last executing test programs: 2m29.60566888s ago: executing program 3 (id=7542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x4, 0x7, 0x5}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x5c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 2m29.551466112s ago: executing program 3 (id=7543): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x2e, 0x61, 0x61]}}, 0x0, 0x52}, 0x20) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @val={0x2, 0x1, 0x3, 0x4, 0x6, 0x75}, @ipv4=@udp={{0x8, 0x4, 0x0, 0x6, 0xcf, 0x64, 0x0, 0x2, 0x11, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xa5, 0x3, 0xb, [{@multicast2, 0x5f}]}]}}, {0xd, 0x4e23, 0xaf, 0x0, @opaque="19028cc4c39ce28a9bcf9ea8fca7108dff35b688f4ecf70c9dc27d9236a8f260957d6b0443764510d9ac3fd0e8d1c21874def50e62fb8e0997b7db3ad3128c5e498348716fa457d4b555070014b2b512c1f3c4ef63eea93cab2696a32ea996620191a7d3cc9bb52b489ca0e9efb7e3378c8b9cd0f203e616e633d2c6e5326c706bc84f0a3f08e428660103016d11d7bf71b822ffa6dc757c0488bc639539891036383c615f10ed"}}}, 0xd9) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}, {0x14}}}, 0x30}}, 0x0) 2m29.411584418s ago: executing program 3 (id=7545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="18000000122f01"], 0x18}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="fa0125952f583df41591d39078e664ae84e38577fc", @ANYRES16=r6, @ANYBLOB="0100feffffff0000000001000000040007800c000200ffff000000000000"], 0x24}}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100030000000000001401000000040007800c00020081000000000000000c0006000200000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r10) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x2000c840) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r9, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x80, r11, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x0, 0x5e}}}}, [@NL80211_ATTR_IE={0x4b, 0x2a, [@prep={0x83, 0x1f, {{}, 0x8, 0x3, @broadcast, 0x6, @void, 0xfff, 0x0, @device_a, 0x4}}, @challenge={0x10, 0x1, 0xe0}, @cf={0x4, 0x6, {0x8, 0xa, 0x3c5f, 0x9}}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0xf9}}, @peer_mgmt={0x75, 0x14, {0x1, 0x6, @void, @void, @val="3b21612e355efa6859f251525b333212"}}]}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x79, 0xb6, 0x5}}]}]}, 0x80}}, 0x80) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xfc41}], 0x1}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aa59f4607fb54a0c0175020000000000a010800000000fc0900010073797a30000000004c000000030a0101000000000000000001000000a700030073797a3004000000000000000800024000000000080001400000000018000480140003000000000000000000000000000000000050000000060a010400000000000100000100000028000480240001800b002100736f636b65740000140002800800024000000001080001400000000008000b4000000000090073797a30000000001c22b6a1a3bf6cb3000000000000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m29.247592099s ago: executing program 3 (id=7548): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x700, 0x700, 0x8, 0xffffff89, {{0x1a, 0x4, 0x3, 0x18, 0x68, 0x65, 0x0, 0x2, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @local, {[@timestamp={0x44, 0x10, 0x75, 0x0, 0x7, [0x7, 0xd, 0x3]}, @timestamp_addr={0x44, 0xc, 0x79, 0x1, 0x6, [{@multicast1, 0xe}]}, @timestamp_prespec={0x44, 0x24, 0x27, 0x3, 0x8, [{@loopback, 0x6}, {@loopback, 0x2aa}, {@rand_addr=0x64010100, 0xb30}, {@broadcast, 0x8}]}, @end, @timestamp_addr={0x44, 0xc, 0xc4, 0x1, 0xe, [{@local, 0xbcd}]}, @ssrr={0x89, 0x7, 0xf5, [@multicast1]}]}}}}}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) socket$tipc(0x1e, 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000080)) ioctl$sock_netdev_private(r1, 0x89f3, &(0x7f0000000000)) 2m29.230138476s ago: executing program 3 (id=7550): r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2m29.074490893s ago: executing program 3 (id=7553): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, &(0x7f0000000040)) 2m14.055509225s ago: executing program 32 (id=7553): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r0, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, &(0x7f0000000040)) 2.218340983s ago: executing program 4 (id=9503): r0 = socket(0x10, 0x3, 0x0) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xa5, 0x1, 0x49}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) 2.089012037s ago: executing program 4 (id=9506): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000002d"], 0x44}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000180001002cbd7000000000002d"], 0x44}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) bind$inet6(r1, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) 1.968960061s ago: executing program 5 (id=9509): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="0c6c1ea15299dc357247381c70ae444b5abebf92a9523b1476ec48503a7768dc0abbf7089d4ce2f0612ef996502bdcb94a98db06c5cdd295f83dd3e6584268d8", 0x40}, {&(0x7f0000000080)="816127b5b2975b214f313d457c4c3e7c0a9b5c445226d73a6ce1471b4ae469be5b0e4c043ece682f2fc2f6802b01a72a74306614588f4c144f20ed1eb71f8ad1ef5353650f24854d36ca4f522592807b45af4ea229a3a456739b9e48a1967ad979", 0x61}], 0x2, &(0x7f0000000140)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}], 0x48}, 0x8001) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x6) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000400)=0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x101100, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, r2, 0x25, 0x8, @val=@iter={&(0x7f0000000480)=@task={r4, r5, r6}, 0x10}}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x158, r7, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x144, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xb61}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x900000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xae}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe8d0}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xd35}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x42a}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x828a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x200}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4f97}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xcc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4d}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x798a71cd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x840}, 0x40040) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xfe27, '\x00', r2, r3, 0x5, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000008c0)=""/126, &(0x7f0000000940)=0x7e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0xe8, &(0x7f0000000980)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x8}, @in6={0xa, 0x4e22, 0xe, @rand_addr=' \x01\x00', 0x2}, @in6={0xa, 0x4e23, 0x10001, @loopback, 0x8c6}, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x4, 0x0}}, @in6={0xa, 0x4e24, 0x3, @mcast2, 0x7}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x37}, 0x5}]}, &(0x7f0000000ac0)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000b00)=r9, 0x4) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000b40)={'hsr0\x00', {0x2, 0x0, @dev}}) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r7, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x2000010) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000d40)=0x115114, 0x4) r11 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000dc0), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x64, r11, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xfffffc00, 0x7]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x2, 0x9, 0x9, 0x2]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffff5f}]}, 0x64}, 0x1, 0x0, 0x0, 0x48015}, 0x10) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000f00)) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000f40)={r1}) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x2c, r12, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xa9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x44) 1.911682093s ago: executing program 4 (id=9510): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x101, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x10, 0xfff3}, {0x3, 0x6}, {0x5, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x4000810) 1.888327373s ago: executing program 2 (id=9511): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c0000009500000000000000ee5e0f5b95b59ab8f633a7f69540c9fa677772d42ba0657513e6c01600291a06ee90c39e0935704e37ea3eaa351a540db5825fa21c126e2fc61a8c3d44e2d272d6c9ba746c0bce9f52a5f75fc034ef2c2011b6cf66704dcbcad2d5733c47006fb0b835edc49af4158baa8f9ead6c9249b9a92fea"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)) 1.733204608s ago: executing program 5 (id=9515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b02"], 0x0, 0x4a}, 0x20) (async) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000240)="a92e81d0991808e3199f42e64cf023df", 0x10}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111cc000000000006000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0xf, 0xd2, &(0x7f00000006c0)=""/210, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x3}, 0x10}, 0x94) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="7800000018002507b9409b14ffff00000204be04020b06050e060909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16ff3959547f5090587529b2037616ec0fa4f872ba86c902000000004a32000402160009000a0000000000e000e218d1ddf66ed538f25232504c48", 0x78, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0xc93accc5ebfd78e7, 0x70bd2a, 0x3, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x10) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x3, @empty, 0xfffd}, 0x1c) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000540)={{r3, &(0x7f0000000380)='{\x00', 0x140, &(0x7f00000003c0)={@align=0x7, {0x3, 0x22, 0x400, 0xd4f2}}, 0x8, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0x7}, {[0xc, 0x5, 0x6, 0x44b]}, 0x5, 0xbf, &(0x7f0000000480)=""/191}) (rerun: 32) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) poll(&(0x7f00000005c0)=[{r3, 0x400}, {r9, 0x81}, {r8, 0x20}, {r8, 0x1}, {r2, 0x2400}, {r3, 0x9040}, {r3, 0x20}, {r10, 0x2}], 0x8, 0x2) getsockname$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000340)=0x1c) (async) sendmsg$nl_generic(r9, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000002200)=ANY=[@ANYRESHEX=r0], 0x10f0}, 0x1, 0x0, 0x0, 0x4000800}, 0x5) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x10448) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) (rerun: 32) getsockopt$inet6_buf(r2, 0x29, 0xd2, 0x0, &(0x7f0000000140)) (async) getpeername$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={@mcast1, @mcast2, @mcast1, 0x0, 0x9d49, 0xfffe, 0x500, 0x0, 0x1000000, r11}) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r8) sendmsg$GTP_CMD_DELPDP(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r12, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.531746594s ago: executing program 4 (id=9518): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xd, &(0x7f0000000040)=[{&(0x7f00000004c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) 1.531077858s ago: executing program 2 (id=9519): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x2, 0x6, 0x660, 0x378, 0x378, 0xe0, 0x378, 0x468, 0x590, 0x590, 0x590, 0x590, 0x590, 0x6, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffffff, 0xffffff00, 0xff], [0xff, 0xff, 0xff000000, 0xffffff00], 'batadv0\x00', 'rose0\x00', {}, {0xff}, 0xff, 0x3, 0x0, 0x26}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x45, 0x1}, {0xfffd, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0xffffffff, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x138, 0x170, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@unspec=@rateest={{0x68}, {'pim6reg\x00', 'ip6_vti0\x00', 0x24, 0x0, 0x2, 0x2400000, 0x3, 0x8, {0x10000}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x0, 0x5}, {}, {0x87, 0x1, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x0, 0x7ff}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6c0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r6, 0xf5f) accept(r6, 0x0, 0x0) r8 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 1.477621516s ago: executing program 0 (id=9520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x26}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRESDEC=r2, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r0], 0x2c}}, 0x0) 1.454129912s ago: executing program 5 (id=9521): socket$kcm(0x10, 0x2, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060001000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 1.40282606s ago: executing program 4 (id=9523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newtaction={0x9c, 0x30, 0xb, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ct={0x84, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x7c}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev}, @TCA_CT_NAT_PORT_MIN={0x6}, @TCA_CT_NAT_PORT_MAX={0x6}, @TCA_CT_ACTION={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, &(0x7f0000000080)={r4, 0x2}, 0x8) (async, rerun: 32) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@null, 0x1, 'macvtap0\x00'}) (rerun: 32) 1.359233153s ago: executing program 0 (id=9524): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000300000008000400ac1414000800020000000000080001"], 0x2c}}, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000400)={{r0, &(0x7f0000000040)='&^++.}]\x00', 0x20a000, &(0x7f0000000080)={@_ha_fsid={[0x0, 0x5]}, {0x9, 0x4adc, 0x8, 0xffffffffffffffff}}, 0x2, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000280)}, 0x1, &(0x7f00000003c0)=[{0x1, 0xe, &(0x7f0000000300)='\x00', &(0x7f0000000340)="63ad419aa9f42bfadc968f15310f6c69281a33dcb158096bd20ce940f8ca1f41eeb64e214833cb949ab09ff343cff7c7cf72e4c5661b0a0996c9714a49a1b0ab45959b24d6a327b1b616a5f89410c6d57e3f7bbb719b7cf471f29e", 0x5b, 0x12}]}) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x60, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4010) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.317240474s ago: executing program 5 (id=9525): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000002871104e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 1.243081603s ago: executing program 0 (id=9526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r0, @ANYRES64=r0, @ANYBLOB="76850351edf058675e01a23bbd611454190ece70d257cfdbbdcb340c6a6a2b987b3e8111ee5f8b9f6cce7815e68250aa393b74764e4bfb1f44bd2138bf6f7bc3503f97c9a9ba071cf3b257c808505686dc551025beb9e008371a4b48fe3494cb75f2f0c1fda3565b642b8e6c4e96c9afd6a2c0461036c4cd89c76dd08902ea0d34421ecc99ccff2f06b3dbfa7025508b9630e84a729c491c408821404ff2f31eedf02f6c231cf5e4fa72ef03dfa8b0a66e022bbea8c64dec9f968961d3ff1b5c7f75ea570c536dcd8172082661aebdc742ba4701f141612c6a6a1183ecaf9d", @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES32=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010e0000000000000000000000700000ab4000000060a0b04000000000000000002000000880004801b0001800a000100680000007400028008000240000000000c00010072617465657374005c0003007e6b92c404000000000000003c3f178e65022fc067b7ddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc656c0783a4bcc1e966554b0470582e870b81e92a6300000000986ab4bb51248cf797f892699ab371f8000000000900010073797a30000000000900020073797a3200000000140000001100200000000000000000000500000a00000000"], 0xdc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000180)=0xa, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000180)=0xa, 0x4) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) (async) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'vcan0\x00'}}, 0x1e) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x17fd, @mcast2, 0x1}}, 0x0, 0x0, 0xbc, 0x0, "77a7ba907ee0bc23e462dee1b49bda63a088e1ccccf649e2238a31e41f5b515ee4ade4952b2956eb67207b34378c5c870eaee476143f2853cdc8e57c686095020400"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e22, 0x17fd, @mcast2, 0x1}}, 0x0, 0x0, 0xbc, 0x0, "77a7ba907ee0bc23e462dee1b49bda63a088e1ccccf649e2238a31e41f5b515ee4ade4952b2956eb67207b34378c5c870eaee476143f2853cdc8e57c686095020400"}, 0xd8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80001, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x80001, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r5, 0x620ee000) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x100010, r5, 0x620ee000) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @random="e6eda3db4b37", 'ipvlan1\x00'}}, 0xfffffffffffffe03) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x3, @local, 'veth1_vlan\x00'}}, 0x1e) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000840)) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r8 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10) writev(r7, &(0x7f00000004c0), 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a310000da00000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket$inet6(0x10, 0x2, 0x4) 1.232356144s ago: executing program 1 (id=9527): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002c0007012bbd700000002c84097c00000c00018006000600843b0000", @ANYRES32, @ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) pselect6(0xffffffcf, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10000000000000}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140), 0x8}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000001c0)={r2, 0xc, 0x6, 0x100000001}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x25, 0xa, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x800, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000440)={'tunl0\x00', r3, 0x8, 0x0, 0x8, 0x7, {{0x32, 0x4, 0x3, 0x1e, 0xc8, 0x68, 0x0, 0xf8, 0xe4b69febc9382b99, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@noop, @end, @cipso={0x86, 0x68, 0x3, [{0x2, 0x10, "d060e7a53d95288ceab19c0d5381"}, {0x4, 0xa, "010000801eb9895f"}, {0x6, 0xd, "fd7725620da8f7448842fd"}, {0x5, 0x4, "14c2"}, {0x0, 0xf, "ee3d05cf1801004523f2007d23"}, {0x5, 0x12, "a778847d8a721b3dc04aa05526b6fe04"}, {0x2, 0x2}, {0x6, 0x10, "d54e0273811eedcacbb8cb779676"}, {0x2, 0x4, "d8fc"}]}, @end, @rr={0x7, 0x1f, 0x9c, [@rand_addr=0x64010100, @empty, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x27}, @remote, @rand_addr=0x64010102]}, @cipso={0x86, 0x13, 0x3, [{0x5, 0xd, "2edc48abf8d8536df48f65"}]}, @end, @ssrr={0x89, 0x13, 0x77, [@local, @empty, @private=0xa010102, @empty]}]}}}}}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff2, 0xdaaaa76a5f4ca06e}, {0x4, 0x1}, {0xe}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x5e800000}, {0x8, 0xb, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r14, {0xf, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x9, 0x2, 0x9, 0x9, 0x576, 0x7fffffff}, {0x34, 0x1, 0x8, 0x1ff, 0x1042, 0x4}, 0x60000000, 0x800, 0x1cd0}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe913b438c1c49ead}]}}]}, 0x64}}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.214626713s ago: executing program 5 (id=9528): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r4, 0x0, 0x20000000002) 1.119250678s ago: executing program 0 (id=9529): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0xfffffffffffffe52, 0x2, 0x7000000}]}}]}, 0x48}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000a40)={'vlan0\x00', &(0x7f0000000a80)=@ethtool_cmd={0x17}}) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) (async) sendmmsg$inet6(r5, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001700)='y', 0x1}], 0x1}}], 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) close(r5) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r11, 0x800448d2, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x45f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x11a111}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}]}]}, 0x38}}, 0x8000) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x250, r3, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x45}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xdb9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x1eb, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @from_mac=@broadcast, {0xd, 0x93f}, @value=@ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, 0x8, @default, 0x11, @void, @void, @val={0x3, 0x1, 0x78}, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x3, 0x2, 0x0, {0xb, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x9, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x60}}, [{0xdd, 0xba, "1b264cc2619f5392dc01290be9cc7f9754e11927686f6aa40dfe5622ff6220ab1753925872d46ffe03280b7e869465034b36fddf24f761968e7d2e09233c252a5c02beb5e16b47d0cafb26873bd8bb8f78290b4ed0104351d327818cd98a3dbe843bc96b843f383e9f94d7673efeb93e97be834b8f4f2378a2ee1af0da4da225fd6ff107c54e0c5c662ece58b261fd83b12aee03c9a3a4ef3d8a24d264d187cf167d7528bef90eea6deca0e7cba686d06751393c35fd8eea2205"}, {0xdd, 0xd1, "d46cedd86f5eaf6f8ff02914139d800f4bf2d5428c58d0d61d436a426a6fe068fdf51424b65fc11ca26240fea1ceb0c8da1ba57accf54375949f5b9649f04891d90d2de8724b11096b6c7b91e948b45da2d06467495e9c72072e01dd49bc53f26b1861a8441b8c3d0d0cf0c8ae957674df23763adf0d4f8845ff5251b3a61d982294a3cc43c0f012ce40f495343621ae072d0cc41335acd17c70780689dadbe1410db0f7785b0772ac88434127e0d68473c5d4256269963e4a9c77c1f8477923314895b3aeb55c51861174796bdb55915e"}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x4080) (async) socket$nl_route(0x10, 0x3, 0x0) 827.045454ms ago: executing program 0 (id=9530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x102, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x47, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x20}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 825.765549ms ago: executing program 1 (id=9531): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) syz_emit_ethernet(0x7e, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x10, 0x6, 0x0, @remote, @local, {[], {{0x0, 0xe22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1d3622fb24b095"}, @fastopen={0x22, 0x6, "5f83c50f"}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 824.179395ms ago: executing program 5 (id=9532): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d1, 0x32}, 0x2, @in=@private=0xa010101, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000040), 0x4) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20048010}, 0x4040) (rerun: 32) 733.339151ms ago: executing program 1 (id=9533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r2, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7e) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'wg2\x00', 0x800}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000000057"], 0xfce) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 588.032381ms ago: executing program 2 (id=9534): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1daa00010000000061102400000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 487.724572ms ago: executing program 4 (id=9535): syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) gettid() r1 = socket(0x1, 0x80801, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0)) 487.395159ms ago: executing program 2 (id=9536): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8000000}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) 48.200642ms ago: executing program 1 (id=9537): syz_emit_ethernet(0x2a, &(0x7f0000000240)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0xf, 0x1c, 0x66, 0x0, 0x80, 0x2, 0x0, @remote, @local}, "156b3485e766b1df"}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 46.528287ms ago: executing program 1 (id=9539): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3e0, 0xe8, 0x308, 0xfeffffff, 0x0, 0x210, 0x3e0, 0x3e0, 0xffffffff, 0x3e0, 0x3e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6, 0x3, 0x4c}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x6]}}}, @common=@set={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @port=0x4e23, @gre_key=0x8001}}}}, {{@ip={@local, @rand_addr, 0x7f, 0x0, 'sit0\x00', 'ip6tnl0\x00', {0xff}}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x33}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@empty, @ipv4=@dev={0xac, 0x14, 0x14, 0xfc}, @port=0x4e24, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000440)=0x7, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000540)="bd", 0x1}], 0x2}}], 0x1, 0x4400c800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8}]}, 0x24}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x18, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}}, 0x20000000) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075d, 0x2}}]}, 0xc4}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x3, 0x3, 0x1, 0x1, {0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}}, 0x32) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x9d3, 0xffffffff}, {0xfffffffffffffffd}, 0xfffffffb, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) 41.15441ms ago: executing program 2 (id=9540): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) sendmsg$sock(r1, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) r3 = socket(0x10, 0x803, 0x0) close(r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x9}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_MARK={0x10, 0xa, {0x0, 0x6}}]}}]}, 0x84}}, 0x24040084) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbf}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x46, &(0x7f0000000800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="8f4961884fc4", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x6, 0x2, 0x4}}}}}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r7) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="258e0d5465999bafa30001000000080002000201ee0008000100"], 0x24}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r9, &(0x7f0000000100)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3b186e7998b8e60aba2a4bcc76eb07d365afc639fd8b115", 0xd8}, {&(0x7f0000000180)="a0a94f8518f2e7d417de2318f9700d66104c6a93da76b8fcaa99404227f34808d6ae2a7990b2c398", 0x28}, {&(0x7f0000000000)="1aa8906070117b653eda123ec46475d65ca8b7792e6da36191f93da265e6ec803be1248a4164a7335d78a67992bd88f1a0e3b7f48636ac498ba5f4f8b47248af", 0x40}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) nanosleep(&(0x7f0000000200), 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x54, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd39}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x5}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 39.207069ms ago: executing program 2 (id=9541): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff01, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000580)={r4, &(0x7f0000000480)='bridge_slave_1\x00', 0xc000, &(0x7f00000004c0)={@_ha_fsid={[0x3, 0x1000]}, {0x4000, 0x2, 0x0, 0x3}}, 0x7, &(0x7f0000000500), &(0x7f0000000540)=0xffffffff}) ioctl$F2FS_IOC_RESIZE_FS(r7, 0x4008f510, &(0x7f00000005c0)=0x73) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x9, 0x101, 0x3, 0xc, "79d7a2", 0x4, [0x1, 0xa4, 0xd, 0x4, 0xa, 0x9, 0x3, 0xff, 0xfffffff5]}}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x0, 0x4a}, 0x28) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000640), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="e1000000", @ANYRES16=r8, @ANYBLOB="00032bbd7000fcdbdf250400000014000100fe88000000000000000000000000010114000100fe80000000000000000000000000002c050005000000000014000100fc020000000000000000000000000001"], 0x58}}, 0xc080) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r9, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x6, 0x6, @remote}, 0x14) (async) sendmmsg$sock(r9, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r12 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r12, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)="5c6817", 0x3}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) recvmsg(r4, &(0x7f0000000d40)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000008c0)=""/161, 0xa1}, {&(0x7f0000000980)=""/197, 0xc5}, {&(0x7f0000000a80)=""/185, 0xb9}, {&(0x7f0000000b40)=""/152, 0x98}, {&(0x7f0000000c00)=""/169, 0xa9}], 0x5}, 0x20000) (async) sendmsg$kcm(r12, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="8900", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 37.887243ms ago: executing program 0 (id=9542): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa98aaaa1a08004500002800670000020690a0891c46630b44b80890f5a178", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) 0s ago: executing program 1 (id=9543): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x9, [@var={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x31}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): e [ 625.981924][ T764] bond8: entered allmulticast mode [ 625.994673][ T764] 8021q: adding VLAN 0 to HW filter on device bond8 [ 626.004725][ T764] team0: Port device bond8 added [ 626.034754][ T764] vxcan1: entered promiscuous mode [ 626.040805][ T764] bond8: (slave vxcan1): refused to change device type [ 626.127539][ T775] netlink: 'syz.3.7503': attribute type 1 has an invalid length. [ 626.351377][ T784] netlink: zone id is out of range [ 626.358262][ T784] netlink: zone id is out of range [ 626.367395][ T784] netlink: zone id is out of range [ 626.372468][ T789] netlink: 'syz.3.7507': attribute type 2 has an invalid length. [ 626.373667][ T784] netlink: zone id is out of range [ 626.413976][ T789] netlink: 'syz.3.7507': attribute type 2 has an invalid length. [ 626.425998][ T784] netlink: zone id is out of range [ 626.890960][ T834] syzkaller1: entered promiscuous mode [ 626.904775][ T834] syzkaller1: entered allmulticast mode [ 626.954791][ T830] netlink: 'syz.3.7519': attribute type 17 has an invalid length. [ 627.045361][ T830] tunl0: left allmulticast mode [ 627.068496][ T830] gre0: left allmulticast mode [ 627.088567][ T830] gretap0: left allmulticast mode [ 627.118493][ T830] erspan0: left allmulticast mode [ 627.139504][ T830] ip_vti0: left allmulticast mode [ 627.151967][ T830] ip6_vti0: left allmulticast mode [ 627.164909][ T830] sit0: left allmulticast mode [ 627.174916][ T830] ip6tnl0: left allmulticast mode [ 627.182754][ T830] ip6gre0: left allmulticast mode [ 627.191708][ T830] syz_tun: left allmulticast mode [ 627.198531][ T830] ip6gretap0: left allmulticast mode [ 627.209739][ T830] bridge0: left allmulticast mode [ 627.222032][ T830] bond0: left allmulticast mode [ 627.232053][ T830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 627.241011][ T830] nlmon0: left allmulticast mode [ 627.258603][ T830] batadv0: left allmulticast mode [ 627.280357][ T830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.315802][ T830] vxcan0: left allmulticast mode [ 627.323820][ T830] vxcan1: left allmulticast mode [ 627.338417][ T830] veth0: left allmulticast mode [ 627.344591][ T830] veth1: left allmulticast mode [ 627.361822][ T830] wg0: left allmulticast mode [ 627.378425][ T830] wg1: left allmulticast mode [ 627.388528][ T866] netlink: 'syz.1.7530': attribute type 1 has an invalid length. [ 627.399496][ T830] wg2: left allmulticast mode [ 627.406150][ T830] veth0_to_bridge: left allmulticast mode [ 627.419446][ T830] veth1_to_bridge: left allmulticast mode [ 627.422170][ T870] __nla_validate_parse: 13 callbacks suppressed [ 627.422188][ T870] netlink: 148 bytes leftover after parsing attributes in process `syz.0.7531'. [ 627.428698][ T830] veth0_to_bond: left allmulticast mode [ 627.448619][ T830] bond_slave_0: left allmulticast mode [ 627.455919][ T830] veth1_to_bond: left allmulticast mode [ 627.468663][ T830] bond_slave_1: left allmulticast mode [ 627.475672][ T830] veth1_to_team: left allmulticast mode [ 627.483529][ T830] team_slave_1: left allmulticast mode [ 627.490369][ T830] veth0_to_batadv: left allmulticast mode [ 627.497952][ T830] batadv_slave_0: left allmulticast mode [ 627.504557][ T830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.515471][ T830] veth1_to_batadv: left allmulticast mode [ 627.527223][ T830] batadv_slave_1: left allmulticast mode [ 627.533895][ T830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.543207][ T830] xfrm0: left allmulticast mode [ 627.549823][ T830] veth1_to_hsr: left allmulticast mode [ 627.556785][ T830] hsr_slave_1: left allmulticast mode [ 627.563462][ T830] veth1_virt_wifi: left allmulticast mode [ 627.570548][ T830] veth0_virt_wifi: left allmulticast mode [ 627.577233][ T830] veth1_vlan: left promiscuous mode [ 627.582472][ T830] veth1_vlan: left allmulticast mode [ 627.589014][ T830] veth0_vlan: left promiscuous mode [ 627.594872][ T830] veth0_vlan: entered promiscuous mode [ 627.602636][ T830] vlan0: left allmulticast mode [ 627.607914][ T830] s5ÿÿø: left allmulticast mode [ 627.613414][ T830] veth1_vlan: entered promiscuous mode [ 627.619499][ T830] veth1_vlan: entered allmulticast mode [ 627.625165][ T830] macvlan0: left allmulticast mode [ 627.631213][ T830] veth1_vlan: left allmulticast mode [ 627.637820][ T830] veth1_vlan: entered allmulticast mode [ 627.643380][ T830] macvlan1: left allmulticast mode [ 627.648554][ T830] veth1_vlan: left allmulticast mode [ 627.654735][ T830] ipvlan0: left allmulticast mode [ 627.660547][ T830] ipvlan1: left allmulticast mode [ 627.665580][ T830] veth0_vlan: left allmulticast mode [ 627.671921][ T830] veth1_macvtap: left promiscuous mode [ 627.677433][ T830] veth1_macvtap: left allmulticast mode [ 627.683898][ T830] veth0_macvtap: left promiscuous mode [ 627.689721][ T830] veth0_macvtap: left allmulticast mode [ 627.696112][ T830] veth0_macvtap: entered promiscuous mode [ 627.702057][ T830] veth0_macvtap: entered allmulticast mode [ 627.708028][ T830] macvtap0: left allmulticast mode [ 627.713143][ T830] veth0_macvtap: left allmulticast mode [ 627.720655][ T830] veth1_macvtap: entered promiscuous mode [ 627.726374][ T830] veth1_macvtap: entered allmulticast mode [ 627.732306][ T830] macsec0: left allmulticast mode [ 627.737474][ T830] veth1_macvtap: left allmulticast mode [ 627.744134][ T830] geneve0: left allmulticast mode [ 627.750906][ T830] geneve1: left allmulticast mode [ 627.757278][ T830] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 627.765072][ T830] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 627.773177][ T830] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 627.781982][ T830] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 627.790344][ T830] mac80211_hwsim hwsim47 wlan0: left allmulticast mode [ 627.808130][T17687] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.815350][T17687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.840405][T17687] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.847596][T17687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.964732][ T884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7535'. [ 627.976490][T17703] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.991902][T17703] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.028211][ T888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7536'. [ 628.045888][T17703] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.127727][ T895] netlink: 185412 bytes leftover after parsing attributes in process `syz.3.7538'. [ 628.139952][ T895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7538'. [ 628.451870][ T916] netlink: 'syz.0.7544': attribute type 4 has an invalid length. [ 628.460682][ T916] netlink: 17 bytes leftover after parsing attributes in process `syz.0.7544'. [ 628.471162][ T916] netlink: 'syz.0.7544': attribute type 5 has an invalid length. [ 628.479276][ T916] netlink: 140 bytes leftover after parsing attributes in process `syz.0.7544'. [ 628.794567][ T953] net_ratelimit: 245 callbacks suppressed [ 628.794586][ T953] openvswitch: netlink: EtherType 50a is less than min 600 [ 628.875964][ T961] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 628.988812][ T971] openvswitch: netlink: IP tunnel dst address not specified [ 629.428291][ T1009] netlink: 'syz.2.7566': attribute type 1 has an invalid length. [ 629.441642][ T1009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7566'. [ 629.457217][ T1009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7566'. [ 629.558743][ T1023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7569'. [ 629.595348][ T1023] 8021q: adding VLAN 0 to HW filter on device bond6 [ 629.601701][ T1026] block nbd0: not configured, cannot reconfigure [ 629.693094][ T1032] netlink: 'syz.1.7573': attribute type 1 has an invalid length. [ 629.709156][ T1032] netlink: 'syz.1.7573': attribute type 1 has an invalid length. [ 629.776941][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 629.785010][ C0] lec:lec_tx_timeout: lec0 [ 629.790345][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 629.824985][ T1045] syzkaller1: entered promiscuous mode [ 629.831215][ T1045] syzkaller1: entered allmulticast mode [ 630.384144][ T1101] pimreg: entered allmulticast mode [ 630.543270][ T1111] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 630.821198][ T1137] macvtap2: entered promiscuous mode [ 630.835112][ T1137] macvtap2: entered allmulticast mode [ 630.844170][ T1137] veth1_vlan: entered allmulticast mode [ 630.886974][ T1137] macvtap3: entered promiscuous mode [ 630.892400][ T1137] macvtap3: entered allmulticast mode [ 630.933371][ T1143] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 630.976654][ T1137] macvtap3: entered promiscuous mode [ 630.982164][ T1137] macvtap3: entered allmulticast mode [ 631.647513][ T1185] syzkaller0: entered promiscuous mode [ 631.656468][ T1185] syzkaller0: entered allmulticast mode [ 632.089066][ T1206] validate_nla: 3 callbacks suppressed [ 632.089087][ T1206] netlink: 'syz.4.7616': attribute type 1 has an invalid length. [ 633.703092][ T1224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 633.844109][ T1233] __nla_validate_parse: 10 callbacks suppressed [ 633.844127][ T1233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7624'. [ 634.070844][ T1257] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7628'. [ 634.223961][ T1266] IPv6: addrconf: prefix option has invalid lifetime [ 634.437214][ T1273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7633'. [ 634.461573][ T1273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7633'. [ 634.592540][ T1281] x_tables: duplicate underflow at hook 3 [ 634.721246][ T1285] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7637'. [ 634.816956][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms [ 634.825029][ C0] lec:lec_tx_timeout: lec0 [ 635.000827][ T1299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7640'. [ 635.153298][ T1305] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7642'. [ 635.214009][ T1305] openvswitch: netlink: Flow key attr not present in new flow. [ 635.460064][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7645'. [ 635.470755][ T1329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7648'. [ 635.577844][ T1329] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7648'. [ 635.609828][ T1325] bond9: entered promiscuous mode [ 635.619662][ T1325] bond9: entered allmulticast mode [ 635.625242][ T1325] 8021q: adding VLAN 0 to HW filter on device bond9 [ 635.722330][ T1317] bond10: entered promiscuous mode [ 635.727973][ T1317] bond10: entered allmulticast mode [ 635.733824][ T1317] 8021q: adding VLAN 0 to HW filter on device bond10 [ 635.847227][ T1359] tipc: Started in network mode [ 635.852333][ T1359] tipc: Node identity ac14140f, cluster identity 4711 [ 635.868650][ T1359] tipc: New replicast peer: 255.255.255.255 [ 635.888944][ T1359] tipc: Enabled bearer , priority 10 [ 636.025240][ T1373] netlink: 'syz.0.7659': attribute type 9 has an invalid length. [ 636.090919][ T1372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.197208][ T1381] syzkaller0: entered promiscuous mode [ 636.202893][ T1381] syzkaller0: entered allmulticast mode [ 637.018998][ T5883] tipc: Node number set to 2886997007 [ 637.542170][ T1438] bond8: Invalid ad_actor_system MAC address. [ 637.550412][ T1438] bond8: option ad_actor_system: invalid value (1) [ 637.592549][ T1438] bond8 (unregistering): Released all slaves [ 637.659547][ T1442] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 637.971833][ T1461] netlink: 'syz.2.7683': attribute type 1 has an invalid length. [ 638.046303][ T1461] bond8: entered promiscuous mode [ 638.057445][ T1461] 8021q: adding VLAN 0 to HW filter on device bond8 [ 638.103107][ T1461] 8021q: adding VLAN 0 to HW filter on device bond8 [ 638.153543][ T1461] bond8: (slave vcan0): The slave device specified does not support setting the MAC address [ 638.227020][ T1461] bond8: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 638.260286][ T1461] bond8: (slave vcan0): making interface the new active one [ 638.286989][ T1461] vcan0: entered promiscuous mode [ 638.294514][ T1461] bond8: (slave vcan0): Enslaving as an active interface with an up link [ 638.435708][ T1463] bond9 (unregistering): Released all slaves [ 638.770901][ T1488] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 638.789439][ T1488] bond2: (slave lo): Enslaving as an active interface with an up link [ 638.808949][ T1488] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 638.850941][ T1490] __nla_validate_parse: 9 callbacks suppressed [ 638.850960][ T1490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7690'. [ 638.871717][ T1490] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 638.878990][ T1490] IPv6: NLM_F_CREATE should be set when creating new route [ 638.906791][ T1490] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7690'. [ 639.238747][ T1507] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7694'. [ 639.278775][ T1509] syzkaller1: entered promiscuous mode [ 639.284297][ T1509] syzkaller1: entered allmulticast mode [ 639.310258][ T1509] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7697'. [ 639.319396][ T1509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7697'. [ 639.378068][ T1514] netlink: 'syz.4.7699': attribute type 1 has an invalid length. [ 639.403966][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7699'. [ 639.608172][ T1522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 639.652590][ T1524] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7703'. [ 639.981249][ T1544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7708'. [ 640.005272][ T1545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7708'. [ 640.020640][ T1547] netlink: 'syz.1.7709': attribute type 3 has an invalid length. [ 640.028996][ T1547] netlink: 'syz.1.7709': attribute type 3 has an invalid length. [ 640.163529][ T1555] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.7711'. [ 640.390846][ T1563] netlink: 'syz.1.7714': attribute type 1 has an invalid length. [ 640.427369][ T1563] netlink: 'syz.1.7714': attribute type 1 has an invalid length. [ 640.435455][ T1563] netlink: 'syz.1.7714': attribute type 8 has an invalid length. [ 641.775881][ T1615] netlink: 'syz.1.7728': attribute type 1 has an invalid length. [ 641.846299][ T1618] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 641.880238][ T1618] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 641.912830][ T1618] bond11: (slave ip6gre2): making interface the new active one [ 641.939651][ T1618] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 641.961602][ T1620] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.969223][ T1620] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.998106][ T1615] syz_tun: entered allmulticast mode [ 642.231622][ T1638] IPv6: sit1: Disabled Multicast RS [ 642.251493][ T1638] sit1: entered allmulticast mode [ 642.530847][ T1651] block nbd2: not configured, cannot reconfigure [ 642.998210][ T1673] ±ÿ=–a²š«: renamed from lo (while UP) [ 643.225458][ T1681] syzkaller1: entered promiscuous mode [ 643.264407][ T1681] syzkaller1: entered allmulticast mode [ 644.231466][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.242482][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.256442][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.271051][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.281823][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.357167][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 644.381337][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 644.391171][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 644.410176][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 644.427230][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 645.154595][ T1738] __nla_validate_parse: 9 callbacks suppressed [ 645.154622][ T1738] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7762'. [ 645.248339][ T1738] syzkaller0: entered promiscuous mode [ 645.253844][ T1738] syzkaller0: entered allmulticast mode [ 645.338906][ T1738] tcf_pedit_act: 7 callbacks suppressed [ 645.338925][ T1738] tc action pedit offset must be on 32 bit boundaries [ 645.477164][ T1738] netlink: 'syz.2.7762': attribute type 3 has an invalid length. [ 645.792652][ T1759] netem: change failed [ 646.020132][ T1769] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7770'. [ 646.103788][ T1707] chnl_net:caif_netlink_parms(): no params data found [ 646.245447][ T1775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7773'. [ 646.468815][ T1707] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.497118][ T5826] Bluetooth: hci1: command tx timeout [ 646.511906][ T1707] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.538055][ T1707] bridge_slave_0: entered allmulticast mode [ 646.555670][ T1707] bridge_slave_0: entered promiscuous mode [ 646.585576][ T1707] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.621605][ T1707] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.643306][ T1707] bridge_slave_1: entered allmulticast mode [ 646.655059][ T1791] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7777'. [ 646.655114][ T1707] bridge_slave_1: entered promiscuous mode [ 646.708450][ T1707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.720282][ T1794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7777'. [ 646.743622][ T1707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.795232][ T1707] team0: Port device team_slave_0 added [ 646.805451][ T1707] team0: Port device team_slave_1 added [ 646.886606][ T1707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.894137][ T1707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.923263][ T1707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.944052][ T1707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.952199][ T1707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.983317][ T1707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.995383][ T1797] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 647.110109][ T1707] hsr_slave_0: entered promiscuous mode [ 647.126245][ T1707] hsr_slave_1: entered promiscuous mode [ 647.146384][ T1707] debugfs: 'hsr0' already exists in 'hsr' [ 647.165356][ T1707] Cannot create hsr debugfs directory [ 647.546026][ T1812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7783'. [ 647.614051][ T1812] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7783'. [ 647.626519][ T1814] netlink: 'syz.4.7784': attribute type 1 has an invalid length. [ 648.073662][ T1707] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.137263][ T1707] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.153473][ T1707] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.184830][ T1707] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 648.310425][ T1847] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7790'. [ 648.445333][ T1707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.489193][ T1707] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.503639][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.510861][T17691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.546438][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.553668][T17691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.585215][ T5826] Bluetooth: hci1: command tx timeout [ 649.061095][ T1889] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7801'. [ 649.142777][ T1893] x_tables: duplicate entry at hook 1 [ 649.177667][ T1890] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7801'. [ 649.200659][ T1890] nbd: device at index 64 is going down [ 649.238337][ T1707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.507359][ T1909] netlink: 'syz.0.7805': attribute type 142 has an invalid length. [ 649.507479][ T1898] udevd[1898]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 649.571104][ T1898] udevd[1898]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 650.149475][ T1707] veth0_vlan: entered promiscuous mode [ 650.162624][ T1707] veth1_vlan: entered promiscuous mode [ 650.275129][ T1944] __nla_validate_parse: 1 callbacks suppressed [ 650.275148][ T1944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7810'. [ 650.294489][ T1707] veth0_macvtap: entered promiscuous mode [ 650.313593][ T1707] veth1_macvtap: entered promiscuous mode [ 650.386253][ T1952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7813'. [ 650.424038][ T1707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.475740][ T1707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.532135][T17703] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.571501][T17703] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.647207][T17703] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.655994][T17703] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.666786][ T5826] Bluetooth: hci1: command tx timeout [ 650.764525][ T1969] netlink: 'syz.2.7818': attribute type 58 has an invalid length. [ 650.788029][ T1969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7818'. [ 650.833642][ T1975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7819'. [ 650.921389][T17694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.937445][T17694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.012670][ T1986] netlink: 'syz.2.7823': attribute type 1 has an invalid length. [ 651.025819][ T1978] netlink: 'syz.0.7822': attribute type 3 has an invalid length. [ 651.091635][ T1986] 8021q: adding VLAN 0 to HW filter on device bond10 [ 651.114307][ T1987] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7824'. [ 651.163429][T17703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.221596][T17703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.295489][ T1991] bond10: (slave veth7): Enslaving as an active interface with a down link [ 651.379753][ T2005] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7827'. [ 651.389502][ T2005] openvswitch: netlink: Flow key attr not present in new flow. [ 651.399974][ T1986] bond10: (slave gretap2): making interface the new active one [ 651.409211][ T1986] gretap2: entered promiscuous mode [ 651.415092][ T1986] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 651.443395][ T1997] macvlan2: entered promiscuous mode [ 651.458633][ T1997] macvlan2: entered allmulticast mode [ 651.464877][ T1997] bond10: entered promiscuous mode [ 651.473603][ T1997] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 651.484010][ T2010] Bluetooth: MGMT ver 1.23 [ 651.491281][ T2010] Bluetooth: hci1: too big key_count value 32778 [ 651.499478][ T1997] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 651.516609][ T1997] bond10: left promiscuous mode [ 651.694849][ T2014] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 651.754055][ T2014] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 651.765600][ T2025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 651.791672][ T2014] gretap1: entered promiscuous mode [ 651.820235][ T2014] gretap1: entered allmulticast mode [ 651.881420][ T2028] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7834'. [ 652.021796][ T2037] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 652.042608][ T2037] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7835'. [ 652.058110][ T2041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7837'. [ 652.095638][ T2030] syzkaller0: entered promiscuous mode [ 652.101717][ T2030] syzkaller0: entered allmulticast mode [ 652.457891][ T2057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7840'. [ 652.743822][ T5826] Bluetooth: hci1: command tx timeout [ 652.809633][ T2069] netlink: 'syz.4.7844': attribute type 1 has an invalid length. [ 655.109335][ T2113] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 655.117739][ T2108] bridge0: entered allmulticast mode [ 655.231896][ T2117] 8021q: VLANs not supported on lo [ 655.790529][ T2137] __nla_validate_parse: 8 callbacks suppressed [ 655.790549][ T2137] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7863'. [ 655.803569][ T2138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7862'. [ 655.939317][ T2147] x_tables: duplicate underflow at hook 1 [ 656.078841][ T2156] netlink: 'syz.1.7869': attribute type 11 has an invalid length. [ 656.145855][ T2157] tipc: Enabled bearer , priority 0 [ 656.174020][ T2157] syzkaller0: entered promiscuous mode [ 656.188906][ T2157] syzkaller0: entered allmulticast mode [ 656.278933][ T2157] tipc: Resetting bearer [ 656.309637][ T2154] tipc: Resetting bearer [ 656.334709][ T2170] netlink: 144 bytes leftover after parsing attributes in process `syz.5.7872'. [ 656.363573][ T2154] tipc: Disabling bearer [ 656.464980][ T2177] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7873'. [ 656.476606][ T2169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 656.652028][ T2191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7879'. [ 656.709807][ T2189] bond0: (slave gre0): Error: Device type is different from other slaves [ 656.719774][ T2189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7878'. [ 657.402301][ T2215] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7885'. [ 657.500338][ T2218] netlink: 'syz.4.7886': attribute type 1 has an invalid length. [ 657.511114][ T2218] netlink: 'syz.4.7886': attribute type 2 has an invalid length. [ 657.514589][ T2222] IPVS: set_ctl: invalid protocol: 136 100.1.1.2:20002 [ 657.519490][ T2218] netlink: 'syz.4.7886': attribute type 1 has an invalid length. [ 657.545283][ T2217] netlink: 'syz.4.7886': attribute type 1 has an invalid length. [ 657.576629][ T2217] netlink: 'syz.4.7886': attribute type 2 has an invalid length. [ 657.625022][ T2217] netlink: 'syz.4.7886': attribute type 1 has an invalid length. [ 657.665637][ T2229] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.7891'. [ 657.682456][ T2229] openvswitch: netlink: Missing key (keys=40, expected=100) [ 657.868928][ T2240] vlan5: entered allmulticast mode [ 657.871068][ T2242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7896'. [ 657.883029][ T2240] bridge0: entered allmulticast mode [ 657.883396][ T2240] bridge0: port 3(vlan5) entered blocking state [ 657.893673][ T2247] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7898'. [ 657.896163][ T2240] bridge0: port 3(vlan5) entered disabled state [ 657.919663][ T2247] : renamed from bridge_slave_0 (while UP) [ 658.369612][ T2282] netlink: 'syz.1.7907': attribute type 1 has an invalid length. [ 658.491865][ T2288] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.214310][ T2318] netlink: 'syz.1.7917': attribute type 1 has an invalid length. [ 659.378972][ T2318] syzkaller0: entered promiscuous mode [ 659.384485][ T2318] syzkaller0: entered allmulticast mode [ 659.604979][ T2341] netlink: 'syz.0.7926': attribute type 4 has an invalid length. [ 659.640945][ T2343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 659.671659][ T2339] bond8: entered promiscuous mode [ 659.676752][ T2339] bond8: entered allmulticast mode [ 659.687938][ T2339] 8021q: adding VLAN 0 to HW filter on device bond8 [ 659.997119][ T2359] bridge_slave_0: left allmulticast mode [ 660.011904][ T2359] bridge_slave_0: left promiscuous mode [ 660.025472][ T2360] netlink: 'syz.4.7930': attribute type 1 has an invalid length. [ 660.029834][ T2359] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.076684][ T2359] bridge_slave_1: left allmulticast mode [ 660.096535][ T2359] bridge_slave_1: left promiscuous mode [ 660.124400][ T2359] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.180840][ T2359] bond0: (slave bond_slave_0): Releasing backup interface [ 660.209302][ T2359] bond0: (slave bond_slave_1): Releasing backup interface [ 660.288055][ T2359] team0: Port device team_slave_0 removed [ 660.321708][ T2359] team0: Port device team_slave_1 removed [ 660.338402][ T2359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.346393][ T2359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.357770][ T2359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.365317][ T2359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.382238][ T2359] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 660.417542][ T2360] bond9: entered promiscuous mode [ 660.422869][ T2360] 8021q: adding VLAN 0 to HW filter on device bond9 [ 660.433681][ T2362] team0: No ports can be present during mode change [ 660.639713][ T2391] syzkaller1: entered promiscuous mode [ 660.678136][ T2391] syzkaller1: entered allmulticast mode [ 660.686500][ T2384] syzkaller0: entered promiscuous mode [ 660.692210][ T2384] syzkaller0: entered allmulticast mode [ 660.987737][ T2408] __nla_validate_parse: 11 callbacks suppressed [ 660.987759][ T2408] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7940'. [ 661.137714][ T2386] lec:lec_atm_close: lec0: Shut down! [ 661.151819][ T2422] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7943'. [ 661.235796][ T2424] bond11: entered promiscuous mode [ 661.262969][ T2424] 8021q: adding VLAN 0 to HW filter on device bond11 [ 661.273833][ T2422] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 661.327588][ T2437] xt_connbytes: Forcing CT accounting to be enabled [ 661.368530][ T2445] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 661.533080][ T2452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7950'. [ 661.570023][ T2457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7953'. [ 661.628583][ T2465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7955'. [ 661.678025][ T2471] netlink: 7 bytes leftover after parsing attributes in process `syz.2.7956'. [ 661.688197][ T2470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7954'. [ 661.764578][ T2477] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7957'. [ 661.844936][ T2483] wireguard0: entered promiscuous mode [ 661.855087][ T2482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7956'. [ 661.875278][ T2483] wireguard0: entered allmulticast mode [ 661.887576][ T2483] team0: Device wireguard0 is of different type [ 661.903973][ T2485] tipc: Enabled bearer , priority 0 [ 661.924183][ T2473] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 662.074548][ T2503] ipt_REJECT: TCP_RESET invalid for non-tcp [ 662.108753][ T2505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7963'. [ 662.126026][ T2505] openvswitch: netlink: IP tunnel dst address not specified [ 662.294594][ T2520] sctp: [Deprecated]: syz.1.7968 (pid 2520) Use of int in maxseg socket option. [ 662.294594][ T2520] Use struct sctp_assoc_value instead [ 662.470171][T16062] gretap2: left promiscuous mode [ 662.636329][ T2550] tipc: Enabled bearer , priority 24 [ 663.173953][ T2573] siw: device registration error -23 [ 663.390365][ T2594] validate_nla: 4 callbacks suppressed [ 663.390383][ T2594] netlink: 'syz.0.7989': attribute type 29 has an invalid length. [ 663.617864][ T2620] delete_channel: no stack [ 663.681260][ T2625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 664.219484][ T2678] gre0: entered promiscuous mode [ 664.246955][ T2678] gre0: entered allmulticast mode [ 666.764037][ T2633] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.816936][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 666.825000][ C0] lec:lec_tx_timeout: lec0 [ 666.960114][ T2712] veth0: entered promiscuous mode [ 666.965514][ T2712] veth0: left promiscuous mode [ 667.017642][ T2723] netlink: 'syz.0.8020': attribute type 1 has an invalid length. [ 667.036617][ T2725] syzkaller1: entered promiscuous mode [ 667.042902][ T2725] syzkaller1: entered allmulticast mode [ 667.053559][ T2723] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 667.153739][ T2733] __nla_validate_parse: 8 callbacks suppressed [ 667.153762][ T2733] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8022'. [ 667.181505][ T2733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 667.233747][ T2733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8022'. [ 667.391192][ T2755] addrtype_mt_checkentry_v1: 23 callbacks suppressed [ 667.391212][ T2755] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 667.700293][ T2778] netlink: 'syz.5.8030': attribute type 63 has an invalid length. [ 668.226617][ T2808] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 668.233258][ T2808] syzkaller1: linktype set to 823 [ 668.463134][ T2835] SET target dimension over the limit! [ 668.547534][ T2837] netlink: 'syz.1.8043': attribute type 3 has an invalid length. [ 668.555324][ T2837] netlink: 'syz.1.8043': attribute type 1 has an invalid length. [ 668.751209][ T2863] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.8047'. [ 668.780601][ T2869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8049'. [ 668.794017][ T2869] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8049'. [ 668.803840][ T2868] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8049'. [ 668.822634][ T2868] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8049'. [ 669.091904][ T2898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8055'. [ 669.182180][ T2903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8056'. [ 669.241504][ T2910] veth0_to_batadv: entered promiscuous mode [ 669.249974][ T2910] veth0_to_batadv: entered allmulticast mode [ 669.535564][ T2931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8061'. [ 669.621100][ T2935] syzkaller0: entered promiscuous mode [ 669.655347][ T2935] syzkaller0: entered allmulticast mode [ 669.793407][ T2954] netlink: zone id is out of range [ 669.799748][ T2954] netlink: zone id is out of range [ 669.805027][ T2954] netlink: zone id is out of range [ 669.812649][ T2954] netlink: zone id is out of range [ 669.819097][ T2954] netlink: zone id is out of range [ 669.838049][ T2954] netlink: zone id is out of range [ 669.846964][ T2954] netlink: zone id is out of range [ 669.871245][ T2954] netlink: zone id is out of range [ 669.895964][ T2954] netlink: zone id is out of range [ 669.912259][ T2954] netlink: zone id is out of range [ 670.215963][ T2982] netlink: 'syz.0.8074': attribute type 9 has an invalid length. [ 670.230914][ T2984] netlink: 'syz.2.8075': attribute type 8 has an invalid length. [ 672.174023][ T3007] __nla_validate_parse: 3 callbacks suppressed [ 672.174043][ T3007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8080'. [ 672.193913][ T3011] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 672.326449][ T3023] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8082'. [ 673.371803][ T2989] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.416504][ T3013] netlink: 788 bytes leftover after parsing attributes in process `syz.2.8081'. [ 673.565075][ T3028] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8086'. [ 673.608638][T17707] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.639012][T17707] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.696274][T17707] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.718520][T17707] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 673.736102][ T3042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8089'. [ 673.804352][ T3044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8090'. [ 673.811248][ T3047] sctp: [Deprecated]: syz.2.8092 (pid 3047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 673.811248][ T3047] Use struct sctp_sack_info instead [ 673.884145][ T3052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8090'. [ 673.902344][ T3053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8093'. [ 673.962912][ T3052] bond1: Invalid ad_actor_system MAC address. [ 673.970412][ T3052] bond1: option ad_actor_system: invalid value (1) [ 673.997892][ T3052] bond1 (unregistering): Released all slaves [ 674.053168][ T3065] macvtap0: entered promiscuous mode [ 674.070482][ T3065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8096'. [ 674.106081][ T3065] veth0_macvtap: left promiscuous mode [ 674.168056][ T3065] macvtap0 (unregistering): left promiscuous mode [ 674.350944][ T3084] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8103'. [ 674.386641][ T3082] can: request_module (can-proto-5) failed. [ 674.565062][ T3093] netlink: 'syz.2.8106': attribute type 1 has an invalid length. [ 674.586501][ T3093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.884767][ T3120] xt_NFQUEUE: number of total queues is 0 [ 674.960895][ T3124] netlink: 'syz.4.8113': attribute type 1 has an invalid length. [ 675.034372][ T3124] 8021q: adding VLAN 0 to HW filter on device bond10 [ 675.054862][ T3134] netlink: 'syz.5.8116': attribute type 1 has an invalid length. [ 675.065244][ T3132] bond10: (slave geneve2): making interface the new active one [ 675.076522][ T3132] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 675.124672][ T3134] bond1: entered promiscuous mode [ 675.130376][ T3134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 675.145509][ T3140] bond1: (slave bridge1): making interface the new active one [ 675.161686][ T3140] bridge1: entered promiscuous mode [ 675.168782][ T3140] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 675.219662][ T3145] netlink: 'syz.2.8117': attribute type 13 has an invalid length. [ 675.229439][ T3145] netlink: 'syz.2.8117': attribute type 27 has an invalid length. [ 677.618801][ T3096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 677.813414][ T3175] netlink: 'syz.5.8129': attribute type 5 has an invalid length. [ 677.855494][ T3178] __nla_validate_parse: 2 callbacks suppressed [ 677.855516][ T3178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8130'. [ 677.888845][ T3175] syzkaller1: entered promiscuous mode [ 677.894351][ T3175] syzkaller1: entered allmulticast mode [ 677.921194][ T3182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8130'. [ 677.947719][ T3188] block nbd0: not configured, cannot reconfigure [ 677.977497][ T3188] netlink: 'syz.4.8132': attribute type 26 has an invalid length. [ 678.121161][ T3192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8134'. [ 678.151766][ T3192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8134'. [ 678.169352][ T3200] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8135'. [ 678.328973][ T3206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8137'. [ 678.399745][ T3211] netlink: 'syz.4.8139': attribute type 1 has an invalid length. [ 678.510372][ T3211] 8021q: adding VLAN 0 to HW filter on device bond11 [ 678.557883][ T3214] bond11: (slave geneve3): making interface the new active one [ 678.573656][ T3214] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 678.588560][ T3181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8131'. [ 678.600096][ T3181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8131'. [ 678.621363][ T3181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8131'. [ 678.637969][ T3181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8131'. [ 679.647196][ T3294] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 679.808580][ T3300] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 679.834066][ T3298] net_ratelimit: 188 callbacks suppressed [ 679.834086][ T3298] A link change request failed with some changes committed already. Interface 26±ÿ=–a²š« may have been left with an inconsistent configuration, please check. [ 680.294052][ T3335] veth9: entered allmulticast mode [ 680.972939][ T3384] IPVS: set_ctl: invalid protocol: 98 0.0.0.0:20002 [ 680.985180][ T5826] Bluetooth: hci1: command tx timeout [ 681.141775][ T3402] ip6t_srh: unknown srh invflags 4000 [ 681.215688][ T3412] netlink: 'syz.4.8189': attribute type 51 has an invalid length. [ 681.262256][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.279765][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.314212][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.327986][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.582124][ T3437] netlink: 'syz.5.8196': attribute type 39 has an invalid length. [ 681.800558][ T3447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 681.824479][ T3447] netlink: 'syz.0.8200': attribute type 4 has an invalid length. [ 682.083529][ T3458] syzkaller0: entered promiscuous mode [ 682.121794][ T3458] syzkaller0: entered allmulticast mode [ 682.221128][ T3472] veth13: entered promiscuous mode [ 683.941462][ T3478] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 684.081746][ T3505] __nla_validate_parse: 9 callbacks suppressed [ 684.081765][ T3505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8217'. [ 684.305154][ T3522] netlink: 412 bytes leftover after parsing attributes in process `syz.1.8222'. [ 684.487166][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8221'. [ 684.537062][ T3541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8221'. [ 684.601264][ T3541] netlink: 'syz.4.8221': attribute type 12 has an invalid length. [ 684.630111][ T3541] netlink: 'syz.4.8221': attribute type 11 has an invalid length. [ 684.708903][ T3555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8229'. [ 684.945253][ T3568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8235'. [ 684.983942][ T3562] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8233'. [ 685.210797][ T3575] netlink: 'syz.1.8237': attribute type 12 has an invalid length. [ 685.416459][ T3597] netlink: 'syz.0.8244': attribute type 1 has an invalid length. [ 685.431218][ T3599] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8242'. [ 685.448889][ T3597] bond4: entered promiscuous mode [ 685.454299][ T3597] 8021q: adding VLAN 0 to HW filter on device bond4 [ 685.464472][ T3599] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8242'. [ 685.634094][ T3608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 685.641437][ T3608] IPv6: NLM_F_CREATE should be set when creating new route [ 685.648802][ T3608] IPv6: NLM_F_CREATE should be set when creating new route [ 685.702115][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 685.730004][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 685.803968][ T3620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8253'. [ 686.040526][ T3639] netlink: 'syz.1.8257': attribute type 1 has an invalid length. [ 686.205596][ T3647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.240960][ T3650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.426308][ T3660] openvswitch: netlink: IP tunnel dst address not specified [ 686.443920][ T3660] vcan1: entered promiscuous mode [ 686.449356][ T3660] vcan1: entered allmulticast mode [ 686.922646][T17700] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.286752][ T3717] syzkaller0: entered promiscuous mode [ 687.301155][ T3717] syzkaller0: entered allmulticast mode [ 687.695809][ T3751] tipc: Enabling of bearer rejected, media not registered [ 687.723764][ T3754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.756298][ T3755] delete_channel: no stack [ 688.258704][T17703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.388498][ T3806] netlink: 'syz.2.8306': attribute type 2 has an invalid length. [ 688.782393][ T3827] netlink: 'syz.2.8316': attribute type 13 has an invalid length. [ 688.803481][ T3831] sctp: [Deprecated]: syz.1.8315 (pid 3831) Use of int in maxseg socket option. [ 688.803481][ T3831] Use struct sctp_assoc_value instead [ 688.837704][ T3834] openvswitch: netlink: Missing valid actions attribute. [ 688.841056][ T3827] gretap0: refused to change device tx_queue_len [ 688.868133][ T3827] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 688.892945][ T3834] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 688.897138][ T3831] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20004 [ 688.922953][ T3831] IPVS: length: 140 != 24 [ 689.181775][ T3858] __nla_validate_parse: 9 callbacks suppressed [ 689.181796][ T3858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8326'. [ 689.200474][ T3857] netlink: 'syz.4.8327': attribute type 1 has an invalid length. [ 689.239045][ T3857] bond12: entered promiscuous mode [ 689.244638][ T3857] 8021q: adding VLAN 0 to HW filter on device bond12 [ 689.283310][ T3857] ipvlan2: entered allmulticast mode [ 689.303400][ T3857] bond12: entered allmulticast mode [ 689.366604][ T3857] bond12: (slave bridge0): making interface the new active one [ 689.374879][ T3857] bridge0: entered promiscuous mode [ 689.380545][ T3857] bridge0: entered allmulticast mode [ 689.388538][ T3857] bond12: (slave bridge0): Enslaving as an active interface with an up link [ 689.414351][ T3869] netlink: 'syz.0.8329': attribute type 12 has an invalid length. [ 689.474315][ T3879] ip6t_srh: unknown srh invflags 4000 [ 689.574043][ T3885] vlan2: entered allmulticast mode [ 689.582126][ T3885] bond0: entered allmulticast mode [ 689.587476][ T3885] bond_slave_0: entered allmulticast mode [ 689.593285][ T3885] bond_slave_1: entered allmulticast mode [ 689.601225][ T3885] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8333'. [ 689.617421][ T3885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.626251][ T3885] bond_slave_0: left allmulticast mode [ 689.637596][ T3885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.646607][ T3885] bond_slave_1: left allmulticast mode [ 689.656541][ T3885] bond0 (unregistering): Released all slaves [ 689.985578][ T3901] : entered promiscuous mode [ 690.820076][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 690.828163][ C0] lec:lec_tx_timeout: lec0 [ 692.099022][T17694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.230295][T11191] lec:lec_start_xmit: lec0:No lecd attached [ 692.277304][ T3865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 692.409998][ T3911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.550350][ T3922] syzkaller1: entered promiscuous mode [ 692.567299][ T3922] syzkaller1: entered allmulticast mode [ 692.888525][ T3947] tipc: Enabling of bearer rejected, failed to enable media [ 692.930482][ T3951] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8351'. [ 692.951620][ T3950] ip6t_srh: unknown srh match flags 5F28 [ 693.140874][ T3966] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8358'. [ 693.194378][ T3971] A link change request failed with some changes committed already. Interface 26±ÿ=–a²š« may have been left with an inconsistent configuration, please check. [ 693.216284][ T3963] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8356'. [ 693.225542][ T3971] netlink: 'syz.2.8360': attribute type 1 has an invalid length. [ 693.265212][ T3971] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8360'. [ 693.311667][ T3981] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8362'. [ 693.377598][T17703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.484569][ T3981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.532241][ T3981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.561780][ T3981] bond0 (unregistering): Released all slaves [ 693.634087][ T3988] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8364'. [ 693.669717][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8368'. [ 693.679931][ T3999] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8368'. [ 694.511806][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8376'. [ 694.648166][ T4034] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 695.673633][ T4045] veth0: entered promiscuous mode [ 695.682139][ T4043] veth0: left promiscuous mode [ 695.878913][ T4057] netlink: 'syz.0.8386': attribute type 4 has an invalid length. [ 695.952706][ T4060] bond12: entered allmulticast mode [ 696.058741][ T4066] xt_l2tp: missing protocol rule (udp|l2tpip) [ 696.078111][ T4064] netlink: 'syz.0.8388': attribute type 1 has an invalid length. [ 696.408756][ T4087] netlink: 'syz.0.8393': attribute type 5 has an invalid length. [ 696.415436][ T4089] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8394'. [ 696.510151][ T4094] syzkaller0: entered promiscuous mode [ 696.521360][ T4094] syzkaller0: entered allmulticast mode [ 696.551576][ T4095] netlink: 'syz.2.8396': attribute type 1 has an invalid length. [ 696.588477][ T4095] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8396'. [ 696.612864][ T4100] xt_TPROXY: Can be used only with -p tcp or -p udp [ 696.657921][ T4095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8396'. [ 696.732461][ T4107] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001 [ 696.793992][T17702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.803731][T17702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.816238][ T4113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8400'. [ 696.860942][ T4116] x_tables: duplicate underflow at hook 1 [ 696.903684][ T4116] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8402'. [ 697.462476][ T4154] netlink: 'syz.1.8408': attribute type 64 has an invalid length. [ 697.777083][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5550 ms [ 697.785155][ C0] lec:lec_tx_timeout: lec0 [ 697.824609][ T4182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8415'. [ 697.878002][T16062] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.075432][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8419'. [ 698.085919][ T4201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8416'. [ 698.099639][ T4196] bond0: entered promiscuous mode [ 698.106686][ T4195] netlink: 'syz.0.8419': attribute type 12 has an invalid length. [ 698.115677][ T4195] netlink: 'syz.0.8419': attribute type 29 has an invalid length. [ 698.130485][ T4195] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8419'. [ 698.324760][ T4202] veth0_vlan: left promiscuous mode [ 698.497922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 698.524887][T17695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.624759][ T4272] netlink: 'syz.5.8442': attribute type 3 has an invalid length. [ 699.655408][ T4272] __nla_validate_parse: 5 callbacks suppressed [ 699.655426][ T4272] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8442'. [ 699.850685][ T4253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8436'. [ 699.861124][ T4253] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8436'. [ 700.113033][ T4300] C: renamed from lo (while UP) [ 700.121952][ T4300] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 700.331800][ T4313] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8453'. [ 700.343890][ T4313] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8453'. [ 700.479575][ T4322] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8455'. [ 700.746048][ T4335] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.8458'. [ 700.882658][ T4343] smc: net device team0 applied user defined pnetid SYZ2 [ 700.953241][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8463'. [ 700.988735][ T4347] bond13: invalid ARP target 0.0.0.0 specified for addition [ 700.996156][ T4347] bond13: option arp_ip_target: invalid value (0) [ 701.005510][ T4347] bond13 (unregistering): Released all slaves [ 701.343809][ T4368] netlink: 'syz.0.8472': attribute type 6 has an invalid length. [ 701.501249][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8476'. [ 701.511595][ T4376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 701.534866][ T4376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 701.617090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.626289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.645706][ T4381] bond12: option packets_per_slave: invalid value (18446744073709551615) [ 701.661456][ T4381] bond12: option packets_per_slave: allowed values 0 - 65535 [ 701.681616][ T4381] bond12 (unregistering): Released all slaves [ 701.759714][ T4388] bond2: invalid ARP target 0.0.0.0 specified for addition [ 701.778445][ T4388] bond2: option arp_ip_target: invalid value (0) [ 701.793678][ T4397] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8481'. [ 701.805263][ T4388] bond2 (unregistering): Released all slaves [ 702.002427][ T4406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 702.987593][T17687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.140301][ T4487] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 703.633974][T17694] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 704.499964][ T4560] tipc: Resetting bearer [ 704.591482][T17702] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.600894][T17702] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.616500][T17702] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.637766][T17702] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.804704][ T4576] __nla_validate_parse: 7 callbacks suppressed [ 704.804724][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8530'. [ 704.828587][ T4576] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 704.842121][ T4576] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 704.854819][ T4576] gretap1: entered promiscuous mode [ 704.864138][ T4576] gretap1: entered allmulticast mode [ 704.933754][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.940918][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.948453][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.955630][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.020783][ T4587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 705.357230][ T4576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 705.366162][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8530'. [ 705.533258][ T4633] netlink: 'syz.5.8541': attribute type 12 has an invalid length. [ 705.559740][ T4629] netlink: 'syz.5.8541': attribute type 12 has an invalid length. [ 705.688818][ T4642] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.8542'. [ 706.004930][ T4662] netlink: 'syz.0.8549': attribute type 1 has an invalid length. [ 706.026994][ T4662] netlink: 'syz.0.8549': attribute type 1 has an invalid length. [ 706.063840][ T4667] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 706.074199][ T4668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8551'. [ 706.098890][ T4663] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 706.117821][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8549'. [ 706.162194][ T4662] bond0: entered promiscuous mode [ 706.176774][ T4662] bond0: left promiscuous mode [ 706.199767][T26180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.208820][ T4678] netlink: 'syz.5.8553': attribute type 10 has an invalid length. [ 706.261863][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.285218][ T4678] bridge_slave_1: left allmulticast mode [ 706.311381][ T4678] bridge_slave_1: left promiscuous mode [ 706.322289][ T4678] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.519437][ T4694] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8559'. [ 706.611280][ T4700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8561'. [ 706.640197][ T4700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 706.996949][ T4705] netlink: zone id is out of range [ 707.002149][ T4705] netlink: zone id is out of range [ 707.007712][ T4705] netlink: zone id is out of range [ 707.012837][ T4705] netlink: zone id is out of range [ 707.018575][ T4705] netlink: zone id is out of range [ 707.104581][ T4717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8566'. [ 707.115436][ T4713] bond0: entered promiscuous mode [ 707.116750][ T4717] netlink: 'syz.5.8566': attribute type 10 has an invalid length. [ 707.123435][ T4713] bond0: entered allmulticast mode [ 707.135460][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.160154][ T4717] team0: Device vxcan1 is of different type [ 707.162623][ T4706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8562'. [ 707.180343][ T4705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8562'. [ 708.097985][T17687] net_ratelimit: 190 callbacks suppressed [ 708.098003][T17687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.226302][ T4789] syzkaller0: entered promiscuous mode [ 708.248168][ T4789] syzkaller0: entered allmulticast mode [ 708.743565][T17703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.951080][ T4839] x_tables: unsorted entry at hook 1 [ 709.692410][ T4877] 8021q: VLANs not supported on wg1 [ 709.878344][ T4890] __nla_validate_parse: 19 callbacks suppressed [ 709.878361][ T4890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8622'. [ 710.283650][ T4895] gre2: entered promiscuous mode [ 710.298003][ T4895] gre2: entered allmulticast mode [ 710.647767][ T4907] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 710.686572][ T4907] syzkaller0: entered promiscuous mode [ 710.692348][ T4907] syzkaller0: entered allmulticast mode [ 710.776702][ T4916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8628'. [ 711.031194][ T4924] netlink: 'syz.1.8630': attribute type 32 has an invalid length. [ 711.076428][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8630'. [ 711.155030][ T4924] bond16: option coupled_control: invalid value (192) [ 711.171087][ T4924] bond16 (unregistering): Released all slaves [ 711.297376][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.450998][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8634'. [ 711.621205][ T4943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8637'. [ 711.728439][ T4943] syzkaller0: entered allmulticast mode [ 711.813692][ T4943] syzkaller0 (unregistering): left allmulticast mode [ 712.253734][ T4979] batman_adv: batadv0: Adding interface: dummy0 [ 712.272337][ T4979] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.317770][ T4979] batman_adv: batadv0: Interface activated: dummy0 [ 712.906407][ T5014] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 712.943776][ T5007] syzkaller0: entered promiscuous mode [ 712.953228][ T5007] syzkaller0: entered allmulticast mode [ 713.445425][ T5041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8663'. [ 713.517555][ T5049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8664'. [ 713.688710][ T5059] netlink: 'syz.1.8666': attribute type 11 has an invalid length. [ 713.730317][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8667'. [ 713.779909][T17695] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.793229][ T5065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8668'. [ 713.827491][ T5065] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8668'. [ 713.858362][T17702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.934552][ T5078] netlink: 'syz.0.8671': attribute type 1 has an invalid length. [ 714.058016][ T5065] bridge6: entered promiscuous mode [ 714.063323][ T5065] bridge6: entered allmulticast mode [ 714.108455][ T5078] 8021q: adding VLAN 0 to HW filter on device bond6 [ 714.119306][ T5081] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 714.151104][ T5082] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 714.260507][ T5091] : renamed from hsr0 (while UP) [ 714.304998][ T5090] sctp: [Deprecated]: syz.1.8675 (pid 5090) Use of int in max_burst socket option. [ 714.304998][ T5090] Use struct sctp_assoc_value instead [ 714.790708][ T5126] netlink: 'syz.4.8690': attribute type 4 has an invalid length. [ 714.891478][ T5137] __nla_validate_parse: 4 callbacks suppressed [ 714.891499][ T5137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8693'. [ 714.931936][ T5147] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.8696'. [ 715.022916][ T5150] rdma_op ffff8880ad21b9f0 conn xmit_rdma 0000000000000000 [ 715.115072][ T5154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8698'. [ 715.162561][ T5154] veth0_macvtap: left promiscuous mode [ 715.247053][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8700'. [ 715.271901][ T5169] netlink: 'syz.0.8701': attribute type 7 has an invalid length. [ 715.280604][ T5162] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8700'. [ 715.652255][ T5199] syzkaller0: entered promiscuous mode [ 716.036507][ T5219] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 716.067118][ T5218] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:20002 [ 716.437651][ T5239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8717'. [ 716.489988][ T5239] "syz.0.8717" (5239) uses obsolete ecb(arc4) skcipher [ 717.208370][ T5269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8725'. [ 717.415500][ T5282] netlink: 'syz.0.8728': attribute type 10 has an invalid length. [ 717.480570][ T5282] bridge_slave_1: left allmulticast mode [ 717.486975][ T5282] bridge_slave_1: left promiscuous mode [ 717.492878][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.759902][ T5299] pimreg: entered allmulticast mode [ 718.012372][ T5310] delete_channel: no stack [ 718.411520][ T5335] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8741'. [ 718.447580][ T5339] syzkaller0: entered promiscuous mode [ 718.494544][ T5330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8740'. [ 718.499616][ T5339] syzkaller0: entered allmulticast mode [ 718.793699][ T5360] openvswitch: netlink: Missing key (keys=40, expected=100) [ 719.151313][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8756'. [ 719.344185][ T5410] sctp: [Deprecated]: syz.0.8761 (pid 5410) Use of int in max_burst socket option. [ 719.344185][ T5410] Use struct sctp_assoc_value instead [ 719.609886][ T5432] x_tables: duplicate underflow at hook 4 [ 719.816705][ T5440] bond7: option miimon: invalid value (18446744073709551585) [ 719.846528][ T5440] bond7: option miimon: allowed values 0 - 2147483647 [ 719.877622][ T5440] bond7 (unregistering): Released all slaves [ 720.254664][ T5466] sch_fq: defrate 0 ignored. [ 720.810713][ T5488] netlink: 'syz.4.8782': attribute type 2 has an invalid length. [ 720.823701][ T5488] netlink: 'syz.4.8782': attribute type 2 has an invalid length. [ 721.025230][ T5504] netlink: 'syz.2.8783': attribute type 4 has an invalid length. [ 721.162701][ T5515] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8786'. [ 721.196446][ T5516] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8786'. [ 721.227660][ T5501] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 721.237669][ T5501] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 721.303408][ T5520] netlink: 100 bytes leftover after parsing attributes in process `syz.4.8788'. [ 721.385170][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8790'. [ 721.417843][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8790'. [ 721.466291][ T5530] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8792'. [ 721.519184][ T5534] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.8792'. [ 721.725892][ T5542] netlink: 'syz.5.8795': attribute type 3 has an invalid length. [ 722.145368][ T5563] netlink: 'syz.5.8801': attribute type 58 has an invalid length. [ 722.153916][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8801'. [ 722.226442][ T5567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8802'. [ 722.670677][ T5596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 722.699176][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 722.709873][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 722.719189][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 722.729672][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 722.740455][ T5596] Cannot find add_set index 46338 as target [ 722.747054][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 722.753882][ T5600] netlink: 'syz.2.8810': attribute type 10 has an invalid length. [ 722.857586][ T5603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8812'. [ 723.144835][T27355] syz_tun (unregistering): left allmulticast mode [ 723.572157][ T5597] chnl_net:caif_netlink_parms(): no params data found [ 723.597828][ T5651] IPVS: length: 239 != 24 [ 723.731926][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.740137][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.747625][ T5597] bridge_slave_0: entered allmulticast mode [ 723.755184][ T5597] bridge_slave_0: entered promiscuous mode [ 723.780754][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.789028][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.796327][ T5597] bridge_slave_1: entered allmulticast mode [ 723.803999][ T5597] bridge_slave_1: entered promiscuous mode [ 723.876499][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.920075][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.003717][ T5597] team0: Port device team_slave_0 added [ 724.065028][ T5597] team0: Port device team_slave_1 added [ 724.168862][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.191419][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.220678][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.299990][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.312797][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.342544][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.589553][ T5597] hsr_slave_0: entered promiscuous mode [ 724.615111][ T5597] hsr_slave_1: entered promiscuous mode [ 724.655324][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 724.675127][ T5597] Cannot create hsr debugfs directory [ 724.820077][ T51] Bluetooth: hci6: command tx timeout [ 725.101025][ T5597] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.139122][ T5597] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.167243][ T5716] netlink: 'syz.4.8837': attribute type 14 has an invalid length. [ 725.176072][ T5716] netlink: 'syz.4.8837': attribute type 14 has an invalid length. [ 725.321370][ T5597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.378682][ T5597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.397672][ T5726] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 725.428378][ T5724] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 725.555227][ T5597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.578225][ T5597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.828320][ T5597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.849805][ T5597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.279814][ T5597] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 726.303916][ T5597] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 726.306243][ T5774] netlink: 'syz.0.8850': attribute type 10 has an invalid length. [ 726.331374][ T5597] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 726.394047][ T5597] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 726.549308][ T5793] __nla_validate_parse: 11 callbacks suppressed [ 726.549328][ T5793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8852'. [ 726.556288][ T5792] openvswitch: netlink: IP tunnel dst address not specified [ 726.599902][ T5795] netlink: 'syz.5.8854': attribute type 1 has an invalid length. [ 726.623115][ T5793] macsec1: entered promiscuous mode [ 726.637165][ T5793] bridge0: entered promiscuous mode [ 726.647446][ T5793] macsec1: entered allmulticast mode [ 726.660410][ T5793] bridge0: entered allmulticast mode [ 726.669284][ T5793] bridge0: port 2(macsec1) entered blocking state [ 726.676110][ T5793] bridge0: port 2(macsec1) entered disabled state [ 726.694937][ T5793] bridge0: left allmulticast mode [ 726.701154][ T5793] bridge0: left promiscuous mode [ 726.746760][ T5795] bond2: entered promiscuous mode [ 726.754800][ T5795] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.786058][ T5800] bond2: (slave bridge5): making interface the new active one [ 726.794738][ T5800] bridge5: entered promiscuous mode [ 726.802158][ T5800] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 726.901714][ T51] Bluetooth: hci6: command tx timeout [ 726.945809][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.075346][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.118635][T16062] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.125805][T16062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.187374][T16062] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.194586][T16062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.268830][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8860'. [ 727.325116][ T5825] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8861'. [ 727.329123][ T5819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8860'. [ 727.474890][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8865'. [ 727.490420][ T5833] netlink: 'syz.0.8865': attribute type 9 has an invalid length. [ 727.653296][ T5840] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 727.680904][ T5840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8867'. [ 727.711351][ T5846] ip6gre0: Master is either lo or non-ether device [ 727.751318][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.887401][ T5597] veth0_vlan: entered promiscuous mode [ 727.900708][ T5597] veth1_vlan: entered promiscuous mode [ 727.912064][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8872'. [ 727.984858][ T5597] veth0_macvtap: entered promiscuous mode [ 728.012705][ T5866] gretap2: entered promiscuous mode [ 728.052034][ T5597] veth1_macvtap: entered promiscuous mode [ 728.085211][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.111678][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.135259][ T5874] netlink: 'syz.2.8876': attribute type 9 has an invalid length. [ 728.162585][T16062] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.164195][ T5874] netlink: 'syz.2.8876': attribute type 11 has an invalid length. [ 728.183013][ T5874] netlink: 'syz.2.8876': attribute type 12 has an invalid length. [ 728.191880][ T5874] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.8876'. [ 728.195532][T16062] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.236511][T16062] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.251456][T16062] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.283708][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8877'. [ 728.453398][T17687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.471889][T17687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.525753][T17695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.549253][ T5894] netlink: 'syz.2.8881': attribute type 1 has an invalid length. [ 728.552668][T17695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.633151][ T5902] netlink: 'syz.4.8882': attribute type 29 has an invalid length. [ 728.648163][ T5902] netlink: 'syz.4.8882': attribute type 29 has an invalid length. [ 728.661782][ T5900] syzkaller1: entered promiscuous mode [ 728.682827][ T5900] syzkaller1: entered allmulticast mode [ 728.706750][ T5906] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8805'. [ 728.708009][ T5902] netlink: 'syz.4.8882': attribute type 32 has an invalid length. [ 728.900452][ T5921] netlink: 'syz.2.8885': attribute type 11 has an invalid length. [ 728.981331][ T51] Bluetooth: hci6: command tx timeout [ 728.985927][ T5930] openvswitch: netlink: Flow key attribute not present in set flow. [ 729.364828][ T5954] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 729.385387][ T51] Bluetooth: hci1: command tx timeout [ 729.457580][T24602] page_pool_release_retry() stalled pool shutdown: id 195, 1 inflight 60 sec [ 729.668681][ T5968] team0: Port device veth3 added [ 729.696623][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 729.708951][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 729.724292][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 729.744159][ T5965] team0: Port device gretap1 added [ 729.770366][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 729.779594][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 729.870610][ T5968] macvlan2: entered promiscuous mode [ 729.875999][ T5968] macvlan2: entered allmulticast mode [ 729.882760][ T5968] team0: Device macvlan2 is already an upper device of the team interface [ 730.689232][ T5973] chnl_net:caif_netlink_parms(): no params data found [ 731.015824][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.023949][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.034115][ T5973] bridge_slave_0: entered allmulticast mode [ 731.043471][ T5973] bridge_slave_0: entered promiscuous mode [ 731.053725][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.061260][ T51] Bluetooth: hci6: command tx timeout [ 731.069204][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.081689][ T5973] bridge_slave_1: entered allmulticast mode [ 731.090327][ T5973] bridge_slave_1: entered promiscuous mode [ 731.127225][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.141209][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.180423][ T5973] team0: Port device team_slave_0 added [ 731.189545][ T5973] team0: Port device team_slave_1 added [ 731.242403][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.265865][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.318129][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.380091][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.391164][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.433887][ T6058] netlink: zone id is out of range [ 731.439187][ T6058] netlink: zone id is out of range [ 731.444596][ T6058] netlink: zone id is out of range [ 731.451088][ T6058] netlink: zone id is out of range [ 731.457330][ T51] Bluetooth: hci1: command tx timeout [ 731.473542][ T6058] netlink: zone id is out of range [ 731.479223][ T6058] netlink: zone id is out of range [ 731.485293][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.488087][ T6058] netlink: zone id is out of range [ 731.518640][ T6062] bridge0: left allmulticast mode [ 731.520698][ T6058] netlink: zone id is out of range [ 731.524270][ T6062] pimreg: left allmulticast mode [ 731.528977][ T6058] netlink: zone id is out of range [ 731.528990][ T6058] netlink: zone id is out of range [ 731.654161][ T5973] hsr_slave_0: entered promiscuous mode [ 731.748600][ T5973] hsr_slave_1: entered promiscuous mode [ 731.754917][ T5973] debugfs: 'hsr0' already exists in 'hsr' [ 731.766866][ T5973] Cannot create hsr debugfs directory [ 731.861074][ T51] Bluetooth: hci5: command tx timeout [ 731.902968][T17710] bridge_slave_0: left promiscuous mode [ 731.949395][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.201696][T17710] dvmrp8 (unregistering): left allmulticast mode [ 732.363967][T17710] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 732.372422][T17710] bridge3 (unregistering): left promiscuous mode [ 732.541709][T17710] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.551764][T17710] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.561961][T17710] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 732.573889][T17710] .` (unregistering): Released all slaves [ 732.590302][T17710] bond0 (unregistering): Released all slaves [ 732.608524][T17710] bond1 (unregistering): Released all slaves [ 732.623049][T17710] bond2 (unregistering): Released all slaves [ 732.635597][T17710] bond3 (unregistering): Released all slaves [ 732.651533][T17710] bond4 (unregistering): Released all slaves [ 732.668408][T17710] bond5 (unregistering): Released all slaves [ 732.684991][T17710] bond6 (unregistering): Released all slaves [ 732.887061][T17710] tipc: Disabling bearer [ 732.920458][T17710] tipc: Disabling bearer [ 732.926730][T17710] tipc: Left network mode [ 733.209056][ T6103] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.216360][ T6103] IPv6: NLM_F_CREATE should be set when creating new route [ 733.220169][ T6101] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 733.223763][ T6103] IPv6: NLM_F_CREATE should be set when creating new route [ 733.528356][ T6116] validate_nla: 1 callbacks suppressed [ 733.528375][ T6116] netlink: 'syz.1.8947': attribute type 2 has an invalid length. [ 733.529063][ T6114] : renamed from bond0 (while UP) [ 733.542031][ T6116] netlink: 'syz.1.8947': attribute type 2 has an invalid length. [ 733.542055][ T6116] netlink: 'syz.1.8947': attribute type 2 has an invalid length. [ 733.542071][ T6116] netlink: 'syz.1.8947': attribute type 1 has an invalid length. [ 733.543132][ T6116] __nla_validate_parse: 78 callbacks suppressed [ 733.543147][ T6116] netlink: 332 bytes leftover after parsing attributes in process `syz.1.8947'. [ 733.606528][ T6118] batman_adv: batadv0: Adding interface: dummy0 [ 733.616092][ T6118] batman_adv: batadv0: Interface activated: dummy0 [ 733.734838][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8945'. [ 733.784860][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8951'. [ 733.873877][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8945'. [ 733.878904][ T6125] ip6tnl2: entered allmulticast mode [ 733.910003][ T6126] team0 (unregistering): Port device team_slave_0 removed [ 733.938332][ T51] Bluetooth: hci5: command tx timeout [ 733.950183][ T6126] team0 (unregistering): Port device team_slave_1 removed [ 734.363838][ T6106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.396596][ T6144] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.8955'. [ 734.431087][T17710] hsr_slave_0: left promiscuous mode [ 734.444380][T17710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.487900][T17710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.910145][T17710] team0 (unregistering): Port device team_slave_1 removed [ 735.550324][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 735.616513][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8962'. [ 735.618658][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 735.673491][ T6171] : entered promiscuous mode [ 735.683849][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 735.711457][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 735.773172][T17710] IPVS: stop unused estimator thread 0... [ 735.950329][ T6196] syzkaller0: entered promiscuous mode [ 735.955848][ T6196] syzkaller0: entered allmulticast mode [ 736.008564][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8966'. [ 736.022323][ T6196] netlink: 'syz.2.8966': attribute type 18 has an invalid length. [ 736.030201][ T51] Bluetooth: hci5: command tx timeout [ 736.079753][ T6199] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 736.099508][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8966'. [ 736.114136][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.165595][ T6205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8966'. [ 736.174425][ T5973] 8021q: adding VLAN 0 to HW filter on device team0 [ 736.183685][ T6203] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.8968'. [ 736.199294][ T6196] netlink: 'syz.2.8966': attribute type 18 has an invalid length. [ 736.220040][T17703] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.227233][T17703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 736.303785][ T6200] geneve3: entered promiscuous mode [ 736.314225][ T6200] geneve3: entered allmulticast mode [ 736.329885][T16062] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 736.347410][T16062] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 736.356260][T16062] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 736.375111][T17703] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.382352][T17703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.474363][T16062] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 736.834098][T17691] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.985889][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.091215][ T5973] veth0_vlan: entered promiscuous mode [ 737.118709][ T5973] veth1_vlan: entered promiscuous mode [ 737.189892][ T5973] veth0_macvtap: entered promiscuous mode [ 737.218961][ T5973] veth1_macvtap: entered promiscuous mode [ 737.272007][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.285791][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.305748][T17695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.321039][T17695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.361650][T17695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.371181][T17695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.493120][T17687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.509482][T17687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 737.574547][T17687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.586478][T17687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.097039][ T51] Bluetooth: hci5: command tx timeout [ 738.392039][ T6319] IPVS: set_ctl: invalid protocol: 4 172.20.20.45:20000 [ 738.591547][ T6338] __nla_validate_parse: 18 callbacks suppressed [ 738.591569][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9002'. [ 738.620710][ T6336] tipc: Started in network mode [ 738.625598][ T6336] tipc: Node identity 8ed83cbf4e2a, cluster identity 4711 [ 738.633441][ T6336] tipc: Enabled bearer , priority 0 [ 738.648235][ T6336] syzkaller0: entered promiscuous mode [ 738.653876][ T6336] syzkaller0: entered allmulticast mode [ 738.673824][ T6335] tipc: Resetting bearer [ 738.708689][ T6335] tipc: Disabling bearer [ 738.995800][ T6361] bond1: option min_links: invalid value (18446744073709551614) [ 739.027414][ T6361] bond1: option min_links: allowed values 0 - 2147483647 [ 739.058095][ T6361] bond1 (unregistering): Released all slaves [ 739.093492][ T6367] x_tables: duplicate underflow at hook 1 [ 739.170303][ T6367] syzkaller0: entered promiscuous mode [ 739.175827][ T6367] syzkaller0: entered allmulticast mode [ 739.339945][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9018'. [ 739.389998][ T6387] netlink: 64985 bytes leftover after parsing attributes in process `syz.5.9019'. [ 739.442654][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9019'. [ 739.494822][ T6387] netlink: 'syz.5.9019': attribute type 1 has an invalid length. [ 739.517759][ T6387] netlink: 'syz.5.9019': attribute type 2 has an invalid length. [ 739.541339][ T6403] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 739.582396][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.805597][ T6398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.196298][ T6443] netlink: 'syz.4.9032': attribute type 21 has an invalid length. [ 740.213976][ T6446] tipc: Failed to remove unknown binding: 66,0,0/0:2675382009/2675382010 [ 740.225685][ T6443] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9032'. [ 740.246432][ T6446] tipc: Failed to remove unknown binding: 66,0,0/0:2675382009/2675382010 [ 740.262890][ T6443] netlink: 'syz.4.9032': attribute type 4 has an invalid length. [ 740.274925][ T6443] netlink: 'syz.4.9032': attribute type 5 has an invalid length. [ 740.283851][ T6443] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9032'. [ 740.285025][ T6451] netlink: 'syz.4.9032': attribute type 21 has an invalid length. [ 740.339752][ T6443] netlink: 596 bytes leftover after parsing attributes in process `syz.4.9032'. [ 740.347608][ T6451] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9032'. [ 740.395115][ T6451] netlink: 'syz.4.9032': attribute type 4 has an invalid length. [ 740.455522][ T6451] netlink: 'syz.4.9032': attribute type 5 has an invalid length. [ 740.469804][ T6451] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9032'. [ 740.656280][ T6466] syzkaller0: entered promiscuous mode [ 740.679930][ T6466] syzkaller0: entered allmulticast mode [ 740.762030][ T6482] netlink: 'syz.0.9041': attribute type 64 has an invalid length. [ 740.807197][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9041'. [ 740.868791][ T6490] netlink: 'syz.0.9041': attribute type 64 has an invalid length. [ 740.907277][ T6492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.150390][ T6503] net_ratelimit: 207 callbacks suppressed [ 741.150409][ T6503] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 741.893518][ T6551] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.393473][ T6573] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 742.905638][ T6607] gretap4: entered promiscuous mode [ 742.933400][ T6607] gretap4: entered allmulticast mode [ 743.206491][ T6617] syzkaller1: entered promiscuous mode [ 743.239053][ T6617] syzkaller1: entered allmulticast mode [ 743.397590][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.405001][ T6630] bridge_slave_1: left allmulticast mode [ 743.416352][ T6630] bridge_slave_1: left promiscuous mode [ 743.424164][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.441441][ T6630] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 743.493144][ T6636] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 743.664852][ T6644] xt_policy: too many policy elements [ 743.805424][ T6653] __nla_validate_parse: 13 callbacks suppressed [ 743.805453][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9086'. [ 743.954625][ T6649] bond13: (slave veth17): Enslaving as an active interface with a down link [ 743.998468][ T6653] 8021q: adding VLAN 0 to HW filter on device bond13 [ 744.021546][ T6661] ±ÿ: renamed from team_slave_1 [ 744.260214][ T6678] netlink: 41 bytes leftover after parsing attributes in process `syz.4.9094'. [ 744.307937][ T6678] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9094'. [ 744.528951][ T6696] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 744.592667][ T6696] team0: Device macvlan2 is already an upper device of the team interface [ 744.707368][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9103'. [ 744.879974][T24602] IPVS: starting estimator thread 0... [ 744.928514][ T6733] validate_nla: 8 callbacks suppressed [ 744.928533][ T6733] netlink: 'syz.0.9108': attribute type 1 has an invalid length. [ 744.962663][ T6733] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.977246][ T6731] IPVS: using max 30 ests per chain, 72000 per kthread [ 745.025318][ T6736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9110'. [ 745.462405][ T6749] syzkaller0: entered promiscuous mode [ 745.468083][ T6749] syzkaller0: entered allmulticast mode [ 745.535635][ T6759] netlink: 'syz.5.9118': attribute type 1 has an invalid length. [ 745.892007][ T6775] netlink: 'syz.0.9123': attribute type 1 has an invalid length. [ 747.142664][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 747.154352][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 747.412502][ T6759] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 747.413626][ T6775] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 747.480532][ T6777] veth3: entered promiscuous mode [ 747.831153][T17691] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.852172][T17691] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.887691][T17691] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 747.908112][ T6813] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.9133'. [ 747.949185][T17691] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.432942][ T6840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 748.623507][ T6857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9140'. [ 749.026347][ T6873] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9145'. [ 749.286680][ T6889] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9151'. [ 749.310080][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9151'. [ 749.383752][ T6889] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 749.471495][ T6893] tipc: Started in network mode [ 749.487556][ T6893] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 749.501737][ T6893] tipc: Enabling of bearer rejected, failed to enable media [ 749.553607][ T6900] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9156'. [ 749.612406][ T6905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9157'. [ 749.784595][ T6910] wireguard1: entered promiscuous mode [ 749.792806][ T6910] wireguard1: entered allmulticast mode [ 749.946748][ T6927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9160'. [ 750.345491][ T6945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9163'. [ 750.347637][ T6944] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9163'. [ 750.386662][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9165'. [ 750.801075][ T6976] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9170'. [ 750.996273][ T6987] netlink: 'syz.5.9169': attribute type 10 has an invalid length. [ 751.052862][ T6987] team0: Device vxcan1 is of different type [ 751.522661][ T7024] sch_tbf: peakrate 16 is lower than or equals to rate 18089869557166311621 ! [ 751.736623][ T7029] netlink: 'syz.0.9180': attribute type 5 has an invalid length. [ 751.745726][ T7030] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.762403][ T7030] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.771823][ T7030] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 751.780122][ T7030] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 751.790174][ T7030] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 751.831180][ T5897] IPVS: starting estimator thread 0... [ 751.930250][ T7036] IPVS: using max 30 ests per chain, 72000 per kthread [ 752.251214][T17702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.268479][T17702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.280756][T17702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 752.408121][T17702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.419956][T17702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.430797][T17702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 752.455221][ T7059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 752.562114][T17702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.577916][T17702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.595403][T17702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 752.695387][T17702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 752.705874][T17702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.720123][T17702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 752.816918][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 752.825007][ C0] lec:lec_tx_timeout: lec0 [ 752.838089][ T7027] chnl_net:caif_netlink_parms(): no params data found [ 752.971405][T16062] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 752.998752][ T7027] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.006015][ T7027] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.013608][ T7027] bridge_slave_0: entered allmulticast mode [ 753.021811][ T7027] bridge_slave_0: entered promiscuous mode [ 753.042862][T16062] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.075954][ T7027] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.083470][ T7027] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.091635][ T7027] bridge_slave_1: entered allmulticast mode [ 753.100433][ T7027] bridge_slave_1: entered promiscuous mode [ 753.145032][T17691] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.168593][ T7027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 753.183301][ T7027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 753.203681][T16062] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 753.241030][ T7027] team0: Port device team_slave_0 added [ 753.247439][T17702] bridge_slave_0: left allmulticast mode [ 753.254880][T17702] bridge_slave_0: left promiscuous mode [ 753.260860][T17702] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.522496][T17702] bond10 (unregistering): (slave gretap2): Releasing active interface [ 753.565846][T17702] dvmrp0 (unregistering): left allmulticast mode [ 753.585744][T17702] bond4 (unregistering): (slave geneve2): Releasing active interface [ 753.857015][ T51] Bluetooth: hci3: command tx timeout [ 753.994289][T17702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.005069][T17702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.016112][T17702] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 754.028172][T17702] bond0 (unregistering): Released all slaves [ 754.039016][T17702] bond1 (unregistering): Released all slaves [ 754.052400][T17702] bond2 (unregistering): (slave 26±ÿ=–a²š«): Releasing backup interface [ 754.062166][T17702] bond2 (unregistering): (slave 26±ÿ=–a²š«): last VLAN challenged slave left bond - VLAN blocking is removed [ 754.079681][T17702] bond2 (unregistering): Released all slaves [ 754.092670][T17702] bond3 (unregistering): Released all slaves [ 754.107384][ T7001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 754.108665][T17702] bond4 (unregistering): Released all slaves [ 754.136087][T17702] bond5 (unregistering): Released all slaves [ 754.181694][T17702] bond6 (unregistering): Released all slaves [ 754.253816][T17702] bond7 (unregistering): Released all slaves [ 754.328969][T17702] bond8 (unregistering): (slave vcan0): Releasing backup interface [ 754.357243][T17702] vcan0: left promiscuous mode [ 754.370450][T17702] bond8 (unregistering): Released all slaves [ 754.422169][T17702] bond9 (unregistering): Released all slaves [ 754.485851][T17702] bond10 (unregistering): (slave veth7): Releasing active interface [ 754.510007][T17702] bond10 (unregistering): Released all slaves [ 754.542783][T17702] bond11 (unregistering): Released all slaves [ 754.565234][T17702] bond12 (unregistering): Released all slaves [ 754.596952][T17702] bond13 (unregistering): (slave veth17): Releasing active interface [ 754.608143][T17702] bond13 (unregistering): Released all slaves [ 754.636713][ T7027] team0: Port device team_slave_1 added [ 754.782639][T17702] : left promiscuous mode [ 754.806318][ T7084] lec:lec_atm_close: lec0: Shut down! [ 754.829780][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 754.838748][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.882475][ T7027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.912777][T17702] tipc: Disabling bearer [ 754.926383][T17702] tipc: Left network mode [ 754.937167][ T7027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.944142][ T7027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.035688][ T7027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.073598][ T7103] __nla_validate_parse: 9 callbacks suppressed [ 755.073618][ T7103] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9196'. [ 755.245894][ T7027] hsr_slave_0: entered promiscuous mode [ 755.253491][ T7027] hsr_slave_1: entered promiscuous mode [ 755.741022][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9199'. [ 755.754950][ T7130] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9203'. [ 755.940178][ T51] Bluetooth: hci3: command tx timeout [ 756.339230][ T7152] IPv6: sit2: Disabled Multicast RS [ 756.355157][ T7152] sit2: entered allmulticast mode [ 756.655045][ T7027] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.811089][ T7027] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.929360][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9213'. [ 756.951534][ T7027] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.988014][ T7176] 8021q: VLANs not supported on gre0 [ 757.053735][ T7172] netlink: 'syz.5.9213': attribute type 9 has an invalid length. [ 757.205798][ T7027] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.997896][T17702] hsr_slave_0: left promiscuous mode [ 758.029758][ T51] Bluetooth: hci3: command tx timeout [ 758.043574][T17702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 758.074112][T17702] batadv0: mtu less than device minimum [ 758.085866][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.098583][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.110445][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.122309][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.134154][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.145985][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.157317][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.169082][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.180798][T17702] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 758.224625][T17702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 758.233167][T17702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 758.271938][T17702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 758.279772][T17702] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 758.302541][T17702] batman_adv: batadv0: Removing interface: ipvlan3 [ 758.309987][T17702] batman_adv: batadv0: Interface deactivated: dummy0 [ 758.319601][T17702] batman_adv: batadv0: Removing interface: dummy0 [ 758.330512][T17702] veth1_macvtap: left promiscuous mode [ 758.336039][T17702] veth1_vlan: left promiscuous mode [ 758.448895][T17702] pimreg (unregistering): left allmulticast mode [ 758.787443][ T7222] geneve2: entered promiscuous mode [ 758.797511][ T7027] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 758.812657][ T7027] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 758.885520][ T7027] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 758.913457][ T7027] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 759.281083][ T7248] veth0: entered promiscuous mode [ 759.314285][ T7248] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 759.363016][ T7248] veth0: left promiscuous mode [ 759.482983][ T7027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.576343][ T7027] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.588870][T17702] IPVS: stop unused estimator thread 0... [ 759.595192][ T7261] netlink: 'syz.0.9232': attribute type 1 has an invalid length. [ 759.605721][T17710] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.612992][T17710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.622420][ T7261] netlink: 184 bytes leftover after parsing attributes in process `syz.0.9232'. [ 759.641825][ T7263] Cannot find del_set index 4 as target [ 759.676406][ T7261] netlink: 'syz.0.9232': attribute type 1 has an invalid length. [ 759.692609][T17710] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.695569][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9232'. [ 759.699807][T17710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.807240][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 759.815281][ C0] lec:lec_tx_timeout: lec0 [ 759.819361][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9235'. [ 759.820420][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 759.970755][ T7285] netlink: 'syz.1.9239': attribute type 1 has an invalid length. [ 760.097626][ T7030] Bluetooth: hci3: command tx timeout [ 760.143513][ T7293] netlink: 'syz.5.9240': attribute type 39 has an invalid length. [ 760.213102][ T7291] sctp: [Deprecated]: syz.1.9241 (pid 7291) Use of int in max_burst socket option. [ 760.213102][ T7291] Use struct sctp_assoc_value instead [ 760.237620][ T7301] netlink: 'syz.0.9243': attribute type 10 has an invalid length. [ 760.263573][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9243'. [ 760.340305][ T7027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 760.446033][ T7027] veth0_vlan: entered promiscuous mode [ 760.488980][ T7027] veth1_vlan: entered promiscuous mode [ 760.550822][ T7027] veth0_macvtap: entered promiscuous mode [ 760.572810][ T7027] veth1_macvtap: entered promiscuous mode [ 760.619096][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.642187][ T7027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.686592][T17691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.701873][T17691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.729927][T17691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.781302][T17691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.047838][ T7330] netlink: 'syz.1.9250': attribute type 12 has an invalid length. [ 761.091457][T17702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.119202][T17702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.284614][ T7330] netlink: 'syz.1.9250': attribute type 12 has an invalid length. [ 761.433281][ T7330] netlink: 'syz.1.9250': attribute type 12 has an invalid length. [ 761.510376][T17691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 761.532489][T17691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.574855][ T7355] netlink: 'syz.4.9256': attribute type 1 has an invalid length. [ 761.702354][T24602] IPVS: starting estimator thread 0... [ 761.702427][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9257'. [ 761.801571][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.878690][ T7366] IPVS: using max 32 ests per chain, 76800 per kthread [ 761.918273][ T7359] vlan2: entered allmulticast mode [ 761.923433][ T7359] bond0: entered allmulticast mode [ 762.290360][ T7392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9266'. [ 762.535827][ T7413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9272'. [ 762.576622][ T7418] validate_nla: 10 callbacks suppressed [ 762.576642][ T7418] netlink: 'syz.0.9272': attribute type 10 has an invalid length. [ 762.644384][ T7418] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9272'. [ 762.663212][ T7420] netlink: 'syz.2.9273': attribute type 30 has an invalid length. [ 762.882614][ T7437] netlink: 260 bytes leftover after parsing attributes in process `syz.5.9278'. [ 762.973529][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9281'. [ 763.064951][ T7446] IPv6: NLM_F_CREATE should be specified when creating new route [ 763.089538][ T7450] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 763.096733][ T7446] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 763.458295][ T5967] net_ratelimit: 51 callbacks suppressed [ 763.458315][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.780777][ T5897] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.828017][ T7489] syzkaller0: entered promiscuous mode [ 763.833530][ T7489] syzkaller0: entered allmulticast mode [ 763.852836][ T7496] netlink: zone id is out of range [ 763.888998][ T7496] netlink: zone id is out of range [ 763.894163][ T7496] netlink: zone id is out of range [ 763.946330][ T7496] netlink: zone id is out of range [ 763.964136][ T7496] netlink: zone id is out of range [ 764.008368][ T7496] netlink: zone id is out of range [ 764.015249][ T7504] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 764.020137][ T7496] netlink: zone id is out of range [ 764.642437][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9310'. [ 764.836885][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 764.844975][ C0] lec:lec_tx_timeout: lec0 [ 765.169623][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9317'. [ 765.234968][ T7567] syzkaller0: entered promiscuous mode [ 765.289946][ T7567] syzkaller0: entered allmulticast mode [ 765.395514][ T7579] netlink: 'syz.0.9320': attribute type 1 has an invalid length. [ 765.602176][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9322'. [ 765.679477][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9325'. [ 765.849250][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.994923][ T7617] netlink: 'syz.1.9329': attribute type 9 has an invalid length. [ 766.859056][ T7645] netlink: 'syz.0.9337': attribute type 1 has an invalid length. [ 766.911596][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9338'. [ 767.569051][ T7691] netlink: 'syz.5.9346': attribute type 1 has an invalid length. [ 767.664579][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9346'. [ 767.677331][ T7697] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 767.809505][ T7706] netlink: 'syz.0.9350': attribute type 1 has an invalid length. [ 768.029469][ T7713] bond2: (slave geneve2): making interface the new active one [ 768.074610][ T7713] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 768.102262][T17702] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 768.128675][T17702] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 768.153552][T17702] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 768.196036][T17702] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 768.210484][ T7735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9355'. [ 768.666072][ T5967] net_ratelimit: 33 callbacks suppressed [ 768.666090][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.793172][ T7782] netlink: 'syz.4.9371': attribute type 1 has an invalid length. [ 768.897713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.969256][ T7790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.978732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.988951][ T7791] netlink: 'syz.1.9374': attribute type 2 has an invalid length. [ 769.048347][ T7790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.060823][T17710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.077438][ T7790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.088649][T17710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.219258][ T7805] netlink: 'syz.4.9378': attribute type 1 has an invalid length. [ 769.329950][ T7818] netlink: 'syz.1.9384': attribute type 1 has an invalid length. [ 769.362641][ T7825] netlink: zone id is out of range [ 769.368406][ T7825] netlink: zone id is out of range [ 769.386439][ T7823] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9385'. [ 769.402672][ T7823] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9385'. [ 769.474133][ T7832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9388'. [ 769.490946][ T7834] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 769.607254][ T7842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9391'. [ 769.659142][ T7842] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 769.724635][ T7851] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9394'. [ 769.840421][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.865202][ T7859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.874937][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.887715][ T7859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 770.109651][ T7871] netlink: 'syz.2.9402': attribute type 1 has an invalid length. [ 770.365657][ T7891] xt_CONNSECMARK: invalid mode: 0 [ 770.548849][ T7906] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 770.846878][T17694] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.871976][T17694] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.888955][T17694] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.913476][T17694] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 770.978909][ T7929] syzkaller1: entered promiscuous mode [ 770.984424][ T7929] syzkaller1: entered allmulticast mode [ 771.040714][ T7934] xt_hashlimit: size too large, truncated to 1048576 [ 771.164717][ T7943] __nla_validate_parse: 8 callbacks suppressed [ 771.164738][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9428'. [ 771.200993][ T7944] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9427'. [ 771.259846][ T7944] batman_adv: batadv0: Adding interface: dummy0 [ 771.266227][ T7944] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.326093][ T7944] batman_adv: batadv0: Interface activated: dummy0 [ 771.470702][ T7958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9431'. [ 771.805801][ T7981] netlink: 'syz.5.9441': attribute type 29 has an invalid length. [ 771.832888][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9441'. [ 771.866280][ T7987] netlink: 'syz.5.9441': attribute type 29 has an invalid length. [ 771.874749][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9441'. [ 772.260905][ T8005] netlink: 'syz.0.9448': attribute type 10 has an invalid length. [ 772.339773][ T8005] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 772.353703][ T8008] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.9449'. [ 772.380061][ T1019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 772.384447][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9449'. [ 772.389442][ T1019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.423138][ T8005] netlink: 'syz.0.9448': attribute type 4 has an invalid length. [ 772.691779][T17695] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.735606][T17695] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.761763][T17695] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.831152][T17695] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.907282][ T8040] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9453'. [ 773.039615][ T8047] veth0: entered promiscuous mode [ 773.088373][ T8050] netlink: 'syz.1.9456': attribute type 4 has an invalid length. [ 773.119691][ T8047] syzkaller0: entered promiscuous mode [ 773.131438][ T8051] netlink: 'syz.1.9456': attribute type 4 has an invalid length. [ 773.138031][ T8047] syzkaller0: entered allmulticast mode [ 773.200676][ T8053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9456'. [ 773.311018][ T8063] netlink: 'syz.5.9459': attribute type 29 has an invalid length. [ 773.365313][ T8043] veth0: left promiscuous mode [ 773.375606][ T8060] syzkaller0: entered promiscuous mode [ 773.404113][ T8060] syzkaller0: entered allmulticast mode [ 773.598651][ T8085] sock: sock_timestamping_bind_phc: sock not bind to device [ 773.635294][ T8084] sock: sock_timestamping_bind_phc: sock not bind to device [ 773.755264][ T8092] can: request_module (can-proto-4) failed. [ 773.763338][ T8095] delete_channel: no stack [ 773.779444][ T8095] netlink: 'syz.4.9470': attribute type 27 has an invalid length. [ 773.857352][ T5875] net_ratelimit: 229 callbacks suppressed [ 773.857370][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.943939][ T8114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.953751][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.112197][ T8125] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9479'. [ 774.141018][ T8124] bridge_slave_0: invalid flags given to default FDB implementation [ 774.168294][ T8129] IPv6: NLM_F_REPLACE set, but no existing node found! [ 774.432223][ T6806] udevd[6806]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 774.556792][ T8146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.567181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.677734][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.897268][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.498340][ T8191] netlink: 'syz.5.9499': attribute type 14 has an invalid length. [ 775.520674][ T8191] netlink: 'syz.5.9499': attribute type 13 has an invalid length. [ 775.833860][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.842433][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.938769][T26180] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.182415][ T8243] IPv6: Can't replace route, no match found [ 776.288688][ T8248] __nla_validate_parse: 9 callbacks suppressed [ 776.288709][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9515'. [ 776.405372][ T8260] netlink: 'syz.4.9518': attribute type 10 has an invalid length. [ 776.479870][ T8266] Cannot find map_set index 65533 as target [ 776.502247][ T8269] netlink: 88 bytes leftover after parsing attributes in process `syz.4.9523'. [ 776.525398][ T8272] bond0: entered allmulticast mode [ 776.533876][ T8272] bond_slave_0: entered allmulticast mode [ 776.541202][ T8272] bond_slave_1: entered allmulticast mode [ 776.561567][ T8273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9522'. [ 776.608888][ T8273] bond0: left allmulticast mode [ 776.613773][ T8273] bond_slave_0: left allmulticast mode [ 776.642824][ T8273] bond_slave_1: left allmulticast mode [ 776.660823][ T8285] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9526'. [ 776.677997][ T8285] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9526'. [ 776.704808][ T8289] netlink: 'syz.1.9527': attribute type 1 has an invalid length. [ 776.720639][ T8291] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9528'. [ 776.946601][ T7030] block nbd0: Receive control failed (result -1) [ 777.772690][ T8331] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9539'. [ 777.901062][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 777.914361][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 777.923662][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 777.940715][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 777.958885][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 777.990805][ T7030] [ 777.993180][ T7030] ====================================================== [ 778.000209][ T7030] WARNING: possible circular locking dependency detected [ 778.007248][ T7030] syzkaller #0 Not tainted [ 778.011669][ T7030] ------------------------------------------------------ [ 778.018675][ T7030] kworker/u9:1/7030 is trying to acquire lock: [ 778.024834][ T7030] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x46c/0x540 [ 778.035287][ T7030] [ 778.035287][ T7030] but task is already holding lock: [ 778.042646][ T7030] ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 778.052056][ T7030] [ 778.052056][ T7030] which lock already depends on the new lock. [ 778.052056][ T7030] [ 778.062447][ T7030] [ 778.062447][ T7030] the existing dependency chain (in reverse order) is: [ 778.071448][ T7030] [ 778.071448][ T7030] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 778.079520][ T7030] down_write+0x96/0x200 [ 778.084295][ T7030] kernfs_add_one+0x41/0x5c0 [ 778.089401][ T7030] kernfs_create_dir_ns+0xde/0x130 [ 778.095106][ T7030] internal_create_group+0x425/0x1180 [ 778.101000][ T7030] cpuhp_invoke_callback+0x445/0x860 [ 778.106810][ T7030] cpuhp_issue_call+0x430/0x7a0 [ 778.112178][ T7030] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 778.118767][ T7030] __cpuhp_setup_state+0x3f/0x60 [ 778.124244][ T7030] do_one_initcall+0x250/0x8d0 [ 778.129526][ T7030] do_initcall_level+0x104/0x190 [ 778.134983][ T7030] do_initcalls+0x59/0xa0 [ 778.139831][ T7030] kernel_init_freeable+0x2a6/0x3e0 [ 778.145551][ T7030] kernel_init+0x1d/0x1d0 [ 778.150400][ T7030] ret_from_fork+0x51e/0xb90 [ 778.155507][ T7030] ret_from_fork_asm+0x1a/0x30 [ 778.160804][ T7030] [ 778.160804][ T7030] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 778.168675][ T7030] [ 778.168675][ T7030] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 778.176455][ T7030] cpus_read_lock+0x42/0x160 [ 778.181596][ T7030] static_key_slow_inc+0x12/0x30 [ 778.187105][ T7030] setup_udp_tunnel_sock+0x343/0x550 [ 778.192953][ T7030] l2tp_tunnel_register+0xda0/0x1460 [ 778.198861][ T7030] pppol2tp_connect+0x8b7/0x17c0 [ 778.204350][ T7030] __sys_connect+0x312/0x450 [ 778.209494][ T7030] __x64_sys_connect+0x7a/0x90 [ 778.214819][ T7030] do_syscall_64+0x14d/0xf80 [ 778.219968][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.226415][ T7030] [ 778.226415][ T7030] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 778.234204][ T7030] lock_sock_nested+0x48/0x100 [ 778.239541][ T7030] inet_shutdown+0x6a/0x390 [ 778.244635][ T7030] nbd_mark_nsock_dead+0x2e9/0x560 [ 778.250310][ T7030] recv_work+0x1c7f/0x1d90 [ 778.255292][ T7030] process_scheduled_works+0xb6e/0x18c0 [ 778.261379][ T7030] worker_thread+0xa53/0xfc0 [ 778.266523][ T7030] kthread+0x388/0x470 [ 778.271287][ T7030] ret_from_fork+0x51e/0xb90 [ 778.276465][ T7030] ret_from_fork_asm+0x1a/0x30 [ 778.281816][ T7030] [ 778.281816][ T7030] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 778.289503][ T7030] __mutex_lock+0x19f/0x1300 [ 778.294652][ T7030] nbd_queue_rq+0x37b/0x1100 [ 778.299792][ T7030] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 778.305896][ T7030] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 778.312782][ T7030] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 778.319318][ T7030] blk_mq_run_hw_queue+0x348/0x4f0 [ 778.324999][ T7030] blk_mq_dispatch_list+0xd16/0xe10 [ 778.330753][ T7030] blk_mq_flush_plug_list+0x48d/0x570 [ 778.336681][ T7030] __blk_flush_plug+0x3ed/0x4d0 [ 778.342105][ T7030] __submit_bio+0x28d/0x580 [ 778.347155][ T7030] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 778.353362][ T7030] block_read_full_folio+0x599/0x830 [ 778.359214][ T7030] filemap_read_folio+0x137/0x3b0 [ 778.364794][ T7030] do_read_cache_folio+0x358/0x590 [ 778.370460][ T7030] read_part_sector+0xb6/0x2b0 [ 778.375782][ T7030] adfspart_check_ICS+0xa5/0xa40 [ 778.381288][ T7030] bdev_disk_changed+0x7ba/0x1550 [ 778.386853][ T7030] blkdev_get_whole+0x380/0x510 [ 778.392254][ T7030] bdev_open+0x31e/0xd30 [ 778.397057][ T7030] blkdev_open+0x470/0x610 [ 778.402041][ T7030] do_dentry_open+0x785/0x14e0 [ 778.407358][ T7030] vfs_open+0x3b/0x340 [ 778.411977][ T7030] path_openat+0x2e08/0x3860 [ 778.417106][ T7030] do_file_open+0x23e/0x4a0 [ 778.422160][ T7030] do_sys_openat2+0x113/0x200 [ 778.427405][ T7030] __x64_sys_openat+0x138/0x170 [ 778.432831][ T7030] do_syscall_64+0x14d/0xf80 [ 778.437974][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.444406][ T7030] [ 778.444406][ T7030] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 778.451660][ T7030] __mutex_lock+0x19f/0x1300 [ 778.456813][ T7030] nbd_queue_rq+0xc6/0x1100 [ 778.461858][ T7030] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 778.467967][ T7030] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 778.474932][ T7030] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 778.481472][ T7030] blk_mq_run_hw_queue+0x348/0x4f0 [ 778.487160][ T7030] blk_mq_dispatch_list+0xd16/0xe10 [ 778.492917][ T7030] blk_mq_flush_plug_list+0x48d/0x570 [ 778.498876][ T7030] __blk_flush_plug+0x3ed/0x4d0 [ 778.504272][ T7030] __submit_bio+0x28d/0x580 [ 778.509340][ T7030] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 778.515511][ T7030] block_read_full_folio+0x599/0x830 [ 778.521361][ T7030] filemap_read_folio+0x137/0x3b0 [ 778.526939][ T7030] do_read_cache_folio+0x358/0x590 [ 778.532588][ T7030] read_part_sector+0xb6/0x2b0 [ 778.537890][ T7030] adfspart_check_ICS+0xa5/0xa40 [ 778.543396][ T7030] bdev_disk_changed+0x7ba/0x1550 [ 778.548976][ T7030] blkdev_get_whole+0x380/0x510 [ 778.554389][ T7030] bdev_open+0x31e/0xd30 [ 778.559184][ T7030] blkdev_open+0x470/0x610 [ 778.564156][ T7030] do_dentry_open+0x785/0x14e0 [ 778.569488][ T7030] vfs_open+0x3b/0x340 [ 778.574133][ T7030] path_openat+0x2e08/0x3860 [ 778.579271][ T7030] do_file_open+0x23e/0x4a0 [ 778.584324][ T7030] do_sys_openat2+0x113/0x200 [ 778.589565][ T7030] __x64_sys_openat+0x138/0x170 [ 778.594967][ T7030] do_syscall_64+0x14d/0xf80 [ 778.600130][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.606568][ T7030] [ 778.606568][ T7030] -> #4 (set->srcu){.+.+}-{0:0}: [ 778.613730][ T7030] __synchronize_srcu+0xca/0x300 [ 778.619242][ T7030] elevator_switch+0x1e8/0x7a0 [ 778.624560][ T7030] elevator_change+0x2cc/0x450 [ 778.629867][ T7030] elevator_set_default+0x36c/0x430 [ 778.635603][ T7030] blk_register_queue+0x366/0x430 [ 778.641197][ T7030] __add_disk+0x677/0xd50 [ 778.646084][ T7030] add_disk_fwnode+0xfb/0x480 [ 778.651321][ T7030] nbd_dev_add+0x72c/0xb50 [ 778.656304][ T7030] nbd_init+0x168/0x1f0 [ 778.661043][ T7030] do_one_initcall+0x250/0x8d0 [ 778.666363][ T7030] do_initcall_level+0x104/0x190 [ 778.671822][ T7030] do_initcalls+0x59/0xa0 [ 778.676667][ T7030] kernel_init_freeable+0x2a6/0x3e0 [ 778.682377][ T7030] kernel_init+0x1d/0x1d0 [ 778.687568][ T7030] ret_from_fork+0x51e/0xb90 [ 778.692668][ T7030] ret_from_fork_asm+0x1a/0x30 [ 778.697948][ T7030] [ 778.697948][ T7030] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 778.705767][ T7030] __mutex_lock+0x19f/0x1300 [ 778.710902][ T7030] elevator_change+0x1b3/0x450 [ 778.716192][ T7030] elevator_set_none+0xb5/0x140 [ 778.721560][ T7030] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 778.727884][ T7030] nbd_start_device+0x17f/0xb10 [ 778.733249][ T7030] nbd_genl_connect+0x165b/0x1cf0 [ 778.738780][ T7030] genl_family_rcv_msg_doit+0x22a/0x330 [ 778.744839][ T7030] genl_rcv_msg+0x61c/0x7a0 [ 778.749861][ T7030] netlink_rcv_skb+0x232/0x4b0 [ 778.755149][ T7030] genl_rcv+0x28/0x40 [ 778.759642][ T7030] netlink_unicast+0x80f/0x9b0 [ 778.764931][ T7030] netlink_sendmsg+0x813/0xb40 [ 778.770209][ T7030] ____sys_sendmsg+0x972/0x9f0 [ 778.775496][ T7030] ___sys_sendmsg+0x2a5/0x360 [ 778.780691][ T7030] __x64_sys_sendmsg+0x1bd/0x2a0 [ 778.786147][ T7030] do_syscall_64+0x14d/0xf80 [ 778.791261][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.797670][ T7030] [ 778.797670][ T7030] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 778.806265][ T7030] blk_alloc_queue+0x546/0x680 [ 778.811541][ T7030] __blk_mq_alloc_disk+0x197/0x390 [ 778.817167][ T7030] nbd_dev_add+0x499/0xb50 [ 778.822095][ T7030] nbd_init+0x168/0x1f0 [ 778.826766][ T7030] do_one_initcall+0x250/0x8d0 [ 778.832051][ T7030] do_initcall_level+0x104/0x190 [ 778.837499][ T7030] do_initcalls+0x59/0xa0 [ 778.842340][ T7030] kernel_init_freeable+0x2a6/0x3e0 [ 778.848070][ T7030] kernel_init+0x1d/0x1d0 [ 778.853013][ T7030] ret_from_fork+0x51e/0xb90 [ 778.858116][ T7030] ret_from_fork_asm+0x1a/0x30 [ 778.863397][ T7030] [ 778.863397][ T7030] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 778.870595][ T7030] fs_reclaim_acquire+0x71/0x100 [ 778.876044][ T7030] kmem_cache_alloc_noprof+0x40/0x650 [ 778.881923][ T7030] __kernfs_iattrs+0xdf/0x340 [ 778.887112][ T7030] kernfs_iop_setattr+0xea/0x3f0 [ 778.892561][ T7030] notify_change+0xc1a/0xf40 [ 778.897662][ T7030] do_truncate+0x1c2/0x250 [ 778.902588][ T7030] path_openat+0x2f89/0x3860 [ 778.907684][ T7030] do_file_open+0x23e/0x4a0 [ 778.912707][ T7030] do_sys_openat2+0x113/0x200 [ 778.917895][ T7030] __x64_sys_openat+0x138/0x170 [ 778.923260][ T7030] do_syscall_64+0x14d/0xf80 [ 778.928375][ T7030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.934779][ T7030] [ 778.934779][ T7030] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 778.943282][ T7030] __lock_acquire+0x15a5/0x2cf0 [ 778.948645][ T7030] lock_acquire+0xf0/0x2e0 [ 778.953579][ T7030] down_write+0x96/0x200 [ 778.958341][ T7030] kernfs_link_sibling+0x46c/0x540 [ 778.963990][ T7030] kernfs_add_one+0x1ca/0x5c0 [ 778.969196][ T7030] kernfs_create_dir_ns+0xde/0x130 [ 778.974817][ T7030] sysfs_create_dir_ns+0x12f/0x2a0 [ 778.980441][ T7030] kobject_add_internal+0x62b/0xd00 [ 778.986154][ T7030] kobject_add+0x163/0x240 [ 778.991083][ T7030] device_add+0x408/0xb70 [ 778.995922][ T7030] hci_conn_add_sysfs+0xd5/0x210 [ 779.001374][ T7030] hci_conn_complete_evt+0x77a/0x11d0 [ 779.007272][ T7030] hci_event_packet+0x805/0x12c0 [ 779.012747][ T7030] hci_rx_work+0x3ee/0x1030 [ 779.017780][ T7030] process_scheduled_works+0xb6e/0x18c0 [ 779.023851][ T7030] worker_thread+0xa53/0xfc0 [ 779.028961][ T7030] kthread+0x388/0x470 [ 779.033542][ T7030] ret_from_fork+0x51e/0xb90 [ 779.038653][ T7030] ret_from_fork_asm+0x1a/0x30 [ 779.043941][ T7030] [ 779.043941][ T7030] other info that might help us debug this: [ 779.043941][ T7030] [ 779.054154][ T7030] Chain exists of: [ 779.054154][ T7030] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 779.054154][ T7030] [ 779.068576][ T7030] Possible unsafe locking scenario: [ 779.068576][ T7030] [ 779.076017][ T7030] CPU0 CPU1 [ 779.081366][ T7030] ---- ---- [ 779.086713][ T7030] lock(&root->kernfs_rwsem); [ 779.091465][ T7030] lock(cpuhp_state_mutex); [ 779.098559][ T7030] lock(&root->kernfs_rwsem); [ 779.105834][ T7030] lock(&root->kernfs_iattr_rwsem); [ 779.111106][ T7030] [ 779.111106][ T7030] *** DEADLOCK *** [ 779.111106][ T7030] [ 779.119229][ T7030] 4 locks held by kworker/u9:1/7030: [ 779.124493][ T7030] #0: ffff888047855948 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 779.135460][ T7030] #1: ffffc9000cb1fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 779.147464][ T7030] #2: ffff88804a7800c0 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xbb/0x11d0 [ 779.157312][ T7030] #3: ffff88801b6dd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 779.167152][ T7030] [ 779.167152][ T7030] stack backtrace: [ 779.173034][ T7030] CPU: 0 UID: 0 PID: 7030 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 779.173054][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 779.173066][ T7030] Workqueue: hci4 hci_rx_work [ 779.173090][ T7030] Call Trace: [ 779.173097][ T7030] [ 779.173104][ T7030] dump_stack_lvl+0xe8/0x150 [ 779.173128][ T7030] print_circular_bug+0x2e1/0x300 [ 779.173155][ T7030] check_noncircular+0x12e/0x150 [ 779.173180][ T7030] __lock_acquire+0x15a5/0x2cf0 [ 779.173204][ T7030] ? __lock_acquire+0x6b5/0x2cf0 [ 779.173228][ T7030] lock_acquire+0xf0/0x2e0 [ 779.173247][ T7030] ? kernfs_link_sibling+0x46c/0x540 [ 779.173275][ T7030] down_write+0x96/0x200 [ 779.173296][ T7030] ? kernfs_link_sibling+0x46c/0x540 [ 779.173319][ T7030] ? __pfx_down_write+0x10/0x10 [ 779.173339][ T7030] ? kernfs_root+0x1c/0x230 [ 779.173361][ T7030] ? kernfs_root+0x1c/0x230 [ 779.173382][ T7030] ? kernfs_root+0x1ea/0x230 [ 779.173404][ T7030] kernfs_link_sibling+0x46c/0x540 [ 779.173432][ T7030] kernfs_add_one+0x1ca/0x5c0 [ 779.173456][ T7030] kernfs_create_dir_ns+0xde/0x130 [ 779.173473][ T7030] sysfs_create_dir_ns+0x12f/0x2a0 [ 779.173496][ T7030] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 779.173518][ T7030] ? do_raw_spin_unlock+0xf5/0x210 [ 779.173535][ T7030] kobject_add_internal+0x62b/0xd00 [ 779.173560][ T7030] kobject_add+0x163/0x240 [ 779.173582][ T7030] ? __pfx_kobject_add+0x10/0x10 [ 779.173602][ T7030] ? _raw_spin_unlock+0x28/0x50 [ 779.173618][ T7030] ? get_device_parent+0x366/0x3a0 [ 779.173640][ T7030] device_add+0x408/0xb70 [ 779.173660][ T7030] hci_conn_add_sysfs+0xd5/0x210 [ 779.173679][ T7030] hci_conn_complete_evt+0x77a/0x11d0 [ 779.173701][ T7030] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 779.173725][ T7030] hci_event_packet+0x805/0x12c0 [ 779.173745][ T7030] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 779.173764][ T7030] ? __pfx_hci_event_packet+0x10/0x10 [ 779.173783][ T7030] ? kcov_remote_start+0x49a/0x7a0 [ 779.173808][ T7030] ? hci_send_to_monitor+0xe2/0x590 [ 779.173833][ T7030] hci_rx_work+0x3ee/0x1030 [ 779.173854][ T7030] ? process_scheduled_works+0xa8d/0x18c0 [ 779.173875][ T7030] process_scheduled_works+0xb6e/0x18c0 [ 779.173906][ T7030] ? __pfx_process_scheduled_works+0x10/0x10 [ 779.173928][ T7030] ? assign_work+0x3d5/0x5e0 [ 779.173949][ T7030] worker_thread+0xa53/0xfc0 [ 779.173985][ T7030] kthread+0x388/0x470 [ 779.174000][ T7030] ? __pfx_worker_thread+0x10/0x10 [ 779.174020][ T7030] ? __pfx_kthread+0x10/0x10 [ 779.174034][ T7030] ret_from_fork+0x51e/0xb90 [ 779.174056][ T7030] ? __pfx_ret_from_fork+0x10/0x10 [ 779.174075][ T7030] ? __switch_to+0xc7d/0x1450 [ 779.174093][ T7030] ? __pfx_kthread+0x10/0x10 [ 779.174107][ T7030] ret_from_fork_asm+0x1a/0x30 [ 779.174137][ T7030] [ 779.448971][ T5967] net_ratelimit: 3 callbacks suppressed [ 779.448988][ T5967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 780.239018][T16062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.261554][T16062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.272623][T16062] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 780.368288][T16062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.381577][T16062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.392916][T16062] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 780.442945][T16062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.454534][T16062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.477394][T16062] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 780.553195][T16062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 780.572318][T16062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.594948][T16062] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 780.643314][T17691] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.669807][T17691] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.687955][T17691] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 780.698387][T16062] bridge_slave_1: left promiscuous mode [ 780.704092][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.714443][T16062] bridge_slave_0: left allmulticast mode [ 780.720409][T16062] bridge_slave_0: left promiscuous mode [ 780.726126][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.806755][T16062] bond2 (unregistering): (slave geneve2): Releasing active interface [ 780.944535][T16062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.960235][T16062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.970775][T16062] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 780.984381][T16062] bond0 (unregistering): Released all slaves [ 780.995623][T16062] bond1 (unregistering): Released all slaves [ 781.007377][T16062] bond2 (unregistering): Released all slaves [ 781.022922][T17691] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.063325][T16062] tipc: Left network mode [ 781.452726][T16062] hsr_slave_0: left promiscuous mode [ 781.459253][T16062] hsr_slave_1: left promiscuous mode [ 781.468898][T16062] veth1_macvtap: left promiscuous mode [ 781.474413][T16062] veth0_macvtap: left promiscuous mode [ 781.483300][T16062] veth1_vlan: left promiscuous mode [ 781.489371][T16062] veth0_vlan: left promiscuous mode [ 781.642588][T16062] team0 (unregistering): Port device team_slave_1 removed [ 781.661149][T16062] team0 (unregistering): Port device team_slave_0 removed [ 781.912658][T16062] IPVS: stop unused estimator thread 0... [ 781.996298][T16062] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.006683][T16062] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.050040][T16062] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.060954][T16062] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.116726][T16062] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.127633][T16062] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.184424][T16062] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.196632][T16062] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.241597][T17710] netdevsim netdevsim2 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.282614][T17710] netdevsim netdevsim2 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.291541][T17710] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.316345][T16062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.328266][T16062] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.342253][T17710] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.392189][T16062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.407195][T16062] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.458889][T16062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.470586][T16062] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.568452][T16062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.584463][T16062] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.664921][T17695] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.684778][T17695] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.696133][T17695] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.710024][T17710] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.720208][T16062] bridge_slave_1: left allmulticast mode [ 782.725954][T16062] bridge_slave_1: left promiscuous mode [ 782.733120][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.745419][T16062] bridge_slave_0: left allmulticast mode [ 782.751528][T16062] bridge_slave_0: left promiscuous mode [ 782.758085][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.768344][T16062] bridge_slave_1: left allmulticast mode [ 782.774005][T16062] bridge_slave_1: left promiscuous mode [ 782.780022][T16062] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.789602][T16062] bridge_slave_0: left allmulticast mode [ 782.795335][T16062] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.944666][T16062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.962771][T16062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.973490][T16062] bond0 (unregistering): Released all slaves [ 783.032222][T16062] team0: Port device gretap1 removed [ 783.202122][T16062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.212577][T16062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.222723][T16062] bond0 (unregistering): Released all slaves [ 783.293923][T16062] tipc: Left network mode [ 783.800156][T16062] hsr_slave_0: left promiscuous mode [ 783.806155][T16062] hsr_slave_1: left promiscuous mode [ 783.812706][T16062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.821357][T16062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.829225][T16062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.836604][T16062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.847684][T16062] hsr_slave_0: left promiscuous mode [ 783.853335][T16062] hsr_slave_1: left promiscuous mode [ 783.859139][T16062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.866515][T16062] batadv0: mtu less than device minimum [ 783.873464][T16062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 783.884313][T16062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 783.894973][T16062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 783.905762][T16062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 783.916449][T16062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 783.927401][T16062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 783.938054][T16062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 783.948770][T16062] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 783.963348][T16062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.971597][T16062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.985439][T16062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.995411][T16062] batman_adv: batadv0: Interface deactivated: dummy0 [ 784.002206][T16062] batman_adv: batadv0: Removing interface: dummy0 [ 784.013560][T16062] veth1_macvtap: left promiscuous mode [ 784.019461][T16062] veth0_macvtap: left promiscuous mode [ 784.024957][T16062] veth1_vlan: left promiscuous mode [ 784.030260][T16062] veth0_vlan: left promiscuous mode [ 784.036009][T16062] veth0_macvtap: left promiscuous mode [ 784.041573][T16062] veth1_vlan: left promiscuous mode [ 784.046782][T16062] veth0_vlan: left promiscuous mode [ 784.162706][T16062] team0 (unregistering): Port device team_slave_1 removed [ 784.176933][T16062] team0 (unregistering): Port device team_slave_0 removed [ 784.252771][T16062] team0 (unregistering): Port device veth3 removed [ 784.310336][T16062] team0 (unregistering): Port device team_slave_1 removed [ 784.321015][T16062] team0 (unregistering): Port device team_slave_0 removed [ 784.741411][T16062] IPVS: stop unused estimator thread 0...