last executing test programs: 14.0603279s ago: executing program 1 (id=3278): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "c92ad6ab8055fe39a5a9615d5ba410de"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "988f88d52ae2aa1e44f0e5686a8da5d9"}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r5, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={r5, 0x1, 0x6, @local}, 0x10) 13.636101397s ago: executing program 1 (id=3285): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x6c, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x3c, 0x3}, 0x400000000a}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @parameter_prob={0xc, 0x0, 0x0, 0xf2, 0xb, 0x0, {0x5, 0x4, 0x0, 0x6, 0x100, 0x1065, 0xf30, 0x4, 0x62, 0x4, @multicast2, @multicast2}}}}}}, 0x0) (async) 13.30927454s ago: executing program 1 (id=3291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfc100000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r1, 0x14, 0x1, 0xd8, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) 13.136733032s ago: executing program 1 (id=3293): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c610800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x884) 12.635256974s ago: executing program 1 (id=3299): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffd, 0x6, 0x400}, 0x10) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000005000000000800040001000000", 0x24) (async, rerun: 64) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, 0x1, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_EXP={0xc, 0xf, 0x0, 0x1, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, @NFQA_PAYLOAD={0x4c, 0xa, "a35b83964947370d588d25fd50dc207412d09f411980e393773ceea01eaacd96baa76178891af0b2ea675ea15b67bbbeec2b7dbbd834fb5c62afa56add8132988c88cb8dc0083e53"}]}, 0x6c}}, 0x24008000) (rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x90) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004884}, 0x20000015) 12.52051459s ago: executing program 1 (id=3301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) 2.164347659s ago: executing program 0 (id=3380): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002180)={&(0x7f0000001f80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x2, [], "d04b"}, @datasec={0x0, 0x15555555555556f6, 0x0, 0xf, 0x2, [], "9e52"}]}, {0x0, [0x0, 0x951a1ae4009cda78, 0x30]}}, &(0x7f00000020c0)=""/144, 0x39, 0x90, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xd4, 0x10}, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x3, 0xd}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.804728653s ago: executing program 0 (id=3385): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4200004}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20058841) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}}, 0x4000) (async, rerun: 64) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000440), r0) (rerun: 64) sendmsg$NLBL_CIPSOV4_C_LIST(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x90, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x279c9971}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x297ad8af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x15ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x62d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6489}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x260d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d1e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b3fbdac}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x80}, 0xc0) (async) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffff9}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xd77}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8000) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r3) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'gre0\x00', &(0x7f0000000900)={'gre0\x00', 0x0, 0x20, 0x0, 0x4, 0x0, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x66, 0x0, 0x88, 0x29, 0x0, @multicast2, @broadcast, {[@ra={0x94, 0x4, 0x1}, @generic={0x89, 0x8, "e9fb936d81ea"}, @lsrr={0x83, 0x1b, 0x7c, [@empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010100, @local, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x17, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}]}, @generic={0x94, 0xf, "7a24fc0009343555617ae27a26"}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000009c0)={'batadv0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0], 0x0, 0x15, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000b00), &(0x7f0000000b40), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000e00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x98, r9, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x804}, 0x800) (async, rerun: 64) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), r3) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x2c, r13, 0x0, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x47108df2, 0x7}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x2c}}, 0x1) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@bloom_filter={0x1e, 0x1, 0x6, 0x7f, 0x5205, 0xffffffffffffffff, 0x10001, '\x00', r10, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0xa}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001180)={r15, &(0x7f0000001040)="0741c148e90d8d9c405e39c19b830306866369ca5bd39dcd6a3eaa20b403e67ea3f44a53e00ff90cf82948b584508e27fea9050a3b6ebaa64566cd16479b7d1d1b3ab4f00ba49d45a68b2d8673a4107a7d8f7ccb82682457649fbace287189b235f99fa87ac1a748706815e90ffce35c2a2c3506d9a67eae212bcb2d70e96a4398c17e36662d0695f472106a8842f4b1ad43d3d2777e6a5e5a8c7013d8f1cc40cb74fa5894608c25a05ba23f38961955fe60c82984d0536f88", &(0x7f0000001100)=""/96}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001200)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x18}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001380)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x1c, r8, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x885) (async) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000015c0)={&(0x7f0000001480), 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x5c, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8800}, 0x4008800) 1.53279997s ago: executing program 0 (id=3389): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0xfffffffe, @empty}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ba000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000031011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) shutdown(r1, 0x0) 1.40906326s ago: executing program 3 (id=3392): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000001000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000a0000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf91000000000000b5020000000000002800000000000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000080)=0x1) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETVERSION(r6, 0x40087602, &(0x7f00000002c0)=0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) accept4(0xffffffffffffffff, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000340)=0x80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r7, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) getsockopt$sock_int(r6, 0x1, 0x2b, &(0x7f0000000180), &(0x7f0000000200)=0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x1ec, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_DESC={0x168, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x234}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6ba}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}, {0x4}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e86}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6432}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4f}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000080}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_CONCAT={0x34, 0x2, 0x0, 0x1, [{0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2e4dee37}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, @NFTA_SET_DESC_CONCAT={0x4}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_EXPR={0x3c, 0x11, 0x0, 0x1, @lookup={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0x264}, 0x1, 0x0, 0x0, 0x11}, 0x0) 1.359196877s ago: executing program 0 (id=3393): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001300010027bd70000000000007000000", @ANYRES32=r8, @ANYBLOB="a2100400884101000c001a800800058004000780"], 0x2c}}, 0x0) connect$packet(r1, &(0x7f0000000500)={0x11, 0xf5, r8, 0x1, 0x8f, 0x6, @random="ea5e899cc37e"}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x4}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffff85fd}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x9}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x3}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x58}}, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NFC_CMD_START_POLL(r12, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r13, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000800) r14 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400000000ffdbdf2500000000", @ANYRES32=r15, @ANYBLOB="01f10500000000001800128008000100677470000c00028008000100b561f5c3"], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x40004) sendmmsg$inet(r10, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe000030a}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @empty, @multicast2}}}], 0x20}}], 0x1, 0x80) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x20, 0x24000000, 0x9, {{0x21, 0x4, 0x2, 0x7, 0x84, 0x68, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xb7, 0x3, 0x8, [{@broadcast, 0x4}, {@private=0xa010100, 0x9}]}, @ssrr={0x89, 0x17, 0x6, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @dev={0xac, 0x14, 0x14, 0x25}, @empty]}, @cipso={0x86, 0x3d, 0x1, [{0x2, 0x11, "3ae003f7e1aa9d80897cefd9f79e33"}, {0x6, 0xf, "1fd0b1c97c5c7f9d686f03fb3a"}, {0x0, 0xc, "b31016b832fc37c6f3f2"}, {0x5, 0x6, "e1951d1b"}, {0x6, 0x5, "e2e4bb"}]}, @end, @lsrr={0x83, 0x7, 0x3a, [@local]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'pim6reg\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@RTM_DELMDB={0xf8, 0x55, 0x20, 0x70bd29, 0x25dfdbfb, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@ip4=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x3, 0x3, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x2, {@in6_addr=@loopback, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r15, 0x1, 0x2, 0x0, {@in6_addr=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r16, 0x0, 0x1, 0x1, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r17, 0x0, 0x1, 0x4, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r18, 0x1, 0x3, 0x1, {@ip4=@local, 0x86dd}}}]}, 0xf8}}, 0x0) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) 1.27226391s ago: executing program 4 (id=3394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r4, 0x601, 0x70bd25}, 0x14}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000020004110004"], 0x10d) r5 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da16520"], 0xb4}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000007c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="0400000000000000f3ff000000000000020000040000010073797a31000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x402c880}, 0x80) 1.229778087s ago: executing program 2 (id=3395): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xf87, &(0x7f0000001180)={@local, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x6, 0x2, @TCA_ETF_PARMS={0x8, 0x1, {0x0, 0x0, 0x2}}}}]}, 0x40}}, 0x0) 1.10526824s ago: executing program 0 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0xf2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4440000010000d042dbd0300fcffff1f000000005a7713191ff55d24a70d0bed30d17b082cbcaced2de300cd79218dba01c5bc541510cb5978c363f19d5aa743bbc2b522e36595bcef65ddc69fb4dbdb0e33380b3abc95397314c95a7441de6545967a6deae134015f4f7989ddfbdbea8598ba3c1bab63ac9f928fc610160d2e385b6db6c911fcf7e48b6615660df493111001321752cca457fe12a7ec00"/170, @ANYRES32=r6, @ANYBLOB="46000400000000002400128009000100626f6e64000000001400028005000100010000000500150001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.104516854s ago: executing program 3 (id=3397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x70, 0x0, 0x9, 0x3, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x70}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='hrtimer_start\x00', r1}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 1.03435075s ago: executing program 2 (id=3398): socket$tipc(0x1e, 0x8, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000a00)=ANY=[@ANYRESOCT=r1], 0x9) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="d40000001b000301000000000000000000000000000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0010008a"], 0xd4}}, 0x0) 913.385406ms ago: executing program 4 (id=3399): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x10, 0x9}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000000100001042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000014310000300012800b000100697036746e6c00002000028014000200fc020000000000000000000000000001050004000300000079fb7d0175e492fdbee54074299c0b5dfb0688534255575951c65a0fe3acec1e7ecaec1de6df19be9f8af012ad15bf3d1711d78ce40565862c8711625c003dd2548d33b7002dc6b9c69587106196860881200a767457cdfa33fc7523a27f26285e885048d22ed0046a10baa5384267578e8e8e46977029e7a9f09f53743c"], 0x50}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=@newtclass={0x34, 0x28, 0x300, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x8, 0xffe0}, {0xd, 0x2}, {0xb, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x8}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000440)="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") r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549", @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 852.439655ms ago: executing program 3 (id=3400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000680001fd0000000000000000020000000000000014000600ac1e00010000f300000000000000000004000300"], 0x30}}, 0x0) 851.643539ms ago: executing program 0 (id=3401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)={@multicast1, @remote, 0x1, 0x2, [@dev={0xac, 0x14, 0x14, 0x20}, @local]}, 0x18) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x19, r3, 0x1, 0xb, 0x6, @multicast}, 0x14) sendto$packet(r2, &(0x7f0000000180)="0b0312002e0014000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) sendto$inet(r0, &(0x7f0000000380)='y', 0x1, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/99, 0x63, 0x60, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000080)={0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000400000000000000000000071121a00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 822.164435ms ago: executing program 2 (id=3402): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000f80)=ANY=[@ANYBLOB="40100000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c0000001410038004100400fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397236fa9476ac5fac7c2c896babca09d74720004cd0e634327de4fd87ed72ae069c095d2c70caed52e3335478c1c3719925e24f2fd7755baebd5cde385727a0f0440dd3b662248c43ff5afc4f186ff0051ba8eaa07623b79c4bb6985f14c5ac15041a6ff7584f921982e5414481d4db4c76798d70a59b5aeccb6e7882aefe70993758b55b4dc4039c2b1c98452113aaf23ccdf68cb6eff6e048f9da6f39a2def3caaf80cdcbadb83b029b8738391f02fec90c8a8b6f036aae8ceaff5dca7d3e0098423fedc676c6774ab0e6a72bd246c0b3004d1988f802b846d62ca59e9a63ce12814176ec4380e1cf29d27e7b2f7e7eadcaae8f182498ad32e67323fe6ef9508fec40dd38897652053ef92e44a909060c237890c196f0c26ab10248f999001f6231813a81313971bea77a5470f312d185dce689adc99e430e4010a3a341482c51fb71c23c3cdf92303c7580c73775f9a74685a61ce9849eaca52b97ee7ffe2e672dc1be5267c285a102711b1b5d81d6dbb76494f2892fd4f85244ade3cdd3809fd5fdfce5157fc1658f0bceb379489732583707c170fc6392aa4f5b94843aeb18da58e0156e029c2b722918b1b3dc7c151cb9c248ddd18423629b53cd4b0ab2693b0df29c88c04657f4eccdc41357de8186fdc0ec86f92950734975921a2fde57c3e7176b57c871d76ff8a8f36520b67e64930cf34bcde9ad92d057a359ca022b646df18e2b7202845bd8ac4be5e5ebae436dc4b93dfaaf2778a53e7e4be937e83dac7d1d481bdbd8081ab0ac08af067e62580bbdbf397cbc629db9b023734b6fad7824d1a8b3257c1c18d6ebc928140060f004ec484b183560f830a1eb0c527c8600bb2600d761e847454e677aa29486aa407a9e9a5e9dc9542de038e3e55fdfec13184cdb16716556f972eef5c56230c43d146c86a9147265c309a279db6d138647920410896c5397c5f83634fa5e92b5161f786482d84830864388b91c2c1e3e9f9f038d5fa66f7fe904e14df0a60d46066c6b1f37cec6e13c35832f512be21da21a5921b81cc452b0076c2ec10fc5481cd0e1ca917b40cb3aa839b120ce6eb9773e942b74ececac6bdcd22eb8dd6cd9f148e0ebe5ef3094f42adc39bc5ca2259e1eab5059ccf5e82bb57b97d4d13a90747299b2e6b64f962aabf222e4f287503181de3c3a68fb2b0068583f3b97e40ce06e9805a7121eccac0527b8f1b18a62762efe0a9ce4114b7d1ba942bc93533ee0b1bd7f0a607207b976dfa1fbe3ce0868e7f4e31b41a0aada0ac6b291aefe22ea5338f07e57b981b8e4e4a121f231d2f46989fd5dd09a7c1d198f5886b4f1a222eccdabff096a81fef3c9e497621128562880938fe05a1f1c4da81daba55bf326f1e3a1712d79f01fbef2ee230615d4e454be67f0ad4dc2bfffaecbb683742925738b45854ab713ae548b9709e9ea2e28224ef466bced79e3ec6c163d45db187bc01c75afa85f78003927dcd122086acc8dd1b1224de41d62b83e34083dd39fe68aa5a479ba403f5dbddf9b763ca521b7efca6234be16484f1e0112d963672a6d24cdac15e80bcb82b3b22231670c41fe7e8a0a083b6df768e7fb0d94a004f8372f5cf8b9b45cc679eb67828a94d0ffabfe09d95ad2789cb8657f7ea86a46260416a72e6fc7b44e549a2e39fe015c7647cc0bec15fa63d26894be1cc5326331e7e0b1c505934182accf049bab033b026d48fda51de740afc0666e6c891e0c5192f4b2df21493477ff45319d7d8b816f0b73ccfa12d6846362feb4b85063ca42e950eb577c630300dc52698a38ca19cbbb398404a1e8e27d0be49985e59caef03da096d1ccbeed73bd7c9588325b747ab77f4d7c1c1f18388ce1771882ee680ed737ad197ff92f1052e5e79f6ffa5b85ba3fac5db13e0d0046c9dca0ab4b74b20299ba6bdd758940e088df31e1382cee6901503299028467a864d27affae30fd9aef5a6ff948c052124511a75a46d5a316e28fb6c5bfac787be5833c63c535557235b0e09f9a78a338aa8864613fca77a7e252d1975af2c4a6bcc969d1e20e3cd4dfc1b2fe34b70fd7804dbfde4fa4d950e5fb4eb926dece9e4601b12efe322bb42ac808158fef0a26900000000726654987e7de20d1e41e82c607c33c6bae7bb234744b51dc683d5857afd6ba8246cebc734e393806ef102a6baaf04f3a7c3cb888d5830e1c6ae170c5c920e806b4f518be4416b216cdf9b1658a412d9e4eab6c9b20ce99960f27e77fdf9a2e98b35c63859f9db6bdcbef1001a19e12e41370f9358531987851ab64c250e68a8569ace4418e2118caff7d3d4caf1c87bc50a8ae75770fdae88a8490c041b39d08190d8b7c908caddd66331a508929d53dd6bc2dbc86f97115ff0a364b70f96918e6ed354c97e59ea5e2c7b149cd51d7c85a27ac658e78b99326857858df0ac0ee240cbb6ee9d9ee6c2c2ff7c29dd25fd337dc08bddeb50305ed48b9f5d89c55ffedde29ce0412ea8e2c976f961eb0c4966d2a8be0b657a5e51048a8a10005c488e1f637ce208a35b5aed0c2067465191dc42ebf6e4853cc89998bdf2ef755f38a3cd985b62df36a5ebc3b47df32423ee46857f9db9d756ff69ecd4ef2f307dcaefd4a1f399543952df972269c28200df8ebacad4eed1c00b9ce9841799bea583cafdeaa8d4a371a8ae55d8ffe4846833985975d8b234adff63eace9d2c4d1680c370827ebe1831ef311077607e8c4920506e03528861085dcfdb918f1efe91420c390fbca0a38377e1635c402ec1c34eddae986ffa8756b27f6c340907bae99f4a6b328fca8177b4dfaceea5ad3ceb901dbcefc15ded322bece4e750969e81935764ebe88749464af7e692e3d324c519b456013daae93bd63215540380a7fe08f0e050cdeb25db2a8b9b6f5720ad1e7d2c5b6d609712eccd321d6211fb642a4cdf72504aabd017a9b4827d1e0e0264435a5e1045dbe33834968d2db503972995559b1efe1b9ce475405118346b63f637b1abf8e8374e7100d6b41c9c672d2b244c7a82ffb882522efd9e903fc69db14c469685780005843856c6623591f305d383eae55a1a1d5619dfff0027413f26fa6a793a348ba8b192e1b088745a2175d55517a75d4b63cce41cc0dcaca9002cd37a1ccc6710ba2a099297b0824f976919e8abf3b1510b1305a95241fefbd036afa9d4538affc82f005d29b9f2c0e60d6c20f673b8ca28cb088e1e89efe334f25ffe1a3fb3581e5aa63b9a4a49f269b5538788aacbbc04d49902ae2af1f59d2484ab6ba7a9b477be0d92e221fc48cdbc00bef7125bfe36f9afb1cbd58fef21625ec99ffd2e35fb00767e3f22dba7d36163203cfaf1860a8b1afe0d878ea00fe08f68fd592a6395fb357acbdc2834c8ac85571527dbf1dbaaccede3d583e2b9bf076737716785f44aebc7ba917fb426d5541adff1e75836ab70fb0b43565ab5e24c5902879f31701cc006b4ee2f57be0916cf0b6cd489c4fa9129031a4af75a00048f20eb962f0c6f68cda0d7756a4e83f7d065c4a00b8263d95f6b979507b7ca01735e83a5e5ff0b76f077ef6e4c1150f9202b5311a231b76111d48a387e09075edb2448fb19d2869ae420ada8ee7577fe980ed7e057dc963c0a98db790bb5b7920220f8a55213b6530637b832abdf3c6fefdefb712a2c2c9eba8087ce39335ddabdadb86f493061e593981c6b2d70b4bac3b58885787c46f85c1022f5ff6cec16ba227aa5dac2e0be30522c08369f18d170b9cb454f3ebf86d1e923fdd65245d8e0c476bfedddcb772453f4d0e70d059e79b8811c379c9eff6e45d99f81186930b32b24cdcb906a41fe29c147ed834b37e77800a33c15e65d121ee85a924ef6bbc1c8f4a423fbc5d14645a08178227f4c7f111fa318823a6c075ddf9e131c9bca8d56dec4a68fbab9a0c1a128880d8b4dec59b89ec33c19eb76f09f31ad730cba735b60deba54c399119949e45af4de5c758281945fe6b6a25ac1cd57a81b48f11a6575e79b82e529d4ba1b2a1175cfa03ef6d149b165195fa64736b302e28ee6444368fb395a2d89c8747348b546a07ed0306682971539f0031d88ffa020d0b3d40369e0a3d2238293a75a155eb5c0749f64ed37a9af5be26d5a4322a55a23c33d176280bd0e4c5168f2e66bca925304d0f32074f5e68d7c43f9e2e3f14a6bcf3e77e6b71737131c3e90208072e37c8a6cad1cabd756aa694e85b86256ce13b43541a26438374b6029ee461d223ed34ed1e9a3e580cec7b2b41bc9823b3729e683f079a498636d022799dd94c5e870b6aa7f3d36fb51ffb6c5e317fcde6b5ae45073f8e90ee0fc1fa0641ff6f0b789dcc6df2fe9a3b5e6ed9d2be3403f5af96e7c6019b0a0ce4f8342323638a52c121956de068069fe5c44946b5023e1db7742fec29cb749bcdc09d795b683c553dbae1298540b2cf1bc3e5e52adf252bca47ba2182c80541daf1d11b1c67675171e69c1abe3c0bc3a0f2d1a6e2165ca1647c394970a404a6002621a258cef01e2ca12a138888dace9ad06d2f0c0209f286c11b289626aa557cc201560651054a6042e84c6fc5e345e2f702d61851fed5ffa36ade652f76db815dabb7b8eee016ea0836d0086f2a2f7bd1c4a4ceb1d706817b41347a891c34b45eb06a9ecb19041d5a39f050cb0413662dc4700385fac2e1823e1ce4d08c66692fde0862a057f2aa2425d511735fff53d0e3d88bfb245e7724ba4ba8452e469862d333dad5c63bfa778809c043132db3a57e122d0495441f7a07034a3ac1024b8fc063694d8316c29639cb6605ff362a853f976c763f6d10e4e0972760e60f08acdd8a73607e7311819fe24ad8b670bbf0adede086f91bd0839ce37927f43a263e3e8369932db9ab786ba66e1bba664bfa8aa50d98ed18fc90e560933c2e8da72757a4539756740a73c41180cf97fde47cf3e9e6005302459d831eea7a03157e0c3178776e4d4add3999b9a1efca7c99b8234ff9d33492431dd9bd0814301ee49260e30b8b6afc46ce8a733bc9d7850c789e5e98cdefbfb11131a85bc24e75453a16c6780ab4229b985d1fe7a255f71cfe18398e881d493ded88300b54f6c4a5567fd84a6e1f11835433448a00420ab1b3a49fcc0e9938da52b68f9409c94a0de61f0beb69532c4f7a11fae6a9ffd10db7de01e3272448b517ad795a06f3fef8148b7196cb81a80aed42e395c1ac346dd27f9bce87661e19f957a17d54d59b68e023c1516ae9ba4d75f18d4b8fc7e9fe6f74e38597b0e52000000000008000200fd7f00000400010018000180140002007665746830"], 0x1040}}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002d80)={0x2f8, 0x14, 0x1, 0x0, 0x0, "", [@nested={0x1ac, 0x0, 0x0, 0x1, [@nested={0x1a5, 0x142, 0x0, 0x1, [@typed={0x8, 0x112, 0x0, 0x0, @uid=r4}, @nested={0x9f, 0x1f, 0x0, 0x1, [@generic="78471b9f81433ca9e0e41f10e6a2e16a4140aaa63e5ba600666a04c07e3052827bf6b9681ce69b3d6e08ac37d1220e7ab30240863130b45c3752a45df574d4b5a9f9f49ab2d2122e7218c48bd72630c9db865958440dfd09f777baa84a55c6e02ecb6bfcdd9bba4bba9dd8790223a4c33cefa03e428682e7f68e71b5f644986e9fbf8a3f11c0a5aef2df063448474c29c6f7f9bca2b4fc88dcce02"]}, @generic="ec3efb55bedca256b48804a5fddf98dec2046021bfb139ee1b924f5abde4e33ded284b2c78d4f563a7ccc385423af1f98e9bc6c8e3bb527034535a03dc1abcb437ea1a40f8a6a1d5a1e118e997d3ab21b96bf39f97a788ce183f5df3b3036f0a687fb3e312e6d4bde164d4a6e08b95148b76582dbd571466163d228ba80b88c40bfbd9be5c64014452fd2759f3fb1ebf0d52138001df10eec93673cc7bd7b5ba9ab5a27fefbc244a8f55ebf0fdd7aa765fe36eb50eaa69476b77b294b3f6ddddcbb7477dc5ba31df0548855310", @nested={0x2c, 0x39, 0x0, 0x1, [@generic="3fa459b26a86c93a54016193f2fec84ef8f8972d3836a2f5709d85e7", @typed={0xc, 0xf8, 0x0, 0x0, @str='ethtool\x00'}]}]}]}, @nested={0x4, 0xb2}, @typed={0xeb, 0xbe, 0x0, 0x0, @binary="ab85fe37a3fb69a022147da8072499c67a4c65829f1c2a6984ac9bea2b29a399eb4ca91c34432bb0f5427bb15bf0fe5d59f654ceea0ffee3a87ea3db3990b92f19b2ab485b4dec1d9f9280ef1a43ca6a2a3edd6f0e08352a96b992090768977a01de1c49925415e54b51c5c4468651b895eb0a16d2a629b176aba1d0a6ccab992ef465a4684d5f54d490864094a126c6e25315aebb60f606e2b85ea97d3b030aadc6503b9e0749b6bfe4ca180806235c50e25b1bc942b34df05680ceac43ca19b785cfaf05b0cf6f23f59aa4290143adc5dc5ef86245956ce942817b347081fe44dcaeb4029aab"}, @generic="f5f3f024f018a6d6eb3e523d9bd1e9a1601ec1a454dab174472d9b4874986d2839a9273ba258788c726d7f5c223f872497d46c7d80b7624293583f13b295e06cf573b09586f93f334fb4ae"]}, 0x2f8}], 0x1}, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000240)="32c18a6ac95023c2bdc2152e658406b6dcca3c4a89982b5559a08a7445d3bc3fca9cb8e16fe0a8caf72dbd4ac4d84b97cc1699e3a05967a8b475f857af796a950bb5", 0x42) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r5, 0x8924, &(0x7f0000000000)) 781.48238ms ago: executing program 4 (id=3403): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005a00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000005b80)={0x0, 0x0, &(0x7f0000005b40)={&(0x7f0000005a80)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x10080) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7fff]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000040)={{0x2, 0x4e21, @local}, {0x6, @random="2dd7e2988a69"}, 0x0, {0x2, 0x4e23, @multicast2}, 'veth1_to_batadv\x00'}) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000005a00), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000005b80)={0x0, 0x0, &(0x7f0000005b40)={&(0x7f0000005a80)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x10080) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x7fff]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) (async) socket$l2tp(0x2, 0x2, 0x73) (async) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000040)={{0x2, 0x4e21, @local}, {0x6, @random="2dd7e2988a69"}, 0x0, {0x2, 0x4e23, @multicast2}, 'veth1_to_batadv\x00'}) (async) 605.094862ms ago: executing program 2 (id=3404): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) 600.403492ms ago: executing program 3 (id=3405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000000980)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000300)="1488256694aa9e88815024f5233241eba8972483ad341900c9055ef694756ae7103f467bf5e4a44bbe7b378093e8680533bf5b7c328647c65a61509c9f235f31d38670781769a0f1e08c0618d75c738da34d9f1570d118a00f7e6b3ba80632c0f010b3049b27b64def5a3fc16d6b42d25b14e83008b0d34135627c3b05013b5e06b5a527b26d97dffbd6e3f65891c2435b889ad7db8e8dcc14f3fa3ee2afb5523de6720f54f1", 0xa6}, {&(0x7f0000000040)="7eb2e8a50c5862aa3ee70e4fe8a2b6bcea295f3bb3e2ac602705900c", 0x1c}, {&(0x7f0000000100)="c3e4707c36b4eafbe3e1c47b4b4748e4d80f3f41bbd82fbeab86634097149fd2fbe8d33a5d1d191f56dbe253ae0595db48061c4b1a4c100579", 0x39}, {&(0x7f00000003c0)="a7b0770a6c53152432cdf87a766a1baa42270ef80120362aa85237dec533164d58a8dd878309af35bcf6678f686918ee4c192103b93863f07ba3acc62412460e2109f32ee4708f5146a008dc48cd50ead191d93ff58c87aaf7b8c2d6ad2349273ecee6c4a47981204f0c6fc1311e846e37409d3d848aaac4ee3766fcd100f6cd6fe83459c2759a9cb637db1d674985fff49b031fd2acc89a01aff5f141ec0e2e11a496b05b4c7c3e81823603d1e629944bfab8308c20e1da8d9e2f90c308f9ac96dadf063682f0f1b637cecd9e647e6f07d2fde38fac2e6fceaa1c4e5122767a0da59a320ad9d0238ca2", 0xea}, {&(0x7f0000000180)="9bb50ffa7e730dc0dbd9b3b9ffdb17f70f2de89f902a264b", 0x18}, {&(0x7f00000004c0)="854bc103953ff04bb5639e35cafa858c511139055529e556e2adefb4d3614dca566aba94899d7dbb7aac955b9aa5ad90d9daddcef0edc9583d4f312eb0fb97f3075d9ff0c8b357c981af9e6d72c18a57ed75461c646d33e4946f195a8f1a81aadd39a46a6dd1a6f65b57cfb0c9036f1695b9f37f01779a7a53db8c5cb9bc0a3ead573d99bb2d7c2854b6ae8fbb12113ac01668afa3d7c19d69958de3acd8c5a0f7743c983ee0027fff2a45a52fc6872444b342271485ebc5bb0147a88bcbe14e46cf718aa4ab39015d691b1569b3bef5f2f195d482448b31dd9fb1f9ba72a2860091ed78d7ebf952089a72af250418b2d341f5", 0xf3}, {&(0x7f00000005c0)="ab0a0178a0908b73c37fbf11618655de1e7dd04147e711749e76a667f8222b9acffd09e99c61193a76bc403b0d1de61aa5309d2b92c7c413a309a38529661aedde14d0197e90446edf0baef3fa33a9d340775dd22b7934cc46b13f17631985029efe79f9ba0ac187e5bd24e5f0bd878017750ba3681b7ac6442afd1417699e841fff9e39df52ba79382b", 0x8a}], 0x7, &(0x7f0000000780)=[@ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0x1b, 0xda, [@loopback, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @ssrr={0x89, 0x13, 0xe8, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}, @multicast1, @loopback]}, @lsrr={0x83, 0x7, 0xf8, [@remote]}, @timestamp_addr={0x44, 0x14, 0x43, 0x1, 0x3, [{@multicast2, 0xa1}, {@remote, 0xdefe}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x3, 0x12}]}}}, @ip_retopts={{0xb8, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0xed, 0x0, 0xb, [0x4]}, @ssrr={0x89, 0x13, 0x6d, [@broadcast, @private=0xa010101, @empty, @rand_addr=0x64010102]}, @noop, @timestamp_prespec={0x44, 0x2c, 0x79, 0x3, 0x3, [{@rand_addr=0x64010102, 0x401}, {@local, 0x9}, {@rand_addr=0x64010102, 0xfffffff8}, {@empty, 0x2}, {@local, 0x2}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0xdc, [@empty]}, @timestamp_prespec={0x44, 0x54, 0x94, 0x3, 0x4, [{@loopback, 0xf}, {@multicast1, 0x3}, {@multicast2, 0x2}, {@broadcast, 0x50b4646}, {@broadcast, 0x7ff}, {@private=0xa010100, 0x1}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@local, 0x8000}, {@broadcast}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x34, 0x0, [{0x6, 0xb, "cd5f98217fef9b3e10"}, {0x7, 0x2}, {0x7, 0x10, "0f676519353b447b9483c5874e77"}, {0x0, 0xc, "4c6234f892bb93208f7a"}, {0x6, 0x5, "c6b132"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010102, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x1e8}, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r2, 0x1) sendmsg$NFT_MSG_GETSET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000a0a0101"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x20004800) 521.97205ms ago: executing program 2 (id=3406): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x100, &(0x7f0000000040)={[0xaf5]}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x40, 0x107, 0x70bd2d, 0x25dfdbfb, {0x4, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x15, 0x0, 0x0, @u64=0x30}]}]}, 0x30}}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003740)=@newtfilter={0x24, 0x2a, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) r9 = socket$netlink(0x10, 0x3, 0xe) ioctl$FICLONE(r9, 0x40049409, r2) sendmsg$AUDIT_TTY_GET(r9, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x10, 0x3f8, 0x2, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000) 494.466903ms ago: executing program 4 (id=3407): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELSET={0x1c0, 0xb, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x18c, 0x11, 0x0, 0x1, @cmp={{0x8}, @val={0x180, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x154, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x78, 0x1, "ff4ca5296eaa8dce75c563540b5d11ad9c3edf693847f0a51723323339a0783169ed3a464f2e243fcb94a78e0a2c01b6a99361c0acb076e4f85f998d45bb077eca392eb68f654a3c1472c1bdec6d6e5b5972360904c7a87a4d5f00f0e28917b07bf2ede8a7812f440a24efab4ab796c042bbecfd"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x32, 0x1, "4a259137b0e6c092efee338807a4ac64f662e6308e0c09f4b066c7cccfc11e8241878c8895eff9bfbdf9ed34d6f7"}, @NFTA_DATA_VALUE={0xd, 0x1, "52b85e530f04c95190"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_USERDATA={0x9, 0xd, 0x1, 0x0, "eb87628f9a"}]}, @NFT_MSG_DELFLOWTABLE={0xbc, 0x18, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x48, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'caif0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x2a4}, 0x1, 0x0, 0x0, 0x20004090}, 0x844) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$alg(0x26, 0x5, 0x0) bind$inet6(r2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r4, 0xf45f2000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r5, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000880)={0x0, 0x4, 0x8000, 0x1}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000c80)={{r2}, r6, 0x14, @unused=[0x40, 0xfff, 0x8000000000000001, 0x7], @devid=r7}) 309.167613ms ago: executing program 3 (id=3408): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000500000000000000000000819be0f5050300000002000007000000000000002e00"], &(0x7f0000000f40)=""/4096, 0x35, 0x1000, 0xa}, 0x20) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x89}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 308.632415ms ago: executing program 4 (id=3409): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2a, 0x25cfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040090) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000043000000", 0xfe60) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r4, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getpid() (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r5, 0xc003}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async) setsockopt$inet6_opts(r7, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) (async) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) (async) sendmmsg$inet6(r7, &(0x7f0000001840), 0x3b, 0x0) (async) r8 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) listen(r0, 0xfffffffd) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r13, &(0x7f0000000300)="bcbdf5820f72952745a6ef932164bef031cbddc0a83a5b2cd23b39fb0f641602a7c019945e04223d84f0a146b02267522e75ec1e0e6db06a44f968fe6bd1cfed5899dc89db041c7f9bebf43b7f46c739e2b6bcb4f30ad608e8f92e02e39228ea9e2bc4d1e58483deeaa621c7c73e20dffd1cfcd97e654aead8955ca71e44ab7cd38ded33e476c74690ae93728d9106f2d739cbe48781c608b9186531fc35153d8c1aaf5e0512c1d076b9b0476114bd46c88abfee5fe680c0d010a8bfe5c4b02c9b55e9e8facd68f4c80c7d6c1fa479719d003d0387d136983b20526db2e252f34cb03249befe8a2f45da", 0xea, 0x4000, 0x0, 0x0) 239.49995ms ago: executing program 4 (id=3410): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000080)='@', 0x1}], 0x1}, 0x400c0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) r6 = getpid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000380)=r6) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000003c0)) close(r2) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r8, 0x0, 0x9, 0x0, &(0x7f0000001580)) sendto$inet(r7, 0x0, 0x0, 0x200040d1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x80, 0x10, 0x44b, 0x70bd27, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x800}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_LOCAL={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_TOS={0x5, 0x9, 0x7}, @IFLA_GRE_TOS={0x5, 0x9, 0x6}, @IFLA_GRE_OKEY={0x8, 0x5, 0xfffffff8}, @IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_TOS={0x5, 0x9, 0x6}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x80}}, 0x0) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r9, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) close(0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x8000000, 0x3, {0x6, 0x7c}}, 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000015000100fcffffff000200000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 229.829573ms ago: executing program 3 (id=3411): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={0x0, 0xa8}}, 0x10000000) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r3 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r3) sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xbd78, @dev={0xfe, 0x80, '\x00', 0x24}, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000240)={'filter\x00', 0x1f, "09c7e332775b90238f8c1da74e36d71a9b4191eaec7669378ae600d99c037d"}, &(0x7f0000000140)=0x43) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000180)={@mcast1, 0x1f, r6}) socket$rxrpc(0x21, 0x2, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001540)="4aac10b534a94fdb6587549d3f3bb8a480b1f2cb858b2fb9c711", 0x1a}], 0x1, &(0x7f00000002c0)=[{0xd0, 0x11, 0x3, "5d0b28ba8083a1c635359409d99c26457274edbe1aac090aecf8d119a939b3035efe553eacb71c576631c61d61714fd3e0c6ad21109683e5e4ddf3d69b042cc8659ff300b595ca105306610a3224cd2047248ec1406681ee0c37e4cbb317cd0f58e2904f2290481a8bdf96b3adcc97189dab2b44a46e2b7aed858d8cf1430942101f2d6076eda6cfe354b4357789243dd7c507b9ea4c334013b7a68c3b137ee2c3570cdcc5f203ec693b6cddad801a3e4aab097583fe0db391b2fc680b77"}, {0xd0, 0x117, 0x602, "b02268540bb9df61a2839bc93758e9f622d7855ef61d0db79fbbd255503d21f465d58f8be9b292a5cc4266d937695a3f2ab20ad36bd95bb923645c8a2574eecabddbe31a0dda4e2c182f9bdb09f9ec509128177198ddcabeb5028c742dc7b3eac636430c9cfcbad46a81fc2344f2ebce80ab082f346baea48a7567337dd9e5b7e64162e0489f273bed0ba9b39537d426e14f639f0f7df069b4581bda35d62159f56929c3dce5a1e9af52c9e90967d759e505777e87d58240b259c9d5ad"}, {0x1010, 0x109, 0xb, "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"}, {0x78, 0x0, 0x4, "26e2752059a4afaf4801c1a1b0f78b8cf694dea98eddfbf37aeb30d33b289cc08b31371223928a4b8b4e6a9af479de809ad56f6436831f15a3341b94a6e29a1e5106d6f0e7b3da9a2ffc7355178d32628ac535cdc3a00ee90c197472c0e0f4c5d20d7352244aa225"}], 0x1228}}], 0x1, 0x20008899) 0s ago: executing program 2 (id=3412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES64]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x1000000}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x3]}}, 0x0, 0x2b, 0x0, 0xa}, 0x28) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x800}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000440)={[{0x2d, 'net_cls'}, {0x2b, 'perf_event'}, {0x2b, 'cpu'}, {0x2d, 'cpu'}, {0x2b, 'rdma'}]}, 0x25) kernel console output (not intermixed with test programs): ibute type 21 has an invalid length. [ 177.833485][T10999] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1438'. [ 177.854746][T10994] netlink: 'syz.1.1435': attribute type 21 has an invalid length. [ 177.876663][T10994] netlink: 'syz.1.1435': attribute type 21 has an invalid length. [ 177.884763][T10994] netlink: 'syz.1.1435': attribute type 21 has an invalid length. [ 177.927083][T10994] netlink: 'syz.1.1435': attribute type 21 has an invalid length. [ 177.935185][T10994] netlink: 'syz.1.1435': attribute type 21 has an invalid length. [ 178.018794][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 178.124421][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1441'. [ 178.340659][T11023] syzkaller0: entered allmulticast mode [ 178.499357][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1450'. [ 178.764256][T11050] bond0: (slave wlan1): Releasing backup interface [ 178.844802][T11057] netlink: 64985 bytes leftover after parsing attributes in process `syz.0.1457'. [ 178.857978][T11057] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1457'. [ 178.867922][T11057] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.875099][T11057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.882786][T11057] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.889997][T11057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.943939][T11057] bridge0: entered promiscuous mode [ 178.972384][T11057] bridge0: entered allmulticast mode [ 179.061365][T11066] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1458'. [ 179.369736][T11089] batadv0: entered promiscuous mode [ 179.375182][T11089] batadv0: entered allmulticast mode [ 179.391703][T11089] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 179.450434][T11091] nbd: couldn't find a device at index 0 [ 179.469971][T11093] nbd: couldn't find a device at index 0 [ 179.644710][T11110] openvswitch: netlink: Message has 2688 unknown bytes. [ 180.111972][T11143] 8021q: adding VLAN 0 to HW filter on device bond6 [ 180.190783][T11143] gretap1: entered promiscuous mode [ 180.247365][T11143] bond6: (slave gretap1): making interface the new active one [ 180.310274][T11143] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 180.400919][T11156] 8021q: adding VLAN 0 to HW filter on device bond13 [ 180.595662][T11156] 8021q: adding VLAN 0 to HW filter on device bond13 [ 180.607026][T11156] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.628728][T11156] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 180.990692][T11187] openvswitch: netlink: Message has 8 unknown bytes. [ 181.298251][T11203] bond10: option coupled_control: invalid value (52) [ 181.376695][T11203] bond10 (unregistering): Released all slaves [ 181.830285][T11245] sctp: [Deprecated]: syz.0.1511 (pid 11245) Use of int in max_burst socket option deprecated. [ 181.830285][T11245] Use struct sctp_assoc_value instead [ 182.352152][T10388] syzkaller0: tun_net_xmit 76 [ 182.357188][T10388] syzkaller0: tun_net_xmit 76 [ 182.367986][T10388] syzkaller0: tun_net_xmit 48 [ 182.373069][T10388] syzkaller0: tun_net_xmit 48 [ 182.378348][ T6917] syzkaller0: tun_net_xmit 76 [ 182.383266][ T6917] syzkaller0: tun_net_xmit 76 [ 182.410226][T11285] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 182.440038][ T10] syzkaller0: tun_net_xmit 76 [ 182.444840][ T10] syzkaller0: tun_net_xmit 76 [ 182.453653][T11285] syzkaller0: Linktype set failed because interface is up [ 182.477594][ T6917] syzkaller0: tun_net_xmit 76 [ 182.482636][ T6917] syzkaller0: tun_net_xmit 76 [ 182.727370][T11297] 8021q: adding VLAN 0 to HW filter on device bond14 [ 182.751539][T11297] bond_slave_0: entered promiscuous mode [ 182.757554][T11297] bond_slave_1: entered promiscuous mode [ 182.799193][T11307] sock: sock_timestamping_bind_phc: sock not bind to device [ 182.809376][T11297] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.823873][T11297] bond14: (slave macvlan2): Enslaving as a backup interface with an up link [ 182.837639][T11307] __nla_validate_parse: 19 callbacks suppressed [ 182.837659][T11307] netlink: 212332 bytes leftover after parsing attributes in process `syz.3.1534'. [ 182.931330][T11314] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.964795][T11314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1535'. [ 182.975651][T11318] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1536'. [ 183.199742][T11331] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 183.279073][T11331] IPv6: sit1: Disabled Multicast RS [ 183.407527][T11346] validate_nla: 32 callbacks suppressed [ 183.407546][T11346] netlink: 'syz.4.1545': attribute type 4 has an invalid length. [ 183.556950][T11354] xt_hashlimit: max too large, truncated to 1048576 [ 183.672280][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1551'. [ 183.685533][T11364] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1552'. [ 183.695610][T11364] netlink: 'syz.3.1552': attribute type 9 has an invalid length. [ 183.710106][T11365] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1552'. [ 183.736982][T11365] netlink: 'syz.3.1552': attribute type 9 has an invalid length. [ 184.030680][T11380] netlink: 'syz.2.1557': attribute type 5 has an invalid length. [ 184.147379][T11388] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1560'. [ 184.397403][T11408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.799924][T11404] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1562'. [ 185.165818][T11426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.173116][T11426] IPv6: NLM_F_CREATE should be set when creating new route [ 185.180415][T11426] IPv6: NLM_F_CREATE should be set when creating new route [ 185.187668][T11426] IPv6: NLM_F_CREATE should be set when creating new route [ 185.202216][T11426] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 185.872825][T11416] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1565'. [ 186.106060][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1571'. [ 186.329601][T11458] ieee802154 phy1 wpan1: encryption failed: -22 [ 186.521191][T11476] !: renamed from dummy0 (while UP) [ 186.659532][T11484] netlink: 'syz.2.1587': attribute type 39 has an invalid length. [ 186.860654][T11488] netlink: 'syz.3.1589': attribute type 1 has an invalid length. [ 186.948847][T11488] bond8: (slave bridge5): making interface the new active one [ 186.957961][T11488] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 187.352501][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.382007][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.415763][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.450698][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.532195][T11520] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 187.540209][T11520] netlink: 'syz.4.1599': attribute type 1 has an invalid length. [ 187.549449][T11520] netlink: 'syz.4.1599': attribute type 2 has an invalid length. [ 187.622142][T11529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.055525][T11564] __nla_validate_parse: 8 callbacks suppressed [ 188.055544][T11564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 188.140435][T11568] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 188.245361][T11577] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 188.275455][T11577] 8021q: adding VLAN 0 to HW filter on device bond10 [ 188.283440][T11575] bond0: Caught tx_queue_len zero misconfig [ 188.326121][T11578] bond10: (slave gretap2): making interface the new active one [ 188.337696][T11578] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 188.352679][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1618'. [ 188.485192][T11583] ip6erspan0: entered promiscuous mode [ 188.490910][T11583] ip6erspan0: entered allmulticast mode [ 188.752201][T11598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1618'. [ 188.791979][T11603] netlink: 'syz.3.1624': attribute type 2 has an invalid length. [ 188.911327][T11612] syzkaller0: entered promiscuous mode [ 188.926797][T11612] syzkaller0: entered allmulticast mode [ 188.989523][T11618] netlink: 1793 bytes leftover after parsing attributes in process `syz.3.1628'. [ 189.150892][T11628] netlink: 'syz.2.1632': attribute type 1 has an invalid length. [ 189.259942][T11631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.430609][T11647] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1640'. [ 189.486109][T11648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1640'. [ 189.670819][T11655] tipc: Started in network mode [ 189.675769][T11655] tipc: Node identity 3ecbeccbecdb, cluster identity 4711 [ 189.683216][T11655] tipc: Enabled bearer , priority 0 [ 189.694786][T11655] tipc: Resetting bearer [ 189.721715][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 189.747615][T11653] tipc: Disabling bearer [ 189.780329][T11667] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 189.817903][T11667] team1: entered promiscuous mode [ 189.823133][T11667] team1: entered allmulticast mode [ 189.960033][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 190.115447][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 190.118123][T11691] syzkaller1: entered promiscuous mode [ 190.130199][T11691] syzkaller1: entered allmulticast mode [ 190.137970][T11691] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 190.203985][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 190.435184][T11709] bond11: Invalid ad_actor_system MAC address. [ 190.451691][T11709] bond11: option ad_actor_system: invalid value (1) [ 190.462610][T11709] bond11 (unregistering): Released all slaves [ 190.557865][T11721] bond10: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 190.596104][T11721] bond10 (unregistering): Released all slaves [ 190.711992][T11737] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 190.925697][T11753] netlink: 'syz.3.1671': attribute type 1 has an invalid length. [ 191.084039][T11762] netlink: 'syz.4.1674': attribute type 9 has an invalid length. [ 191.286724][T11780] netdevsim netdevsim4: Firmware load for './file0/../file0' refused, path contains '..' component [ 191.341403][T11780] xt_hashlimit: invalid rate [ 191.428532][T11780] bond8: option mode: invalid value (133) [ 191.450500][T11780] bond8 (unregistering): Released all slaves [ 191.738358][T11812] gtp0: entered promiscuous mode [ 191.759832][T11812] gtp0: entered allmulticast mode [ 191.864958][T11827] netlink: 'syz.3.1693': attribute type 3 has an invalid length. [ 191.936855][T11830] netlink: 'syz.3.1693': attribute type 3 has an invalid length. [ 192.529715][T11877] netlink: 'syz.1.1708': attribute type 1 has an invalid length. [ 192.556837][T11877] netlink: 'syz.1.1708': attribute type 7 has an invalid length. [ 192.576581][T11877] netlink: 'syz.1.1708': attribute type 8 has an invalid length. [ 192.800484][T11898] bond11: (slave gre0): Device is not bonding slave [ 192.815794][T11898] bond11: option active_slave: invalid value (gre0) [ 192.838711][T11898] bond11 (unregistering): Released all slaves [ 192.906037][T11908] ip6gre1: entered promiscuous mode [ 192.940891][T11908] netlink: 'syz.2.1718': attribute type 1 has an invalid length. [ 193.278873][T11934] __nla_validate_parse: 14 callbacks suppressed [ 193.278901][T11934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1728'. [ 193.314177][T11937] syzkaller0: entered promiscuous mode [ 193.321553][T11937] syzkaller0: entered allmulticast mode [ 193.417609][T11943] 8021q: adding VLAN 0 to HW filter on device bond16 [ 193.488882][T11943] 8021q: adding VLAN 0 to HW filter on device bond16 [ 193.496217][T11943] bond16: (slave vxcan3): The slave device specified does not support setting the MAC address [ 193.510869][T11943] bond16: (slave vxcan3): Error -95 calling set_mac_address [ 193.574530][T11958] vlan2: entered allmulticast mode [ 193.585108][T11958] bond16: entered allmulticast mode [ 193.692736][T11967] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1737'. [ 193.713481][T11952] veth9: entered promiscuous mode [ 193.724386][T11952] bond16: (slave veth9): Enslaving as an active interface with a down link [ 193.904056][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 193.939442][T11979] syzkaller0: entered promiscuous mode [ 193.949527][T11979] syzkaller0: entered allmulticast mode [ 194.010203][T11980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'. [ 194.020939][T11980] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1740'. [ 194.140766][T11991] validate_nla: 1 callbacks suppressed [ 194.140783][T11991] netlink: 'syz.3.1742': attribute type 25 has an invalid length. [ 194.170820][T11991] netlink: 'syz.3.1742': attribute type 7 has an invalid length. [ 194.210300][T11991] netlink: 'syz.3.1742': attribute type 1 has an invalid length. [ 194.241876][T11991] netlink: 'syz.3.1742': attribute type 4 has an invalid length. [ 194.267414][T11991] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1742'. [ 194.305149][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.308110][T11991] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.351479][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'. [ 194.391453][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1747'. [ 194.405669][T12008] nbd: must specify at least one socket [ 194.408965][T12009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1750'. [ 194.411706][T12008] nbd: must specify at least one socket [ 194.448139][T12009] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1750'. [ 194.469496][T12008] nbd: must specify at least one socket [ 195.219339][T12061] bond0: entered promiscuous mode [ 195.257109][T12061] !€ÿ: entered promiscuous mode [ 195.278199][T12061] bond_slave_1: entered promiscuous mode [ 195.292643][T12061] bridge_slave_1: entered promiscuous mode [ 195.309597][T12061] batadv0: entered promiscuous mode [ 195.337418][T12061] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 195.361438][T12061] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 195.879244][T12102] xt_CONNSECMARK: invalid mode: 0 [ 196.334175][T12134] netlink: 'syz.3.1788': attribute type 5 has an invalid length. [ 196.353597][T12134] netlink: 'syz.3.1788': attribute type 6 has an invalid length. [ 196.355543][T12137] netlink: 'syz.0.1789': attribute type 29 has an invalid length. [ 196.431756][T12139] netlink: 'syz.3.1788': attribute type 27 has an invalid length. [ 196.468079][T12139] netlink: 'syz.3.1788': attribute type 4 has an invalid length. [ 196.941281][T12162] tipc: Enabled bearer , priority 0 [ 196.953621][T12158] syzkaller0: entered promiscuous mode [ 196.959264][T12158] syzkaller0: entered allmulticast mode [ 196.978055][T12158] tipc: Resetting bearer [ 196.995332][T12157] tipc: Resetting bearer [ 197.043581][T12157] tipc: Disabling bearer [ 197.367818][T12175] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 197.376965][T12175] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 197.782146][T12212] syzkaller0: entered promiscuous mode [ 197.805298][T12212] syzkaller0: entered allmulticast mode [ 197.888356][T12212] tipc: Enabled bearer , priority 0 [ 197.987388][T12211] tipc: Resetting bearer [ 198.081677][T12211] tipc: Disabling bearer [ 198.168790][T12237] netlink: 'syz.0.1820': attribute type 29 has an invalid length. [ 198.211633][T12239] ip6erspan0: entered promiscuous mode [ 198.226999][T12239] ip6erspan0: entered allmulticast mode [ 198.334942][T12250] x_tables: duplicate underflow at hook 1 [ 198.388885][T12250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.401095][T12250] __nla_validate_parse: 17 callbacks suppressed [ 198.401112][T12250] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1822'. [ 198.407249][T12252] xt_cgroup: path and classid specified [ 198.553032][T12264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.739812][T12276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1833'. [ 198.751069][T12276] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1833'. [ 198.760341][T12276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1833'. [ 198.769790][T12276] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1833'. [ 198.770350][T12279] bond17: option primary_reselect: invalid value (255) [ 198.791865][T12279] bond17 (unregistering): Released all slaves [ 199.202734][T12302] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20004 [ 199.308846][T12309] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.489982][T12324] validate_nla: 4 callbacks suppressed [ 199.489999][T12324] netlink: 'syz.3.1847': attribute type 2 has an invalid length. [ 199.568804][T12324] 9: entered promiscuous mode [ 199.696699][T12335] geneve2: entered promiscuous mode [ 199.944148][T12347] netlink: 'syz.3.1857': attribute type 1 has an invalid length. [ 200.009734][T12352] syzkaller1: entered promiscuous mode [ 200.015314][T12352] syzkaller1: entered allmulticast mode [ 200.214163][T12367] netlink: 696 bytes leftover after parsing attributes in process `syz.3.1864'. [ 200.399711][T12377] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 200.529271][T12387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1871'. [ 200.641554][T12390] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1872'. [ 200.653406][T12390] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1872'. [ 200.744514][T12399] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 200.871724][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 200.882374][T12405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.975846][T12410] IPVS: length: 8 != 1152 [ 200.988580][T12405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.151367][T12422] netlink: 'syz.0.1883': attribute type 2 has an invalid length. [ 201.334684][T12437] syzkaller1: entered promiscuous mode [ 201.348217][T12437] syzkaller1: entered allmulticast mode [ 201.446536][T12445] nbd: must specify an index to disconnect [ 201.499306][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 201.505489][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 201.505504][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 202.435907][T12510] netlink: 'syz.0.1907': attribute type 5 has an invalid length. [ 202.701636][T12520] bond_slave_0: left promiscuous mode [ 202.719755][T12520] bond_slave_1: left promiscuous mode [ 202.853189][T12520] bond14: (slave macvlan2): Removing an active aggregator [ 202.876304][T12520] bond14: (slave macvlan2): Releasing backup interface [ 202.904529][T12520] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.919804][T12520] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.968884][T12520] bond0 (unregistering): Released all slaves [ 203.265465][T12546] netlink: 'syz.3.1917': attribute type 1 has an invalid length. [ 203.357587][T12553] syzkaller0: entered promiscuous mode [ 203.363134][T12553] syzkaller0: entered allmulticast mode [ 203.425594][T12553] __nla_validate_parse: 16 callbacks suppressed [ 203.425613][T12553] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1920'. [ 203.818359][T12590] netlink: 'syz.1.1931': attribute type 6 has an invalid length. [ 203.960909][T12599] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.997045][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 204.081772][T12602] netlink: 'syz.4.1936': attribute type 11 has an invalid length. [ 204.094065][T12604] netlink: 'syz.1.1937': attribute type 33 has an invalid length. [ 204.118175][T12602] netlink: 'syz.4.1936': attribute type 1 has an invalid length. [ 204.141975][T12604] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 204.154930][T12604] bond0 (unregistering): Released all slaves [ 204.183564][T12602] pim6reg1: entered promiscuous mode [ 204.189356][T12602] pim6reg1: entered allmulticast mode [ 204.952140][T12651] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1951'. [ 205.002394][T12651] openvswitch: netlink: Key 32 has unexpected len 1026 expected 2 [ 205.007868][T12657] IPv6: sit1: Disabled Multicast RS [ 205.029358][T12657] sit1: entered allmulticast mode [ 205.527056][T12687] +: renamed from syzkaller0 [ 205.565695][T12692] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.1967'. [ 205.691048][T12699] netlink: 'syz.0.1969': attribute type 1 has an invalid length. [ 205.694396][T12702] x_tables: duplicate underflow at hook 1 [ 205.707379][T12699] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1969'. [ 205.721044][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1968'. [ 205.747228][T12703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1968'. [ 205.760652][T12699] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1969'. [ 206.120209][T12728] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 206.213072][T12732] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1975'. [ 206.219730][T12728] 8021q: adding VLAN 0 to HW filter on device bond11 [ 206.305469][T12740] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1978'. [ 206.443182][T12749] tipc: Enabled bearer , priority 0 [ 206.509110][T12749] syzkaller0: entered promiscuous mode [ 206.522197][T12749] syzkaller0: entered allmulticast mode [ 206.558898][T12749] tipc: Resetting bearer [ 206.610942][T12748] tipc: Resetting bearer [ 208.173330][T12748] tipc: Disabling bearer [ 208.183315][T12767] bond0: Caught tx_queue_len zero misconfig [ 208.193507][T12773] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 208.426831][T12808] __nla_validate_parse: 3 callbacks suppressed [ 208.426851][T12808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1998'. [ 208.798355][T12838] tipc: Enabled bearer , priority 0 [ 208.815302][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2006'. [ 208.934864][T12850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 208.950455][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 209.072267][T12856] netlink: 'syz.0.2013': attribute type 21 has an invalid length. [ 209.080634][T12856] netlink: 'syz.0.2013': attribute type 22 has an invalid length. [ 209.088740][T12856] netlink: 'syz.0.2013': attribute type 23 has an invalid length. [ 209.099294][T12856] netlink: 'syz.0.2013': attribute type 25 has an invalid length. [ 209.108483][T12856] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2013'. [ 209.123159][T12856] netlink: 'syz.0.2013': attribute type 142 has an invalid length. [ 209.239229][T12868] syzkaller0: entered allmulticast mode [ 209.264028][T12867] tipc: Enabled bearer , priority 0 [ 209.340746][T12867] tipc: Resetting bearer [ 209.373319][T12867] tipc: Disabling bearer [ 209.443140][T12880] syzkaller1: entered promiscuous mode [ 209.450083][T12880] syzkaller1: entered allmulticast mode [ 209.470337][T12877] netlink: 'syz.2.2020': attribute type 19 has an invalid length. [ 209.487782][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'. [ 209.504086][T12892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2022'. [ 209.522475][T12877] netlink: 'syz.2.2020': attribute type 19 has an invalid length. [ 209.534811][T12894] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2022'. [ 209.539448][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2020'. [ 209.750780][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2026'. [ 209.796454][ T6919] tipc: Node number set to 3101903411 [ 209.801928][T12903] netlink: 'syz.1.2026': attribute type 8 has an invalid length. [ 209.935480][T12916] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 209.975438][T12916] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 210.362867][T12954] bridge_slave_1: default FDB implementation only supports local addresses [ 210.492508][T12962] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 210.575403][T12967] bond0: option mode: invalid value (133) [ 210.585454][T12967] bond0 (unregistering): Released all slaves [ 210.775127][T12981] validate_nla: 2 callbacks suppressed [ 210.775145][T12981] netlink: 'syz.1.2049': attribute type 1 has an invalid length. [ 210.961255][T12995] netlink: 'syz.3.2053': attribute type 2 has an invalid length. [ 211.017935][T12992] bridge4: left promiscuous mode [ 211.062104][T12992] gtp0: left promiscuous mode [ 211.074441][ T12] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.086255][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 211.111049][T13000] vlan2: entered allmulticast mode [ 211.127078][T13000] bridge_slave_0: entered allmulticast mode [ 211.188597][ T12] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.203755][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 211.229984][ T12] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.256121][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 211.257189][T13013] netlink: 'syz.2.2057': attribute type 10 has an invalid length. [ 211.267754][ T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.282656][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 211.293312][T13011] FAULT_INJECTION: forcing a failure. [ 211.293312][T13011] name failslab, interval 1, probability 0, space 0, times 1 [ 211.306905][T13013] batadv0: entered allmulticast mode [ 211.312607][T13013] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 211.317471][T13011] CPU: 0 UID: 0 PID: 13011 Comm: syz.0.2059 Not tainted syzkaller #0 PREEMPT(full) [ 211.317498][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.317516][T13011] Call Trace: [ 211.317524][T13011] [ 211.317531][T13011] dump_stack_lvl+0x189/0x250 [ 211.317564][T13011] ? __pfx____ratelimit+0x10/0x10 [ 211.317590][T13011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.317615][T13011] ? __pfx__printk+0x10/0x10 [ 211.317639][T13011] ? __lock_acquire+0xab9/0xd20 [ 211.317665][T13011] should_fail_ex+0x414/0x560 [ 211.317698][T13011] should_failslab+0xa8/0x100 [ 211.317719][T13011] kmem_cache_alloc_noprof+0x74/0x6e0 [ 211.317746][T13011] ? skb_clone+0x212/0x3a0 [ 211.317773][T13011] skb_clone+0x212/0x3a0 [ 211.317797][T13011] __netlink_deliver_tap+0x404/0x850 [ 211.317829][T13011] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.317849][T13011] netlink_deliver_tap+0x19c/0x1b0 [ 211.317869][T13011] netlink_unicast+0x7fa/0x9e0 [ 211.317905][T13011] ? __pfx_netlink_unicast+0x10/0x10 [ 211.317934][T13011] ? netlink_sendmsg+0x642/0xb30 [ 211.317951][T13011] ? skb_put+0x11b/0x210 [ 211.317973][T13011] netlink_sendmsg+0x805/0xb30 [ 211.318001][T13011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.318023][T13011] ? aa_sock_msg_perm+0xf1/0x1d0 [ 211.318053][T13011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.318071][T13011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.318090][T13011] __sock_sendmsg+0x21c/0x270 [ 211.318118][T13011] ____sys_sendmsg+0x52d/0x830 [ 211.318145][T13011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.318175][T13011] ? import_iovec+0x74/0xa0 [ 211.318202][T13011] ___sys_sendmsg+0x21f/0x2a0 [ 211.318224][T13011] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.318287][T13011] ? __fget_files+0x2a/0x420 [ 211.318304][T13011] ? __fget_files+0x3a0/0x420 [ 211.318333][T13011] __sys_sendmmsg+0x227/0x430 [ 211.318359][T13011] ? __pfx___sys_sendmmsg+0x10/0x10 [ 211.318389][T13011] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.318436][T13011] ? ksys_write+0x22a/0x250 [ 211.318465][T13011] ? __pfx_ksys_write+0x10/0x10 [ 211.318495][T13011] __x64_sys_sendmmsg+0xa0/0xc0 [ 211.318518][T13011] do_syscall_64+0xfa/0xfa0 [ 211.318542][T13011] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.318568][T13011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.318586][T13011] ? clear_bhb_loop+0x60/0xb0 [ 211.318608][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.318626][T13011] RIP: 0033:0x7f5a2038f749 [ 211.318650][T13011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.318670][T13011] RSP: 002b:00007f5a21279038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 211.318695][T13011] RAX: ffffffffffffffda RBX: 00007f5a205e5fa0 RCX: 00007f5a2038f749 [ 211.318709][T13011] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 211.318721][T13011] RBP: 00007f5a21279090 R08: 0000000000000000 R09: 0000000000000000 [ 211.318732][T13011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.318743][T13011] R13: 00007f5a205e6038 R14: 00007f5a205e5fa0 R15: 00007ffde96deec8 [ 211.318774][T13011] [ 211.638684][T13006] tipc: Started in network mode [ 211.645244][T13006] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 211.653162][T13006] tipc: Enabled bearer , priority 2 [ 211.661384][T13015] netlink: 'syz.1.2060': attribute type 4 has an invalid length. [ 212.226702][T13064] FAULT_INJECTION: forcing a failure. [ 212.226702][T13064] name failslab, interval 1, probability 0, space 0, times 0 [ 212.318300][T13064] CPU: 1 UID: 0 PID: 13064 Comm: syz.1.2072 Not tainted syzkaller #0 PREEMPT(full) [ 212.318327][T13064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.318339][T13064] Call Trace: [ 212.318347][T13064] [ 212.318354][T13064] dump_stack_lvl+0x189/0x250 [ 212.318385][T13064] ? __pfx____ratelimit+0x10/0x10 [ 212.318411][T13064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.318437][T13064] ? __pfx__printk+0x10/0x10 [ 212.318468][T13064] ? __pfx___might_resched+0x10/0x10 [ 212.318495][T13064] should_fail_ex+0x414/0x560 [ 212.318528][T13064] should_failslab+0xa8/0x100 [ 212.318549][T13064] kmem_cache_alloc_node_noprof+0x77/0x710 [ 212.318576][T13064] ? __alloc_skb+0x112/0x2d0 [ 212.318600][T13064] __alloc_skb+0x112/0x2d0 [ 212.318622][T13064] netlink_ack+0x146/0xa50 [ 212.318638][T13064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.318665][T13064] ? ref_tracker_free+0x63a/0x7d0 [ 212.318688][T13064] ? __asan_memcpy+0x40/0x70 [ 212.318712][T13064] ? __pfx_ref_tracker_free+0x10/0x10 [ 212.318741][T13064] netlink_rcv_skb+0x28c/0x470 [ 212.318762][T13064] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 212.318792][T13064] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 212.318822][T13064] ? netlink_deliver_tap+0x2e/0x1b0 [ 212.318850][T13064] netlink_unicast+0x82f/0x9e0 [ 212.318887][T13064] ? __pfx_netlink_unicast+0x10/0x10 [ 212.318917][T13064] ? netlink_sendmsg+0x642/0xb30 [ 212.318934][T13064] ? skb_put+0x11b/0x210 [ 212.318956][T13064] netlink_sendmsg+0x805/0xb30 [ 212.318986][T13064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.319007][T13064] ? aa_sock_msg_perm+0xf1/0x1d0 [ 212.319033][T13064] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 212.319051][T13064] ? __pfx_netlink_sendmsg+0x10/0x10 [ 212.319069][T13064] __sock_sendmsg+0x21c/0x270 [ 212.319095][T13064] ____sys_sendmsg+0x52d/0x830 [ 212.319119][T13064] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.319149][T13064] ? import_iovec+0x74/0xa0 [ 212.319176][T13064] ___sys_sendmsg+0x21f/0x2a0 [ 212.319199][T13064] ? __pfx____sys_sendmsg+0x10/0x10 [ 212.319253][T13064] ? __fget_files+0x2a/0x420 [ 212.319271][T13064] ? __fget_files+0x3a0/0x420 [ 212.319300][T13064] __sys_sendmmsg+0x227/0x430 [ 212.319326][T13064] ? __pfx___sys_sendmmsg+0x10/0x10 [ 212.319356][T13064] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.319400][T13064] ? ksys_write+0x22a/0x250 [ 212.319428][T13064] ? __pfx_ksys_write+0x10/0x10 [ 212.319464][T13064] __x64_sys_sendmmsg+0xa0/0xc0 [ 212.319488][T13064] do_syscall_64+0xfa/0xfa0 [ 212.319515][T13064] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.319542][T13064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.319560][T13064] ? clear_bhb_loop+0x60/0xb0 [ 212.319581][T13064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.319599][T13064] RIP: 0033:0x7f254f98f749 [ 212.319616][T13064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.319634][T13064] RSP: 002b:00007f254dbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 212.319655][T13064] RAX: ffffffffffffffda RBX: 00007f254fbe5fa0 RCX: 00007f254f98f749 [ 212.319669][T13064] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 212.319683][T13064] RBP: 00007f254dbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 212.319694][T13064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.319705][T13064] R13: 00007f254fbe6038 R14: 00007f254fbe5fa0 R15: 00007ffd636a7648 [ 212.319737][T13064] [ 212.795580][T13082] bond11: peer notification delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 212.806184][ T5995] tipc: Node number set to 10463914 [ 212.844921][T13087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.255327][T13117] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 213.293095][T13123] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 213.488112][T13139] __nla_validate_parse: 20 callbacks suppressed [ 213.488130][T13139] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2091'. [ 213.530392][T13139] nbd: couldn't find a device at index 0 [ 213.536151][T13137] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2091'. [ 213.546708][T13137] nbd: couldn't find a device at index 0 [ 213.579344][T13153] netlink: 'syz.1.2093': attribute type 10 has an invalid length. [ 213.600312][T13154] netlink: 'syz.0.2097': attribute type 4 has an invalid length. [ 213.607067][T13153] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2093'. [ 213.647831][T13154] netlink: 'syz.0.2097': attribute type 4 has an invalid length. [ 213.673001][T13153] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 213.698567][T13139] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2091'. [ 213.753227][T13154] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2097'. [ 213.765885][T13154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2097'. [ 213.842427][T13164] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2099'. [ 213.913073][T13164] batadv0: left allmulticast mode [ 213.920295][T13164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.930310][T13169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2101'. [ 214.099077][T13179] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2104'. [ 214.543132][T13169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.841935][T13186] bridge: RTM_NEWNEIGH with invalid ether address [ 214.890725][T10039] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.928163][T10039] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.977443][T13198] xt_hashlimit: size too large, truncated to 1048576 [ 214.996842][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2107'. [ 215.039838][T10039] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.049023][T10039] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.058419][T10039] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.067909][T10039] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.118724][T10039] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.133486][T10039] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.157844][T13205] syzkaller0: entered promiscuous mode [ 215.163717][T13205] syzkaller0: entered allmulticast mode [ 215.718973][T13230] netlink: 'syz.1.2121': attribute type 8 has an invalid length. [ 215.789853][T13234] tipc: Enabled bearer , priority 0 [ 215.812429][T13234] syzkaller0: entered promiscuous mode [ 215.831839][T13234] syzkaller0: entered allmulticast mode [ 215.892146][T13231] tipc: Resetting bearer [ 215.949140][T13231] tipc: Disabling bearer [ 216.031390][T13246] xfrm1: entered allmulticast mode [ 216.182974][T13255] netlink: 'syz.3.2127': attribute type 4 has an invalid length. [ 216.444465][T13283] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.010878][T13323] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 217.019145][T13323] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 217.309014][T13351] smc: net device vcan0 applied user defined pnetid SYZ1 [ 217.373306][T13355] netlink: 'syz.2.2156': attribute type 12 has an invalid length. [ 217.381449][T13355] netlink: 'syz.2.2156': attribute type 29 has an invalid length. [ 217.403188][T13351] netlink: 'syz.2.2156': attribute type 3 has an invalid length. [ 217.648678][T13370] netlink: 'syz.2.2165': attribute type 4 has an invalid length. [ 218.038210][T13401] sctp: [Deprecated]: syz.1.2169 (pid 13401) Use of int in maxseg socket option. [ 218.038210][T13401] Use struct sctp_assoc_value instead [ 218.610829][T13428] __nla_validate_parse: 7 callbacks suppressed [ 218.610849][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2176'. [ 218.645728][T13428] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 218.714099][T13430] bridge8: entered promiscuous mode [ 218.722390][T13430] bridge8: entered allmulticast mode [ 218.737955][T13434] bridge9: entered promiscuous mode [ 218.743783][T13434] bridge9: entered allmulticast mode [ 218.768122][T13443] openvswitch: netlink: Flow key attr not present in new flow. [ 218.944009][T13453] syzkaller0: entered promiscuous mode [ 218.958256][T13453] syzkaller0: entered allmulticast mode [ 218.981428][T13457] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2185'. [ 219.034411][T13457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2185'. [ 219.063580][T13457] netlink: 'syz.1.2185': attribute type 7 has an invalid length. [ 219.109674][T13457] netlink: 'syz.1.2185': attribute type 8 has an invalid length. [ 219.125936][T13468] erspan0: entered promiscuous mode [ 219.132707][T13468] erspan0: entered allmulticast mode [ 219.150741][T13468] netlink: 'syz.2.2187': attribute type 10 has an invalid length. [ 219.163026][T13468] bridge0: port 2(team0) entered blocking state [ 219.174015][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2185'. [ 219.184200][T13468] bridge0: port 2(team0) entered disabled state [ 219.191101][T13468] team0: entered allmulticast mode [ 219.196761][T13468] team_slave_0: entered allmulticast mode [ 219.203768][T13468] team_slave_1: entered allmulticast mode [ 219.213865][T13468] team0: entered promiscuous mode [ 219.219126][T13468] team_slave_0: entered promiscuous mode [ 219.227729][T13468] team_slave_1: entered promiscuous mode [ 219.409305][T13478] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 219.646093][T13491] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2193'. [ 219.696927][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2197'. [ 220.116299][T13523] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 220.169696][T13536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2204'. [ 220.183209][T13523] bond12 (unregistering): Released all slaves [ 220.469247][T13552] net veth1_virt_wifi .: renamed from virt_wifi0 [ 220.774279][T13569] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.852746][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 221.272861][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'. [ 221.315339][T13618] validate_nla: 2 callbacks suppressed [ 221.315358][T13618] netlink: 'syz.3.2230': attribute type 5 has an invalid length. [ 221.359098][ T999] nci: nci_rx_work: unknown MT 0x7 [ 221.362853][T13618] : entered promiscuous mode [ 221.447945][T13623] syzkaller1: entered promiscuous mode [ 221.455831][T13623] syzkaller1: entered allmulticast mode [ 221.519562][T13630] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2232'. [ 221.764110][T13647] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 222.219100][T13673] veth9: entered allmulticast mode [ 222.288845][T13675] netlink: 'syz.1.2245': attribute type 25 has an invalid length. [ 222.516893][T13690] IPv6: sit1: Disabled Multicast RS [ 222.524183][T13690] sit1: entered allmulticast mode [ 222.610615][T13689] gtp1: entered promiscuous mode [ 222.653782][T13698] netem: incorrect gi model size [ 222.659211][T13698] netem: change failed [ 223.042545][T13722] netlink: 'syz.3.2260': attribute type 16 has an invalid length. [ 223.054858][T13722] netlink: 'syz.3.2260': attribute type 17 has an invalid length. [ 223.082510][T13722] gre0: left promiscuous mode [ 223.088106][T13722] gre0: left allmulticast mode [ 223.124527][T13722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.135416][T13722] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.151783][T13722] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.287773][T13738] netlink: 'syz.2.2265': attribute type 11 has an invalid length. [ 223.512422][T13754] netlink: 'syz.2.2271': attribute type 21 has an invalid length. [ 223.621744][T13761] syzkaller1: entered promiscuous mode [ 223.627330][T13761] syzkaller1: entered allmulticast mode [ 223.711925][T13769] __nla_validate_parse: 9 callbacks suppressed [ 223.711943][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2278'. [ 223.867951][T13774] tipc: Enabled bearer , priority 0 [ 223.885616][T13774] syzkaller0: entered promiscuous mode [ 223.892564][T13774] syzkaller0: entered allmulticast mode [ 223.917078][T13773] tipc: Resetting bearer [ 223.972773][T13789] netlink: 'syz.4.2280': attribute type 1 has an invalid length. [ 223.983971][T13773] tipc: Disabling bearer [ 224.000164][T13788] tipc: Enabled bearer , priority 10 [ 224.172171][T13785] veth11: entered promiscuous mode [ 224.345163][T13813] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2290'. [ 224.590624][T13824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 224.649926][T13831] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2295'. [ 224.673032][T13824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.762240][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2293'. [ 224.771347][T13824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 224.787186][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2298'. [ 224.806484][T13824] netlink: 'syz.1.2293': attribute type 15 has an invalid length. [ 224.960927][T13854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2301'. [ 224.998706][T13833] bond0 (unregistering): Released all slaves [ 225.067970][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2303'. [ 225.147950][T13863] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2304'. [ 225.224145][T13863] vlan2: entered allmulticast mode [ 225.252252][T13869] netlink: 'syz.1.2306': attribute type 8 has an invalid length. [ 225.752415][T13906] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 225.753272][T13910] netlink: 'syz.2.2318': attribute type 3 has an invalid length. [ 225.789390][T13910] netlink: 'syz.2.2318': attribute type 3 has an invalid length. [ 226.441369][T13967] validate_nla: 3 callbacks suppressed [ 226.441389][T13967] netlink: 'syz.4.2334': attribute type 29 has an invalid length. [ 226.529292][T13967] netlink: 'syz.4.2334': attribute type 29 has an invalid length. [ 226.541852][T13972] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 227.000646][T14000] : entered promiscuous mode [ 227.127809][T14005] bond12: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 227.370241][T14027] gre2: entered promiscuous mode [ 227.375233][T14027] gre2: entered allmulticast mode [ 228.315963][T14097] netlink: 'syz.3.2371': attribute type 10 has an invalid length. [ 228.369399][T14100] delete_channel: no stack [ 228.435860][T14097] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 228.739127][T14132] __nla_validate_parse: 11 callbacks suppressed [ 228.739144][T14132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2378'. [ 228.911517][T14132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2378'. [ 229.039720][T14152] netlink: 'syz.1.2384': attribute type 1 has an invalid length. [ 229.065006][T14152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.080581][T14152] vlan2: entered allmulticast mode [ 229.085824][T14152] bond0: entered allmulticast mode [ 229.424249][T14167] tipc: Enabling of bearer rejected, already enabled [ 229.619531][T14184] netlink: 'syz.0.2391': attribute type 10 has an invalid length. [ 229.632143][T14184] bridge0: port 3(team0) entered blocking state [ 229.652747][T14184] bridge0: port 3(team0) entered disabled state [ 229.677191][T14184] team0: entered allmulticast mode [ 229.691752][T14184] team_slave_0: entered allmulticast mode [ 229.702881][T14188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 229.705321][T14184] team_slave_1: entered allmulticast mode [ 229.725192][T14184] team0: entered promiscuous mode [ 229.730621][T14184] team_slave_0: entered promiscuous mode [ 229.738151][T14184] team_slave_1: entered promiscuous mode [ 229.748028][T14184] bridge0: port 3(team0) entered blocking state [ 229.754547][T14184] bridge0: port 3(team0) entered listening state [ 229.818989][T14198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2391'. [ 230.036541][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2402'. [ 230.175990][T14223] xt_hashlimit: invalid interval [ 230.195564][T14222] macsec2: entered promiscuous mode [ 230.215397][T14222] macsec2: entered allmulticast mode [ 230.225284][T14222] bond13: (slave macsec2): Error -34 calling dev_set_mtu [ 230.321541][T14224] netlink: 'syz.2.2406': attribute type 1 has an invalid length. [ 230.333534][T14224] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2406'. [ 230.412830][T14233] netlink: 'syz.4.2408': attribute type 11 has an invalid length. [ 230.437319][T14233] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2408'. [ 230.472139][T14239] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2411'. [ 230.486916][T14237] Cannot find del_set index 4 as target [ 230.613401][T14245] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 230.720582][T14252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.764292][T14251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.042909][ T5847] block nbd2: Receive control failed (result -32) [ 231.178283][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2422'. [ 231.235118][T14280] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2422'. [ 231.326201][T14285] netlink: 'syz.0.2423': attribute type 1 has an invalid length. [ 231.335425][T14285] netlink: 'syz.0.2423': attribute type 3 has an invalid length. [ 231.343364][T14285] NCSI netlink: No device for ifindex 813332851 [ 231.751717][T14298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.232721][T14319] netlink: 'syz.4.2435': attribute type 21 has an invalid length. [ 232.254433][T14322] netlink: 'syz.2.2436': attribute type 4 has an invalid length. [ 232.808668][T14345] erspan0: left promiscuous mode [ 232.813885][T14345] erspan0: left allmulticast mode [ 232.891226][T14345] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 233.490166][T14396] : entered promiscuous mode [ 233.964181][T14431] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 233.980512][T14430] __nla_validate_parse: 14 callbacks suppressed [ 233.980532][T14430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2470'. [ 234.104040][T14441] netlink: 'syz.1.2473': attribute type 2 has an invalid length. [ 234.114454][T14441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2473'. [ 234.306175][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 234.447089][T14463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2480'. [ 234.463783][T14466] batadv0: left promiscuous mode [ 234.469523][T14466] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 234.480718][T14466] gretap1: left promiscuous mode [ 234.485916][T14466] vti0: left promiscuous mode [ 234.491815][T14466] gtp0: left promiscuous mode [ 234.496883][T14466] veth9: left promiscuous mode [ 234.578692][T14469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2481'. [ 234.588985][T14469] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2481'. [ 234.615487][T14467] vlan3: entered allmulticast mode [ 234.643658][T14469] gretap0: entered promiscuous mode [ 234.653779][T14469] gretap0: entered allmulticast mode [ 234.729456][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 234.738492][T14474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 234.845110][T14466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2479'. [ 234.876127][T14466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2479'. [ 235.275350][T14514] netlink: 'syz.3.2491': attribute type 4 has an invalid length. [ 235.437551][T14516] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 235.437921][T14523] netlink: 'syz.0.2492': attribute type 1 has an invalid length. [ 235.462439][T14516] bond17 (unregistering): Released all slaves [ 235.490439][T14523] team0: left allmulticast mode [ 235.495440][T14523] team_slave_0: left allmulticast mode [ 235.501672][T14523] team_slave_1: left allmulticast mode [ 235.508544][T14523] team0: left promiscuous mode [ 235.513451][T14523] team_slave_0: left promiscuous mode [ 235.523176][T14523] team_slave_1: left promiscuous mode [ 235.530592][T14523] bridge0: port 3(team0) entered disabled state [ 235.541529][T14523] bridge_slave_1: left allmulticast mode [ 235.555773][T14523] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.578838][T14523] bridge_slave_0: left allmulticast mode [ 235.591874][T14523] bridge_slave_0: left promiscuous mode [ 235.604437][T14523] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.619357][T14536] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 235.652725][T14536] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 236.403563][T14582] unsupported nlmsg_type 40 [ 236.448726][T14586] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 236.629947][T14598] xfrm1: entered promiscuous mode [ 236.635275][T14598] xfrm1: entered allmulticast mode [ 236.647169][ T6906] IPVS: starting estimator thread 0... [ 236.728197][T14605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.747364][T14602] IPVS: using max 30 ests per chain, 72000 per kthread [ 236.784201][T14605] netlink: 'syz.2.2514': attribute type 28 has an invalid length. [ 236.792869][T14605] netlink: 'syz.2.2514': attribute type 3 has an invalid length. [ 236.809175][T14608] syzkaller0: entered promiscuous mode [ 236.814825][T14608] syzkaller0: entered allmulticast mode [ 237.256422][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 238.299207][T14676] netlink: 'syz.0.2535': attribute type 11 has an invalid length. [ 238.319629][T14680] netlink: 'syz.0.2535': attribute type 11 has an invalid length. [ 238.498463][T14693] sctp: [Deprecated]: syz.4.2539 (pid 14693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 238.498463][T14693] Use struct sctp_sack_info instead [ 238.763815][T14709] syzkaller1: entered promiscuous mode [ 238.770719][T14709] syzkaller1: entered allmulticast mode [ 238.992968][T14722] syzkaller0: entered promiscuous mode [ 239.003934][T14722] syzkaller0: entered allmulticast mode [ 239.010754][T14725] xt_TCPMSS: Only works on TCP SYN packets [ 239.189454][T14740] netlink: 'syz.2.2556': attribute type 1 has an invalid length. [ 239.221500][T14740] 8021q: adding VLAN 0 to HW filter on device bond13 [ 239.255985][T14740] bond13: (slave veth11): Enslaving as an active interface with a down link [ 239.310349][T14740] veth13: entered promiscuous mode [ 239.331324][T14749] __nla_validate_parse: 23 callbacks suppressed [ 239.331337][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2558'. [ 239.351035][T14749] netlink: 'syz.3.2558': attribute type 19 has an invalid length. [ 239.519565][T14754] tipc: Resetting bearer [ 239.525606][T14754] tipc: Resetting bearer [ 239.539245][T14756] tipc: Resetting bearer [ 239.646120][T14758] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2561'. [ 239.697830][T14766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'. [ 239.743089][T14766] xt_hashlimit: max too large, truncated to 1048576 [ 239.831594][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2564'. [ 239.932161][T14777] ieee802154 phy1 wpan1: encryption failed: -22 [ 239.978725][T14783] veth0: entered promiscuous mode [ 240.224764][T14802] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 240.289738][T14809] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2575'. [ 240.338444][T14809] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2575'. [ 240.509508][T14824] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:65 [ 240.517576][T14822] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:65 [ 240.755005][T14778] veth0: left promiscuous mode [ 240.939242][T14853] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 240.953225][T14853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2588'. [ 240.970402][T14853] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 240.993571][T14853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2588'. [ 241.017603][T14853] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 241.045797][T14853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2588'. [ 241.059850][T14853] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 241.068413][T14853] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2588'. [ 241.079176][T14853] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 241.095787][T14853] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 241.107883][T14853] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 241.118006][T14853] netlink: 'syz.0.2588': attribute type 1 has an invalid length. [ 241.226259][T14868] tipc: New replicast peer: 255.255.255.255 [ 241.237662][T14868] tipc: Enabled bearer , priority 10 [ 241.299797][T14873] IPv6: sit1: Disabled Multicast RS [ 241.327347][T14876] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 241.499878][T14886] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.564708][T14893] bridge_slave_1: entered allmulticast mode [ 241.587792][T14893] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 241.662066][T14897] bond_slave_0: entered promiscuous mode [ 241.669734][T14897] bond_slave_0: entered allmulticast mode [ 242.011427][T14924] 8021q: VLANs not supported on syzkaller1 [ 242.018634][T14924] syzkaller1: entered promiscuous mode [ 242.024590][T14924] syzkaller1: entered allmulticast mode [ 242.219046][T14938] xt_socket: unknown flags 0xe4 [ 242.231680][T14937] IPv6: sit2: Disabled Multicast RS [ 242.357305][T13194] tipc: Node number set to 461390851 [ 242.958105][T14985] macvtap1: entered promiscuous mode [ 242.963588][T14985] vlan0: entered promiscuous mode [ 242.969404][T14985] macvtap1: entered allmulticast mode [ 242.985470][T14985] vlan0: entered allmulticast mode [ 242.992768][T14985] veth0_vlan: entered allmulticast mode [ 244.031006][T15056] 8021q: adding VLAN 0 to HW filter on device bond17 [ 244.060949][T15061] veth7: entered allmulticast mode [ 244.077597][T15062] macvlan2: entered promiscuous mode [ 244.082924][T15062] macvlan2: entered allmulticast mode [ 244.092371][T15062] bond17: entered allmulticast mode [ 244.097910][T15062] bond17: entered promiscuous mode [ 244.104895][T15062] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 244.113556][T15062] team0: Port device macvlan2 added [ 244.383899][T15076] validate_nla: 32 callbacks suppressed [ 244.383920][T15076] netlink: 'syz.1.2654': attribute type 13 has an invalid length. [ 244.433933][T15082] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20004 [ 244.475410][T15076] batadv0: left allmulticast mode [ 244.544442][T15076] gretap1: left allmulticast mode [ 244.559053][T15076] bond2: left allmulticast mode [ 244.563963][T15076] ip6gretap1: left allmulticast mode [ 244.603819][T15076] vti0: left allmulticast mode [ 244.675177][T15076] vlan2: left allmulticast mode [ 244.687276][T15076] bond0: left allmulticast mode [ 244.693668][T15076] macvtap1: left promiscuous mode [ 244.714917][T15076] vlan0: left promiscuous mode [ 244.731640][T15076] macvtap1: left allmulticast mode [ 244.738758][T15076] vlan0: left allmulticast mode [ 244.743789][T15076] veth0_vlan: left allmulticast mode [ 245.132559][T15076] macvlan2: left promiscuous mode [ 245.137819][T15076] bond17: left promiscuous mode [ 245.142791][T15076] macvlan2: left allmulticast mode [ 245.147963][T15076] bond17: left allmulticast mode [ 245.195674][T15106] syzkaller1: entered promiscuous mode [ 245.202977][T15106] syzkaller1: entered allmulticast mode [ 246.626415][T15125] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 246.636522][T15125] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 246.644713][T15125] tipc: Resetting bearer [ 246.721737][T15132] netlink: 'syz.3.2668': attribute type 1 has an invalid length. [ 246.759753][T15132] 8021q: adding VLAN 0 to HW filter on device bond10 [ 246.778963][T15132] vlan0: entered allmulticast mode [ 246.784129][T15132] bond10: entered allmulticast mode [ 246.803537][T15132] bond10: (slave gretap3): making interface the new active one [ 246.811881][T15132] gretap3: entered allmulticast mode [ 246.819064][T15132] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 246.991537][T15149] netlink: 'syz.4.2673': attribute type 16 has an invalid length. [ 246.999565][T15149] netlink: 'syz.4.2673': attribute type 17 has an invalid length. [ 247.011594][T15154] netlink: 'syz.3.2672': attribute type 1 has an invalid length. [ 247.061769][T15149] erspan0: left allmulticast mode [ 247.092502][T15149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.101299][T15149] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.115572][T15149] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.209509][T15159] __nla_validate_parse: 50 callbacks suppressed [ 247.209528][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 247.258991][T15163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2676'. [ 247.269265][T15163] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2676'. [ 247.421259][T15168] syzkaller0: entered promiscuous mode [ 247.463802][T15168] syzkaller0: entered allmulticast mode [ 248.933947][T15186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.989181][T15199] geneve3: entered promiscuous mode [ 249.016762][T15199] geneve3: entered allmulticast mode [ 249.025701][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.058864][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.086038][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.107715][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.471869][T15232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2697'. [ 249.486098][T15232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2697'. [ 249.513894][T15227] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2695'. [ 249.707840][T15248] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2701'. [ 249.803708][T15254] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2703'. [ 249.897202][T15262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2707'. [ 249.953552][T15262] netlink: 'syz.4.2707': attribute type 7 has an invalid length. [ 249.977772][ T1114] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.977804][T15262] netlink: 'syz.4.2707': attribute type 7 has an invalid length. [ 249.993537][ T1114] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.020070][T10386] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.032364][T15271] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2709'. [ 250.041941][T10386] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 250.889939][T15332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.953542][T15325] syzkaller0: entered promiscuous mode [ 250.963545][T15325] syzkaller0: entered allmulticast mode [ 250.983717][T15342] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 251.000199][T15342] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 251.033403][T15342] tipc: Resetting bearer [ 251.100132][T15349] netlink: 'syz.2.2734': attribute type 21 has an invalid length. [ 251.110081][T15349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.117370][T15349] IPv6: NLM_F_CREATE should be set when creating new route [ 251.124664][T15349] IPv6: NLM_F_CREATE should be set when creating new route [ 251.131936][T15349] IPv6: NLM_F_CREATE should be set when creating new route [ 251.322248][T15361] sctp: [Deprecated]: syz.4.2738 (pid 15361) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.322248][T15361] Use struct sctp_sack_info instead [ 251.364034][T15367] netlink: 'syz.3.2735': attribute type 2 has an invalid length. [ 251.372040][T15367] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 253.094405][T15400] ip6tnl2: entered promiscuous mode [ 253.128907][T15403] netlink: 'syz.3.2750': attribute type 12 has an invalid length. [ 253.315206][T15410] __nla_validate_parse: 6 callbacks suppressed [ 253.315226][T15410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2752'. [ 253.616055][T15429] veth0: entered promiscuous mode [ 253.720043][T15427] veth0: left promiscuous mode [ 253.727963][T15436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2760'. [ 254.198409][T15445] netlink: 696 bytes leftover after parsing attributes in process `syz.1.2764'. [ 254.391748][T15454] tipc: Enabling of bearer rejected, failed to enable media [ 254.398841][T15456] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.544527][T15462] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2771'. [ 254.545838][T15460] netlink: 'syz.3.2770': attribute type 4 has an invalid length. [ 254.762397][T15469] netlink: 284 bytes leftover after parsing attributes in process `syz.2.2775'. [ 254.800693][T15474] netlink: 'syz.0.2776': attribute type 7 has an invalid length. [ 254.826240][T15474] netlink: 'syz.0.2776': attribute type 7 has an invalid length. [ 254.938119][T15484] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2777'. [ 255.150897][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 255.160056][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'. [ 255.170016][T15497] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2781'. [ 255.245344][T15510] netlink: 'syz.3.2785': attribute type 1 has an invalid length. [ 255.749101][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.843654][T15537] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2790'. [ 256.108751][T15546] lo: entered allmulticast mode [ 256.183787][T15558] netlink: 'syz.1.2795': attribute type 75 has an invalid length. [ 256.221996][T15543] lo: left allmulticast mode [ 256.356768][T15560] syzkaller0: entered promiscuous mode [ 256.362293][T15560] syzkaller0: entered allmulticast mode [ 256.631402][T15598] netlink: 'syz.0.2807': attribute type 21 has an invalid length. [ 256.683457][T15603] netlink: 'syz.0.2807': attribute type 23 has an invalid length. [ 256.735676][T15604] netlink: 'syz.1.2802': attribute type 1 has an invalid length. [ 257.936713][T15599] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 257.946760][T15601] syzkaller1: entered promiscuous mode [ 257.952373][T15601] syzkaller1: entered allmulticast mode [ 258.175054][T15616] netlink: 'syz.0.2809': attribute type 4 has an invalid length. [ 258.498656][T15640] netlink: 'syz.1.2818': attribute type 2 has an invalid length. [ 258.683655][T15646] team0: Device ip6gre1 is of different type [ 258.809289][T15647] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 258.945115][T15654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 258.960391][T15654] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.030754][T15642] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 259.039979][T15670] __nla_validate_parse: 4 callbacks suppressed [ 259.039998][T15670] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2826'. [ 259.091781][T15642] netlink: 'syz.2.2819': attribute type 29 has an invalid length. [ 259.109489][T15675] veth0: entered promiscuous mode [ 259.117568][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2827'. [ 259.167405][T15654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.179089][T15654] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.244073][T15672] veth0 (unregistering): left promiscuous mode [ 259.293921][T15654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.308134][T15654] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.445107][T15654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.460130][T15654] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.493254][T15681] bond14: (slave gretap1): making interface the new active one [ 259.508100][T15681] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 259.740686][T15695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2834'. [ 259.790478][T10389] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.801547][T10389] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.925759][T10389] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 259.934780][T10389] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.017059][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.025451][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.072570][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.082711][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.457740][T15728] validate_nla: 2 callbacks suppressed [ 260.457760][T15728] netlink: 'syz.2.2847': attribute type 10 has an invalid length. [ 260.753060][T15746] bond11: entered allmulticast mode [ 260.785067][T15750] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 260.807414][T15754] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2853'. [ 261.095383][T15775] tipc: Enabled bearer , priority 0 [ 261.113102][T15775] syzkaller0: entered promiscuous mode [ 261.129548][T15775] syzkaller0: entered allmulticast mode [ 261.200026][T15775] tipc: Resetting bearer [ 261.214091][T15774] tipc: Resetting bearer [ 261.221305][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 261.250909][T15774] tipc: Disabling bearer [ 261.329381][T15798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2865'. [ 261.410111][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2866'. [ 261.554491][T15817] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2870'. [ 261.564319][T15817] xt_policy: neither incoming nor outgoing policy selected [ 261.633788][T15819] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2872'. [ 261.723591][T15832] netlink: 18 bytes leftover after parsing attributes in process `syz.1.2876'. [ 262.764298][T15870] netlink: 'syz.3.2885': attribute type 9 has an invalid length. [ 262.841867][T15874] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 263.199229][T15895] 0ªî{X¹¦: renamed from gretap0 [ 263.233093][T15895] 0ªî{X¹¦: entered allmulticast mode [ 263.258039][T15895] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 263.598519][T15914] netlink: 'syz.2.2898': attribute type 39 has an invalid length. [ 263.837329][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 263.861859][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 263.871087][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 263.883446][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 263.900213][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 264.142762][T15938] netlink: 'syz.1.2904': attribute type 4 has an invalid length. [ 264.170919][T15938] __nla_validate_parse: 6 callbacks suppressed [ 264.170937][T15938] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2904'. [ 264.238099][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 264.283507][T15950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2908'. [ 264.354623][T15950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2908'. [ 264.366264][T15950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2908'. [ 264.392819][T15950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2908'. [ 264.392943][T15955] netlink: 4616 bytes leftover after parsing attributes in process `syz.2.2910'. [ 264.423830][T15955] netlink: 15212 bytes leftover after parsing attributes in process `syz.2.2910'. [ 264.434508][T15950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2908'. [ 264.473625][T15950] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2908'. [ 264.693012][T15917] chnl_net:caif_netlink_parms(): no params data found [ 264.929485][T15917] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.945382][T15917] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.959712][T15917] bridge_slave_0: entered allmulticast mode [ 264.978089][T15917] bridge_slave_0: entered promiscuous mode [ 265.004986][T15985] tipc: Enabled bearer , priority 0 [ 265.005227][T15987] netlink: 'syz.1.2916': attribute type 2 has an invalid length. [ 265.022032][T15987] netlink: 'syz.1.2916': attribute type 1 has an invalid length. [ 265.027798][T15917] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.040313][T15917] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.049938][T15917] bridge_slave_1: entered allmulticast mode [ 265.060574][T15917] bridge_slave_1: entered promiscuous mode [ 265.068647][T15984] tipc: Enabling of bearer rejected, already enabled [ 265.079081][T15984] tipc: Resetting bearer [ 265.087512][T15981] syzkaller0: MTU too low for tipc bearer [ 265.093425][T15981] tipc: Disabling bearer [ 265.200959][T15984] tipc: Resetting bearer [ 265.215379][T15917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.230935][T15917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.379281][T15917] team0: Port device team_slave_0 added [ 265.395514][T15917] team0: Port device team_slave_1 added [ 265.510998][T15917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.522542][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.557931][T15917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.600472][T15917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.608193][T15917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.635461][T15917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.713454][T16016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.754058][T15917] hsr_slave_0: entered promiscuous mode [ 265.776969][T15917] hsr_slave_1: entered promiscuous mode [ 265.784303][T15917] debugfs: 'hsr0' already exists in 'hsr' [ 265.790540][T15917] Cannot create hsr debugfs directory [ 265.982608][ T5835] Bluetooth: hci3: command tx timeout [ 266.026219][T16038] geneve2: entered promiscuous mode [ 266.031681][T16038] geneve2: entered allmulticast mode [ 266.065072][T16039] vlan3: entered promiscuous mode [ 266.071572][T16039] gretap0: entered promiscuous mode [ 266.255050][T15917] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.280795][T15917] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.419155][T15917] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.431735][T15917] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.565069][T15917] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.596479][T15917] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.798511][T15917] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.807816][T16073] Bluetooth: MGMT ver 1.23 [ 266.844944][T15917] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.925552][T16072] netlink: 'syz.3.2944': attribute type 21 has an invalid length. [ 266.933944][T16072] netlink: 'syz.3.2944': attribute type 4 has an invalid length. [ 266.942279][T16072] netlink: 'syz.3.2944': attribute type 5 has an invalid length. [ 266.967125][T16072] netlink: 'syz.3.2944': attribute type 21 has an invalid length. [ 266.981888][T16082] netlink: 'syz.0.2947': attribute type 1 has an invalid length. [ 266.988554][T16072] netlink: 'syz.3.2944': attribute type 4 has an invalid length. [ 267.020616][T16072] netlink: 'syz.3.2944': attribute type 5 has an invalid length. [ 267.140413][T16086] bond12: (slave ip6gretap1): making interface the new active one [ 267.150827][T16086] bond12: (slave ip6gretap1): Enslaving as an active interface with an up link [ 267.199365][T16089] bond14: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 267.232727][T16089] bond14 (unregistering): Released all slaves [ 267.403874][T15917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.431619][T15917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.447214][T15917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.518956][T15917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.536444][T16107] netlink: 'syz.2.2955': attribute type 21 has an invalid length. [ 267.693218][T16125] syzkaller0: entered promiscuous mode [ 267.700516][T16125] syzkaller0: entered allmulticast mode [ 267.736908][T16129] netlink: zone id is out of range [ 267.749694][T16129] netlink: zone id is out of range [ 267.754999][T16129] netlink: zone id is out of range [ 267.762168][T16129] netlink: zone id is out of range [ 267.768134][T16129] netlink: zone id is out of range [ 267.773382][T16129] netlink: zone id is out of range [ 267.779278][T16129] netlink: zone id is out of range [ 267.785847][T16129] netlink: zone id is out of range [ 267.901369][T15917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.972012][T15917] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.025568][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.032788][T10388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.057239][ T5835] Bluetooth: hci3: command tx timeout [ 268.092031][T10389] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.099247][T10389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.535745][T16174] ip6t_rpfilter: unknown options [ 268.588245][T16174] netlink: 'syz.3.2972': attribute type 3 has an invalid length. [ 268.740576][T16187] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 268.842328][T15917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.015974][T16204] net_ratelimit: 4 callbacks suppressed [ 269.015992][T16204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.053043][T16203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.071204][T16208] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 269.092112][T16208] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 269.272856][T16220] __nla_validate_parse: 81 callbacks suppressed [ 269.272875][T16220] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2987'. [ 269.317997][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2985'. [ 269.331202][T16226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2989'. [ 269.337155][T16217] netlink: 'syz.3.2985': attribute type 30 has an invalid length. [ 269.380893][T16217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 269.473808][T15917] veth0_vlan: entered promiscuous mode [ 269.485440][T15917] veth1_vlan: entered promiscuous mode [ 269.528222][T15917] veth0_macvtap: entered promiscuous mode [ 269.538421][T15917] veth1_macvtap: entered promiscuous mode [ 269.555889][T15917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.570317][T15917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.587242][ T1114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.596114][ T1114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.606244][ T1114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.619880][ T1114] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.676981][T10389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.685128][T10389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.710766][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.718918][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.781815][T16235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'. [ 269.828859][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2992'. [ 269.838568][T16237] gretap0: entered promiscuous mode [ 270.138322][ T5835] Bluetooth: hci3: command tx timeout [ 270.223930][T16229] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 270.472836][T16259] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3002'. [ 270.545249][T16262] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3002'. [ 270.692444][T16269] team0: Device veth1_macvtap failed to register rx_handler [ 270.708392][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 270.740617][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 270.755447][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 270.791831][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 270.804409][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.967248][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3005'. [ 270.986517][T16272] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 271.025622][T16272] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 271.045933][T16272] gretap3: entered promiscuous mode [ 271.064277][T16272] gretap3: entered allmulticast mode [ 271.153553][T16274] bond18: ARP target 1.0.0.0 is already present [ 271.166494][T16274] bond18: option arp_ip_target: invalid value (1) [ 271.189003][T16274] bond18 (unregistering): Released all slaves [ 271.699618][T16311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3017'. [ 271.755815][T16303] bond14: option resend_igmp: invalid value (32767) [ 271.780411][T16303] bond14: option resend_igmp: allowed values 0 - 255 [ 271.791497][T16303] bond14 (unregistering): Released all slaves [ 271.921491][T16268] chnl_net:caif_netlink_parms(): no params data found [ 272.114365][T16337] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 272.164981][T16341] validate_nla: 3 callbacks suppressed [ 272.165000][T16341] netlink: 'syz.4.3025': attribute type 1 has an invalid length. [ 272.234221][ T5835] Bluetooth: hci3: command tx timeout [ 272.268470][T16268] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.292026][T16268] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.300866][T16268] bridge_slave_0: entered allmulticast mode [ 272.313860][T16268] bridge_slave_0: entered promiscuous mode [ 272.335422][T16268] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.346271][T16268] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.353891][T16268] bridge_slave_1: entered allmulticast mode [ 272.381491][T16268] bridge_slave_1: entered promiscuous mode [ 272.588744][T16268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.611746][T16268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.746423][T16268] team0: Port device team_slave_0 added [ 272.775425][T16268] team0: Port device team_slave_1 added [ 272.866550][ T5835] Bluetooth: hci5: command tx timeout [ 272.957652][T16268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.003097][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.041353][T16268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.056146][T16268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.064074][T16268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.093587][T16268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.174601][T16399] bond14: Unable to set peer notification delay as MII monitoring is disabled [ 273.198560][T16399] bond14 (unregistering): Released all slaves [ 273.427401][T16268] hsr_slave_0: entered promiscuous mode [ 273.447883][T16268] hsr_slave_1: entered promiscuous mode [ 273.454345][T16268] debugfs: 'hsr0' already exists in 'hsr' [ 273.484922][T16268] Cannot create hsr debugfs directory [ 273.877960][T16460] tipc: Bearer : already 2 bearers with priority 10 [ 273.885200][T16460] tipc: Bearer : trying with adjusted priority [ 273.893654][T16460] tipc: New replicast peer: 255.255.255.255 [ 273.905037][T16460] tipc: Enabled bearer , priority 9 [ 274.014315][T16268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 274.128409][T16268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 274.178664][T16476] 8021q: VLANs not supported on lo [ 274.209213][T16268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 274.289001][T16268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 274.349739][T16486] syzkaller0: entered promiscuous mode [ 274.363964][T16486] syzkaller0: entered allmulticast mode [ 274.417255][T16486] __nla_validate_parse: 8 callbacks suppressed [ 274.417274][T16486] netlink: 536 bytes leftover after parsing attributes in process `syz.1.3067'. [ 274.590189][T16268] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.609059][T16268] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 274.630127][T16268] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.662878][T16268] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.768347][T16506] netlink: 'syz.4.3075': attribute type 4 has an invalid length. [ 274.946818][ T5835] Bluetooth: hci5: command tx timeout [ 275.005455][T16268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.033110][T16268] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.049728][T10388] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.057067][T10388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.079855][T10389] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.087062][T10389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.302157][T16550] netlink: 'syz.4.3085': attribute type 25 has an invalid length. [ 275.385477][T16557] netlink: 'syz.1.3088': attribute type 2 has an invalid length. [ 275.417504][T16557] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3088'. [ 275.460258][ T30] audit: type=1800 audit(1763866838.985:5): pid=16560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3089" name="memory.events" dev="tmpfs" ino=3145 res=0 errno=0 [ 275.711469][T16581] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 275.865662][T16268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.881133][T16585] veth0: entered promiscuous mode [ 275.891946][T16584] veth0: left promiscuous mode [ 275.916223][T16583] netlink: 808 bytes leftover after parsing attributes in process `syz.0.3096'. [ 275.985044][T16597] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3100'. [ 276.080698][T16268] veth0_vlan: entered promiscuous mode [ 276.172831][T16268] veth1_vlan: entered promiscuous mode [ 276.250494][T16268] veth0_macvtap: entered promiscuous mode [ 276.262864][T16268] veth1_macvtap: entered promiscuous mode [ 276.314426][T16268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.354580][T16268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.437926][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.448328][T10386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.556709][T10386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.565487][T10386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.661807][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 276.681091][T16626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3107'. [ 276.712054][T16626] netlink: 'syz.0.3107': attribute type 3 has an invalid length. [ 276.764665][T16626] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3107'. [ 276.838856][T16633] veth11: entered promiscuous mode [ 276.929001][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.965454][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.017527][ T5835] Bluetooth: hci5: command tx timeout [ 277.124074][T16652] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3112'. [ 277.301450][T10388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.314465][T10388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.524341][T16661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 277.639172][T16669] tipc: Enabling of bearer rejected, failed to enable media [ 278.410937][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 278.421515][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 278.436171][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 278.448162][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 278.455861][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 278.487181][T16693] Bluetooth: MGMT ver 1.23 [ 278.585421][T16695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3124'. [ 279.097531][ T5835] Bluetooth: hci5: command tx timeout [ 279.478417][T16690] chnl_net:caif_netlink_parms(): no params data found [ 279.623195][T16690] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.654592][T16690] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.662720][T16690] bridge_slave_0: entered allmulticast mode [ 279.678596][T16690] bridge_slave_0: entered promiscuous mode [ 279.688300][T16690] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.697456][T16690] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.705617][T16690] bridge_slave_1: entered allmulticast mode [ 279.721512][T16690] bridge_slave_1: entered promiscuous mode [ 279.772083][T16690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.786175][T16690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.859608][T16690] team0: Port device team_slave_0 added [ 279.881258][T16690] team0: Port device team_slave_1 added [ 279.899731][T16749] __nla_validate_parse: 5 callbacks suppressed [ 279.899750][T16749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3136'. [ 280.049549][T16690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.071022][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.129200][T16690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.156825][T16690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.175491][T16690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.237236][T16690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.328837][T16759] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3137'. [ 280.470678][T16690] hsr_slave_0: entered promiscuous mode [ 280.483580][T16690] hsr_slave_1: entered promiscuous mode [ 280.491355][T16690] debugfs: 'hsr0' already exists in 'hsr' [ 280.498047][T16690] Cannot create hsr debugfs directory [ 280.538355][ T5835] Bluetooth: hci0: command tx timeout [ 280.630061][T16781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3143'. [ 280.754161][T16790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.804004][T16793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.059617][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3148'. [ 281.079247][T16807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3148'. [ 281.110976][T16805] syzkaller0: entered promiscuous mode [ 281.123160][T16805] syzkaller0: entered allmulticast mode [ 281.136763][T16815] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3152'. [ 281.163201][T16690] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.195535][T16690] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.271023][T16690] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.282422][T16690] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.409996][T16690] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.426199][T16690] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.489611][T16833] bridge_slave_0: left allmulticast mode [ 281.510009][T16830] xt_hashlimit: overflow, rate too high: 0 [ 281.520735][T16833] bridge_slave_0: left promiscuous mode [ 281.537363][T16833] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.563281][T16833] bridge_slave_1: left allmulticast mode [ 281.570949][T16833] bridge_slave_1: left promiscuous mode [ 281.572136][T16838] netlink: 'syz.3.3160': attribute type 6 has an invalid length. [ 281.585320][T16833] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.600647][T16833] bond0: (slave bond_slave_0): Releasing backup interface [ 281.614178][T16833] bond0: (slave bond_slave_1): Releasing backup interface [ 281.636221][T16833] team0: Port device team_slave_0 removed [ 281.655554][T16833] team0: Port device team_slave_1 removed [ 281.665525][T16833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.673890][T16833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.685116][T16833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.693747][T16833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.707381][T16833] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 281.795358][T16690] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 281.825977][T16690] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.881113][T16855] netlink: 'syz.4.3166': attribute type 3 has an invalid length. [ 281.894277][ T30] audit: type=1107 audit(1763866845.415:6): pid=16854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 281.996225][T16859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3168'. [ 282.152019][T16868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3170'. [ 282.198609][T16868] sch_fq: defrate 0 ignored. [ 282.371555][T16690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.393294][T16690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.440145][T16690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.548972][T16690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.617874][ T5835] Bluetooth: hci0: command tx timeout [ 282.763291][T16690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.795245][T16690] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.828208][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.835423][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.860179][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.867438][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.028511][T16921] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3186'. [ 283.139933][T16924] veth0: entered promiscuous mode [ 283.151417][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3187'. [ 283.305152][T16690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.308151][T16931] openvswitch: netlink: Message has 1 unknown bytes. [ 283.332280][T16931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.423881][T16690] veth0_vlan: entered promiscuous mode [ 283.472728][T16690] veth1_vlan: entered promiscuous mode [ 283.566969][T16690] veth0_macvtap: entered promiscuous mode [ 283.624801][T16690] veth1_macvtap: entered promiscuous mode [ 283.708484][T16690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.768613][T16690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.849847][T10386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.873124][T10386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.958747][T10386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.968369][T10386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.103880][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.127198][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.179959][T16962] syzkaller1: entered promiscuous mode [ 284.185459][T16962] syzkaller1: entered allmulticast mode [ 284.222463][T16965] netlink: 'syz.1.3196': attribute type 13 has an invalid length. [ 284.232036][T10386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.240492][T10386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.696577][ T5835] Bluetooth: hci0: command tx timeout [ 284.851943][T16979] tipc: Started in network mode [ 284.876521][T16979] tipc: Node identity 2a288361c2bc, cluster identity 4711 [ 284.884208][T16979] tipc: Enabled bearer , priority 0 [ 284.892764][T16979] syzkaller0: entered promiscuous mode [ 284.898780][T16979] syzkaller0: entered allmulticast mode [ 285.454362][T16999] __nla_validate_parse: 2 callbacks suppressed [ 285.454382][T16999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3202'. [ 285.501641][T16978] tipc: Resetting bearer [ 285.568726][T16978] tipc: Disabling bearer [ 285.591097][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.603646][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.614433][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.623734][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.634165][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.671679][ T6910] hid-generic 0005:0002:5508.0001: hidraw0: BLUETOOTH HID vc3.38 Device [syz0] on aa:aa:aa:aa:aa:aa [ 285.768244][T17019] netlink: 'syz.4.3207': attribute type 29 has an invalid length. [ 285.781169][T17019] netlink: 'syz.4.3207': attribute type 29 has an invalid length. [ 286.021411][T17030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3210'. [ 286.211914][T17044] netlink: 'syz.4.3216': attribute type 1 has an invalid length. [ 286.287989][T17048] xt_recent: Unsupported userspace flags (000000b1) [ 286.410258][T17011] chnl_net:caif_netlink_parms(): no params data found [ 286.644801][T17076] netlink: 'syz.0.3224': attribute type 4 has an invalid length. [ 286.731770][T17085] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.3226'. [ 286.771194][T17086] netlink: 'syz.0.3224': attribute type 4 has an invalid length. [ 286.780053][ T5835] Bluetooth: hci0: command tx timeout [ 286.831938][T17011] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.840005][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.848047][T17011] bridge_slave_0: entered allmulticast mode [ 286.857569][T17011] bridge_slave_0: entered promiscuous mode [ 286.866257][T17011] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.876369][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.883647][T17011] bridge_slave_1: entered allmulticast mode [ 286.892152][T17011] bridge_slave_1: entered promiscuous mode [ 287.079826][T17011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.135292][T17011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.258960][T17011] team0: Port device team_slave_0 added [ 287.337541][T17011] team0: Port device team_slave_1 added [ 287.462328][T17011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.476685][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.537686][T17011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.567781][T17121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3236'. [ 287.579820][T17121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3236'. [ 287.620006][T17011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.633434][T17011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 287.661430][T17011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.695285][T17123] tipc: Started in network mode [ 287.703151][T17123] tipc: Node identity aa4a7684eb7a, cluster identity 4711 [ 287.710577][T17123] tipc: Enabled bearer , priority 0 [ 287.720078][T17123] syzkaller0: entered promiscuous mode [ 287.725576][T17123] syzkaller0: entered allmulticast mode [ 287.741926][ T5835] Bluetooth: hci2: command tx timeout [ 287.847153][T17139] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3241'. [ 287.868688][T17120] tipc: Resetting bearer [ 287.888936][T17120] tipc: Disabling bearer [ 287.920457][T17011] hsr_slave_0: entered promiscuous mode [ 287.928216][T17011] hsr_slave_1: entered promiscuous mode [ 287.934842][T17011] debugfs: 'hsr0' already exists in 'hsr' [ 287.956484][T17011] Cannot create hsr debugfs directory [ 287.988108][T17144] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3244'. [ 288.289739][T17164] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 288.395966][T17011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.409789][T17011] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.505059][T17178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3254'. [ 288.554811][T17011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.573064][T17011] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.685895][T17011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.708973][T17011] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.760665][T17185] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 288.766825][T17185] syzkaller1: Refused to change device type [ 288.923054][T17011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.953522][T17011] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.066799][ T6916] IPVS: starting estimator thread 0... [ 289.124762][T17190] netlink: 'syz.0.3258': attribute type 2 has an invalid length. [ 289.166461][T17195] IPVS: using max 32 ests per chain, 76800 per kthread [ 289.297186][T17011] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.332468][T17011] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.372474][T17011] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.380174][T17208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3263'. [ 289.429911][T17208] netlink: 'syz.4.3263': attribute type 1 has an invalid length. [ 289.456818][T17208] netlink: 'syz.4.3263': attribute type 2 has an invalid length. [ 289.477438][T17011] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.613606][T17226] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3266'. [ 289.654184][T17226] openvswitch: netlink: Actions may not be safe on all matching packets [ 289.817579][ T5835] Bluetooth: hci2: command tx timeout [ 289.843185][T17011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.915528][T17011] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.931111][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.938373][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.984996][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.992228][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.003566][T17242] netlink: 'syz.3.3271': attribute type 25 has an invalid length. [ 290.019751][T17243] netlink: 'syz.3.3271': attribute type 25 has an invalid length. [ 290.067929][T17246] netlink: 'syz.4.3272': attribute type 1 has an invalid length. [ 290.098478][T17246] netlink: 'syz.4.3272': attribute type 11 has an invalid length. [ 290.223579][T17251] delete_channel: no stack [ 290.511121][T17011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.655201][T17278] __nla_validate_parse: 3 callbacks suppressed [ 290.655219][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3281'. [ 290.677154][T17011] veth0_vlan: entered promiscuous mode [ 290.736559][T17278] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 290.754562][T17278] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3281'. [ 290.792571][T17290] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3285'. [ 290.800268][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3284'. [ 290.810779][T17011] veth1_vlan: entered promiscuous mode [ 290.878367][T17295] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3285'. [ 290.925037][T17011] veth0_macvtap: entered promiscuous mode [ 290.944509][T17011] veth1_macvtap: entered promiscuous mode [ 291.011503][T17011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.052458][T17011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.091720][ T999] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.116872][ T999] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.139353][T17302] xt_CT: No such helper "syz1" [ 291.145269][ T999] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.165917][T17302] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3290'. [ 291.169036][ T999] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.265199][T17312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 291.369770][T17317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3293'. [ 291.410182][T17317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3293'. [ 291.506603][T17321] netlink: 'syz.4.3295': attribute type 21 has an invalid length. [ 291.523640][T17321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3295'. [ 291.544258][T17313] bond19: (slave bridge5): Enslaving as an active interface with an up link [ 291.678834][T17327] Unsupported ieee802154 address type: 0 [ 291.687174][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.695168][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.707131][T17327] validate_nla: 4 callbacks suppressed [ 291.707149][T17327] netlink: 'syz.4.3297': attribute type 8 has an invalid length. [ 291.790887][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.801738][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.916506][ T5835] Bluetooth: hci2: command tx timeout [ 292.023736][T17343] netlink: 'syz.2.3201': attribute type 7 has an invalid length. [ 292.057059][T17343] netlink: 'syz.2.3201': attribute type 8 has an invalid length. [ 292.104569][T17343] ieee802154 phy1 wpan1: encryption failed: -22 [ 292.255411][T17348] syzkaller0: entered promiscuous mode [ 292.268664][T17348] syzkaller0: entered allmulticast mode [ 292.593596][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.608110][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.619626][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.648962][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.691670][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.979960][ T5835] Bluetooth: hci2: command tx timeout [ 294.190632][T17386] veth1_to_team: entered promiscuous mode [ 294.196507][T17386] veth1_to_team: entered allmulticast mode [ 294.572899][T17411] netlink: 'syz.2.3322': attribute type 10 has an invalid length. [ 294.644561][T17411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.671488][T17416] netlink: 'syz.2.3322': attribute type 10 has an invalid length. [ 294.684408][T17417] netlink: 'syz.0.3320': attribute type 28 has an invalid length. [ 294.699234][T17411] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 294.713971][T17417] netlink: 'syz.0.3320': attribute type 3 has an invalid length. [ 294.720012][T17416] batadv0: entered promiscuous mode [ 294.739421][T17416] batadv0: entered allmulticast mode [ 294.748270][T17416] bond0: (slave batadv0): Releasing backup interface [ 294.765633][T17416] bridge0: port 3(batadv0) entered blocking state [ 294.772557][T17416] bridge0: port 3(batadv0) entered disabled state [ 294.784692][ T5835] Bluetooth: hci4: command tx timeout [ 294.980379][T17424] netlink: 'syz.3.3324': attribute type 2 has an invalid length. [ 295.117495][T10389] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 295.127180][T10389] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 295.407308][T17441] netlink: 'syz.2.3327': attribute type 2 has an invalid length. [ 295.415293][T17441] netlink: 'syz.2.3327': attribute type 8 has an invalid length. [ 296.044019][T10386] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 296.498988][T10386] bond19 (unregistering): (slave bridge5): Releasing backup interface [ 296.539917][T10386] bond1 (unregistering): Released all slaves [ 296.553986][T10386] bond2 (unregistering): Released all slaves [ 296.567789][T10386] bond3 (unregistering): Released all slaves [ 296.580522][T10386] bond4 (unregistering): Released all slaves [ 296.596188][T10386] bond5 (unregistering): Released all slaves [ 296.622281][T10386] bond6 (unregistering): Released all slaves [ 296.635274][T10386] bond7 (unregistering): Released all slaves [ 296.648255][T10386] bond8 (unregistering): Released all slaves [ 296.662157][T10386] bond9 (unregistering): Released all slaves [ 296.678318][T10386] bond10 (unregistering): Released all slaves [ 296.691399][T10386] bond11 (unregistering): Released all slaves [ 296.723221][T10386] bond12 (unregistering): Released all slaves [ 296.820085][T10386] bond13 (unregistering): Released all slaves [ 296.861113][ T5835] Bluetooth: hci4: command tx timeout [ 296.923864][T10386] bond14 (unregistering): Released all slaves [ 296.936528][T10386] bond15 (unregistering): Released all slaves [ 297.030724][T10386] bond16 (unregistering): (slave veth9): Releasing active interface [ 297.040064][T10386] bond16 (unregistering): Released all slaves [ 297.141306][T10386] bond0 (unregistering): Released all slaves [ 297.241441][T10386] team0: Port device macvlan2 removed [ 297.251267][T10386] bond17 (unregistering): Released all slaves [ 297.263675][T10386] bond18 (unregistering): Released all slaves [ 297.277437][T10386] bond19 (unregistering): Released all slaves [ 297.448957][T17445] __nla_validate_parse: 9 callbacks suppressed [ 297.448975][T17445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 297.489166][T17447] netlink: 'syz.2.3329': attribute type 1 has an invalid length. [ 297.529814][T17444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3328'. [ 297.673783][T10386] : left promiscuous mode [ 297.681741][T17447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3329'. [ 297.730570][T17464] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3329'. [ 297.791427][T17465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3332'. [ 297.833806][T17455] veth3: entered promiscuous mode [ 297.872871][T17372] chnl_net:caif_netlink_parms(): no params data found [ 297.885419][T17472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3333'. [ 297.933687][T10386] tipc: Disabling bearer [ 297.946746][T10386] tipc: Disabling bearer [ 297.960267][T10386] tipc: Disabling bearer [ 297.978477][T10386] tipc: Left network mode [ 298.215245][T17372] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.234150][T17372] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.253276][T17372] bridge_slave_0: entered allmulticast mode [ 298.268455][T17372] bridge_slave_0: entered promiscuous mode [ 298.300180][T17372] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.317812][T17372] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.325122][T17372] bridge_slave_1: entered allmulticast mode [ 298.338211][T17372] bridge_slave_1: entered promiscuous mode [ 298.409638][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 298.433789][T17372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.437264][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3340'. [ 298.481950][T17372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.493090][T17504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3341'. [ 298.512560][T17504] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3341'. [ 298.523292][T17504] netlink: 'syz.0.3341': attribute type 6 has an invalid length. [ 298.531786][T17504] netlink: 'syz.0.3341': attribute type 5 has an invalid length. [ 298.787153][T17508] tipc: Started in network mode [ 298.794582][T17508] tipc: Node identity aea39a846ea5, cluster identity 4711 [ 298.831010][T17508] tipc: Enabled bearer , priority 0 [ 298.841382][T17372] team0: Port device team_slave_0 added [ 298.865159][T17511] syzkaller0: entered promiscuous mode [ 298.880766][T17511] syzkaller0: entered allmulticast mode [ 298.917146][T10386] hsr_slave_0: left promiscuous mode [ 298.937170][ T5835] Bluetooth: hci4: command tx timeout [ 298.947065][T10386] hsr_slave_1: left promiscuous mode [ 298.974554][T10386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.673198][T10386] team0 (unregistering): Port device team_slave_1 removed [ 299.719374][T10386] team0 (unregistering): Port device team_slave_0 removed [ 299.963570][T17372] team0: Port device team_slave_1 added [ 299.970349][T17511] gre0: entered promiscuous mode [ 299.975299][T17511] gre0: entered allmulticast mode [ 300.000941][T17521] tipc: Resetting bearer [ 300.029246][T17506] tipc: Resetting bearer [ 300.094760][T17506] tipc: Disabling bearer [ 300.121952][ T6906] tipc: Node number set to 3221658244 [ 300.254797][T17372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.280592][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.321478][T17372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.519123][T17547] geneve2: entered promiscuous mode [ 300.524642][T17547] geneve2: entered allmulticast mode [ 300.541469][T17372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.549112][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.599188][T17372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.619152][T17561] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 300.680736][T17564] netlink: 'syz.4.3355': attribute type 1 has an invalid length. [ 300.688183][T10386] IPVS: stop unused estimator thread 0... [ 300.767227][T17572] netlink: 'syz.0.3357': attribute type 7 has an invalid length. [ 300.770046][T17564] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.782768][T17572] netlink: 'syz.0.3357': attribute type 8 has an invalid length. [ 300.817541][T17573] netlink: 'syz.0.3357': attribute type 7 has an invalid length. [ 300.826103][T17573] netlink: 'syz.0.3357': attribute type 8 has an invalid length. [ 300.853893][T17568] veth1: entered promiscuous mode [ 300.862500][T17568] bond1: (slave veth1): Enslaving as an active interface with a down link [ 300.871667][T17571] netlink: 'syz.2.3358': attribute type 4 has an invalid length. [ 300.894358][T17564] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 300.911362][T17372] hsr_slave_0: entered promiscuous mode [ 300.918292][T17372] hsr_slave_1: entered promiscuous mode [ 300.925244][T17372] debugfs: 'hsr0' already exists in 'hsr' [ 300.931311][T17372] Cannot create hsr debugfs directory [ 300.944379][T17573] gretap0: entered promiscuous mode [ 300.953907][T17573] gretap0: left promiscuous mode [ 301.017666][ T5835] Bluetooth: hci4: command tx timeout [ 301.268439][T17589] ip6gre1: entered allmulticast mode [ 301.366953][T17599] xt_policy: neither incoming nor outgoing policy selected [ 302.357871][T17667] netlink: 'syz.3.3382': attribute type 9 has an invalid length. [ 302.379091][T17372] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.451998][T17372] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.506759][T17372] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.516479][T17667] __nla_validate_parse: 14 callbacks suppressed [ 302.516498][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3382'. [ 302.540823][T17372] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.666204][T17687] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3382'. [ 302.914622][T17372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.951386][T17700] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 302.961495][T17704] netlink: 'syz.2.3391': attribute type 8 has an invalid length. [ 302.965073][T17372] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.028743][T10386] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.035948][T10386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.090205][T10039] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.097420][T10039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.175895][T17716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3395'. [ 303.198196][T17716] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3395'. [ 303.220377][T17712] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3394'. [ 303.229662][T17712] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3394'. [ 303.290147][T17718] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 303.315479][T17718] netlink: 'syz.3.3397': attribute type 2 has an invalid length. [ 303.336150][T17720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 303.468118][T17723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3398'. [ 303.476074][T17727] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3399'. [ 303.615153][T17735] netlink: 'syz.4.3403': attribute type 12 has an invalid length. [ 303.668293][T17737] netlink: 'syz.3.3400': attribute type 3 has an invalid length. [ 303.682352][T17735] bond2: option primary_reselect: invalid value (255) [ 303.705842][T17735] bond2 (unregistering): Released all slaves [ 303.872457][T17372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.894670][T17750] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3405'. [ 303.922881][T17753] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 303.935164][T17753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3406'. [ 303.952095][T17372] veth0_vlan: entered promiscuous mode [ 304.035376][T17759] team0: Cannot enslave team device to itself [ 304.045751][T17372] veth1_vlan: entered promiscuous mode [ 304.113005][T17372] veth0_macvtap: entered promiscuous mode [ 304.145150][T17372] veth1_macvtap: entered promiscuous mode [ 304.185135][T17372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.212021][T17372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.237369][ T1114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.281789][ T1114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.319338][T17771] [ 304.321701][T17771] ====================================================== [ 304.328731][T17771] WARNING: possible circular locking dependency detected [ 304.335768][T17771] syzkaller #0 Not tainted [ 304.340186][T17771] ------------------------------------------------------ [ 304.347205][T17771] syz.3.3411/17771 is trying to acquire lock: [ 304.353272][T17771] ffffffff8f426ab8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 304.362766][T17771] [ 304.362766][T17771] but task is already holding lock: [ 304.370116][T17771] ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 304.379696][T17771] [ 304.379696][T17771] which lock already depends on the new lock. [ 304.379696][T17771] [ 304.390102][T17771] [ 304.390102][T17771] the existing dependency chain (in reverse order) is: [ 304.399117][T17771] [ 304.399117][T17771] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 304.407042][T17771] lock_acquire+0x120/0x360 [ 304.412073][T17771] _raw_spin_lock_bh+0x36/0x50 [ 304.417359][T17771] nr_rt_ioctl+0x390/0xd50 [ 304.422292][T17771] sock_do_ioctl+0xdc/0x300 [ 304.427317][T17771] sock_ioctl+0x576/0x790 [ 304.432183][T17771] __se_sys_ioctl+0xfc/0x170 [ 304.437304][T17771] do_syscall_64+0xfa/0xfa0 [ 304.442347][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.448779][T17771] [ 304.448779][T17771] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 304.456780][T17771] lock_acquire+0x120/0x360 [ 304.461802][T17771] _raw_spin_lock_bh+0x36/0x50 [ 304.467083][T17771] nr_rt_ioctl+0x193/0xd50 [ 304.472014][T17771] sock_do_ioctl+0xdc/0x300 [ 304.477037][T17771] sock_ioctl+0x576/0x790 [ 304.481881][T17771] __se_sys_ioctl+0xfc/0x170 [ 304.486985][T17771] do_syscall_64+0xfa/0xfa0 [ 304.492013][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.498415][T17771] [ 304.498415][T17771] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 304.506229][T17771] validate_chain+0xb9b/0x2140 [ 304.511513][T17771] __lock_acquire+0xab9/0xd20 [ 304.516700][T17771] lock_acquire+0x120/0x360 [ 304.521711][T17771] _raw_spin_lock_bh+0x36/0x50 [ 304.526989][T17771] nr_rt_device_down+0xa9/0x720 [ 304.532356][T17771] nr_device_event+0x137/0x150 [ 304.537634][T17771] notifier_call_chain+0x1b6/0x3e0 [ 304.543267][T17771] netif_close_many+0x29c/0x410 [ 304.548633][T17771] netif_close+0x158/0x210 [ 304.553568][T17771] dev_close+0x10a/0x220 [ 304.558318][T17771] bpq_device_event+0x377/0x6a0 [ 304.563678][T17771] notifier_call_chain+0x1b6/0x3e0 [ 304.569306][T17771] netif_close_many+0x29c/0x410 [ 304.574676][T17771] netif_close+0x158/0x210 [ 304.579610][T17771] dev_close+0x10a/0x220 [ 304.584364][T17771] bond_setup_by_slave+0x5f/0x3f0 [ 304.589910][T17771] bond_enslave+0x6ca/0x38a0 [ 304.595023][T17771] bond_do_ioctl+0x635/0x9b0 [ 304.600126][T17771] dev_ifsioc+0x90b/0xf00 [ 304.604975][T17771] dev_ioctl+0x7b4/0x1150 [ 304.609825][T17771] sock_do_ioctl+0x22c/0x300 [ 304.614928][T17771] sock_ioctl+0x576/0x790 [ 304.619772][T17771] __se_sys_ioctl+0xfc/0x170 [ 304.624878][T17771] do_syscall_64+0xfa/0xfa0 [ 304.629901][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.636310][T17771] [ 304.636310][T17771] other info that might help us debug this: [ 304.636310][T17771] [ 304.646527][T17771] Chain exists of: [ 304.646527][T17771] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 304.646527][T17771] [ 304.660342][T17771] Possible unsafe locking scenario: [ 304.660342][T17771] [ 304.667778][T17771] CPU0 CPU1 [ 304.673133][T17771] ---- ---- [ 304.678480][T17771] lock(nr_neigh_list_lock); [ 304.683147][T17771] lock(&nr_node->node_lock); [ 304.690422][T17771] lock(nr_neigh_list_lock); [ 304.697613][T17771] lock(nr_node_list_lock); [ 304.702201][T17771] [ 304.702201][T17771] *** DEADLOCK *** [ 304.702201][T17771] [ 304.710332][T17771] 2 locks held by syz.3.3411/17771: [ 304.715511][T17771] #0: ffffffff8f2cbd88 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 304.724308][T17771] #1: ffffffff8f426a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 304.734313][T17771] [ 304.734313][T17771] stack backtrace: [ 304.740188][T17771] CPU: 0 UID: 0 PID: 17771 Comm: syz.3.3411 Not tainted syzkaller #0 PREEMPT(full) [ 304.740209][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 304.740229][T17771] Call Trace: [ 304.740237][T17771] [ 304.740245][T17771] dump_stack_lvl+0x189/0x250 [ 304.740271][T17771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.740293][T17771] ? __pfx__printk+0x10/0x10 [ 304.740310][T17771] ? print_lock_name+0xde/0x100 [ 304.740327][T17771] print_circular_bug+0x2ee/0x310 [ 304.740350][T17771] check_noncircular+0x134/0x160 [ 304.740372][T17771] validate_chain+0xb9b/0x2140 [ 304.740394][T17771] ? rt6_disable_ip+0x6b3/0x720 [ 304.740422][T17771] ? __lock_acquire+0xab9/0xd20 [ 304.740439][T17771] __lock_acquire+0xab9/0xd20 [ 304.740457][T17771] ? nr_rt_device_down+0xa9/0x720 [ 304.740475][T17771] lock_acquire+0x120/0x360 [ 304.740490][T17771] ? nr_rt_device_down+0xa9/0x720 [ 304.740513][T17771] ? nr_rt_device_down+0xa9/0x720 [ 304.740532][T17771] _raw_spin_lock_bh+0x36/0x50 [ 304.740553][T17771] ? nr_rt_device_down+0xa9/0x720 [ 304.740585][T17771] nr_rt_device_down+0xa9/0x720 [ 304.740605][T17771] ? do_raw_spin_unlock+0x122/0x240 [ 304.740629][T17771] nr_device_event+0x137/0x150 [ 304.740653][T17771] notifier_call_chain+0x1b6/0x3e0 [ 304.740676][T17771] netif_close_many+0x29c/0x410 [ 304.740703][T17771] ? __pfx_netif_close_many+0x10/0x10 [ 304.740727][T17771] ? bond_netdev_event+0x227/0xe80 [ 304.740750][T17771] netif_close+0x158/0x210 [ 304.740772][T17771] ? __pfx_netif_close+0x10/0x10 [ 304.740794][T17771] ? __pfx___neigh_ifdown+0x10/0x10 [ 304.740816][T17771] ? macsec_notify+0x104/0x660 [ 304.740838][T17771] dev_close+0x10a/0x220 [ 304.740855][T17771] bpq_device_event+0x377/0x6a0 [ 304.740873][T17771] notifier_call_chain+0x1b6/0x3e0 [ 304.740895][T17771] netif_close_many+0x29c/0x410 [ 304.740921][T17771] ? __pfx_netif_close_many+0x10/0x10 [ 304.740948][T17771] netif_close+0x158/0x210 [ 304.740970][T17771] ? __pfx_netif_close+0x10/0x10 [ 304.740992][T17771] ? do_raw_spin_lock+0x121/0x290 [ 304.741016][T17771] ? __local_bh_enable_ip+0x12d/0x1c0 [ 304.741033][T17771] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.741057][T17771] dev_close+0x10a/0x220 [ 304.741073][T17771] bond_setup_by_slave+0x5f/0x3f0 [ 304.741099][T17771] bond_enslave+0x6ca/0x38a0 [ 304.741125][T17771] ? rcu_is_watching+0x15/0xb0 [ 304.741148][T17771] ? __lock_acquire+0xab9/0xd20 [ 304.741164][T17771] ? __lock_acquire+0xab9/0xd20 [ 304.741179][T17771] ? __pfx_bond_enslave+0x10/0x10 [ 304.741208][T17771] ? apparmor_capable+0x137/0x1b0 [ 304.741225][T17771] ? full_name_hash+0x92/0xe0 [ 304.741244][T17771] ? netdev_name_node_lookup+0xdf/0x120 [ 304.741266][T17771] bond_do_ioctl+0x635/0x9b0 [ 304.741286][T17771] ? __pfx_bond_do_ioctl+0x10/0x10 [ 304.741302][T17771] ? __mutex_lock+0xd3b/0x1350 [ 304.741332][T17771] ? full_name_hash+0x92/0xe0 [ 304.741351][T17771] ? netdev_name_node_lookup+0xdf/0x120 [ 304.741372][T17771] dev_ifsioc+0x90b/0xf00 [ 304.741397][T17771] ? dev_load+0x21/0x1f0 [ 304.741420][T17771] dev_ioctl+0x7b4/0x1150 [ 304.741445][T17771] sock_do_ioctl+0x22c/0x300 [ 304.741467][T17771] ? __pfx_sock_do_ioctl+0x10/0x10 [ 304.741494][T17771] sock_ioctl+0x576/0x790 [ 304.741515][T17771] ? __pfx_sock_ioctl+0x10/0x10 [ 304.741536][T17771] ? __fget_files+0x3a0/0x420 [ 304.741551][T17771] ? __fget_files+0x2a/0x420 [ 304.741566][T17771] ? bpf_lsm_file_ioctl+0x9/0x20 [ 304.741585][T17771] ? __pfx_sock_ioctl+0x10/0x10 [ 304.741604][T17771] __se_sys_ioctl+0xfc/0x170 [ 304.741626][T17771] do_syscall_64+0xfa/0xfa0 [ 304.741653][T17771] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.741675][T17771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.741690][T17771] ? clear_bhb_loop+0x60/0xb0 [ 304.741709][T17771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.741725][T17771] RIP: 0033:0x7fc77e58f749 [ 304.741740][T17771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.741756][T17771] RSP: 002b:00007fc77c7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 304.741772][T17771] RAX: ffffffffffffffda RBX: 00007fc77e7e6180 RCX: 00007fc77e58f749 [ 304.741785][T17771] RDX: 0000200000000180 RSI: 0000000000008990 RDI: 000000000000000c [ 304.741795][T17771] RBP: 00007fc77e613f91 R08: 0000000000000000 R09: 0000000000000000 [ 304.741806][T17771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.741816][T17771] R13: 00007fc77e7e6218 R14: 00007fc77e7e6180 R15: 00007ffdc41eba98 [ 304.741835][T17771] [ 305.193597][T17771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.206849][T17771] bond0: (slave rose0): Enslaving as an active interface with an up link SYZFAIL: failed to send rpc fd=3 want=488 sent=0 n=-1 (errno 32: Broken pipe) [ 305.436497][ T1114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.497555][T17773] delete_channel: no stack [ 305.509298][ T1114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.827953][ T999] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.961424][ T999] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.048814][ T999] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.143808][ T999] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.246785][ T999] bridge_slave_1: left allmulticast mode [ 306.252471][ T999] bridge_slave_1: left promiscuous mode [ 306.270562][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.280928][ T999] bridge_slave_0: left allmulticast mode [ 306.288435][ T999] bridge_slave_0: left promiscuous mode [ 306.294172][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.437891][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.452149][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.463441][ T999] bond0 (unregistering): Released all slaves [ 306.513952][ T999] tipc: Left network mode [ 306.701842][ T999] hsr_slave_0: left promiscuous mode [ 306.708210][ T999] hsr_slave_1: left promiscuous mode [ 306.714076][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.722047][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.730979][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.739154][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.754045][ T999] veth1_macvtap: left promiscuous mode [ 306.759661][ T999] veth0_macvtap: left promiscuous mode [ 306.765153][ T999] veth1_vlan: left promiscuous mode [ 306.770835][ T999] veth0_vlan: left promiscuous mode [ 306.899772][ T999] team0 (unregistering): Port device team_slave_1 removed [ 306.923321][ T999] team0 (unregistering): Port device team_slave_0 removed [ 307.293072][ T999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.342487][ T999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.410931][ T999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.471088][ T999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.524486][ T999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.560742][ T999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.600937][ T999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.650329][ T999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.714104][ T999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.751715][ T999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.791688][ T999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.840666][ T999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.902398][ T999] bridge_slave_1: left allmulticast mode [ 307.908493][ T999] bridge_slave_1: left promiscuous mode [ 307.914149][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.922335][ T999] bridge_slave_0: left allmulticast mode [ 307.928898][ T999] bridge_slave_0: left promiscuous mode [ 307.934535][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.943587][ T999] bridge_slave_1: left allmulticast mode [ 307.949423][ T999] bridge_slave_1: left promiscuous mode [ 307.955105][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.963333][ T999] bridge_slave_0: left allmulticast mode [ 307.969620][ T999] bridge_slave_0: left promiscuous mode [ 307.975282][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.984819][ T999] bridge0: port 3(batadv0) entered disabled state [ 307.992471][ T999] bridge_slave_1: left allmulticast mode [ 307.998425][ T999] bridge_slave_1: left promiscuous mode [ 308.004057][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.012239][ T999] bridge_slave_0: left allmulticast mode [ 308.018022][ T999] bridge_slave_0: left promiscuous mode [ 308.023679][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.146430][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.156679][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.166192][ T999] bond0 (unregistering): Released all slaves [ 308.229221][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.239687][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.249304][ T999] bond0 (unregistering): Released all slaves [ 308.437614][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.449353][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.459414][ T999] bond0 (unregistering): Released all slaves [ 308.529740][ T999] tipc: Left network mode [ 308.895357][ T999] hsr_slave_0: left promiscuous mode [ 308.901215][ T999] hsr_slave_1: left promiscuous mode [ 308.907713][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.915085][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.922775][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.930192][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.943094][ T999] hsr_slave_0: left promiscuous mode [ 308.950345][ T999] hsr_slave_1: left promiscuous mode [ 308.956210][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.963707][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.971386][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.979333][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.990129][ T999] hsr_slave_0: left promiscuous mode [ 308.995838][ T999] hsr_slave_1: left promiscuous mode [ 309.001519][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.008919][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.016604][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.023969][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.038699][ T999] veth1_macvtap: left promiscuous mode [ 309.044212][ T999] veth0_macvtap: left promiscuous mode [ 309.049800][ T999] veth1_vlan: left promiscuous mode [ 309.055066][ T999] veth0_vlan: left promiscuous mode [ 309.061499][ T999] veth1_macvtap: left promiscuous mode [ 309.067060][ T999] veth0_macvtap: left promiscuous mode [ 309.072567][ T999] veth1_vlan: left promiscuous mode [ 309.078109][ T999] veth0_vlan: left promiscuous mode [ 309.083891][ T999] veth1_macvtap: left promiscuous mode [ 309.089930][ T999] veth0_macvtap: left promiscuous mode [ 309.095693][ T999] veth1_vlan: left promiscuous mode [ 309.100998][ T999] veth0_vlan: left promiscuous mode [ 309.315445][ T999] team0 (unregistering): Port device team_slave_1 removed [ 309.338645][ T999] team0 (unregistering): Port device team_slave_0 removed [ 309.468395][ T999] team0 (unregistering): Port device team_slave_1 removed [ 309.491577][ T999] team0 (unregistering): Port device team_slave_0 removed [ 309.647878][ T999] team0 (unregistering): Port device team_slave_1 removed [ 309.673233][ T999] team0 (unregistering): Port device team_slave_0 removed [ 310.357781][ T999] IPVS: stop unused estimator thread 0...