? kasan_save_track+0x4f/0x80 [ 788.641262][T28930] ? kasan_save_track+0x3e/0x80 [ 788.641280][T28930] ? __kasan_kmalloc+0x93/0xb0 [ 788.641299][T28930] ? __kmalloc_cache_noprof+0x31c/0x660 [ 788.641319][T28930] ? xskq_create+0x56/0x170 [ 788.641339][T28930] ? xsk_setsockopt+0x54c/0x990 [ 788.641357][T28930] ? do_sock_setsockopt+0x17c/0x1b0 [ 788.641375][T28930] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 788.641391][T28930] ? do_syscall_64+0x15f/0xf80 [ 788.641419][T28930] __vmalloc_node_range_noprof+0x132/0x1750 [ 788.641474][T28930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 788.641502][T28930] ? __kasan_kmalloc+0x93/0xb0 [ 788.641529][T28930] vmalloc_user_noprof+0xad/0xe0 [ 788.641550][T28930] ? xskq_create+0xbf/0x170 [ 788.641572][T28930] xskq_create+0xbf/0x170 [ 788.641596][T28930] xsk_init_queue+0x8a/0xe0 [ 788.641619][T28930] xsk_setsockopt+0x54c/0x990 [ 788.641642][T28930] ? __pfx_xsk_setsockopt+0x10/0x10 [ 788.641663][T28930] ? __pfx_aa_sk_perm+0x10/0x10 [ 788.641693][T28930] ? aa_sock_opt_perm+0xff/0x1a0 [ 788.641715][T28930] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 788.641736][T28930] ? __pfx_xsk_setsockopt+0x10/0x10 [ 788.641757][T28930] do_sock_setsockopt+0x17c/0x1b0 [ 788.641781][T28930] __x64_sys_setsockopt+0x13d/0x1b0 [ 788.641807][T28930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.641825][T28930] do_syscall_64+0x15f/0xf80 [ 788.641848][T28930] ? trace_irq_disable+0x3b/0x140 [ 788.641871][T28930] ? clear_bhb_loop+0x40/0x90 [ 788.641893][T28930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.641911][T28930] RIP: 0033:0x7fd4ac59cdd9 [ 788.641927][T28930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.641942][T28930] RSP: 002b:00007fd4ad452028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 788.641960][T28930] RAX: ffffffffffffffda RBX: 00007fd4ac815fa0 RCX: 00007fd4ac59cdd9 [ 788.641973][T28930] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 788.641983][T28930] RBP: 00007fd4ac632d69 R08: 0000000000000004 R09: 0000000000000000 [ 788.641994][T28930] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.642005][T28930] R13: 00007fd4ac816038 R14: 00007fd4ac815fa0 R15: 00007ffef6628858 [ 788.642035][T28930] [ 788.642119][T28930] Mem-Info: [ 788.726221][T28919] syzkaller0: entered promiscuous mode [ 788.733079][T28930] active_anon:6566 inactive_anon:0 isolated_anon:0 [ 788.733079][T28930] active_file:2757 inactive_file:40376 isolated_file:0 [ 788.733079][T28930] unevictable:768 dirty:75 writeback:0 [ 788.733079][T28930] slab_reclaimable:12458 slab_unreclaimable:134880 [ 788.733079][T28930] mapped:35553 shmem:1374 pagetables:1441 [ 788.733079][T28930] sec_pagetables:0 bounce:0 [ 788.733079][T28930] kernel_misc_reclaimable:0 [ 788.733079][T28930] free:1281198 free_pcp:7450 free_cma:0 [ 788.734392][T28919] syzkaller0: entered allmulticast mode [ 788.743639][T28930] Node 0 active_anon:26264kB inactive_anon:0kB active_file:11028kB inactive_file:161300kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142212kB dirty:300kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17252kB pagetables:5628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 788.933227][T28775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.990006][T28930] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 789.039529][T28775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.070424][T28930] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 789.070488][T28930] lowmem_reserve[]: 0 2491 2491 2491 2491 [ 789.070530][T28930] Node 0 DMA32 free:1165508kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26232kB inactive_anon:0kB active_file:11028kB inactive_file:161300kB unevictable:1536kB writepending:300kB zspages:0kB present:3129332kB managed:2550864kB mlocked:0kB bounce:0kB free_pcp:21572kB local_pcp:10824kB free_cma:0kB [ 789.070588][T28930] lowmem_reserve[]: 0 0 0 0 0 [ 789.070626][T28930] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:588kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 789.189617][T28930] lowmem_reserve[]: 0 0 0 0 0 [ 789.194463][T28930] Node 1 Normal free:3943796kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8060kB local_pcp:8060kB free_cma:0kB [ 789.227233][T28930] lowmem_reserve[]: 0 0 0 0 0 [ 789.232029][T28930] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 789.245725][T28930] Node 0 DMA32: 11971*4kB (UME) 7379*8kB (UME) 3866*16kB (UM) 393*32kB (UME) 305*64kB (UM) 318*128kB (UM) 533*256kB (UME) 323*512kB (UME) 209*1024kB (UME) 73*2048kB (UM) 63*4096kB (UM) = 1164964kB [ 789.266927][T28930] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 789.279084][T28930] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (M) = 3943796kB [ 789.297129][T28930] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 789.311684][T28930] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 789.330339][T28930] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 789.340234][T28930] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 789.352886][T28930] 44503 total pagecache pages [ 789.358808][T28930] 0 pages in swap cache [ 789.363046][T28930] Free swap = 124996kB [ 789.367351][T28930] Total swap = 124996kB [ 789.371600][T28930] 2097051 pages RAM [ 789.375822][T28930] 0 pages HighMem/MovableOnly [ 789.380577][T28930] 427573 pages reserved [ 789.386055][T28930] 0 pages cma reserved [ 790.515814][ T5858] Bluetooth: hci0: command tx timeout [ 791.998940][T28775] team0: Port device team_slave_0 added [ 792.035266][T28775] team0: Port device team_slave_1 added [ 792.192724][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6162'. [ 792.221866][T28775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.229884][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6162'. [ 792.242020][T28775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.287726][T28775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.291130][T28955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6161'. [ 792.300918][T28775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.325691][T28775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.352869][T28956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6160'. [ 792.371559][T28775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.662868][T28958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 792.692679][T28958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.815446][T28775] hsr_slave_0: entered promiscuous mode [ 792.822766][T28775] hsr_slave_1: entered promiscuous mode [ 792.832225][T28775] debugfs: 'hsr0' already exists in 'hsr' [ 792.855899][T28775] Cannot create hsr debugfs directory [ 792.861826][T28956] syzkaller0: entered promiscuous mode [ 792.868951][T28956] syzkaller0: entered allmulticast mode [ 793.039877][T28980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6168'. [ 793.043236][T28958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.091014][T28958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.092208][T28979] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6168'. [ 793.149014][T28982] netlink: 'syz.2.6169': attribute type 1 has an invalid length. [ 793.156917][T28979] xt_policy: neither incoming nor outgoing policy selected [ 793.190022][T28984] netlink: 'syz.4.6170': attribute type 3 has an invalid length. [ 793.202925][T28984] netlink: 'syz.4.6170': attribute type 1 has an invalid length. [ 793.213010][T28984] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6170'. [ 793.317355][T28982] bond1: entered promiscuous mode [ 793.323418][T28982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 793.421742][T28991] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6171'. [ 793.439705][T28958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.460731][T28958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.503671][T28986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 793.511717][T28986] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 793.523084][T28994] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 793.532368][T28986] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 793.542337][T28994] netlink: 'syz.1.6173': attribute type 21 has an invalid length. [ 793.553725][T28986] bond1: (slave ip6gre1): making interface the new active one [ 793.562024][T28986] ip6gre1: entered promiscuous mode [ 793.568939][T28986] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 793.602382][T28993] 8021q: VLANs not supported on lo [ 793.697046][T28958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 793.713588][T28997] netlink: 'syz.2.6174': attribute type 2 has an invalid length. [ 793.729656][T28958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.746226][T28997] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6174'. [ 793.766010][T29000] SET target dimension over the limit! [ 793.775855][T28994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6173'. [ 794.308041][T26430] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.324894][T26430] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.392339][T28775] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.407914][T28775] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.421703][T29021] netlink: 'syz.1.6181': attribute type 11 has an invalid length. [ 794.453757][T26431] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 794.463181][T26431] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.529815][T28775] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.555894][T28775] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.883096][T28775] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.908377][T28775] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.001557][T26431] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.027929][T26431] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.129441][T28775] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 795.152188][T28775] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.204825][T26424] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 795.224224][T26424] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.700038][T29060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 795.749272][T28775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 795.766916][T28775] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 795.785421][T28775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 795.821763][T28775] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 795.833830][T28775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 795.885036][T28775] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 795.901848][T28775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 795.939504][T28775] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 796.316877][T28775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 796.382157][T28775] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.436946][T26403] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.444141][T26403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.526734][T26408] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.534810][T26408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 797.096339][T29123] IPv6: addrconf: prefix option has invalid lifetime [ 797.118236][T29124] IPv6: addrconf: prefix option has invalid lifetime [ 797.182575][T28775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.356248][T29135] __nla_validate_parse: 7 callbacks suppressed [ 797.356267][T29135] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6201'. [ 797.467703][T29137] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6202'. [ 797.501024][T28775] veth0_vlan: entered promiscuous mode [ 797.507734][T29144] netlink: 'syz.1.6205': attribute type 8 has an invalid length. [ 797.539214][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6205'. [ 797.657066][T29148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6207'. [ 797.671357][T29144] bond0: entered promiscuous mode [ 797.677152][T29144] bond_slave_0: entered promiscuous mode [ 797.684831][T29144] bond_slave_1: entered promiscuous mode [ 797.692638][T29144] gretap0: entered promiscuous mode [ 797.700066][T29144] bond0: left promiscuous mode [ 797.705441][T29144] bond_slave_0: left promiscuous mode [ 797.711028][T29144] bond_slave_1: left promiscuous mode [ 797.720239][T29144] gretap0: left promiscuous mode [ 797.769187][T28775] veth1_vlan: entered promiscuous mode [ 797.793599][T29150] syzkaller0: entered promiscuous mode [ 797.807826][T29150] syzkaller0: entered allmulticast mode [ 797.920122][T28775] veth0_macvtap: entered promiscuous mode [ 797.993148][T29156] tipc: Started in network mode [ 798.010909][T29156] tipc: Node identity 52eacc91c93f, cluster identity 4711 [ 798.021647][T29156] tipc: Enabled bearer , priority 11 [ 798.081215][T28775] veth1_macvtap: entered promiscuous mode [ 798.189777][T28775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.243897][T28775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.312989][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.334845][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.360282][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.371031][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.495139][T29175] x_tables: duplicate underflow at hook 3 [ 798.854194][T29181] netlink: 'syz.4.6217': attribute type 3 has an invalid length. [ 798.861708][T26424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.887633][T26424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.122049][T29194] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 799.131099][T29198] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 799.189313][T29194] syzkaller0: entered promiscuous mode [ 799.191698][T29202] netlink: 'syz.2.6223': attribute type 1 has an invalid length. [ 799.205839][T29194] syzkaller0: entered allmulticast mode [ 799.239237][T11007] tipc: Node number set to 2614480017 [ 799.244886][T26403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.270647][T26403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.051895][T29230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6226'. [ 800.520931][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 800.537577][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 800.550570][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 800.561832][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 800.572382][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 800.663089][T29251] netlink: 'syz.2.6234': attribute type 4 has an invalid length. [ 800.777972][T29257] x_tables: unsorted underflow at hook 3 [ 800.786935][T29257] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 801.730598][T29295] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 801.763131][T29294] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 802.032091][T29314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6252'. [ 802.070604][T29314] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6252'. [ 802.102263][T29314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6252'. [ 802.181837][T29322] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 802.376083][T29247] chnl_net:caif_netlink_parms(): no params data found [ 802.674283][ T5858] Bluetooth: hci3: command tx timeout [ 802.760665][T29247] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.770727][T29247] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.779499][T29247] bridge_slave_0: entered allmulticast mode [ 802.793764][T29247] bridge_slave_0: entered promiscuous mode [ 802.818301][T29247] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.826439][T29247] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.835454][T29247] bridge_slave_1: entered allmulticast mode [ 802.844732][T29247] bridge_slave_1: entered promiscuous mode [ 803.063717][T29247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.091371][T29247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.178334][T29247] team0: Port device team_slave_0 added [ 803.188714][T29362] netlink: 'syz.2.6264': attribute type 5 has an invalid length. [ 803.227300][T29247] team0: Port device team_slave_1 added [ 803.472035][T29369] vlan2: entered allmulticast mode [ 803.479551][T29369] hsr0: entered allmulticast mode [ 803.488100][T29369] hsr_slave_0: entered allmulticast mode [ 803.493900][T29369] hsr_slave_1: entered allmulticast mode [ 803.538727][T29247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.565641][T29247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.642157][T29247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.694751][T29247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.703098][T29247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.734766][T29247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.886630][T29384] netlink: 'syz.0.6271': attribute type 2 has an invalid length. [ 803.896500][T29384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6271'. [ 804.007609][T29247] hsr_slave_0: entered promiscuous mode [ 804.023092][T29247] hsr_slave_1: entered promiscuous mode [ 804.032370][T29247] debugfs: 'hsr0' already exists in 'hsr' [ 804.051577][T29247] Cannot create hsr debugfs directory [ 804.052029][T29394] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6271'. [ 804.211026][T17076] lec:lec_start_xmit: lec0:No lecd attached [ 804.298202][T29403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6277'. [ 804.359462][T29403] [ 804.361822][T29403] ====================================================== [ 804.368839][T29403] WARNING: possible circular locking dependency detected [ 804.375861][T29403] syzkaller #0 Not tainted [ 804.380272][T29403] ------------------------------------------------------ [ 804.387288][T29403] syz.4.6277/29403 is trying to acquire lock: [ 804.393354][T29403] ffffffff8ff61938 (nr_node_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 804.399894][T29407] base_sock_release(ffff88807edbaa40) sk=ffff888054aaa000 [ 804.402853][T29403] [ 804.402853][T29403] but task is already holding lock: [ 804.402863][T29403] ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 804.402915][T29403] [ 804.402915][T29403] which lock already depends on the new lock. [ 804.402915][T29403] [ 804.402923][T29403] [ 804.402923][T29403] the existing dependency chain (in reverse order) is: [ 804.402931][T29403] [ 804.402931][T29403] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 804.402962][T29403] _raw_spin_lock_bh+0x36/0x50 [ 804.402987][T29403] nr_rt_ioctl+0x40c/0xf90 [ 804.403004][T29403] sock_do_ioctl+0x101/0x320 [ 804.403028][T29403] sock_ioctl+0x5c6/0x7f0 [ 804.474370][T29403] __se_sys_ioctl+0xfc/0x170 [ 804.479500][T29403] do_syscall_64+0x15f/0xf80 [ 804.484619][T29403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.491035][T29403] [ 804.491035][T29403] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 804.499037][T29403] _raw_spin_lock_bh+0x36/0x50 [ 804.504331][T29403] nr_rt_ioctl+0x215/0xf90 [ 804.509270][T29403] sock_do_ioctl+0x101/0x320 [ 804.514390][T29403] sock_ioctl+0x5c6/0x7f0 [ 804.519243][T29403] __se_sys_ioctl+0xfc/0x170 [ 804.524368][T29403] do_syscall_64+0x15f/0xf80 [ 804.529497][T29403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.535914][T29403] [ 804.535914][T29403] -> #0 (nr_node_list_lock){+.-.}-{3:3}: [ 804.543749][T29403] __lock_acquire+0x15a5/0x2cf0 [ 804.549142][T29403] lock_acquire+0x106/0x350 [ 804.554183][T29403] _raw_spin_lock_bh+0x36/0x50 [ 804.559477][T29403] nr_rt_device_down+0xbe/0x860 [ 804.564858][T29403] nr_device_event+0x137/0x150 [ 804.570164][T29403] notifier_call_chain+0x1ad/0x3d0 [ 804.575812][T29403] netif_close_many+0x2ae/0x420 [ 804.581194][T29403] netif_close+0x160/0x220 [ 804.586142][T29403] dev_close+0x10a/0x220 [ 804.590906][T29403] bpq_device_event+0x377/0x6a0 [ 804.596289][T29403] notifier_call_chain+0x1ad/0x3d0 [ 804.601931][T29403] __dev_notify_flags+0x16d/0x310 [ 804.607484][T29403] netif_change_flags+0xe8/0x1a0 [ 804.612943][T29403] dev_change_flags+0x130/0x270 [ 804.618319][T29403] dev_ioctl+0x7b4/0x1150 [ 804.623182][T29403] sock_do_ioctl+0x23e/0x320 [ 804.628301][T29403] sock_ioctl+0x5c6/0x7f0 [ 804.633160][T29403] __se_sys_ioctl+0xfc/0x170 [ 804.638282][T29403] do_syscall_64+0x15f/0xf80 [ 804.643408][T29403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.649835][T29403] [ 804.649835][T29403] other info that might help us debug this: [ 804.649835][T29403] [ 804.660060][T29403] Chain exists of: [ 804.660060][T29403] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 804.660060][T29403] [ 804.673900][T29403] Possible unsafe locking scenario: [ 804.673900][T29403] [ 804.681351][T29403] CPU0 CPU1 [ 804.686718][T29403] ---- ---- [ 804.692081][T29403] lock(nr_neigh_list_lock); [ 804.696776][T29403] lock(&nr_node->node_lock); [ 804.704064][T29403] lock(nr_neigh_list_lock); [ 804.711270][T29403] lock(nr_node_list_lock); [ 804.715864][T29403] [ 804.715864][T29403] *** DEADLOCK *** [ 804.715864][T29403] [ 804.724003][T29403] 2 locks held by syz.4.6277/29403: [ 804.729196][T29403] #0: ffffffff8fde4240 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 804.738013][T29403] #1: ffffffff8ff618d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 804.748042][T29403] [ 804.748042][T29403] stack backtrace: [ 804.753929][T29403] CPU: 1 UID: 0 PID: 29403 Comm: syz.4.6277 Not tainted syzkaller #0 PREEMPT(full) [ 804.753953][T29403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 804.753966][T29403] Call Trace: [ 804.753974][T29403] [ 804.753982][T29403] dump_stack_lvl+0xe8/0x150 [ 804.754017][T29403] print_circular_bug+0x2e1/0x300 [ 804.754042][T29403] check_noncircular+0x12e/0x150 [ 804.754067][T29403] __lock_acquire+0x15a5/0x2cf0 [ 804.754101][T29403] ? __lock_acquire+0x6b5/0x2cf0 [ 804.754139][T29403] ? dsa_user_netdevice_event+0x495/0x2850 [ 804.754164][T29403] ? packet_notifier+0x121/0xf70 [ 804.754191][T29403] ? nr_rt_device_down+0xbe/0x860 [ 804.754208][T29403] lock_acquire+0x106/0x350 [ 804.754238][T29403] ? nr_rt_device_down+0xbe/0x860 [ 804.754258][T29403] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 804.754288][T29403] ? nr_rt_device_down+0xbe/0x860 [ 804.754307][T29403] _raw_spin_lock_bh+0x36/0x50 [ 804.754330][T29403] ? nr_rt_device_down+0xbe/0x860 [ 804.754347][T29403] nr_rt_device_down+0xbe/0x860 [ 804.754364][T29403] ? nr_device_event+0x12f/0x150 [ 804.754397][T29403] nr_device_event+0x137/0x150 [ 804.754426][T29403] notifier_call_chain+0x1ad/0x3d0 [ 804.754451][T29403] netif_close_many+0x2ae/0x420 [ 804.754479][T29403] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 804.754506][T29403] ? __pfx_netif_close_many+0x10/0x10 [ 804.754534][T29403] ? bond_netdev_event+0x231/0xfa0 [ 804.754562][T29403] ? __neigh_ifdown+0x7fd/0x8c0 [ 804.754591][T29403] netif_close+0x160/0x220 [ 804.754618][T29403] ? __pfx_netif_close+0x10/0x10 [ 804.754645][T29403] ? __asan_memset+0x22/0x50 [ 804.754665][T29403] ? macvtap_device_event+0xd1/0x400 [ 804.754688][T29403] dev_close+0x10a/0x220 [ 804.754708][T29403] bpq_device_event+0x377/0x6a0 [ 804.754734][T29403] notifier_call_chain+0x1ad/0x3d0 [ 804.754759][T29403] __dev_notify_flags+0x16d/0x310 [ 804.754780][T29403] ? __pfx___dev_notify_flags+0x10/0x10 [ 804.754799][T29403] ? __dev_change_flags+0x5a0/0x7e0 [ 804.754821][T29403] ? __pfx___dev_change_flags+0x10/0x10 [ 804.754843][T29403] ? full_name_hash+0x92/0xe0 [ 804.754863][T29403] netif_change_flags+0xe8/0x1a0 [ 804.754886][T29403] dev_change_flags+0x130/0x270 [ 804.754906][T29403] dev_ioctl+0x7b4/0x1150 [ 804.754937][T29403] sock_do_ioctl+0x23e/0x320 [ 804.754965][T29403] ? __pfx_sock_do_ioctl+0x10/0x10 [ 804.754989][T29403] ? do_futex+0x395/0x420 [ 804.755016][T29403] sock_ioctl+0x5c6/0x7f0 [ 804.755041][T29403] ? __pfx_sock_ioctl+0x10/0x10 [ 804.755065][T29403] ? __fget_files+0x2a/0x420 [ 804.755083][T29403] ? __fget_files+0x3a0/0x420 [ 804.755101][T29403] ? __fget_files+0x2a/0x420 [ 804.755153][T29403] ? bpf_lsm_file_ioctl+0x9/0x20 [ 804.755179][T29403] ? __pfx_sock_ioctl+0x10/0x10 [ 804.755202][T29403] __se_sys_ioctl+0xfc/0x170 [ 804.755229][T29403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.755249][T29403] do_syscall_64+0x15f/0xf80 [ 804.755276][T29403] ? trace_irq_disable+0x3b/0x140 [ 804.755302][T29403] ? clear_bhb_loop+0x40/0x90 [ 804.755324][T29403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.755344][T29403] RIP: 0033:0x7fa1d979cdd9 [ 804.755361][T29403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.755379][T29403] RSP: 002b:00007fa1da68c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 804.755399][T29403] RAX: ffffffffffffffda RBX: 00007fa1d9a15fa0 RCX: 00007fa1d979cdd9 [ 804.755415][T29403] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000005 [ 804.755428][T29403] RBP: 00007fa1d9832d69 R08: 0000000000000000 R09: 0000000000000000 [ 804.755441][T29403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.755452][T29403] R13: 00007fa1d9a16038 R14: 00007fa1d9a15fa0 R15: 00007ffdcca2fb18 [ 804.755476][T29403] [ 804.765203][ T5858] Bluetooth: hci3: command tx timeout [ 805.162915][T29247] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.174558][T29247] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.236901][T29247] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.259029][T29247] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.301213][T29247] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.312955][T29247] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.383572][T29247] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 805.398993][T29247] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.548381][T29247] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 805.560979][T29247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 805.571090][T29247] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 805.582333][T29247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 805.591346][T29247] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 805.604787][T29247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.613566][T29247] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 805.625238][T29247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 805.723439][T29247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.751487][T29247] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.766724][T26431] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.774259][T26431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.807498][T26431] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.815029][T26431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 806.018147][T29247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.057863][T29247] veth0_vlan: entered promiscuous mode [ 806.068476][T29247] veth1_vlan: entered promiscuous mode [ 806.095714][T29247] veth0_macvtap: entered promiscuous mode [ 806.105052][T29247] veth1_macvtap: entered promiscuous mode [ 806.122570][T29247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.137221][T29247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.151124][T26427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.160637][T26427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.171881][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.185179][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.211832][T29247] ieee80211 phy68: Selected rate control algorithm 'minstrel_ht' [ 806.240787][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.246869][T29247] ieee80211 phy69: Selected rate control algorithm 'minstrel_ht' [ 806.250816][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.280864][T26427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.290904][T26427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.245364][ T5858] Bluetooth: hci3: command tx timeout [ 808.519859][ T1314] clip:clip_start_xmit: skb_dst(skb) == NULL [ 809.314566][ T5858] Bluetooth: hci3: command tx timeout [ 809.714450][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 809.722862][ C0] lec:lec_tx_timeout: lec0 [ 809.727778][ C0] lec:lec_start_xmit: lec0:No lecd attached